You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Dashboard: Add INFO severity card (5th column), summary panel with top modules, wire INFO count through status bar
BruImporter: Parse collection.bru for root auth/headers, skip folder.bru as request items, handle auth: inherit in method blocks, fix brace-depth parser for {{template}} vars
ApiClientView: Custom tree renderer (replaces broken HTML renderer), tab bar overflow with dropdown, persistent session context for token propagation, auto-extract token from JSON responses
RequestExecutor: NPE fix with Objects.equals() for nullable uid
AiAssistant: [Consultando ...] feedback + error handling for tool calls
Test plan
Import Bruno collection with collection.bru containing auth: bearer -- verify root config parsed
Verify folder.bru files no longer appear as "GET (no url)" requests in tree
Send authenticated request with auth: inherit -- verify token propagates from collection root
…derer, tab overflow, session context)
Dashboard:
- Add INFO severity card (5th column) + summary panel with top modules
- Wire INFO count through GuiStatusBar and AnarCryGui.incrementSeverityCount
API Client - BruImporter:
- Parse collection.bru for root auth/headers (RootConfig) -- fixes token not propagating
- Skip folder.bru as request items, use for folder name + root config
- Handle auth:inherit in method block KV parsing
- New parseRootConfig() resolves auth mode selector + auth:bearer/basic blocks
- New parseMetaName() extracts folder name from meta block
- Fix brace-depth parser replacing broken regex for body:json with {{template}} vars
API Client - ApiClientView:
- Replace HTML tree renderer with custom JPanel renderer (method label + name label)
- Tab bar overflow with ">>" dropdown button, active tab always visible
- Persistent session context (RunContext) for token propagation across requests
- Auto-extract token from JSON responses (token, accessToken, access_token, jwt)
- Remove dead escapeHtml() method
RequestExecutor:
- Use Objects.equals() for nullable uid comparison (NPE fix)
AiAssistant:
- Add [Consultando ...] feedback message during tool calls
- Error handling for tool call failures
…Encoded, cookie jar
1. Folder variables no longer silently discarded -- mergeInherited() now
loads folder vars into the actual VariableStore instead of a dummy
2. buildCurrentRequestItem() now includes params (query + path), pre/post
vars, and assertions from the editor tabs -- previously only sent
method/URL/headers/body/auth
3. FormUrlEncoded body type now correctly builds BodyConfig.FormUrlEncoded
with parsed key=value params instead of falling through to Json
4. CookieManager wired to HttpClient via cookieHandler() -- Set-Cookie
headers now persist across requests in the same session
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
⚠️Resolve issues before merging
Three high-confidence logic defects should be fixed before merging: null request IDs can misassign folder configuration, brace parsing can break on quoted JSON content, and clearing the selected environment can leave stale variables active.
The requested regression scenarios and build verification are all marked missing, so several acceptance criteria remain unverified, particularly around importer behavior, GUI updates, persistence, and assistant feedback.
About this PR
Add automated regression coverage for the changed importer, request execution, persistence, GUI, and assistant behaviors, and include build/format verification in CI or the PR validation.
Test suggestions
Import a Bruno collection with collection-level bearer authentication and headers.
Verify folder.bru is excluded from request items while folder metadata and configuration are retained.
Execute a request with auth: inherit and resolve folder or collection authentication.
Parse Bruno blocks containing template variables and nested braces.
Verify dashboard INFO counts, five severity cards, status-bar counts, and summary text.
Verify overflowing request tabs appear in the dropdown and selecting one activates it.
Verify JSON token extraction persists the token for a subsequent request.
Verify nullable request IDs do not cause unrelated requests to be assigned to the same folder.
Verify AI tool-call progress and failure feedback.
Run spotlessCheck and compileJava successfully.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Import a Bruno collection with collection-level bearer authentication and headers.
2. Verify folder.bru is excluded from request items while folder metadata and configuration are retained.
3. Execute a request with auth: inherit and resolve folder or collection authentication.
4. Parse Bruno blocks containing template variables and nested braces.
5. Verify dashboard INFO counts, five severity cards, status-bar counts, and summary text.
6. Verify overflowing request tabs appear in the dropdown and selecting one activates it.
7. Verify JSON token extraction persists the token for a subsequent request.
8. Verify nullable request IDs do not cause unrelated requests to be assigned to the same folder.
9. Verify AI tool-call progress and failure feedback.
10. Run spotlessCheck and compileJava successfully.
Make this review better
TIP Add a ticket key to the branch or title so the reviewer can check the PR against it. Or tell us which ticket tracker you use here. TIP Add Codacy review.md instructions or an AGENTS.md so the reviewer knows your conventions.
The reason will be displayed to describe this comment to others. Learn more.
🔴 HIGH RISK
Do not treat two null UIDs as equal; compare object identity or require both UIDs to be non-null before comparing them. Otherwise requests without assigned IDs can inherit configuration from an unrelated folder.
TIP React 👍 if this review is right, or reply with what's wrong and how it could be better to help improve the reviewer.
The reason will be displayed to describe this comment to others. Learn more.
🟡 MEDIUM RISK
Reset or rebuild the session variable store whenever the selected environment changes, including when the environment is null, so stale variables are not used.
TIP React 👍 if this review is right, or reply with what's wrong and how it could be better to help improve the reviewer.
AppSettings singleton persists all preferences to ~/.anarcry/settings.json
via Gson. Loads on startup, saves on Apply. PreferencesDialog reworked:
10 category tabs, Check for Updates (GitHub API), support panel with art
and hyperlinks, certificates panel (PEM/PKCS12 client certs, custom CA).
Proxy moved from API Client sidebar to Preferences. AnarCryGui builds
ProxySelector + SSLContext from Preferences and injects via setNetworkConfig.
Saved theme and resolution applied on app launch.
Changelog updated with Preferences persistence, light theme, proxy
centralization, certificates panel, SSL context builder, Check for
Updates, status bar icons. Architecture tree adds AppSettings and
PreferencesDialog. Launcher window size bumped to 200x92c.
Logo (logoAnarChyNoBG.png) resized to 64/128/256px for window icon
(taskbar + title bar) and 400px for splash screen. SplashScreen shows
logo with version and loading indicator while GUI initializes, dismissed
when the main frame becomes visible.
…reset
AnarCryLaf: add theme listener system and resetColors() that nullifies
non-UIResource backgrounds/foregrounds on the entire component tree
before running custom listeners, ensuring no stale colors survive a
toggle in either direction.
ApiClientView: RSyntaxTextArea picks dark.xml/default.xml based on
current theme; method badge backgrounds use light tints in light mode;
tree/tab label colors use AnarCryLaf.fg() instead of hardcoded white.
RepeaterView: same RSyntaxTextArea theme-aware fix.
AssistantView, LogPane, DashboardView: theme listeners to refresh
custom backgrounds, JFreeChart paints, and text colors on toggle.
AnarCryGui, PreferencesDialog: call fireThemeChanged(frame) after
updateComponentTreeUI to apply custom colors last.
DigestAuthInjector uses MD5 (RFC 7616) and WsseInjector uses SHA-1
(WSSE PasswordDigest spec). Both are protocol requirements, not
application-level crypto choices.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
![codacy-production[bot]](https://avatars.githubusercontent.com/in/56611?s=60&v=4){kind=small}
Summary
collection.brufor root auth/headers, skipfolder.bruas request items, handleauth: inheritin method blocks, fix brace-depth parser for{{template}}varsObjects.equals()for nullable uid[Consultando ...]feedback + error handling for tool callsTest plan
collection.brucontainingauth: bearer-- verify root config parsedfolder.brufiles no longer appear as "GET (no url)" requests in treeauth: inherit-- verify token propagates from collection rootspotlessCheckandcompileJavapass