Add HTML5 review fragment

services/api-server/src/api_server/html5.py

@@ -230,6 +230,7 @@ def render_html5_editor(
             {render_html5_symbols(snapshot, q)}
           </div>
           {render_html5_project_report(project_id, None)}
+          {render_html5_review(project_id, None)}
         </aside>
       </section>
       <footer class="status" data-html5-status hx-ext="sse" sse-connect="/html5/projects/{quote(project_id)}/events" sse-swap="status">
@@ -278,6 +279,38 @@ def render_html5_project_report(project_id: str, report: dict | None) -> str:
     """
 
 
+def render_html5_review(project_id: str, findings: list[dict] | None) -> str:
+    if findings is None:
+        return f"""
+        <div
+          class="review-panel"
+          data-html5-review
+          hx-get="/html5/projects/{quote(project_id)}/review"
+          hx-trigger="load"
+          hx-swap="outerHTML"
+        >
+          <div class="panel-title">Review</div>
+          <p class="muted padded">Сервер готовит findings.</p>
+        </div>
+        """
+    if not findings:
+        body = '<p class="muted padded">Findings не найдены</p>'
+    else:
+        body = "".join(_review_item(finding) for finding in findings[:12])
+    return f"""
+    <div
+      class="review-panel"
+      data-html5-review
+      hx-get="/html5/projects/{quote(project_id)}/review"
+      hx-trigger="every 20s"
+      hx-swap="outerHTML"
+    >
+      <div class="panel-title">Review · {len(findings)}</div>
+      <div class="review-list">{body}</div>
+    </div>
+    """
+
+
 def render_html5_project_setup(*, project_id: str, projects: Iterable[object], setup: object) -> str:
     project_nav = "\n".join(_project_link(project, project_id) for project in projects)
     name = _setup_name(setup)
@@ -709,6 +742,22 @@ def _preflight_item(item: object) -> str:
     """
 
 
+def _review_item(finding: dict) -> str:
+    title = str(finding.get("title") or finding.get("code") or "Finding")
+    severity = str(finding.get("severity") or finding.get("level") or "INFO")
+    message = str(finding.get("message") or finding.get("description") or "")
+    source_path = str(finding.get("source_path") or finding.get("path") or "")
+    line = finding.get("line_start") or finding.get("line")
+    location = f"{source_path}:{line}" if source_path and line else source_path
+    return f"""
+    <article class="review-item" data-html5-review-finding="{escape(severity)}">
+      <strong>{escape(title)}</strong>
+      <span>{escape(severity)}</span>
+      <small>{escape(message or location or "no details")}</small>
+    </article>
+    """
+
+
 def _tree_item(project_id: str, node: object) -> str:
     name = getattr(node, "qualified_name", None) or getattr(node, "name", "")
     kind = getattr(node, "kind", "")
@@ -759,7 +808,7 @@ def _css() -> str:
 .workspace{min-height:100vh;padding-bottom:34px}.topbar{position:sticky;top:0;z-index:2;height:54px;border-bottom:1px solid var(--line);background:rgba(255,255,255,.94);padding:0 14px}.brand{font-weight:900;text-decoration:none;color:var(--brand)}.project-nav{display:flex;gap:6px;overflow:auto;flex:1}.project-link{white-space:nowrap;text-decoration:none;border:1px solid var(--line);padding:6px 10px;background:#fff}.project-link.active{background:var(--brand);border-color:var(--brand);color:#fff}
 .layout{display:grid;grid-template-columns:280px minmax(0,1fr)320px;height:calc(100vh - 88px)}.panel{overflow:auto}.panel-title{padding:12px;border-bottom:1px solid var(--line);font-size:12px;font-weight:900;text-transform:uppercase;color:var(--muted)}.tree-item{display:block;padding:10px 12px;border-bottom:1px solid var(--line);text-decoration:none}.tree-item span{display:block;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.tree-item small{color:var(--muted)}
 .editor{min-width:0;overflow:hidden;border-top:0;border-bottom:0}.editor-head{height:72px;border-bottom:1px solid var(--line);padding:0 14px}.editor-head h1{margin:0;font-size:18px}.search{display:flex;gap:6px}.search input{height:32px;width:260px;border:1px solid var(--line);padding:0 10px}.code{height:calc(100% - 72px);margin:0;overflow:auto;padding:16px;background:#fbfaf7;font:13px/1.55 ui-monospace,SFMono-Regular,Consolas,monospace;white-space:pre-wrap}
-.metrics{display:grid;grid-template-columns:1fr 1fr;margin:0}.metrics div{padding:12px;border-bottom:1px solid var(--line)}.metrics dt{color:var(--muted);font-size:12px}.metrics dd{margin:2px 0 0;font-size:22px;font-weight:800}.compact{list-style:none;margin:0;padding:0}.compact li{display:flex;justify-content:space-between;padding:8px 12px;border-bottom:1px solid var(--line)}.symbol{display:grid;gap:3px;padding:10px 12px;border-bottom:1px solid var(--line)}.symbol span,.symbol small{color:var(--muted)}.report-grid{display:grid;grid-template-columns:1fr 1fr;margin:0}.report-grid div{padding:10px 12px;border-bottom:1px solid var(--line)}.report-grid dt{color:var(--muted);font-size:12px}.report-grid dd{margin:2px 0 0;font-size:20px;font-weight:900}.status{position:fixed;bottom:0;left:0;right:0;display:flex;gap:18px;overflow:auto;height:34px;align-items:center;border-top:1px solid var(--line);background:#fff;padding:0 12px;color:var(--muted);font-size:12px}.empty-state{max-width:720px;margin:80px auto;background:#fff;border:1px solid var(--line);padding:28px}
+.metrics{display:grid;grid-template-columns:1fr 1fr;margin:0}.metrics div{padding:12px;border-bottom:1px solid var(--line)}.metrics dt{color:var(--muted);font-size:12px}.metrics dd{margin:2px 0 0;font-size:22px;font-weight:800}.compact{list-style:none;margin:0;padding:0}.compact li{display:flex;justify-content:space-between;padding:8px 12px;border-bottom:1px solid var(--line)}.symbol{display:grid;gap:3px;padding:10px 12px;border-bottom:1px solid var(--line)}.symbol span,.symbol small{color:var(--muted)}.report-grid{display:grid;grid-template-columns:1fr 1fr;margin:0}.report-grid div{padding:10px 12px;border-bottom:1px solid var(--line)}.report-grid dt{color:var(--muted);font-size:12px}.report-grid dd{margin:2px 0 0;font-size:20px;font-weight:900}.review-item{display:grid;gap:3px;padding:10px 12px;border-bottom:1px solid var(--line)}.review-item span,.review-item small{color:var(--muted)}.status{position:fixed;bottom:0;left:0;right:0;display:flex;gap:18px;overflow:auto;height:34px;align-items:center;border-top:1px solid var(--line);background:#fff;padding:0 12px;color:var(--muted);font-size:12px}.empty-state{max-width:720px;margin:80px auto;background:#fff;border:1px solid var(--line);padding:28px}
 .setup-layout{display:grid;grid-template-columns:340px minmax(0,1fr);gap:16px;max-width:1180px;margin:18px auto;padding:0 16px}.setup-workspace{background:#f3f6fb}.setup-card{padding:16px;border-bottom:1px solid var(--line)}.setup-card h1{margin:0;font-size:24px}.setup-actions{display:flex;gap:8px;flex-wrap:wrap;margin-top:14px}.setup-main{min-height:620px}.settings-form{display:grid;grid-template-columns:2fr 1fr 1fr auto;gap:8px;align-items:end;padding:12px 16px;border-bottom:1px solid var(--line);background:#fff}.settings-form label{display:grid;gap:4px;font-size:12px;font-weight:800;color:var(--muted);text-transform:uppercase}.settings-form input{height:32px;border:1px solid var(--line);padding:0 8px}.saved{float:right;color:var(--ok);font-weight:900}.setup-actions-panel{display:flex;gap:8px;flex-wrap:wrap;align-items:end;padding:12px 16px;border-bottom:1px solid var(--line);background:#fbfcfe}.inline-form{display:flex;gap:8px;align-items:end}.inline-form label{display:grid;gap:4px;font-size:12px;font-weight:800;color:var(--muted);text-transform:uppercase}.inline-form select{height:32px;min-width:240px;border:1px solid var(--line);background:#fff;padding:0 8px}.setup-summary{display:grid;gap:0}.compact-lead{margin:0;padding:0 16px 16px}.setup-metrics,.ops-summary{display:grid;grid-template-columns:repeat(4,1fr);margin:0;border-top:1px solid var(--line)}.ops-summary{grid-template-columns:repeat(5,1fr);margin:12px 0}.setup-metrics div,.ops-summary div{padding:16px;border-right:1px solid var(--line);border-bottom:1px solid var(--line);background:#fff}.setup-metrics div:last-child,.ops-summary div:last-child{border-right:0}.setup-metrics dt,.ops-summary dt{font-size:12px;color:var(--muted)}.setup-metrics dd,.ops-summary dd{margin:4px 0 0;font-size:28px;font-weight:900}.status-pill{border:1px solid var(--line);padding:6px 10px;background:#eef6f1;color:var(--ok);font-weight:800}.flush{border-top:1px solid var(--line)}.padded{padding:12px 16px;margin:0}.setup-detail,.history-item,.source-card,.check-item{display:grid;gap:3px;padding:12px 16px;border-bottom:1px solid var(--line)}.setup-detail span,.setup-detail small,.history-item span,.history-item small,.source-card span,.source-card small,.check-item span,.check-item small,.check-head span,.check-head small{color:var(--muted)}.source-list,.history-list,.check-list{display:grid}.check-head{display:flex;gap:10px;align-items:center;padding:12px 16px;border-bottom:1px solid var(--line);background:#fff}.job-log{margin:0;padding:0;list-style:none}.job-log li{padding:8px 16px;border-bottom:1px solid var(--line);color:var(--muted);font-family:ui-monospace,SFMono-Regular,Consolas,monospace;font-size:12px}
 @media(max-width:980px){.layout{grid-template-columns:1fr;height:auto}.tree,.inspector{max-height:320px}.editor{min-height:520px}.hero{display:block}.shell{padding:16px}}
 @media(max-width:980px){.setup-layout{grid-template-columns:1fr}.setup-metrics{grid-template-columns:1fr 1fr}.settings-form{grid-template-columns:1fr}}

services/api-server/src/api_server/main.py

@@ -41,6 +41,7 @@ from api_server.html5 import (
     render_html5_project_setup,
     render_html5_project_rows,
     render_html5_project_report,
+    render_html5_review,
     render_html5_import_check,
     render_html5_import_job,
     render_html5_operation_rows,
@@ -1712,6 +1713,15 @@ async def html5_project_report(project_id: str) -> Response:
     )
 
 
+@app.get("/html5/projects/{project_id}/review")
+async def html5_project_review(project_id: str) -> Response:
+    findings = await get_review(project_id)
+    return Response(
+        render_html5_review(project_id, findings),
+        media_type="text/html; charset=utf-8",
+    )
+
+
 @app.get("/html5/projects/{project_id}/setup")
 async def html5_project_setup(project_id: str) -> Response:
     setup = _project_setup_response(project_id)

services/api-server/tests/test_api.py

@@ -109,6 +109,8 @@ def test_html5_server_rendered_project_editor(tmp_path: Path):
     assert "data-html5-symbol-results" in editor.text
     assert "data-html5-project-report" in editor.text
     assert f'hx-get="/html5/projects/{project_id}/report"' in editor.text
+    assert "data-html5-review" in editor.text
+    assert f'hx-get="/html5/projects/{project_id}/review"' in editor.text
     assert 'hx-get="/html5/projects/' in editor.text
     assert 'hx-target="[data-html5-symbol-results]"' in editor.text
     assert 'hx-target="[data-html5-source]"' in editor.text
@@ -150,6 +152,12 @@ def test_html5_server_rendered_project_editor(tmp_path: Path):
     assert "Objects" in report.text
     assert "<html" not in report.text
 
+    review = client.get(f"/html5/projects/{project_id}/review")
+    assert review.status_code == 200
+    assert "text/html" in review.headers["content-type"]
+    assert "data-html5-review" in review.text
+    assert "<html" not in review.text
+
 
 def test_html5_project_index_creates_project_with_fragment():
     client = TestClient(app)