truecourse 0.2.0 → 0.2.1

package/server.mjs

@@ -31191,6 +31191,8 @@ var init_schema2 = __esm({
       id: uuid("id").defaultRandom().primaryKey(),
       repoId: uuid("repo_id").notNull().references(() => repos.id, { onDelete: "cascade" }),
       branch: text("branch"),
+      status: text("status").notNull().default("completed"),
+      // 'running' | 'cancelling' | 'completed' | 'cancelled' | 'failed'
       architecture: text("architecture").notNull(),
       // 'monolith' | 'microservices'
       metadata: jsonb("metadata"),
@@ -48989,6 +48991,15 @@ function getAllIndexBaseNames() {
   }
   return names;
 }
+function getMaxParameters(filePath) {
+  const lang = detectLanguage(filePath);
+  if (lang) {
+    const config3 = LANGUAGE_CONFIGS.find((c) => c.name === lang);
+    if (config3)
+      return config3.thresholds.maxParameters;
+  }
+  return 5;
+}
 function isBootstrapEntry(functionName, filePath) {
   return LANGUAGE_CONFIGS.some((c) => c.bootstrap.functionNames.includes(functionName) && c.bootstrap.filePattern.test(filePath));
 }
@@ -49063,6 +49074,9 @@ var init_language_config = __esm({
         filePattern: /(?:^|[/\\])(?:app|main|index|server)\.\w+$/,
         functionNames: ["start", "main", "bootstrap"]
       },
+      thresholds: {
+        maxParameters: 5
+      },
       exportQuery: `
     (export_statement) @export
   `
@@ -49129,6 +49143,10 @@ var init_language_config = __esm({
         filePattern: /(?:^|[/\\])(?:app|main|wsgi|asgi)\.\w+$/,
         functionNames: ["start", "main", "__main__", "bootstrap"]
       },
+      thresholds: {
+        maxParameters: 7
+        // Python uses keyword args extensively
+      },
       importQuery: `
     (import_statement) @import
     (import_from_statement) @import
@@ -264143,6 +264161,15 @@ function isNestedInFunction2(node) {
   }
   return false;
 }
+function isInsideClass(node) {
+  let current = node.parent;
+  while (current) {
+    if (current.type === "class_definition")
+      return true;
+    current = current.parent;
+  }
+  return false;
+}
 function extractDocstring(node) {
   const body = node.childForFieldName("body");
   if (!body)
@@ -264271,20 +264298,9 @@ function extractPythonParameters(paramsNode) {
         });
         break;
       }
-      case "list_splat_pattern": {
-        const name21 = child.namedChildren[0]?.text;
-        if (name21) {
-          parameters.push({ name: `*${name21}` });
-        }
-        break;
-      }
-      case "dictionary_splat_pattern": {
-        const name21 = child.namedChildren[0]?.text;
-        if (name21) {
-          parameters.push({ name: `**${name21}` });
-        }
+      case "list_splat_pattern":
+      case "dictionary_splat_pattern":
         break;
-      }
     }
   }
   return parameters;
@@ -264298,6 +264314,8 @@ function extractPythonClasses(tree, filePath) {
       if (seen.has(key))
         return;
       seen.add(key);
+      if (isInsideClass(node))
+        return;
       const name21 = node.childForFieldName("name")?.text;
       if (!name21)
         return;
@@ -264395,11 +264413,12 @@ function extractClassProperties(body) {
         continue;
       if (expr.type === "assignment") {
         const left = expr.childForFieldName("left");
+        const typeNode = expr.childForFieldName("type");
         const right = expr.childForFieldName("right");
         if (left && left.type === "identifier") {
           properties.push({
             name: left.text,
-            type: right?.text
+            type: typeNode?.text || right?.text
           });
         }
       } else if (expr.type === "type_alias_statement" || expr.type === "annotated_assignment") {
@@ -264553,6 +264572,21 @@ function extractPythonExports(tree, filePath) {
     }
     return exports2;
   }
+  const classesWithInstances = /* @__PURE__ */ new Set();
+  for (const child of root.namedChildren) {
+    if (child.type === "expression_statement") {
+      const expr = child.namedChildren[0];
+      if (expr?.type === "assignment") {
+        const right = expr.childForFieldName("right");
+        if (right?.type === "call") {
+          const fn = right.childForFieldName("function");
+          if (fn?.type === "identifier") {
+            classesWithInstances.add(fn.text);
+          }
+        }
+      }
+    }
+  }
   for (const child of root.namedChildren) {
     if (child.type === "function_definition") {
       const name21 = child.childForFieldName("name")?.text;
@@ -264570,7 +264604,7 @@ function extractPythonExports(tree, filePath) {
       }
     } else if (child.type === "class_definition") {
       const name21 = child.childForFieldName("name")?.text;
-      if (name21 && !name21.startsWith("_")) {
+      if (name21 && !name21.startsWith("_") && !classesWithInstances.has(name21)) {
         exports2.push({ name: name21, isDefault: false });
       }
     } else if (child.type === "expression_statement") {
@@ -267317,6 +267351,10 @@ function hasAPILayerPatterns(analysis) {
   const reasons = [];
   for (const imp of analysis.imports) {
     if (apiLayerPatterns.frameworks.some((fw) => matchesPattern(imp.source, fw))) {
+      const importedNames = imp.specifiers.map((s) => s.name);
+      if (importedNames.length > 0 && importedNames.every((n) => FRAMEWORK_UTILITY_IMPORTS.has(n))) {
+        continue;
+      }
       reasons.push(`Imports API framework: ${imp.source}`);
       return { match: true, reasons };
     }
@@ -267333,8 +267371,12 @@ function hasAPILayerPatterns(analysis) {
       return { match: true, reasons };
     }
   }
+  const broadDirPatterns = /* @__PURE__ */ new Set(["**/api/**", "**/views/**"]);
+  const hasRoutes = (analysis.routeRegistrations?.length ?? 0) > 0;
   for (const pattern of apiLayerPatterns.filePatterns) {
     if (minimatch(analysis.filePath, pattern)) {
+      if (broadDirPatterns.has(pattern) && !hasRoutes)
+        continue;
       reasons.push(`File path matches API layer pattern: ${pattern}`);
       return { match: true, reasons };
     }
@@ -267394,12 +267436,32 @@ function calculateConfidence(layers2, reasons) {
   }
   return 0.7;
 }
+var FRAMEWORK_UTILITY_IMPORTS;
 var init_layer_detector = __esm({
   "packages/analyzer/dist/layer-detector.js"() {
     "use strict";
     init_layer_patterns();
     init_patterns();
     init_esm3();
+    FRAMEWORK_UTILITY_IMPORTS = /* @__PURE__ */ new Set([
+      "HTTPException",
+      "Depends",
+      "Header",
+      "Body",
+      "Query",
+      "Path",
+      "Form",
+      "File",
+      "UploadFile",
+      "status",
+      "Response",
+      "JSONResponse",
+      "BackgroundTasks",
+      "Security",
+      "Cookie",
+      "Request",
+      "WebSocket"
+    ]);
   }
 });
 
@@ -267597,17 +267659,32 @@ function detectByEntryPoints(_rootPath, allFiles) {
   if (entryPoints.length <= 1) {
     return [];
   }
-  const serviceMap = /* @__PURE__ */ new Map();
-  for (const entry of entryPoints) {
-    const dir = dirname4(entry);
-    serviceMap.set(dir, allFiles.filter((f) => f.startsWith(dir)));
+  const entryDirs = entryPoints.map((e) => dirname4(e)).sort((a, b) => a.length - b.length);
+  const topLevelDirs = [];
+  for (const dir of entryDirs) {
+    const isNested = topLevelDirs.some((parent) => dir.startsWith(parent + "/"));
+    if (!isNested) {
+      topLevelDirs.push(dir);
+    }
+  }
+  const nameCount = /* @__PURE__ */ new Map();
+  for (const dir of topLevelDirs) {
+    const dirName = basename2(dir);
+    nameCount.set(dirName, (nameCount.get(dirName) || 0) + 1);
   }
   const services2 = [];
-  for (const [dir, files] of serviceMap.entries()) {
+  for (const dir of topLevelDirs) {
+    const files = allFiles.filter((f) => f.startsWith(dir));
+    if (files.length === 0)
+      continue;
     const dirName = basename2(dir);
     const isSrcDir = patterns.commonSourceDirectories.includes(dirName);
     const serviceRoot = isSrcDir ? dirname4(dir) : dir;
-    const name21 = isSrcDir ? basename2(dirname4(dir)) : dirName;
+    let name21 = isSrcDir ? basename2(dirname4(dir)) : dirName;
+    if ((nameCount.get(dirName) || 0) > 1) {
+      const parentName = basename2(dirname4(dir));
+      name21 = `${parentName}-${dirName}`;
+    }
     services2.push({
       name: name21,
       rootPath: dir,
@@ -267977,7 +268054,42 @@ var init_drizzle = __esm({
 function parseSqlAlchemySchema(content) {
   const tables = [];
   const relations2 = [];
-  const lines = content.split("\n");
+  const rawLines = content.split("\n");
+  const lines = [];
+  let pending = "";
+  let parenDepth = 0;
+  for (const raw of rawLines) {
+    if (parenDepth > 0) {
+      pending += " " + raw.trim();
+      for (const ch of raw) {
+        if (ch === "(")
+          parenDepth++;
+        else if (ch === ")")
+          parenDepth--;
+      }
+      if (parenDepth <= 0) {
+        lines.push(pending);
+        pending = "";
+        parenDepth = 0;
+      }
+    } else {
+      let depth = 0;
+      for (const ch of raw) {
+        if (ch === "(")
+          depth++;
+        else if (ch === ")")
+          depth--;
+      }
+      if (depth > 0) {
+        pending = raw;
+        parenDepth = depth;
+      } else {
+        lines.push(raw);
+      }
+    }
+  }
+  if (pending)
+    lines.push(pending);
   const classToTable = /* @__PURE__ */ new Map();
   {
     let cls = null;
@@ -268047,13 +268159,38 @@ function parseSqlAlchemySchema(content) {
       continue;
     }
     const columnMatch = trimmed2.match(/^(\w+)\s*=\s*Column\((.+)\)/);
-    if (columnMatch) {
-      const colName = columnMatch[1];
-      const colArgs = columnMatch[2];
-      const colType = mapSqlAlchemyType(colArgs);
+    let mappedColMatch = null;
+    if (!columnMatch) {
+      const mcPrefix = trimmed2.match(/^(\w+)\s*:\s*Mapped\[/);
+      if (mcPrefix) {
+        const afterMapped = trimmed2.slice(mcPrefix[0].length);
+        let depth = 1, idx = 0;
+        while (idx < afterMapped.length && depth > 0) {
+          if (afterMapped[idx] === "[")
+            depth++;
+          else if (afterMapped[idx] === "]")
+            depth--;
+          idx++;
+        }
+        if (depth === 0) {
+          const mappedTypeStr = afterMapped.slice(0, idx - 1);
+          const rest = afterMapped.slice(idx);
+          const argsMatch = rest.match(/^\s*=\s*mapped_column\((.+)\)/);
+          if (argsMatch) {
+            mappedColMatch = [trimmed2, mcPrefix[1], mappedTypeStr, argsMatch[1]];
+          }
+        }
+      }
+    }
+    const colMatch = columnMatch || mappedColMatch;
+    if (colMatch) {
+      const colName = colMatch[1];
+      const colArgs = columnMatch ? colMatch[2] : colMatch[3];
+      const mappedType = mappedColMatch ? colMatch[2] : null;
+      const colType = mappedType ? mapMappedType(mappedType, colArgs) : mapSqlAlchemyType(colArgs);
       const isPrimaryKey = colArgs.includes("primary_key=True");
-      const isNullable = colArgs.includes("nullable=True") || !colArgs.includes("nullable=False") && !isPrimaryKey;
-      const fkMatch = colArgs.match(/ForeignKey\(["'](\w+)\.(\w+)["']\)/);
+      const isNullable = mappedType ? /Optional|None/.test(mappedType) : colArgs.includes("nullable=True") || !colArgs.includes("nullable=False") && !isPrimaryKey;
+      const fkMatch = colArgs.match(/ForeignKey\(["'](\w+)\.(\w+)["'][^)]*\)/);
       const isForeignKey = !!fkMatch;
       const referencesTable = fkMatch?.[1];
       const referencesColumn = fkMatch?.[2];
@@ -268086,7 +268223,7 @@ function parseSqlAlchemySchema(content) {
       }
       continue;
     }
-    const relMatch = trimmed2.match(/^(\w+)\s*=\s*relationship\(["'](\w+)["']/);
+    const relMatch = trimmed2.match(/^(\w+)\s*(?::\s*Mapped\[[^\]]+\]\s*)?=\s*relationship\(["'](\w+)["']/);
     if (relMatch && currentTableName) {
       const targetModel = relMatch[2];
       const targetTable = classToTable.get(targetModel);
@@ -268131,6 +268268,23 @@ function mapSqlAlchemyType(colArgs) {
   };
   return typeMap[firstArg] || firstArg;
 }
+function mapMappedType(mappedType, colArgs) {
+  const argType = mapSqlAlchemyType(colArgs);
+  if (argType && argType !== colArgs.split(",")[0].trim()) {
+    return argType;
+  }
+  const inner = mappedType.replace(/Optional\[([^\]]+)\]/, "$1").replace(/List\[([^\]]+)\]/, "$1[]").replace(/Dict\[([^\]]+)\]/, "Json").replace(/list\[([^\]]+)\]/, "$1[]").replace(/dict\[([^\]]+)\]/, "Json").trim();
+  const pyTypeMap = {
+    "str": "String",
+    "int": "Int",
+    "float": "Float",
+    "bool": "Boolean",
+    "datetime": "DateTime",
+    "date": "Date",
+    "bytes": "Bytes"
+  };
+  return pyTypeMap[inner] || argType || inner;
+}
 var init_sqlalchemy = __esm({
   "packages/analyzer/dist/schema-parsers/sqlalchemy.js"() {
     "use strict";
@@ -268401,7 +268555,7 @@ function extractModulesAndMethods(analyses2, layerDetails, fileDependencies) {
         lineCount: cls.location.endLine - cls.location.startLine + 1
       });
       for (const method of namedMethods) {
-        methods2.push(toMethodInfo(method, modName, serviceName, analysis.filePath));
+        methods2.push(toMethodInfo(method, modName, serviceName, analysis.filePath, analysis.language));
       }
       addToFileModules(fileToModules, analysis.filePath, modName);
     }
@@ -268428,7 +268582,7 @@ function extractModulesAndMethods(analyses2, layerDetails, fileDependencies) {
           lineCount: totalFileLines(analysis)
         });
         for (const fn of extraFunctions) {
-          methods2.push(toMethodInfo(fn, modName, serviceName, analysis.filePath));
+          methods2.push(toMethodInfo(fn, modName, serviceName, analysis.filePath, analysis.language));
         }
         addToFileModules(fileToModules, analysis.filePath, modName);
       }
@@ -268451,7 +268605,7 @@ function extractModulesAndMethods(analyses2, layerDetails, fileDependencies) {
         lineCount: totalFileLines(analysis)
       });
       for (const fn of namedFunctions) {
-        methods2.push(toMethodInfo(fn, modName, serviceName, analysis.filePath));
+        methods2.push(toMethodInfo(fn, modName, serviceName, analysis.filePath, analysis.language));
       }
       addToFileModules(fileToModules, analysis.filePath, modName);
     }
@@ -268466,10 +268620,11 @@ function extractModulesAndMethods(analyses2, layerDetails, fileDependencies) {
   const methodDependencies = buildMethodDependencies(analyses2, modules2, methods2, fileLookup);
   return { modules: modules2, methods: methods2, moduleDependencies, methodDependencies };
 }
-function toMethodInfo(fn, moduleName2, serviceName, filePath) {
+function toMethodInfo(fn, moduleName2, serviceName, filePath, language) {
   const params = fn.params.map((p) => p.type ? `${p.name}: ${p.type}` : p.name).join(", ");
   const ret = fn.returnType ? `: ${fn.returnType}` : "";
   const signature = `${fn.name}(${params})${ret}`;
+  const isImplicitCall = language === "python" && fn.name.startsWith("__") && fn.name.endsWith("__") && fn.name !== "__init__" || language !== "python" && fn.name === "constructor" || void 0;
   return {
     name: fn.name,
     moduleName: moduleName2,
@@ -268482,7 +268637,8 @@ function toMethodInfo(fn, moduleName2, serviceName, filePath) {
     isExported: fn.isExported,
     lineCount: fn.lineCount,
     statementCount: fn.statementCount,
-    maxNestingDepth: fn.maxNestingDepth
+    maxNestingDepth: fn.maxNestingDepth,
+    isImplicitCall
   };
 }
 function deriveModuleName(analysis) {
@@ -268803,6 +268959,28 @@ function buildMethodDependencies(analyses2, allModules, allMethods, fileLookup)
           }
         }
       }
+      if (!targetMethod && calleeParts.length === 1) {
+        for (const mod2 of allModules) {
+          if (mod2.kind !== "class" || mod2.serviceName !== serviceName)
+            continue;
+          if (mod2.name === calleeMethodName) {
+            targetMethod = methodLookup.get(`${mod2.serviceName}::${mod2.name}::__init__`);
+            if (targetMethod)
+              break;
+          }
+        }
+        if (!targetMethod) {
+          for (const mod2 of allModules) {
+            if (mod2.kind !== "class" || mod2.serviceName === serviceName)
+              continue;
+            if (mod2.name === calleeMethodName) {
+              targetMethod = methodLookup.get(`${mod2.serviceName}::${mod2.name}::__init__`);
+              if (targetMethod)
+                break;
+            }
+          }
+        }
+      }
       if (!targetMethod)
         continue;
       if (!usedFallbackCaller && targetMethod.moduleName === callerMethod.moduleName && targetMethod.name === callerMethod.name && targetMethod.serviceName === callerMethod.serviceName && targetMethod.filePath === callerMethod.filePath)
@@ -270215,9 +270393,12 @@ var init_analysis_graph = __esm({
             }
           }
         }
+        const isEntryCandidate = (name21) => !name21.startsWith("_") && name21 !== "constructor";
         this.entryPoints = [];
         const servicesWithEntryPoints = /* @__PURE__ */ new Set();
         for (const method of input.methods) {
+          if (!isEntryCandidate(method.name))
+            continue;
           const mod2 = this.moduleByKey.get(`${method.serviceName}::${method.moduleName}`);
           if (!mod2)
             continue;
@@ -270233,6 +270414,8 @@ var init_analysis_graph = __esm({
         for (const method of input.methods) {
           if (servicesWithEntryPoints.has(method.serviceName))
             continue;
+          if (!isEntryCandidate(method.name))
+            continue;
           if (!method.isExported)
             continue;
           const mod2 = this.moduleByKey.get(`${method.serviceName}::${method.moduleName}`);
@@ -270854,7 +271037,34 @@ var init_rule_engine = __esm({
 });
 
 // packages/analyzer/dist/rules/module-rules-checker.js
-function checkModuleRules(modules2, methods2, fileDependencies, enabledRules, moduleLevelDeps, dbConnectedModuleKeys, fileAnalyses, libraryServiceNames, entryPointFiles) {
+function buildSameFileCalls(fileAnalyses) {
+  const result = /* @__PURE__ */ new Map();
+  if (!fileAnalyses)
+    return result;
+  for (const fa of fileAnalyses) {
+    const callees = /* @__PURE__ */ new Set();
+    for (const call of fa.calls) {
+      if (!call.callee.includes(".")) {
+        callees.add(call.callee);
+      }
+      if (call.arguments) {
+        for (const arg of call.arguments) {
+          if (/^[A-Za-z_]\w*$/.test(arg)) {
+            callees.add(arg);
+          }
+          const kwMatch = arg.match(/^[A-Za-z_]\w*=([A-Za-z_]\w*)$/);
+          if (kwMatch) {
+            callees.add(kwMatch[1]);
+          }
+        }
+      }
+    }
+    if (callees.size > 0)
+      result.set(fa.filePath, callees);
+  }
+  return result;
+}
+function checkModuleRules(modules2, methods2, fileDependencies, enabledRules, moduleLevelDeps, dbConnectedModuleKeys, fileAnalyses, libraryServiceNames, entryPointFiles, methodLevelDeps) {
   const violations2 = [];
   const ruleKeys = new Set(enabledRules.filter((r) => r.type === "deterministic" && r.enabled).map((r) => r.key));
   if (ruleKeys.has("arch/god-module")) {
@@ -270872,6 +271082,40 @@ function checkModuleRules(modules2, methods2, fileDependencies, enabledRules, mo
       }
     }
   }
+  const calledInOwnFile = buildSameFileCalls(fileAnalyses);
+  const usedAsType = /* @__PURE__ */ new Set();
+  function addType(typeStr2) {
+    if (!typeStr2)
+      return;
+    const parts = typeStr2.split(/[|,\[\]()]+/).map((s) => s.trim()).filter(Boolean);
+    for (const part of parts) {
+      if (/^(str|int|float|bool|None|Any|string|number|void|undefined|null|Optional|Union|List|Dict|Set|Tuple|list|dict|set|tuple|type)$/i.test(part))
+        continue;
+      usedAsType.add(part);
+    }
+  }
+  if (fileAnalyses) {
+    for (const fa of fileAnalyses) {
+      for (const fn of fa.functions) {
+        for (const p of fn.params)
+          addType(p.type);
+        addType(fn.returnType);
+      }
+      for (const cls of fa.classes) {
+        if (cls.superClass)
+          usedAsType.add(cls.superClass);
+        for (const iface of cls.interfaces || [])
+          usedAsType.add(iface);
+        for (const m of cls.methods) {
+          for (const p of m.params)
+            addType(p.type);
+          addType(m.returnType);
+        }
+        for (const prop of cls.properties)
+          addType(prop.type);
+      }
+    }
+  }
   if (ruleKeys.has("arch/unused-export")) {
     const importedTargets = /* @__PURE__ */ new Set();
     for (const dep of fileDependencies) {
@@ -270879,6 +271123,12 @@ function checkModuleRules(modules2, methods2, fileDependencies, enabledRules, mo
         importedTargets.add(name21);
       }
     }
+    if (methodLevelDeps) {
+      for (const dep of methodLevelDeps) {
+        importedTargets.add(dep.calleeModule);
+        importedTargets.add(dep.calleeMethod);
+      }
+    }
     const classModuleNames = new Set(modules2.filter((m) => m.kind === "class").map((m) => m.name));
     const routeHandlerNames = /* @__PURE__ */ new Set();
     if (fileAnalyses) {
@@ -270899,6 +271149,8 @@ function checkModuleRules(modules2, methods2, fileDependencies, enabledRules, mo
           continue;
         if (routeHandlerNames.has(method.name))
           continue;
+        if (calledInOwnFile.get(method.filePath)?.has(method.name))
+          continue;
         violations2.push({
           ruleKey: "arch/unused-export",
           title: `Unused export: ${method.name}`,
@@ -270915,6 +271167,8 @@ function checkModuleRules(modules2, methods2, fileDependencies, enabledRules, mo
       if (mod2.kind === "class" && mod2.exportCount > 0 && !importedTargets.has(mod2.name)) {
         if (entryPointFiles?.has(mod2.filePath))
           continue;
+        if (usedAsType.has(mod2.name))
+          continue;
         violations2.push({
           ruleKey: "arch/unused-export",
           title: `Unused export: ${mod2.name}`,
@@ -270933,11 +271187,32 @@ function checkModuleRules(modules2, methods2, fileDependencies, enabledRules, mo
       connectedModules.add(`${dep.sourceService}::${dep.sourceModule}`);
       connectedModules.add(`${dep.targetService}::${dep.targetModule}`);
     }
+    if (methodLevelDeps) {
+      for (const dep of methodLevelDeps) {
+        connectedModules.add(`${dep.callerService}::${dep.callerModule}`);
+        connectedModules.add(`${dep.calleeService}::${dep.calleeModule}`);
+      }
+    }
+    const moduleMethodNames = /* @__PURE__ */ new Map();
+    for (const m of methods2) {
+      const mKey = `${m.serviceName}::${m.moduleName}`;
+      const arr = moduleMethodNames.get(mKey) || [];
+      arr.push(m.name);
+      moduleMethodNames.set(mKey, arr);
+    }
     for (const mod2 of modules2) {
       const key = `${mod2.serviceName}::${mod2.name}`;
       if (!connectedModules.has(key) && !dbConnectedModuleKeys?.has(key)) {
         if (entryPointFiles?.has(mod2.filePath))
           continue;
+        if (usedAsType.has(mod2.name))
+          continue;
+        const sameFileRefs = calledInOwnFile.get(mod2.filePath);
+        if (sameFileRefs) {
+          const modMethods = moduleMethodNames.get(key) || [];
+          if (sameFileRefs.has(mod2.name) || modMethods.some((m) => sameFileRefs.has(m)))
+            continue;
+        }
         violations2.push({
           ruleKey: "arch/dead-module",
           title: `Dead module: ${mod2.name}`,
@@ -271035,9 +271310,10 @@ function checkModuleRules(modules2, methods2, fileDependencies, enabledRules, mo
   }
   return violations2;
 }
-function checkMethodRules(methods2, enabledRules, methodLevelDeps, entryPointFiles) {
+function checkMethodRules(methods2, enabledRules, methodLevelDeps, entryPointFiles, fileAnalyses) {
   const violations2 = [];
   const ruleKeys = new Set(enabledRules.filter((r) => r.type === "deterministic" && r.enabled).map((r) => r.key));
+  const calledInOwnFile = buildSameFileCalls(fileAnalyses);
   if (ruleKeys.has("arch/long-method")) {
     for (const method of methods2) {
       if (method.statementCount != null && method.statementCount > LONG_METHOD_STATEMENTS) {
@@ -271056,11 +271332,12 @@ function checkMethodRules(methods2, enabledRules, methodLevelDeps, entryPointFil
   }
   if (ruleKeys.has("arch/too-many-parameters")) {
     for (const method of methods2) {
-      if (method.paramCount >= TOO_MANY_PARAMS) {
+      const paramThreshold = getMaxParameters(method.filePath);
+      if (method.paramCount >= paramThreshold) {
         violations2.push({
           ruleKey: "arch/too-many-parameters",
           title: `Too many parameters: ${method.moduleName}.${method.name}`,
-          description: `${method.name} has ${method.paramCount} parameters (threshold: ${TOO_MANY_PARAMS}). Consider using an options object or splitting the function.`,
+          description: `${method.name} has ${method.paramCount} parameters (threshold: ${paramThreshold}). Consider using an options object or splitting the function.`,
           severity: "low",
           serviceName: method.serviceName,
           moduleName: method.moduleName,
@@ -271097,6 +271374,10 @@ function checkMethodRules(methods2, enabledRules, methodLevelDeps, entryPointFil
       if (!connectedMethods.has(key)) {
         if (entryPointFiles?.has(method.filePath))
           continue;
+        if (calledInOwnFile.get(method.filePath)?.has(method.name))
+          continue;
+        if (method.isImplicitCall)
+          continue;
         violations2.push({
           ruleKey: "arch/dead-method",
           title: `Dead method: ${method.moduleName}.${method.name}`,
@@ -271112,13 +271393,13 @@ function checkMethodRules(methods2, enabledRules, methodLevelDeps, entryPointFil
   }
   return violations2;
 }
-var GOD_MODULE_THRESHOLD, LONG_METHOD_STATEMENTS, TOO_MANY_PARAMS, DEEP_NESTING_THRESHOLD;
+var GOD_MODULE_THRESHOLD, LONG_METHOD_STATEMENTS, DEEP_NESTING_THRESHOLD;
 var init_module_rules_checker = __esm({
   "packages/analyzer/dist/rules/module-rules-checker.js"() {
     "use strict";
+    init_language_config();
     GOD_MODULE_THRESHOLD = 15;
     LONG_METHOD_STATEMENTS = 30;
-    TOO_MANY_PARAMS = 5;
     DEEP_NESTING_THRESHOLD = 4;
   }
 });
@@ -271482,7 +271763,7 @@ var init_python5 = __esm({
           return null;
         const exceptIdx = children.indexOf(exceptKeyword);
         const colonIdx = children.indexOf(colon);
-        const hasCatchType = children.slice(exceptIdx + 1, colonIdx).some((c) => c.type === "identifier" || c.type === "as_pattern" || c.type === "dotted_name");
+        const hasCatchType = children.slice(exceptIdx + 1, colonIdx).some((c) => c.type === "identifier" || c.type === "as_pattern" || c.type === "dotted_name" || c.type === "attribute" || c.type === "tuple");
         if (!hasCatchType) {
           return makeViolation(this.ruleKey, node, filePath, "high", "Bare except clause", "Bare `except:` catches all exceptions including KeyboardInterrupt and SystemExit. Use `except Exception:` instead.", sourceCode, "Replace `except:` with `except Exception:` or a more specific exception type.");
         }
@@ -271565,9 +271846,10 @@ var init_universal = __esm({
       nodeTypes: ["string", "template_string"],
       visit(node, filePath, sourceCode) {
         const text3 = node.text;
-        const value = text3.slice(1, -1);
-        if (value.length < 8)
+        const stripped = text3.replace(/^[fFbBrRuU]*['"`]{1,3}|['"`]{1,3}$/g, "");
+        if (stripped.length < 8)
           return null;
+        const value = stripped;
         for (const pattern of SECRET_PATTERNS) {
           if (pattern.test(value)) {
             return makeViolation(this.ruleKey, node, filePath, "critical", "Hardcoded secret detected", "This string looks like a hardcoded API key, token, or password. Use environment variables instead.", sourceCode, "Move this secret to an environment variable and reference it via process.env.");
@@ -271575,6 +271857,9 @@ var init_universal = __esm({
         }
         const parent = node.parent;
         if (parent) {
+          if (parent.type === "pair" && parent.childForFieldName("key") === node) {
+            return null;
+          }
           const varDeclarator = parent.type === "variable_declarator" ? parent : null;
           const assignment = parent.type === "assignment_expression" || parent.type === "assignment" ? parent : null;
           const propAssignment = parent.type === "pair" ? parent : null;
@@ -271582,7 +271867,9 @@ var init_universal = __esm({
           if (nameNode) {
             const name21 = nameNode.text.toLowerCase();
             const secretNames = ["password", "passwd", "secret", "apikey", "api_key", "token", "auth_token", "access_token", "private_key"];
-            if (secretNames.some((s) => name21.includes(s)) && value.length >= 8 && !/^(true|false|null|undefined|localhost|https?:\/\/)/.test(value)) {
+            const isNonSecretName = /(?:uri|url|endpoint|type|scope|name|header|grant|method)/.test(name21);
+            const isNonSecretValue = /https?:\/\//.test(value) || /^(true|false|null|undefined|localhost|None|True|False|Bearer)$/i.test(value) || /[[\]<>{}()#.=\s]/.test(value);
+            if (secretNames.some((s) => name21.includes(s)) && value.length >= 8 && !isNonSecretName && !isNonSecretValue) {
               return makeViolation(this.ruleKey, node, filePath, "critical", "Hardcoded secret detected", `Variable "${nameNode.text}" contains what appears to be a hardcoded secret. Use environment variables instead.`, sourceCode, "Move this secret to an environment variable.");
             }
           }
@@ -271745,6 +272032,7 @@ __export(dist_exports, {
   getAllTestPatterns: () => getAllTestPatterns,
   getLanguageConfig: () => getLanguageConfig,
   getLspServerConfig: () => getLspServerConfig,
+  getMaxParameters: () => getMaxParameters,
   getParser: () => getParser,
   hasLspServer: () => hasLspServer,
   isBootstrapEntry: () => isBootstrapEntry,
@@ -327578,10 +327866,26 @@ function buildFlowTemplateVars(context2) {
     stepList
   };
 }
-function getLangfuse() {
+async function getLangfuse() {
   if (!(config.langfuse.publicKey && config.langfuse.secretKey)) {
     return null;
   }
+  if (!langfuseChecked) {
+    langfuseChecked = true;
+    try {
+      const res = await fetch(`${config.langfuse.baseUrl || "http://localhost:3001"}/api/public/health`, {
+        signal: AbortSignal.timeout(3e3)
+      });
+      langfuseAvailable = res.ok;
+    } catch {
+      langfuseAvailable = false;
+    }
+    if (!langfuseAvailable) {
+      console.log("[Langfuse] Unavailable \u2014 using local prompts for this session.");
+      return null;
+    }
+  }
+  if (!langfuseAvailable) return null;
   if (!langfuseInstance) {
     langfuseInstance = new Langfuse({
       publicKey: config.langfuse.publicKey,
@@ -327592,7 +327896,7 @@ function getLangfuse() {
   return langfuseInstance;
 }
 async function getPrompt(name21, variables) {
-  const langfuse = getLangfuse();
+  const langfuse = await getLangfuse();
   const localDef = PROMPT_DEFINITIONS[name21];
   if (langfuse) {
     try {
@@ -327612,7 +327916,7 @@ async function getPrompt(name21, variables) {
   }
   return { text: text3, langfusePrompt: null };
 }
-var PROMPT_DEFINITIONS, langfuseInstance;
+var PROMPT_DEFINITIONS, langfuseInstance, langfuseChecked, langfuseAvailable;
 var init_prompts = __esm({
   "apps/server/src/services/llm/prompts.ts"() {
     "use strict";
@@ -327937,6 +328241,8 @@ When suggesting improvements, provide actionable advice that could be passed to
       }
     };
     langfuseInstance = null;
+    langfuseChecked = false;
+    langfuseAvailable = false;
   }
 });
 
@@ -395890,7 +396196,9 @@ var MethodInfoSchema = external_exports.object({
   isExported: external_exports.boolean(),
   lineCount: external_exports.number().optional(),
   statementCount: external_exports.number().optional(),
-  maxNestingDepth: external_exports.number().optional()
+  maxNestingDepth: external_exports.number().optional(),
+  /** Method is called implicitly by the runtime (e.g., Python __init__, __str__, JS constructor) */
+  isImplicitCall: external_exports.boolean().optional()
 });
 var ModuleLevelDependencySchema = external_exports.object({
   sourceModule: external_exports.string(),
@@ -396202,7 +396510,8 @@ var CreateRepoSchema = external_exports.object({
 });
 var AnalyzeRepoSchema = external_exports.object({
   branch: external_exports.string().optional(),
-  codeReview: external_exports.boolean().optional().default(false)
+  codeReview: external_exports.boolean().optional().default(false),
+  deterministicOnly: external_exports.boolean().optional().default(false)
 });
 var GenerateViolationsSchema = external_exports.object({
   analysisId: external_exports.string().uuid().optional()
@@ -400960,7 +401269,8 @@ function runDeterministicModuleChecks(result, enabledDeterministic) {
     dbConnectedModuleKeys,
     result.fileAnalyses,
     libraryServiceNames,
-    result.entryPointFiles
+    result.entryPointFiles,
+    result.methodLevelDependencies || []
   );
 }
 function runDeterministicMethodChecks(result, enabledDeterministic) {
@@ -401007,6 +401317,7 @@ async function runAnalysis(repoPath, _branch, onProgress, options) {
     const fileAnalyses = [];
     const totalFiles = files.length;
     for (let i = 0; i < totalFiles; i++) {
+      if (options?.signal?.aborted) throw new DOMException("Analysis cancelled", "AbortError");
       const file2 = files[i];
       try {
         const analysis = await analyzer.analyzeFile(file2);
@@ -401146,14 +401457,26 @@ init_drizzle_orm();
 init_database();
 init_schema2();
 async function persistAnalysisResult(params) {
-  const { repoId, branch, result, metadata, commitHash } = params;
-  const [analysis] = await db.insert(analyses).values({
-    repoId,
-    branch: branch || null,
-    architecture: result.architecture,
-    metadata: metadata ?? result.metadata,
-    commitHash: commitHash || null
-  }).returning();
+  const { repoId, branch, result, metadata, commitHash, existingAnalysisId } = params;
+  let analysis;
+  if (existingAnalysisId) {
+    const [updated] = await db.update(analyses).set({
+      status: "completed",
+      architecture: result.architecture,
+      metadata: metadata ?? result.metadata
+    }).where(eq(analyses.id, existingAnalysisId)).returning();
+    analysis = updated;
+  } else {
+    const [created] = await db.insert(analyses).values({
+      repoId,
+      branch: branch || null,
+      status: "completed",
+      architecture: result.architecture,
+      metadata: metadata ?? result.metadata,
+      commitHash: commitHash || null
+    }).returning();
+    analysis = created;
+  }
   const serviceIdMap = /* @__PURE__ */ new Map();
   for (const svc of result.services) {
     const [saved] = await db.insert(services).values({
@@ -402643,6 +402966,7 @@ async function runViolationPipeline(input) {
     tracker,
     provider: externalProvider,
     includeCodeReview,
+    deterministicOnly,
     signal
   } = input;
   const allRules = await getEnabledRules();
@@ -402687,7 +403011,7 @@ async function runViolationPipeline(input) {
     detViolationIdMap.set(`${category}::${v.ruleKey}::${v.serviceName}::${v.title}`, row.id);
   }
   const enabledCodeRules = allRules.filter((r) => r.category === "code" && r.type === "deterministic");
-  const enabledLlmCodeRules = includeCodeReview ? allRules.filter((r) => r.category === "code" && r.type === "llm" && r.prompt) : [];
+  const enabledLlmCodeRules = includeCodeReview && !deterministicOnly ? allRules.filter((r) => r.category === "code" && r.type === "llm" && r.prompt) : [];
   const allCodeViolations = [];
   const fileContents = /* @__PURE__ */ new Map();
   const filesToScan = changedFileSet ? [...changedFileSet].map((relPath) => ({ filePath: relPath, resolve: true })) : (result.fileAnalyses || []).map((fa) => ({ filePath: fa.filePath, resolve: !path6.isAbsolute(fa.filePath) }));
@@ -402823,12 +403147,14 @@ async function runViolationPipeline(input) {
   }
   const architectureContext = `Architecture: ${result.architecture}
 Services: ${result.services.map((s) => `${s.name} (${s.type})`).join(", ")}`;
-  const provider = externalProvider ?? createLLMProvider();
+  const provider = deterministicOnly ? void 0 : externalProvider ?? createLLMProvider();
   const now2 = /* @__PURE__ */ new Date();
   const allNewViolations = [];
   const allResolvedViolationIds = [];
-  tracker?.start("enrich", `Enriching ${allDetEntries.length} detections...`);
-  tracker?.start("architecture");
+  if (!deterministicOnly) {
+    tracker?.start("enrich", `Enriching ${allDetEntries.length} detections...`);
+    tracker?.start("architecture");
+  }
   const deterministicPromise = (async () => {
     let detectionsToEnrich;
     if (previousDeterministicViolations.length > 0) {
@@ -402891,62 +403217,101 @@ Services: ${result.services.map((s) => `${s.name} (${s.type})`).join(", ")}`;
       detectionsToEnrich = allDetEntries;
     }
     if (detectionsToEnrich.length > 0) {
-      const detByViolationId = new Map(detectionsToEnrich.map((d) => [d.detViolationId, d]));
-      const enrichmentResult = await provider.enrichDeterministicViolations(
-        detectionsToEnrich.map((d) => ({
-          id: d.detViolationId,
-          ruleKey: d.ruleKey,
-          title: d.title,
-          description: d.description,
-          severity: d.severity,
-          category: d.category,
-          serviceName: d.serviceName,
-          moduleName: d.moduleName,
-          methodName: d.methodName
-        })),
-        architectureContext
-      );
-      for (const enriched of enrichmentResult.enrichedViolations) {
-        const det = detByViolationId.get(enriched.id);
-        if (!det) continue;
-        const violationId = v4_default();
-        await db.insert(violations).values({
-          id: violationId,
-          repoId,
-          analysisId,
-          type: det.violationType,
-          title: enriched.title,
-          content: enriched.content,
-          severity: det.severity,
-          status: "new",
-          targetServiceId: det.targetServiceId,
-          targetModuleId: det.targetModuleId,
-          targetMethodId: det.targetMethodId,
-          fixPrompt: enriched.fixPrompt,
-          ruleKey: det.ruleKey,
-          deterministicViolationId: det.detViolationId,
-          firstSeenAnalysisId: analysisId,
-          firstSeenAt: now2
-        });
-        allNewViolations.push({
-          type: det.violationType,
-          title: enriched.title,
-          content: enriched.content,
-          severity: det.severity,
-          targetServiceId: det.targetServiceId,
-          targetModuleId: det.targetModuleId,
-          targetMethodId: det.targetMethodId,
-          targetServiceName: det.serviceName || null,
-          targetModuleName: det.moduleName || null,
-          targetMethodName: det.methodName || null,
-          fixPrompt: enriched.fixPrompt,
-          ruleKey: det.ruleKey
-        });
+      if (deterministicOnly) {
+        for (const det of detectionsToEnrich) {
+          const violationId = v4_default();
+          await db.insert(violations).values({
+            id: violationId,
+            repoId,
+            analysisId,
+            type: det.violationType,
+            title: det.title,
+            content: det.description,
+            severity: det.severity,
+            status: "new",
+            targetServiceId: det.targetServiceId,
+            targetModuleId: det.targetModuleId,
+            targetMethodId: det.targetMethodId,
+            fixPrompt: null,
+            ruleKey: det.ruleKey,
+            deterministicViolationId: det.detViolationId,
+            firstSeenAnalysisId: analysisId,
+            firstSeenAt: now2
+          });
+          allNewViolations.push({
+            type: det.violationType,
+            title: det.title,
+            content: det.description,
+            severity: det.severity,
+            targetServiceId: det.targetServiceId,
+            targetModuleId: det.targetModuleId,
+            targetMethodId: det.targetMethodId,
+            targetServiceName: det.serviceName || null,
+            targetModuleName: det.moduleName || null,
+            targetMethodName: det.methodName || null,
+            fixPrompt: null,
+            ruleKey: det.ruleKey
+          });
+        }
+        emitProgress(88, "Deterministic violations persisted");
+      } else {
+        const detByViolationId = new Map(detectionsToEnrich.map((d) => [d.detViolationId, d]));
+        const enrichmentResult = await provider.enrichDeterministicViolations(
+          detectionsToEnrich.map((d) => ({
+            id: d.detViolationId,
+            ruleKey: d.ruleKey,
+            title: d.title,
+            description: d.description,
+            severity: d.severity,
+            category: d.category,
+            serviceName: d.serviceName,
+            moduleName: d.moduleName,
+            methodName: d.methodName
+          })),
+          architectureContext
+        );
+        for (const enriched of enrichmentResult.enrichedViolations) {
+          const det = detByViolationId.get(enriched.id);
+          if (!det) continue;
+          const violationId = v4_default();
+          await db.insert(violations).values({
+            id: violationId,
+            repoId,
+            analysisId,
+            type: det.violationType,
+            title: enriched.title,
+            content: enriched.content,
+            severity: det.severity,
+            status: "new",
+            targetServiceId: det.targetServiceId,
+            targetModuleId: det.targetModuleId,
+            targetMethodId: det.targetMethodId,
+            fixPrompt: enriched.fixPrompt,
+            ruleKey: det.ruleKey,
+            deterministicViolationId: det.detViolationId,
+            firstSeenAnalysisId: analysisId,
+            firstSeenAt: now2
+          });
+          allNewViolations.push({
+            type: det.violationType,
+            title: enriched.title,
+            content: enriched.content,
+            severity: det.severity,
+            targetServiceId: det.targetServiceId,
+            targetModuleId: det.targetModuleId,
+            targetMethodId: det.targetMethodId,
+            targetServiceName: det.serviceName || null,
+            targetModuleName: det.moduleName || null,
+            targetMethodName: det.methodName || null,
+            fixPrompt: enriched.fixPrompt,
+            ruleKey: det.ruleKey
+          });
+        }
+        tracker?.done("enrich", `${enrichmentResult.enrichedViolations.length} violations enriched`);
+        emitProgress(88, "Deterministic violations enriched");
       }
-      tracker?.done("enrich", `${enrichmentResult.enrichedViolations.length} violations enriched`);
-      emitProgress(88, "Deterministic violations enriched");
     } else {
-      tracker?.done("enrich", "No detections to enrich");
+      if (!deterministicOnly) tracker?.done("enrich", "No detections to enrich");
     }
   })();
   const enabledLlmRules = allRules.filter((r) => r.type === "llm" && r.prompt && r.category !== "code").map((r) => ({ key: r.key, name: r.name, severity: r.severity, prompt: r.prompt, category: r.category }));
@@ -403046,13 +403411,13 @@ Services: ${result.services.map((s) => `${s.name} (${s.type})`).join(", ")}`;
     existingDatabaseViolations: hasLlmOnlyExistingViolations ? existingDatabaseViolations : void 0,
     existingModuleViolations: hasLlmOnlyExistingViolations ? existingModuleViolations : void 0
   };
-  const llmCodePromise = llmCodeBatches.length > 0 ? provider.generateAllCodeViolations(llmCodeBatches) : Promise.resolve({ violations: [] });
+  const llmCodePromise = llmCodeBatches.length > 0 && !deterministicOnly ? provider.generateAllCodeViolations(llmCodeBatches) : Promise.resolve({ violations: [] });
   let serviceDescriptions = [];
   let llmCodeResolvedIds = [];
   let llmCodeUnchangedIds = [];
-  emitProgress(86, "Analyzing architecture & modules...");
+  if (!deterministicOnly) emitProgress(86, "Analyzing architecture & modules...");
   let llmStepCount = 0;
-  const llmRulePromise = (async () => {
+  const llmRulePromise = deterministicOnly ? Promise.resolve() : (async () => {
     if (hasLlmOnlyExistingViolations) {
       const archResult = await generateViolationsWithLifecycle(violationInput, (step) => {
         llmStepCount++;
@@ -403124,6 +403489,7 @@ Services: ${result.services.map((s) => `${s.name} (${s.type})`).join(", ")}`;
         });
       }
     }
+    tracker?.done("architecture");
   })();
   const codePromise = llmCodePromise;
   const [detResult, llmResult] = await Promise.allSettled([deterministicPromise, llmRulePromise]);
@@ -403137,9 +403503,6 @@ Services: ${result.services.map((s) => `${s.name} (${s.type})`).join(", ")}`;
     log2(`[Violations] LLM rule analysis failed: ${msg}`);
     tracker?.error("architecture", `Failed: ${msg.slice(0, 80)}`);
   }
-  if (llmResult.status === "fulfilled") {
-    tracker?.done("architecture");
-  }
   throwIfAborted(signal);
   tracker?.start("persist", "Saving results...");
   emitProgress(95, "Analysis complete");
@@ -403473,7 +403836,7 @@ router2.post(
       if (!parsed.success) {
         throw createAppError("Invalid request body", 400);
       }
-      const { codeReview: includeCodeReview } = parsed.data;
+      const { codeReview: includeCodeReview, deterministicOnly } = parsed.data;
       const [repo] = await db.select().from(repos).where(eq(repos.id, id)).limit(1);
       if (!repo) {
         throw createAppError("Repo not found", 404);
@@ -403481,22 +403844,31 @@ router2.post(
       const git = await getGit(repo.path);
       const branch = (await git.branch()).current || null;
       const commitHash = (await git.revparse(["HEAD"])).trim();
-      res.status(202).json({ message: "Analysis started", repoId: id, branch });
-      const abortController = registerAnalysis(id, "pending");
+      const [runningAnalysis] = await db.insert(analyses).values({
+        repoId: id,
+        branch,
+        status: "running",
+        architecture: "unknown",
+        commitHash
+      }).returning();
+      res.status(202).json({ message: "Analysis started", repoId: id, branch, analysisId: runningAnalysis.id });
+      const abortController = registerAnalysis(id, runningAnalysis.id);
       try {
         const trackerSteps = [
           { key: "parse", label: "Parsing repository" },
           { key: "detect", label: "Deterministic checks" },
-          { key: "enrich", label: "Enriching detections" },
-          { key: "architecture", label: "Architecture analysis" },
+          ...!deterministicOnly ? [
+            { key: "enrich", label: "Enriching detections" },
+            { key: "architecture", label: "Architecture analysis" }
+          ] : [],
           { key: "persist", label: "Saving results" },
-          ...includeCodeReview ? [{ key: "code-review", label: "Code review" }] : []
+          ...!deterministicOnly && includeCodeReview ? [{ key: "code-review", label: "Code review" }] : []
         ];
         const tracker = new StepTracker(id, trackerSteps);
         tracker.start("parse", "Starting analysis...");
         const result = await runAnalysis(repo.path, branch ?? void 0, (progress) => {
           tracker.detail("parse", progress.detail ?? "Analyzing...");
-        });
+        }, { signal: abortController.signal });
         const prevConditions = [eq(analyses.repoId, id), notDiffAnalysis2];
         if (branch) prevConditions.push(eq(analyses.branch, branch));
         const prevAnalyses = await db.select().from(analyses).where(and(...prevConditions)).orderBy(desc(analyses.createdAt)).limit(1);
@@ -403520,7 +403892,13 @@ router2.post(
         for (const da of oldDiffAnalyses) {
           await db.delete(analyses).where(eq(analyses.id, da.id));
         }
-        const { analysisId: newAnalysisId, serviceIdMap, moduleIdMap, methodIdMap, dbIdMap } = await persistAnalysisResult({ repoId: id, branch, result, commitHash, metadata: { codeReview: includeCodeReview } });
+        if (abortController.signal.aborted) {
+          await db.update(analyses).set({ status: "cancelled" }).where(eq(analyses.id, runningAnalysis.id));
+          emitAnalysisCanceled(id);
+          unregisterAnalysis(id);
+          return;
+        }
+        const { analysisId: newAnalysisId, serviceIdMap, moduleIdMap, methodIdMap, dbIdMap } = await persistAnalysisResult({ repoId: id, branch, result, commitHash, metadata: { codeReview: includeCodeReview, deterministicOnly }, existingAnalysisId: runningAnalysis.id });
         const analysis = { id: newAnalysisId };
         const prevConditionsForLifecycle = [eq(analyses.repoId, id), notDiffAnalysis2];
         if (branch) prevConditionsForLifecycle.push(eq(analyses.branch, branch));
@@ -403638,10 +404016,12 @@ router2.post(
           }
         }
         tracker.done("parse", `${result.services.length} services, ${result.fileAnalyses?.length ?? 0} files`);
-        const provider = createLLMProvider();
-        provider.setAnalysisId(newAnalysisId);
-        provider.setRepoId(id);
-        provider.setAbortSignal(abortController.signal);
+        const provider = deterministicOnly ? void 0 : createLLMProvider();
+        if (provider) {
+          provider.setAnalysisId(newAnalysisId);
+          provider.setRepoId(id);
+          provider.setAbortSignal(abortController.signal);
+        }
         let codeReviewPromise = null;
         try {
           const pipelineResult = await runViolationPipeline({
@@ -403658,7 +404038,8 @@ router2.post(
             previousDeterministicViolations,
             changedFileSet,
             tracker,
-            includeCodeReview,
+            includeCodeReview: deterministicOnly ? false : includeCodeReview,
+            deterministicOnly,
             provider,
             signal: abortController.signal
           });
@@ -403676,7 +404057,7 @@ router2.post(
           emitViolationsReady(id, analysis.id);
         }
         try {
-          await provider.flushUsage();
+          await provider?.flushUsage();
         } catch (usageError) {
           console.error("[Usage] Failed to record usage:", usageError instanceof Error ? usageError.message : String(usageError));
         }
@@ -403689,7 +404070,7 @@ router2.post(
         if (codeReviewPromise) {
           console.log(`[CodeReview] Started background code review for repo ${id}`);
           emitCodeReviewProgress(id, analysis.id);
-          codeReviewPromise.then(() => provider.flushUsage()).then(() => {
+          codeReviewPromise.then(() => provider?.flushUsage()).then(() => {
             console.log(`[CodeReview] Completed for repo ${id}`);
             emitCodeReviewReady(id, analysis.id);
           }).catch((err) => {
@@ -403706,11 +404087,14 @@ router2.post(
       } catch (error40) {
         if (error40 instanceof DOMException && error40.name === "AbortError") {
           console.log(`[Analysis] Cancelled for repo ${id}`);
+          await db.update(analyses).set({ status: "cancelled" }).where(eq(analyses.id, runningAnalysis.id));
+          emitAnalysisCanceled(id);
         } else {
           console.error(
             `[Analysis] Failed for repo ${id}:`,
             error40 instanceof Error ? error40.message : String(error40)
           );
+          await db.update(analyses).set({ status: "failed" }).where(eq(analyses.id, runningAnalysis.id));
           emitAnalysisProgress(id, {
             step: "error",
             percent: -1,
@@ -403731,11 +404115,9 @@ router2.post(
       const id = req.params.id;
       const canceled = cancelAnalysis(id);
       if (canceled) {
-        emitAnalysisCanceled(id);
-        res.json({ message: "Analysis cancelled" });
-      } else {
-        throw createAppError("No active analysis for this repo", 404);
+        await db.update(analyses).set({ status: "cancelling" }).where(and(eq(analyses.repoId, id), eq(analyses.status, "running")));
       }
+      res.json({ message: canceled ? "Analysis cancelling" : "No active analysis" });
     } catch (error40) {
       next(error40);
     }
@@ -403809,6 +404191,7 @@ router2.get(
       }
       const analysisList = await db.select({
         id: analyses.id,
+        status: analyses.status,
         branch: analyses.branch,
         commitHash: analyses.commitHash,
         architecture: analyses.architecture,