penthera 1.6.0 → 1.7.0

package/src/ui/static/js/views/findings.js

@@ -1,165 +0,0 @@
-import { h, put, panel, clear, empty, sevBadge, diffBlock, announce } from "../dom.js";
-import { SEVERITIES, ago, shortProject } from "../format.js";
-import { SCREENS, EMPTY } from "../copy.js";
-
-export async function render(root, { api, params, go }) {
-  const { findings } = await api.get("/api/findings");
-  const projects = [...new Set(findings.map((f) => f.project))].sort();
-  const state = {
-    q: params.get("q") || "",
-    sev: new Set(SEVERITIES.filter((x) => x !== "info")),
-    project: params.get("project") || "",
-    suppressed: false,
-    selected: params.get("id") ? `${params.get("project")}|${params.get("id")}` : null,
-  };
-
-  const search = h("input", { type: "search", class: "search", placeholder: "filter  (press /)", "aria-label": "Filter findings", value: state.q });
-  const projectSel = h("select", { "aria-label": "Project" },
-    h("option", { value: "" }, `All projects (${projects.length})`),
-    projects.map((p) => h("option", { value: p, selected: p === state.project }, shortProject(p))),
-  );
-  const toggles = SEVERITIES.map((sev) => h("button", {
-    type: "button", class: `toggle sev-${sev}`, "aria-pressed": String(state.sev.has(sev)),
-    onclick: (e) => {
-      if (state.sev.has(sev)) state.sev.delete(sev); else state.sev.add(sev);
-      e.currentTarget.setAttribute("aria-pressed", String(state.sev.has(sev)));
-      draw();
-    },
-  }, sev));
-  const supp = h("input", { type: "checkbox", id: "f-supp" });
-  const count = h("span", { class: "muted", "aria-live": "polite" });
-  const tbody = h("tbody");
-  const detail = h("div", { class: "detail" });
-
-  put(root, 
-    h("h1", {}, SCREENS.findings.title),
-    h("p", { class: "lede" }, SCREENS.findings.lede),
-    h("div", { class: "filters", role: "search" }, search, projectSel, h("div", { class: "filters", role: "group", "aria-label": "Severity" }, toggles),
-      h("label", { class: "check", for: "f-supp" }, supp, "suppressed"), count),
-    h("div", { class: "split" },
-      panel("Findings", {}, h("div", { class: "table-wrap" }, h("table", {},
-        h("thead", {}, h("tr", {}, h("th", {}, "Sev"), h("th", {}, "Finding"), h("th", { class: "hide-narrow" }, "Project"), h("th", { class: "hide-narrow" }, "Category"))),
-        tbody,
-      ))),
-      detail,
-    ),
-  );
-
-  let visible = [];
-  const keyOf = (f) => `${f.project}|${f.id}`;
-
-  function draw() {
-    const q = state.q.trim().toLowerCase();
-    visible = findings.filter((f) => state.sev.has(f.severity)
-      && (!state.project || f.project === state.project)
-      && (state.suppressed || !f.suppressed)
-      && (!q || `${f.title} ${f.category} ${f.location} ${f.source}`.toLowerCase().includes(q)));
-    clear(tbody);
-    let group = null;
-    for (const f of visible) {
-      if (f.severity !== group) {
-        group = f.severity;
-        const n = visible.filter((x) => x.severity === group).length;
-        put(tbody, h("tr", { class: "group" }, h("td", { colspan: "4" }, `${group} :: ${n}`)));
-      }
-      const tr = h("tr", { class: keyOf(f) === state.selected ? "sel" : null, dataset: { key: keyOf(f) } },
-        h("td", {}, sevBadge(f.severity)),
-        h("td", {},
-          h("button", { type: "button", class: "row-btn", onclick: () => select(f) }, f.title),
-          h("span", { class: "faint" }, f.location ? `${f.location}` : ""),
-          f.suppressed ? h("span", { class: "chip" }, " suppressed") : null),
-        h("td", { class: "hide-narrow muted trunc", title: f.project }, shortProject(f.project)),
-        h("td", { class: "hide-narrow muted" }, f.category || "-"),
-      );
-      put(tbody, tr);
-    }
-    if (!visible.length) {
-      const hidden = [state.q.trim() ? "the text filter" : null, state.project ? "the project filter" : null, state.sev.size < SEVERITIES.length ? "the severity toggles" : null].filter(Boolean).join(", ");
-      put(tbody, h("tr", {}, h("td", { colspan: "4" }, empty(findings.length ? EMPTY.findingsFiltered(hidden || "the filters") : EMPTY.findingsNone))));
-    }
-    count.textContent = `${visible.length} of ${findings.length}`;
-  }
-
-  let detailSeq = 0;
-  async function select(f, { focus = false } = {}) {
-    state.selected = keyOf(f);
-    for (const tr of tbody.querySelectorAll("tr")) tr.classList.toggle("sel", tr.dataset.key === state.selected);
-    const seq = ++detailSeq;
-    clear(detail).append(panel("Detail", {}, h("p", { class: "muted" }, "Reading evidence…")));
-    let d;
-    try {
-      d = await api.get(`/api/findings/${f.id}?project=${encodeURIComponent(f.project)}`);
-    } catch (e) {
-      if (seq === detailSeq) clear(detail).append(panel("Detail", {}, h("p", { class: "error" }, e.message)));
-      return;
-    }
-    if (seq !== detailSeq) return;
-    clear(detail).append(renderDetail(d, f, go));
-    announce(`Showing ${f.severity} finding: ${f.title}`);
-    if (focus) detail.querySelector("h2")?.focus();
-  }
-
-  search.addEventListener("input", () => { state.q = search.value; draw(); });
-  projectSel.addEventListener("change", () => { state.project = projectSel.value; draw(); });
-  supp.addEventListener("change", () => { state.suppressed = supp.checked; draw(); });
-
-  const onKey = (e) => {
-    if (e.metaKey || e.ctrlKey || e.altKey) return;
-    const typing = /^(INPUT|SELECT|TEXTAREA)$/.test(document.activeElement?.tagName || "");
-    if (e.key === "/" && !typing) { e.preventDefault(); search.focus(); return; }
-    if (e.key === "Escape" && document.activeElement === search) { search.blur(); return; }
-    if (typing || !visible.length) return;
-    if (e.key === "j" || e.key === "k") {
-      e.preventDefault();
-      const i = visible.findIndex((f) => keyOf(f) === state.selected);
-      const next = visible[Math.max(0, Math.min(visible.length - 1, i < 0 ? 0 : i + (e.key === "j" ? 1 : -1)))];
-      select(next);
-      tbody.querySelector(`tr.sel button`)?.focus();
-    }
-  };
-  document.addEventListener("keydown", onKey);
-
-  draw();
-  const first = state.selected ? visible.find((f) => keyOf(f) === state.selected) : visible[0];
-  if (first) select(first);
-  else put(detail, panel("Detail", {}, empty("Select a finding.")));
-
-  return () => document.removeEventListener("keydown", onKey);
-}
-
-function renderDetail(d, f, go) {
-  const section = (label, ...body) => h("section", {}, h("div", { class: "label" }, label), ...body);
-  const repo = f.project.startsWith("/") ? f.project : null;
-  const x = d.explain || {};
-  return panel("Detail", {},
-    h("div", {}, sevBadge(d.severity), " ", h("span", { class: "chip" }, d.confidence || "unrated"), " ", d.category ? h("span", { class: "chip" }, d.category) : null),
-    h("h2", { tabindex: "-1" }, d.title),
-    h("dl", { class: "kv" },
-      h("dt", {}, "where"), h("dd", {}, d.location || "-"),
-      h("dt", {}, "project"), h("dd", {}, f.project),
-      h("dt", {}, "source"), h("dd", {}, d.source || "-"),
-      h("dt", {}, "seen"), h("dd", {}, ago(f.seen)),
-      h("dt", {}, "id"), h("dd", { class: "faint" }, d.id),
-    ),
-    h("div", { class: "plain", "aria-label": "In plain words" },
-      h("p", {}, h("span", { class: "strong" }, "In plain words :: "), (x.plainSeverity || d.severity) === "note" ? "a note, not a problem." : `a ${x.plainSeverity || d.severity} problem${d.category ? ` with ${d.category.replace(/-/g, " ")}` : ""}.`),
-      x.confidenceMeaning ? h("p", {}, h("span", { class: "strong" }, `How sure (${x.confidence}) :: `), x.confidenceMeaning) : null,
-      x.fixText ? h("p", {}, h("span", { class: "strong" }, "What to do :: "), x.fixText) : null,
-      x.owasp?.length ? h("p", { class: "muted" }, `Maps to ${x.owasp.join(" · ")}`) : null,
-    ),
-    d.description ? section("What we saw", h("p", {}, d.description)) : null,
-    d.evidence ? section("Evidence", h("pre", { class: "block" }, d.evidence)) : null,
-    d.request ? section("Request", h("pre", { class: "block" }, d.request)) : null,
-    d.response ? section("Response", h("pre", { class: "block" }, d.response)) : null,
-    d.remediation ? section("How to fix", h("p", {}, d.remediation)) : null,
-    d.suppression ? section("Suppressed", h("p", { class: "muted" }, `${d.suppression.reason} (${d.suppression.source})`)) : null,
-    d.sources?.length ? section("Sources", h("ul", { class: "list" }, d.sources.map((s) => h("li", {}, h("span", { class: "faint" }, "↗"), h("a", { href: s.url, target: "_blank", rel: "noopener noreferrer" }, s.cite))))) : null,
-    d.fix
-      ? section("Fix recipe",
-        h("p", {}, h("span", { class: "ok" }, d.fix.recipe), ` :: ${d.fix.title} `, h("span", { class: "chip" }, `confidence ${d.fix.confidence}`)),
-        h("p", { class: "faint" }, `files: ${d.fix.files.join(", ")}`),
-        diffBlock(d.fix.diff),
-        repo ? h("p", {}, h("button", { type: "button", class: "btn", onclick: () => go("run", { kind: "loop", repo }) }, "Fix it with the agent ▸")) : null)
-      : section("Fix recipe", h("p", { class: "muted" }, "No recipe matches this finding. Fix it by hand, or run the loop with a local model (--fix-model) from the CLI.")),
-  );
-}

package/src/ui/static/js/views/history.js

@@ -1,92 +0,0 @@
-import { h, put, panel, clear, empty, sevBadge, fig, whatNext } from "../dom.js";
-import { trendChart, ganttChart } from "../charts.js";
-import { stamp, ago, shortProject } from "../format.js";
-import { SCREENS, EMPTY } from "../copy.js";
-
-export async function render(root, { api, params, go }) {
-  const o = await api.get("/api/overview");
-  put(root, h("h1", {}, SCREENS.history.title), h("p", { class: "lede" }, SCREENS.history.lede));
-  if (!o.projects.length) { put(root, h("div", { class: "notice" }, empty(EMPTY.history))); return; }
-
-  const keys = o.projects.map((p) => p.key);
-  // Default to the project whose last two scans differ most: that is the interesting comparison.
-  const delta = (p) => (p.trend.length > 1 ? Math.abs(p.trend[p.trend.length - 1].total - p.trend[p.trend.length - 2].total) + 0.5 : 0);
-  let project = keys.includes(params.get("project")) ? params.get("project") : [...o.projects].sort((x, y) => delta(y) - delta(x))[0].key;
-  const projSel = h("select", { "aria-label": "Project" }, keys.map((k) => h("option", { value: k, selected: k === project }, shortProject(k))));
-  const aSel = h("select", { "aria-label": "Before" });
-  const bSel = h("select", { "aria-label": "After" });
-  const body = h("div");
-  put(root, 
-    h("div", { class: "filters" },
-      h("label", { class: "field" }, h("span", {}, "Project"), projSel),
-      h("label", { class: "field" }, h("span", {}, "Before"), aSel),
-      h("label", { class: "field" }, h("span", {}, "After"), bSel),
-    ),
-    body,
-  );
-
-  let seq = 0;
-  async function load(a = null, b = null) {
-    const n = ++seq;
-    const q = new URLSearchParams({ project });
-    if (a != null) q.set("a", a);
-    if (b != null) q.set("b", b);
-    let hst;
-    try { hst = await api.get(`/api/history?${q}`); } catch (e) { clear(body).append(h("p", { class: "error" }, e.message)); return; }
-    if (n !== seq) return;
-    const opts = (sel, cur) => clear(sel).append(...hst.scans.map((sc) => h("option", { value: String(sc.i), selected: sc.i === cur.i }, `#${sc.i + 1} · ${stamp(sc.ts).slice(5)} · ${sc.open} open`)));
-    opts(aSel, hst.a);
-    opts(bSel, hst.b);
-    const one = hst.scans.length < 2;
-    clear(body).append(
-      one ? h("p", { class: "notice" }, EMPTY.history) : null,
-      h("div", { class: "strip" },
-        cell("Before", String(hst.a.open), `${stamp(hst.a.ts)} :: ${ago(hst.a.ts)}`),
-        cell("After", String(hst.b.open), `${stamp(hst.b.ts)} :: ${ago(hst.b.ts)}`),
-        cell("New", String(hst.new.length), "in after, not in before"),
-        cell("Fixed", String(hst.fixed.length), "in before, gone after", "ok"),
-      ),
-      panel(`Between scan ${hst.a.i + 1} and scan ${hst.b.i + 1}`, { meta: `${stamp(hst.b.ts)}` },
-        h("div", { class: "cols" },
-          col(`New · ${hst.new.length}`, hst.new, "Nothing new."),
-          col(`Fixed · ${hst.fixed.length}`, hst.fixed, "Nothing fixed between these two scans."),
-          col(`Still open · ${hst.still.length}`, hst.still, "Nothing carried over."),
-        )),
-      h("div", { class: "grid stack" }, panel("Timeline", { class: "span-12", meta: `${hst.lifetimes.filter((l) => l.open).length} open · ${hst.lifetimes.filter((l) => !l.open).length} fixed` },
-        h("div", { class: "table-wrap" }, ganttChart(hst.lifetimes, hst.scans)),
-        h("div", { class: "legend" },
-          h("span", {}, "▨ open, up to now"), h("span", {}, "█ open and critical"), h("span", {}, "□ fixed: first seen to last seen"), h("span", {}, "┊ a scan"),
-        ),
-        fig(`fig 1 :: every finding of ${shortProject(project)} across ${hst.scans.length} scans`, "from the reports folder"),
-      ),
-      panel("Open findings per scan", { class: "span-12", meta: `${hst.scans.length} scans` },
-        trendChart(hst.scans.map((sc) => ({ ts: sc.ts, total: sc.open, severe: sc.counts.critical + sc.counts.high })), { width: 1100, height: 200 }),
-        fig(`fig 2 :: ${shortProject(project)}, every scan in the reports folder`, `${hst.scans.length} scans`),
-      )),
-      whatNext([
-        { label: "Read what is still open", go: ["findings", { project }] },
-        { label: "Fix it with the agent", why: "then compare again", go: ["run", { kind: "loop", repo: project.startsWith("/") ? project : "" }] },
-        { label: "Create evidence for an auditor", go: ["evidence"] },
-      ], go),
-    );
-  }
-
-  projSel.addEventListener("change", () => { project = projSel.value; load(); });
-  aSel.addEventListener("change", () => load(Number(aSel.value), Number(bSel.value)));
-  bSel.addEventListener("change", () => load(Number(aSel.value), Number(bSel.value)));
-  await load();
-
-  function col(title, rows, none) {
-    return h("div", {}, h("h3", {}, title),
-      rows.length ? h("ul", { class: "rows" }, rows.map((r) => h("li", {}, h("span", { class: "code" }, r.severity.slice(0, 1).toUpperCase() + "+"), h("span", { class: ["t", r.severity === "critical" || r.severity === "high" ? "b" : null] }, r.title)))) : empty(none));
-  }
-
-  function list(title, rows, none) {
-    return panel(`${title} (${rows.length})`, {},
-      rows.length ? h("ul", { class: "list" }, rows.map((r) => h("li", {}, sevBadge(r.severity), h("span", { class: "grow t1" }, r.title)))) : empty(none));
-  }
-}
-
-function cell(label, value, sub, cls) {
-  return h("div", { class: "cell" }, h("span", { class: "label" }, label), h("div", { class: ["big", cls] }, value), h("div", { class: "sub" }, sub));
-}

package/src/ui/static/js/views/overview.js

@@ -1,184 +0,0 @@
-import { h, put, panel, empty, subwin, whatNext, fig } from "../dom.js";
-import { severityBars, stackedBar, sparkline, trendChart, columns, wordmark } from "../charts.js";
-import { ago, duration, shortProject, SEVERITIES, plural } from "../format.js";
-import { SCREENS, START, NEXT, TAGLINE } from "../copy.js";
-
-/** Merge per-project trends into one series by scan index from the end. */
-function combinedTrend(projects) {
-  const len = Math.max(0, ...projects.map((p) => p.trend.length));
-  const out = [];
-  for (let i = 0; i < len; i++) {
-    let total = 0;
-    let severe = 0;
-    let ts = null;
-    for (const p of projects) {
-      const t = p.trend[p.trend.length - len + i] || p.trend[0];
-      if (!t) continue;
-      total += t.total;
-      severe += (t.critical || 0) + (t.high || 0);
-      if (!ts || t.ts > ts) ts = t.ts;
-    }
-    out.push({ ts, total, severe });
-  }
-  return out;
-}
-
-function about(meta, o) {
-  const facts = o.projects.length
-    ? [["projects", String(o.projects.length)], ["open", String(o.open)], ["fixed", String(o.fixed)], ["network", "none"]]
-    : [["projects", "0"], ["network", "none"], ["telemetry", "none"]];
-  return subwin("About penthera", { class: "about" },
-    h("div", { class: "subwin-body" },
-      wordmark(),
-      h("p", { class: "sr" }, "Penthera"),
-      h("div", { class: "tagline" }, TAGLINE),
-      h("div", { class: "facts" },
-        h("span", {}, `v${meta.version}`),
-        facts.map(([k, v]) => h("span", {}, `${k} `, h("b", {}, v))),
-        h("span", {}, meta.demo ? "demo data" : "reports from this machine"),
-      ),
-    ));
-}
-
-function startHere(meta, go) {
-  const folder = meta.projects?.[0] || "";
-  return h("section", { class: "steps", "aria-labelledby": "start-h" },
-    h("div", {},
-      h("h1", { id: "start-h" }, START.welcome),
-      h("p", { class: "lede" }, START.intro),
-      h("p", { class: "muted" }, START.gate),
-    ),
-    START.steps.map((st, i) => h("div", { class: "step" },
-      h("h3", {}, h("span", { class: "n" }, `Step ${i + 1}`), st.title),
-      h("p", { class: "muted" }, st.body),
-      h("button", { type: "button", class: i === 0 ? "btn primary" : "btn", onclick: () => go("run", { kind: st.kind, repo: folder }) }, `${st.action} ▸`),
-    )),
-    h("p", { class: "muted" }, `${START.demo} `, h("code", {}, "penthera ui --demo"), "."),
-  );
-}
-
-export async function render(root, { api, go, meta }) {
-  const o = await api.get("/api/overview");
-  put(root, about(meta, o));
-
-  if (!o.projects.length) {
-    put(root, startHere(meta, go));
-    return;
-  }
-
-  const total = SEVERITIES.reduce((n, s) => n + o.mix[s], 0);
-  const severe = o.mix.critical + o.mix.high;
-  put(root, 
-    h("h1", {}, SCREENS.overview.title),
-    h("p", { class: "lede" }, SCREENS.overview.lede),
-    h("div", { class: "strip" },
-      cell("Open findings", String(o.open), `${severe} critical or high`),
-      cell("Fixed", String(o.fixed), "gone in a later scan, or verified by the loop", "ok"),
-      cell("Median time to fix", o.timeToFix.medianDays == null ? "-" : String(o.timeToFix.medianDays), plural(o.timeToFix.samples, "fix measured", "fixes measured"), null, o.timeToFix.medianDays == null ? null : "days"),
-      cell("Hosts contacted", String(o.egress.hosts.length), `${o.egress.blocked.length} blocked by offline mode`),
-    ),
-  );
-
-  const c = o.columns;
-  const rowsOf = (list, none) => (list.length
-    ? h("ul", { class: "rows" }, list.slice(0, 8).map((r) => h("li", {},
-      h("span", { class: "code" }, `${r.severity.slice(0, 1).toUpperCase()}+`),
-      h("button", { type: "button", class: ["row-btn", "t", r.severity === "critical" || r.severity === "high" ? "b" : null], onclick: () => go("findings", { project: r.project, id: r.id }) },
-        r.title, h("span", { class: "where" }, ` · ${shortProject(r.project)}`)))))
-    : empty(none));
-  put(root, panel("This week", { class: "week", meta: new Date().toLocaleDateString("en-GB", { day: "numeric", month: "long", year: "numeric" }) },
-    h("div", { class: "cols" },
-      h("div", {}, h("h3", {}, `Fix first · ${c.fixFirst.length}`), rowsOf(c.fixFirst, "Nothing critical or high. Good.")),
-      h("div", {}, h("h3", {}, `New since the last scan · ${c.newest.length}`), rowsOf(c.newest, "Nothing new since the last scan.")),
-      h("div", {}, h("h3", {}, `Fixed since the last scan · ${c.fixed.length}`), rowsOf(c.fixed, "Nothing fixed since the last scan yet.")),
-    )));
-
-  const grid = h("div", { class: "grid" });
-  put(root, grid);
-
-  const rows = o.projects.map((p) => h("tr", {},
-    h("td", {}, h("span", { class: `grade grade-${p.grade}`, title: `score ${p.score}/100` }, p.grade)),
-    h("td", {},
-      h("button", { class: "row-btn trunc", type: "button", title: p.key, onclick: () => go("findings", { project: p.key }) }, shortProject(p.key)),
-      h("span", { class: "faint" }, p.mode || "")),
-    h("td", { class: "hide-narrow" }, stackedBar(p.counts, { width: 14 })),
-    h("td", {}, sparkline(p.trend.map((t) => t.total), { label: `open findings, ${shortProject(p.key)}` })),
-    h("td", { class: "num t1" }, String(p.open)),
-    h("td", { class: "num ok" }, String(p.fixed)),
-    h("td", { class: "num muted hide-narrow" }, h("button", { type: "button", class: "row-btn", onclick: () => go("history", { project: p.key }) }, ago(p.lastScan))),
-  ));
-  put(grid, panel("Posture per project", { class: "span-12", meta: plural(o.projects.length, "project") },
-    h("div", { class: "table-wrap" }, h("table", {},
-      h("thead", {}, h("tr", {}, ...["Grade", "Project", "Severity", "Trend", "Open", "Fixed", "Last scan"].map((t, i) => h("th", { class: [i === 4 || i === 5 || i === 6 ? "num" : null, i === 2 || i === 6 ? "hide-narrow" : null] }, t)))),
-      h("tbody", {}, rows),
-    )),
-    fig("fig 1 :: grade = 100 − 30/critical − 15/high − 5/medium − 1/low; any critical is an F", `${o.projects.length} projects`),
-  ));
-
-  put(grid, panel("Severity mix", { class: "span-5", meta: `${total} findings` },
-    stackedBar(o.mix, { width: 34 }),
-    severityBars(o.mix, { width: 18 }),
-    fig("fig 2 :: latest report per project", `${total} findings`),
-  ));
-
-  put(grid, panel("Findings over time", { class: "span-7", meta: "by scan" },
-    trendChart(combinedTrend(o.projects)),
-    h("div", { class: "legend" },
-      h("span", {}, h("span", { class: "sw" }), "open (critical to low)"),
-      h("span", {}, h("span", { class: "sw sw-severe" }), "critical + high"),
-    ),
-    fig("fig 3 :: summed across projects, by scan", "from reports + memory"),
-  ));
-
-  put(grid, panel("Time to fix", { class: "span-4", meta: o.timeToFix.medianDays == null ? "no data" : `median ${o.timeToFix.medianDays}d` },
-    columns(o.timeToFix.buckets, { label: "Fixes by time to fix" }),
-    fig("fig 4 :: first seen to gone", `${o.timeToFix.samples} fixes`),
-  ));
-
-  put(grid, panel("Hosts contacted", { class: "span-4", meta: `${o.egress.hosts.length} hosts` },
-    o.egress.hosts.length
-      ? h("ul", { class: "list" }, o.egress.hosts.map((x) => h("li", {},
-        h("span", { class: x.thirdParty ? "t1" : "ok" }, x.thirdParty ? "3P" : "OK"),
-        h("span", { class: "grow trunc t1", title: x.host }, x.host),
-        h("span", { class: "num muted" }, String(x.requests)),
-      )))
-      : empty("No requests recorded."),
-    o.egress.blocked.length ? h("div", {},
-      h("p", { class: "label" }, "Blocked (offline)"),
-      h("ul", { class: "list" }, o.egress.blocked.map((x) => h("li", {}, h("span", { class: "muted" }, "--"), h("span", { class: "grow trunc" }, x.host), h("span", { class: "num muted" }, String(x.requests))))),
-    ) : null,
-    fig("fig 5 :: latest scan per project", "3P = third party"),
-  ));
-
-  put(grid, panel("Last scans", { class: "span-4", meta: `${o.lastScans.length} newest` },
-    h("ul", { class: "list" }, o.lastScans.map((sc) => h("li", {},
-      h("span", { class: "muted" }, ago(sc.ts).padStart(7)),
-      h("span", { class: "grow trunc t1", title: sc.target }, shortProject(sc.target)),
-      worst(sc.counts),
-      h("span", { class: "num muted hide-narrow" }, duration(sc.durationMs)),
-    ))),
-  ));
-
-  if (o.loops.length) {
-    put(grid, panel("Agent loop runs", { class: "span-12", meta: plural(o.loops.length, "run") },
-      h("ul", { class: "list" }, o.loops.map((l) => h("li", {},
-        h("span", { class: "muted" }, ago(l.startedAt)),
-        h("span", { class: "grow t1" }, `${shortProject(l.target.repo)} :: ${l.findings.initial ?? "?"} → ${l.findings.final ?? "?"} findings`),
-        h("span", { class: "ok" }, `${l.totals.verified} verified`),
-        l.totals.failed ? h("span", { class: "bad" }, `${l.totals.failed} reverted`) : null,
-        h("span", { class: "muted hide-narrow" }, l.branch || ""),
-      ))),
-    ));
-  }
-
-  put(root, whatNext(NEXT.overview, go));
-}
-
-function worst(c) {
-  const sev = SEVERITIES.find((k) => c[k] > 0);
-  return sev ? h("span", { class: `sev sev-${sev}` }, `${c[sev]} ${sev}`) : h("span", { class: "ok" }, "clean");
-}
-
-function cell(label, value, sub, cls, unit) {
-  return h("div", { class: "cell" }, h("span", { class: "label" }, label), h("div", { class: ["big", cls] }, value, unit ? h("span", { class: "unit" }, unit) : null), h("div", { class: "sub" }, sub));
-}