truecourse 0.4.5 → 0.5.1

package/cli.mjs

@@ -972,8 +972,8 @@ var require_command = __commonJS({
   "node_modules/.pnpm/commander@12.1.0/node_modules/commander/lib/command.js"(exports) {
     var EventEmitter2 = __require("node:events").EventEmitter;
     var childProcess = __require("node:child_process");
-    var path21 = __require("node:path");
-    var fs16 = __require("node:fs");
+    var path22 = __require("node:path");
+    var fs17 = __require("node:fs");
     var process2 = __require("node:process");
     var { Argument: Argument2, humanReadableArgName } = require_argument();
     var { CommanderError: CommanderError2 } = require_error();
@@ -1905,11 +1905,11 @@ Expecting one of '${allowedValues.join("', '")}'`);
         let launchWithNode = false;
         const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
         function findFile(baseDir, baseName) {
-          const localBin = path21.resolve(baseDir, baseName);
-          if (fs16.existsSync(localBin)) return localBin;
-          if (sourceExt.includes(path21.extname(baseName))) return void 0;
+          const localBin = path22.resolve(baseDir, baseName);
+          if (fs17.existsSync(localBin)) return localBin;
+          if (sourceExt.includes(path22.extname(baseName))) return void 0;
           const foundExt = sourceExt.find(
-            (ext2) => fs16.existsSync(`${localBin}${ext2}`)
+            (ext2) => fs17.existsSync(`${localBin}${ext2}`)
           );
           if (foundExt) return `${localBin}${foundExt}`;
           return void 0;
@@ -1921,21 +1921,21 @@ Expecting one of '${allowedValues.join("', '")}'`);
         if (this._scriptPath) {
           let resolvedScriptPath;
           try {
-            resolvedScriptPath = fs16.realpathSync(this._scriptPath);
+            resolvedScriptPath = fs17.realpathSync(this._scriptPath);
           } catch (err) {
             resolvedScriptPath = this._scriptPath;
           }
-          executableDir = path21.resolve(
-            path21.dirname(resolvedScriptPath),
+          executableDir = path22.resolve(
+            path22.dirname(resolvedScriptPath),
             executableDir
           );
         }
         if (executableDir) {
           let localFile = findFile(executableDir, executableFile);
           if (!localFile && !subcommand._executableFile && this._scriptPath) {
-            const legacyName = path21.basename(
+            const legacyName = path22.basename(
               this._scriptPath,
-              path21.extname(this._scriptPath)
+              path22.extname(this._scriptPath)
             );
             if (legacyName !== this._name) {
               localFile = findFile(
@@ -1946,7 +1946,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
           }
           executableFile = localFile || executableFile;
         }
-        launchWithNode = sourceExt.includes(path21.extname(executableFile));
+        launchWithNode = sourceExt.includes(path22.extname(executableFile));
         let proc;
         if (process2.platform !== "win32") {
           if (launchWithNode) {
@@ -2786,7 +2786,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @return {Command}
        */
       nameFromFilename(filename) {
-        this._name = path21.basename(filename, path21.extname(filename));
+        this._name = path22.basename(filename, path22.extname(filename));
         return this;
       }
       /**
@@ -2800,9 +2800,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @param {string} [path]
        * @return {(string|null|Command)}
        */
-      executableDir(path22) {
-        if (path22 === void 0) return this._executableDir;
-        this._executableDir = path22;
+      executableDir(path23) {
+        if (path23 === void 0) return this._executableDir;
+        this._executableDir = path23;
         return this;
       }
       /**
@@ -4062,8 +4062,11 @@ var init_registry = __esm({
 // tools/cli/src/commands/helpers.ts
 var helpers_exports = {};
 __export(helpers_exports, {
+  exitMissingNonInteractiveFlag: () => exitMissingNonInteractiveFlag,
   getConfigPath: () => getConfigPath,
   getServerUrl: () => getServerUrl,
+  hasInstalledSkills: () => hasInstalledSkills,
+  isInteractive: () => isInteractive,
   openInBrowser: () => openInBrowser,
   promptInstallSkills: () => promptInstallSkills,
   readConfig: () => readConfig,
@@ -4316,11 +4319,24 @@ function openInBrowser(url) {
   const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
   exec2(`${cmd} ${url}`);
 }
-async function promptInstallSkills(repoPath) {
-  const installSkills = await ot2({
-    message: "Would you like to install Claude Code skills?"
-  });
-  if (q(installSkills) || !installSkills) return;
+function skillDestPath(repoPath) {
+  return resolve(repoPath, ".claude", "skills", "truecourse");
+}
+function hasInstalledSkills(repoPath) {
+  return existsSync(skillDestPath(repoPath));
+}
+function isInteractive() {
+  return !!process.stdin.isTTY;
+}
+function exitMissingNonInteractiveFlag(context, flagGuidance) {
+  O2.error(
+    `${context}
+
+Running non-interactively with no answer. ${flagGuidance}`
+  );
+  process.exit(1);
+}
+function copySkillsInto(repoPath) {
   const __dirname4 = dirname(fileURLToPath(import.meta.url));
   const srcPath = resolve(__dirname4, "..", "..", "skills", "truecourse");
   const distPath = resolve(__dirname4, "skills", "truecourse");
@@ -4336,6 +4352,20 @@ async function promptInstallSkills(repoPath) {
   O2.message("  - truecourse-list     (list violations)");
   O2.message("  - truecourse-fix      (apply fixes)");
 }
+async function promptInstallSkills(repoPath, { install } = {}) {
+  if (hasInstalledSkills(repoPath)) return;
+  if (install === true) {
+    copySkillsInto(repoPath);
+    return;
+  }
+  if (install === false) return;
+  if (!isInteractive()) return;
+  const answer = await ot2({
+    message: "Would you like to install Claude Code skills?"
+  });
+  if (q(answer) || !answer) return;
+  copySkillsInto(repoPath);
+}
 var DEFAULT_PORT, DEFAULT_CONFIG;
 var init_helpers = __esm({
   "tools/cli/src/commands/helpers.ts"() {
@@ -4458,6 +4488,26 @@ function writeAnalysis(repoPath, snapshot) {
   atomicWriteJson(analysisFilePath(repoPath, filename), snapshot);
   return { filename, snapshot };
 }
+function readAnalysis(repoPath, filename) {
+  const file = analysisFilePath(repoPath, filename);
+  if (!fs5.existsSync(file))
+    return null;
+  return JSON.parse(fs5.readFileSync(file, "utf-8"));
+}
+function listAnalyses(repoPath) {
+  const dir = analysesDir(repoPath);
+  if (!fs5.existsSync(dir))
+    return [];
+  return fs5.readdirSync(dir).filter((name) => name.endsWith(".json")).sort();
+}
+function findAnalysisFilename(repoPath, analysisId) {
+  for (const name of listAnalyses(repoPath).reverse()) {
+    const snap = readAnalysis(repoPath, name);
+    if (snap?.id === analysisId)
+      return name;
+  }
+  return null;
+}
 function readHistory(repoPath) {
   const file = historyPath(repoPath);
   if (!fs5.existsSync(file))
@@ -5249,10 +5299,10 @@ var require_src3 = __commonJS({
     var fs_1 = __require("fs");
     var debug_1 = __importDefault(require_src2());
     var log2 = debug_1.default("@kwsites/file-exists");
-    function check(path21, isFile, isDirectory) {
-      log2(`checking %s`, path21);
+    function check(path22, isFile, isDirectory) {
+      log2(`checking %s`, path22);
       try {
-        const stat = fs_1.statSync(path21);
+        const stat = fs_1.statSync(path22);
         if (stat.isFile() && isFile) {
           log2(`[OK] path represents a file`);
           return true;
@@ -5272,8 +5322,8 @@ var require_src3 = __commonJS({
         throw e;
       }
     }
-    function exists2(path21, type2 = exports.READABLE) {
-      return check(path21, (type2 & exports.FILE) > 0, (type2 & exports.FOLDER) > 0);
+    function exists2(path22, type2 = exports.READABLE) {
+      return check(path22, (type2 & exports.FILE) > 0, (type2 & exports.FOLDER) > 0);
     }
     exports.exists = exists2;
     exports.FILE = 1;
@@ -5346,8 +5396,8 @@ function pathspec(...paths) {
   cache.set(key, paths);
   return key;
 }
-function isPathSpec(path21) {
-  return path21 instanceof String && cache.has(path21);
+function isPathSpec(path22) {
+  return path22 instanceof String && cache.has(path22);
 }
 function toPaths(pathSpec) {
   return cache.get(pathSpec) || [];
@@ -5391,8 +5441,8 @@ function toLinesWithContent(input = "", trimmed2 = true, separator = "\n") {
 function forEachLineWithContent(input, callback) {
   return toLinesWithContent(input, true).map((line) => callback(line));
 }
-function folderExists(path21) {
-  return (0, import_file_exists.exists)(path21, import_file_exists.FOLDER);
+function folderExists(path22) {
+  return (0, import_file_exists.exists)(path22, import_file_exists.FOLDER);
 }
 function append(target, item) {
   if (Array.isArray(target)) {
@@ -5583,8 +5633,8 @@ function checkIsRepoRootTask() {
     commands,
     format: "utf-8",
     onError,
-    parser(path21) {
-      return /^\.(git)?$/.test(path21.trim());
+    parser(path22) {
+      return /^\.(git)?$/.test(path22.trim());
     }
   };
 }
@@ -5840,11 +5890,11 @@ function parseGrep(grep) {
   const paths = /* @__PURE__ */ new Set();
   const results = {};
   forEachLineWithContent(grep, (input) => {
-    const [path21, line, preview] = input.split(NULL);
-    paths.add(path21);
-    (results[path21] = results[path21] || []).push({
+    const [path22, line, preview] = input.split(NULL);
+    paths.add(path22);
+    (results[path22] = results[path22] || []).push({
       line: asNumber(line),
-      path: path21,
+      path: path22,
       preview
     });
   });
@@ -6141,14 +6191,14 @@ function hashObjectTask(filePath, write) {
   }
   return straightThroughStringTask(commands, true);
 }
-function parseInit(bare, path21, text) {
+function parseInit(bare, path22, text) {
   const response = String(text).trim();
   let result;
   if (result = initResponseRegex.exec(response)) {
-    return new InitSummary(bare, path21, false, result[1]);
+    return new InitSummary(bare, path22, false, result[1]);
   }
   if (result = reInitResponseRegex.exec(response)) {
-    return new InitSummary(bare, path21, true, result[1]);
+    return new InitSummary(bare, path22, true, result[1]);
   }
   let gitDir = "";
   const tokens = response.split(" ");
@@ -6159,12 +6209,12 @@ function parseInit(bare, path21, text) {
       break;
     }
   }
-  return new InitSummary(bare, path21, /^re/i.test(response), gitDir);
+  return new InitSummary(bare, path22, /^re/i.test(response), gitDir);
 }
 function hasBareCommand(command) {
   return command.includes(bareCommand);
 }
-function initTask(bare = false, path21, customArgs) {
+function initTask(bare = false, path22, customArgs) {
   const commands = ["init", ...customArgs];
   if (bare && !hasBareCommand(commands)) {
     commands.splice(1, 0, bareCommand);
@@ -6173,7 +6223,7 @@ function initTask(bare = false, path21, customArgs) {
     commands,
     format: "utf-8",
     parser(text) {
-      return parseInit(commands.includes("--bare"), path21, text);
+      return parseInit(commands.includes("--bare"), path22, text);
     }
   };
 }
@@ -6452,14 +6502,14 @@ function splitLine(result, lineStr) {
     default:
       return;
   }
-  function data(index, workingDir, path21) {
+  function data(index, workingDir, path22) {
     const raw = `${index}${workingDir}`;
     const handler = parsers6.get(raw);
     if (handler) {
-      handler(result, path21);
+      handler(result, path22);
     }
     if (raw !== "##" && raw !== "!!") {
-      result.files.push(new FileStatusSummary(path21, index, workingDir));
+      result.files.push(new FileStatusSummary(path22, index, workingDir));
     }
   }
 }
@@ -6646,8 +6696,8 @@ function deleteBranchTask(branch, forceDelete = false) {
   return task;
 }
 function toPath(input) {
-  const path21 = input.trim().replace(/^["']|["']$/g, "");
-  return path21 && normalize(path21);
+  const path22 = input.trim().replace(/^["']|["']$/g, "");
+  return path22 && normalize(path22);
 }
 function checkIgnoreTask(paths) {
   return {
@@ -6786,8 +6836,8 @@ function stashListTask(opt = {}, customArgs) {
     parser: parser4
   };
 }
-function addSubModuleTask(repo, path21) {
-  return subModuleTask(["add", repo, path21]);
+function addSubModuleTask(repo, path22) {
+  return subModuleTask(["add", repo, path22]);
 }
 function initSubModuleTask(customArgs) {
   return subModuleTask(["init", ...customArgs]);
@@ -8099,9 +8149,9 @@ var init_esm = __esm({
       "src/lib/responses/InitSummary.ts"() {
         "use strict";
         InitSummary = class {
-          constructor(bare, path21, existing, gitDir) {
+          constructor(bare, path22, existing, gitDir) {
             this.bare = bare;
-            this.path = path21;
+            this.path = path22;
             this.existing = existing;
             this.gitDir = gitDir;
           }
@@ -8635,12 +8685,12 @@ var init_esm = __esm({
         "use strict";
         fromPathRegex = /^(.+)\0(.+)$/;
         FileStatusSummary = class {
-          constructor(path21, index, working_dir) {
-            this.path = path21;
+          constructor(path22, index, working_dir) {
+            this.path = path22;
             this.index = index;
             this.working_dir = working_dir;
             if (index === "R" || working_dir === "R") {
-              const detail = fromPathRegex.exec(path21) || [null, path21, path21];
+              const detail = fromPathRegex.exec(path22) || [null, path22, path22];
               this.from = detail[2] || "";
               this.path = detail[1] || "";
             }
@@ -8903,9 +8953,9 @@ var init_esm = __esm({
               next
             );
           }
-          hashObject(path21, write) {
+          hashObject(path22, write) {
             return this._runTask(
-              hashObjectTask(path21, write === true),
+              hashObjectTask(path22, write === true),
               trailingFunctionArgument(arguments)
             );
           }
@@ -9542,8 +9592,8 @@ var init_esm = __esm({
           }
           return this._runTask(straightThroughStringTask2(command, this._trimmed), next);
         };
-        Git2.prototype.submoduleAdd = function(repo, path21, then) {
-          return this._runTask(addSubModuleTask2(repo, path21), trailingFunctionArgument2(arguments));
+        Git2.prototype.submoduleAdd = function(repo, path22, then) {
+          return this._runTask(addSubModuleTask2(repo, path22), trailingFunctionArgument2(arguments));
         };
         Git2.prototype.submoduleUpdate = function(args, then) {
           return this._runTask(
@@ -10164,7 +10214,7 @@ var require_ignore = __commonJS({
       //   path matching.
       // - check `string` either `MODE_IGNORE` or `MODE_CHECK_IGNORE`
       // @returns {TestResult} true if a file is ignored
-      test(path21, checkUnignored, mode) {
+      test(path22, checkUnignored, mode) {
         let ignored = false;
         let unignored = false;
         let matchedRule;
@@ -10173,7 +10223,7 @@ var require_ignore = __commonJS({
           if (unignored === negative && ignored !== unignored || negative && !ignored && !unignored && !checkUnignored) {
             return;
           }
-          const matched = rule[mode].test(path21);
+          const matched = rule[mode].test(path22);
           if (!matched) {
             return;
           }
@@ -10194,17 +10244,17 @@ var require_ignore = __commonJS({
     var throwError2 = (message, Ctor) => {
       throw new Ctor(message);
     };
-    var checkPath = (path21, originalPath, doThrow) => {
-      if (!isString(path21)) {
+    var checkPath = (path22, originalPath, doThrow) => {
+      if (!isString(path22)) {
         return doThrow(
           `path must be a string, but got \`${originalPath}\``,
           TypeError
         );
       }
-      if (!path21) {
+      if (!path22) {
         return doThrow(`path must not be empty`, TypeError);
       }
-      if (checkPath.isNotRelative(path21)) {
+      if (checkPath.isNotRelative(path22)) {
         const r = "`path.relative()`d";
         return doThrow(
           `path should be a ${r} string, but got "${originalPath}"`,
@@ -10213,7 +10263,7 @@ var require_ignore = __commonJS({
       }
       return true;
     };
-    var isNotRelative = (path21) => REGEX_TEST_INVALID_PATH.test(path21);
+    var isNotRelative = (path22) => REGEX_TEST_INVALID_PATH.test(path22);
     checkPath.isNotRelative = isNotRelative;
     checkPath.convert = (p2) => p2;
     var Ignore = class {
@@ -10243,19 +10293,19 @@ var require_ignore = __commonJS({
       }
       // @returns {TestResult}
       _test(originalPath, cache2, checkUnignored, slices) {
-        const path21 = originalPath && checkPath.convert(originalPath);
+        const path22 = originalPath && checkPath.convert(originalPath);
         checkPath(
-          path21,
+          path22,
           originalPath,
           this._strictPathCheck ? throwError2 : RETURN_FALSE
         );
-        return this._t(path21, cache2, checkUnignored, slices);
+        return this._t(path22, cache2, checkUnignored, slices);
       }
-      checkIgnore(path21) {
-        if (!REGEX_TEST_TRAILING_SLASH.test(path21)) {
-          return this.test(path21);
+      checkIgnore(path22) {
+        if (!REGEX_TEST_TRAILING_SLASH.test(path22)) {
+          return this.test(path22);
         }
-        const slices = path21.split(SLASH).filter(Boolean);
+        const slices = path22.split(SLASH).filter(Boolean);
         slices.pop();
         if (slices.length) {
           const parent = this._t(
@@ -10268,18 +10318,18 @@ var require_ignore = __commonJS({
             return parent;
           }
         }
-        return this._rules.test(path21, false, MODE_CHECK_IGNORE);
+        return this._rules.test(path22, false, MODE_CHECK_IGNORE);
       }
-      _t(path21, cache2, checkUnignored, slices) {
-        if (path21 in cache2) {
-          return cache2[path21];
+      _t(path22, cache2, checkUnignored, slices) {
+        if (path22 in cache2) {
+          return cache2[path22];
         }
         if (!slices) {
-          slices = path21.split(SLASH).filter(Boolean);
+          slices = path22.split(SLASH).filter(Boolean);
         }
         slices.pop();
         if (!slices.length) {
-          return cache2[path21] = this._rules.test(path21, checkUnignored, MODE_IGNORE);
+          return cache2[path22] = this._rules.test(path22, checkUnignored, MODE_IGNORE);
         }
         const parent = this._t(
           slices.join(SLASH) + SLASH,
@@ -10287,29 +10337,29 @@ var require_ignore = __commonJS({
           checkUnignored,
           slices
         );
-        return cache2[path21] = parent.ignored ? parent : this._rules.test(path21, checkUnignored, MODE_IGNORE);
+        return cache2[path22] = parent.ignored ? parent : this._rules.test(path22, checkUnignored, MODE_IGNORE);
       }
-      ignores(path21) {
-        return this._test(path21, this._ignoreCache, false).ignored;
+      ignores(path22) {
+        return this._test(path22, this._ignoreCache, false).ignored;
       }
       createFilter() {
-        return (path21) => !this.ignores(path21);
+        return (path22) => !this.ignores(path22);
       }
       filter(paths) {
         return makeArray(paths).filter(this.createFilter());
       }
       // @returns {TestResult}
-      test(path21) {
-        return this._test(path21, this._testCache, true);
+      test(path22) {
+        return this._test(path22, this._testCache, true);
       }
     };
     var factory = (options) => new Ignore(options);
-    var isPathValid = (path21) => checkPath(path21 && checkPath.convert(path21), path21, RETURN_FALSE);
+    var isPathValid = (path22) => checkPath(path22 && checkPath.convert(path22), path22, RETURN_FALSE);
     var setupWindows = () => {
       const makePosix = (str2) => /^\\\\\?\\/.test(str2) || /["<>|\u0000-\u001F]+/u.test(str2) ? str2 : str2.replace(/\\/g, "/");
       checkPath.convert = makePosix;
       const REGEX_TEST_WINDOWS_PATH_ABSOLUTE = /^[a-z]:\//i;
-      checkPath.isNotRelative = (path21) => REGEX_TEST_WINDOWS_PATH_ABSOLUTE.test(path21) || isNotRelative(path21);
+      checkPath.isNotRelative = (path22) => REGEX_TEST_WINDOWS_PATH_ABSOLUTE.test(path22) || isNotRelative(path22);
     };
     if (
       // Detect `process` so that it can run in browsers.
@@ -10589,30 +10639,52 @@ var init_file_discovery = __esm({
 });
 
 // packages/analyzer/dist/parser.js
-import Parser from "tree-sitter";
-import TypeScriptParser from "tree-sitter-typescript";
-import JavaScriptParser from "tree-sitter-javascript";
-import PythonParser from "tree-sitter-python";
-function getTreeSitterLanguage(language) {
-  switch (language) {
-    case "typescript":
-      return TypeScriptParser.typescript;
-    case "tsx":
-      return TypeScriptParser.tsx;
-    case "javascript":
-      return JavaScriptParser;
-    case "python":
-      return PythonParser;
-    default:
-      throw new Error(`Unsupported language: ${language}`);
+import { Parser, Language } from "web-tree-sitter";
+import { createRequire as _createRequire } from "node:module";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
+import path7 from "node:path";
+import fs8 from "node:fs";
+function resolveWasmPath(subpath) {
+  const bundled = path7.join(BUNDLED_WASM_DIR, path7.basename(subpath));
+  if (fs8.existsSync(bundled))
+    return bundled;
+  return _require.resolve(subpath);
+}
+function initParsers() {
+  if (!initPromise) {
+    initPromise = doInit().then(() => {
+      initialized = true;
+    });
+  }
+  return initPromise;
+}
+async function doInit() {
+  await Parser.init({
+    locateFile(file) {
+      return resolveWasmPath(`web-tree-sitter/${file}`);
+    }
+  });
+  await Promise.all(Object.keys(GRAMMAR_WASM).map(async (lang) => {
+    const wasmPath = resolveWasmPath(GRAMMAR_WASM[lang]);
+    const language = await Language.load(wasmPath);
+    languageCache.set(lang, language);
+  }));
+}
+function assertInitialized() {
+  if (!initialized) {
+    throw new Error("tree-sitter parsers are not loaded. Call `await initParsers()` from @truecourse/analyzer before using parseCode / parseFile / getParser. This is required once per process \u2014 the call is idempotent.");
   }
 }
 function getParser(language) {
+  if (!(language in GRAMMAR_WASM)) {
+    throw new Error(`Unsupported language: ${language}`);
+  }
+  assertInitialized();
   let parser4 = parserCache.get(language);
   if (!parser4) {
+    const lang = languageCache.get(language);
     parser4 = new Parser();
-    const tsLanguage = getTreeSitterLanguage(language);
-    parser4.setLanguage(tsLanguage);
+    parser4.setLanguage(lang);
     parserCache.set(language, parser4);
   }
   return parser4;
@@ -10632,11 +10704,22 @@ function parseFile(filePath, code, language) {
     throw new Error(`Failed to parse file ${filePath}: ${error instanceof Error ? error.message : String(error)}`);
   }
 }
-var parserCache;
+var _require, BUNDLED_WASM_DIR, GRAMMAR_WASM, languageCache, parserCache, initPromise, initialized;
 var init_parser = __esm({
   "packages/analyzer/dist/parser.js"() {
     "use strict";
+    _require = _createRequire(import.meta.url);
+    BUNDLED_WASM_DIR = path7.join(path7.dirname(fileURLToPath2(import.meta.url)), "wasm");
+    GRAMMAR_WASM = {
+      typescript: "tree-sitter-typescript/tree-sitter-typescript.wasm",
+      tsx: "tree-sitter-typescript/tree-sitter-tsx.wasm",
+      javascript: "tree-sitter-javascript/tree-sitter-javascript.wasm",
+      python: "tree-sitter-python/tree-sitter-python.wasm"
+    };
+    languageCache = /* @__PURE__ */ new Map();
     parserCache = /* @__PURE__ */ new Map();
+    initPromise = null;
+    initialized = false;
   }
 });
 
@@ -11575,18 +11658,18 @@ function extractRouterMount(callNode, filePath) {
   const routerName = args[0]?.type === "identifier" ? args[0].text : null;
   if (!routerName)
     return null;
-  let path21 = "/";
+  let path22 = "/";
   for (const arg of args) {
     if (arg.type === "keyword_argument") {
       const key = arg.childForFieldName("name")?.text;
       const value = arg.childForFieldName("value");
       if ((key === "url_prefix" || key === "prefix") && value) {
-        path21 = value.text.replace(/^["']|["']$/g, "");
+        path22 = value.text.replace(/^["']|["']$/g, "");
       }
     }
   }
   return {
-    path: path21,
+    path: path22,
     routerName,
     location: {
       filePath,
@@ -11610,11 +11693,11 @@ function extractChainedRoute(outerCall, filePath) {
   const innerArgs = innerCall.childForFieldName("arguments");
   if (!innerArgs)
     return null;
-  let path21 = null;
+  let path22 = null;
   let httpMethod = methodName === "route" ? "GET" : methodName.toUpperCase();
   for (const arg of innerArgs.namedChildren) {
-    if (!path21 && arg.type === "string") {
-      path21 = arg.text.replace(/^["']|["']$/g, "");
+    if (!path22 && arg.type === "string") {
+      path22 = arg.text.replace(/^["']|["']$/g, "");
     }
     if (arg.type === "keyword_argument") {
       const key = arg.childForFieldName("name")?.text;
@@ -11626,14 +11709,14 @@ function extractChainedRoute(outerCall, filePath) {
       }
     }
   }
-  if (!path21)
+  if (!path22)
     return null;
   const outerArgs = outerCall.childForFieldName("arguments");
   const handlerArg = outerArgs?.namedChildren[0];
   const handlerName = handlerArg?.type === "identifier" ? handlerArg.text : "anonymous";
   return {
     httpMethod,
-    path: path21,
+    path: path22,
     handlerName,
     location: {
       filePath,
@@ -11709,8 +11792,8 @@ function extractRoute(methodName, argsNode, filePath, callNode) {
   const firstArg = argsNode.namedChild(0);
   if (!firstArg)
     return null;
-  const path21 = extractStringLiteral(firstArg);
-  if (!path21)
+  const path22 = extractStringLiteral(firstArg);
+  if (!path22)
     return null;
   const argCount = argsNode.namedChildCount;
   if (argCount < 2)
@@ -11723,7 +11806,7 @@ function extractRoute(methodName, argsNode, filePath, callNode) {
     return null;
   return {
     httpMethod: methodName.toUpperCase(),
-    path: path21,
+    path: path22,
     handlerName,
     location: {
       filePath,
@@ -11740,8 +11823,8 @@ function extractMount(argsNode, filePath, callNode) {
   const firstArg = argsNode.namedChild(0);
   if (!firstArg)
     return null;
-  const path21 = extractStringLiteral(firstArg);
-  if (!path21)
+  const path22 = extractStringLiteral(firstArg);
+  if (!path22)
     return null;
   const secondArg = argsNode.namedChild(1);
   if (!secondArg)
@@ -11750,7 +11833,7 @@ function extractMount(argsNode, filePath, callNode) {
   if (!routerName)
     return null;
   return {
-    path: path21,
+    path: path22,
     routerName,
     location: {
       filePath,
@@ -11871,7 +11954,7 @@ var init_common = __esm({
 });
 
 // packages/analyzer/dist/extractors/languages/typescript.js
-import Parser2 from "tree-sitter";
+import { Query as Query2 } from "web-tree-sitter";
 function isNestedInFunction(node) {
   let current = node.parent;
   while (current) {
@@ -12167,8 +12250,10 @@ function extractTypeScriptFunctions(tree, filePath, language = "typescript") {
   const seenLocations = /* @__PURE__ */ new Set();
   const queryString = config2.functionQuery || config2.functionNodeTypes.map((type2) => `(${type2}) @function`).join("\n");
   const parser4 = getParser(language);
-  const tsLanguage = parser4.getLanguage();
-  const query = new Parser2.Query(tsLanguage, queryString);
+  const tsLanguage = parser4.language;
+  if (!tsLanguage)
+    throw new Error(`parser for '${language}' has no language set`);
+  const query = new Query2(tsLanguage, queryString);
   const captures = query.captures(tree.rootNode);
   for (const capture of captures) {
     const node = capture.node;
@@ -12206,8 +12291,10 @@ function extractTypeScriptClasses(tree, filePath, language = "typescript") {
   const classes = [];
   const queryString = config2.classQuery || config2.classNodeTypes.map((type2) => `(${type2}) @class`).join("\n");
   const parser4 = getParser(language);
-  const tsLanguage = parser4.getLanguage();
-  const query = new Parser2.Query(tsLanguage, queryString);
+  const tsLanguage = parser4.language;
+  if (!tsLanguage)
+    throw new Error(`parser for '${language}' has no language set`);
+  const query = new Query2(tsLanguage, queryString);
   const captures = query.captures(tree.rootNode);
   for (const capture of captures) {
     const node = capture.node;
@@ -12246,8 +12333,10 @@ function extractTypeScriptImports(tree, filePath, language = "typescript") {
   const imports = [];
   const queryString = config2.importQuery || config2.importNodeTypes.map((type2) => `(${type2}) @import`).join("\n");
   const parser4 = getParser(language);
-  const tsLanguage = parser4.getLanguage();
-  const query = new Parser2.Query(tsLanguage, queryString);
+  const tsLanguage = parser4.language;
+  if (!tsLanguage)
+    throw new Error(`parser for '${language}' has no language set`);
+  const query = new Query2(tsLanguage, queryString);
   const captures = query.captures(tree.rootNode);
   for (const capture of captures) {
     const node = capture.node;
@@ -12272,8 +12361,10 @@ function extractTypeScriptExports(tree, _filePath, language = "typescript") {
   const exports = [];
   const queryString = config2.exportQuery || config2.exportNodeTypes.map((type2) => `(${type2}) @export`).join("\n");
   const parser4 = getParser(language);
-  const tsLanguage = parser4.getLanguage();
-  const query = new Parser2.Query(tsLanguage, queryString);
+  const tsLanguage = parser4.language;
+  if (!tsLanguage)
+    throw new Error(`parser for '${language}' has no language set`);
+  const query = new Query2(tsLanguage, queryString);
   const captures = query.captures(tree.rootNode);
   for (const capture of captures) {
     const node = capture.node;
@@ -12312,7 +12403,7 @@ var init_typescript = __esm({
 });
 
 // packages/analyzer/dist/extractors/languages/javascript.js
-import Parser3 from "tree-sitter";
+import { Query as Query3 } from "web-tree-sitter";
 function extractFunctionName2(node) {
   const nameNode = node.childForFieldName("name");
   if (nameNode?.text)
@@ -12394,8 +12485,10 @@ function extractJavaScriptFunctions(tree, filePath) {
   const functions = [];
   const queryString = config2.functionQuery || config2.functionNodeTypes.map((type2) => `(${type2}) @function`).join("\n");
   const parser4 = getParser("javascript");
-  const jsLanguage = parser4.getLanguage();
-  const query = new Parser3.Query(jsLanguage, queryString);
+  const jsLanguage = parser4.language;
+  if (!jsLanguage)
+    throw new Error("parser has no language set");
+  const query = new Query3(jsLanguage, queryString);
   const captures = query.captures(tree.rootNode);
   for (const capture of captures) {
     const node = capture.node;
@@ -12530,8 +12623,10 @@ function extractJavaScriptClasses(tree, filePath) {
   const classes = [];
   const queryString = config2.classQuery || config2.classNodeTypes.map((type2) => `(${type2}) @class`).join("\n");
   const parser4 = getParser("javascript");
-  const jsLanguage = parser4.getLanguage();
-  const query = new Parser3.Query(jsLanguage, queryString);
+  const jsLanguage = parser4.language;
+  if (!jsLanguage)
+    throw new Error("parser has no language set");
+  const query = new Query3(jsLanguage, queryString);
   const captures = query.captures(tree.rootNode);
   for (const capture of captures) {
     const node = capture.node;
@@ -12615,8 +12710,10 @@ function extractJavaScriptImports(tree, _filePath) {
   const imports = [];
   const queryString = config2.importQuery || config2.importNodeTypes.map((type2) => `(${type2}) @import`).join("\n");
   const parser4 = getParser("javascript");
-  const jsLanguage = parser4.getLanguage();
-  const query = new Parser3.Query(jsLanguage, queryString);
+  const jsLanguage = parser4.language;
+  if (!jsLanguage)
+    throw new Error("parser has no language set");
+  const query = new Query3(jsLanguage, queryString);
   const captures = query.captures(tree.rootNode);
   for (const capture of captures) {
     const node = capture.node;
@@ -12672,8 +12769,10 @@ function extractJavaScriptExports(tree, _filePath) {
   const exports = [];
   const queryString = config2.exportQuery || config2.exportNodeTypes.map((type2) => `(${type2}) @export`).join("\n");
   const parser4 = getParser("javascript");
-  const jsLanguage = parser4.getLanguage();
-  const query = new Parser3.Query(jsLanguage, queryString);
+  const jsLanguage = parser4.language;
+  if (!jsLanguage)
+    throw new Error("parser has no language set");
+  const query = new Query3(jsLanguage, queryString);
   const captures = query.captures(tree.rootNode);
   for (const capture of captures) {
     const node = capture.node;
@@ -15026,7 +15125,7 @@ var init_escape = __esm({
 });
 
 // node_modules/.pnpm/minimatch@10.2.4/node_modules/minimatch/dist/esm/index.js
-var minimatch, starDotExtRE, starDotExtTest, starDotExtTestDot, starDotExtTestNocase, starDotExtTestNocaseDot, starDotStarRE, starDotStarTest, starDotStarTestDot, dotStarRE, dotStarTest, starRE, starTest, starTestDot, qmarksRE, qmarksTestNocase, qmarksTestNocaseDot, qmarksTestDot, qmarksTest, qmarksTestNoExt, qmarksTestNoExtDot, defaultPlatform, path7, sep, GLOBSTAR, qmark2, star2, twoStarDot, twoStarNoDot, filter, ext, defaults, braceExpand, makeRe, match, globMagic, regExpEscape2, Minimatch;
+var minimatch, starDotExtRE, starDotExtTest, starDotExtTestDot, starDotExtTestNocase, starDotExtTestNocaseDot, starDotStarRE, starDotStarTest, starDotStarTestDot, dotStarRE, dotStarTest, starRE, starTest, starTestDot, qmarksRE, qmarksTestNocase, qmarksTestNocaseDot, qmarksTestDot, qmarksTest, qmarksTestNoExt, qmarksTestNoExtDot, defaultPlatform, path8, sep, GLOBSTAR, qmark2, star2, twoStarDot, twoStarNoDot, filter, ext, defaults, braceExpand, makeRe, match, globMagic, regExpEscape2, Minimatch;
 var init_esm4 = __esm({
   "node_modules/.pnpm/minimatch@10.2.4/node_modules/minimatch/dist/esm/index.js"() {
     init_esm3();
@@ -15095,11 +15194,11 @@ var init_esm4 = __esm({
       return (f) => f.length === len && f !== "." && f !== "..";
     };
     defaultPlatform = typeof process === "object" && process ? typeof process.env === "object" && process.env && process.env.__MINIMATCH_TESTING_PLATFORM__ || process.platform : "posix";
-    path7 = {
+    path8 = {
       win32: { sep: "\\" },
       posix: { sep: "/" }
     };
-    sep = defaultPlatform === "win32" ? path7.win32.sep : path7.posix.sep;
+    sep = defaultPlatform === "win32" ? path8.win32.sep : path8.posix.sep;
     minimatch.sep = sep;
     GLOBSTAR = Symbol("globstar **");
     minimatch.GLOBSTAR = GLOBSTAR;
@@ -16274,9 +16373,9 @@ function detectDockerComposeServices(rootPath, allFiles) {
   ];
   let composePath2 = null;
   for (const file of composeFiles) {
-    const path21 = join6(rootPath, file);
-    if (existsSync7(path21)) {
-      composePath2 = path21;
+    const path22 = join6(rootPath, file);
+    if (existsSync7(path22)) {
+      composePath2 = path22;
       break;
     }
   }
@@ -17145,7 +17244,7 @@ var init_database_detector = __esm({
 });
 
 // packages/analyzer/dist/module-extractor.js
-import path8 from "path";
+import path9 from "path";
 function extractModulesAndMethods(analyses, layerDetails, fileDependencies) {
   const modules = [];
   const methods = [];
@@ -17292,7 +17391,7 @@ function deriveModuleName(analysis) {
     return localExports[0].name;
   }
   const baseName = fileBaseName(analysis.filePath);
-  const strippedName = stripExtension(path8.basename(analysis.filePath));
+  const strippedName = stripExtension(path9.basename(analysis.filePath));
   if (INDEX_NAMES.has(strippedName)) {
     return baseName;
   }
@@ -17309,10 +17408,10 @@ function deriveModuleName(analysis) {
   return baseName;
 }
 function deriveNextjsRouteName(filePath) {
-  const base = path8.basename(filePath).replace(/\.(ts|tsx|js|jsx)$/, "");
+  const base = path9.basename(filePath).replace(/\.(ts|tsx|js|jsx)$/, "");
   if (base !== "route" && base !== "page")
     return null;
-  const parts = filePath.split(path8.sep);
+  const parts = filePath.split(path9.sep);
   const appIdx = parts.lastIndexOf("app");
   if (appIdx === -1)
     return null;
@@ -17330,9 +17429,9 @@ function stripExtension(filename) {
   return filename;
 }
 function fileBaseName(filePath) {
-  const name = stripExtension(path8.basename(filePath));
+  const name = stripExtension(path9.basename(filePath));
   if (INDEX_NAMES.has(name)) {
-    return path8.basename(path8.dirname(filePath));
+    return path9.basename(path9.dirname(filePath));
   }
   return name;
 }
@@ -18029,7 +18128,11 @@ var init_entities = __esm({
     init_patterns();
     init_parser();
     TypeScriptEntityDetector = class {
-      parser = getParser("typescript");
+      // Lazy: do not call getParser() at construction time — callers may
+      // instantiate this before initParsers() has completed.
+      get parser() {
+        return getParser("typescript");
+      }
       shouldScanFile(filePath) {
         if (!/\.(ts|tsx|js|jsx)$/.test(filePath)) {
           return false;
@@ -18046,6 +18149,8 @@ var init_entities = __esm({
       detectEntities(sourceCode, filePath, service) {
         const tree = this.parser.parse(sourceCode);
         const entities = [];
+        if (!tree)
+          return entities;
         const classNodes = this.findClassDeclarations(tree.rootNode);
         for (const classNode of classNodes) {
           const entity = this.detectEntityFromClass(classNode, sourceCode, filePath, service);
@@ -18333,7 +18438,7 @@ var init_entities = __esm({
 import { spawn as spawn2 } from "child_process";
 import { readFileSync as readFileSync7 } from "fs";
 import { resolve as resolve6 } from "path";
-import { pathToFileURL, fileURLToPath as fileURLToPath2 } from "url";
+import { pathToFileURL, fileURLToPath as fileURLToPath3 } from "url";
 function encodeMessage(msg) {
   const body = JSON.stringify(msg);
   const header = `Content-Length: ${Buffer.byteLength(body)}\r
@@ -18478,7 +18583,7 @@ var init_lsp_client = __esm({
         if (!uri)
           return null;
         try {
-          return fileURLToPath2(uri);
+          return fileURLToPath3(uri);
         } catch {
           return null;
         }
@@ -18646,7 +18751,7 @@ var init_lsp_client = __esm({
 // packages/analyzer/dist/lsp-servers/pyright.js
 import { resolve as resolve7, dirname as dirname6 } from "path";
 import { existsSync as existsSync9 } from "fs";
-import { fileURLToPath as fileURLToPath3 } from "url";
+import { fileURLToPath as fileURLToPath4 } from "url";
 function findPyrightBinary() {
   let dir = resolve7(__dirname2, "..");
   for (let i = 0; i < 10; i++) {
@@ -18678,7 +18783,7 @@ var __filename, __dirname2;
 var init_pyright = __esm({
   "packages/analyzer/dist/lsp-servers/pyright.js"() {
     "use strict";
-    __filename = fileURLToPath3(import.meta.url);
+    __filename = fileURLToPath4(import.meta.url);
     __dirname2 = dirname6(__filename);
   }
 });
@@ -19305,9 +19410,9 @@ function findSimpleCycles(component, componentSet, adjacency) {
       for (const next of successors) {
         if (!componentSet.has(next))
           continue;
-        if (next === start && path21.length >= 2) {
-          const chain = [...path21, start];
-          const minNode = path21.reduce((a, b) => a < b ? a : b);
+        if (next === start && path22.length >= 2) {
+          const chain = [...path22, start];
+          const minNode = path22.reduce((a, b) => a < b ? a : b);
           if (minNode === start) {
             cycles.push(chain);
           }
@@ -19315,15 +19420,15 @@ function findSimpleCycles(component, componentSet, adjacency) {
         }
         if (!visited.has(next) && !seen.has(next)) {
           visited.add(next);
-          path21.push(next);
+          path22.push(next);
           dfs2(next);
-          path21.pop();
+          path22.pop();
           visited.delete(next);
         }
       }
     };
     var dfs = dfs2;
-    const path21 = [start];
+    const path22 = [start];
     const visited = /* @__PURE__ */ new Set([start]);
     dfs2(start);
     seen.add(start);
@@ -19345,7 +19450,7 @@ function findShortestCycle(start, componentSet, adjacency) {
     visited.add(next);
   }
   while (queue.length > 0) {
-    const { node, path: path21 } = queue.shift();
+    const { node, path: path22 } = queue.shift();
     const nexts = adjacency.get(node);
     if (!nexts)
       continue;
@@ -19353,11 +19458,11 @@ function findShortestCycle(start, componentSet, adjacency) {
       if (!componentSet.has(next))
         continue;
       if (next === start) {
-        return [...path21, start];
+        return [...path22, start];
       }
       if (!visited.has(next)) {
         visited.add(next);
-        queue.push({ node: next, path: [...path21, next] });
+        queue.push({ node: next, path: [...path22, next] });
       }
     }
   }
@@ -38153,7 +38258,8 @@ var init_python_helpers = __esm({
 // packages/analyzer/dist/rules/_shared/python-framework-detection.js
 function getPythonImportSources(node) {
   const program3 = getPythonModuleNode(node);
-  const cached = importSourceCache.get(program3);
+  const tree = program3.tree;
+  const cached = importSourceCache.get(tree);
   if (cached)
     return cached;
   const sources = /* @__PURE__ */ new Set();
@@ -38192,7 +38298,7 @@ function getPythonImportSources(node) {
       walk(child);
   }
   walk(program3);
-  importSourceCache.set(program3, sources);
+  importSourceCache.set(tree, sources);
   return sources;
 }
 function detectPythonOrm(node) {
@@ -44095,10 +44201,10 @@ var init_secret_rules = __esm({
 });
 
 // packages/analyzer/dist/rules/security/secret-scanner.js
-import path9 from "node:path";
+import path10 from "node:path";
 function isSensitiveFile(filePath) {
-  const basename2 = path9.basename(filePath);
-  const ext2 = path9.extname(filePath);
+  const basename2 = path10.basename(filePath);
+  const ext2 = path10.extname(filePath);
   if (basename2.startsWith(".env")) {
     const envVariant = basename2;
     if (SENSITIVE_FILE_EXTENSIONS.has(envVariant)) {
@@ -46266,7 +46372,8 @@ var init_fallthrough_case = __esm({
         const cases = body.namedChildren.filter((c2) => c2.type === "switch_case");
         for (let i = 0; i < cases.length - 1; i++) {
           const caseNode = cases[i];
-          const statements = caseNode.namedChildren.filter((c2) => c2.type !== "comment" && c2 !== caseNode.childForFieldName("value"));
+          const valueNode = caseNode.childForFieldName("value");
+          const statements = caseNode.namedChildren.filter((c2) => c2.type !== "comment" && (!valueNode || c2.id !== valueNode.id));
           if (statements.length === 0)
             continue;
           const last2 = statements[statements.length - 1];
@@ -67769,7 +67876,7 @@ var init_case_without_break = __esm({
       nodeTypes: ["switch_case"],
       visit(node, filePath, sourceCode) {
         const valueNode = node.childForFieldName("value");
-        const stmts = node.namedChildren.filter((c2) => c2 !== valueNode);
+        const stmts = node.namedChildren.filter((c2) => !valueNode || c2.id !== valueNode.id);
         if (stmts.length === 0)
           return null;
         let last2 = stmts[stmts.length - 1];
@@ -90697,8 +90804,8 @@ var init_missing_error_status_code = __esm({
 });
 
 // packages/analyzer/dist/rules/architecture/visitors/javascript/route-without-auth-middleware.js
-function isPublicPath(path21) {
-  return PUBLIC_PATH_PATTERNS.some((re2) => re2.test(path21));
+function isPublicPath(path22) {
+  return PUBLIC_PATH_PATTERNS.some((re2) => re2.test(path22));
 }
 function extractMiddlewareNames(callNode) {
   const args = callNode.childForFieldName("arguments");
@@ -90824,8 +90931,8 @@ var init_route_without_auth_middleware = __esm({
           return null;
         const firstArg = args.namedChildren[0];
         if (firstArg?.type === "string") {
-          const path21 = firstArg.text.replace(/^['"`]|['"`]$/g, "");
-          if (isPublicPath(path21))
+          const path22 = firstArg.text.replace(/^['"`]|['"`]$/g, "");
+          if (isPublicPath(path22))
             return null;
         }
         const middleware = extractMiddlewareNames(node);
@@ -91222,7 +91329,7 @@ var init_declarations_in_global_scope2 = __esm({
 
 // packages/analyzer/dist/rules/architecture/visitors/python/unused-import.js
 function hasIdentifierOutside(root, name, excludeNode) {
-  if (root === excludeNode)
+  if (root.id === excludeNode.id)
     return false;
   if (root.type === "identifier" && root.text === name)
     return true;
@@ -93598,6 +93705,7 @@ __export(dist_exports2, {
   hasLspServer: () => hasLspServer,
   hasSchemaAwareVisitors: () => hasSchemaAwareVisitors,
   hasTypeAwareVisitors: () => hasTypeAwareVisitors,
+  initParsers: () => initParsers,
   isBootstrapEntry: () => isBootstrapEntry,
   makeViolation: () => makeViolation,
   matchesPattern: () => matchesPattern,
@@ -93617,6 +93725,7 @@ __export(dist_exports2, {
   walkAstWithVisitors: () => walkAstWithVisitors
 });
 async function analyzeRepository(rootPath) {
+  await initParsers();
   const files = discoverFiles(rootPath);
   if (files.length === 0) {
     return {
@@ -93660,6 +93769,7 @@ var init_dist6 = __esm({
     init_file_analyzer();
     init_dependency_graph();
     init_split_analyzer();
+    init_parser();
     init_file_analyzer();
     init_dependency_graph();
     init_service_detector();
@@ -93699,7 +93809,7 @@ var init_dist6 = __esm({
 });
 
 // apps/server/dist/services/analyzer.service.js
-import path10 from "node:path";
+import path11 from "node:path";
 function runDeterministicModuleChecks(result, enabledDeterministic) {
   if (!result.modules || !result.methods)
     return [];
@@ -93742,7 +93852,7 @@ async function runAnalysis(repoPath, _branch, onProgress, options) {
     const statusResult = await git.status();
     hasChanges = !statusResult.isClean();
     const gitRoot = (await git.revparse(["--show-toplevel"])).trim();
-    isSubdirectory = path10.resolve(repoPath) !== path10.resolve(gitRoot);
+    isSubdirectory = path11.resolve(repoPath) !== path11.resolve(gitRoot);
   }
   if (hasChanges && !options?.skipStash && !isSubdirectory && git) {
     onProgress({ step: "stash", percent: 2, detail: "Stashing pending changes to analyze committed state..." });
@@ -93756,6 +93866,7 @@ async function runAnalysis(repoPath, _branch, onProgress, options) {
   try {
     onProgress({ step: "discover", percent: 10, detail: "Discovering files..." });
     const analyzer = await Promise.resolve().then(() => (init_dist6(), dist_exports2));
+    await analyzer.initParsers();
     const files = await analyzer.discoverFiles(repoPath);
     onProgress({
       step: "discover",
@@ -103367,11 +103478,11 @@ var require_mime_types = __commonJS({
       }
       return exts[0];
     }
-    function lookup(path21) {
-      if (!path21 || typeof path21 !== "string") {
+    function lookup(path22) {
+      if (!path22 || typeof path22 !== "string") {
         return false;
       }
-      var extension2 = extname("x." + path21).toLowerCase().substr(1);
+      var extension2 = extname("x." + path22).toLowerCase().substr(1);
       if (!extension2) {
         return false;
       }
@@ -109586,11 +109697,11 @@ var require_server = __commonJS({
        * @protected
        */
       _computePath(options) {
-        let path21 = (options.path || "/engine.io").replace(/\/$/, "");
+        let path22 = (options.path || "/engine.io").replace(/\/$/, "");
         if (options.addTrailingSlash !== false) {
-          path21 += "/";
+          path22 += "/";
         }
-        return path21;
+        return path22;
       }
       /**
        * Returns a list of available transports for upgrade given a certain transport.
@@ -110089,10 +110200,10 @@ var require_server = __commonJS({
        * @param {Object} options
        */
       attach(server, options = {}) {
-        const path21 = this._computePath(options);
+        const path22 = this._computePath(options);
         const destroyUpgradeTimeout = options.destroyUpgradeTimeout || 1e3;
         function check(req) {
-          return path21 === req.url.slice(0, path21.length);
+          return path22 === req.url.slice(0, path22.length);
         }
         const listeners = server.listeners("request").slice(0);
         server.removeAllListeners("request");
@@ -110100,7 +110211,7 @@ var require_server = __commonJS({
         server.on("listening", this.init.bind(this));
         server.on("request", (req, res) => {
           if (check(req)) {
-            debug2('intercepting request for path "%s"', path21);
+            debug2('intercepting request for path "%s"', path22);
             this.handleRequest(req, res);
           } else {
             let i = 0;
@@ -110939,8 +111050,8 @@ var require_userver = __commonJS({
        * @param options
        */
       attach(app, options = {}) {
-        const path21 = this._computePath(options);
-        app.any(path21, this.handleRequest.bind(this)).ws(path21, {
+        const path22 = this._computePath(options);
+        app.any(path22, this.handleRequest.bind(this)).ws(path22, {
           compression: options.compression,
           idleTimeout: options.idleTimeout,
           maxBackpressure: options.maxBackpressure,
@@ -115365,7 +115476,7 @@ var require_dist4 = __commonJS({
     var zlib_1 = __require("zlib");
     var accepts = require_accepts();
     var stream_1 = __require("stream");
-    var path21 = __require("path");
+    var path22 = __require("path");
     var engine_io_1 = require_engine_io();
     var client_1 = require_client();
     var events_1 = __require("events");
@@ -115560,7 +115671,7 @@ var require_dist4 = __commonJS({
             res.writeHeader("cache-control", "public, max-age=0");
             res.writeHeader("content-type", "application/" + (isMap ? "json" : "javascript") + "; charset=utf-8");
             res.writeHeader("etag", expectedEtag);
-            const filepath = path21.join(__dirname, "../client-dist/", filename);
+            const filepath = path22.join(__dirname, "../client-dist/", filename);
             (0, uws_1.serveFile)(res, filepath);
           });
         }
@@ -115642,7 +115753,7 @@ var require_dist4 = __commonJS({
        * @private
        */
       static sendFile(filename, req, res) {
-        const readStream = (0, fs_1.createReadStream)(path21.join(__dirname, "../client-dist/", filename));
+        const readStream = (0, fs_1.createReadStream)(path22.join(__dirname, "../client-dist/", filename));
         const encoding = accepts(req).encodings(["br", "gzip", "deflate"]);
         const onError2 = (err) => {
           if (err) {
@@ -116506,8 +116617,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path21, errorMaps, issueData } = params;
-      const fullPath = [...path21, ...issueData.path || []];
+      const { data, path: path22, errorMaps, issueData } = params;
+      const fullPath = [...path22, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -116815,11 +116926,11 @@ var init_types2 = __esm({
     init_parseUtil();
     init_util3();
     ParseInputLazyPath = class {
-      constructor(parent, value, path21, key) {
+      constructor(parent, value, path22, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path21;
+        this._path = path22;
         this._key = key;
       }
       get path() {
@@ -122572,8 +122683,8 @@ var require_package2 = __commonJS({
 // node_modules/.pnpm/dotenv@16.6.1/node_modules/dotenv/lib/main.js
 var require_main = __commonJS({
   "node_modules/.pnpm/dotenv@16.6.1/node_modules/dotenv/lib/main.js"(exports, module) {
-    var fs16 = __require("fs");
-    var path21 = __require("path");
+    var fs17 = __require("fs");
+    var path22 = __require("path");
     var os8 = __require("os");
     var crypto2 = __require("crypto");
     var packageJson = require_package2();
@@ -122681,7 +122792,7 @@ var require_main = __commonJS({
       if (options && options.path && options.path.length > 0) {
         if (Array.isArray(options.path)) {
           for (const filepath of options.path) {
-            if (fs16.existsSync(filepath)) {
+            if (fs17.existsSync(filepath)) {
               possibleVaultPath = filepath.endsWith(".vault") ? filepath : `${filepath}.vault`;
             }
           }
@@ -122689,15 +122800,15 @@ var require_main = __commonJS({
           possibleVaultPath = options.path.endsWith(".vault") ? options.path : `${options.path}.vault`;
         }
       } else {
-        possibleVaultPath = path21.resolve(process.cwd(), ".env.vault");
+        possibleVaultPath = path22.resolve(process.cwd(), ".env.vault");
       }
-      if (fs16.existsSync(possibleVaultPath)) {
+      if (fs17.existsSync(possibleVaultPath)) {
         return possibleVaultPath;
       }
       return null;
     }
     function _resolveHome(envPath) {
-      return envPath[0] === "~" ? path21.join(os8.homedir(), envPath.slice(1)) : envPath;
+      return envPath[0] === "~" ? path22.join(os8.homedir(), envPath.slice(1)) : envPath;
     }
     function _configVault(options) {
       const debug2 = Boolean(options && options.debug);
@@ -122714,7 +122825,7 @@ var require_main = __commonJS({
       return { parsed };
     }
     function configDotenv(options) {
-      const dotenvPath = path21.resolve(process.cwd(), ".env");
+      const dotenvPath = path22.resolve(process.cwd(), ".env");
       let encoding = "utf8";
       const debug2 = Boolean(options && options.debug);
       const quiet = options && "quiet" in options ? options.quiet : true;
@@ -122738,13 +122849,13 @@ var require_main = __commonJS({
       }
       let lastError;
       const parsedAll = {};
-      for (const path22 of optionPaths) {
+      for (const path23 of optionPaths) {
         try {
-          const parsed = DotenvModule.parse(fs16.readFileSync(path22, { encoding }));
+          const parsed = DotenvModule.parse(fs17.readFileSync(path23, { encoding }));
           DotenvModule.populate(parsedAll, parsed, options);
         } catch (e) {
           if (debug2) {
-            _debug(`Failed to load ${path22} ${e.message}`);
+            _debug(`Failed to load ${path23} ${e.message}`);
           }
           lastError = e;
         }
@@ -122759,7 +122870,7 @@ var require_main = __commonJS({
         const shortPaths = [];
         for (const filePath of optionPaths) {
           try {
-            const relative2 = path21.relative(process.cwd(), filePath);
+            const relative2 = path22.relative(process.cwd(), filePath);
             shortPaths.push(relative2);
           } catch (e) {
             if (debug2) {
@@ -122860,14 +122971,14 @@ var require_main = __commonJS({
 });
 
 // apps/server/dist/config/env.js
-import path11 from "node:path";
+import path12 from "node:path";
 import os3 from "node:os";
 var import_dotenv;
 var init_env = __esm({
   "apps/server/dist/config/env.js"() {
     "use strict";
     import_dotenv = __toESM(require_main(), 1);
-    import_dotenv.default.config({ path: path11.join(os3.homedir(), ".truecourse", ".env") });
+    import_dotenv.default.config({ path: path12.join(os3.homedir(), ".truecourse", ".env") });
     import_dotenv.default.config({ path: "../../.env" });
   }
 });
@@ -123582,8 +123693,8 @@ var init_cli_provider = __esm({
         this._repoId = repoId;
       }
       /** Set target repo path — used as cwd when spawning CLI so Read tool accesses the right files. */
-      setRepoPath(path21) {
-        this._repoPath = path21;
+      setRepoPath(path22) {
+        this._repoPath = path22;
       }
       flushUsage() {
         if (this._usageRecords.length === 0)
@@ -125005,8 +125116,8 @@ var init_violation_lifecycle_service = __esm({
 
 // apps/server/dist/services/violation-pipeline.service.js
 import { randomUUID as randomUUID5 } from "node:crypto";
-import fs8 from "node:fs";
-import path12 from "node:path";
+import fs9 from "node:fs";
+import path13 from "node:path";
 function throwIfAborted(signal) {
   if (signal?.aborted)
     throw new DOMException("Analysis cancelled", "AbortError");
@@ -125038,6 +125149,7 @@ function compareDeterministicViolations(current, previous) {
   return { newDetections, unchangedDetections, resolvedDetections };
 }
 async function runViolationPipeline(input) {
+  await initParsers();
   const { repoPath, analysisId, now, result, serviceIdMap, moduleIdMap, methodIdMap, dbIdMap, previousActiveViolations, changedFileSet, onProgress, tracker, provider: externalProvider, enabledCategories, enableLlmRules, signal } = input;
   const added = [];
   const unchanged = [];
@@ -125066,29 +125178,35 @@ async function runViolationPipeline(input) {
   const enabledLlmCodeRules = enableLlmRules !== false ? allRules.filter((r) => (r.domain ? codeDomains.has(r.domain) : r.category === "code") && r.type === "llm" && r.prompt) : [];
   const archLlmRules = allRules.filter((r) => r.type === "llm" && r.prompt && r.domain === "architecture").map((r) => ({ key: r.key, name: r.name, severity: r.severity, prompt: r.prompt, category: r.category }));
   const dbSchemaLlmRules = allRules.filter((r) => r.type === "llm" && r.prompt && r.domain === "database" && r.category === "database").map((r) => ({ key: r.key, name: r.name, severity: r.severity, prompt: r.prompt, category: r.category }));
-  const filesToScan = changedFileSet ? [...changedFileSet].map((relPath) => ({ filePath: relPath, resolve: true })) : (result.fileAnalyses || []).map((fa) => ({ filePath: fa.filePath, resolve: !path12.isAbsolute(fa.filePath) }));
+  const filesToScan = changedFileSet ? [...changedFileSet].map((relPath) => ({ filePath: relPath, resolve: true })) : (result.fileAnalyses || []).map((fa) => ({ filePath: fa.filePath, resolve: !path13.isAbsolute(fa.filePath) }));
   const hasLlm = enabledLlm.length > 0;
   if (hasLlm)
     tracker?.start("scan", "Reading files...");
   const fileContents = /* @__PURE__ */ new Map();
+  const totalToScan = filesToScan.length;
+  let scanned = 0;
   for (const { filePath, resolve: resolve8 } of filesToScan) {
     try {
       const lang = detectLanguage(filePath);
       if (!lang)
         continue;
-      const absPath = resolve8 ? path12.resolve(repoPath, filePath) : path12.isAbsolute(filePath) ? filePath : path12.join(repoPath, filePath);
-      if (!fs8.existsSync(absPath))
+      const absPath = resolve8 ? path13.resolve(repoPath, filePath) : path13.isAbsolute(filePath) ? filePath : path13.join(repoPath, filePath);
+      if (!fs9.existsSync(absPath))
         continue;
-      const content = fs8.readFileSync(absPath, "utf-8");
+      const content = fs9.readFileSync(absPath, "utf-8");
       const lineCount = content.split("\n").length;
       fileContents.set(changedFileSet ? absPath : filePath, { content, lineCount });
     } catch {
     }
+    scanned++;
+    if (hasLlm && (scanned % 20 === 0 || scanned === totalToScan)) {
+      tracker?.detail("scan", `Reading ${scanned}/${totalToScan} files...`);
+    }
   }
   let typeQuery;
   const enabledCodeKeys = new Set(enabledCodeRules.filter((r) => r.type === "deterministic" && r.enabled).map((r) => r.key));
   if (hasTypeAwareVisitors(enabledCodeKeys)) {
-    const tsFiles = filesToScan.filter(({ filePath: fp }) => /\.(ts|tsx|js|jsx)$/.test(fp)).map(({ filePath: fp, resolve: res }) => res ? path12.resolve(repoPath, fp) : path12.isAbsolute(fp) ? fp : path12.join(repoPath, fp));
+    const tsFiles = filesToScan.filter(({ filePath: fp }) => /\.(ts|tsx|js|jsx)$/.test(fp)).map(({ filePath: fp, resolve: res }) => res ? path13.resolve(repoPath, fp) : path13.isAbsolute(fp) ? fp : path13.join(repoPath, fp));
     if (tsFiles.length > 0) {
       const scoped = buildScopedCompilerOptions(repoPath);
       typeQuery = createTypeQueryService(tsFiles, scoped);
@@ -125167,7 +125285,7 @@ async function runViolationPipeline(input) {
         const lang = detectLanguage(filePath);
         if (!lang)
           continue;
-        const absPath = resolve8 ? path12.resolve(repoPath, filePath) : path12.isAbsolute(filePath) ? filePath : path12.join(repoPath, filePath);
+        const absPath = resolve8 ? path13.resolve(repoPath, filePath) : path13.isAbsolute(filePath) ? filePath : path13.join(repoPath, filePath);
         const key = changedFileSet ? absPath : filePath;
         const fc = fileContents.get(key);
         if (!fc)
@@ -125181,11 +125299,11 @@ async function runViolationPipeline(input) {
   }
   log.info(`[Pipeline] Code scan: ${allCodeViolations.length} violations from ${filesToScan.length} files (${enabledCodeRules.length} det rules, ${enabledLlmCodeRules.length} LLM rules)`);
   if (enabledCodeRules.some((r) => r.key === "bugs/deterministic/invalid-pyproject-toml")) {
-    const pyprojectPath = path12.join(repoPath, "pyproject.toml");
-    if (fs8.existsSync(pyprojectPath)) {
+    const pyprojectPath = path13.join(repoPath, "pyproject.toml");
+    if (fs9.existsSync(pyprojectPath)) {
       try {
         const { checkPyprojectToml: checkPyprojectToml2 } = await Promise.resolve().then(() => (init_dist6(), dist_exports2));
-        const content = fs8.readFileSync(pyprojectPath, "utf-8");
+        const content = fs9.readFileSync(pyprojectPath, "utf-8");
         const tomlViolations = checkPyprojectToml2(pyprojectPath, content);
         allCodeViolations.push(...tomlViolations);
       } catch {
@@ -125967,7 +126085,7 @@ function processLlmCodeViolations(codeResult, validFilePaths, fileContents, allC
   for (const v of codeResult.violations) {
     let filePath = v.filePath;
     if (!validFilePaths.has(filePath)) {
-      const resolved = path12.resolve(repoPath, filePath);
+      const resolved = path13.resolve(repoPath, filePath);
       if (validFilePaths.has(resolved)) {
         filePath = resolved;
       } else {
@@ -126223,7 +126341,7 @@ var init_analyze_core = __esm({
 });
 
 // apps/server/dist/commands/analyze-persist.js
-import path13 from "node:path";
+import path14 from "node:path";
 function persistFullAnalysis(project, core2, startedAt) {
   const filename = buildAnalysisFilename(core2.analysisId, core2.now);
   const snapshot = {
@@ -126351,8 +126469,8 @@ function buildDiffSnapshot(repoPath, core2, baseline) {
   const newViolations = pipelineResult.added.map(denormalize);
   const latestById = new Map(baseline.violations.map((v) => [v.id, v]));
   const resolvedViolations = pipelineResult.resolvedRefs.map((r) => latestById.get(r.id)).filter((v) => !!v);
-  const changedAbs = new Set(changedFiles.map((c2) => path13.resolve(repoPath, c2.path)));
-  const matchesChanged = (p2) => !!p2 && (changedAbs.has(p2) || changedAbs.has(path13.resolve(repoPath, p2)));
+  const changedAbs = new Set(changedFiles.map((c2) => path14.resolve(repoPath, c2.path)));
+  const matchesChanged = (p2) => !!p2 && (changedAbs.has(p2) || changedAbs.has(path14.resolve(repoPath, p2)));
   const affectedModules = graph.modules.filter((m) => matchesChanged(m.filePath));
   const affectedModuleIdSet = new Set(affectedModules.map((m) => m.id));
   const serviceNameById = new Map(graph.services.map((s) => [s.id, s.name]));
@@ -126469,7 +126587,7 @@ init_dist4();
 init_paths();
 init_registry();
 init_helpers();
-async function runAdd() {
+async function runAdd(options = {}) {
   const repoPath = resolveRepoDir(process.cwd()) ?? process.cwd();
   mt("Adding repository to TrueCourse");
   O2.step(repoPath);
@@ -126481,14 +126599,14 @@ async function runAdd() {
   } else {
     O2.success(`Repository "${entry.name}" added.`);
   }
-  await promptInstallSkills(repoPath);
+  await promptInstallSkills(repoPath, { install: options.installSkills });
   gt("Run `truecourse analyze` to generate analysis data.");
 }
 
 // tools/cli/src/commands/analyze.ts
 init_dist4();
 import { execSync } from "node:child_process";
-import path15 from "node:path";
+import path16 from "node:path";
 
 // apps/server/dist/commands/analyze-in-process.js
 init_analysis_store();
@@ -126510,12 +126628,20 @@ init_helpers();
 
 // tools/cli/src/commands/llm-prompt.ts
 init_dist4();
-async function promptLlmEstimate(estimate) {
+init_helpers();
+async function promptLlmEstimate(estimate, { autoApprove } = {}) {
   const totalRules = estimate.uniqueRuleCount ?? estimate.tiers.reduce((s, t2) => s + t2.ruleCount, 0);
   const totalFiles = estimate.uniqueFileCount ?? estimate.tiers.reduce((s, t2) => s + t2.fileCount, 0);
   const tokens = estimate.totalEstimatedTokens;
   const tokenStr = tokens >= 1e6 ? `~${(tokens / 1e6).toFixed(1)}M tokens` : `~${Math.round(tokens / 1e3)}k tokens`;
   O2.step(`LLM will analyze ${totalFiles} files with ${totalRules} rules (${tokenStr})`);
+  if (autoApprove) return true;
+  if (!isInteractive()) {
+    O2.error(
+      "Cannot prompt for LLM-rule confirmation non-interactively. Pass --llm to approve the estimate or --no-llm to skip LLM rules."
+    );
+    return false;
+  }
   const proceed = await ot2({ message: "Run LLM-powered rules?", initialValue: true });
   if (q(proceed)) return false;
   if (!proceed) O2.info("Skipping LLM rules.");
@@ -126524,8 +126650,8 @@ async function promptLlmEstimate(estimate) {
 
 // tools/cli/src/telemetry.ts
 init_dist4();
-import fs9 from "node:fs";
-import path14 from "node:path";
+import fs10 from "node:fs";
+import path15 from "node:path";
 import os4 from "node:os";
 import crypto from "node:crypto";
 var DEFAULT_CONFIG2 = {
@@ -126534,12 +126660,12 @@ var DEFAULT_CONFIG2 = {
   noticeShown: false
 };
 function getTelemetryConfigPath() {
-  return path14.join(os4.homedir(), ".truecourse", "telemetry.json");
+  return path15.join(os4.homedir(), ".truecourse", "telemetry.json");
 }
 function readTelemetryConfig() {
   const configPath = getTelemetryConfigPath();
   try {
-    const raw = fs9.readFileSync(configPath, "utf-8");
+    const raw = fs10.readFileSync(configPath, "utf-8");
     const parsed = JSON.parse(raw);
     const config2 = { ...DEFAULT_CONFIG2, ...parsed };
     if (!config2.anonymousId) {
@@ -126559,17 +126685,17 @@ function readTelemetryConfig() {
 }
 function writeTelemetryConfig(partial) {
   const configPath = getTelemetryConfigPath();
-  const dir = path14.dirname(configPath);
-  fs9.mkdirSync(dir, { recursive: true });
+  const dir = path15.dirname(configPath);
+  fs10.mkdirSync(dir, { recursive: true });
   let current;
   try {
-    const raw = fs9.readFileSync(configPath, "utf-8");
+    const raw = fs10.readFileSync(configPath, "utf-8");
     current = { ...DEFAULT_CONFIG2, ...JSON.parse(raw) };
   } catch {
     current = { ...DEFAULT_CONFIG2 };
   }
   const merged = { ...current, ...partial };
-  fs9.writeFileSync(configPath, JSON.stringify(merged, null, 2) + "\n", "utf-8");
+  fs10.writeFileSync(configPath, JSON.stringify(merged, null, 2) + "\n", "utf-8");
 }
 function showFirstRunNotice() {
   try {
@@ -126663,18 +126789,31 @@ function stopSpinner() {
     spinnerInterval = null;
   }
 }
-async function runAnalyze(_options = {}) {
+function resolveLlmDecision(options, configDefault) {
+  if (options.llm === true) return { enabled: true, autoApproveEstimate: true };
+  if (options.llm === false) return { enabled: false, autoApproveEstimate: false };
+  if (!isInteractive()) {
+    exitMissingNonInteractiveFlag(
+      "analyze needs a decision on LLM rules before running non-interactively.",
+      "Pass --llm to run with LLM rules (cost) or --no-llm to skip them."
+    );
+  }
+  return { enabled: configDefault, autoApproveEstimate: false };
+}
+async function runAnalyze(options = {}) {
   mt("Analyzing repository");
   ensureClaudeCli();
   showFirstRunNotice();
   const project = resolveOrInitProject();
   O2.step(`Repository: ${project.name}`);
+  await promptInstallSkills(project.path, { install: options.installSkills });
   configureLogger({
-    filePath: path15.join(project.path, ".truecourse/logs/analyze.log")
+    filePath: path16.join(project.path, ".truecourse/logs/analyze.log")
   });
   const config2 = readProjectConfig(project.path);
   const enabledCategories = config2.enabledCategories ?? void 0;
-  const enableLlmRules = config2.enableLlmRules ?? true;
+  const llmDecision = resolveLlmDecision(options, config2.enableLlmRules ?? true);
+  const enableLlmRules = llmDecision.enabled;
   renderPhase = enableLlmRules ? "pre-llm" : "all";
   if (wipeLegacyPostgresData()) {
     O2.info("Legacy Postgres data wiped. Re-analyze to repopulate.");
@@ -126694,7 +126833,9 @@ async function runAnalyze(_options = {}) {
       enableLlmRulesOverride: enableLlmRules,
       onLlmEstimate: async (estimate) => {
         stopSpinner();
-        const proceed = await promptLlmEstimate(estimate);
+        const proceed = await promptLlmEstimate(estimate, {
+          autoApprove: llmDecision.autoApproveEstimate
+        });
         renderPhase = "post-llm";
         return proceed;
       }
@@ -126716,7 +126857,7 @@ async function runAnalyze(_options = {}) {
     await closeLogger();
   }
 }
-async function runAnalyzeDiff(_options = {}) {
+async function runAnalyzeDiff(options = {}) {
   const { diffInProcess: diffInProcess2 } = await Promise.resolve().then(() => (init_diff_in_process(), diff_in_process_exports));
   const { renderDiffResultsSummary: renderDiffResultsSummary2 } = await Promise.resolve().then(() => (init_helpers(), helpers_exports));
   mt("Running diff check");
@@ -126724,12 +126865,14 @@ async function runAnalyzeDiff(_options = {}) {
   showFirstRunNotice();
   const project = resolveOrInitProject();
   O2.step(`Repository: ${project.name}`);
+  await promptInstallSkills(project.path, { install: options.installSkills });
   configureLogger({
-    filePath: path15.join(project.path, ".truecourse/logs/analyze.log")
+    filePath: path16.join(project.path, ".truecourse/logs/analyze.log")
   });
   const config2 = readProjectConfig(project.path);
   const enabledCategories = config2.enabledCategories ?? void 0;
-  const enableLlmRules = config2.enableLlmRules ?? true;
+  const llmDecision = resolveLlmDecision(options, config2.enableLlmRules ?? true);
+  const enableLlmRules = llmDecision.enabled;
   renderPhase = enableLlmRules ? "pre-llm" : "all";
   const stepDefs = buildAnalysisSteps(enabledCategories, enableLlmRules);
   const tracker = new StepTracker((payload) => {
@@ -126746,7 +126889,9 @@ async function runAnalyzeDiff(_options = {}) {
       enableLlmRulesOverride: enableLlmRules,
       onLlmEstimate: async (estimate) => {
         stopSpinner();
-        const proceed = await promptLlmEstimate(estimate);
+        const proceed = await promptLlmEstimate(estimate, {
+          autoApprove: llmDecision.autoApproveEstimate
+        });
         renderPhase = "post-llm";
         return proceed;
       }
@@ -126781,24 +126926,24 @@ init_paths();
 init_registry();
 init_helpers();
 import { spawn as spawn5 } from "node:child_process";
-import fs14 from "node:fs";
-import path19 from "node:path";
-import { fileURLToPath as fileURLToPath4 } from "node:url";
+import fs15 from "node:fs";
+import path20 from "node:path";
+import { fileURLToPath as fileURLToPath5 } from "node:url";
 
 // tools/cli/src/commands/service/macos.ts
-import fs11 from "node:fs";
-import path16 from "node:path";
+import fs12 from "node:fs";
+import path17 from "node:path";
 import os5 from "node:os";
 import { execSync as execSync2 } from "node:child_process";
 
 // tools/cli/src/commands/service/env.ts
-import fs10 from "node:fs";
+import fs11 from "node:fs";
 function parseEnvFile(filePath) {
   const vars = {};
-  if (!fs10.existsSync(filePath)) {
+  if (!fs11.existsSync(filePath)) {
     return vars;
   }
-  const content = fs10.readFileSync(filePath, "utf-8");
+  const content = fs11.readFileSync(filePath, "utf-8");
   for (const line of content.split("\n")) {
     const trimmed2 = line.trim();
     if (!trimmed2 || trimmed2.startsWith("#")) continue;
@@ -126818,14 +126963,14 @@ function parseEnvFile(filePath) {
 
 // tools/cli/src/commands/service/macos.ts
 var SERVICE_LABEL = "com.truecourse.server";
-var PLIST_DIR = path16.join(os5.homedir(), "Library", "LaunchAgents");
-var PLIST_PATH = path16.join(PLIST_DIR, `${SERVICE_LABEL}.plist`);
+var PLIST_DIR = path17.join(os5.homedir(), "Library", "LaunchAgents");
+var PLIST_PATH = path17.join(PLIST_DIR, `${SERVICE_LABEL}.plist`);
 function escapeXml(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
 }
 function buildPlist(serverPath, logPath, envVars) {
-  const stdoutPath = path16.join(path16.dirname(logPath), "truecourse.log");
-  const stderrPath = path16.join(path16.dirname(logPath), "truecourse.error.log");
+  const stdoutPath = path17.join(path17.dirname(logPath), "truecourse.log");
+  const stderrPath = path17.join(path17.dirname(logPath), "truecourse.error.log");
   let envSection = "";
   if (Object.keys(envVars).length > 0) {
     const entries = Object.entries(envVars).map(([k, v]) => `      <key>${escapeXml(k)}</key>
@@ -126861,15 +127006,15 @@ ${entries}
 }
 var MacOSService = class {
   async install(serverPath, logPath) {
-    const envFile = path16.join(os5.homedir(), ".truecourse", ".env");
+    const envFile = path17.join(os5.homedir(), ".truecourse", ".env");
     const envVars = parseEnvFile(envFile);
     if (process.env.PATH && !envVars.PATH) {
       envVars.PATH = process.env.PATH;
     }
-    fs11.mkdirSync(PLIST_DIR, { recursive: true });
-    fs11.mkdirSync(path16.dirname(logPath), { recursive: true });
+    fs12.mkdirSync(PLIST_DIR, { recursive: true });
+    fs12.mkdirSync(path17.dirname(logPath), { recursive: true });
     const plist = buildPlist(serverPath, logPath, envVars);
-    fs11.writeFileSync(PLIST_PATH, plist, "utf-8");
+    fs12.writeFileSync(PLIST_PATH, plist, "utf-8");
     execSync2(`launchctl load -w "${PLIST_PATH}"`, { stdio: "pipe" });
   }
   async uninstall() {
@@ -126877,12 +127022,12 @@ var MacOSService = class {
       execSync2(`launchctl unload "${PLIST_PATH}"`, { stdio: "pipe" });
     } catch {
     }
-    if (fs11.existsSync(PLIST_PATH)) {
-      fs11.unlinkSync(PLIST_PATH);
+    if (fs12.existsSync(PLIST_PATH)) {
+      fs12.unlinkSync(PLIST_PATH);
     }
   }
   async start() {
-    if (!fs11.existsSync(PLIST_PATH)) {
+    if (!fs12.existsSync(PLIST_PATH)) {
       throw new Error("Service is not installed. Run 'truecourse service install' first.");
     }
     execSync2(`launchctl load -w "${PLIST_PATH}"`, { stdio: "pipe" });
@@ -126912,21 +127057,21 @@ var MacOSService = class {
     }
   }
   async isInstalled() {
-    return fs11.existsSync(PLIST_PATH);
+    return fs12.existsSync(PLIST_PATH);
   }
 };
 
 // tools/cli/src/commands/service/linux.ts
-import fs12 from "node:fs";
-import path17 from "node:path";
+import fs13 from "node:fs";
+import path18 from "node:path";
 import os6 from "node:os";
 import { execSync as execSync3 } from "node:child_process";
 var SERVICE_NAME = "truecourse";
-var UNIT_DIR = path17.join(os6.homedir(), ".config", "systemd", "user");
-var UNIT_PATH = path17.join(UNIT_DIR, `${SERVICE_NAME}.service`);
+var UNIT_DIR = path18.join(os6.homedir(), ".config", "systemd", "user");
+var UNIT_PATH = path18.join(UNIT_DIR, `${SERVICE_NAME}.service`);
 function buildUnitFile(serverPath, logPath) {
-  const envFile = path17.join(os6.homedir(), ".truecourse", ".env");
-  const logDir = path17.dirname(logPath);
+  const envFile = path18.join(os6.homedir(), ".truecourse", ".env");
+  const logDir = path18.dirname(logPath);
   return `[Unit]
 Description=TrueCourse Server
 After=network.target
@@ -126937,8 +127082,8 @@ ExecStart=${process.execPath} ${serverPath}
 Restart=on-failure
 RestartSec=5
 EnvironmentFile=${envFile}
-StandardOutput=append:${path17.join(logDir, "truecourse.log")}
-StandardError=append:${path17.join(logDir, "truecourse.error.log")}
+StandardOutput=append:${path18.join(logDir, "truecourse.log")}
+StandardError=append:${path18.join(logDir, "truecourse.error.log")}
 
 [Install]
 WantedBy=default.target
@@ -126946,10 +127091,10 @@ WantedBy=default.target
 }
 var LinuxService = class {
   async install(serverPath, logPath) {
-    fs12.mkdirSync(UNIT_DIR, { recursive: true });
-    fs12.mkdirSync(path17.dirname(logPath), { recursive: true });
+    fs13.mkdirSync(UNIT_DIR, { recursive: true });
+    fs13.mkdirSync(path18.dirname(logPath), { recursive: true });
     const unit = buildUnitFile(serverPath, logPath);
-    fs12.writeFileSync(UNIT_PATH, unit, "utf-8");
+    fs13.writeFileSync(UNIT_PATH, unit, "utf-8");
     execSync3("systemctl --user daemon-reload", { stdio: "pipe" });
     execSync3(`systemctl --user enable ${SERVICE_NAME}`, { stdio: "pipe" });
   }
@@ -126962,8 +127107,8 @@ var LinuxService = class {
       execSync3(`systemctl --user disable ${SERVICE_NAME}`, { stdio: "pipe" });
     } catch {
     }
-    if (fs12.existsSync(UNIT_PATH)) {
-      fs12.unlinkSync(UNIT_PATH);
+    if (fs13.existsSync(UNIT_PATH)) {
+      fs13.unlinkSync(UNIT_PATH);
     }
     try {
       execSync3("systemctl --user daemon-reload", { stdio: "pipe" });
@@ -126992,7 +127137,7 @@ var LinuxService = class {
     }
   }
   async isInstalled() {
-    return fs12.existsSync(UNIT_PATH);
+    return fs13.existsSync(UNIT_PATH);
   }
 };
 
@@ -127095,72 +127240,72 @@ function getPlatform() {
 }
 
 // tools/cli/src/commands/service/logs.ts
-import fs13 from "node:fs";
-import path18 from "node:path";
+import fs14 from "node:fs";
+import path19 from "node:path";
 import os7 from "node:os";
 import { spawn as spawn4 } from "node:child_process";
 var MAX_LOG_SIZE2 = 10 * 1024 * 1024;
 var MAX_LOG_FILES2 = 5;
 function getLogDir() {
-  return path18.join(os7.homedir(), ".truecourse", "logs");
+  return path19.join(os7.homedir(), ".truecourse", "logs");
 }
 function getLogPath() {
-  return path18.join(getLogDir(), "truecourse.log");
+  return path19.join(getLogDir(), "truecourse.log");
 }
 function rotateLogs(logDir) {
-  const logFile = path18.join(logDir, "truecourse.log");
-  if (!fs13.existsSync(logFile)) return;
-  const stats = fs13.statSync(logFile);
+  const logFile = path19.join(logDir, "truecourse.log");
+  if (!fs14.existsSync(logFile)) return;
+  const stats = fs14.statSync(logFile);
   if (stats.size < MAX_LOG_SIZE2) return;
   for (let i = MAX_LOG_FILES2; i >= 1; i--) {
-    const older = path18.join(logDir, `truecourse.log.${i}`);
+    const older = path19.join(logDir, `truecourse.log.${i}`);
     if (i === MAX_LOG_FILES2) {
-      if (fs13.existsSync(older)) fs13.unlinkSync(older);
+      if (fs14.existsSync(older)) fs14.unlinkSync(older);
     } else {
-      const newer = path18.join(logDir, `truecourse.log.${i + 1}`);
-      if (fs13.existsSync(older)) fs13.renameSync(older, newer);
+      const newer = path19.join(logDir, `truecourse.log.${i + 1}`);
+      if (fs14.existsSync(older)) fs14.renameSync(older, newer);
     }
   }
-  fs13.renameSync(logFile, path18.join(logDir, "truecourse.log.1"));
+  fs14.renameSync(logFile, path19.join(logDir, "truecourse.log.1"));
 }
 function rotateErrorLogs(logDir) {
-  const logFile = path18.join(logDir, "truecourse.error.log");
-  if (!fs13.existsSync(logFile)) return;
-  const stats = fs13.statSync(logFile);
+  const logFile = path19.join(logDir, "truecourse.error.log");
+  if (!fs14.existsSync(logFile)) return;
+  const stats = fs14.statSync(logFile);
   if (stats.size < MAX_LOG_SIZE2) return;
   for (let i = MAX_LOG_FILES2; i >= 1; i--) {
-    const older = path18.join(logDir, `truecourse.error.log.${i}`);
+    const older = path19.join(logDir, `truecourse.error.log.${i}`);
     if (i === MAX_LOG_FILES2) {
-      if (fs13.existsSync(older)) fs13.unlinkSync(older);
+      if (fs14.existsSync(older)) fs14.unlinkSync(older);
     } else {
-      const newer = path18.join(logDir, `truecourse.error.log.${i + 1}`);
-      if (fs13.existsSync(older)) fs13.renameSync(older, newer);
+      const newer = path19.join(logDir, `truecourse.error.log.${i + 1}`);
+      if (fs14.existsSync(older)) fs14.renameSync(older, newer);
     }
   }
-  fs13.renameSync(logFile, path18.join(logDir, "truecourse.error.log.1"));
+  fs14.renameSync(logFile, path19.join(logDir, "truecourse.error.log.1"));
 }
 function tailLogs() {
   const logFile = getLogPath();
-  if (!fs13.existsSync(logFile)) {
+  if (!fs14.existsSync(logFile)) {
     console.log("No log file found. Is the service running?");
     console.log(`Expected at: ${logFile}`);
     return;
   }
   if (process.platform === "win32") {
-    const content = fs13.readFileSync(logFile, "utf-8");
+    const content = fs14.readFileSync(logFile, "utf-8");
     const lines = content.split("\n");
     const tail = lines.slice(-50);
     for (const line of tail) {
       process.stdout.write(line + "\n");
     }
-    let lastSize = fs13.statSync(logFile).size;
-    fs13.watchFile(logFile, { interval: 500 }, () => {
-      const newSize = fs13.statSync(logFile).size;
+    let lastSize = fs14.statSync(logFile).size;
+    fs14.watchFile(logFile, { interval: 500 }, () => {
+      const newSize = fs14.statSync(logFile).size;
       if (newSize > lastSize) {
-        const fd = fs13.openSync(logFile, "r");
+        const fd = fs14.openSync(logFile, "r");
         const buf = Buffer.alloc(newSize - lastSize);
-        fs13.readSync(fd, buf, 0, buf.length, lastSize);
-        fs13.closeSync(fd);
+        fs14.readSync(fd, buf, 0, buf.length, lastSize);
+        fs14.closeSync(fd);
         process.stdout.write(buf.toString("utf-8"));
         lastSize = newSize;
       }
@@ -127181,15 +127326,15 @@ function tailLogs() {
 }
 
 // tools/cli/src/commands/dashboard.ts
-var __dirname3 = path19.dirname(fileURLToPath4(import.meta.url));
+var __dirname3 = path20.dirname(fileURLToPath5(import.meta.url));
 function resolveServerEntry() {
   const candidates = [
     // Packaged CLI: dist/cli.mjs next to dist/server.mjs
-    path19.join(__dirname3, "server.mjs"),
+    path20.join(__dirname3, "server.mjs"),
     // Source build output: tools/cli/dist → ../../../../dist/server.mjs
-    path19.resolve(__dirname3, "..", "..", "..", "..", "dist", "server.mjs")
+    path20.resolve(__dirname3, "..", "..", "..", "..", "dist", "server.mjs")
   ];
-  return candidates.find((p2) => fs14.existsSync(p2)) ?? null;
+  return candidates.find((p2) => fs15.existsSync(p2)) ?? null;
 }
 async function waitForHealth(url, timeoutMs = 3e4) {
   const start = Date.now();
@@ -127282,6 +127427,27 @@ async function runServiceMode(serverEntry) {
   O2.success(`Dashboard open at ${target}`);
   O2.info("Stop the dashboard with: truecourse dashboard stop");
 }
+async function probeHealth(url) {
+  try {
+    const res = await fetch(`${url}/api/health`);
+    return res.ok;
+  } catch {
+    return false;
+  }
+}
+async function detectRunningState() {
+  const platform = getPlatform();
+  const url = getServerUrl();
+  const healthy = await probeHealth(url);
+  if (await platform.isInstalled()) {
+    const { running, pid } = await platform.status();
+    if (running) return { mode: "service", pid, healthy };
+    if (healthy) return { mode: "console", healthy: true };
+    return { mode: "none" };
+  }
+  if (healthy) return { mode: "console", healthy: true };
+  return { mode: "none" };
+}
 async function runDashboard(options = {}) {
   mt("Opening TrueCourse dashboard");
   const serverEntry = resolveServerEntry();
@@ -127291,10 +127457,35 @@ async function runDashboard(options = {}) {
     );
     process.exit(1);
   }
-  const configured = fs14.existsSync(getConfigPath());
-  const shouldPrompt = !configured || options.reconfigure;
-  const runMode = shouldPrompt ? await promptRunMode() : readConfig().runMode;
-  if (shouldPrompt) writeConfig({ runMode });
+  const configured = fs15.existsSync(getConfigPath());
+  const needsDecision = !configured || options.reconfigure;
+  let runMode;
+  if (options.mode) {
+    runMode = options.mode;
+  } else if (needsDecision) {
+    if (!isInteractive()) {
+      exitMissingNonInteractiveFlag(
+        "Dashboard run mode is not configured.",
+        "Pass --service for the background service or --console to run in this terminal."
+      );
+    }
+    runMode = await promptRunMode();
+  } else {
+    runMode = readConfig().runMode;
+  }
+  const shouldPersist = needsDecision || options.mode !== void 0;
+  if (runMode !== "service") {
+    const platform = getPlatform();
+    if (await platform.isInstalled()) {
+      const { running } = await platform.status();
+      if (running) {
+        O2.error(
+          "A dashboard service is already installed and running. Stop and remove it first: `truecourse dashboard uninstall`, then rerun `truecourse dashboard`."
+        );
+        process.exit(1);
+      }
+    }
+  }
   if (runMode === "service") {
     try {
       await runServiceMode(serverEntry);
@@ -127302,70 +127493,68 @@ async function runDashboard(options = {}) {
       O2.error(`Service mode failed: ${err.message}`);
       O2.info("Falling back to console mode.");
       await runConsoleMode(serverEntry);
+      if (shouldPersist) writeConfig({ runMode: "console" });
+      return;
     }
+    if (shouldPersist) writeConfig({ runMode: "service" });
   } else {
     await runConsoleMode(serverEntry);
+    if (shouldPersist) writeConfig({ runMode: "console" });
   }
 }
 async function runDashboardStop() {
-  const config2 = readConfig();
-  if (config2.runMode !== "service") {
-    O2.info("Dashboard is running in console mode. Press Ctrl+C in its terminal to stop.");
-    return;
-  }
-  const platform = getPlatform();
-  const { running } = await platform.status();
-  if (!running) {
-    O2.info("Dashboard is not running.");
-    return;
+  const state = await detectRunningState();
+  switch (state.mode) {
+    case "service": {
+      O2.step("Stopping dashboard service...");
+      await getPlatform().stop();
+      O2.success("Dashboard service stopped.");
+      return;
+    }
+    case "console": {
+      O2.info(
+        "A dashboard is running in console mode (not managed by the service). Press Ctrl+C in its terminal to stop it."
+      );
+      return;
+    }
+    case "none": {
+      O2.info("Dashboard is not running.");
+      return;
+    }
   }
-  O2.step("Stopping dashboard...");
-  await platform.stop();
-  O2.success("Dashboard stopped.");
 }
 async function runDashboardStatus() {
-  const config2 = readConfig();
+  const state = await detectRunningState();
   const url = getServerUrl();
-  if (config2.runMode !== "service") {
-    try {
-      const res = await fetch(`${url}/api/health`);
-      if (res.ok) {
-        O2.success(`Dashboard is running in console mode at ${url}`);
+  switch (state.mode) {
+    case "service": {
+      const pidInfo = state.pid ? ` (PID: ${state.pid})` : "";
+      O2.success(`Dashboard service is running${pidInfo}`);
+      if (state.healthy) {
+        O2.info(`Server is healthy at ${url}`);
       } else {
-        O2.info("Dashboard is not running.");
+        O2.warn(`Service process is running but server is not responding at ${url}.`);
       }
-    } catch {
-      O2.info("Dashboard is not running.");
+      return;
     }
-    return;
-  }
-  const platform = getPlatform();
-  const installed = await platform.isInstalled();
-  if (!installed) {
-    O2.info("Dashboard service is not installed. Run `truecourse dashboard` to set it up.");
-    return;
-  }
-  const { running, pid } = await platform.status();
-  if (!running) {
-    O2.info("Dashboard service is installed but not running.");
-    return;
-  }
-  const pidInfo = pid ? ` (PID: ${pid})` : "";
-  O2.success(`Dashboard service is running${pidInfo}`);
-  try {
-    const res = await fetch(`${url}/api/health`);
-    if (res.ok) {
-      O2.info(`Server is healthy at ${url}`);
-    } else {
-      O2.warn(`Server returned status ${res.status}`);
+    case "console": {
+      O2.success(`Dashboard is running in console mode at ${url}`);
+      return;
+    }
+    case "none": {
+      const platform = getPlatform();
+      if (await platform.isInstalled()) {
+        O2.info("Dashboard service is installed but not running.");
+      } else {
+        O2.info("Dashboard is not running.");
+      }
+      return;
     }
-  } catch {
-    O2.warn("Service process is running but server is not responding.");
   }
 }
-function runDashboardLogs() {
-  const config2 = readConfig();
-  if (config2.runMode !== "service") {
+async function runDashboardLogs() {
+  const state = await detectRunningState();
+  if (state.mode === "console") {
     O2.info("Dashboard is running in console mode \u2014 logs print to its terminal.");
     return;
   }
@@ -127402,27 +127591,38 @@ var SEVERITY_ORDER = {
   low: 3,
   info: 4
 };
+var SEVERITIES = ["critical", "high", "medium", "low", "info"];
 function listViolations(repoPath, options = {}) {
   const latest = readLatest(repoPath);
   if (!latest)
     return { violations: [], total: 0 };
-  if (options.analysisId && latest.analysis.id !== options.analysisId) {
-    return { violations: [], total: 0 };
+  let violations;
+  if (!options.analysisId || latest.analysis.id === options.analysisId) {
+    violations = latest.violations;
+  } else {
+    const historical = readActiveViolationsAt(repoPath, options.analysisId);
+    if (!historical)
+      return { violations: [], total: 0 };
+    violations = historical;
   }
   const statusMode = options.status ?? "active";
   let filtered;
   if (statusMode === "resolved") {
-    filtered = latest.violations.filter((v) => v.status === "resolved");
+    filtered = violations.filter((v) => v.status === "resolved");
   } else if (statusMode === "all") {
-    filtered = latest.violations;
+    filtered = violations;
   } else {
     const active = ["new", "unchanged"];
-    filtered = latest.violations.filter((v) => active.includes(v.status));
+    filtered = violations.filter((v) => active.includes(v.status));
   }
   if (options.filePath) {
     const absPath = options.filePath.startsWith("/") ? options.filePath : `${repoPath}/${options.filePath}`;
     filtered = filtered.filter((v) => v.type === "code" && (v.filePath === absPath || v.filePath === options.filePath));
   }
+  if (options.severity !== void 0) {
+    const allowed = (Array.isArray(options.severity) ? options.severity : [options.severity]).map((s) => s.toLowerCase());
+    filtered = filtered.filter((v) => allowed.includes(v.severity.toLowerCase()));
+  }
   filtered.sort((a, b) => {
     const sa = SEVERITY_ORDER[a.severity] ?? 5;
     const sb = SEVERITY_ORDER[b.severity] ?? 5;
@@ -127436,6 +127636,42 @@ function listViolations(repoPath, options = {}) {
   const paged = limit > 0 ? filtered.slice(offset, offset + limit) : filtered;
   return { violations: paged, total };
 }
+function readActiveViolationsAt(repoPath, analysisId) {
+  const targetFile = findAnalysisFilename(repoPath, analysisId);
+  if (!targetFile)
+    return null;
+  const targetSnap = readAnalysis(repoPath, targetFile);
+  if (!targetSnap)
+    return null;
+  const files = listAnalyses(repoPath);
+  const targetIdx = files.indexOf(targetFile);
+  if (targetIdx === -1)
+    return null;
+  const active = /* @__PURE__ */ new Map();
+  for (let i = 0; i <= targetIdx; i++) {
+    const snap = readAnalysis(repoPath, files[i]);
+    if (!snap)
+      continue;
+    for (const r of snap.violations.resolved)
+      active.delete(r.id);
+    for (const a of snap.violations.added)
+      active.set(a.id, a);
+  }
+  return [...active.values()].map(denormalizeAgainst(targetSnap.graph));
+}
+function denormalizeAgainst(graph) {
+  const serviceById = new Map(graph.services.map((s) => [s.id, s.name]));
+  const moduleById = new Map(graph.modules.map((m) => [m.id, m.name]));
+  const methodById = new Map(graph.methods.map((m) => [m.id, m.name]));
+  const databaseById = new Map(graph.databases.map((d3) => [d3.id, d3.name]));
+  return (v) => ({
+    ...v,
+    targetServiceName: v.targetServiceId ? serviceById.get(v.targetServiceId) ?? null : null,
+    targetModuleName: v.targetModuleId ? moduleById.get(v.targetModuleId) ?? null : null,
+    targetMethodName: v.targetMethodId ? methodById.get(v.targetMethodId) ?? null : null,
+    targetDatabaseName: v.targetDatabaseId ? databaseById.get(v.targetDatabaseId) ?? null : null
+  });
+}
 function getDiffResult(repoPath) {
   const diff = readDiff(repoPath);
   if (!diff)
@@ -127447,19 +127683,37 @@ function getDiffResult(repoPath) {
 
 // tools/cli/src/commands/list.ts
 init_helpers();
-async function runList({ limit = 20, offset = 0 } = {}) {
+async function runList({ limit = 20, offset = 0, severity } = {}) {
   mt("Violations");
   const repo = requireRegisteredRepo();
   const { violations, total } = listViolations(repo.path, {
     limit: isFinite(limit) ? limit : 0,
-    offset
+    offset,
+    severity
   });
   if (total === 0 && violations.length === 0) {
-    O2.info("No violations. Run `truecourse analyze` if you haven't yet.");
+    if (severity && severity.length > 0) {
+      O2.info(`No violations match severity filter: ${severity.join(", ")}.`);
+    } else {
+      O2.info("No violations. Run `truecourse analyze` if you haven't yet.");
+    }
     return;
   }
   renderViolations(violations, { total, offset });
 }
+function parseSeverityFlag(raw) {
+  if (!raw) return void 0;
+  const parts = raw.split(",").map((s) => s.trim().toLowerCase()).filter(Boolean);
+  if (parts.length === 0) return void 0;
+  const invalid = parts.filter((s) => !SEVERITIES.includes(s));
+  if (invalid.length > 0) {
+    console.error(
+      `error: unknown severity value(s): ${invalid.join(", ")}. Valid: ${SEVERITIES.join(", ")}`
+    );
+    process.exit(1);
+  }
+  return parts;
+}
 async function runListDiff() {
   mt("Diff check results");
   const repo = requireRegisteredRepo();
@@ -127552,8 +127806,8 @@ async function runRulesLlm(options) {
 
 // tools/cli/src/commands/hooks.ts
 import { execSync as execSync5 } from "node:child_process";
-import fs15 from "node:fs";
-import path20 from "node:path";
+import fs16 from "node:fs";
+import path21 from "node:path";
 
 // node_modules/.pnpm/js-yaml@4.1.1/node_modules/js-yaml/dist/js-yaml.mjs
 function isNothing(subject) {
@@ -130197,22 +130451,22 @@ var DEFAULT_TIMEOUT_MS = 3e4;
 function findGitDir(from) {
   let dir = from;
   while (true) {
-    const gitPath = path20.join(dir, ".git");
-    if (fs15.existsSync(gitPath)) {
-      const stat = fs15.statSync(gitPath);
+    const gitPath = path21.join(dir, ".git");
+    if (fs16.existsSync(gitPath)) {
+      const stat = fs16.statSync(gitPath);
       if (stat.isDirectory()) {
         return gitPath;
       }
       if (stat.isFile()) {
-        const content = fs15.readFileSync(gitPath, "utf-8").trim();
+        const content = fs16.readFileSync(gitPath, "utf-8").trim();
         const match2 = content.match(/^gitdir:\s*(.+)$/);
         if (match2) {
-          const resolved = path20.resolve(dir, match2[1]);
+          const resolved = path21.resolve(dir, match2[1]);
           return resolved;
         }
       }
     }
-    const parent = path20.dirname(dir);
+    const parent = path21.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -130220,10 +130474,10 @@ function findGitDir(from) {
 function findProjectRoot(from) {
   let dir = from;
   while (true) {
-    if (fs15.existsSync(path20.join(dir, ".git"))) {
+    if (fs16.existsSync(path21.join(dir, ".git"))) {
       return dir;
     }
-    const parent = path20.dirname(dir);
+    const parent = path21.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -130238,10 +130492,10 @@ function parseTimeout(value) {
   return num * 1e3;
 }
 function loadConfig(projectRoot) {
-  const configPath = path20.join(projectRoot, ".truecourse", "hooks.yaml");
-  if (!fs15.existsSync(configPath)) return {};
+  const configPath = path21.join(projectRoot, ".truecourse", "hooks.yaml");
+  if (!fs16.existsSync(configPath)) return {};
   try {
-    const raw = fs15.readFileSync(configPath, "utf-8");
+    const raw = fs16.readFileSync(configPath, "utf-8");
     return jsYaml.load(raw) || {};
   } catch {
     return {};
@@ -130260,11 +130514,11 @@ function runHooksInstall() {
     console.error("Error: Not a git repository.");
     process.exit(1);
   }
-  const hooksDir = path20.join(gitDir, "hooks");
-  fs15.mkdirSync(hooksDir, { recursive: true });
-  const hookPath = path20.join(hooksDir, "pre-commit");
-  if (fs15.existsSync(hookPath)) {
-    const existing = fs15.readFileSync(hookPath, "utf-8");
+  const hooksDir = path21.join(gitDir, "hooks");
+  fs16.mkdirSync(hooksDir, { recursive: true });
+  const hookPath = path21.join(hooksDir, "pre-commit");
+  if (fs16.existsSync(hookPath)) {
+    const existing = fs16.readFileSync(hookPath, "utf-8");
     if (!existing.includes(HOOK_IDENTIFIER)) {
       console.error(
         "Error: A pre-commit hook already exists and was not installed by TrueCourse."
@@ -130274,7 +130528,7 @@ function runHooksInstall() {
       process.exit(1);
     }
   }
-  fs15.writeFileSync(hookPath, HOOK_SCRIPT, { mode: 493 });
+  fs16.writeFileSync(hookPath, HOOK_SCRIPT, { mode: 493 });
   console.log("TrueCourse pre-commit hook installed.");
   console.log(`  ${hookPath}`);
 }
@@ -130284,17 +130538,17 @@ function runHooksUninstall() {
     console.error("Error: Not a git repository.");
     process.exit(1);
   }
-  const hookPath = path20.join(gitDir, "hooks", "pre-commit");
-  if (!fs15.existsSync(hookPath)) {
+  const hookPath = path21.join(gitDir, "hooks", "pre-commit");
+  if (!fs16.existsSync(hookPath)) {
     console.log("No pre-commit hook installed.");
     return;
   }
-  const content = fs15.readFileSync(hookPath, "utf-8");
+  const content = fs16.readFileSync(hookPath, "utf-8");
   if (!content.includes(HOOK_IDENTIFIER)) {
     console.error("Error: The pre-commit hook was not installed by TrueCourse. Leaving it in place.");
     process.exit(1);
   }
-  fs15.unlinkSync(hookPath);
+  fs16.unlinkSync(hookPath);
   console.log("TrueCourse pre-commit hook removed.");
 }
 function runHooksStatus() {
@@ -130303,8 +130557,8 @@ function runHooksStatus() {
     console.error("Error: Not a git repository.");
     process.exit(1);
   }
-  const hookPath = path20.join(gitDir, "hooks", "pre-commit");
-  const installed = fs15.existsSync(hookPath) && fs15.readFileSync(hookPath, "utf-8").includes(HOOK_IDENTIFIER);
+  const hookPath = path21.join(gitDir, "hooks", "pre-commit");
+  const installed = fs16.existsSync(hookPath) && fs16.readFileSync(hookPath, "utf-8").includes(HOOK_IDENTIFIER);
   if (installed) {
     console.log("TrueCourse pre-commit hook: installed");
     console.log(`  ${hookPath}`);
@@ -130314,8 +130568,8 @@ function runHooksStatus() {
   }
   const projectRoot = findProjectRoot(process.cwd());
   if (projectRoot) {
-    const configPath = path20.join(projectRoot, ".truecourse", "hooks.yaml");
-    if (fs15.existsSync(configPath)) {
+    const configPath = path21.join(projectRoot, ".truecourse", "hooks.yaml");
+    if (fs16.existsSync(configPath)) {
       console.log(`
 Config: ${configPath}`);
       const config2 = loadConfig(projectRoot);
@@ -130385,6 +130639,7 @@ async function runHooksRun() {
     detectLanguage2 = analyzer.detectLanguage;
     checkCodeRules2 = analyzer.checkCodeRules;
     CODE_RULES2 = analyzer.CODE_RULES;
+    await analyzer.initParsers();
   } catch {
     console.log(" skipped (analyzer not available)");
     process.exit(0);
@@ -130440,9 +130695,14 @@ async function runHooksRun() {
 
 // tools/cli/src/index.ts
 var program2 = new Command();
-program2.name("truecourse").version("0.4.5").description("TrueCourse CLI \u2014 analyze your repository and open the dashboard");
-var dashboardCmd = program2.command("dashboard").description("Start the TrueCourse dashboard and open it in your browser").option("--reconfigure", "Re-prompt for console vs background service mode").action(async (options) => {
-  await runDashboard({ reconfigure: options.reconfigure });
+program2.name("truecourse").version("0.5.1").description("TrueCourse CLI \u2014 analyze your repository and open the dashboard");
+var dashboardCmd = program2.command("dashboard").description("Start the TrueCourse dashboard and open it in your browser").option("--reconfigure", "Re-prompt for console vs background service mode").option("--service", "Run as a background service (skips mode prompt)").option("--console", "Run in this terminal (skips mode prompt)").action(async (options) => {
+  if (options.service && options.console) {
+    console.error("error: --service and --console are mutually exclusive");
+    process.exit(1);
+  }
+  const mode = options.service ? "service" : options.console ? "console" : void 0;
+  await runDashboard({ reconfigure: options.reconfigure, mode });
 });
 dashboardCmd.command("stop").description("Stop the dashboard").action(async () => {
   await runDashboardStop();
@@ -130450,29 +130710,40 @@ dashboardCmd.command("stop").description("Stop the dashboard").action(async () =
 dashboardCmd.command("status").description("Show dashboard status").action(async () => {
   await runDashboardStatus();
 });
-dashboardCmd.command("logs").description("Tail dashboard logs (service mode only)").action(() => {
-  runDashboardLogs();
+dashboardCmd.command("logs").description("Tail dashboard logs (service mode only)").action(async () => {
+  await runDashboardLogs();
 });
 dashboardCmd.command("uninstall").description("Remove the background service and revert to console mode").action(async () => {
   await runDashboardUninstall();
 });
-program2.command("analyze").description("Analyze the current repository").option("--diff", "Run diff check against latest analysis").action(async (options) => {
+function resolveInstallSkills(options) {
+  if (options.installSkills === true) return true;
+  if (options.skills === false) return false;
+  return void 0;
+}
+program2.command("analyze").description("Analyze the current repository").option("--diff", "Run diff check against latest analysis").option("--llm", "Run LLM-powered rules (pre-approves the cost estimate)").option("--no-llm", "Skip LLM-powered rules for this run").option("--install-skills", "Install Claude Code skills without prompting").option("--no-skills", "Skip the Claude Code skills prompt").action(async (options) => {
+  const llm = typeof options.llm === "boolean" ? options.llm : void 0;
+  const installSkills = resolveInstallSkills(options);
   if (options.diff) {
-    await runAnalyzeDiff();
+    await runAnalyzeDiff({ llm, installSkills });
   } else {
-    await runAnalyze();
+    await runAnalyze({ llm, installSkills });
   }
 });
-program2.command("add").description("Register the current directory with TrueCourse").action(async () => {
-  await runAdd();
+program2.command("add").description("Register the current directory with TrueCourse").option("--install-skills", "Install Claude Code skills without prompting").option("--no-skills", "Skip the Claude Code skills prompt").action(async (options) => {
+  await runAdd({ installSkills: resolveInstallSkills(options) });
 });
-program2.command("list").description("List violations from the latest analysis").option("--diff", "Show diff check results (new and resolved)").option("--limit <n>", "Number of violations to show (default: 20)", parseInt).option("--offset <n>", "Skip first N violations", parseInt).option("--all", "Show all violations").action(async (options) => {
+program2.command("list").description("List violations from the latest analysis").option("--diff", "Show diff check results (new and resolved)").option("--limit <n>", "Number of violations to show (default: 20)", parseInt).option("--offset <n>", "Skip first N violations", parseInt).option("--all", "Show all violations").option(
+  "--severity <list>",
+  "Comma-separated severities to include (critical,high,medium,low,info)"
+).action(async (options) => {
   if (options.diff) {
     await runListDiff();
   } else {
     await runList({
       limit: options.all ? Infinity : options.limit ?? 20,
-      offset: options.offset ?? 0
+      offset: options.offset ?? 0,
+      severity: parseSeverityFlag(options.severity)
     });
   }
 });