From 437581ba167d8e3fa7ab237cc4073c0aa875c3e2 Mon Sep 17 00:00:00 2001
From: shravanithouta108 <shravanithouta108@gmail.com>
Date: Sat, 11 Jul 2026 12:19:55 +0530
Subject: [PATCH 1/5] fix(ui): prevent filter controls from overlapping in
 Findings page

- Replace fixed sm:grid-cols-2 lg:grid-cols-3 xl:grid-cols-4 with auto-fit minmax(180px,1fr)
- Ensures each filter item has minimum 180px width
- Controls wrap gracefully to new line when horizontal space is insufficient
- Fixes overlapping TARGET, SCANNER, ASSET, FINDING KIND, ANALYST STATE filters
---
 frontend/src/pages/Findings.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/frontend/src/pages/Findings.tsx b/frontend/src/pages/Findings.tsx
index dceb1248c..554f7dddb 100644
--- a/frontend/src/pages/Findings.tsx
+++ b/frontend/src/pages/Findings.tsx
@@ -824,7 +824,7 @@ export default function Findings() {
             </div>
 
             <div className="flex flex-col gap-6">
-              <div className="grid gap-4 sm:grid-cols-2 lg:grid-cols-3 xl:grid-cols-4">
+              <div className="grid gap-x-4 gap-y-5 grid-cols-[repeat(auto-fit,minmax(180px,1fr))]">
                 <div className="space-y-2 min-w-0">
                   <label className={filterLabelClass}>Target</label>
                   <select

From b214cd5ef95adc872d2f30bd103be20b2a12fc7e Mon Sep 17 00:00:00 2001
From: shravanithouta108 <shravanithouta108@gmail.com>
Date: Sat, 11 Jul 2026 12:44:29 +0530
Subject: [PATCH 2/5] fix(test): update Findings filter grid class assertion to
 match new layout

---
 frontend/testing/unit/pages/Findings.test.tsx | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/frontend/testing/unit/pages/Findings.test.tsx b/frontend/testing/unit/pages/Findings.test.tsx
index 2cd885950..87edec493 100644
--- a/frontend/testing/unit/pages/Findings.test.tsx
+++ b/frontend/testing/unit/pages/Findings.test.tsx
@@ -328,8 +328,8 @@ describe('Findings — virtualized list', () => {
     expect(fieldContainer).toHaveClass('space-y-2', 'min-w-0')
 
     const gridContainer = fieldContainer?.parentElement
-    expect(gridContainer).toHaveClass('grid', 'gap-4', 'sm:grid-cols-2', 'lg:grid-cols-3', 'xl:grid-cols-4')
-
+    expect(gridContainer).toHaveClass('grid', 'gap-x-4', 'gap-y-5')
+    
     const filterContainer = gridContainer?.parentElement
     expect(filterContainer).toHaveClass('flex', 'flex-col', 'gap-6')
   })

From 28016e4ee984f44ff76d9d48086f5218da8b58ab Mon Sep 17 00:00:00 2001
From: shravanithouta108 <shravanithouta108@gmail.com>
Date: Sat, 11 Jul 2026 12:51:08 +0530
Subject: [PATCH 3/5] fix(style): remove trailing whitespace in Findings test

---
 frontend/testing/unit/pages/Findings.test.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/frontend/testing/unit/pages/Findings.test.tsx b/frontend/testing/unit/pages/Findings.test.tsx
index 87edec493..596fce909 100644
--- a/frontend/testing/unit/pages/Findings.test.tsx
+++ b/frontend/testing/unit/pages/Findings.test.tsx
@@ -329,7 +329,7 @@ describe('Findings — virtualized list', () => {
 
     const gridContainer = fieldContainer?.parentElement
     expect(gridContainer).toHaveClass('grid', 'gap-x-4', 'gap-y-5')
-    
+
     const filterContainer = gridContainer?.parentElement
     expect(filterContainer).toHaveClass('flex', 'flex-col', 'gap-6')
   })

From 260aade38f1f9f11ccb1226b7ac8e1e2ef669783 Mon Sep 17 00:00:00 2001
From: shravanithouta108 <shravanithouta108@gmail.com>
Date: Mon, 20 Jul 2026 14:46:02 +0530
Subject: [PATCH 4/5] fix: make AI summary async with hard timeout and
 non-blocking fallback

---
 backend/secuscan/ai_summary.py | 35 +++++++++++++++++++++-------------
 backend/secuscan/reporting.py  | 15 +++++++++++----
 2 files changed, 33 insertions(+), 17 deletions(-)

diff --git a/backend/secuscan/ai_summary.py b/backend/secuscan/ai_summary.py
index 0ac2d3ae7..11ccf08f8 100644
--- a/backend/secuscan/ai_summary.py
+++ b/backend/secuscan/ai_summary.py
@@ -11,7 +11,7 @@
 """
 
 from __future__ import annotations
-
+import asyncio
 import logging
 import re
 from collections import Counter
@@ -95,7 +95,7 @@ def _build_prompt(findings: list[dict]) -> str:
     )
 
 
-def generate_summary(
+async def generate_summary(
     findings: list[dict],
     model: str,
     api_key: str,
@@ -109,8 +109,9 @@ def generate_summary(
         model:    Model name e.g. ``"gpt-4o-mini"`` or ``"llama3"``.
         api_key:  API key for the OpenAI-compatible endpoint.
         base_url: Optional base URL override for non-OpenAI providers.
-        timeout:  HTTP timeout in seconds (default 15). Prevents LLM calls
-                  from stalling report generation.
+        timeout:  Hard timeout in seconds (default 15). If the LLM exceeds
+                  this, the call is cancelled and ``""`` is returned so that
+                  report export is never blocked.
 
     Returns:
         A plain-text executive summary string, or ``""`` on any failure so
@@ -118,7 +119,6 @@ def generate_summary(
     """
     if not findings:
         return ""
-
     if OpenAI is None:
         logger.warning(
             "ai_summary: 'openai' package not installed. "
@@ -131,16 +131,25 @@ def generate_summary(
     if base_url:
         client_kwargs["base_url"] = base_url
 
-    try:
+    async def _call() -> str:
+        loop = asyncio.get_running_loop()
         client = OpenAI(**client_kwargs)
-        response = client.chat.completions.create(
-            model=model,
-            messages=[{"role": "user", "content": prompt}],
-            max_tokens=300,
-            temperature=0.4,
+        response = await loop.run_in_executor(
+            None,
+            lambda: client.chat.completions.create(
+                model=model,
+                messages=[{"role": "user", "content": prompt}],
+                max_tokens=300,
+                temperature=0.4,
+            ),
         )
-        summary = response.choices[0].message.content or ""
-        return summary.strip()
+        return (response.choices[0].message.content or "").strip()
+
+    try:
+        return await asyncio.wait_for(_call(), timeout=timeout)
+    except asyncio.TimeoutError:
+        logger.warning("ai_summary: LLM call timed out after %.1fs — skipping summary", timeout)
+        return ""
     except Exception as exc:  # noqa: BLE001
         logger.warning("ai_summary: LLM call failed — %s", exc)
         return ""
diff --git a/backend/secuscan/reporting.py b/backend/secuscan/reporting.py
index 5f85e8e55..fa6155547 100644
--- a/backend/secuscan/reporting.py
+++ b/backend/secuscan/reporting.py
@@ -1,3 +1,4 @@
+import asyncio
 import base64
 import csv
 import html
@@ -102,14 +103,14 @@ def _generate_severity_chart(cls, severity_counts: Dict[str, int]) -> str:
             output.close()
 
     @classmethod
-    def _get_ai_summary(cls, findings):
+    async def _get_ai_summary(cls, findings):
         """Return an AI executive summary, or '' when the feature is disabled."""
         from .config import settings as _settings
         if not _settings.ai_summary_enabled:
             return ""
         if not _settings.ai_summary_api_key:
             return ""
-        return generate_summary(
+        return await generate_summary(
             findings=findings,
             model=_settings.ai_summary_model,
             api_key=_settings.ai_summary_api_key,
@@ -402,7 +403,10 @@ def _generate_pdf_html_report(cls, task: Dict[str, Any], result: Dict[str, Any])
         payload = cls._build_report_payload(task, result)
         findings = payload["findings"]
         severity_counts = payload["severity_counts"]
-        ai_summary = cls._get_ai_summary(findings)
+        try:
+          ai_summary = asyncio.run(cls._get_ai_summary(findings))
+        except Exception:
+          ai_summary = ""
         shield_icon = cls._icon_data_uri("shield", "1e3a5f")
         target_icon = cls._icon_data_uri("target", "2563eb")
         findings_icon = cls._icon_data_uri("findings", "0f172a")
@@ -731,7 +735,10 @@ def generate_html_report(cls, task: Dict[str, Any], result: Dict[str, Any]) -> s
         payload = cls._build_report_payload(task, result)
         findings = payload["findings"]
         severity_counts = payload["severity_counts"]
-        ai_summary = cls._get_ai_summary(findings)
+        try:
+          ai_summary = asyncio.run(cls._get_ai_summary(findings))
+        except Exception:
+          ai_summary = ""
         shield_icon = cls._icon_data_uri("shield", "1e3a5f")
         target_icon = cls._icon_data_uri("target", "2563eb")
         findings_icon = cls._icon_data_uri("findings", "0f172a")

From 4942dae1eb40adb90be92c778aa17c5ca1eef3a0 Mon Sep 17 00:00:00 2001
From: shravanithouta108 <shravanithouta108@gmail.com>
Date: Tue, 21 Jul 2026 13:13:10 +0530
Subject: [PATCH 5/5] fix: update test_ai_summary to await async
 generate_summary

---
 testing/backend/unit/test_ai_summary.py | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/testing/backend/unit/test_ai_summary.py b/testing/backend/unit/test_ai_summary.py
index 048b92325..62b2580dd 100644
--- a/testing/backend/unit/test_ai_summary.py
+++ b/testing/backend/unit/test_ai_summary.py
@@ -8,7 +8,7 @@
 """
 
 from __future__ import annotations
-
+import asyncio
 from unittest.mock import MagicMock, patch
 
 import pytest
@@ -76,22 +76,22 @@ def test_returns_summary_string(self):
         expected = "The scan found 5 findings including a critical SQL injection."
         with patch("backend.secuscan.ai_summary.OpenAI") as mock_cls:
             mock_cls.return_value.chat.completions.create.return_value = _mock_response(expected)
-            result = generate_summary(SAMPLE_FINDINGS, "gpt-4o-mini", "test-key")
+            result = asyncio.run(generate_summary(SAMPLE_FINDINGS, "gpt-4o-mini", "test-key"))
         assert result == expected
 
     def test_strips_whitespace(self):
         with patch("backend.secuscan.ai_summary.OpenAI") as mock_cls:
             mock_cls.return_value.chat.completions.create.return_value = _mock_response("  Summary.  ")
-            result = generate_summary(SAMPLE_FINDINGS, "gpt-4o-mini", "key")
+            result = asyncio.run(generate_summary(SAMPLE_FINDINGS, "gpt-4o-mini", "key"))
         assert result == "Summary."
 
     def test_passes_base_url_to_client(self):
         with patch("backend.secuscan.ai_summary.OpenAI") as mock_cls:
             mock_cls.return_value.chat.completions.create.return_value = _mock_response("ok")
-            generate_summary(
+            asyncio.run(generate_summary(
                 SAMPLE_FINDINGS, model="llama3", api_key="ollama",
                 base_url="http://localhost:11434/v1",
-            )
+            ))
             mock_cls.assert_called_once_with(
                 api_key="ollama", base_url="http://localhost:11434/v1", timeout=15.0
             )
@@ -99,17 +99,17 @@ def test_passes_base_url_to_client(self):
     def test_returns_empty_string_on_llm_exception(self):
         with patch("backend.secuscan.ai_summary.OpenAI") as mock_cls:
             mock_cls.return_value.chat.completions.create.side_effect = RuntimeError("conn refused")
-            assert generate_summary(SAMPLE_FINDINGS, "gpt-4o-mini", "key") == ""
+            assert asyncio.run(generate_summary(SAMPLE_FINDINGS, "gpt-4o-mini", "key")) == ""
 
     def test_returns_empty_string_for_empty_findings(self):
         with patch("backend.secuscan.ai_summary.OpenAI") as mock_cls:
-            result = generate_summary([], "gpt-4o-mini", "key")
+            result = asyncio.run(generate_summary([], "gpt-4o-mini", "key"))
         assert result == ""
         mock_cls.assert_not_called()
 
     def test_returns_empty_string_when_openai_none(self):
         with patch("backend.secuscan.ai_summary.OpenAI", None):
-            result = generate_summary(SAMPLE_FINDINGS, "gpt-4o-mini", "key")
+            result = asyncio.run(generate_summary(SAMPLE_FINDINGS, "gpt-4o-mini", "key"))
         assert result == ""
 
 
@@ -178,7 +178,7 @@ def test_get_ai_summary_returns_empty_when_no_api_key(self):
         with patch("backend.secuscan.config.settings") as ms:
             ms.ai_summary_enabled = True
             ms.ai_summary_api_key = ""
-            result = ReportGenerator._get_ai_summary([{"title": "x", "severity": "high"}])
+            result = asyncio.run(ReportGenerator._get_ai_summary([{"title": "x", "severity": "high"}]))
         assert result == ""
 
     def test_sarif_report_unchanged(self):