truecourse 0.1.13 → 0.1.15

package/server.mjs

@@ -97,7 +97,7 @@ var require_depd = __commonJS({
       var site = callSiteLocation(stack[1]);
       var file2 = site[0];
       function deprecate(message) {
-        log.call(deprecate, message);
+        log3.call(deprecate, message);
       }
       deprecate._file = file2;
       deprecate._ignored = isignored(namespace);
@@ -126,7 +126,7 @@ var require_depd = __commonJS({
       var str = process.env.TRACE_DEPRECATION || "";
       return containsNamespace(str, namespace);
     }
-    function log(message, site) {
+    function log3(message, site) {
       var haslisteners = eehaslisteners(process, "deprecation");
       if (!haslisteners && this._ignored) {
         return;
@@ -266,7 +266,7 @@ var require_depd = __commonJS({
         "message",
         "site",
         '"use strict"\nreturn function (' + args + ") {log.call(deprecate, message, site)\nreturn fn.apply(this, arguments)\n}"
-      )(fn, log, this, message, site);
+      )(fn, log3, this, message, site);
       return deprecatedfn;
     }
     function wrapproperty(obj, prop, message) {
@@ -291,13 +291,13 @@ var require_depd = __commonJS({
       var set2 = descriptor.set;
       if (typeof get === "function") {
         descriptor.get = function getter() {
-          log.call(deprecate, message, site);
+          log3.call(deprecate, message, site);
           return get.apply(this, arguments);
         };
       }
       if (typeof set2 === "function") {
         descriptor.set = function setter() {
-          log.call(deprecate, message, site);
+          log3.call(deprecate, message, site);
           return set2.apply(this, arguments);
         };
       }
@@ -1134,7 +1134,7 @@ var require_debug = __commonJS({
 var require_browser = __commonJS({
   "node_modules/.pnpm/debug@2.6.9/node_modules/debug/src/browser.js"(exports2, module2) {
     exports2 = module2.exports = require_debug();
-    exports2.log = log;
+    exports2.log = log3;
     exports2.formatArgs = formatArgs;
     exports2.save = save;
     exports2.load = load;
@@ -1182,7 +1182,7 @@ var require_browser = __commonJS({
       });
       args.splice(lastC, 0, c);
     }
-    function log() {
+    function log3() {
       return "object" === typeof console && console.log && Function.prototype.apply.call(console.log, console, arguments);
     }
     function save(namespaces) {
@@ -1223,7 +1223,7 @@ var require_node = __commonJS({
     var util2 = __require("util");
     exports2 = module2.exports = require_debug();
     exports2.init = init;
-    exports2.log = log;
+    exports2.log = log3;
     exports2.formatArgs = formatArgs;
     exports2.save = save;
     exports2.load = load;
@@ -1274,7 +1274,7 @@ var require_node = __commonJS({
         args[0] = (/* @__PURE__ */ new Date()).toUTCString() + " " + name21 + " " + args[0];
       }
     }
-    function log() {
+    function log3() {
       return stream.write(util2.format.apply(util2, arguments) + "\n");
     }
     function save(namespaces) {
@@ -32859,7 +32859,7 @@ var require_node2 = __commonJS({
     var tty = __require("tty");
     var util2 = __require("util");
     exports2.init = init;
-    exports2.log = log;
+    exports2.log = log3;
     exports2.formatArgs = formatArgs;
     exports2.save = save;
     exports2.load = load;
@@ -32994,7 +32994,7 @@ var require_node2 = __commonJS({
       }
       return (/* @__PURE__ */ new Date()).toISOString() + " ";
     }
-    function log(...args) {
+    function log3(...args) {
       return process.stderr.write(util2.formatWithOptions(exports2.inspectOpts, ...args) + "\n");
     }
     function save(namespaces) {
@@ -48420,27 +48420,27 @@ var require_src3 = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     var fs_1 = __require("fs");
     var debug_1 = __importDefault(require_src2());
-    var log = debug_1.default("@kwsites/file-exists");
+    var log3 = debug_1.default("@kwsites/file-exists");
     function check2(path10, isFile, isDirectory) {
-      log(`checking %s`, path10);
+      log3(`checking %s`, path10);
       try {
         const stat = fs_1.statSync(path10);
         if (stat.isFile() && isFile) {
-          log(`[OK] path represents a file`);
+          log3(`[OK] path represents a file`);
           return true;
         }
         if (stat.isDirectory() && isDirectory) {
-          log(`[OK] path represents a directory`);
+          log3(`[OK] path represents a directory`);
           return true;
         }
-        log(`[FAIL] path represents something other than a file or directory`);
+        log3(`[FAIL] path represents something other than a file or directory`);
         return false;
       } catch (e) {
         if (e.code === "ENOENT") {
-          log(`[FAIL] path is not accessible: %o`, e);
+          log3(`[FAIL] path is not accessible: %o`, e);
           return false;
         }
-        log(`[FATAL] %o`, e);
+        log3(`[FATAL] %o`, e);
         throw e;
       }
     }
@@ -106511,6 +106511,52 @@ var init_esm5 = __esm({
   }
 });
 
+// apps/server/src/services/analysis-registry.ts
+function registerAnalysis(repoId, analysisId) {
+  const existing = activeAnalyses2.get(repoId);
+  if (existing) {
+    existing.abortController.abort();
+    for (const child of existing.childProcesses) {
+      if (!child.killed) child.kill("SIGTERM");
+    }
+  }
+  const abortController = new AbortController();
+  activeAnalyses2.set(repoId, {
+    analysisId,
+    abortController,
+    childProcesses: /* @__PURE__ */ new Set()
+  });
+  return abortController;
+}
+function registerChildProcess(repoId, child) {
+  const entry = activeAnalyses2.get(repoId);
+  if (entry) entry.childProcesses.add(child);
+}
+function unregisterChildProcess(repoId, child) {
+  const entry = activeAnalyses2.get(repoId);
+  if (entry) entry.childProcesses.delete(child);
+}
+function cancelAnalysis(repoId) {
+  const entry = activeAnalyses2.get(repoId);
+  if (!entry) return false;
+  entry.abortController.abort();
+  for (const child of entry.childProcesses) {
+    if (!child.killed) child.kill("SIGTERM");
+  }
+  activeAnalyses2.delete(repoId);
+  return true;
+}
+function unregisterAnalysis(repoId) {
+  activeAnalyses2.delete(repoId);
+}
+var activeAnalyses2;
+var init_analysis_registry = __esm({
+  "apps/server/src/services/analysis-registry.ts"() {
+    "use strict";
+    activeAnalyses2 = /* @__PURE__ */ new Map();
+  }
+});
+
 // node_modules/.pnpm/zod-to-json-schema@3.25.1_zod@3.25.76/node_modules/zod-to-json-schema/dist/esm/Options.js
 var ignoreOverride2, defaultOptions3, getDefaultOptions2;
 var init_Options = __esm({
@@ -108552,7 +108598,7 @@ function assert2(truthyValue, message) {
 function removeTrailingSlash(url2) {
   return url2?.replace(/\/+$/, "");
 }
-async function retriable(fn, props = {}, log) {
+async function retriable(fn, props = {}, log3) {
   const {
     retryCount = 3,
     retryDelay = 5e3,
@@ -108562,7 +108608,7 @@ async function retriable(fn, props = {}, log) {
   for (let i = 0; i < retryCount + 1; i++) {
     if (i > 0) {
       await new Promise((resolve6) => setTimeout(resolve6, retryDelay));
-      log(`Retrying ${i + 1} of ${retryCount + 1}`);
+      log3(`Retrying ${i + 1} of ${retryCount + 1}`);
     }
     try {
       const res = await fn();
@@ -108572,7 +108618,7 @@ async function retriable(fn, props = {}, log) {
       if (!retryCheck(e)) {
         throw e;
       }
-      log(`Retriable error: ${JSON.stringify(e)}`);
+      log3(`Retriable error: ${JSON.stringify(e)}`);
     }
   }
   throw lastError;
@@ -112835,11 +112881,16 @@ import { spawn as spawn2 } from "node:child_process";
 import { mkdirSync, writeFileSync } from "node:fs";
 import { join as join6 } from "node:path";
 import { tmpdir } from "node:os";
+function log(msg) {
+  process.stderr.write(`${msg}
+`);
+}
 var BaseCLIProvider, ClaudeCodeProvider;
 var init_cli_provider = __esm({
   "apps/server/src/services/llm/cli-provider.ts"() {
     "use strict";
     init_esm5();
+    init_analysis_registry();
     init_esm6();
     init_config();
     init_prompts();
@@ -112850,11 +112901,20 @@ var init_cli_provider = __esm({
       debugDir = null;
       callCounter = 0;
       _analysisId = null;
+      _repoId = null;
+      _abortSignal = null;
       _usageRecords = [];
       setAnalysisId(id) {
         this._analysisId = id;
         this._usageRecords = [];
       }
+      setAbortSignal(signal) {
+        this._abortSignal = signal;
+      }
+      /** Set repoId for child process tracking in the analysis registry. */
+      setRepoId(repoId) {
+        this._repoId = repoId;
+      }
       async flushUsage() {
         if (!this._analysisId || this._usageRecords.length === 0) return;
         const records = this._usageRecords.map((r) => ({
@@ -112882,7 +112942,7 @@ var init_cli_provider = __esm({
         if (process.env.TRUECOURSE_CLI_DEBUG) {
           this.debugDir = join6(tmpdir(), "truecourse-cli-debug");
           mkdirSync(this.debugDir, { recursive: true });
-          console.log(`[CLI] Debug output: ${this.debugDir}`);
+          log(`[CLI] Debug output: ${this.debugDir}`);
         }
       }
       /** Write input prompt, schema, and raw output to debug files. */
@@ -112911,7 +112971,11 @@ var init_cli_provider = __esm({
       }
       /** Spawn CLI subprocess, pipe prompt via stdin, collect stdout. */
       spawnCLI(prompt, jsonSchemaStr, opts) {
+        if (this._abortSignal?.aborted) {
+          return Promise.reject(new DOMException("Analysis cancelled", "AbortError"));
+        }
         const timeout = opts?.timeoutMs ?? config.claudeCodeTimeoutMs ?? 12e4;
+        const label = opts?.label ?? "call";
         const args = [
           ...this.baseArgs,
           ...this.modelFlag,
@@ -112924,13 +112988,23 @@ var init_cli_provider = __esm({
             env: this.getCleanEnv(),
             stdio: ["pipe", "pipe", "pipe"]
           });
+          if (this._repoId) {
+            registerChildProcess(this._repoId, child);
+          }
           let stdout = "";
           let stderr = "";
           let timedOut = false;
+          let aborted2 = false;
           const timer = setTimeout(() => {
             timedOut = true;
             child.kill("SIGTERM");
           }, timeout);
+          const onAbort = () => {
+            aborted2 = true;
+            clearTimeout(timer);
+            if (!child.killed) child.kill("SIGTERM");
+          };
+          this._abortSignal?.addEventListener("abort", onAbort, { once: true });
           child.stdout.on("data", (chunk) => {
             stdout += chunk.toString();
           });
@@ -112939,8 +113013,14 @@ var init_cli_provider = __esm({
           });
           child.on("close", (code) => {
             clearTimeout(timer);
+            this._abortSignal?.removeEventListener("abort", onAbort);
+            if (this._repoId) unregisterChildProcess(this._repoId, child);
+            if (aborted2) {
+              reject(new DOMException("Analysis cancelled", "AbortError"));
+              return;
+            }
             if (timedOut) {
-              reject(new Error(`[CLI] ${this.binaryName} timed out after ${timeout}ms`));
+              reject(new Error(`[CLI] ${label} timed out after ${timeout}ms`));
               return;
             }
             if (code !== 0) {
@@ -112952,6 +113032,8 @@ var init_cli_provider = __esm({
           });
           child.on("error", (err) => {
             clearTimeout(timer);
+            this._abortSignal?.removeEventListener("abort", onAbort);
+            if (this._repoId) unregisterChildProcess(this._repoId, child);
             reject(new Error(`[CLI] Failed to spawn ${this.binaryName}: ${err.message}`));
           });
           child.stdin.write(prompt);
@@ -113008,7 +113090,7 @@ var init_cli_provider = __esm({
           } catch (err) {
             lastError = err;
             if (attempt < this.maxRetries) {
-              console.warn(`[CLI] Attempt ${attempt + 1} failed, retrying... (${lastError.message})`);
+              log(`[CLI] Attempt ${attempt + 1} failed, retrying... (${lastError.message})`);
             }
           }
         }
@@ -113020,14 +113102,14 @@ var init_cli_provider = __esm({
       async generateServiceViolations(context2) {
         const { vars, idMap } = buildServiceTemplateVars(context2);
         const { text: prompt } = await getPrompt("violations-service", vars);
-        console.log("[CLI] Service violations call starting...");
+        log("[CLI] Service violations call starting...");
         const t0 = Date.now();
         const { data: object3, usage: cliUsage } = await this.spawnAndParse(prompt, ServiceViolationOutputSchema, {
           extraArgs: ["--tools", ""],
           label: "service"
         });
         const dur = Date.now() - t0;
-        console.log(`[CLI] Service violations call done in ${dur}ms \u2014 ${object3.violations.length} violations`);
+        log(`[CLI] Service violations call done in ${dur}ms \u2014 ${object3.violations.length} violations`);
         this.collectUsage("service", cliUsage, dur);
         return {
           violations: object3.violations.map((v) => ({
@@ -113050,14 +113132,14 @@ var init_cli_provider = __esm({
       async generateDatabaseViolations(context2) {
         const { vars, idMap } = buildDatabaseTemplateVars(context2);
         const { text: prompt } = await getPrompt("violations-database", vars);
-        console.log("[CLI] Database violations call starting...");
+        log("[CLI] Database violations call starting...");
         const t0 = Date.now();
         const { data: object3, usage: cliUsage } = await this.spawnAndParse(prompt, DatabaseViolationOutputSchema, {
           extraArgs: ["--tools", ""],
           label: "database"
         });
         const dur = Date.now() - t0;
-        console.log(`[CLI] Database violations call done in ${dur}ms \u2014 ${object3.violations.length} violations`);
+        log(`[CLI] Database violations call done in ${dur}ms \u2014 ${object3.violations.length} violations`);
         this.collectUsage("database", cliUsage, dur);
         return {
           violations: object3.violations.map((v) => ({
@@ -113080,14 +113162,14 @@ var init_cli_provider = __esm({
         const moduleIdToServiceId = new Map(
           context2.modules.filter((m) => m.serviceId).map((m) => [m.id, m.serviceId])
         );
-        console.log("[CLI] Module violations call starting...");
+        log("[CLI] Module violations call starting...");
         const t0 = Date.now();
         const { data: object3, usage: cliUsage } = await this.spawnAndParse(prompt, ModuleViolationOutputSchema, {
           extraArgs: ["--tools", ""],
           label: "module"
         });
         const dur = Date.now() - t0;
-        console.log(`[CLI] Module violations call done in ${dur}ms \u2014 ${object3.violations.length} violations`);
+        log(`[CLI] Module violations call done in ${dur}ms \u2014 ${object3.violations.length} violations`);
         this.collectUsage("module", cliUsage, dur);
         return {
           violations: object3.violations.map((v) => {
@@ -113139,7 +113221,7 @@ var init_cli_provider = __esm({
           if (outcome.status === "fulfilled") {
             result[key] = outcome.value;
           } else {
-            console.error(`[CLI Violations] ${key} call failed:`, outcome.reason);
+            log(`[CLI Violations] ${key} call failed: ${outcome.reason instanceof Error ? outcome.reason.message : String(outcome.reason)}`);
           }
         }
         return result;
@@ -113157,14 +113239,14 @@ var init_cli_provider = __esm({
               const { vars, idMap } = buildServiceTemplateVars(ctx);
               idMaps.service = idMap;
               const { text: prompt } = await getPrompt("violations-service-lifecycle", vars);
-              console.log("[CLI] Lifecycle service call starting...");
+              log("[CLI] Lifecycle service call starting...");
               const t0 = Date.now();
               const { data: object3, usage: cliUsage } = await this.spawnAndParse(prompt, LifecycleServiceOutputSchema, {
                 extraArgs: ["--tools", ""],
                 label: "service-lifecycle"
               });
               const dur = Date.now() - t0;
-              console.log(`[CLI] Lifecycle service call done in ${dur}ms \u2014 resolved: ${object3.resolvedViolationIds.length}, new: ${object3.newViolations.length}`);
+              log(`[CLI] Lifecycle service call done in ${dur}ms \u2014 resolved: ${object3.resolvedViolationIds.length}, new: ${object3.newViolations.length}`);
               this.collectUsage("service", cliUsage, dur);
               return object3;
             })()]);
@@ -113179,14 +113261,14 @@ var init_cli_provider = __esm({
               const { vars, idMap } = buildDatabaseTemplateVars(ctx);
               idMaps.database = idMap;
               const { text: prompt } = await getPrompt("violations-database-lifecycle", vars);
-              console.log("[CLI] Lifecycle database call starting...");
+              log("[CLI] Lifecycle database call starting...");
               const t0 = Date.now();
               const { data: object3, usage: cliUsage } = await this.spawnAndParse(prompt, DiffViolationOutputSchema, {
                 extraArgs: ["--tools", ""],
                 label: "database-lifecycle"
               });
               const dur = Date.now() - t0;
-              console.log(`[CLI] Lifecycle database call done in ${dur}ms \u2014 resolved: ${object3.resolvedViolationIds.length}, new: ${object3.newViolations.length}`);
+              log(`[CLI] Lifecycle database call done in ${dur}ms \u2014 resolved: ${object3.resolvedViolationIds.length}, new: ${object3.newViolations.length}`);
               this.collectUsage("database", cliUsage, dur);
               return object3;
             })()]);
@@ -113204,14 +113286,14 @@ var init_cli_provider = __esm({
               const { vars, idMap } = buildModuleTemplateVars(ctx);
               idMaps.module = idMap;
               const { text: prompt } = await getPrompt("violations-module-lifecycle", vars);
-              console.log("[CLI] Lifecycle module call starting...");
+              log("[CLI] Lifecycle module call starting...");
               const t0 = Date.now();
               const { data: object3, usage: cliUsage } = await this.spawnAndParse(prompt, DiffViolationOutputSchema, {
                 extraArgs: ["--tools", ""],
                 label: "module-lifecycle"
               });
               const dur = Date.now() - t0;
-              console.log(`[CLI] Lifecycle module call done in ${dur}ms \u2014 resolved: ${object3.resolvedViolationIds.length}, new: ${object3.newViolations.length}`);
+              log(`[CLI] Lifecycle module call done in ${dur}ms \u2014 resolved: ${object3.resolvedViolationIds.length}, new: ${object3.newViolations.length}`);
               this.collectUsage("module", cliUsage, dur);
               return {
                 resolvedViolationIds: resolveIds(object3.resolvedViolationIds, idMap),
@@ -113250,7 +113332,7 @@ var init_cli_provider = __esm({
           const [key] = promises[i];
           const outcome = settled[i];
           if (outcome.status !== "fulfilled") {
-            console.error(`[CLI ViolationsLifecycle] ${key} call failed:`, outcome.reason);
+            log(`[CLI ViolationsLifecycle] ${key} call failed: ${outcome.reason instanceof Error ? outcome.reason.message : String(outcome.reason)}`);
             continue;
           }
           if (key === "service") {
@@ -113341,16 +113423,18 @@ var init_cli_provider = __esm({
         const promptName = hasExisting ? "violations-code-lifecycle" : "violations-code";
         const { vars, idMap } = buildCodeTemplateVars(context2, { useFilePaths: true });
         const { text: prompt } = await getPrompt(promptName, vars);
-        console.log(`[CLI] Code violations call starting (${context2.files.length} files, ${hasExisting ? "lifecycle" : "first-run"})...`);
+        log(`[CLI] Code violations call starting (${context2.files.length} files, ${hasExisting ? "lifecycle" : "first-run"})...`);
         const t0 = Date.now();
         const codeExtraArgs = ["--allowedTools", "Read"];
+        const codeTimeoutMs = 3e5;
         if (hasExisting) {
           const { data: object4, usage: cliUsage2 } = await this.spawnAndParse(prompt, CodeViolationLifecycleOutputSchema, {
             extraArgs: codeExtraArgs,
-            label: "code-lifecycle"
+            label: "code-lifecycle",
+            timeoutMs: codeTimeoutMs
           });
           const dur2 = Date.now() - t0;
-          console.log(`[CLI] Code violations call done in ${dur2}ms \u2014 new: ${object4.newViolations.length}, resolved: ${object4.resolvedViolationIds.length}, unchanged: ${object4.unchangedViolationIds.length}`);
+          log(`[CLI] Code violations call done in ${dur2}ms \u2014 new: ${object4.newViolations.length}, resolved: ${object4.resolvedViolationIds.length}, unchanged: ${object4.unchangedViolationIds.length}`);
           this.collectUsage("code", cliUsage2, dur2);
           return {
             violations: object4.newViolations.map((v) => ({
@@ -113369,10 +113453,11 @@ var init_cli_provider = __esm({
         }
         const { data: object3, usage: cliUsage } = await this.spawnAndParse(prompt, CodeViolationOutputSchema, {
           extraArgs: codeExtraArgs,
-          label: "code"
+          label: "code",
+          timeoutMs: codeTimeoutMs
         });
         const dur = Date.now() - t0;
-        console.log(`[CLI] Code violations call done in ${dur}ms \u2014 ${object3.violations.length} violations`);
+        log(`[CLI] Code violations call done in ${dur}ms \u2014 ${object3.violations.length} violations`);
         this.collectUsage("code", cliUsage, dur);
         return {
           violations: object3.violations.map((v) => ({
@@ -113389,7 +113474,7 @@ var init_cli_provider = __esm({
       }
       async generateAllCodeViolations(batches) {
         if (batches.length === 0) return { violations: [] };
-        console.log(`[CLI] Code violations: ${batches.length} batch(es) starting...`);
+        log(`[CLI] Code violations: ${batches.length} batch(es) starting...`);
         const t0 = Date.now();
         const results = await Promise.allSettled(
           batches.map((batch) => this.generateCodeViolations(batch))
@@ -113403,10 +113488,10 @@ var init_cli_provider = __esm({
             if (result.value.resolvedViolationIds) allResolved.push(...result.value.resolvedViolationIds);
             if (result.value.unchangedViolationIds) allUnchanged.push(...result.value.unchangedViolationIds);
           } else {
-            console.error("[CLI CodeViolations] Batch call failed:", result.reason);
+            log(`[CLI CodeViolations] Batch call failed: ${result.reason instanceof Error ? result.reason.message : String(result.reason)}`);
           }
         }
-        console.log(`[CLI] Code violations total: ${Date.now() - t0}ms \u2014 new: ${allViolations.length}, resolved: ${allResolved.length}, unchanged: ${allUnchanged.length}`);
+        log(`[CLI] Code violations total: ${Date.now() - t0}ms \u2014 new: ${allViolations.length}, resolved: ${allResolved.length}, unchanged: ${allUnchanged.length}`);
         return {
           violations: allViolations,
           resolvedViolationIds: allResolved.length > 0 ? allResolved : void 0,
@@ -113417,14 +113502,14 @@ var init_cli_provider = __esm({
         if (detections.length === 0) return { enrichedViolations: [] };
         const { vars, idMap } = buildEnrichmentTemplateVars(detections, architectureContext);
         const { text: prompt } = await getPrompt("violations-enrich-deterministic", vars);
-        console.log(`[CLI] Enrichment call starting for ${detections.length} detections...`);
+        log(`[CLI] Enrichment call starting for ${detections.length} detections...`);
         const t0 = Date.now();
         const { data: object3, usage: cliUsage } = await this.spawnAndParse(prompt, EnrichmentOutputSchema, {
           extraArgs: ["--tools", ""],
           label: "enrichment"
         });
         const dur = Date.now() - t0;
-        console.log(`[CLI] Enrichment call done in ${dur}ms \u2014 ${object3.enrichedViolations.length} enriched`);
+        log(`[CLI] Enrichment call done in ${dur}ms \u2014 ${object3.enrichedViolations.length} enriched`);
         this.collectUsage("enrichment", cliUsage, dur);
         return {
           enrichedViolations: object3.enrichedViolations.map((e) => ({
@@ -113435,14 +113520,14 @@ var init_cli_provider = __esm({
       }
       async enrichFlow(context2) {
         const { text: prompt } = await getPrompt("flow-enrichment", buildFlowTemplateVars(context2));
-        console.log(`[CLI] Flow enrichment call starting for ${context2.flowName}...`);
+        log(`[CLI] Flow enrichment call starting for ${context2.flowName}...`);
         const t0 = Date.now();
         const { data: object3, usage: cliUsage } = await this.spawnAndParse(prompt, FlowEnrichmentOutputSchema, {
           extraArgs: ["--tools", ""],
           label: "flow"
         });
         const dur = Date.now() - t0;
-        console.log(`[CLI] Flow enrichment done in ${dur}ms`);
+        log(`[CLI] Flow enrichment done in ${dur}ms`);
         this.collectUsage("flow", cliUsage, dur);
         return {
           name: object3.name,
@@ -113577,10 +113662,16 @@ var init_provider = __esm({
     AISDKProvider = class {
       _analysisId = null;
       _usageRecords = [];
+      _abortSignal = null;
       setAnalysisId(id) {
         this._analysisId = id;
         this._usageRecords = [];
       }
+      setRepoId(_repoId) {
+      }
+      setAbortSignal(signal) {
+        this._abortSignal = signal;
+      }
       async flushUsage() {
         if (!this._analysisId || this._usageRecords.length === 0) return;
         const records = this._usageRecords.map((r) => ({
@@ -113610,6 +113701,7 @@ var init_provider = __esm({
           model,
           output: output_exports.object({ schema: ServiceViolationOutputSchema }),
           prompt,
+          abortSignal: this._abortSignal ?? void 0,
           experimental_telemetry: telemetry("violations-service", langfusePrompt)
         });
         const dur = Date.now() - t0;
@@ -113643,6 +113735,7 @@ var init_provider = __esm({
           model,
           output: output_exports.object({ schema: DatabaseViolationOutputSchema }),
           prompt,
+          abortSignal: this._abortSignal ?? void 0,
           experimental_telemetry: telemetry("violations-database", langfusePrompt)
         });
         const dur = Date.now() - t0;
@@ -113676,6 +113769,7 @@ var init_provider = __esm({
           model,
           output: output_exports.object({ schema: ModuleViolationOutputSchema }),
           prompt,
+          abortSignal: this._abortSignal ?? void 0,
           experimental_telemetry: telemetry("violations-module", langfusePrompt)
         });
         const dur = Date.now() - t0;
@@ -113764,6 +113858,7 @@ var init_provider = __esm({
                   model,
                   output: output_exports.object({ schema: LifecycleServiceOutputSchema }),
                   prompt,
+                  abortSignal: this._abortSignal ?? void 0,
                   experimental_telemetry: telemetry("violations-service-lifecycle", langfusePrompt)
                 });
                 const dur = Date.now() - t0;
@@ -113788,6 +113883,7 @@ var init_provider = __esm({
                   model,
                   output: output_exports.object({ schema: DiffViolationOutputSchema }),
                   prompt,
+                  abortSignal: this._abortSignal ?? void 0,
                   experimental_telemetry: telemetry("violations-database-lifecycle", langfusePrompt)
                 });
                 const dur = Date.now() - t0;
@@ -113815,6 +113911,7 @@ var init_provider = __esm({
                   model,
                   output: output_exports.object({ schema: DiffViolationOutputSchema }),
                   prompt,
+                  abortSignal: this._abortSignal ?? void 0,
                   experimental_telemetry: telemetry("violations-module-lifecycle", langfusePrompt)
                 });
                 const dur = Date.now() - t0;
@@ -113958,6 +114055,7 @@ var init_provider = __esm({
             model,
             output: output_exports.object({ schema: CodeViolationLifecycleOutputSchema }),
             prompt,
+            abortSignal: this._abortSignal ?? void 0,
             experimental_telemetry: telemetry("violations-code-lifecycle", langfusePrompt)
           });
           const dur2 = Date.now() - t0;
@@ -113982,6 +114080,7 @@ var init_provider = __esm({
           model,
           output: output_exports.object({ schema: CodeViolationOutputSchema }),
           prompt,
+          abortSignal: this._abortSignal ?? void 0,
           experimental_telemetry: telemetry("violations-code", langfusePrompt)
         });
         const dur = Date.now() - t0;
@@ -114040,6 +114139,7 @@ var init_provider = __esm({
           model,
           output: output_exports.object({ schema: EnrichmentOutputSchema }),
           prompt,
+          abortSignal: this._abortSignal ?? void 0,
           experimental_telemetry: telemetry("violations-enrich-deterministic", langfusePrompt)
         });
         const dur = Date.now() - t0;
@@ -114061,6 +114161,7 @@ var init_provider = __esm({
           model,
           output: output_exports.object({ schema: FlowEnrichmentOutputSchema }),
           prompt,
+          abortSignal: this._abortSignal ?? void 0,
           experimental_telemetry: telemetry("flow-enrichment", langfusePrompt)
         });
         const dur = Date.now() - t0;
@@ -114081,6 +114182,7 @@ var init_provider = __esm({
             role: m.role,
             content: m.content
           })),
+          abortSignal: this._abortSignal ?? void 0,
           experimental_telemetry: telemetry("chat")
         });
         for await (const chunk of textStream) {
@@ -144314,7 +144416,7 @@ var require_internal3 = __commonJS({
           scopeLogs: Array.from(ismMap, ([, scopeLogs]) => {
             return {
               scope: (0, internal_1.createInstrumentationScope)(scopeLogs[0].instrumentationScope),
-              logRecords: scopeLogs.map((log) => toLogRecord(log, encoder)),
+              logRecords: scopeLogs.map((log3) => toLogRecord(log3, encoder)),
               schemaUrl: scopeLogs[0].instrumentationScope.schemaUrl
             };
           }),
@@ -144322,19 +144424,19 @@ var require_internal3 = __commonJS({
         };
       });
     }
-    function toLogRecord(log, encoder) {
+    function toLogRecord(log3, encoder) {
       return {
-        timeUnixNano: encoder.encodeHrTime(log.hrTime),
-        observedTimeUnixNano: encoder.encodeHrTime(log.hrTimeObserved),
-        severityNumber: toSeverityNumber(log.severityNumber),
-        severityText: log.severityText,
-        body: (0, internal_1.toAnyValue)(log.body, encoder),
-        eventName: log.eventName,
-        attributes: toLogAttributes(log.attributes, encoder),
-        droppedAttributesCount: log.droppedAttributesCount,
-        flags: log.spanContext?.traceFlags,
-        traceId: encoder.encodeOptionalSpanContext(log.spanContext?.traceId),
-        spanId: encoder.encodeOptionalSpanContext(log.spanContext?.spanId)
+        timeUnixNano: encoder.encodeHrTime(log3.hrTime),
+        observedTimeUnixNano: encoder.encodeHrTime(log3.hrTimeObserved),
+        severityNumber: toSeverityNumber(log3.severityNumber),
+        severityText: log3.severityText,
+        body: (0, internal_1.toAnyValue)(log3.body, encoder),
+        eventName: log3.eventName,
+        attributes: toLogAttributes(log3.attributes, encoder),
+        droppedAttributesCount: log3.droppedAttributesCount,
+        flags: log3.spanContext?.traceFlags,
+        traceId: encoder.encodeOptionalSpanContext(log3.spanContext?.traceId),
+        spanId: encoder.encodeOptionalSpanContext(log3.spanContext?.spanId)
       };
     }
     function toSeverityNumber(severityNumber) {
@@ -145837,7 +145939,7 @@ var require_logging = __commonJS({
       _logVerbosity = verbosity;
     };
     exports2.setLoggerVerbosity = setLoggerVerbosity;
-    var log = (severity, ...args) => {
+    var log3 = (severity, ...args) => {
       let logFunction;
       if (severity >= _logVerbosity) {
         switch (severity) {
@@ -145859,7 +145961,7 @@ var require_logging = __commonJS({
         }
       }
     };
-    exports2.log = log;
+    exports2.log = log3;
     var tracersString = (_d = (_c = process.env.GRPC_NODE_TRACE) !== null && _c !== void 0 ? _c : process.env.GRPC_TRACE) !== null && _d !== void 0 ? _d : "";
     var enabledTracers = /* @__PURE__ */ new Set();
     var disabledTracers = /* @__PURE__ */ new Set();
@@ -157528,7 +157630,7 @@ var require_umd = __commonJS({
           rem = this;
           while (rem.gte(divisor)) {
             approx = Math.max(1, Math.floor(rem.toNumber() / divisor.toNumber()));
-            var log2 = Math.ceil(Math.log(approx) / Math.LN2), delta = log2 <= 48 ? 1 : pow_dbl(2, log2 - 48), approxRes = fromNumber(approx), approxRem = approxRes.mul(divisor);
+            var log22 = Math.ceil(Math.log(approx) / Math.LN2), delta = log22 <= 48 ? 1 : pow_dbl(2, log22 - 48), approxRes = fromNumber(approx), approxRem = approxRes.mul(divisor);
             while (approxRem.isNegative() || approxRem.gt(rem)) {
               approx -= delta;
               approxRes = fromNumber(approx, this.unsigned);
@@ -173450,7 +173552,7 @@ var require_merge3 = __commonJS({
 var require_addPairToJSMap = __commonJS({
   "node_modules/.pnpm/yaml@2.8.2/node_modules/yaml/dist/nodes/addPairToJSMap.js"(exports2) {
     "use strict";
-    var log = require_log();
+    var log3 = require_log();
     var merge2 = require_merge3();
     var stringify = require_stringify2();
     var identity = require_identity2();
@@ -173499,7 +173601,7 @@ var require_addPairToJSMap = __commonJS({
           let jsonStr = JSON.stringify(strKey);
           if (jsonStr.length > 40)
             jsonStr = jsonStr.substring(0, 36) + '..."';
-          log.warn(ctx.doc.options.logLevel, `Keys with collection values will be stringified due to JS Object restrictions: ${jsonStr}. Set mapAsMap: true to use object keys.`);
+          log3.warn(ctx.doc.options.logLevel, `Keys with collection values will be stringified due to JS Object restrictions: ${jsonStr}. Set mapAsMap: true to use object keys.`);
           ctx.mapKeyWarned = true;
         }
         return strKey;
@@ -178883,7 +178985,7 @@ var require_public_api = __commonJS({
     var composer = require_composer();
     var Document = require_Document();
     var errors = require_errors();
-    var log = require_log();
+    var log3 = require_log();
     var identity = require_identity2();
     var lineCounter = require_line_counter();
     var parser4 = require_parser();
@@ -178935,7 +179037,7 @@ var require_public_api = __commonJS({
       const doc = parseDocument(src, options);
       if (!doc)
         return null;
-      doc.warnings.forEach((warning) => log.warn(doc.options.logLevel, warning));
+      doc.warnings.forEach((warning) => log3.warn(doc.options.logLevel, warning));
       if (doc.errors.length > 0) {
         if (doc.options.logLevel !== "silent")
           throw doc.errors[0];
@@ -180243,11 +180345,11 @@ var { Server, Namespace, Socket } = import_dist.default;
 var activeAnalyses = /* @__PURE__ */ new Map();
 function setupHandlers(io3) {
   io3.on("connection", (socket) => {
-    console.log(`[Socket] Client connected: ${socket.id}`);
+    console.error(`[Socket] Client connected: ${socket.id}`);
     socket.on("joinRepo", async (repoId) => {
       const room = `repo:${repoId}`;
       await socket.join(room);
-      console.log(`[Socket] ${socket.id} joined room ${room}`);
+      console.error(`[Socket] ${socket.id} joined room ${room}`);
       const progress = activeAnalyses.get(repoId);
       if (progress) {
         socket.emit("analysis:progress", { repoId, ...progress });
@@ -180256,10 +180358,10 @@ function setupHandlers(io3) {
     socket.on("leaveRepo", async (repoId) => {
       const room = `repo:${repoId}`;
       await socket.leave(room);
-      console.log(`[Socket] ${socket.id} left room ${room}`);
+      console.error(`[Socket] ${socket.id} left room ${room}`);
     });
     socket.on("disconnect", () => {
-      console.log(`[Socket] Client disconnected: ${socket.id}`);
+      console.error(`[Socket] Client disconnected: ${socket.id}`);
     });
   });
 }
@@ -180282,6 +180384,11 @@ function emitViolationsReady(repoId, analysisId) {
   const io3 = getIO();
   io3.to(`repo:${repoId}`).emit("violations:ready", { repoId, analysisId });
 }
+function emitAnalysisCanceled(repoId) {
+  activeAnalyses.delete(repoId);
+  const io3 = getIO();
+  io3.to(`repo:${repoId}`).emit("analysis:canceled", { repoId });
+}
 
 // apps/server/src/socket/index.ts
 var io2 = null;
@@ -182249,11 +182356,11 @@ function taskCallback(task, response, callback = NOOP) {
   response.then(onSuccess, onError2);
 }
 function addDeprecationNoticeToError(err) {
-  let log = (name21) => {
+  let log3 = (name21) => {
     console.warn(
       `simple-git deprecation notice: accessing GitResponseError.${name21} should be GitResponseError.git.${name21}, this will no longer be available in version 3`
     );
-    log = NOOP;
+    log3 = NOOP;
   };
   return Object.create(err, Object.getOwnPropertyNames(err.git).reduce(descriptorReducer, {}));
   function descriptorReducer(all, name21) {
@@ -182264,7 +182371,7 @@ function addDeprecationNoticeToError(err) {
       enumerable: false,
       configurable: false,
       get() {
-        log(name21);
+        log3(name21);
         return err.git[name21];
       }
     };
@@ -185901,7 +186008,7 @@ async function detectAndPersistFlows(analysisId, result) {
       );
     }
   }
-  console.log(`[Flows] Detected and persisted ${traced.length} flows for analysis ${analysisId}`);
+  console.error(`[Flows] Detected and persisted ${traced.length} flows for analysis ${analysisId}`);
   return { flowCount: traced.length };
 }
 function buildRouteHandlerLookup(result) {
@@ -186065,6 +186172,9 @@ async function enrichFlowWithLLM(flowId) {
   }
 }
 
+// apps/server/src/routes/analysis.ts
+init_analysis_registry();
+
 // apps/server/src/services/graph.service.ts
 var import_dagre = __toESM(require_dagre(), 1);
 init_dist();
@@ -187051,6 +187161,13 @@ async function persistCodeViolationsWithLifecycle(params) {
 }
 
 // apps/server/src/services/violation-pipeline.service.ts
+function log2(msg) {
+  process.stderr.write(`${msg}
+`);
+}
+function throwIfAborted(signal) {
+  if (signal?.aborted) throw new DOMException("Analysis cancelled", "AbortError");
+}
 function getDetComparisonKey(v) {
   return `${v.ruleKey}::${v.serviceName}::${v.moduleName || ""}::${v.methodName || ""}::${v.title}`;
 }
@@ -187092,9 +187209,11 @@ async function runViolationPipeline(input) {
     previousDeterministicViolations,
     changedFileSet,
     onProgress,
-    provider: externalProvider
+    provider: externalProvider,
+    signal
   } = input;
   const allRules = await getEnabledRules();
+  throwIfAborted(signal);
   onProgress?.({ step: "analyzing", percent: 80, detail: "Running deterministic checks..." });
   const enabledDeterministic = allRules.filter((r) => r.type === "deterministic");
   const serviceViolationResults = runDeterministicServiceChecks(result, enabledDeterministic);
@@ -187159,6 +187278,7 @@ async function runViolationPipeline(input) {
       }
     }
   }
+  throwIfAborted(signal);
   onProgress?.({ step: "analyzing", percent: 84, detail: "Code checks done" });
   const MAX_CHARS_PER_BATCH = 1e5;
   const HALF_BATCH = MAX_CHARS_PER_BATCH / 2;
@@ -187218,6 +187338,7 @@ async function runViolationPipeline(input) {
     const emitted = highWaterMark;
     onProgress?.({ step: "analyzing", percent: emitted, detail });
   };
+  throwIfAborted(signal);
   emitProgress(85, "Enriching & analyzing violations...");
   const allDetEntries = [];
   for (const v of serviceViolationResults) {
@@ -187564,10 +187685,21 @@ Services: ${result.services.map((s) => `${s.name} (${s.type})`).join(", ")}`;
     emitProgress(94, "Code analysis done");
     return r;
   });
-  const [, , codeResult] = await Promise.all([deterministicPromise, llmRulePromise, codePromise]);
+  const [detResult, llmResult, codeSettled] = await Promise.allSettled([deterministicPromise, llmRulePromise, codePromise]);
+  if (detResult.status === "rejected") {
+    log2(`[Violations] Deterministic enrichment failed: ${detResult.reason instanceof Error ? detResult.reason.message : String(detResult.reason)}`);
+  }
+  if (llmResult.status === "rejected") {
+    log2(`[Violations] LLM rule analysis failed: ${llmResult.reason instanceof Error ? llmResult.reason.message : String(llmResult.reason)}`);
+  }
+  if (codeSettled.status === "rejected") {
+    log2(`[Violations] Code analysis failed: ${codeSettled.reason instanceof Error ? codeSettled.reason.message : String(codeSettled.reason)}`);
+  }
+  const codeResult = codeSettled.status === "fulfilled" ? codeSettled.value : { violations: [] };
   processLlmCodeViolations(codeResult, validFilePaths, fileContents, allCodeViolations);
   llmCodeResolvedIds = codeResult.resolvedViolationIds || [];
   llmCodeUnchangedIds = codeResult.unchangedViolationIds || [];
+  throwIfAborted(signal);
   emitProgress(95, "Analysis complete");
   for (const desc2 of serviceDescriptions) {
     if (desc2.id) {
@@ -187718,6 +187850,7 @@ router2.post(
       const git = simpleGit(repo.path);
       const branch = (await git.branch()).current || null;
       res.status(202).json({ message: "Analysis started", repoId: id, branch });
+      const abortController = registerAnalysis(id, "pending");
       try {
         emitAnalysisProgress(id, {
           step: "starting",
@@ -187853,6 +187986,8 @@ router2.post(
         await db.update(repos).set({ lastAnalyzedAt: /* @__PURE__ */ new Date(), updatedAt: /* @__PURE__ */ new Date() }).where(eq(repos.id, id));
         const provider = createLLMProvider();
         provider.setAnalysisId(newAnalysisId);
+        provider.setRepoId(id);
+        provider.setAbortSignal(abortController.signal);
         try {
           await runViolationPipeline({
             repoId: id,
@@ -187867,14 +188002,20 @@ router2.post(
             previousActiveCodeViolations,
             previousDeterministicViolations,
             onProgress: (progress) => emitAnalysisProgress(id, progress),
-            provider
+            provider,
+            signal: abortController.signal
           });
           emitViolationsReady(id, analysis.id);
         } catch (violationError) {
-          console.error(
-            `[Violations] Failed for repo ${id}:`,
-            violationError instanceof Error ? violationError.message : String(violationError)
-          );
+          if (violationError instanceof DOMException && violationError.name === "AbortError") {
+            console.log(`[Violations] Cancelled for repo ${id}`);
+          } else {
+            console.error(
+              `[Violations] Failed for repo ${id}:`,
+              violationError instanceof Error ? violationError.message : String(violationError)
+            );
+          }
+          emitViolationsReady(id, analysis.id);
         }
         try {
           await provider.flushUsage();
@@ -187883,15 +188024,38 @@ router2.post(
         }
         emitAnalysisComplete(id, analysis.id);
       } catch (error40) {
-        console.error(
-          `[Analysis] Failed for repo ${id}:`,
-          error40 instanceof Error ? error40.message : String(error40)
-        );
-        emitAnalysisProgress(id, {
-          step: "error",
-          percent: -1,
-          detail: error40 instanceof Error ? error40.message : "Analysis failed"
-        });
+        if (error40 instanceof DOMException && error40.name === "AbortError") {
+          console.log(`[Analysis] Cancelled for repo ${id}`);
+        } else {
+          console.error(
+            `[Analysis] Failed for repo ${id}:`,
+            error40 instanceof Error ? error40.message : String(error40)
+          );
+          emitAnalysisProgress(id, {
+            step: "error",
+            percent: -1,
+            detail: error40 instanceof Error ? error40.message : "Analysis failed"
+          });
+        }
+      } finally {
+        unregisterAnalysis(id);
+      }
+    } catch (error40) {
+      next(error40);
+    }
+  }
+);
+router2.post(
+  "/:id/analyze/cancel",
+  async (req, res, next) => {
+    try {
+      const id = req.params.id;
+      const canceled = cancelAnalysis(id);
+      if (canceled) {
+        emitAnalysisCanceled(id);
+        res.json({ message: "Analysis cancelled" });
+      } else {
+        throw createAppError("No active analysis for this repo", 404);
       }
     } catch (error40) {
       next(error40);