kryptheon 0.1.31 → 0.1.32

package/kryptheon-dashboard-page.js

@@ -103,10 +103,24 @@
     busy = on;
     Array.prototype.forEach.call(document.querySelectorAll('[data-action]'), function (b) { b.disabled = on; });
   }
+  // The clipboard, and when a browser refuses it, the older way: the text
+  // put in a box off the screen, selected and copied.
   function copy(text, done) {
-    navigator.clipboard.writeText(text).then(function () { toast(done); }, function () {
-      toast('Could not copy - select the text instead');
-    });
+    function older() {
+      var box = el('textarea');
+      box.value = text;
+      box.setAttribute('readonly', '');
+      box.style.position = 'fixed';
+      box.style.left = '-9999px';
+      document.body.appendChild(box);
+      box.select();
+      var ok = false;
+      try { ok = document.execCommand('copy'); } catch (e) { ok = false; }
+      document.body.removeChild(box);
+      toast(ok ? done : 'Could not copy - select the text instead');
+    }
+    if (!navigator.clipboard || !navigator.clipboard.writeText) return older();
+    navigator.clipboard.writeText(text).then(function () { toast(done); }, older);
   }
   function button(cls, iconName, text, onClick) {
     var b = el('button', 'btn' + (cls ? ' ' + cls : ''));
@@ -155,33 +169,70 @@
   // lines are what the command printed, already scrubbed of any secret.
   var job = null;
   var lastRecheck = null;
-
+  // Whether the printed lines are shown: null follows the job - shown while it
+  // runs or when it failed, folded away once it finished well - until the
+  // person opens or folds them.
+  var linesOpen = null;
+  // Whether the one prompt for all findings is shown in full.
+  var allPromptOpen = false;
+
+  // The panel sits in the corner of the window, over the page; the page gets
+  // room at its foot so nothing stays hidden under it.
   function renderJob() {
     var box = byId('job');
     clear(box);
-    if (!job) { box.hidden = true; return; }
+    var main = document.querySelector('main');
+    var root = document.documentElement;
+    if (!job) { box.hidden = true; linesOpen = null; main.style.paddingBottom = ''; root.style.removeProperty('--job-room'); return; }
     box.hidden = false;
-    box.className = 'job' + (job.running ? ' on' : job.result && job.result.ok ? ' ok' : ' bad');
+    var ok = !!(job.result && job.result.ok);
+    box.className = 'job' + (job.running ? ' on' : ok ? ' ok' : ' bad');
     var head = el('div', 'job-head');
     if (job.running) head.appendChild(el('span', 'spin'));
     head.appendChild(el('b', null, job.title));
-    head.appendChild(el('span', 'tag ' + (job.running ? 'sun' : job.result && job.result.ok ? 'leaf' : 'ember'),
-      job.running ? 'running' : job.result && job.result.ok ? 'finished' : 'did not finish'));
+    head.appendChild(el('span', 'tag ' + (job.running ? 'sun' : ok ? 'leaf' : 'ember'),
+      job.running ? 'running' : ok ? 'finished' : 'did not finish'));
     if (!job.running) {
-      var close = el('button', 'job-close', 'Hide');
+      var close = el('button', 'job-close', 'Close');
       close.type = 'button';
       close.addEventListener('click', function () { job = null; renderJob(); });
       head.appendChild(close);
     }
     box.appendChild(head);
-    var lines = el('pre', 'job-lines', (job.lines || []).filter(function (l, i, all) { return l || (i && all[i - 1]); }).slice(-60).join('\n') || 'Starting...');
-    box.appendChild(lines);
+    var open = linesOpen === null ? job.running || !ok : linesOpen;
+    var lines = null;
+    if (open) {
+      lines = el('pre', 'job-lines', (job.lines || []).filter(function (l, i, all) { return l || (i && all[i - 1]); }).slice(-60).join('\n') || 'Starting...');
+      box.appendChild(lines);
+    }
     if (!job.running && job.result) {
       var r = job.result;
-      box.appendChild(el('div', 'job-result', r.ok ? 'Result: ' + (r.summary || 'done') : 'It did not finish: ' + (r.why || 'see the lines above')));
+      box.appendChild(el('div', 'job-result', ok ? 'Result: ' + (r.summary || 'done') : 'It did not finish: ' + (r.why || 'see what it printed')));
+    }
+    if (!job.running) {
+      var acts = el('div', 'job-acts');
+      // What it found is on Findings; a recording is on Runs. Setting the
+      // nightly check up, or removing it, finds nothing to go and see.
+      var setUp = job.kind === 'db' && / (un)?install$/.test(job.command || '');
+      var next = !ok || setUp ? null : job.kind === 'record' ? { id: 'runs', label: 'See runs' } : { id: 'findings', label: 'See findings' };
+      if (next && currentView() !== next.id) {
+        var goBtn = el('button', 'go', next.label + ' →');
+        goBtn.type = 'button';
+        goBtn.addEventListener('click', function () { go(next.id); });
+        acts.appendChild(goBtn);
+      }
+      var fold = el('button', null, open ? 'Hide what it printed' : 'Show what it printed');
+      fold.type = 'button';
+      fold.setAttribute('aria-expanded', open ? 'true' : 'false');
+      fold.addEventListener('click', function () { linesOpen = !open; renderJob(); });
+      acts.appendChild(fold);
+      box.appendChild(acts);
     }
     if (job.command) box.appendChild(el('div', 'fallback', 'The same in a terminal:  ' + job.command));
-    lines.scrollTop = lines.scrollHeight;
+    if (lines) lines.scrollTop = lines.scrollHeight;
+    main.style.paddingBottom = (box.offsetHeight + 48) + 'px';
+    // A message pops up above the panel, never over it.
+    root.style.setProperty('--job-room', (box.offsetHeight + 12) + 'px');
   }
 
   function getJob() {
@@ -194,6 +245,7 @@
     setBusy(true);
     return post(path, body).then(function (started) {
       job = started.job;
+      linesOpen = null;
       renderJob();
       return follow();
     }).then(function (done) {
@@ -255,6 +307,8 @@
     byId('viewTitle').textContent = view.title;
     document.title = (id === 'dashboard' ? '' : view.title + ' - ') + 'Kryptheon';
     if (state) renderSide();
+    // Its "See findings" goes once Findings is the page on screen.
+    if (job && !job.running) renderJob();
     window.scrollTo(0, 0);
   }
   window.addEventListener('hashchange', showView);
@@ -528,7 +582,7 @@
       if (!connection) { toast('Paste your connection string in "Connect your database" first.'); dbInput.focus(); return; }
       runJob('/api/db', { action: 'night', connection: connection }).then(function (done) {
         var r = done && done.result;
-        toast(r && r.ok ? 'Read back - see the lines above and Findings' : 'Nothing to read back' + (r && r.why ? ' - ' + r.why : ''));
+        toast(r && r.ok ? 'Read back - see Findings' : 'Nothing to read back' + (r && r.why ? ' - ' + r.why : ''));
       }, function () {});
     });
     see.setAttribute('data-action', 'db');
@@ -724,6 +778,28 @@
       if (lastRecheck.newProblems.length) gone.appendChild(el('span', 'tag ember', plural(lastRecheck.newProblems.length, 'problem') + ' newly broken - marked below'));
       body.appendChild(gone);
     }
+    // Every fix in one paste, with the rules that keep the AI from breaking
+    // something else - whatever the filter shows, it is all of them.
+    if (state.allFixPrompt) {
+      var many = state.findings.filter(function (f) { return f.fixPrompt; }).length;
+      var all = el('div', 'fix-all');
+      var words = el('div', 'fix-all-words');
+      words.appendChild(el('b', null, 'Fix all ' + many + ' at once'));
+      words.appendChild(el('span', null, 'One prompt with every fix, and rules that stop your AI from changing anything else. Then Re-check each one.'));
+      all.appendChild(words);
+      all.appendChild(button('sun', 'copy', 'Copy one prompt for all', function () {
+        copy(state.allFixPrompt, 'One prompt for all ' + many + ' copied - paste it into your AI tool');
+      }));
+      // To read before pasting, or to select by hand. It stays open across
+      // the page's own refresh every few seconds.
+      var whole = el('details', 'fix-all-text');
+      whole.open = allPromptOpen;
+      whole.addEventListener('toggle', function () { allPromptOpen = whole.open; });
+      whole.appendChild(el('summary', null, 'See the prompt'));
+      whole.appendChild(el('pre', null, state.allFixPrompt));
+      all.appendChild(whole);
+      body.appendChild(all);
+    }
     if (!shown.length) {
       body.appendChild(el('p', 'empty', state.findings.length ? 'Nothing matches.' : 'Nothing found by the checks that are on and have run. That is not the same as nothing wrong - see which checks are not built yet.'));
       return;
@@ -1012,6 +1088,7 @@
     return getJob().then(function (now) {
       if (!now || !now.running) return;
       job = now;
+      linesOpen = null;
       setBusy(true);
       renderJob();
       return follow().then(function () { setBusy(false); return load(); });

package/kryptheon-dashboard.html

@@ -265,14 +265,22 @@
   @media (max-width: 600px) { .files div { grid-template-columns: minmax(0, 1fr); gap: 2px; } }
 
   /* --- a run in progress, and what it said ---------------------------------- */
-  .job { margin: 0 0 28px; padding: 16px 18px 18px; color: var(--on-dark); background: var(--ink); border-left: 3px solid var(--orange); }
+  /* Pinned to the corner of the window, so it is seen from wherever the button
+     was pressed - never at the top of a page scrolled away from. */
+  .job { position: fixed; right: 24px; bottom: 24px; z-index: 9; display: flex; flex-direction: column; width: min(520px, calc(100vw - 48px)); max-height: calc(100vh - 48px); padding: 16px 18px 18px; color: var(--on-dark); background: var(--ink); border-left: 3px solid var(--orange); box-shadow: 0 18px 50px rgba(11, 14, 20, 0.35); animation: job-in 0.35s var(--ease); }
+  .job[hidden] { display: none; }
   .job.ok { border-left-color: var(--on-dark); }
+  @keyframes job-in { from { opacity: 0; transform: translateY(16px); } }
+  @media (max-width: 600px) { .job { right: 16px; bottom: 16px; width: calc(100vw - 32px); } }
   .job-head { display: flex; align-items: center; gap: 12px; flex-wrap: wrap; }
   .job-head b { font-weight: 800; font-stretch: 74%; font-size: 1.1rem; text-transform: uppercase; overflow-wrap: anywhere; }
   .job-head .tag { color: var(--on-dark); border-color: var(--line-dark); }
   .job-close { margin-left: auto; padding: 4px 10px; font: 10px var(--mono); letter-spacing: 0.12em; text-transform: uppercase; border: 1px solid var(--line-dark); }
-  .job-lines { max-height: 260px; margin: 12px 0 0; overflow: auto; font: 12px/1.6 var(--mono); white-space: pre-wrap; overflow-wrap: anywhere; opacity: 0.85; }
+  .job-lines { min-height: 0; max-height: 220px; margin: 12px 0 0; overflow: auto; font: 12px/1.6 var(--mono); white-space: pre-wrap; overflow-wrap: anywhere; opacity: 0.85; }
   .job-result { margin-top: 12px; font-weight: 700; }
+  .job-acts { display: flex; flex-wrap: wrap; gap: 10px; margin-top: 12px; }
+  .job-acts button { padding: 6px 12px; font: 10px var(--mono); letter-spacing: 0.12em; text-transform: uppercase; color: var(--on-dark); border: 1px solid var(--line-dark); }
+  .job-acts button.go { color: var(--ink); background: var(--on-dark); border-color: var(--on-dark); }
   .job .fallback { color: rgba(233, 237, 242, 0.6); }
 
   /* --- boxes to type into, the words around them, and the yes -------------- */
@@ -293,9 +301,15 @@
   .fallback { font: 10.5px/1.4 var(--mono); color: var(--muted); overflow-wrap: anywhere; }
   .tag.when { color: var(--on-light); border-style: dotted; }
   .f-quick { display: flex; flex-wrap: wrap; align-items: flex-start; gap: 10px; padding: 0 8px 16px 20px; margin-top: -6px; }
+  .fix-all { display: flex; flex-wrap: wrap; align-items: center; gap: 14px 20px; padding: 16px 8px 16px 20px; border-bottom: 1px solid var(--line); box-shadow: inset 3px 0 0 var(--orange); }
+  .fix-all-words { flex: 1 1 260px; display: grid; gap: 4px; font-size: 14px; }
+  .fix-all-words b { font-weight: 800; font-stretch: 74%; font-size: 1.05rem; text-transform: uppercase; }
+  .fix-all-text { flex: 1 1 100%; min-width: 0; }
+  .fix-all-text summary { width: max-content; font: 11px var(--mono); letter-spacing: 0.12em; text-transform: uppercase; cursor: pointer; opacity: 0.75; }
+  .fix-all-text pre { max-height: 320px; margin: 10px 0 0; padding: 14px 16px; overflow: auto; font: 12px/1.6 var(--mono); white-space: pre-wrap; overflow-wrap: anywhere; border: 1px solid var(--line); }
   .rechecked { display: flex; flex-wrap: wrap; align-items: center; gap: 10px; padding: 14px 8px 14px 20px; font-size: 14px; border-bottom: 1px solid var(--line); box-shadow: inset 3px 0 0 var(--on-light); }
 
-  .toast { position: fixed; left: 50%; bottom: 24px; z-index: 10; max-width: calc(100vw - 32px); padding: 14px 20px; font-size: 14px; color: var(--on-dark); background: var(--ink); border-left: 2px solid var(--orange); opacity: 0; transform: translate(-50%, 20px); transition: opacity 0.35s var(--ease), transform 0.35s var(--ease); pointer-events: none; }
+  .toast { position: fixed; left: 50%; bottom: calc(24px + var(--job-room, 0px)); z-index: 10; max-width: calc(100vw - 32px); padding: 14px 20px; font-size: 14px; color: var(--on-dark); background: var(--ink); border-left: 2px solid var(--orange); opacity: 0; transform: translate(-50%, 20px); transition: opacity 0.35s var(--ease), transform 0.35s var(--ease); pointer-events: none; }
   .toast.show { opacity: 1; transform: translate(-50%, 0); }
 
   @media (prefers-reduced-motion: reduce) {

package/kryptheon-dashboard.js

@@ -284,6 +284,44 @@ function nextAction(findings, steps) {
   return { kind: 'quiet', title: 'Nothing open' };
 }
 
+/**
+ * One prompt that fixes every open finding at once, for pasting into an AI
+ * tool, or '' when fewer than two findings have a prompt (one is its own).
+ * Each finding's own prompt goes in as it is, in the order the page shows
+ * them, most severe first. Around them are the rules that keep a fix from
+ * breaking something else: only what is listed, the smallest change, one at
+ * a time with the app checked between, nothing weakened to make a finding go
+ * away, ask rather than guess. The re-checks come once, at the end.
+ *
+ * items: [{ id, severity, headline, where, prompt }] - prompt without its
+ * re-check line.
+ */
+function combinedPrompt(items) {
+  const withPrompt = items.filter((f) => f.prompt);
+  if (withPrompt.length < 2) return '';
+  const n = withPrompt.length;
+  const lines = [
+    'Kryptheon checked this project and found ' + n + ' problems. Fix all ' + n + ', carefully - not breaking anything matters more than speed.',
+    '',
+    'Rules for every fix:',
+    '1. Fix only the problems listed below. Do not refactor, rename, reformat or "improve" anything else, and do not touch a file a fix does not need.',
+    '2. Make the smallest change that fixes each one. Every feature must keep working exactly as it does now for the people meant to use it.',
+    '3. Never delete or weaken a check, test, validation or security rule to make a problem go away, and never delete or rewrite existing data.',
+    '4. Do them one at a time, in the order below. After each one, make sure the app still builds and its existing tests still pass before starting the next.',
+    '5. If a fix needs a decision only I can make, or you are not sure a change is safe, stop and ask me instead of guessing.',
+    '6. When you are done, list every file you changed and why, one line each.',
+  ];
+  withPrompt.forEach((f, i) => {
+    lines.push('', '======== Problem ' + (i + 1) + ' of ' + n + ' - ' + f.severity + ': ' + f.headline + (f.where ? '  (' + f.where + ')' : ''), '', f.prompt.trim());
+  });
+  lines.push('', '======== When all ' + n + ' are fixed',
+    '',
+    'Prove each fix: run these one at a time (or press Re-check on each finding in the Kryptheon dashboard). A fix counts only when it says FIXED, and a re-check also says if anything else newly broke - if it does, fix that before anything else.',
+    '');
+  withPrompt.forEach((f) => lines.push('  npx kryptheon recheck ' + f.id));
+  return lines.join('\n');
+}
+
 /**
  * One sentence about the nightly run inside the database, or null when
  * kryptheon-night has never been asked. Its four states are four different
@@ -433,9 +471,11 @@ function buildState(root, env) {
   // prove the fix. Added here, where the loop lives, so every check's prompt
   // ends the same way and the detection code itself stays untouched.
   const attempts = readHistory(paths.fixes, 500);
+  const forAll = [];
   for (const f of findings) {
     f.id = changes.findingId(f);
     f.attempts = attempts.filter((a) => a.id === f.id).map((a) => ({ at: a.at, verdict: a.verdict, why: a.why || '', newProblems: (a.newProblems || []).length }));
+    forAll.push({ id: f.id, severity: f.severity, headline: f.headline, where: f.where, prompt: f.fixPrompt || '' });
     if (f.fixPrompt) {
       f.fixPrompt += '\n\nWhen you have fixed it, prove it: run  npx kryptheon recheck ' + f.id +
         '  (or press Re-check on this finding in the Kryptheon dashboard). It is fixed only when that says FIXED.';
@@ -497,6 +537,7 @@ function buildState(root, env) {
     proven: proven,
     checks: checks,
     findings: findings,
+    allFixPrompt: combinedPrompt(forAll),
     runs: history.slice().reverse().map((r) => ({ runAt: r.runAt, status: r.status, passed: r.passed, failed: r.failed, durationMs: r.durationMs })),
     recordings: recordings,
     steps: steps,
@@ -858,6 +899,7 @@ module.exports = {
   databaseVerdict: databaseVerdict,
   startSteps: startSteps,
   nextAction: nextAction,
+  combinedPrompt: combinedPrompt,
   readConfig: readConfig,
   setCheck: setCheck,
   createServer: createServer,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kryptheon",
-  "version": "0.1.31",
+  "version": "0.1.32",
   "description": "Record what you do in your app and get plain-language reports when it breaks.",
   "license": "MIT",
   "type": "commonjs",