diff --git a/web/app.js b/web/app.js
index 0af25dc..368b5c3 100644
--- a/web/app.js
+++ b/web/app.js
@@ -1,5 +1,5 @@
import { LandscapeRenderer, KIND } from './renderer.js';
-import { layoutCity, squarifiedLayout, spatialIndex, pickRay, stepCamera, collide, blockAt, groundHit, flatQuad, wallSigns, folderBlades, folderLabel, facadeQuad, heading, tourStops, encodePlace, decodePlace, joystick, buildNavGrid, routesFrom, spawnWanderers, stepWanderers, MOVE } from './city.js';
+import { layoutCity, squarifiedLayout, spatialIndex, pickRay, stepCamera, collide, blockAt, groundHit, flatQuad, wallSigns, folderBlades, folderLabel, facadeQuad, heading, tourStops, encodePlace, decodePlace, joystick, buildNavGrid, routesFrom, spawnWanderers, stepWanderers, alertsByPath, burns, tapeQuads, MOVE } from './city.js';
import { LabelAtlas } from './labels.js';
import { apiFetch, progressEvents } from './api.mjs';
@@ -129,6 +129,7 @@ function computeCity(){
}
cityIndex=spatialIndex(cityEntries);
navGrid=buildNavGrid(cityEntries,cityModel.blocks,cityModel);
+ updateFires();
spawnResidents();
// Each folder's own buildings (not its subfolders'), for street-corner signs.
const byDirectory=new Map();
@@ -366,6 +367,7 @@ function buildMinimap(){
const ctx=canvas.getContext('2d'),{scale,ox,oy}=minimapTransform();ctx.scale(dpr,dpr);
ctx.fillStyle='rgba(141,125,255,.08)';
for(const block of cityModel.blocks)if(block.depth===1)ctx.fillRect(ox+block.x*scale,oy+block.y*scale,block.w*scale,block.h*scale);
+ for(const item of layoutItems){const b=item.city;if(!b||!fileAlerts.has(item.path))continue;ctx.fillStyle='#ff4d3d';ctx.beginPath();ctx.arc(ox+(b.x+b.w/2)*scale,oy+(b.y+b.h/2)*scale,2.6,0,Math.PI*2);ctx.fill();}
for(const item of layoutItems){const b=item.city;if(!b)continue;ctx.fillStyle=`rgba(${item.color.map(v=>Math.round(v*255)).join(',')},.85)`;ctx.fillRect(ox+b.x*scale,oy+b.y*scale,Math.max(.6,b.w*scale),Math.max(.6,b.h*scale));}
minimapBase=canvas;
}
@@ -432,7 +434,7 @@ function applySnapshot(snapshot){
computeLayout();fitScene();fitCity();updateStats(snapshot);renderInspector();renderResults([]);renderHistory();
$('#breadcrumbText').textContent=currentName;$('#emptyState').hidden=files.length>0;$('#welcome').hidden=true;
currentRepoUrl=snapshot.source==='github'?lastGithubUrl.replace(/\/+$/,'').replace(/\.git$/,''):'';
- endTour();applyPendingPlace();
+ endTour();applyPendingPlace();loadAlerts();
}
function fitScene(){
@@ -597,7 +599,7 @@ function renderInspector(){
hint.hidden=false;hint.textContent=expandedCoverageLayer?'Click a file or use ↑ and ↓ to move around the map':'Select an entity on the map';
const coverageRows=Object.entries(layerLabels).map(([key,label])=>`${label} ${format(sceneStats.layers.get(key)||0)} ${expandedCoverageLayer===key?'−':'+'} Coverage · ${escapeHtml(currentName)}
${format(files.length)} indexed files known links ${format(sceneStats.known)} inferred links ${format(sceneStats.inferred)} definitions ${format(sceneStats.definitions)} source lines ${format(sceneStats.totalLines)}
Semantic coverage Click a section
${expandedCoverageLayer?`${escapeHtml(expandedLabel)} Click or ↑ ↓ to navigate
`:''}`;
+ content.innerHTML=`Coverage · ${escapeHtml(currentName)}
${format(files.length)} indexed files known links ${format(sceneStats.known)} inferred links ${format(sceneStats.inferred)} definitions ${format(sceneStats.definitions)} source lines ${format(sceneStats.totalLines)} security alerts ${alertSummary()}
Semantic coverage Click a section
${expandedCoverageLayer?`${escapeHtml(expandedLabel)} Click or ↑ ↓ to navigate
`:''}`;
content.querySelectorAll('[data-coverage-layer]').forEach(row=>row.addEventListener('click',()=>toggleCoverageLayer(row.dataset.coverageLayer)));
if(expandedCoverageLayer)mountCoverageList(expandedCoverageLayer);
return;
@@ -606,7 +608,7 @@ function renderInspector(){
const connections=(edgesByFile.get(selected.id)||[]).map(edge=>({edge,file:fileById.get(edge.from===selected.id?edge.to:edge.from)})).filter(item=>item.file);
const related=connections.slice(0,30);
const sourceStatus=selected.sourceLoading?'Loading complete file…':selected.sourceError?'Preview only':`${format(selected.lines)} lines`;
- content.innerHTML=`${escapeHtml(selected.path)}
${escapeHtml(selected.name)} language ${escapeHtml(selected.language)} semantic layer ${escapeHtml(layerLabels[selected.layer]||'Other')} source lines ${format(selected.lines)} definitions ${format(selected.symbols.length)} complexity ${format(selected.complexity)} connections ${format(connections.length)}
${related.length?`Relationships · ${related.length}
${related.map(({edge,file})=>`${escapeHtml(file.path)} ${edge.confidence}
`).join('')}`:'No indexed file connections. External dependencies and unresolved references are not shown.
'}Source ${sourceStatus}
`;
+ content.innerHTML=`${escapeHtml(selected.path)}
${escapeHtml(selected.name)} language ${escapeHtml(selected.language)} semantic layer ${escapeHtml(layerLabels[selected.layer]||'Other')} source lines ${format(selected.lines)} definitions ${format(selected.symbols.length)} complexity ${format(selected.complexity)} connections ${format(connections.length)}
${alertSection(selected)}${related.length?`Relationships · ${related.length}
${related.map(({edge,file})=>`${escapeHtml(file.path)} ${edge.confidence}
`).join('')}`:'No indexed file connections. External dependencies and unresolved references are not shown.
'}Source ${sourceStatus}
`;
content.querySelectorAll('.relation[data-id]').forEach(row=>row.addEventListener('click',()=>selectFile(fileById.get(Number(row.dataset.id)))));
mountSourceViewer(selected);
}
@@ -792,6 +794,41 @@ function updateResidents(seconds){
renderer.setWanderers(residentBuffer);
}
+// ---- Security alerts from GitHub: burning buildings, hazard tape and inspector details ----
+let fileAlerts=new Map(),alertState={loading:false,reason:'',statuses:null};
+async function loadAlerts(){
+ fileAlerts=new Map();alertState={loading:!!currentRepoUrl,reason:currentRepoUrl?'':'not-github',statuses:null};
+ updateFires();
+ if(!currentRepoUrl||!currentSnapshot)return renderInspector();
+ const snapshotId=currentSnapshot;
+ try{
+ const response=await apiFetch(apiUrl(`/api/snapshots/${snapshotId}/alerts`));
+ const payload=await response.json();if(currentSnapshot!==snapshotId)return;
+ fileAlerts=alertsByPath(payload);
+ alertState={loading:false,reason:payload.reason||'',statuses:payload.available?{codeScanning:payload.codeScanning.status,dependabot:payload.dependabot.status}:null};
+ }catch{alertState={loading:false,reason:'unavailable',statuses:null};}
+ updateFires();if(cityModel)buildMinimap();signState.key='';renderInspector();dirty=true;
+}
+function updateFires(){
+ if(!cityModel)return;
+ const emitters=[];
+ for(const b of cityEntries){const alerts=fileAlerts.get(b.file.path);if(alerts)emitters.push({x:b.x+b.w/2,y:b.y+b.h/2,z:b.height,radius:Math.min(b.w,b.h)/2,burning:burns(alerts.worst)});}
+ renderer.setFires(emitters);
+}
+function alertSummary(){
+ if(alertState.loading)return 'loading…';
+ if(alertState.reason==='signin')return 'sign in to GitHub';
+ if(alertState.reason)return '—';
+ const count=[...fileAlerts.values()].reduce((n,a)=>n+a.codeScanning.length+a.dependabot.length,0);
+ const blocked=Object.entries(alertState.statuses||{}).filter(([,status])=>status!=='ok').map(([kind])=>kind==='dependabot'?'Dependabot':'code scanning');
+ return `${format(count)} in ${format(fileAlerts.size)} files${blocked.length?` (no ${blocked.join(' or ')} access)`:''}`;
+}
+function alertSection(file){
+ const alerts=fileAlerts.get(file.path);if(!alerts)return '';
+ const rows=[...alerts.codeScanning.map(a=>({...a,kind:'Code scanning'})),...alerts.dependabot.map(a=>({...a,kind:'Dependabot'}))];
+ return `Security alerts · ${rows.length}
${rows.map(a=>`${escapeHtml(a.severity)} ${escapeHtml(a.title)} ${a.kind}${a.line?` · line ${a.line}`:''}