codebase-onboarder 0.5.0 → 0.7.0

package/public/js/highlight.js

@@ -2,121 +2,130 @@
 // regex tokenizing, so highlighting is linear-time even on pathological
 // input (an earlier master-regex version could stall on real files).
 // Runs in Node (tests) and the browser.
-
 import { escapeHtml } from './html.js';
-
 const KEYWORDS = {
-  js: 'const let var function return import export from default if else for while do class extends new await async try catch finally throw typeof instanceof of in switch case break continue yield static get set super this null undefined true false void delete',
-  py: 'def class return import from as if elif else for while in not and or is None True False try except finally raise with lambda pass break continue yield global nonlocal assert async await del',
-  go: 'func package import return if else for range var const type struct interface map chan go defer select switch case break continue fallthrough default nil true false iota',
-  c: 'int void char float double long short unsigned signed const static return if else for while do switch case break continue struct union enum typedef sizeof include define extern volatile register goto',
+    js: 'const let var function return import export from default if else for while do class extends new await async try catch finally throw typeof instanceof of in switch case break continue yield static get set super this null undefined true false void delete',
+    py: 'def class return import from as if elif else for while in not and or is None True False try except finally raise with lambda pass break continue yield global nonlocal assert async await del',
+    go: 'func package import return if else for range var const type struct interface map chan go defer select switch case break continue fallthrough default nil true false iota',
+    c: 'int void char float double long short unsigned signed const static return if else for while do switch case break continue struct union enum typedef sizeof include define extern volatile register goto',
 };
-
 export function langOf(path) {
-  const ext = (path.match(/\.([A-Za-z0-9]+)$/) || [, ''])[1].toLowerCase();
-  if (['js', 'jsx', 'ts', 'tsx', 'mjs', 'cjs', 'json'].includes(ext)) return 'js';
-  if (['py', 'pyi'].includes(ext)) return 'py';
-  if (ext === 'go') return 'go';
-  if (['c', 'h', 'cpp', 'cc', 'java', 'rs', 'rb', 'php', 'cs', 'swift', 'kt', 'css'].includes(ext)) return 'c';
-  return null; // markdown, yaml, toml, plain text — shown unadorned
+    const ext = (path.match(/\.([A-Za-z0-9]+)$/) || [, ''])[1].toLowerCase();
+    if (['js', 'jsx', 'ts', 'tsx', 'mjs', 'cjs', 'json'].includes(ext))
+        return 'js';
+    if (['py', 'pyi'].includes(ext))
+        return 'py';
+    if (ext === 'go')
+        return 'go';
+    if (['c', 'h', 'cpp', 'cc', 'java', 'rs', 'rb', 'php', 'cs', 'swift', 'kt', 'css'].includes(ext))
+        return 'c';
+    return null; // markdown, yaml, toml, plain text — shown unadorned
 }
-
 const isWordStart = (c) => (c >= 'a' && c <= 'z') || (c >= 'A' && c <= 'Z') || c === '_' || c === '$';
 const isWordPart = (c) => isWordStart(c) || (c >= '0' && c <= '9');
 const isDigit = (c) => c >= '0' && c <= '9';
-
 export function highlightCode(source, lang) {
-  if (!lang || !KEYWORDS[lang]) return escapeHtml(source);
-  const kw = new Set(KEYWORDS[lang].split(' '));
-  const hashComment = lang === 'py';
-  const out = [];
-  let plain = '';
-
-  const flushPlain = () => {
-    if (plain) { out.push(escapeHtml(plain)); plain = ''; }
-  };
-  const emit = (cls, text) => {
-    flushPlain();
-    out.push(`<span class="${cls}">${escapeHtml(text)}</span>`);
-  };
-
-  const n = source.length;
-  let i = 0;
-  while (i < n) {
-    const c = source[i];
-
-    // Line comments: # for python, // elsewhere.
-    if ((hashComment && c === '#') || (!hashComment && c === '/' && source[i + 1] === '/')) {
-      let j = source.indexOf('\n', i);
-      if (j === -1) j = n;
-      emit('tok-com', source.slice(i, j));
-      i = j;
-      continue;
-    }
-
-    // Block comments (and preprocessor lines for the C family).
-    if (!hashComment && c === '/' && source[i + 1] === '*') {
-      const end = source.indexOf('*/', i + 2);
-      const j = end === -1 ? n : end + 2;
-      emit('tok-com', source.slice(i, j));
-      i = j;
-      continue;
-    }
-    if (lang === 'c' && c === '#' && (i === 0 || source[i - 1] === '\n')) {
-      let j = source.indexOf('\n', i);
-      if (j === -1) j = n;
-      emit('tok-com', source.slice(i, j));
-      i = j;
-      continue;
-    }
-
-    // Strings. Python triple quotes first; backticks are multiline in js/go.
-    if (lang === 'py' && (source.startsWith("'''", i) || source.startsWith('"""', i))) {
-      const q = source.slice(i, i + 3);
-      const end = source.indexOf(q, i + 3);
-      const j = end === -1 ? n : end + 3;
-      emit('tok-str', source.slice(i, j));
-      i = j;
-      continue;
+    if (!lang || !KEYWORDS[lang])
+        return escapeHtml(source);
+    const kw = new Set(KEYWORDS[lang].split(' '));
+    const hashComment = lang === 'py';
+    const out = [];
+    let plain = '';
+    const flushPlain = () => {
+        if (plain) {
+            out.push(escapeHtml(plain));
+            plain = '';
+        }
+    };
+    const emit = (cls, text) => {
+        flushPlain();
+        out.push(`<span class="${cls}">${escapeHtml(text)}</span>`);
+    };
+    const n = source.length;
+    let i = 0;
+    while (i < n) {
+        const c = source[i];
+        // Line comments: # for python, // elsewhere.
+        if ((hashComment && c === '#') || (!hashComment && c === '/' && source[i + 1] === '/')) {
+            let j = source.indexOf('\n', i);
+            if (j === -1)
+                j = n;
+            emit('tok-com', source.slice(i, j));
+            i = j;
+            continue;
+        }
+        // Block comments (and preprocessor lines for the C family).
+        if (!hashComment && c === '/' && source[i + 1] === '*') {
+            const end = source.indexOf('*/', i + 2);
+            const j = end === -1 ? n : end + 2;
+            emit('tok-com', source.slice(i, j));
+            i = j;
+            continue;
+        }
+        if (lang === 'c' && c === '#' && (i === 0 || source[i - 1] === '\n')) {
+            let j = source.indexOf('\n', i);
+            if (j === -1)
+                j = n;
+            emit('tok-com', source.slice(i, j));
+            i = j;
+            continue;
+        }
+        // Strings. Python triple quotes first; backticks are multiline in js/go.
+        if (lang === 'py' && (source.startsWith("'''", i) || source.startsWith('"""', i))) {
+            const q = source.slice(i, i + 3);
+            const end = source.indexOf(q, i + 3);
+            const j = end === -1 ? n : end + 3;
+            emit('tok-str', source.slice(i, j));
+            i = j;
+            continue;
+        }
+        if (c === "'" || c === '"' || (c === '`' && lang !== 'py' && lang !== 'c')) {
+            const multiline = c === '`' || lang === 'py';
+            let j = i + 1;
+            while (j < n) {
+                const d = source[j];
+                if (d === '\\') {
+                    j += 2;
+                    continue;
+                }
+                if (d === c) {
+                    j++;
+                    break;
+                }
+                if (d === '\n' && !multiline)
+                    break; // unterminated: stop at the line end
+                j++;
+            }
+            emit('tok-str', source.slice(i, j));
+            i = j;
+            continue;
+        }
+        // Words → keywords when the language claims them.
+        if (isWordStart(c)) {
+            let j = i + 1;
+            while (j < n && isWordPart(source[j]))
+                j++;
+            const w = source.slice(i, j);
+            if (kw.has(w))
+                emit('tok-kw', w);
+            else
+                plain += w;
+            i = j;
+            continue;
+        }
+        // Numbers.
+        if (isDigit(c)) {
+            let j = i + 1;
+            while (j < n && (isDigit(source[j]) || source[j] === '.' || source[j] === '_'))
+                j++;
+            emit('tok-num', source.slice(i, j));
+            i = j;
+            continue;
+        }
+        plain += c;
+        i++;
     }
-    if (c === "'" || c === '"' || (c === '`' && lang !== 'py' && lang !== 'c')) {
-      const multiline = c === '`' || lang === 'py';
-      let j = i + 1;
-      while (j < n) {
-        const d = source[j];
-        if (d === '\\') { j += 2; continue; }
-        if (d === c) { j++; break; }
-        if (d === '\n' && !multiline) break; // unterminated: stop at the line end
-        j++;
-      }
-      emit('tok-str', source.slice(i, j));
-      i = j;
-      continue;
-    }
-
-    // Words → keywords when the language claims them.
-    if (isWordStart(c)) {
-      let j = i + 1;
-      while (j < n && isWordPart(source[j])) j++;
-      const w = source.slice(i, j);
-      if (kw.has(w)) emit('tok-kw', w);
-      else plain += w;
-      i = j;
-      continue;
-    }
-
-    // Numbers.
-    if (isDigit(c)) {
-      let j = i + 1;
-      while (j < n && (isDigit(source[j]) || source[j] === '.' || source[j] === '_')) j++;
-      emit('tok-num', source.slice(i, j));
-      i = j;
-      continue;
-    }
-
-    plain += c;
-    i++;
-  }
-  flushPlain();
-  return out.join('');
+    flushPlain();
+    return out.join('');
 }
+//# sourceMappingURL=highlight.js.map

package/public/js/highlight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"highlight.js","sourceRoot":"","sources":["../../src/public/js/highlight.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,wEAAwE;AACxE,qEAAqE;AACrE,wCAAwC;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,MAAM,QAAQ,GAAG;IACf,EAAE,EAAE,8PAA8P;IAClQ,EAAE,EAAE,+LAA+L;IACnM,EAAE,EAAE,0KAA0K;IAC9K,CAAC,EAAE,yMAAyM;CAC7M,CAAC;AAEF,MAAM,UAAU,MAAM,CAAC,IAAI;IACzB,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACzE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAC7G,OAAO,IAAI,CAAC,CAAC,qDAAqD;AACpE,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;AACtG,MAAM,UAAU,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;AACnE,MAAM,OAAO,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;AAE5C,MAAM,UAAU,aAAa,CAAC,MAAM,EAAE,IAAI;IACxC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,IAAI,KAAK,IAAI,CAAC;IAClC,MAAM,GAAG,GAAG,EAAE,CAAC;IACf,IAAI,KAAK,GAAG,EAAE,CAAC;IAEf,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,IAAI,KAAK,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,KAAK,GAAG,EAAE,CAAC;QAAC,CAAC;IACzD,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,UAAU,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,gBAAgB,GAAG,KAAK,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC,CAAC;IAEF,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACxB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAEpB,6CAA6C;QAC7C,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACvF,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAE,CAAC,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACpC,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QAED,4DAA4D;QAC5D,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACvD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACpC,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAE,CAAC,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACpC,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QAED,yEAAyE;QACzE,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACrC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACpC,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC3E,MAAM,SAAS,GAAG,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;YAC7C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBACpB,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,MAAM;gBAAC,CAAC;gBAC5B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS;oBAAE,MAAM,CAAC,qCAAqC;gBAC1E,CAAC,EAAE,CAAC;YACN,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACpC,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QAED,kDAAkD;QAClD,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7B,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;;gBAC5B,KAAK,IAAI,CAAC,CAAC;YAChB,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QAED,WAAW;QACX,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;gBAAE,CAAC,EAAE,CAAC;YACpF,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACpC,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QAED,KAAK,IAAI,CAAC,CAAC;QACX,CAAC,EAAE,CAAC;IACN,CAAC;IACD,UAAU,EAAE,CAAC;IACb,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtB,CAAC","sourcesContent":["// Hand-rolled syntax highlighting — a single left-to-right scanner, no\n// regex tokenizing, so highlighting is linear-time even on pathological\n// input (an earlier master-regex version could stall on real files).\n// Runs in Node (tests) and the browser.\n\nimport { escapeHtml } from './html.js';\n\nconst KEYWORDS = {\n  js: 'const let var function return import export from default if else for while do class extends new await async try catch finally throw typeof instanceof of in switch case break continue yield static get set super this null undefined true false void delete',\n  py: 'def class return import from as if elif else for while in not and or is None True False try except finally raise with lambda pass break continue yield global nonlocal assert async await del',\n  go: 'func package import return if else for range var const type struct interface map chan go defer select switch case break continue fallthrough default nil true false iota',\n  c: 'int void char float double long short unsigned signed const static return if else for while do switch case break continue struct union enum typedef sizeof include define extern volatile register goto',\n};\n\nexport function langOf(path) {\n  const ext = (path.match(/\\.([A-Za-z0-9]+)$/) || [, ''])[1].toLowerCase();\n  if (['js', 'jsx', 'ts', 'tsx', 'mjs', 'cjs', 'json'].includes(ext)) return 'js';\n  if (['py', 'pyi'].includes(ext)) return 'py';\n  if (ext === 'go') return 'go';\n  if (['c', 'h', 'cpp', 'cc', 'java', 'rs', 'rb', 'php', 'cs', 'swift', 'kt', 'css'].includes(ext)) return 'c';\n  return null; // markdown, yaml, toml, plain text — shown unadorned\n}\n\nconst isWordStart = (c) => (c >= 'a' && c <= 'z') || (c >= 'A' && c <= 'Z') || c === '_' || c === '$';\nconst isWordPart = (c) => isWordStart(c) || (c >= '0' && c <= '9');\nconst isDigit = (c) => c >= '0' && c <= '9';\n\nexport function highlightCode(source, lang) {\n  if (!lang || !KEYWORDS[lang]) return escapeHtml(source);\n  const kw = new Set(KEYWORDS[lang].split(' '));\n  const hashComment = lang === 'py';\n  const out = [];\n  let plain = '';\n\n  const flushPlain = () => {\n    if (plain) { out.push(escapeHtml(plain)); plain = ''; }\n  };\n  const emit = (cls, text) => {\n    flushPlain();\n    out.push(`<span class=\"${cls}\">${escapeHtml(text)}</span>`);\n  };\n\n  const n = source.length;\n  let i = 0;\n  while (i < n) {\n    const c = source[i];\n\n    // Line comments: # for python, // elsewhere.\n    if ((hashComment && c === '#') || (!hashComment && c === '/' && source[i + 1] === '/')) {\n      let j = source.indexOf('\\n', i);\n      if (j === -1) j = n;\n      emit('tok-com', source.slice(i, j));\n      i = j;\n      continue;\n    }\n\n    // Block comments (and preprocessor lines for the C family).\n    if (!hashComment && c === '/' && source[i + 1] === '*') {\n      const end = source.indexOf('*/', i + 2);\n      const j = end === -1 ? n : end + 2;\n      emit('tok-com', source.slice(i, j));\n      i = j;\n      continue;\n    }\n    if (lang === 'c' && c === '#' && (i === 0 || source[i - 1] === '\\n')) {\n      let j = source.indexOf('\\n', i);\n      if (j === -1) j = n;\n      emit('tok-com', source.slice(i, j));\n      i = j;\n      continue;\n    }\n\n    // Strings. Python triple quotes first; backticks are multiline in js/go.\n    if (lang === 'py' && (source.startsWith(\"'''\", i) || source.startsWith('\"\"\"', i))) {\n      const q = source.slice(i, i + 3);\n      const end = source.indexOf(q, i + 3);\n      const j = end === -1 ? n : end + 3;\n      emit('tok-str', source.slice(i, j));\n      i = j;\n      continue;\n    }\n    if (c === \"'\" || c === '\"' || (c === '`' && lang !== 'py' && lang !== 'c')) {\n      const multiline = c === '`' || lang === 'py';\n      let j = i + 1;\n      while (j < n) {\n        const d = source[j];\n        if (d === '\\\\') { j += 2; continue; }\n        if (d === c) { j++; break; }\n        if (d === '\\n' && !multiline) break; // unterminated: stop at the line end\n        j++;\n      }\n      emit('tok-str', source.slice(i, j));\n      i = j;\n      continue;\n    }\n\n    // Words → keywords when the language claims them.\n    if (isWordStart(c)) {\n      let j = i + 1;\n      while (j < n && isWordPart(source[j])) j++;\n      const w = source.slice(i, j);\n      if (kw.has(w)) emit('tok-kw', w);\n      else plain += w;\n      i = j;\n      continue;\n    }\n\n    // Numbers.\n    if (isDigit(c)) {\n      let j = i + 1;\n      while (j < n && (isDigit(source[j]) || source[j] === '.' || source[j] === '_')) j++;\n      emit('tok-num', source.slice(i, j));\n      i = j;\n      continue;\n    }\n\n    plain += c;\n    i++;\n  }\n  flushPlain();\n  return out.join('');\n}\n"]}

package/public/js/html.d.ts

@@ -0,0 +1,2 @@
+export declare function escapeHtml(value: unknown): string;
+export declare function safeUrl(value: unknown): string;

package/public/js/html.js

@@ -1,50 +1,20 @@
-// Escaping at the boundary — one implementation, used everywhere.
-//
-// Onboarder renders content it does not control: file and folder names from a
-// repository that may have been cloned from an arbitrary git URL, READMEs,
-// GitHub API fields, and model output. All of it reaches the DOM as HTML
-// strings, and a good deal of it lands inside attributes
-// (`title="…"`, `data-path="…"`). So quotes matter as much as angle brackets:
-// a file named `x" onmouseover="…` closes the attribute and opens a handler,
-// and double quotes are legal in filenames on macOS and Linux.
-//
-// This used to be five near-copies — four of which escaped only & < > — with
-// the attribute call sites quietly relying on the one that didn't. Now there
-// is one function and it escapes all five characters.
-//
-// Single pass, one regex, one lookup per match: strictly cheaper than the
-// chain of four .replace() calls it replaces, which matters because the
-// syntax highlighter runs this over every token of every file.
-
+// Escape untrusted repository data at the boundary before placing it in HTML.
 const ESCAPES = {
-  '&': '&amp;',
-  '<': '&lt;',
-  '>': '&gt;',
-  '"': '&quot;',
-  "'": '&#39;',
+    '&': '&amp;',
+    '<': '&lt;',
+    '>': '&gt;',
+    '"': '&quot;',
+    "'": '&#39;',
 };
-
 const NEEDS_ESCAPE = /[&<>"']/g;
-
-/**
- * Make a string safe to interpolate into HTML — as text, or inside a
- * double- or single-quoted attribute value.
- */
-export function escapeHtml(s) {
-  return String(s ?? '').replace(NEEDS_ESCAPE, (c) => ESCAPES[c]);
+export function escapeHtml(value) {
+    return String(value ?? '').replace(NEEDS_ESCAPE, (character) => ESCAPES[character]);
 }
-
-// Whitespace and C0/C1 control characters, which browsers ignore when they
-// parse a URL scheme — so `java\tscript:alert(1)` is a live javascript: URL.
 const URL_NOISE = /[\s\u0000-\u001F\u007F-\u009F]/g;
-
-/**
- * A URL safe to put in an href. Anything that isn't plainly http(s) comes back
- * empty, which keeps `javascript:`, `data:` and `vbscript:` out of the DOM
- * even when the surrounding markup is assembled by hand.
- */
-export function safeUrl(url) {
-  const raw = String(url ?? '').trim();
-  if (!/^https?:\/\//i.test(raw.replace(URL_NOISE, ''))) return '';
-  return escapeHtml(raw);
+export function safeUrl(value) {
+    const raw = String(value ?? '').trim();
+    if (!/^https?:\/\//i.test(raw.replace(URL_NOISE, '')))
+        return '';
+    return escapeHtml(raw);
 }
+//# sourceMappingURL=html.js.map

package/public/js/html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"html.js","sourceRoot":"","sources":["../../src/public/js/html.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,MAAM,OAAO,GAA2B;IACtC,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,OAAO;CACb,CAAC;AAEF,MAAM,YAAY,GAAG,UAAU,CAAC;AAEhC,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,SAAS,GAAG,iCAAiC,CAAC;AAEpD,MAAM,UAAU,OAAO,CAAC,KAAc;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACjE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC","sourcesContent":["// Escape untrusted repository data at the boundary before placing it in HTML.\nconst ESCAPES: Record<string, string> = {\n  '&': '&amp;',\n  '<': '&lt;',\n  '>': '&gt;',\n  '\"': '&quot;',\n  \"'\": '&#39;',\n};\n\nconst NEEDS_ESCAPE = /[&<>\"']/g;\n\nexport function escapeHtml(value: unknown): string {\n  return String(value ?? '').replace(NEEDS_ESCAPE, (character) => ESCAPES[character]);\n}\n\nconst URL_NOISE = /[\\s\\u0000-\\u001F\\u007F-\\u009F]/g;\n\nexport function safeUrl(value: unknown): string {\n  const raw = String(value ?? '').trim();\n  if (!/^https?:\\/\\//i.test(raw.replace(URL_NOISE, ''))) return '';\n  return escapeHtml(raw);\n}\n"]}

package/public/js/insightsView.d.ts

@@ -0,0 +1,5 @@
+export declare function renderInsights(container: any, { scan, facts, history }: {
+    facts: any;
+    history: any;
+    scan: any;
+}): void;

package/public/js/insightsView.js

@@ -1,42 +1,37 @@
 // GitHub Insights & Pulse View.
 // Renders 52-week contribution heatmap, contributor leaderboard, punchcard, and release timeline.
-
 import { escapeHtml } from './html.js';
-
 export function renderInsights(container, { scan, facts, history }) {
-  if (!container) return;
-
-  const commits = history?.commits || [];
-  const authorMap = new Map();
-  const dayHourMatrix = Array.from({ length: 7 }, () => Array(24).fill(0));
-  const dayCounts = new Map();
-
-  // Process commit dates & authors
-  for (const c of commits) {
-    const { key, name } = authorIdentity(c.author);
-    if (!authorMap.has(key)) {
-      authorMap.set(key, { name, commits: 0, additions: 0, deletions: 0, firstDate: c.date, lastDate: c.date, files: new Set() });
+    if (!container)
+        return;
+    const commits = history?.commits || [];
+    const authorMap = new Map();
+    const dayHourMatrix = Array.from({ length: 7 }, () => Array(24).fill(0));
+    const dayCounts = new Map();
+    // Process commit dates & authors
+    for (const c of commits) {
+        const { key, name } = authorIdentity(c.author);
+        if (!authorMap.has(key)) {
+            authorMap.set(key, { name, commits: 0, additions: 0, deletions: 0, firstDate: c.date, lastDate: c.date, files: new Set() });
+        }
+        const a = authorMap.get(key);
+        a.commits++;
+        if (c.date < a.firstDate)
+            a.firstDate = c.date;
+        if (c.date > a.lastDate)
+            a.lastDate = c.date;
+        const d = new Date(c.date || Date.now());
+        if (!isNaN(d.getTime())) {
+            const day = d.getDay(); // 0 = Sun, 6 = Sat
+            const hour = d.getHours();
+            dayHourMatrix[day][hour]++;
+            const ymd = d.toISOString().slice(0, 10);
+            dayCounts.set(ymd, (dayCounts.get(ymd) || 0) + 1);
+        }
     }
-    const a = authorMap.get(key);
-    a.commits++;
-    if (c.date < a.firstDate) a.firstDate = c.date;
-    if (c.date > a.lastDate) a.lastDate = c.date;
-
-    const d = new Date(c.date || Date.now());
-    if (!isNaN(d.getTime())) {
-      const day = d.getDay(); // 0 = Sun, 6 = Sat
-      const hour = d.getHours();
-      dayHourMatrix[day][hour]++;
-
-      const ymd = d.toISOString().slice(0, 10);
-      dayCounts.set(ymd, (dayCounts.get(ymd) || 0) + 1);
-    }
-  }
-
-  const sortedAuthors = [...authorMap.values()].sort((a, b) => b.commits - a.commits);
-  const totalCommits = commits.length || 1;
-
-  container.innerHTML = `
+    const sortedAuthors = [...authorMap.values()].sort((a, b) => b.commits - a.commits);
+    const totalCommits = commits.length || 1;
+    container.innerHTML = `
     <div class="insights-layout">
       <section class="insights-hero">
         <div class="insights-stat-card">
@@ -106,63 +101,54 @@ export function renderInsights(container, { scan, facts, history }) {
     </div>
   `;
 }
-
 // gitHistory shapes commit.author as { name, email }; a bare string is also
 // tolerated so older cached payloads don't break the view. Commits are grouped
 // by email when present — the same person with two name spellings is one
 // contributor, like shared/analyzer/history.js does server-side.
 function authorIdentity(author) {
-  if (author && typeof author === 'object') {
-    const name = author.name || author.email || 'Anonymous';
-    return { key: author.email || name, name };
-  }
-  const name = author || 'Anonymous';
-  return { key: name, name };
+    if (author && typeof author === 'object') {
+        const name = author.name || author.email || 'Anonymous';
+        return { key: author.email || name, name };
+    }
+    const name = author || 'Anonymous';
+    return { key: name, name };
 }
-
-
 function renderCalendarHeatmap(dayCounts) {
-  const weeks = 52;
-  const daysPerWeek = 7;
-  const cellSize = 12;
-  const cellGap = 3;
-
-  const now = new Date();
-  const cells = [];
-  const oneDayMs = 24 * 60 * 60 * 1000;
-
-  // Align to end on current day
-  const endDay = new Date(now);
-  const startDay = new Date(endDay.getTime() - (weeks * 7) * oneDayMs);
-
-  let maxCount = 1;
-  for (const c of dayCounts.values()) if (c > maxCount) maxCount = c;
-
-  const dayNames = ['Sun', 'Mon', 'Tue', 'Wed', 'Thu', 'Fri', 'Sat'];
-
-  for (let w = 0; w < weeks; w++) {
-    for (let d = 0; d < 7; d++) {
-      const cur = new Date(startDay.getTime() + (w * 7 + d) * oneDayMs);
-      const ymd = cur.toISOString().slice(0, 10);
-      const count = dayCounts.get(ymd) || 0;
-      let level = 0;
-      if (count > 0) level = Math.min(4, Math.ceil((count / maxCount) * 4));
-
-      const x = w * (cellSize + cellGap) + 30;
-      const y = d * (cellSize + cellGap) + 20;
-
-      cells.push(`
+    const weeks = 52;
+    const daysPerWeek = 7;
+    const cellSize = 12;
+    const cellGap = 3;
+    const now = new Date();
+    const cells = [];
+    const oneDayMs = 24 * 60 * 60 * 1000;
+    // Align to end on current day
+    const endDay = new Date(now);
+    const startDay = new Date(endDay.getTime() - (weeks * 7) * oneDayMs);
+    let maxCount = 1;
+    for (const c of dayCounts.values())
+        if (c > maxCount)
+            maxCount = c;
+    const dayNames = ['Sun', 'Mon', 'Tue', 'Wed', 'Thu', 'Fri', 'Sat'];
+    for (let w = 0; w < weeks; w++) {
+        for (let d = 0; d < 7; d++) {
+            const cur = new Date(startDay.getTime() + (w * 7 + d) * oneDayMs);
+            const ymd = cur.toISOString().slice(0, 10);
+            const count = dayCounts.get(ymd) || 0;
+            let level = 0;
+            if (count > 0)
+                level = Math.min(4, Math.ceil((count / maxCount) * 4));
+            const x = w * (cellSize + cellGap) + 30;
+            const y = d * (cellSize + cellGap) + 20;
+            cells.push(`
         <rect class="cal-cell lvl-${level}" x="${x}" y="${y}" width="${cellSize}" height="${cellSize}" rx="2">
           <title>${ymd}: ${count} commit${count === 1 ? '' : 's'}</title>
         </rect>
       `);
+        }
     }
-  }
-
-  const svgWidth = weeks * (cellSize + cellGap) + 40;
-  const svgHeight = 7 * (cellSize + cellGap) + 30;
-
-  return `
+    const svgWidth = weeks * (cellSize + cellGap) + 40;
+    const svgHeight = 7 * (cellSize + cellGap) + 30;
+    return `
     <div class="cal-scroll-wrap">
       <svg class="cal-heatmap-svg" viewBox="0 0 ${svgWidth} ${svgHeight}" style="max-width: 100%; height: auto;">
         <text class="cal-label" x="5" y="42">Mon</text>
@@ -182,49 +168,44 @@ function renderCalendarHeatmap(dayCounts) {
     </div>
   `;
 }
-
 function renderPunchcardSvg(matrix) {
-  const days = ['Sun', 'Mon', 'Tue', 'Wed', 'Thu', 'Fri', 'Sat'];
-  const cellW = 20;
-  const cellH = 20;
-  const padLeft = 40;
-  const padTop = 20;
-  let max = 1;
-
-  for (let d = 0; d < 7; d++) {
-    for (let h = 0; h < 24; h++) {
-      if (matrix[d][h] > max) max = matrix[d][h];
+    const days = ['Sun', 'Mon', 'Tue', 'Wed', 'Thu', 'Fri', 'Sat'];
+    const cellW = 20;
+    const cellH = 20;
+    const padLeft = 40;
+    const padTop = 20;
+    let max = 1;
+    for (let d = 0; d < 7; d++) {
+        for (let h = 0; h < 24; h++) {
+            if (matrix[d][h] > max)
+                max = matrix[d][h];
+        }
     }
-  }
-
-  const dots = [];
-  for (let d = 0; d < 7; d++) {
-    for (let h = 0; h < 24; h++) {
-      const val = matrix[d][h];
-      if (val === 0) continue;
-      const r = Math.max(2, Math.min(8, (val / max) * 8));
-      const cx = padLeft + h * cellW + cellW / 2;
-      const cy = padTop + d * cellH + cellH / 2;
-      dots.push(`
+    const dots = [];
+    for (let d = 0; d < 7; d++) {
+        for (let h = 0; h < 24; h++) {
+            const val = matrix[d][h];
+            if (val === 0)
+                continue;
+            const r = Math.max(2, Math.min(8, (val / max) * 8));
+            const cx = padLeft + h * cellW + cellW / 2;
+            const cy = padTop + d * cellH + cellH / 2;
+            dots.push(`
         <circle cx="${cx}" cy="${cy}" r="${r}" class="punch-dot">
           <title>${days[d]} ${h}:00 - ${val} commit${val === 1 ? '' : 's'}</title>
         </circle>
       `);
+        }
     }
-  }
-
-  const hoursHeader = [0, 4, 8, 12, 16, 20].map((h) => `
+    const hoursHeader = [0, 4, 8, 12, 16, 20].map((h) => `
     <text class="punch-lbl" x="${padLeft + h * cellW + cellW / 2}" y="12" text-anchor="middle">${h}h</text>
   `).join('');
-
-  const daysHeader = days.map((day, idx) => `
+    const daysHeader = days.map((day, idx) => `
     <text class="punch-lbl" x="5" y="${padTop + idx * cellH + cellH / 2 + 4}">${day}</text>
   `).join('');
-
-  const svgW = padLeft + 24 * cellW + 10;
-  const svgH = padTop + 7 * cellH + 10;
-
-  return `
+    const svgW = padLeft + 24 * cellW + 10;
+    const svgH = padTop + 7 * cellH + 10;
+    return `
     <div class="cal-scroll-wrap">
       <svg class="punch-svg" viewBox="0 0 ${svgW} ${svgH}">
         ${hoursHeader}
@@ -234,3 +215,4 @@ function renderPunchcardSvg(matrix) {
     </div>
   `;
 }
+//# sourceMappingURL=insightsView.js.map