feat(ui): connect Lighthouse v2 to Cloud backend by alejandrobailo · Pull Request #11690 · prowler-cloud/prowler

alejandrobailo · 2026-06-24T16:24:33Z

Context

This PR consolidates the OSS UI side of the Lighthouse v2 migration. OSS keeps the current Lighthouse as v1, while Cloud routes can render Lighthouse v2 backed by the Django Cloud API.

Depends on Cloud backend PR: https://github.com/prowler-cloud/prowler-cloud/pull/4796

Description

Isolate legacy Lighthouse code under lighthouse-v1 namespaces and keep OSS behavior intact.
Add Lighthouse v2 types, JSON:API adapters, and Server Actions for Cloud config, providers/models, sessions, messages, streaming, and cancellation.
Add shadcn-based v2 configuration UI for providers, credentials, model selection, connection status, and business context.
Add v2 chat UI with historical sessions: list, search, open, create, rename, archive, prompt bootstrapping, SSE reducer, Stop handling, and 409/disconnect states.
Add Cloud-only Browse/Chat sidebar mode with chat history search and grouped sessions.
Keep the legacy /api/lighthouse/analyst route importing only v1 code.

Steps to review

In OSS mode, verify /lighthouse, /lighthouse/config, findings CTA, and banners still use Lighthouse v1.
In Cloud mode, verify /lighthouse/config and /lighthouse render v2 and route through ui/actions/lighthouse-v2.
Review the EventSource flow and ensure generated stream URLs are not persisted or logged.
Run:

pnpm --dir ui run healthcheck
pnpm --dir ui test:unit actions/lighthouse-v2/lighthouse-v2.adapter.test.ts lib/lighthouse-v2/event-reducer.test.ts

Checklist

Community Checklist

This feature/issue is listed in here or roadmap.prowler.com
Is it assigned to me, if not, request it via the issue/feature in here or Prowler Community Slack

Review if the code is being covered by tests.
Review if code is being documented following this specification https://github.com/google/styleguide/blob/gh-pages/pyguide.md#38-comments-and-docstrings
Review if backport is needed.
Review if is needed to change the Readme.md
Ensure new entries are added to CHANGELOG.md, if applicable.

SDK/CLI

Are there new checks included in this PR? No
- If so, do we need to update permissions for the provider? Please review this carefully.

UI

All issue/task requirements work as expected on the UI
If this PR adds or updates npm dependencies, include package-health evidence (maintenance, popularity, known vulnerabilities, license, release age) and explain why existing/native alternatives are insufficient.
Screenshots/Video of the functionality flow (if applicable) - Mobile (X < 640px)
Screenshots/Video of the functionality flow (if applicable) - Table (640px > X < 1024px)
Screenshots/Video of the functionality flow (if applicable) - Desktop (X > 1024px)
Ensure new entries are added to CHANGELOG.md, if applicable.

API

All issue/task requirements work as expected on the API
Endpoint response output (if applicable)
EXPLAIN ANALYZE output for new/modified queries or indexes (if applicable)
Performance test results (if applicable)
Any other relevant evidence of the implementation (if applicable)
Verify if API specs need to be regenerated.
Check if version updates are required (e.g., specs, uv, etc.).
Ensure new entries are added to CHANGELOG.md, if applicable.

License

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

coderabbitai · 2026-06-24T16:24:43Z

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: e3c816ac-298f-489b-8b4a-2757ff6f08aa

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch feat/lighthouse-v2-cloud-ui

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

github-actions · 2026-06-24T16:25:30Z

✅ Conflict Markers Resolved

All conflict markers have been successfully resolved in this pull request.

github-actions · 2026-06-24T16:25:36Z

⚠️ Changes detected in the following folders without a corresponding update to the CHANGELOG.md:

ui

Please add an entry to the corresponding CHANGELOG.md file to maintain a clear history of changes.

github-actions · 2026-06-24T16:29:33Z

🔒 Container Security Scan

Image: prowler-ui:9ae23fb
Last scan: 2026-06-25 19:02:20 UTC

✅ No Vulnerabilities Detected

The container image passed all security checks. No known CVEs were found.

📋 Resources:

Download full report (see artifacts)
View in Security tab
Scanned with Trivy

Move actions/components/lib/types for lighthouse v2 into app/(prowler)/lighthouse/_{actions,components,lib,types}, matching the co-located feature architecture used by /alerts. Update importers (page, settings, sidebar) and add an _actions barrel. Scope AI Elements per version: keep the legacy primitives under components/lighthouse-v1/ai-elements, and add clean v2 copies under _components/ai-elements (no memo/useMemo, per React Compiler).

Add a same-origin Next.js route handler that reverse-proxies the Django SSE stream, so the browser EventSource connects same-origin (no CORS) and the access token stays server-side. Drop the unused per-message stream URL and stop revalidating /lighthouse on session create (the force-dynamic route would otherwise remount the chat and tear down the EventSource).

Collapse the chain-of-thought by default with a pulsing Thinking header, summarize tool calls as 'N tools called', and hide success outcomes. Add a copy button and hover timestamps under each message (agent left, user right). Stream client: subscribe before POST without the open-event gate (avoids a deadlock) and set the session URL with history.replaceState instead of router.push (avoids remounting mid-stream).

feat(ui): connect Lighthouse v2 to Cloud backend

9817d96

github-actions Bot added the component/ui label Jun 24, 2026

docs(ui): add Lighthouse v2 changelog

c8a802c

alejandrobailo self-assigned this Jun 24, 2026

alejandrobailo added 17 commits June 24, 2026 18:52

fix(ui): make Lighthouse chat mode global

c80dd98

feat(ui): improve Lighthouse v2 configuration

14edac2

fix(ui): simplify Lighthouse chat composer

5087206

fix(ui): reset Lighthouse chat from sidebar

15da838

refactor(ui): move lighthouse settings routes

81a8e3b

refactor(ui): simplify lighthouse settings panel

7cb192f

fix(ui): tune lighthouse chat layout

bb7eb06

fix(ui): improve lighthouse session history

f98efd0

docs(ui): remove lighthouse changelog entry

6eeadbb

fix(ui): confirm before archiving Lighthouse chats

2cb2a13

refactor(ui): extract shared markdown placeholder escaping

bf622f8

refactor(ui): componentize Lighthouse v2 chat and config pages

a54f16f

test(ui): remove brittle source-string Lighthouse tests

f518fcd

refactor(ui): streamline Lighthouse config and poll connection test

5323b34

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

feat(ui): connect Lighthouse v2 to Cloud backend#11690

feat(ui): connect Lighthouse v2 to Cloud backend#11690
alejandrobailo wants to merge 19 commits into
masterfrom
feat/lighthouse-v2-cloud-ui

alejandrobailo commented Jun 24, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Jun 24, 2026 •

edited

Loading

Review skipped

Uh oh!

github-actions Bot commented Jun 24, 2026

Uh oh!

github-actions Bot commented Jun 24, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 24, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

alejandrobailo commented Jun 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Context

Description

Steps to review

Checklist

SDK/CLI

UI

API

License

Uh oh!

coderabbitai Bot commented Jun 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

github-actions Bot commented Jun 24, 2026

Uh oh!

github-actions Bot commented Jun 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔒 Container Security Scan

✅ No Vulnerabilities Detected

The container image passed all security checks. No known CVEs were found.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

alejandrobailo commented Jun 24, 2026 •

edited

Loading

coderabbitai Bot commented Jun 24, 2026 •

edited

Loading

github-actions Bot commented Jun 24, 2026 •

edited

Loading

github-actions Bot commented Jun 24, 2026 •

edited

Loading