truecourse 0.4.2 → 0.4.3

package/README.md

@@ -65,6 +65,7 @@ truecourse add                        # Register repo without analyzing
 
 # Dashboard (web UI)
 truecourse dashboard                  # Start + open the dashboard
+truecourse dashboard --reconfigure    # Re-prompt for console vs background service mode
 truecourse dashboard stop             # Stop the dashboard
 truecourse dashboard status           # Show dashboard status
 truecourse dashboard logs             # Tail dashboard logs (service mode only)

package/cli.mjs

@@ -4148,7 +4148,6 @@ __export(helpers_exports, {
   renderDiffResultsSummary: () => renderDiffResultsSummary,
   renderViolations: () => renderViolations,
   renderViolationsSummary: () => renderViolationsSummary,
-  requireDashboard: () => requireDashboard,
   requireRegisteredRepo: () => requireRegisteredRepo,
   severityColor: () => severityColor,
   severityIcon: () => severityIcon,
@@ -4185,19 +4184,6 @@ function getServerUrl() {
   const port = process.env.PORT || DEFAULT_PORT;
   return `http://localhost:${port}`;
 }
-async function requireDashboard() {
-  const url = getServerUrl();
-  try {
-    const res = await fetch(`${url}/api/health`);
-    if (!res.ok) throw new Error();
-  } catch {
-    O2.error(
-      `TrueCourse dashboard is not running at ${url}.
-Start it first with: truecourse dashboard`
-    );
-    process.exit(1);
-  }
-}
 function requireRegisteredRepo() {
   const repoDir = resolveRepoDir(process.cwd());
   if (!repoDir) {
@@ -9787,6 +9773,16 @@ function readProjectConfig(repoDir) {
     return { ...EMPTY };
   }
 }
+function writeProjectConfig(repoDir, config2) {
+  ensureRepoTruecourseDir(repoDir);
+  fs5.writeFileSync(getRepoConfigPath(repoDir), JSON.stringify(config2, null, 2), "utf-8");
+}
+function updateProjectConfig(repoDir, patch) {
+  const current = readProjectConfig(repoDir);
+  const next = { ...current, ...patch };
+  writeProjectConfig(repoDir, next);
+  return next;
+}
 var EMPTY;
 var init_project_config = __esm({
   "apps/server/dist/config/project-config.js"() {
@@ -94126,6 +94122,12 @@ function appendHistory(repoPath, entry) {
   history.analyses.push(entry);
   atomicWriteJson(historyPath(repoPath), history);
 }
+function readDiff(repoPath) {
+  const file = diffPath(repoPath);
+  if (!fs7.existsSync(file))
+    return null;
+  return JSON.parse(fs7.readFileSync(file, "utf-8"));
+}
 function writeDiff(repoPath, diff) {
   atomicWriteJson(diffPath(repoPath), diff);
 }
@@ -120642,80 +120644,6 @@ var init_schemas = __esm({
 });
 
 // packages/shared/dist/index.js
-var dist_exports3 = {};
-__export(dist_exports3, {
-  AnalysisRuleSchema: () => AnalysisRuleSchema,
-  AnalyzeRepoSchema: () => AnalyzeRepoSchema,
-  ArchitectureSchema: () => ArchitectureSchema,
-  ArchitectureSummarySchema: () => ArchitectureSummarySchema,
-  ArchitectureSummaryServiceSchema: () => ArchitectureSummaryServiceSchema,
-  BreakdownResponseSchema: () => BreakdownResponseSchema,
-  CODE_DOMAINS: () => CODE_DOMAINS,
-  CallExpressionSchema: () => CallExpressionSchema,
-  ClassDefinitionSchema: () => ClassDefinitionSchema,
-  ClassPropertySchema: () => ClassPropertySchema,
-  ColumnInfoSchema: () => ColumnInfoSchema,
-  ContextRequirementSchema: () => ContextRequirementSchema,
-  ContextTierSchema: () => ContextTierSchema,
-  CreateRepoSchema: () => CreateRepoSchema,
-  DEFAULT_DOMAINS: () => DEFAULT_DOMAINS,
-  DOMAIN_ORDER: () => DOMAIN_ORDER,
-  DatabaseConnectionInfoSchema: () => DatabaseConnectionInfoSchema,
-  DatabaseDetectionResultSchema: () => DatabaseDetectionResultSchema,
-  DatabaseInfoSchema: () => DatabaseInfoSchema,
-  DatabaseTypeSchema: () => DatabaseTypeSchema,
-  EntityFieldSchema: () => EntityFieldSchema,
-  EntityRelationshipSchema: () => EntityRelationshipSchema,
-  EntitySchema: () => EntitySchema,
-  ExportStatementSchema: () => ExportStatementSchema,
-  FileAnalysisSchema: () => FileAnalysisSchema,
-  FileFilterSchema: () => FileFilterSchema,
-  FlowSchema: () => FlowSchema,
-  FlowStepSchema: () => FlowStepSchema,
-  FlowStepTypeSchema: () => FlowStepTypeSchema,
-  FlowTriggerSchema: () => FlowTriggerSchema,
-  FunctionDefinitionSchema: () => FunctionDefinitionSchema,
-  FunctionFilterSchema: () => FunctionFilterSchema,
-  GenerateViolationsSchema: () => GenerateViolationsSchema,
-  HttpCallSchema: () => HttpCallSchema,
-  ImportSpecifierSchema: () => ImportSpecifierSchema,
-  ImportStatementSchema: () => ImportStatementSchema,
-  IndexInfoSchema: () => IndexInfoSchema,
-  LayerDependencyInfoSchema: () => LayerDependencyInfoSchema,
-  LayerDetailSchema: () => LayerDetailSchema,
-  LayerDetectionResultSchema: () => LayerDetectionResultSchema,
-  LayerSchema: () => LayerSchema,
-  MethodInfoSchema: () => MethodInfoSchema,
-  MethodLevelDependencySchema: () => MethodLevelDependencySchema,
-  ModuleDependencySchema: () => ModuleDependencySchema,
-  ModuleInfoSchema: () => ModuleInfoSchema,
-  ModuleKindSchema: () => ModuleKindSchema,
-  ModuleLevelDependencySchema: () => ModuleLevelDependencySchema,
-  ParameterSchema: () => ParameterSchema,
-  RelationInfoSchema: () => RelationInfoSchema,
-  ResolutionResponseSchema: () => ResolutionResponseSchema,
-  RouteRegistrationSchema: () => RouteRegistrationSchema,
-  RouterMountSchema: () => RouterMountSchema,
-  RuleCategorySchema: () => RuleCategorySchema,
-  RuleDomainSchema: () => RuleDomainSchema,
-  RuleSeveritySchema: () => RuleSeveritySchema,
-  RuleTypeSchema: () => RuleTypeSchema,
-  ServiceDependencyDetailSchema: () => ServiceDependencyDetailSchema,
-  ServiceDependencyInfoSchema: () => ServiceDependencyInfoSchema,
-  ServiceInfoSchema: () => ServiceInfoSchema,
-  ServiceTypeSchema: () => ServiceTypeSchema,
-  SourceLocationSchema: () => SourceLocationSchema,
-  SupportedLanguageSchema: () => SupportedLanguageSchema,
-  TableInfoSchema: () => TableInfoSchema,
-  TopOffenderSchema: () => TopOffenderSchema,
-  TopOffendersResponseSchema: () => TopOffendersResponseSchema,
-  TrendDataPointSchema: () => TrendDataPointSchema,
-  TrendResponseSchema: () => TrendResponseSchema,
-  ViolationSchema: () => ViolationSchema,
-  ViolationSeveritySchema: () => ViolationSeveritySchema,
-  ViolationStatusSchema: () => ViolationStatusSchema,
-  ViolationTypeSchema: () => ViolationTypeSchema
-});
 var init_dist7 = __esm({
   "packages/shared/dist/index.js"() {
     "use strict";
@@ -127313,7 +127241,7 @@ function targetUrlFor(baseUrl) {
   const repoDir = resolveRepoDir(process.cwd());
   if (!repoDir) return baseUrl;
   const entry = getProjectByPath(repoDir) ?? registerProject(repoDir);
-  return `${baseUrl}/projects/${entry.slug}`;
+  return `${baseUrl}/repos/${entry.slug}`;
 }
 async function promptRunMode() {
   const choice = await _t({
@@ -127388,7 +127316,7 @@ async function runServiceMode(serverEntry) {
   O2.success(`Dashboard open at ${target}`);
   O2.info("Stop the dashboard with: truecourse dashboard stop");
 }
-async function runDashboard() {
+async function runDashboard(options = {}) {
   mt("Opening TrueCourse dashboard");
   const serverEntry = resolveServerEntry();
   if (!serverEntry) {
@@ -127398,8 +127326,9 @@ async function runDashboard() {
     process.exit(1);
   }
   const configured = fs14.existsSync(getConfigPath());
-  const runMode = configured ? readConfig().runMode : await promptRunMode();
-  if (!configured) writeConfig({ runMode });
+  const shouldPrompt = !configured || options.reconfigure;
+  const runMode = shouldPrompt ? await promptRunMode() : readConfig().runMode;
+  if (shouldPrompt) writeConfig({ runMode });
   if (runMode === "service") {
     try {
       await runServiceMode(serverEntry);
@@ -127497,55 +127426,163 @@ async function runDashboardUninstall() {
 
 // tools/cli/src/commands/list.ts
 init_dist4();
+
+// apps/server/dist/services/violation-query.service.js
+init_analysis_store();
+var SEVERITY_ORDER = {
+  critical: 0,
+  high: 1,
+  medium: 2,
+  low: 3,
+  info: 4
+};
+function listViolations(repoPath, options = {}) {
+  const latest = readLatest(repoPath);
+  if (!latest)
+    return { violations: [], total: 0 };
+  if (options.analysisId && latest.analysis.id !== options.analysisId) {
+    return { violations: [], total: 0 };
+  }
+  const statusMode = options.status ?? "active";
+  let filtered;
+  if (statusMode === "resolved") {
+    filtered = latest.violations.filter((v) => v.status === "resolved");
+  } else if (statusMode === "all") {
+    filtered = latest.violations;
+  } else {
+    const active = ["new", "unchanged"];
+    filtered = latest.violations.filter((v) => active.includes(v.status));
+  }
+  if (options.filePath) {
+    const absPath = options.filePath.startsWith("/") ? options.filePath : `${repoPath}/${options.filePath}`;
+    filtered = filtered.filter((v) => v.type === "code" && (v.filePath === absPath || v.filePath === options.filePath));
+  }
+  filtered.sort((a, b) => {
+    const sa = SEVERITY_ORDER[a.severity] ?? 5;
+    const sb = SEVERITY_ORDER[b.severity] ?? 5;
+    if (sa !== sb)
+      return sa - sb;
+    return b.createdAt.localeCompare(a.createdAt);
+  });
+  const total = filtered.length;
+  const limit = options.limit ?? 0;
+  const offset = options.offset ?? 0;
+  const paged = limit > 0 ? filtered.slice(offset, offset + limit) : filtered;
+  return { violations: paged, total };
+}
+function getDiffResult(repoPath) {
+  const diff = readDiff(repoPath);
+  if (!diff)
+    return null;
+  const latest = readLatest(repoPath);
+  const isStale = latest ? latest.analysis.id !== diff.baseAnalysisId : false;
+  return { diff, isStale };
+}
+
+// tools/cli/src/commands/list.ts
 init_helpers();
 async function runList({ limit = 20, offset = 0 } = {}) {
   mt("Violations");
-  await requireDashboard();
   const repo = requireRegisteredRepo();
-  const serverUrl = getServerUrl();
-  const showAll = !isFinite(limit);
-  const params = new URLSearchParams();
-  if (!showAll) {
-    params.set("limit", String(limit));
-    params.set("offset", String(offset));
-  }
-  const url = `${serverUrl}/api/repos/${repo.id}/violations${params.toString() ? `?${params}` : ""}`;
-  const res = await fetch(url);
-  if (!res.ok) {
-    O2.error(`Failed to fetch violations: ${res.status}`);
-    process.exit(1);
-  }
-  const body = await res.json();
-  if (Array.isArray(body)) {
-    renderViolations(body, { total: body.length });
-  } else {
-    const { violations, total } = body;
-    renderViolations(violations, { total, offset });
+  const { violations, total } = listViolations(repo.path, {
+    limit: isFinite(limit) ? limit : 0,
+    offset
+  });
+  if (total === 0 && violations.length === 0) {
+    O2.info("No violations. Run `truecourse analyze` if you haven't yet.");
+    return;
   }
+  renderViolations(violations, { total, offset });
 }
 async function runListDiff() {
   mt("Diff check results");
-  await requireDashboard();
   const repo = requireRegisteredRepo();
-  const serverUrl = getServerUrl();
-  const res = await fetch(`${serverUrl}/api/repos/${repo.id}/diff-check`);
-  if (!res.ok) {
-    O2.error(`Failed to fetch diff check results: ${res.status}`);
-    process.exit(1);
-  }
-  const result = await res.json();
+  const result = getDiffResult(repo.path);
   if (!result) {
     O2.info("No diff check found. Run `truecourse analyze --diff` first.");
     return;
   }
-  if (result.isStale) {
+  const { diff, isStale } = result;
+  if (isStale) {
     O2.warn("Results may be stale \u2014 baseline analysis has changed.");
   }
-  renderDiffResults(result);
+  const rendered = {
+    isStale,
+    changedFiles: diff.changedFiles,
+    newViolations: diff.newViolations,
+    resolvedViolations: diff.resolvedViolations,
+    summary: { newCount: diff.summary.newCount, resolvedCount: diff.summary.resolvedCount }
+  };
+  renderDiffResults(rendered);
 }
 
-// tools/cli/src/index.ts
+// tools/cli/src/commands/rules.ts
+init_dist4();
+init_dist7();
+init_project_config();
 init_helpers();
+var ALL_CATEGORIES = [...DOMAIN_ORDER];
+async function runRulesCategories(options) {
+  const repo = requireRegisteredRepo();
+  if (options.reset) {
+    updateProjectConfig(repo.path, { enabledCategories: null });
+    O2.success("Reset to global default categories.");
+    return;
+  }
+  if (options.enable || options.disable) {
+    const cat = options.enable ?? options.disable;
+    if (!ALL_CATEGORIES.includes(cat)) {
+      O2.error(`Invalid category: ${cat}. Valid: ${ALL_CATEGORIES.join(", ")}`);
+      process.exit(1);
+    }
+    const config3 = readProjectConfig(repo.path);
+    const hasOverride = config3.enabledCategories != null;
+    const current = new Set(hasOverride ? config3.enabledCategories : ALL_CATEGORIES);
+    if (options.enable) current.add(cat);
+    else current.delete(cat);
+    updateProjectConfig(repo.path, { enabledCategories: [...current] });
+    O2.success(`${options.enable ? "Enabled" : "Disabled"} ${cat} rules for ${repo.name}.`);
+    return;
+  }
+  const config2 = readProjectConfig(repo.path);
+  const isOverride = config2.enabledCategories != null;
+  const enabled = new Set(isOverride ? config2.enabledCategories : ALL_CATEGORIES);
+  const status = (cat) => enabled.has(cat) ? "\x1B[32menabled\x1B[0m" : "\x1B[31mdisabled\x1B[0m";
+  O2.info(
+    `Rule categories for ${repo.name}${isOverride ? " (per-repo override)" : " (global default)"}:`
+  );
+  for (const cat of ALL_CATEGORIES) {
+    console.log(`  ${cat.padEnd(14)} ${status(cat)}`);
+  }
+  console.log("");
+  if (!isOverride) {
+    O2.info("Override with: truecourse rules categories --enable/--disable <name>");
+  }
+}
+async function runRulesLlm(options) {
+  const repo = requireRegisteredRepo();
+  if (options.reset) {
+    updateProjectConfig(repo.path, { enableLlmRules: null });
+    O2.success("Reset LLM rules to global default.");
+    return;
+  }
+  if (options.enable || options.disable) {
+    const enabled = !!options.enable;
+    updateProjectConfig(repo.path, { enableLlmRules: enabled });
+    O2.success(`LLM rules ${enabled ? "enabled" : "disabled"} for ${repo.name}.`);
+    return;
+  }
+  const config2 = readProjectConfig(repo.path);
+  const isOverride = config2.enableLlmRules != null;
+  const effective = isOverride ? config2.enableLlmRules : true;
+  const status = effective ? "\x1B[32menabled\x1B[0m" : "\x1B[31mdisabled\x1B[0m";
+  O2.info(
+    `LLM rules for ${repo.name}${isOverride ? " (per-repo override)" : " (global default)"}: ${status}`
+  );
+  if (!isOverride) {
+    O2.info("Override with: truecourse rules llm --enable/--disable");
+  }
+}
 
 // tools/cli/src/commands/hooks.ts
 import { execSync as execSync5 } from "node:child_process";
@@ -130437,9 +130474,9 @@ async function runHooksRun() {
 
 // tools/cli/src/index.ts
 var program2 = new Command();
-program2.name("truecourse").version("0.4.2").description("TrueCourse CLI \u2014 analyze your repository and open the dashboard");
-var dashboardCmd = program2.command("dashboard").description("Start the TrueCourse dashboard and open it in your browser").action(async () => {
-  await runDashboard();
+program2.name("truecourse").version("0.4.3").description("TrueCourse CLI \u2014 analyze your repository and open the dashboard");
+var dashboardCmd = program2.command("dashboard").description("Start the TrueCourse dashboard and open it in your browser").option("--reconfigure", "Re-prompt for console vs background service mode").action(async (options) => {
+  await runDashboard({ reconfigure: options.reconfigure });
 });
 dashboardCmd.command("stop").description("Stop the dashboard").action(async () => {
   await runDashboardStop();
@@ -130475,94 +130512,10 @@ program2.command("list").description("List violations from the latest analysis")
 });
 var rulesCmd = program2.command("rules").description("Manage analysis rules");
 rulesCmd.command("categories").description("View or override rule categories for this repository").option("--enable <category>", "Enable a category").option("--disable <category>", "Disable a category").option("--reset", "Reset to global default").action(async (options) => {
-  await requireDashboard();
-  const repo = requireRegisteredRepo();
-  const serverUrl = getServerUrl();
-  const { DOMAIN_ORDER: DOMAIN_ORDER2 } = await Promise.resolve().then(() => (init_dist7(), dist_exports3));
-  const allCategories = [...DOMAIN_ORDER2];
-  if (options.reset) {
-    await fetch(`${serverUrl}/api/repos/${repo.id}/categories`, {
-      method: "PUT",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ enabledCategories: null })
-    });
-    O2.success("Reset to global default categories.");
-    return;
-  }
-  if (options.enable || options.disable) {
-    const cat = options.enable || options.disable;
-    if (!allCategories.includes(cat)) {
-      O2.error(`Invalid category: ${cat}. Valid: ${allCategories.join(", ")}`);
-      process.exit(1);
-    }
-    const repoRes2 = await fetch(`${serverUrl}/api/repos/${repo.id}`);
-    const repoData2 = await repoRes2.json();
-    const hasOverride = repoData2.enabledCategories !== null && repoData2.enabledCategories !== void 0;
-    const current = new Set(
-      hasOverride ? repoData2.enabledCategories : allCategories
-    );
-    if (options.enable) current.add(cat);
-    else current.delete(cat);
-    await fetch(`${serverUrl}/api/repos/${repo.id}/categories`, {
-      method: "PUT",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ enabledCategories: [...current] })
-    });
-    O2.success(`${options.enable ? "Enabled" : "Disabled"} ${cat} rules for ${repo.name}.`);
-    return;
-  }
-  const repoRes = await fetch(`${serverUrl}/api/repos/${repo.id}`);
-  const repoData = await repoRes.json();
-  const isOverride = repoData.enabledCategories !== null && repoData.enabledCategories !== void 0;
-  const enabled = new Set(
-    isOverride ? repoData.enabledCategories : allCategories
-  );
-  const status = (cat) => enabled.has(cat) ? "\x1B[32menabled\x1B[0m" : "\x1B[31mdisabled\x1B[0m";
-  O2.info(
-    `Rule categories for ${repo.name}${isOverride ? " (per-repo override)" : " (global default)"}:`
-  );
-  for (const cat of allCategories) {
-    console.log(`  ${cat.padEnd(14)} ${status(cat)}`);
-  }
-  console.log("");
-  if (!isOverride) {
-    O2.info("Override with: truecourse rules categories --enable/--disable <name>");
-  }
+  await runRulesCategories(options);
 });
 rulesCmd.command("llm").description("Enable or disable LLM-powered rules for this repository").option("--enable", "Enable LLM rules").option("--disable", "Disable LLM rules").option("--reset", "Reset to global default").action(async (options) => {
-  await requireDashboard();
-  const repo = requireRegisteredRepo();
-  const serverUrl = getServerUrl();
-  if (options.reset) {
-    await fetch(`${serverUrl}/api/repos/${repo.id}/llm`, {
-      method: "PUT",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ enableLlmRules: null })
-    });
-    O2.success("Reset LLM rules to global default.");
-    return;
-  }
-  if (options.enable || options.disable) {
-    const enabled = !!options.enable;
-    await fetch(`${serverUrl}/api/repos/${repo.id}/llm`, {
-      method: "PUT",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ enableLlmRules: enabled })
-    });
-    O2.success(`LLM rules ${enabled ? "enabled" : "disabled"} for ${repo.name}.`);
-    return;
-  }
-  const repoRes = await fetch(`${serverUrl}/api/repos/${repo.id}`);
-  const repoData = await repoRes.json();
-  const isOverride = repoData.enableLlmRules !== null && repoData.enableLlmRules !== void 0;
-  const effective = isOverride ? repoData.enableLlmRules : true;
-  const status = effective ? "\x1B[32menabled\x1B[0m" : "\x1B[31mdisabled\x1B[0m";
-  O2.info(
-    `LLM rules for ${repo.name}${isOverride ? " (per-repo override)" : " (global default)"}: ${status}`
-  );
-  if (!isOverride) {
-    O2.info("Override with: truecourse rules llm --enable/--disable");
-  }
+  await runRulesLlm(options);
 });
 var telemetryCmd = program2.command("telemetry").description("Manage anonymous usage telemetry");
 telemetryCmd.command("enable").description("Enable anonymous usage telemetry").action(() => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "truecourse",
-  "version": "0.4.2",
+  "version": "0.4.3",
   "description": "Visualize your codebase architecture as an interactive graph",
   "type": "module",
   "bin": {

package/server.mjs

@@ -152951,6 +152951,59 @@ function markDependencyViolations(edges, detViolations) {
 
 // apps/server/src/routes/analysis.ts
 init_analysis_store();
+
+// apps/server/src/services/violation-query.service.ts
+init_analysis_store();
+var SEVERITY_ORDER2 = {
+  critical: 0,
+  high: 1,
+  medium: 2,
+  low: 3,
+  info: 4
+};
+function listViolations(repoPath, options = {}) {
+  const latest = readLatest(repoPath);
+  if (!latest) return { violations: [], total: 0 };
+  if (options.analysisId && latest.analysis.id !== options.analysisId) {
+    return { violations: [], total: 0 };
+  }
+  const statusMode = options.status ?? "active";
+  let filtered;
+  if (statusMode === "resolved") {
+    filtered = latest.violations.filter((v) => v.status === "resolved");
+  } else if (statusMode === "all") {
+    filtered = latest.violations;
+  } else {
+    const active = ["new", "unchanged"];
+    filtered = latest.violations.filter((v) => active.includes(v.status));
+  }
+  if (options.filePath) {
+    const absPath = options.filePath.startsWith("/") ? options.filePath : `${repoPath}/${options.filePath}`;
+    filtered = filtered.filter(
+      (v) => v.type === "code" && (v.filePath === absPath || v.filePath === options.filePath)
+    );
+  }
+  filtered.sort((a, b) => {
+    const sa = SEVERITY_ORDER2[a.severity] ?? 5;
+    const sb = SEVERITY_ORDER2[b.severity] ?? 5;
+    if (sa !== sb) return sa - sb;
+    return b.createdAt.localeCompare(a.createdAt);
+  });
+  const total = filtered.length;
+  const limit = options.limit ?? 0;
+  const offset = options.offset ?? 0;
+  const paged = limit > 0 ? filtered.slice(offset, offset + limit) : filtered;
+  return { violations: paged, total };
+}
+function getDiffResult(repoPath) {
+  const diff = readDiff(repoPath);
+  if (!diff) return null;
+  const latest = readLatest(repoPath);
+  const isStale = latest ? latest.analysis.id !== diff.baseAnalysisId : false;
+  return { diff, isStale };
+}
+
+// apps/server/src/routes/analysis.ts
 var router3 = (0, import_express3.Router)();
 router3.get(
   "/:id/analyses",
@@ -153367,13 +153420,12 @@ router3.get(
     try {
       const id = req.params.id;
       const repo = resolveProjectForRequest(id);
-      const diff = readDiff(repo.path);
-      if (!diff) {
+      const result = getDiffResult(repo.path);
+      if (!result) {
         res.json(null);
         return;
       }
-      const latest = readLatest(repo.path);
-      const isStale = latest ? latest.analysis.id !== diff.baseAnalysisId : false;
+      const { diff, isStale } = result;
       res.json({
         resolvedViolations: diff.resolvedViolations,
         newViolations: diff.newViolations,
@@ -153463,68 +153515,27 @@ var analysis_default = router3;
 var import_express4 = __toESM(require_express2(), 1);
 init_analysis_store();
 var router4 = (0, import_express4.Router)();
-var SEVERITY_ORDER2 = {
-  critical: 0,
-  high: 1,
-  medium: 2,
-  low: 3,
-  info: 4
-};
 router4.get(
   "/:id/violations",
   async (req, res, next) => {
     try {
       const id = req.params.id;
       const repo = resolveProjectForRequest(id);
-      const analysisIdParam = req.query.analysisId;
-      const fileParam = req.query.file;
-      const statusParam = req.query.status;
       const limitParam = parseInt(req.query.limit) || 0;
       const offsetParam = parseInt(req.query.offset) || 0;
-      let violations;
-      if (analysisIdParam) {
-        const latest = readLatest(repo.path);
-        if (latest && latest.analysis.id === analysisIdParam) {
-          violations = latest.violations;
-        } else {
-          res.json(limitParam > 0 ? { violations: [], total: 0 } : []);
-          return;
-        }
-      } else {
-        const latest = readLatest(repo.path);
-        if (!latest) {
-          res.json(limitParam > 0 ? { violations: [], total: 0 } : []);
-          return;
-        }
-        violations = latest.violations;
-      }
-      let filtered;
-      if (statusParam === "resolved") {
-        filtered = violations.filter((v) => v.status === "resolved");
-      } else if (statusParam === "all") {
-        filtered = violations;
-      } else {
-        const active = ["new", "unchanged"];
-        filtered = violations.filter((v) => active.includes(v.status));
-      }
-      if (fileParam) {
-        const absPath = fileParam.startsWith("/") ? fileParam : `${repo.path}/${fileParam}`;
-        filtered = filtered.filter(
-          (v) => v.type === "code" && (v.filePath === absPath || v.filePath === fileParam)
-        );
-      }
-      filtered.sort((a, b) => {
-        const sa = SEVERITY_ORDER2[a.severity] ?? 5;
-        const sb = SEVERITY_ORDER2[b.severity] ?? 5;
-        if (sa !== sb) return sa - sb;
-        return b.createdAt.localeCompare(a.createdAt);
+      const statusParam = req.query.status;
+      const status = statusParam === "resolved" ? "resolved" : statusParam === "all" ? "all" : "active";
+      const { violations, total } = listViolations(repo.path, {
+        analysisId: req.query.analysisId,
+        filePath: req.query.file,
+        status,
+        limit: limitParam,
+        offset: offsetParam
       });
-      const total = filtered.length;
-      const paged = limitParam > 0 ? filtered.slice(offsetParam, offsetParam + limitParam) : filtered;
       if (limitParam > 0 || offsetParam > 0) {
-        res.json({ violations: paged, total });
+        res.json({ violations, total });
       } else {
-        res.json(paged);
+        res.json(violations);
       }
     } catch (error) {
       next(error);