fix: integrate semgrep with tool detection system and fix initializat…

[suung]

…ion reload

• Fix Semgrep is not bundled #166: Integrate semgrep with existing tool detection/installation system

  • Update tools.json: change semgrep from built-in to pip installation
  • Add Python 3.7+ prerequisite checking
  • Add semgrep installation detection using command-based method
  • Show consistent error messages with installation instructions
  • Support pip installation in tools-tree-provider

• Fix Data not refreshed after project initialization (needs #156: Fix initialization reload issue

  • Explicitly update context variable before refreshing trees
  • Add small delay to ensure context updates propagate
  • UI now updates immediately without requiring window reload

• Add test coverage for both fixes

  • Unit tests for Python/semgrep detection
  • Unit tests for pip installation handling
  • E2E tests for initialization reload
  • E2E tests for semgrep error messages

• Fix execa import issue in prerequisites.js

Pull Request Checklist

Legal Requirements

• I have read and agree to the Contributor License Agreement
• I understand that by contributing to this project, I grant the Carbonara team a perpetual, irrevocable license to use my contributions under the BSD license, while the public project remains under AGPL-3.0-or-later

Code Quality

• My code follows the project's coding style and conventions
• I have added appropriate tests for my changes
• All new and existing tests pass
• I have updated documentation where necessary

Description

Type of Change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update
• Refactoring (no functional changes)
• Performance improvement
• Test improvements

Testing

• Unit tests
• Integration tests
• Manual testing
• E2E tests (if applicable)

Additional Notes

[grrrau]

Verification
After installation, verify the tool is available:
bash

verification is missing

[suung]

Verification
After installation, verify the tool is available:
bash

verification is missing

We went over it, on some machine, there are a bunch of problems, it's not pip, it's pip3, and after installation it's not in the path

we need a solution for this

This could be one
python="$(command -v python3 || command -v python)"; "$python" -c 'import sys,sysconfig,subprocess,os; s=sysconfig.get_path("scripts")+"/semgrep"; os.path.exists(s) or sys.exit("semgrep not installed"); sys.exit(subprocess.call([s,*sys.argv[1:]]))' "$@"

And it works when passed as a custom command, but another problem the problem is that if there is still an error, then the custom command cancels the error notification and we also need cross platform installation