codebase-onboarder 0.6.0 → 0.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (448) hide show
  1. package/README.md +174 -46
  2. package/bin/build-if-source.js +23 -0
  3. package/cli/commands.d.ts +26 -0
  4. package/cli/commands.js +836 -811
  5. package/cli/commands.js.map +1 -0
  6. package/cli/explorer/advanced.d.ts +14 -0
  7. package/cli/explorer/advanced.js +321 -329
  8. package/cli/explorer/advanced.js.map +1 -0
  9. package/cli/explorer/app.d.ts +1 -0
  10. package/cli/explorer/app.js +384 -313
  11. package/cli/explorer/app.js.map +1 -0
  12. package/cli/explorer/assistant.d.ts +9 -0
  13. package/cli/explorer/assistant.js +58 -0
  14. package/cli/explorer/assistant.js.map +1 -0
  15. package/cli/explorer/commands.d.ts +17 -0
  16. package/cli/explorer/commands.js +368 -302
  17. package/cli/explorer/commands.js.map +1 -0
  18. package/cli/explorer/featureViews.d.ts +124 -0
  19. package/cli/explorer/featureViews.js +179 -0
  20. package/cli/explorer/featureViews.js.map +1 -0
  21. package/cli/explorer/github.d.ts +21 -0
  22. package/cli/explorer/github.js +42 -44
  23. package/cli/explorer/github.js.map +1 -0
  24. package/cli/explorer/graphs.d.ts +7 -0
  25. package/cli/explorer/graphs.js +90 -95
  26. package/cli/explorer/graphs.js.map +1 -0
  27. package/cli/explorer/picker.d.ts +22 -0
  28. package/cli/explorer/picker.js +150 -0
  29. package/cli/explorer/picker.js.map +1 -0
  30. package/cli/explorer/report.d.ts +85 -0
  31. package/cli/explorer/report.js +60 -0
  32. package/cli/explorer/report.js.map +1 -0
  33. package/cli/explorer/session.d.ts +449 -0
  34. package/cli/explorer/session.js +143 -144
  35. package/cli/explorer/session.js.map +1 -0
  36. package/cli/explorer/views.d.ts +19 -0
  37. package/cli/explorer/views.js +465 -482
  38. package/cli/explorer/views.js.map +1 -0
  39. package/cli/explorer/wrap.d.ts +1 -0
  40. package/cli/explorer/wrap.js +28 -44
  41. package/cli/explorer/wrap.js.map +1 -0
  42. package/cli/main.d.ts +1 -0
  43. package/cli/main.js +214 -161
  44. package/cli/main.js.map +1 -0
  45. package/cli/prompt.d.ts +5 -0
  46. package/cli/prompt.js +84 -80
  47. package/cli/prompt.js.map +1 -0
  48. package/cli/scanOptions.d.ts +2 -0
  49. package/cli/scanOptions.js +11 -0
  50. package/cli/scanOptions.js.map +1 -0
  51. package/cli/ui.d.ts +33 -0
  52. package/cli/ui.js +35 -44
  53. package/cli/ui.js.map +1 -0
  54. package/cli/wizard.d.ts +187 -0
  55. package/cli/wizard.js +304 -284
  56. package/cli/wizard.js.map +1 -0
  57. package/package.json +15 -4
  58. package/public/app.d.ts +1 -0
  59. package/public/app.js +1057 -1009
  60. package/public/app.js.map +1 -0
  61. package/public/browser.d.ts +68 -0
  62. package/public/browser.js +2 -0
  63. package/public/browser.js.map +1 -0
  64. package/public/index.html +30 -13
  65. package/public/js/about.d.ts +6 -0
  66. package/public/js/about.js +152 -172
  67. package/public/js/about.js.map +1 -0
  68. package/public/js/aiDraft.d.ts +3 -0
  69. package/public/js/aiDraft.js +116 -124
  70. package/public/js/aiDraft.js.map +1 -0
  71. package/public/js/analysisPanel.d.ts +7 -0
  72. package/public/js/analysisPanel.js +166 -166
  73. package/public/js/analysisPanel.js.map +1 -0
  74. package/public/js/analysisReport.d.ts +38 -0
  75. package/public/js/analysisReport.js +105 -110
  76. package/public/js/analysisReport.js.map +1 -0
  77. package/public/js/api.d.ts +26 -0
  78. package/public/js/api.js +176 -167
  79. package/public/js/api.js.map +1 -0
  80. package/public/js/atlas.d.ts +6 -0
  81. package/public/js/atlas.js +50 -58
  82. package/public/js/atlas.js.map +1 -0
  83. package/public/js/blameView.d.ts +2 -0
  84. package/public/js/blameView.js +36 -37
  85. package/public/js/blameView.js.map +1 -0
  86. package/public/js/codeTab.d.ts +3 -0
  87. package/public/js/codeTab.js +175 -180
  88. package/public/js/codeTab.js.map +1 -0
  89. package/public/js/codeViewer.d.ts +5 -0
  90. package/public/js/codeViewer.js +162 -150
  91. package/public/js/codeViewer.js.map +1 -0
  92. package/public/js/components/FileChip.d.ts +9 -0
  93. package/public/js/components/FileChip.js +45 -49
  94. package/public/js/components/FileChip.js.map +1 -0
  95. package/public/js/components/MetricSparkline.d.ts +7 -0
  96. package/public/js/components/MetricSparkline.js +35 -44
  97. package/public/js/components/MetricSparkline.js.map +1 -0
  98. package/public/js/components/RiskBadge.d.ts +9 -0
  99. package/public/js/components/RiskBadge.js +55 -63
  100. package/public/js/components/RiskBadge.js.map +1 -0
  101. package/public/js/deepAnalysisView.d.ts +99 -0
  102. package/public/js/deepAnalysisView.js +282 -302
  103. package/public/js/deepAnalysisView.js.map +1 -0
  104. package/public/js/diagramPane.d.ts +8 -0
  105. package/public/js/diagramPane.js +133 -135
  106. package/public/js/diagramPane.js.map +1 -0
  107. package/public/js/diffView.d.ts +6 -0
  108. package/public/js/diffView.js +222 -209
  109. package/public/js/diffView.js.map +1 -0
  110. package/public/js/docsView.d.ts +2 -0
  111. package/public/js/docsView.js +441 -442
  112. package/public/js/docsView.js.map +1 -0
  113. package/public/js/dom.d.ts +189 -0
  114. package/public/js/dom.js +5 -0
  115. package/public/js/dom.js.map +1 -0
  116. package/public/js/fileSourceBrowser.d.ts +5 -0
  117. package/public/js/fileSourceBrowser.js +33 -41
  118. package/public/js/fileSourceBrowser.js.map +1 -0
  119. package/public/js/flameGraph.d.ts +5 -0
  120. package/public/js/flameGraph.js +62 -72
  121. package/public/js/flameGraph.js.map +1 -0
  122. package/public/js/forceGraph.d.ts +10 -0
  123. package/public/js/forceGraph.js +581 -556
  124. package/public/js/forceGraph.js.map +1 -0
  125. package/public/js/heatmap.d.ts +4 -0
  126. package/public/js/heatmap.js +142 -164
  127. package/public/js/heatmap.js.map +1 -0
  128. package/public/js/highlight.d.ts +2 -0
  129. package/public/js/highlight.js +116 -107
  130. package/public/js/highlight.js.map +1 -0
  131. package/public/js/html.d.ts +2 -0
  132. package/public/js/html.js +14 -44
  133. package/public/js/html.js.map +1 -0
  134. package/public/js/insightsView.d.ts +5 -0
  135. package/public/js/insightsView.js +93 -111
  136. package/public/js/insightsView.js.map +1 -0
  137. package/public/js/inspector.d.ts +37 -0
  138. package/public/js/inspector.js +416 -445
  139. package/public/js/inspector.js.map +1 -0
  140. package/public/js/llm.d.ts +113 -0
  141. package/public/js/llm.js +233 -272
  142. package/public/js/llm.js.map +1 -0
  143. package/public/js/mapView.d.ts +3 -0
  144. package/public/js/mapView.js +121 -120
  145. package/public/js/mapView.js.map +1 -0
  146. package/public/js/markdown.d.ts +3 -0
  147. package/public/js/markdown.js +84 -91
  148. package/public/js/markdown.js.map +1 -0
  149. package/public/js/mindmap.d.ts +32 -0
  150. package/public/js/mindmap.js +244 -259
  151. package/public/js/mindmap.js.map +1 -0
  152. package/public/js/mobilePanels.d.ts +5 -0
  153. package/public/js/mobilePanels.js +50 -0
  154. package/public/js/mobilePanels.js.map +1 -0
  155. package/public/js/repoFiles.d.ts +12 -0
  156. package/public/js/repoFiles.js +28 -27
  157. package/public/js/repoFiles.js.map +1 -0
  158. package/public/js/reviewView.d.ts +28 -0
  159. package/public/js/reviewView.js +256 -0
  160. package/public/js/reviewView.js.map +1 -0
  161. package/public/js/sbomView.d.ts +3 -0
  162. package/public/js/sbomView.js +59 -67
  163. package/public/js/sbomView.js.map +1 -0
  164. package/public/js/scanCache.d.ts +16 -0
  165. package/public/js/scanCache.js +67 -65
  166. package/public/js/scanCache.js.map +1 -0
  167. package/public/js/search.d.ts +7 -0
  168. package/public/js/search.js +868 -800
  169. package/public/js/search.js.map +1 -0
  170. package/public/js/searchLocal.d.ts +42 -0
  171. package/public/js/searchLocal.js +87 -0
  172. package/public/js/searchLocal.js.map +1 -0
  173. package/public/js/serverSettings.d.ts +5 -0
  174. package/public/js/serverSettings.js +153 -164
  175. package/public/js/serverSettings.js.map +1 -0
  176. package/public/js/state.d.ts +798 -0
  177. package/public/js/state.js +114 -122
  178. package/public/js/state.js.map +1 -0
  179. package/public/js/tour.d.ts +6 -0
  180. package/public/js/tour.js +5 -7
  181. package/public/js/tour.js.map +1 -0
  182. package/public/js/transitions.d.ts +2 -0
  183. package/public/js/transitions.js +9 -10
  184. package/public/js/transitions.js.map +1 -0
  185. package/public/js/tree.d.ts +12 -0
  186. package/public/js/tree.js +157 -154
  187. package/public/js/tree.js.map +1 -0
  188. package/public/js/workflowsView.d.ts +3 -0
  189. package/public/js/workflowsView.js +15 -22
  190. package/public/js/workflowsView.js.map +1 -0
  191. package/public/search.css +495 -0
  192. package/public/styles.css +163 -346
  193. package/public/workbench.css +166 -0
  194. package/server/apiAuth.d.ts +3 -0
  195. package/server/apiAuth.js +18 -20
  196. package/server/apiAuth.js.map +1 -0
  197. package/server/apiDiff.d.ts +2 -0
  198. package/server/apiDiff.js +20 -18
  199. package/server/apiDiff.js.map +1 -0
  200. package/server/apiDocs.d.ts +2 -0
  201. package/server/apiDocs.js +38 -40
  202. package/server/apiDocs.js.map +1 -0
  203. package/server/apiFile.d.ts +1 -0
  204. package/server/apiFile.js +14 -17
  205. package/server/apiFile.js.map +1 -0
  206. package/server/apiGitBlame.d.ts +2 -0
  207. package/server/apiGitBlame.js +50 -51
  208. package/server/apiGitBlame.js.map +1 -0
  209. package/server/apiMcp.d.ts +4 -0
  210. package/server/apiMcp.js +64 -66
  211. package/server/apiMcp.js.map +1 -0
  212. package/server/apiReview.d.ts +2 -0
  213. package/server/apiReview.js +45 -0
  214. package/server/apiReview.js.map +1 -0
  215. package/server/apiScan.d.ts +5 -0
  216. package/server/apiScan.js +90 -71
  217. package/server/apiScan.js.map +1 -0
  218. package/server/apiSearch.d.ts +33 -0
  219. package/server/apiSearch.js +184 -200
  220. package/server/apiSearch.js.map +1 -0
  221. package/server/apiSettings.d.ts +4 -0
  222. package/server/apiSettings.js +84 -85
  223. package/server/apiSettings.js.map +1 -0
  224. package/server/apiTools.d.ts +3 -0
  225. package/server/apiTools.js +55 -56
  226. package/server/apiTools.js.map +1 -0
  227. package/server/auth.d.ts +5 -0
  228. package/server/auth.js +54 -51
  229. package/server/auth.js.map +1 -0
  230. package/server/config.d.ts +42 -0
  231. package/server/config.js +189 -194
  232. package/server/config.js.map +1 -0
  233. package/server/daemon.d.ts +12 -0
  234. package/server/daemon.js +124 -114
  235. package/server/daemon.js.map +1 -0
  236. package/server/fileSourceNode.d.ts +2 -0
  237. package/server/fileSourceNode.js +34 -36
  238. package/server/fileSourceNode.js.map +1 -0
  239. package/server/gitClone.d.ts +9 -0
  240. package/server/gitClone.js +59 -61
  241. package/server/gitClone.js.map +1 -0
  242. package/server/gitDiff.d.ts +36 -0
  243. package/server/gitDiff.js +271 -169
  244. package/server/gitDiff.js.map +1 -0
  245. package/server/gitHistory.d.ts +12 -0
  246. package/server/gitHistory.js +80 -80
  247. package/server/gitHistory.js.map +1 -0
  248. package/server/gitRemote.d.ts +12 -0
  249. package/server/gitRemote.js +37 -38
  250. package/server/gitRemote.js.map +1 -0
  251. package/server/htmlText.d.ts +4 -0
  252. package/server/htmlText.js +16 -23
  253. package/server/htmlText.js.map +1 -0
  254. package/server/http.d.ts +5 -0
  255. package/server/http.js +27 -30
  256. package/server/http.js.map +1 -0
  257. package/server/httpGuards.d.ts +2 -0
  258. package/server/httpGuards.js +47 -43
  259. package/server/httpGuards.js.map +1 -0
  260. package/server/https.d.ts +34 -0
  261. package/server/https.js +121 -111
  262. package/server/https.js.map +1 -0
  263. package/server/index.d.ts +40 -0
  264. package/server/index.js +139 -147
  265. package/server/index.js.map +1 -0
  266. package/server/layout.d.ts +26 -0
  267. package/server/layout.js +59 -64
  268. package/server/layout.js.map +1 -0
  269. package/server/llmProxy.d.ts +3 -0
  270. package/server/llmProxy.js +137 -135
  271. package/server/llmProxy.js.map +1 -0
  272. package/server/logger.d.ts +38 -0
  273. package/server/logger.js +198 -211
  274. package/server/logger.js.map +1 -0
  275. package/server/mcp/analysis.d.ts +29 -0
  276. package/server/mcp/analysis.js +99 -120
  277. package/server/mcp/analysis.js.map +1 -0
  278. package/server/mcp/http.d.ts +9 -0
  279. package/server/mcp/http.js +128 -137
  280. package/server/mcp/http.js.map +1 -0
  281. package/server/mcp/runner.d.ts +68 -0
  282. package/server/mcp/runner.js +208 -218
  283. package/server/mcp/runner.js.map +1 -0
  284. package/server/mcp/server.d.ts +29 -0
  285. package/server/mcp/server.js +166 -179
  286. package/server/mcp/server.js.map +1 -0
  287. package/server/mcp/standalone.d.ts +1 -0
  288. package/server/mcp/standalone.js +8 -10
  289. package/server/mcp/standalone.js.map +1 -0
  290. package/server/mcp/tools.d.ts +2020 -0
  291. package/server/mcp/tools.js +523 -574
  292. package/server/mcp/tools.js.map +1 -0
  293. package/server/paths.d.ts +3 -0
  294. package/server/paths.js +17 -15
  295. package/server/paths.js.map +1 -0
  296. package/server/pidfile.d.ts +9 -0
  297. package/server/pidfile.js +43 -45
  298. package/server/pidfile.js.map +1 -0
  299. package/server/review.d.ts +5 -0
  300. package/server/review.js +35 -0
  301. package/server/review.js.map +1 -0
  302. package/server/router.d.ts +33 -0
  303. package/server/router.js +191 -197
  304. package/server/router.js.map +1 -0
  305. package/server/scanRequest.d.ts +3 -0
  306. package/server/scanRequest.js +36 -0
  307. package/server/scanRequest.js.map +1 -0
  308. package/server/searchIndex.d.ts +17 -0
  309. package/server/searchIndex.js +83 -80
  310. package/server/searchIndex.js.map +1 -0
  311. package/server/sessions.d.ts +14 -0
  312. package/server/sessions.js +62 -70
  313. package/server/sessions.js.map +1 -0
  314. package/server/startup.d.ts +118 -0
  315. package/server/startup.js +143 -148
  316. package/server/startup.js.map +1 -0
  317. package/server/static.d.ts +6 -0
  318. package/server/static.js +28 -31
  319. package/server/static.js.map +1 -0
  320. package/server/tools/install.d.ts +4 -0
  321. package/server/tools/install.js +176 -185
  322. package/server/tools/install.js.map +1 -0
  323. package/server/tools/parse.d.ts +8 -0
  324. package/server/tools/parse.js +112 -114
  325. package/server/tools/parse.js.map +1 -0
  326. package/server/tools/platform.d.ts +9 -0
  327. package/server/tools/platform.js +49 -47
  328. package/server/tools/platform.js.map +1 -0
  329. package/server/tools/registry.d.ts +137 -0
  330. package/server/tools/registry.js +173 -172
  331. package/server/tools/registry.js.map +1 -0
  332. package/server/tools/scan.d.ts +34 -0
  333. package/server/tools/scan.js +89 -98
  334. package/server/tools/scan.js.map +1 -0
  335. package/server/tools.d.ts +34 -0
  336. package/server/tools.js +94 -107
  337. package/server/tools.js.map +1 -0
  338. package/server/tunnel.d.ts +29 -0
  339. package/server/tunnel.js +61 -66
  340. package/server/tunnel.js.map +1 -0
  341. package/shared/analyzer/docs.d.ts +16 -0
  342. package/shared/analyzer/docs.js +99 -93
  343. package/shared/analyzer/docs.js.map +1 -0
  344. package/shared/analyzer/explainLocal.d.ts +4 -0
  345. package/shared/analyzer/explainLocal.js +122 -142
  346. package/shared/analyzer/explainLocal.js.map +1 -0
  347. package/shared/analyzer/github.d.ts +37 -0
  348. package/shared/analyzer/github.js +41 -43
  349. package/shared/analyzer/github.js.map +1 -0
  350. package/shared/analyzer/graph.d.ts +41 -0
  351. package/shared/analyzer/graph.js +393 -400
  352. package/shared/analyzer/graph.js.map +1 -0
  353. package/shared/analyzer/health.d.ts +33 -0
  354. package/shared/analyzer/health.js +197 -193
  355. package/shared/analyzer/health.js.map +1 -0
  356. package/shared/analyzer/history.d.ts +29 -0
  357. package/shared/analyzer/history.js +110 -111
  358. package/shared/analyzer/history.js.map +1 -0
  359. package/shared/analyzer/jsonConfig.d.ts +2 -0
  360. package/shared/analyzer/jsonConfig.js +61 -0
  361. package/shared/analyzer/jsonConfig.js.map +1 -0
  362. package/shared/analyzer/languages/csharp.d.ts +26 -0
  363. package/shared/analyzer/languages/csharp.js +83 -88
  364. package/shared/analyzer/languages/csharp.js.map +1 -0
  365. package/shared/analyzer/languages/generic.d.ts +23 -0
  366. package/shared/analyzer/languages/generic.js +94 -105
  367. package/shared/analyzer/languages/generic.js.map +1 -0
  368. package/shared/analyzer/languages/go.d.ts +24 -0
  369. package/shared/analyzer/languages/go.js +45 -54
  370. package/shared/analyzer/languages/go.js.map +1 -0
  371. package/shared/analyzer/languages/index.d.ts +6 -0
  372. package/shared/analyzer/languages/index.js +19 -20
  373. package/shared/analyzer/languages/index.js.map +1 -0
  374. package/shared/analyzer/languages/java.d.ts +20 -0
  375. package/shared/analyzer/languages/java.js +73 -78
  376. package/shared/analyzer/languages/java.js.map +1 -0
  377. package/shared/analyzer/languages/javascript.d.ts +12 -0
  378. package/shared/analyzer/languages/javascript.js +258 -209
  379. package/shared/analyzer/languages/javascript.js.map +1 -0
  380. package/shared/analyzer/languages/python.d.ts +23 -0
  381. package/shared/analyzer/languages/python.js +92 -100
  382. package/shared/analyzer/languages/python.js.map +1 -0
  383. package/shared/analyzer/languages/rust.d.ts +17 -0
  384. package/shared/analyzer/languages/rust.js +96 -98
  385. package/shared/analyzer/languages/rust.js.map +1 -0
  386. package/shared/analyzer/languages/typescript.d.ts +11 -0
  387. package/shared/analyzer/languages/typescript.js +117 -116
  388. package/shared/analyzer/languages/typescript.js.map +1 -0
  389. package/shared/analyzer/licenses.d.ts +18 -0
  390. package/shared/analyzer/licenses.js +130 -133
  391. package/shared/analyzer/licenses.js.map +1 -0
  392. package/shared/analyzer/metrics.d.ts +20 -0
  393. package/shared/analyzer/metrics.js +112 -104
  394. package/shared/analyzer/metrics.js.map +1 -0
  395. package/shared/analyzer/pathUtil.d.ts +10 -0
  396. package/shared/analyzer/pathUtil.js +29 -35
  397. package/shared/analyzer/pathUtil.js.map +1 -0
  398. package/shared/analyzer/patterns.d.ts +11 -0
  399. package/shared/analyzer/patterns.js +231 -253
  400. package/shared/analyzer/patterns.js.map +1 -0
  401. package/shared/analyzer/scan.d.ts +62 -0
  402. package/shared/analyzer/scan.js +451 -442
  403. package/shared/analyzer/scan.js.map +1 -0
  404. package/shared/analyzer/scanControl.d.ts +11 -0
  405. package/shared/analyzer/scanControl.js +62 -0
  406. package/shared/analyzer/scanControl.js.map +1 -0
  407. package/shared/analyzer/security.d.ts +18 -0
  408. package/shared/analyzer/security.js +159 -159
  409. package/shared/analyzer/security.js.map +1 -0
  410. package/shared/analyzer/services.d.ts +5 -0
  411. package/shared/analyzer/services.js +141 -138
  412. package/shared/analyzer/services.js.map +1 -0
  413. package/shared/analyzer/stack.d.ts +6 -0
  414. package/shared/analyzer/stack.js +134 -141
  415. package/shared/analyzer/stack.js.map +1 -0
  416. package/shared/analyzer/tour.d.ts +2 -0
  417. package/shared/analyzer/tour.js +45 -53
  418. package/shared/analyzer/tour.js.map +1 -0
  419. package/shared/analyzer/util.d.ts +8 -0
  420. package/shared/analyzer/util.js +130 -76
  421. package/shared/analyzer/util.js.map +1 -0
  422. package/shared/analyzer/workflows.d.ts +8 -0
  423. package/shared/analyzer/workflows.js +139 -134
  424. package/shared/analyzer/workflows.js.map +1 -0
  425. package/shared/contracts.d.ts +250 -0
  426. package/shared/contracts.js +2 -0
  427. package/shared/contracts.js.map +1 -0
  428. package/shared/diagram/aiFacts.d.ts +35 -0
  429. package/shared/diagram/aiFacts.js +102 -105
  430. package/shared/diagram/aiFacts.js.map +1 -0
  431. package/shared/diagram/aiMermaid.d.ts +5 -0
  432. package/shared/diagram/aiMermaid.js +46 -45
  433. package/shared/diagram/aiMermaid.js.map +1 -0
  434. package/shared/diagram/atlas.d.ts +16 -0
  435. package/shared/diagram/atlas.js +51 -60
  436. package/shared/diagram/atlas.js.map +1 -0
  437. package/shared/diagram/mermaid.d.ts +43 -0
  438. package/shared/diagram/mermaid.js +348 -370
  439. package/shared/diagram/mermaid.js.map +1 -0
  440. package/shared/review/contracts.d.ts +95 -0
  441. package/shared/review/contracts.js +2 -0
  442. package/shared/review/contracts.js.map +1 -0
  443. package/shared/review/review.d.ts +10 -0
  444. package/shared/review/review.js +184 -0
  445. package/shared/review/review.js.map +1 -0
  446. package/shared/search/query.d.ts +32 -0
  447. package/shared/search/query.js +395 -388
  448. package/shared/search/query.js.map +1 -0
@@ -20,234 +20,221 @@
20
20
  //
21
21
  // The filters (severity, engine, text) live on `state.analysis` so they survive
22
22
  // switching tabs within a repo, and reset with the repo.
23
-
24
23
  import { escapeHtml } from './html.js';
25
24
  import { mdInline } from './markdown.js';
26
25
  import { streamExplain } from './api.js';
27
26
  import * as llm from './llm.js';
28
27
  import { state } from './state.js';
29
- import {
30
- filterFindings, findingsFromSecurity, tabulate, engineRows, engineSummary,
31
- SEV_ORDER, BUILTIN_TOOL,
32
- } from './analysisReport.js';
33
- import {
34
- ensureToolsStatus, installEngine, runDeepAnalysis, runOutcomeMessage, subscribeAnalysis,
35
- } from './analysisPanel.js';
36
-
28
+ import { filterFindings, findingsFromSecurity, tabulate, engineRows, engineSummary, SEV_ORDER, BUILTIN_TOOL, } from './analysisReport.js';
29
+ import { ensureToolsStatus, installEngine, runDeepAnalysis, runOutcomeMessage, subscribeAnalysis, } from './analysisPanel.js';
37
30
  let host = null;
38
31
  let hooks = {
39
- onToast: () => {},
40
- onOpenFile: () => {},
41
- onOpenSettings: () => {},
42
- repoOverview: () => '',
32
+ onToast: (..._args) => { },
33
+ onOpenFile: (..._args) => { },
34
+ onOpenSettings: (..._args) => { },
35
+ repoOverview: () => '',
43
36
  };
44
-
45
37
  export function initDeepAnalysis(options) {
46
- host = options.host;
47
- hooks = { ...hooks, ...options };
48
-
49
- host.addEventListener('click', (event) => {
50
- const kind = event.target.closest('[data-run-kind]');
51
- if (kind) return void doRun({ kinds: [kind.dataset.runKind] });
52
-
53
- if (event.target.closest('[data-run-all]')) return void doRun({});
54
-
55
- const engineRun = event.target.closest('[data-engine-run]');
56
- if (engineRun) return void doRun({ tools: [engineRun.dataset.engineRun] });
57
-
58
- const engineInstall = event.target.closest('[data-engine-install]');
59
- if (engineInstall) {
60
- const id = engineInstall.dataset.engineInstall;
61
- return void installEngine(id).then((done) => {
62
- if (done && done.ok) hooks.onToast(`${id} installed — press Run to use it.`);
63
- else if (done && done.error) hooks.onToast(done.error);
64
- });
65
- }
66
-
67
- if (event.target.closest('[data-sev]')) {
68
- state.analysis.severity = event.target.closest('[data-sev]').dataset.sev;
69
- return renderDeepAnalysis(host, state);
70
- }
71
- if (event.target.closest('[data-tool-filter]')) {
72
- state.analysis.tool = event.target.closest('[data-tool-filter]').dataset.toolFilter;
73
- return renderDeepAnalysis(host, state);
74
- }
75
- if (event.target.closest('[data-open-settings]')) {
76
- hooks.onOpenSettings();
77
- return undefined;
78
- }
79
- if (event.target.closest('[data-ai-explain]')) return void explainWithAI('');
80
-
81
- const fileLink = event.target.closest('[data-goto]');
82
- if (fileLink) {
83
- hooks.onOpenFile(fileLink.dataset.goto, Number(fileLink.dataset.gotoLine) || 0);
84
- }
85
- return undefined;
86
- });
87
-
88
- host.addEventListener('input', (event) => {
89
- if (event.target.matches('[data-finding-search]')) {
90
- const caret = event.target.selectionStart;
91
- state.analysis.q = event.target.value;
92
- renderDeepAnalysis(host, state);
93
- // Re-focus and restore the caret: a full repaint replaces the input, and
94
- // typing into a box that loses focus on every keystroke is unusable.
95
- const next = host.querySelector('[data-finding-search]');
96
- if (next) {
97
- next.focus();
98
- next.setSelectionRange(caret, caret);
99
- }
100
- return;
101
- }
102
- if (event.target.matches('[data-ai-question]')) {
103
- state.analysis.ai.question = event.target.value;
104
- }
105
- });
106
-
107
- host.addEventListener('keydown', (event) => {
108
- if (event.key === 'Enter' && event.target.matches('[data-ai-question]')) {
109
- event.preventDefault();
110
- explainWithAI(event.target.value);
111
- }
112
- });
113
-
114
- // The Configure forms. `change` — not `input` — so a repaint never fights a
115
- // half-typed number; the store keeps the values and the next run picks them
116
- // up. No repaint on change either: the control itself already shows the new
117
- // value, and redrawing would close the <details> the person just opened.
118
- host.addEventListener('change', (event) => {
119
- const control = event.target.closest('[data-opt]');
120
- if (!control) return;
121
- const { engine, key } = control.dataset;
122
- const slot = state.tools.options[engine] || (state.tools.options[engine] = {});
123
- if (control.type === 'checkbox') {
124
- if (control.dataset.optValue) {
125
- // one value of a multi-select
126
- const list = Array.isArray(slot[key]) ? [...slot[key]] : [];
127
- const at = list.indexOf(control.dataset.optValue);
128
- if (control.checked && at === -1) list.push(control.dataset.optValue);
129
- if (!control.checked && at !== -1) list.splice(at, 1);
130
- slot[key] = list;
131
- } else {
132
- slot[key] = control.checked;
133
- }
134
- } else if (control.type === 'number') {
135
- slot[key] = control.value === '' ? undefined : Number(control.value);
136
- } else {
137
- slot[key] = control.value;
138
- }
139
- });
140
-
141
- // A run started from the inspector panel repaints this view too.
142
- subscribeAnalysis(() => {
143
- if (state.view === 'analysis') renderDeepAnalysis(host, state);
144
- });
38
+ host = options.host;
39
+ hooks = { ...hooks, ...options };
40
+ host.addEventListener('click', (event) => {
41
+ const kind = event.target.closest('[data-run-kind]');
42
+ if (kind)
43
+ return void doRun({ kinds: [kind.dataset.runKind] });
44
+ if (event.target.closest('[data-run-all]'))
45
+ return void doRun({});
46
+ const engineRun = event.target.closest('[data-engine-run]');
47
+ if (engineRun)
48
+ return void doRun({ tools: [engineRun.dataset.engineRun] });
49
+ const engineInstall = event.target.closest('[data-engine-install]');
50
+ if (engineInstall) {
51
+ const id = engineInstall.dataset.engineInstall;
52
+ return void installEngine(id).then((done) => {
53
+ if (done && done.ok)
54
+ hooks.onToast(`${id} installed — press Run to use it.`);
55
+ else if (done && done.error)
56
+ hooks.onToast(done.error);
57
+ });
58
+ }
59
+ if (event.target.closest('[data-sev]')) {
60
+ state.analysis.severity = event.target.closest('[data-sev]').dataset.sev;
61
+ return renderDeepAnalysis(host, state);
62
+ }
63
+ if (event.target.closest('[data-tool-filter]')) {
64
+ state.analysis.tool = event.target.closest('[data-tool-filter]').dataset.toolFilter;
65
+ return renderDeepAnalysis(host, state);
66
+ }
67
+ if (event.target.closest('[data-open-settings]')) {
68
+ hooks.onOpenSettings();
69
+ return undefined;
70
+ }
71
+ if (event.target.closest('[data-ai-explain]'))
72
+ return void explainWithAI('');
73
+ const fileLink = event.target.closest('[data-goto]');
74
+ if (fileLink) {
75
+ hooks.onOpenFile(fileLink.dataset.goto, Number(fileLink.dataset.gotoLine) || 0);
76
+ }
77
+ return undefined;
78
+ });
79
+ host.addEventListener('input', (event) => {
80
+ if (event.target.matches('[data-finding-search]')) {
81
+ const caret = event.target.selectionStart;
82
+ state.analysis.q = event.target.value;
83
+ renderDeepAnalysis(host, state);
84
+ // Re-focus and restore the caret: a full repaint replaces the input, and
85
+ // typing into a box that loses focus on every keystroke is unusable.
86
+ const next = host.querySelector('[data-finding-search]');
87
+ if (next) {
88
+ next.focus();
89
+ next.setSelectionRange(caret, caret);
90
+ }
91
+ return;
92
+ }
93
+ if (event.target.matches('[data-ai-question]')) {
94
+ state.analysis.ai.question = event.target.value;
95
+ }
96
+ });
97
+ host.addEventListener('keydown', (event) => {
98
+ if (event.key === 'Enter' && event.target.matches('[data-ai-question]')) {
99
+ event.preventDefault();
100
+ explainWithAI(event.target.value);
101
+ }
102
+ });
103
+ // The Configure forms. `change` — not `input` — so a repaint never fights a
104
+ // half-typed number; the store keeps the values and the next run picks them
105
+ // up. No repaint on change either: the control itself already shows the new
106
+ // value, and redrawing would close the <details> the person just opened.
107
+ host.addEventListener('change', (event) => {
108
+ const control = event.target.closest('[data-opt]');
109
+ if (!control)
110
+ return;
111
+ const { engine, key } = control.dataset;
112
+ const slot = state.tools.options[engine] || (state.tools.options[engine] = {});
113
+ if (control.type === 'checkbox') {
114
+ if (control.dataset.optValue) {
115
+ // one value of a multi-select
116
+ const list = Array.isArray(slot[key]) ? [...slot[key]] : [];
117
+ const at = list.indexOf(control.dataset.optValue);
118
+ if (control.checked && at === -1)
119
+ list.push(control.dataset.optValue);
120
+ if (!control.checked && at !== -1)
121
+ list.splice(at, 1);
122
+ slot[key] = list;
123
+ }
124
+ else {
125
+ slot[key] = control.checked;
126
+ }
127
+ }
128
+ else if (control.type === 'number') {
129
+ slot[key] = control.value === '' ? undefined : Number(control.value);
130
+ }
131
+ else {
132
+ slot[key] = control.value;
133
+ }
134
+ });
135
+ // A run started from the inspector panel repaints this view too.
136
+ subscribeAnalysis(() => {
137
+ if (state.view === 'analysis')
138
+ renderDeepAnalysis(host, state);
139
+ });
145
140
  }
146
-
147
141
  async function doRun(options) {
148
- const report = await runDeepAnalysis(options);
149
- hooks.onToast(runOutcomeMessage(report));
142
+ const report = await runDeepAnalysis(options);
143
+ hooks.onToast(runOutcomeMessage(report));
150
144
  }
151
-
152
145
  // ---- the AI pass ------------------------------------------------------------
153
-
154
146
  // Explains the report, or answers `question` about it. Streams into
155
147
  // `state.analysis.ai.text` and repaints the note in place — a full page repaint
156
148
  // mid-stream would throw away every character already received.
157
149
  async function explainWithAI(question) {
158
- const ai = state.analysis.ai;
159
- if (ai.running) return;
160
-
161
- if (!llm.isConfigured()) {
162
- hooks.onOpenSettings();
163
- hooks.onToast('Add an endpoint and model first — the report is still readable without one.');
164
- return;
165
- }
166
-
167
- const rows = findingsFromSecurity(state.security);
168
- const counts = tabulate(rows);
169
- const engines = engineRows(state.tools.status, state.tools.report);
170
- const messages = llm.analysisMessages({
171
- repoName: state.scan.name,
172
- grade: state.security?.grade,
173
- score: state.security?.score,
174
- counts,
175
- engines,
176
- findings: rows,
177
- question: (question || '').trim(),
178
- });
179
-
180
- const settings = llm.getSettings();
181
- ai.running = true;
182
- ai.text = '';
183
- ai.error = '';
184
- paintAI();
185
-
186
- try {
187
- const providerOptions = llm.isAzureHost(settings.baseUrl) ? {} : { reasoning: { exclude: true } };
188
- for await (const delta of streamExplain({ ...settings, messages, maxTokens: 900, providerOptions })) {
189
- ai.text += delta;
190
- paintAI();
150
+ const ai = state.analysis.ai;
151
+ if (ai.running)
152
+ return;
153
+ if (!llm.isConfigured()) {
154
+ hooks.onOpenSettings();
155
+ hooks.onToast('Add an endpoint and model first — the report is still readable without one.');
156
+ return;
191
157
  }
192
- } catch (err) {
193
- ai.error = err.message;
194
- } finally {
195
- ai.running = false;
158
+ const rows = findingsFromSecurity(state.security);
159
+ const counts = tabulate(rows);
160
+ const engines = engineRows(state.tools.status, state.tools.report);
161
+ const messages = llm.analysisMessages({
162
+ repoName: state.scan.name,
163
+ grade: state.security?.grade,
164
+ score: state.security?.score,
165
+ counts,
166
+ engines,
167
+ findings: rows,
168
+ question: (question || '').trim(),
169
+ });
170
+ const settings = llm.getSettings();
171
+ ai.running = true;
172
+ ai.text = '';
173
+ ai.error = '';
196
174
  paintAI();
197
- }
175
+ try {
176
+ const providerOptions = llm.isAzureHost(settings.baseUrl) ? {} : { reasoning: { exclude: true } };
177
+ for await (const delta of streamExplain({ ...settings, messages, maxTokens: 900, providerOptions })) {
178
+ ai.text += delta;
179
+ paintAI();
180
+ }
181
+ }
182
+ catch (err) {
183
+ ai.error = err.message;
184
+ }
185
+ finally {
186
+ ai.running = false;
187
+ paintAI();
188
+ }
198
189
  }
199
-
200
190
  // Repaint just the AI note, so streaming never fights the rest of the page.
201
191
  function paintAI() {
202
- if (!host) return;
203
- const note = host.querySelector('[data-ai-note]');
204
- if (!note) return;
205
- const ai = state.analysis.ai;
206
- note.innerHTML = renderAINote(ai);
192
+ if (!host)
193
+ return;
194
+ const note = host.querySelector('[data-ai-note]');
195
+ if (!note)
196
+ return;
197
+ const ai = state.analysis.ai;
198
+ note.innerHTML = renderAINote(ai);
207
199
  }
208
-
209
200
  // ---- painting ---------------------------------------------------------------
210
-
211
201
  export function renderDeepAnalysis(container, appState = state) {
212
- if (!container) return;
213
- host = container;
214
- const { analysis } = appState;
215
-
216
- // A browser-picked folder has no server-side root, so there is nothing for an
217
- // engine to read. Say that once, plainly, rather than showing an empty table
218
- // that looks like a clean bill of health.
219
- if (!appState.scanId) {
220
- container.innerHTML = `<div class="analysis-layout">
202
+ if (!container)
203
+ return;
204
+ host = container;
205
+ const { analysis } = appState;
206
+ // A browser-picked folder has no server-side root, so there is nothing for an
207
+ // engine to read. Say that once, plainly, rather than showing an empty table
208
+ // that looks like a clean bill of health.
209
+ if (!appState.scanId) {
210
+ container.innerHTML = `<div class="analysis-layout">
221
211
  <header class="analysis-head">
222
212
  <h1 class="analysis-title">Deep analysis</h1>
223
213
  <p class="analysis-sub">External engines — Semgrep, Gitleaks, Knip, Vulture, Depcheck.</p>
224
214
  </header>
225
215
  <div class="analysis-empty">This repo was picked in the browser, so its files never reached the server. An external engine needs a directory on the server to read, so deep analysis is available for folders scanned by path and for git clones. The built-in scan — every finding on the <b>Security</b> tab — still applies.</div>
226
216
  </div>`;
227
- return;
228
- }
229
-
230
- const engines = engineRows(appState.tools.status, appState.tools.report);
231
- const all = findingsFromSecurity(appState.security);
232
- const counts = tabulate(all);
233
- const visible = filterFindings(all, analysis);
234
- const summary = engineSummary(appState.tools.report, engines);
235
- const running = appState.tools.running;
236
-
237
- container.innerHTML = `<div class="analysis-layout">
217
+ return;
218
+ }
219
+ const engines = engineRows(appState.tools.status, appState.tools.report);
220
+ const all = findingsFromSecurity(appState.security);
221
+ const counts = tabulate(all);
222
+ const visible = filterFindings(all, analysis);
223
+ const summary = engineSummary(appState.tools.report, engines);
224
+ const running = appState.tools.running;
225
+ container.innerHTML = `<div class="analysis-layout">
238
226
  ${renderHead(counts, running)}
239
227
  ${renderEngineBlock(engines, summary, running, appState.tools)}
240
228
  ${renderAIBlock()}
241
229
  ${renderFindingsBlock(visible, counts, analysis)}
242
230
  </div>`;
243
-
244
- // The engines panel may still be loading; ask once and let the store notify.
245
- if (!appState.tools.status && !appState.tools.loading) void ensureToolsStatus();
231
+ // The engines panel may still be loading; ask once and let the store notify.
232
+ if (!appState.tools.status && !appState.tools.loading)
233
+ void ensureToolsStatus();
246
234
  }
247
-
248
235
  function renderHead(counts, running) {
249
- const chip = (label, value, cls = '') => `<span class="analysis-chip ${cls}"><b>${value}</b> ${label}</span>`;
250
- return `<header class="analysis-head">
236
+ const chip = (label, value, cls = '') => `<span class="analysis-chip ${cls}"><b>${value}</b> ${label}</span>`;
237
+ return `<header class="analysis-head">
251
238
  <div class="analysis-head-text">
252
239
  <h1 class="analysis-title">Deep analysis</h1>
253
240
  <p class="analysis-sub">Every engine this machine has, plus the built-in scanner — merged into one list. Click any file to open it at the line.</p>
@@ -266,42 +253,42 @@ function renderHead(counts, running) {
266
253
  ${chip('from built-in', counts.builtin)}
267
254
  </div>`;
268
255
  }
269
-
270
256
  function renderEngineBlock(engines, summary, running, tools) {
271
- const rows = engines.length ? engines.map((e) => renderEngineRow(e, running)).join('') : '';
272
- const empty = tools.loading
273
- ? '<div class="analysis-empty">Checking which engines are installed…</div>'
274
- : (engines.length ? '' : '<div class="analysis-empty">No engine table — the server did not answer.</div>');
275
-
276
- return `<section class="analysis-block">
257
+ const rows = engines.length ? engines.map((e) => renderEngineRow(e, running)).join('') : '';
258
+ const empty = tools.loading
259
+ ? '<div class="analysis-empty">Checking which engines are installed…</div>'
260
+ : (engines.length ? '' : '<div class="analysis-empty">No engine table — the server did not answer.</div>');
261
+ return `<section class="analysis-block">
277
262
  <h2 class="analysis-h">Engines <span class="analysis-h-sub">what this machine can run</span></h2>
278
263
  <div class="analysis-engines">${rows}${empty}</div>
279
264
  <div class="analysis-verdict is-${escapeHtml(summary.tone)}">${escapeHtml(summary.text)}</div>
280
265
  </section>`;
281
266
  }
282
-
283
267
  function renderEngineRow(engine, running) {
284
- const installing = state.tools.install[engine.id];
285
- let badge;
286
- if (installing && installing.running) badge = '<span class="tools-badge is-running">installing…</span>';
287
- else if (!engine.available) badge = '<span class="tools-badge is-missing">not installed</span>';
288
- else if (running) badge = '<span class="tools-badge is-running">running…</span>';
289
- else if (engine.ran) badge = `<span class="tools-badge is-ran">${engine.findings} · ${engine.ms}ms</span>`;
290
- else if (engine.failed) badge = '<span class="tools-badge is-failed">failed</span>';
291
- else badge = `<span class="tools-badge is-ready">ready${engine.how ? ' · ' + escapeHtml(engine.how) : ''}</span>`;
292
-
293
- const note = !engine.available && engine.reason
294
- ? `<span class="tools-reason">${escapeHtml(engine.reason)}</span>`
295
- : (engine.failure ? `<span class="tools-reason">${escapeHtml(engine.failure)}</span>` : '');
296
-
297
- const runBtn = engine.available
298
- ? `<button class="btn btn-ghost btn-sm" data-engine-run="${escapeHtml(engine.id)}" ${running ? 'disabled' : ''}>Run</button>`
299
- : '';
300
- const installBtn = !engine.available && engine.installable
301
- ? `<button class="btn btn-ink btn-sm" data-engine-install="${escapeHtml(engine.id)}" ${installing && installing.running ? 'disabled' : ''}>${installing && installing.running ? 'Installing…' : 'Install'}</button>`
302
- : '';
303
-
304
- return `<div class="analysis-engine${engine.available ? '' : ' is-missing'}">
268
+ const installing = state.tools.install[engine.id];
269
+ let badge;
270
+ if (installing && installing.running)
271
+ badge = '<span class="tools-badge is-running">installing…</span>';
272
+ else if (!engine.available)
273
+ badge = '<span class="tools-badge is-missing">not installed</span>';
274
+ else if (running)
275
+ badge = '<span class="tools-badge is-running">running…</span>';
276
+ else if (engine.ran)
277
+ badge = `<span class="tools-badge is-ran">${engine.findings} · ${engine.ms}ms</span>`;
278
+ else if (engine.failed)
279
+ badge = '<span class="tools-badge is-failed">failed</span>';
280
+ else
281
+ badge = `<span class="tools-badge is-ready">ready${engine.how ? ' · ' + escapeHtml(engine.how) : ''}</span>`;
282
+ const note = !engine.available && engine.reason
283
+ ? `<span class="tools-reason">${escapeHtml(engine.reason)}</span>`
284
+ : (engine.failure ? `<span class="tools-reason">${escapeHtml(engine.failure)}</span>` : '');
285
+ const runBtn = engine.available
286
+ ? `<button class="btn btn-ghost btn-sm" data-engine-run="${escapeHtml(engine.id)}" ${running ? 'disabled' : ''}>Run</button>`
287
+ : '';
288
+ const installBtn = !engine.available && engine.installable
289
+ ? `<button class="btn btn-ink btn-sm" data-engine-install="${escapeHtml(engine.id)}" ${installing && installing.running ? 'disabled' : ''}>${installing && installing.running ? 'Installing…' : 'Install'}</button>`
290
+ : '';
291
+ return `<div class="analysis-engine${engine.available ? '' : ' is-missing'}">
305
292
  <div class="analysis-engine-top">
306
293
  <span class="tools-name">${escapeHtml(engine.label)}</span>
307
294
  ${badge}
@@ -315,33 +302,33 @@ function renderEngineRow(engine, running) {
315
302
  ${renderInstallConsole(installing)}
316
303
  </div>`;
317
304
  }
318
-
319
305
  // The Configure panel: a <details> with one control per schema entry, so the
320
306
  // useful surface of each engine — semgrep's rule sets, gitleaks' history
321
307
  // scan, vulture's confidence floor — is a form, not a command line. Values
322
308
  // live in `state.tools.options` and ride along with the next run; the server
323
309
  // validates them against the same schema before they touch an argv.
324
310
  function renderEngineOptions(engine) {
325
- if (!engine.options.length) return '';
326
- const values = state.tools.options[engine.id] || {};
327
-
328
- const field = (opt) => {
329
- const current = values[opt.key] !== undefined ? values[opt.key] : engine.defaults[opt.key];
330
- let control;
331
- if (opt.type === 'boolean') {
332
- control = `<label class="analysis-opt-check">
311
+ if (!engine.options.length)
312
+ return '';
313
+ const values = state.tools.options[engine.id] || {};
314
+ const field = (opt) => {
315
+ const current = values[opt.key] !== undefined ? values[opt.key] : engine.defaults[opt.key];
316
+ let control;
317
+ if (opt.type === 'boolean') {
318
+ control = `<label class="analysis-opt-check">
333
319
  <input type="checkbox" data-opt data-engine="${escapeHtml(engine.id)}" data-key="${escapeHtml(opt.key)}" ${current ? 'checked' : ''}>
334
320
  <span>${escapeHtml(opt.label)}</span>
335
321
  </label>`;
336
- } else if (opt.type === 'enum') {
337
- const options = opt.values.map((v) =>
338
- `<option value="${escapeHtml(v)}" ${v === current ? 'selected' : ''}>${escapeHtml(v)}</option>`).join('');
339
- control = `<label class="analysis-opt-field"><span>${escapeHtml(opt.label)}</span>
322
+ }
323
+ else if (opt.type === 'enum') {
324
+ const options = opt.values.map((v) => `<option value="${escapeHtml(v)}" ${v === current ? 'selected' : ''}>${escapeHtml(v)}</option>`).join('');
325
+ control = `<label class="analysis-opt-field"><span>${escapeHtml(opt.label)}</span>
340
326
  <select class="text-input" data-opt data-engine="${escapeHtml(engine.id)}" data-key="${escapeHtml(opt.key)}">${options}</select>
341
327
  </label>`;
342
- } else if (opt.type === 'multi') {
343
- const chosen = Array.isArray(current) ? current : [];
344
- control = `<div class="analysis-opt-field"><span>${escapeHtml(opt.label)}</span>
328
+ }
329
+ else if (opt.type === 'multi') {
330
+ const chosen = Array.isArray(current) ? current : [];
331
+ control = `<div class="analysis-opt-field"><span>${escapeHtml(opt.label)}</span>
345
332
  <div class="analysis-opt-multi">${opt.values.map((v) => `
346
333
  <label class="analysis-opt-check">
347
334
  <input type="checkbox" data-opt data-engine="${escapeHtml(engine.id)}" data-key="${escapeHtml(opt.key)}"
@@ -350,45 +337,43 @@ function renderEngineOptions(engine) {
350
337
  </label>`).join('')}
351
338
  </div>
352
339
  </div>`;
353
- } else { // number
354
- control = `<label class="analysis-opt-field"><span>${escapeHtml(opt.label)}</span>
340
+ }
341
+ else { // number
342
+ control = `<label class="analysis-opt-field"><span>${escapeHtml(opt.label)}</span>
355
343
  <input type="number" class="text-input" data-opt data-engine="${escapeHtml(engine.id)}" data-key="${escapeHtml(opt.key)}"
356
344
  min="${opt.min}" max="${opt.max}" value="${escapeHtml(String(current ?? opt.default))}">
357
345
  </label>`;
358
- }
359
- const hint = opt.hint ? `<span class="analysis-opt-hint">${escapeHtml(opt.hint)}</span>` : '';
360
- return `<div class="analysis-opt">${control}${hint}</div>`;
361
- };
362
-
363
- return `<details class="analysis-config">
346
+ }
347
+ const hint = opt.hint ? `<span class="analysis-opt-hint">${escapeHtml(opt.hint)}</span>` : '';
348
+ return `<div class="analysis-opt">${control}${hint}</div>`;
349
+ };
350
+ return `<details class="analysis-config">
364
351
  <summary>Configure</summary>
365
352
  <div class="analysis-config-body">${engine.options.map(field).join('')}</div>
366
353
  </details>`;
367
354
  }
368
-
369
355
  // The install log, live while an install runs and kept afterwards so a failed
370
356
  // install leaves its reason on screen instead of in a toast that faded.
371
357
  function renderInstallConsole(installing) {
372
- if (!installing || (!installing.log.length && !installing.running && !installing.error)) return '';
373
- const verdict = installing.running
374
- ? ''
375
- : installing.ok
376
- ? '<div class="analysis-console-verdict is-ok">Installed — the engine is ready.</div>'
377
- : `<div class="analysis-console-verdict is-err">${escapeHtml(installing.error || 'The install failed.')}</div>`;
378
- return `<div class="analysis-console-wrap">
358
+ if (!installing || (!installing.log.length && !installing.running && !installing.error))
359
+ return '';
360
+ const verdict = installing.running
361
+ ? ''
362
+ : installing.ok
363
+ ? '<div class="analysis-console-verdict is-ok">Installed — the engine is ready.</div>'
364
+ : `<div class="analysis-console-verdict is-err">${escapeHtml(installing.error || 'The install failed.')}</div>`;
365
+ return `<div class="analysis-console-wrap">
379
366
  <pre class="analysis-console">${escapeHtml(installing.log.join('\n'))}${installing.running ? ' ▍' : ''}</pre>
380
367
  ${verdict}
381
368
  </div>`;
382
369
  }
383
-
384
-
385
370
  function renderAIBlock() {
386
- const configured = llm.isConfigured();
387
- const ask = escapeHtml(state.analysis.ai.question || '');
388
- const settingsBtn = configured
389
- ? ''
390
- : '<button class="btn btn-ghost btn-sm" data-open-settings>API key…</button>';
391
- return `<section class="analysis-block">
371
+ const configured = llm.isConfigured();
372
+ const ask = escapeHtml(state.analysis.ai.question || '');
373
+ const settingsBtn = configured
374
+ ? ''
375
+ : '<button class="btn btn-ghost btn-sm" data-open-settings>API key…</button>';
376
+ return `<section class="analysis-block">
392
377
  <h2 class="analysis-h">What this means <span class="analysis-h-sub">ask the AI</span></h2>
393
378
  <div class="analysis-ai">
394
379
  <div class="analysis-ai-bar">
@@ -404,50 +389,47 @@ function renderAIBlock() {
404
389
  </div>
405
390
  </section>`;
406
391
  }
407
-
408
392
  // The note is plain text from the model. It goes through `mdInline`, the same
409
393
  // boundary helper the inspector uses: escape first, then bold and inline code.
410
394
  // The prompt asks for prose, but models reach for `**bold**` and backticks
411
395
  // anyway, and half-rendered asterisks look like a bug.
412
396
  export function renderAINote(ai) {
413
- if (ai.running && !ai.text) {
414
- return '<span class="analysis-ai-waiting"><span class="search-spinner"></span> Reading the report…</span>';
415
- }
416
- if (ai.error) return `<span class="analysis-ai-error">${escapeHtml(ai.error)}</span>`;
417
- if (!ai.text) {
418
- return '<span class="analysis-ai-idle">Press <b>Explain this analysis</b> for a prioritised read of the findings above, or ask a question about any of them.</span>';
419
- }
420
- const html = ai.text
421
- .split(/\n{2,}/)
422
- .map((para) => `<p>${mdInline(para).replace(/\n/g, '<br>')}</p>`)
423
- .join('');
424
- const cursor = ai.running ? '<span class="analysis-ai-cursor">▍</span>' : '';
425
- return html + cursor;
397
+ if (ai.running && !ai.text) {
398
+ return '<span class="analysis-ai-waiting"><span class="search-spinner"></span> Reading the report…</span>';
399
+ }
400
+ if (ai.error)
401
+ return `<span class="analysis-ai-error">${escapeHtml(ai.error)}</span>`;
402
+ if (!ai.text) {
403
+ return '<span class="analysis-ai-idle">Press <b>Explain this analysis</b> for a prioritised read of the findings above, or ask a question about any of them.</span>';
404
+ }
405
+ const html = ai.text
406
+ .split(/\n{2,}/)
407
+ .map((para) => `<p>${mdInline(para).replace(/\n/g, '<br>')}</p>`)
408
+ .join('');
409
+ const cursor = ai.running ? '<span class="analysis-ai-cursor">▍</span>' : '';
410
+ return html + cursor;
426
411
  }
427
-
428
412
  function renderFindingsBlock(visible, counts, analysis) {
429
- const sevChips = ['all', ...SEV_ORDER].map((sev) => {
430
- const n = sev === 'all' ? counts.total : (counts.bySeverity[sev] || 0);
431
- if (sev !== 'all' && !n) return '';
432
- const active = analysis.severity === sev ? ' is-active' : '';
433
- return `<button class="btn btn-ghost btn-sm${active}" data-sev="${sev}">${sev} (${n})</button>`;
434
- }).join('');
435
-
436
- const tools = Object.keys(counts.byTool).sort((a, b) => counts.byTool[b] - counts.byTool[a]);
437
- const toolChips = tools.length > 1
438
- ? ['all', ...tools].map((tool) => {
439
- const n = tool === 'all' ? counts.total : counts.byTool[tool];
440
- const label = tool === BUILTIN_TOOL ? 'built-in scanner' : tool;
441
- const active = analysis.tool === tool ? ' is-active' : '';
442
- return `<button class="btn btn-ghost btn-sm${active}" data-tool-filter="${escapeHtml(tool)}">${escapeHtml(label)} (${n})</button>`;
443
- }).join('')
444
- : '';
445
-
446
- const body = visible.length
447
- ? visible.map(renderFindingRow).join('')
448
- : `<tr><td colspan="5" class="analysis-no-rows">Nothing matches those filters.</td></tr>`;
449
-
450
- return `<section class="analysis-block">
413
+ const sevChips = ['all', ...SEV_ORDER].map((sev) => {
414
+ const n = sev === 'all' ? counts.total : (counts.bySeverity[sev] || 0);
415
+ if (sev !== 'all' && !n)
416
+ return '';
417
+ const active = analysis.severity === sev ? ' is-active' : '';
418
+ return `<button class="btn btn-ghost btn-sm${active}" data-sev="${sev}">${sev} (${n})</button>`;
419
+ }).join('');
420
+ const tools = Object.keys(counts.byTool).sort((a, b) => counts.byTool[b] - counts.byTool[a]);
421
+ const toolChips = tools.length > 1
422
+ ? ['all', ...tools].map((tool) => {
423
+ const n = tool === 'all' ? counts.total : counts.byTool[tool];
424
+ const label = tool === BUILTIN_TOOL ? 'built-in scanner' : tool;
425
+ const active = analysis.tool === tool ? ' is-active' : '';
426
+ return `<button class="btn btn-ghost btn-sm${active}" data-tool-filter="${escapeHtml(tool)}">${escapeHtml(label)} (${n})</button>`;
427
+ }).join('')
428
+ : '';
429
+ const body = visible.length
430
+ ? visible.map(renderFindingRow).join('')
431
+ : `<tr><td colspan="5" class="analysis-no-rows">Nothing matches those filters.</td></tr>`;
432
+ return `<section class="analysis-block">
451
433
  <h2 class="analysis-h">Findings <span class="analysis-h-sub">${visible.length} of ${counts.total} shown</span></h2>
452
434
  <div class="analysis-filterbar">
453
435
  <div class="analysis-filter-group">${sevChips}</div>
@@ -469,11 +451,10 @@ function renderFindingsBlock(visible, counts, analysis) {
469
451
  </div>
470
452
  </section>`;
471
453
  }
472
-
473
454
  // One finding. The file cell is the point of the whole view: it carries the
474
455
  // path, the line, and the click that opens the Code tab there.
475
456
  function renderFindingRow(row) {
476
- return `<tr class="analysis-row is-${escapeHtml(row.severity)}">
457
+ return `<tr class="analysis-row is-${escapeHtml(row.severity)}">
477
458
  <td class="col-sev"><span class="sev-pill is-${escapeHtml(row.severity)}">${escapeHtml(row.severity)}</span></td>
478
459
  <td class="col-file">
479
460
  <button class="analysis-file" data-goto="${escapeHtml(row.path)}" data-goto-line="${row.line}"
@@ -488,9 +469,8 @@ function renderFindingRow(row) {
488
469
  <td class="analysis-msg">${escapeHtml(row.message)}</td>
489
470
  </tr>`;
490
471
  }
491
-
492
472
  function dirOf(path) {
493
- const at = String(path || '').lastIndexOf('/');
494
- return at === -1 ? '' : path.slice(0, at);
473
+ const at = String(path || '').lastIndexOf('/');
474
+ return at === -1 ? '' : path.slice(0, at);
495
475
  }
496
-
476
+ //# sourceMappingURL=deepAnalysisView.js.map