OpenSquilla — Token-Efficient AI Agent with same budget, higher intelligence density
This report summarizes scanner evidence for TokenRhythm/opensquilla, a Python project with 7,094 GitHub stars. SynthScan examined 2,009,521 lines of code across 4888 source files, recording 37291 pattern matches distributed across 26 syntactic categories. The legacy adjusted pattern signal is 20.1 (Elevated pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 28979 finding(s).
Are imports declared and package/API names verified? 4299 finding(s).
Are wrappers, guards, and repeated structures necessary? 31320 finding(s).
Which changes need focused human review? 37291 finding(s).
Run additional scans to build a history of the legacy pattern signal. Score changes are not a measure of AI adoption or code quality.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 37291 distinct pattern matches across 26 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_memory_vector_normalization.py | 147 | async def test_normalization_meta_still_rebuilds_missing_vec_table(tmp_path: Path) -> None: | CODE |
| LOW⚡ | tests/test_provider_request_proof.py | 79 | def test_unknown_window_preserves_existing_character_limit() -> None: | CODE |
| LOW⚡ | tests/test_provider_request_proof.py | 89 | def test_character_budget_includes_environment_limit_in_projection( | CODE |
| LOW⚡ | tests/test_provider_request_proof.py | 97 | def test_environment_character_guard_preserves_independent_physical_token_budget( | CODE |
| LOW | tests/test_provider_request_proof.py | 44 | def test_generation_budget_uses_adapter_wire_cap_or_backend_reserve( | CODE |
| LOW | tests/test_provider_request_proof.py | 50 | def test_physical_budget_uses_wire_generation_cap_without_double_counting_thinking() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 64 | def test_character_budget_preserves_explicit_cap_and_rebinds_only_derived_cap( | CODE |
| LOW | tests/test_provider_request_proof.py | 123 | def test_independent_token_headroom_bounds(capacity: int, expected: int, headroom: int) -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 128 | def _rollback_default_safety_levers(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 145 | def test_provider_request_proof_allows_payload_within_budget() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 165 | def test_character_cap_does_not_restrict_independent_token_capacity( | CODE |
| LOW | tests/test_provider_request_proof.py | 184 | def test_character_gate_remains_independent_when_tokens_fit() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 194 | def test_disabled_character_cap_does_not_bypass_token_rejection(token_budget: int) -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 205 | def test_token_only_admission_keeps_tool_shaping_and_final_proof() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 223 | def test_final_request_projection_preserves_independent_token_rejection() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 234 | def test_environment_character_guard_cannot_disable_physical_token_guard( | CODE |
| LOW | tests/test_provider_request_proof.py | 248 | def test_provider_request_proof_blocks_oversized_payload() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 261 | def test_provider_request_projection_reports_overflow_without_raising() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 274 | def test_final_request_projection_includes_media_and_message_admission() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 312 | def test_final_request_projection_marks_known_message_limit_overflow() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 332 | def test_duck_typed_final_request_projection_missing_or_invalid_is_none() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 353 | def test_provider_request_proof_checks_serialized_tokens_as_well_as_chars( | CODE |
| LOW | tests/test_provider_request_proof.py | 383 | def test_provider_request_proof_adds_media_reserve_to_serialized_text_tokens() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 411 | def test_provider_request_proof_uses_effective_budget_headroom() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 431 | def test_provider_request_proof_excludes_native_image_payload_from_text_budget() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 500 | def test_provider_request_proof_reserves_nonzero_budget_for_small_image() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 528 | def test_provider_request_proof_blocks_media_only_request_when_reserve_exceeds_budget() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 562 | def test_provider_request_proof_uses_larger_reserve_for_pdf_than_image() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 614 | def test_provider_request_proof_still_blocks_large_text_next_to_native_media() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 646 | def test_provider_request_proof_compacts_tool_payload_once() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 667 | def test_logical_unresolved_tool_result_stays_raw_after_wire_projection( | CODE |
| LOW | tests/test_provider_request_proof.py | 730 | def test_adapter_projection_keeps_unresolved_protection_out_of_band( | CODE |
| LOW | tests/test_provider_request_proof.py | 774 | def test_provider_request_proof_blocks_after_all_reduction_tiers_fail() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 789 | def test_provider_request_proof_compacts_large_tool_args_preserving_protocol() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 847 | def test_provider_request_proof_preserves_aggregate_tool_call_protocol() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 916 | def test_provider_request_proof_compacts_leaked_tool_argument_projections() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 980 | def test_provider_request_proof_compacts_leaked_provider_compacted_tool_arguments() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 1026 | def test_provider_request_proof_compacts_string_provider_context_markers() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 1074 | def test_provider_request_proof_compacts_leaked_tool_input_projections() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 1140 | def test_provider_request_proof_rejects_oversized_native_reasoning( | CODE |
| LOW | tests/test_provider_request_proof.py | 1173 | def test_all_request_compaction_tiers_preserve_native_reasoning(tier: str) -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 1212 | def test_provider_request_proof_compacts_segmented_assistant_text_tail() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 1242 | def test_provider_request_proof_reports_recent_tail_after_tail_compaction_fails() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 1266 | def test_provider_request_proof_emergency_compacts_many_current_turn_tool_results() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 1293 | def test_provider_request_proof_hard_caps_many_tool_results_after_emergency_compaction() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 1346 | def test_provider_request_proof_hard_cap_compacts_leaked_tool_arguments() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 1441 | def test_provider_request_proof_emergency_compacts_oversized_request_context() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 1471 | def test_provider_request_proof_emergency_compacts_old_user_tail_but_keeps_latest_user() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 1496 | def test_active_user_anchor_wins_over_later_synthetic_user_message() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 1521 | def test_active_user_inference_ignores_ensemble_aggregator_bundle() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 1540 | def test_provider_proof_reports_explicit_active_user_anchor() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 1552 | def test_provider_request_proof_rejects_instead_of_rewriting_oversized_latest_user() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 1576 | def test_provider_request_proof_does_not_exclude_nested_tool_argument_images() -> None: | CODE |
| LOW | tests/test_provider_request_proof.py | 1610 | def test_provider_request_proof_final_hard_cap_preserves_critical_tool_result() -> None: | CODE |
| LOW | tests/test_memory_checkpoint.py | 44 | def test_checkpoint_event_serializes_required_fields() -> None: | CODE |
| LOW | tests/test_memory_checkpoint.py | 75 | def test_checkpoint_hash_is_stable_for_normalized_content() -> None: | CODE |
| LOW | tests/test_memory_checkpoint.py | 83 | def test_build_checkpoint_events_preserves_content_and_reasoning_content() -> None: | CODE |
| LOW | tests/test_memory_checkpoint.py | 107 | def test_build_checkpoint_events_serializes_provider_content_blocks_as_json() -> None: | CODE |
| LOW | tests/test_memory_checkpoint.py | 126 | async def test_append_checkpoint_events_writes_jsonl_once(tmp_path): | CODE |
| LOW | tests/test_memory_checkpoint.py | 146 | def test_append_checkpoint_events_rejects_mixed_turn_batches(tmp_path, event): | CODE |
| 27091 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | tests/test_provider_openai_codex.py | 37 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_openai_codex.py | 39 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_openai_codex.py | 228 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_openai_codex.py | 230 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_openai_codex.py | 287 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_openai_codex.py | 289 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_openai_codex.py | 858 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_openai_codex.py | 860 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_provider_openai_compat_payloads.py | 5851 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_provider_openai_compat_payloads.py | 5853 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_stream_contract.py | 122 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_stream_contract.py | 124 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_provider_stream_contract.py | 418 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_provider_stream_contract.py | 420 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_provider_stream_contract.py | 466 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_provider_stream_contract.py | 468 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_provider_stream_contract.py | 567 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_provider_stream_contract.py | 569 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_attachments.py | 38 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_attachments.py | 40 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_attachments.py | 76 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_attachments.py | 80 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_attachments.py | 114 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_attachments.py | 118 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_attachments.py | 135 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_attachments.py | 141 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_provider_attachments.py | 176 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_provider_attachments.py | 179 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_gateway_config_legacy.py | 123 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_gateway_config_legacy.py | 125 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_gateway_config_legacy.py | 351 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_gateway_config_legacy.py | 353 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_gateway_config_legacy.py | 385 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_gateway_config_legacy.py | 387 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_gateway_config_legacy.py | 556 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_gateway_config_legacy.py | 558 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_gateway_config_legacy.py | 24 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_gateway_config_legacy.py | 26 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_selector.py | 966 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_selector.py | 968 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_gateway_config_default_provider.py | 28 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_gateway_config_default_provider.py | 30 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_gateway_config_default_provider.py | 172 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_gateway_config_default_provider.py | 174 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_gateway_config_default_provider.py | 225 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_gateway_config_default_provider.py | 227 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_thinking_level_propagation.py | 415 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_thinking_level_propagation.py | 417 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_thinking_level_propagation.py | 221 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_thinking_level_propagation.py | 223 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_thinking_level_propagation.py | 21 | # --------------------------------------------------------------------------- | STRING |
| MEDIUM⚡ | tests/test_thinking_level_propagation.py | 23 | # --------------------------------------------------------------------------- | STRING |
| MEDIUM⚡ | tests/test_thinking_level_propagation.py | 189 | # --------------------------------------------------------------------------- | STRING |
| MEDIUM⚡ | tests/test_thinking_level_propagation.py | 191 | # --------------------------------------------------------------------------- | STRING |
| MEDIUM | tests/test_thinking_level_propagation.py | 62 | # --------------------------------------------------------------------------- | STRING |
| MEDIUM | tests/test_thinking_level_propagation.py | 64 | # --------------------------------------------------------------------------- | STRING |
| MEDIUM | tests/test_thinking_level_propagation.py | 120 | # --------------------------------------------------------------------------- | STRING |
| MEDIUM | tests/test_thinking_level_propagation.py | 122 | # --------------------------------------------------------------------------- | STRING |
| MEDIUM⚡ | tests/test_provider_models_dev.py | 68 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/test_provider_models_dev.py | 71 | # --------------------------------------------------------------------------- | COMMENT |
| 1407 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | hatch_build.py | 3 | CODE | |
| LOW | tests/test_memory_vector_normalization.py | 1 | CODE | |
| LOW | tests/test_provider_request_proof.py | 1 | CODE | |
| LOW | tests/test_memory_dream_paths.py | 1 | CODE | |
| LOW | tests/test_skills_hub_installer_security.py | 1 | CODE | |
| LOW | tests/test_provider_openai_prompt_cache.py | 1 | CODE | |
| LOW | tests/test_skills_hub_github.py | 1 | CODE | |
| LOW | tests/test_skills_hub_router.py | 1 | CODE | |
| LOW | tests/test_provider_reasoning_stream.py | 11 | CODE | |
| LOW | tests/test_provider_metadata.py | 1 | CODE | |
| LOW | tests/test_paths_media_root.py | 1 | CODE | |
| LOW | tests/test_skills_provenance_contract.py | 1 | CODE | |
| LOW | tests/test_live_reasoning_replay_e2e.py | 3 | CODE | |
| LOW | tests/conftest.py | 1 | CODE | |
| LOW | tests/test_skills_loader_namespaces.py | 3 | CODE | |
| LOW | tests/test_execution_status_contract.py | 1 | CODE | |
| LOW | tests/test_release_oss_mirror_workflow.py | 1 | CODE | |
| LOW | tests/test_provider_compat_policy.py | 9 | CODE | |
| LOW | tests/test_memory_retention.py | 1 | CODE | |
| LOW | tests/test_provider_openai_codex.py | 3 | CODE | |
| LOW | tests/test_gateway_timing.py | 3 | CODE | |
| LOW | tests/test_provider_tool_stream_accumulator.py | 7 | CODE | |
| LOW | tests/test_provider_openai_compat_payloads.py | 1 | CODE | |
| LOW | tests/test_skills_bundled_baseline.py | 1 | CODE | |
| LOW | tests/test_root_start_scripts.py | 1 | CODE | |
| LOW | tests/test_skills_tree.py | 3 | CODE | |
| LOW | tests/test_live_provider_profile_gateway_e2e.py | 1 | CODE | |
| LOW | tests/test_compose_yaml_shape.py | 1 | CODE | |
| LOW | tests/test_memory_sync_manager_architecture.py | 1 | CODE | |
| LOW | tests/test_provider_text_tool_normalization.py | 9 | CODE | |
| LOW | tests/test_model_strategy_settings_contract.py | 1 | CODE | |
| LOW | tests/test_skills_community_copy_contract.py | 1 | CODE | |
| LOW | tests/test_long_task_fault_proxy.py | 1 | CODE | |
| LOW | tests/test_skill_docx.py | 3 | CODE | |
| LOW | tests/test_github_issue_link_sync.py | 1 | CODE | |
| LOW | tests/test_live_tokenrhythm_billing_audit.py | 1 | CODE | |
| LOW | tests/test_skills_hub_doctor.py | 1 | CODE | |
| LOW | tests/test_skills_hub_source.py | 1 | CODE | |
| LOW | tests/test_selected_skills.py | 1 | CODE | |
| LOW | tests/test_live_provider_profile_smoke.py | 1 | CODE | |
| LOW | tests/test_subprocess_encoding.py | 8 | CODE | |
| LOW | tests/test_provider_request_proof_images.py | 1 | CODE | |
| LOW | tests/test_memory_dream_factory.py | 1 | CODE | |
| LOW | tests/test_provider_stream_contract.py | 19 | CODE | |
| LOW | tests/test_provider_attachments.py | 21 | CODE | |
| LOW | tests/test_agent_cmd_no_key.py | 3 | CODE | |
| LOW | tests/test_toolcomp_matcher_levers.py | 1 | CODE | |
| LOW | tests/test_provider_auxiliary_budget.py | 1 | CODE | |
| LOW | tests/test_skills_manifest.py | 1 | CODE | |
| LOW | tests/test_memory_search_defaults.py | 1 | CODE | |
| LOW | tests/test_memory_embedding_ollama.py | 1 | CODE | |
| LOW | tests/test_provider_ollama_trace.py | 1 | CODE | |
| LOW | tests/test_provider_anthropic_sse_nospace.py | 13 | CODE | |
| LOW | tests/test_memory_manager_embedding_config.py | 1 | CODE | |
| LOW | tests/test_live_mixed_provider_gateway.py | 3 | CODE | |
| LOW | tests/test_live_tokenrhythm_budget.py | 1 | CODE | |
| LOW | tests/test_provider_native_response_guards.py | 1 | CODE | |
| LOW | tests/test_live_tokenrhythm_functional.py | 1 | CODE | |
| LOW | tests/test_toolcomp_reducer_semantics.py | 1 | CODE | |
| LOW | tests/test_skills_third_party_notices.py | 1 | CODE | |
| 3788 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/test_live_provider_profile_gateway_e2e.py | 1041 | except (BrokenPipeError, ConnectionResetError): | CODE |
| HIGH | tests/test_agents/test_registry_write_open_nofollow.py | 54 | except FileNotFoundError: | CODE |
| HIGH | tests/test_tools/test_shell_process_isolation.py | 1111 | except (TimeoutError, ProcessLookupError): | CODE |
| HIGH | tests/test_tools/test_dispatch_legacy_coverage.py | 194 | except BaseException: | CODE |
| HIGH | tests/test_tools/test_dispatch_legacy_coverage.py | 133 | except Exception: | CODE |
| HIGH | tests/test_tools/test_web_fetch_proxy.py | 46 | except ssl.SSLWantReadError: | CODE |
| HIGH | tests/integration/cli/tui_real_terminal/driver.py | 519 | except OSError: | CODE |
| HIGH | tests/test_telemetry/test_desktop_ingress.py | 67 | except ValueError: | CODE |
| HIGH | tests/test_desktop/test_gateway_functional_probes.py | 123 | except (OSError, urllib.error.URLError): | CODE |
| HIGH | tests/test_cli/test_gateway_cmd.py | 1693 | except asyncio.CancelledError: | CODE |
| HIGH | tests/test_engine/test_cancelled_turn_segments.py | 608 | except asyncio.CancelledError: | CODE |
| HIGH | tests/test_engine/test_cancelled_turn_segments.py | 623 | except asyncio.CancelledError: | CODE |
| HIGH | tests/test_gateway/test_fair_queuing.py | 159 | except KeyError: | CODE |
| HIGH | tests/test_gateway/test_fair_queuing.py | 212 | except KeyError: | CODE |
| HIGH | tests/test_gateway/test_fair_queuing.py | 263 | except KeyError: | CODE |
| HIGH | tests/test_gateway/test_fair_queuing.py | 293 | except KeyError: | CODE |
| HIGH | tests/test_gateway/test_fair_queuing.py | 352 | except KeyError: | CODE |
| HIGH | tests/test_gateway/test_no_head_blocking.py | 125 | except (TimeoutError, KeyError): | CODE |
| HIGH | tests/test_gateway/test_channel_dispatch_ghost_turn.py | 276 | except TaskQueueFullError: | CODE |
| HIGH | tests/test_gateway/test_channel_concurrent_dispatch.py | 551 | except asyncio.CancelledError: | CODE |
| HIGH | tests/test_gateway/test_channel_concurrent_dispatch.py | 838 | except asyncio.CancelledError: | CODE |
| HIGH | tests/test_gateway/test_channel_concurrent_dispatch.py | 949 | except asyncio.CancelledError: | CODE |
| HIGH | tests/test_recovery/test_session_merge_file_handles.py | 182 | except sqlite3.Error: | CODE |
| HIGH | tests/test_session/test_media_atomic_write.py | 77 | except Exception: | CODE |
| HIGH | tests/test_provider/test_preset_registry.py | 344 | except Exception: | CODE |
| HIGH | …test_provider/test_tokenrhythm_traceback_boundaries.py | 64 | except (httpx.RequestNotRead, httpx.StreamConsumed): | CODE |
| HIGH | …test_provider/test_tokenrhythm_traceback_boundaries.py | 70 | except (httpx.ResponseNotRead, httpx.StreamConsumed): | CODE |
| HIGH | …test_provider/test_tokenrhythm_traceback_boundaries.py | 77 | except (AttributeError, RuntimeError): | CODE |
| HIGH | …ts/functional/test_gateway_silent_reply_process_e2e.py | 494 | except TimeoutError: | CODE |
| HIGH | …n/scripts/pyinstaller_runtime_hooks/ensure_ca_trust.py | 75 | except Exception: | CODE |
| HIGH | scripts/live_long_task_case_driver.py | 671 | except (urllib.error.URLError, TimeoutError, OSError): | CODE |
| HIGH | scripts/live_long_task_case_driver.py | 788 | except (OSError, subprocess.TimeoutExpired): | CODE |
| HIGH | scripts/live_workspace_file_cases.py | 570 | except httpx.HTTPError: | CODE |
| HIGH | scripts/smoke_v4_phase3_router.py | 1072 | except (urllib.error.URLError, TimeoutError, json.JSONDecodeError): | CODE |
| HIGH | scripts/live_provider_profile_gateway_e2e.py | 1590 | except ( | CODE |
| HIGH | scripts/live_deliverable_acceptance.py | 1511 | except httpx.HTTPError: | CODE |
| HIGH | scripts/long_task_fault_proxy.py | 303 | except OSError: | CODE |
| HIGH | .github/scripts/verify-packaged-ownership-long-paths.py | 162 | except (OSError, urllib.error.URLError): | CODE |
| HIGH | .github/scripts/verify-packaged-v054-upgrade.py | 125 | except (OSError, urllib.error.URLError): | CODE |
| HIGH | .github/scripts/verify-nsis-upgrade-regression.py | 71 | except FileNotFoundError: | CODE |
| HIGH | .github/scripts/verify-nsis-upgrade-regression.py | 495 | except FileNotFoundError: | CODE |
| HIGH | .github/scripts/release_protocol_preflight.py | 143 | except (URLError, TimeoutError, OSError): | CODE |
| HIGH | …ithub/scripts/verify-packaged-startup-compatibility.py | 118 | except (OSError, urllib.error.URLError): | CODE |
| HIGH | src/opensquilla/gateway_client.py | 220 | except asyncio.CancelledError: | CODE |
| HIGH | src/opensquilla/subprocess_encoding.py | 47 | except Exception: | CODE |
| HIGH | src/opensquilla/asyncio_utils.py | 41 | except ValueError: | CODE |
| HIGH | src/opensquilla/private_paths.py | 616 | except OSError: | CODE |
| HIGH | src/opensquilla/startup_timing.py | 50 | except Exception: | CODE |
| HIGH | src/opensquilla/startup_timing.py | 74 | except Exception: | CODE |
| HIGH | src/opensquilla/attachment_refs.py | 147 | except OSError: | CODE |
| HIGH | src/opensquilla/attachment_refs.py | 511 | except OSError: | CODE |
| HIGH | src/opensquilla/attachment_refs.py | 128 | except OSError: | CODE |
| HIGH | src/opensquilla/attachment_refs.py | 636 | except UnicodeDecodeError: | CODE |
| HIGH | src/opensquilla/process_tree.py | 957 | except OSError: | CODE |
| HIGH | src/opensquilla/process_tree.py | 3020 | except (BrokenPipeError, OSError): | CODE |
| HIGH | src/opensquilla/process_tree.py | 372 | except FileExistsError: | CODE |
| HIGH | src/opensquilla/recovery_read_budget.py | 45 | except (asyncio.CancelledError, Exception): | CODE |
| HIGH | src/opensquilla/attachment_workspace.py | 567 | except OSError: | CODE |
| HIGH | src/opensquilla/artifacts.py | 578 | except ValueError: | CODE |
| HIGH | src/opensquilla/artifacts.py | 1703 | except OSError: | CODE |
| 380 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | hatch_build.py | 61 | "`cd opensquilla-webui && npm ci && npm run build`, then retry. " | CODE |
| HIGH | tests/test_release_oss_mirror_workflow.py | 343 | "if (( promote_latest_aliases && backed_up_latest_html )); then", | CODE |
| HIGH | tests/test_provider_openai_compat_payloads.py | 3172 | command = "cd /workspace/project && cargo test -p mypkg case1" | CODE |
| HIGH⚡ | tests/test_provider_text_tool_normalization.py | 3836 | emitted = normalizer.push(char) | CODE |
| HIGH⚡ | tests/test_provider_text_tool_normalization.py | 4023 | emitted = normalizer.push(literal) | CODE |
| HIGH⚡ | tests/test_provider_text_tool_normalization.py | 4024 | emitted.extend(normalizer.push(_QWEN_CALL)) | CODE |
| HIGH | tests/test_provider_text_tool_normalization.py | 288 | visible = "".join(normalizer.push(text[:split])) | CODE |
| HIGH | tests/test_provider_text_tool_normalization.py | 289 | visible += "".join(normalizer.push(text[split:])) | CODE |
| HIGH | tests/test_provider_text_tool_normalization.py | 308 | for emitted in normalizer.push(chunk) | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 38 | "cd /tmp/x && git status": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 39 | "cd /a && cd b && cargo build": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 40 | "cd /a && cd b && git ls-files": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 43 | "pushd /tmp/x && git ls-files": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 44 | "cd /tmp/x > /dev/null && git status": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 45 | "cd /tmp/x | tee log && git status": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 47 | "cd && git status": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 48 | "cd\n/tmp/build.sh && git status": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 49 | "cd\xa0/a && git status": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 50 | "cd /tmp\nmake && make install": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 69 | "cd /tmp/x && git status": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 70 | "cd /a && cd b && cargo build": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 71 | "cd /a && cd b && git ls-files": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 74 | "pushd /tmp/x && git ls-files": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 75 | "cd /tmp/x > /dev/null && git status": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 76 | "cd /tmp/x | tee log && git status": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 78 | "cd && git status": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 79 | "cd\n/tmp/build.sh && git status": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 80 | "cd\xa0/a && git status": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 81 | "cd /tmp\nmake && make install": "generic/fallback", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 286 | "git status && pytest -q", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 287 | "git status || pytest -q", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 307 | 'git status "left && right"', | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 319 | 'cmd /c "cd /d C:\\repo && git status"', | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 320 | r"cd /d C:\repo && git status", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 321 | r"cd C:\repo && git status", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 323 | r"pushd C:\repo && git status", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 359 | command="git status && pytest -q", | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 406 | assert _select("cd /tmp/x && git status") == "generic/fallback" | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 427 | assert _select("cd /tmp/x && git status") == "generic/fallback" | CODE |
| HIGH⚡ | tests/test_toolcomp_matcher_levers.py | 449 | assert _select("cd /tmp/x && git status") == "generic/fallback" | CODE |
| HIGH | tests/test_toolcomp_matcher_levers.py | 275 | assert _select("cd /tmp/x && git status") == "generic/fallback" | CODE |
| HIGH | tests/test_skills_manifest.py | 589 | " env: [EXAMPLE_TOKEN, null]\n" | CODE |
| HIGH⚡ | tests/test_memory_manager_embedding_config.py | 890 | '"vector_dims":null,"fts_tokenizer":"unicode61","sources":["memory"],' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 183 | 'ents":"{\\"command\\": \\"run build step && inspect artifacts run build step && inspect' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 184 | ' artifacts run build step && inspect artifacts run build step && inspect artifacts run b' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 185 | 'uild step && inspect artifacts run build step && inspect artifacts run build step && ins' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 186 | 'pect artifacts run build step && inspect artifacts run build step && inspect artifacts r' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 187 | 'un build step && inspect artifacts run build step && inspect artifacts run build step &&' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 188 | ' inspect artifacts run build step && inspect artifacts run build step && inspect artifac' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 189 | 'ts run build step && inspect artifacts run build step && inspect artifacts run build ste' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 190 | 'p && inspect artifacts run build step && inspect artifacts run build step && inspect art' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 191 | 'ifacts run build step && inspect artifacts run build step && inspect artifacts run build' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 192 | ' step && inspect artifacts run build step && inspect artifacts run build step && inspect' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 193 | ' artifacts run build step && inspect artifacts run build step && inspect artifacts \\' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 291 | 'ents":"{\\"command\\": \\"run build step && inspect artifacts run build step && inspect' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 292 | ' artifacts run build step && inspect artifacts run build step && inspect artifacts run b' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 293 | 'uild step && inspect artifacts run build step && inspect artifacts run build step && ins' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 294 | 'pect artifacts run build step && inspect artifacts run build step && inspect artifacts r' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 295 | 'un build step && inspect artifacts run build step && inspect artifacts run build step &&' | CODE |
| HIGH⚡ | tests/test_request_proof_levers.py | 296 | ' inspect artifacts run build step && inspect artifacts run build step && inspect artifac' | CODE |
| 254 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_memory_manager_embedding_config.py | 97 | except Exception: | CODE |
| LOW | tests/test_live_workspace_file_cases.py | 266 | except Exception as exc: | CODE |
| MEDIUM | tests/test_live_workspace_file_cases.py | 262 | def request(): | CODE |
| MEDIUM | tests/test_model_router_behavior.py | 122 | def require_runtime_router() -> None: | CODE |
| LOW | tests/test_model_router_behavior.py | 125 | except Exception as exc: | CODE |
| LOW | tests/test_tools/test_sessions_spawn_regressions.py | 416 | except Exception as exc: | CODE |
| LOW | tests/test_tools/test_apply_patch_gates.py | 47 | except Exception as exc: # pragma: no cover - exercised by awaiting callers | CODE |
| LOW | tests/test_tools/test_dispatch_legacy_coverage.py | 133 | except Exception: | CODE |
| LOW | tests/integration/cli/tui_real_terminal/scenarios.py | 547 | except Exception as exc: | CODE |
| LOW | …ion/cli/tui_real_terminal/test_packaged_gateway_e2e.py | 74 | except Exception as exc: # noqa: BLE001 - retained for timeout evidence | CODE |
| LOW | …nnels/test_contract_invariants_survive_optimization.py | 169 | except Exception as exc: | CODE |
| LOW | tests/test_engine/test_routing_policy_parity.py | 760 | except Exception as exc: # noqa: BLE001 - the raised error is part of the contract | CODE |
| LOW | tests/test_mcp_server/test_protocol_smoke.py | 54 | except Exception as exc: # noqa: BLE001 - surfaced on timeout. | CODE |
| LOW | tests/test_session/test_media_atomic_write.py | 77 | except Exception: | CODE |
| LOW | tests/test_session/test_media_atomic_write.py | 114 | except Exception as exc: | CODE |
| MEDIUM | tests/test_session/test_media_atomic_write.py | 74 | def __exit__(self, *args): | CODE |
| LOW⚡ | tests/test_provider/test_preset_registry.py | 344 | except Exception: | CODE |
| LOW | tests/functional/test_gateway_session_routing_e2e.py | 150 | except Exception as exc: # noqa: BLE001 - included in timeout evidence. | CODE |
| LOW | tests/functional/test_gateway_llm_e2e.py | 51 | except Exception as exc: # noqa: BLE001 - surfaced on timeout. | CODE |
| LOW | tests/functional/test_gateway_stop_process_tree_e2e.py | 315 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | …ts/functional/test_gateway_silent_reply_process_e2e.py | 233 | except Exception as exc: # noqa: BLE001 - included in timeout evidence | CODE |
| LOW | tests/functional/test_gateway_compaction_e2e.py | 50 | except Exception as exc: # noqa: BLE001 - surfaced on timeout. | CODE |
| LOW | tests/functional/test_webui_browser_e2e.py | 77 | except Exception as exc: # noqa: BLE001 - included in timeout assertion. | CODE |
| LOW | desktop/electron/scripts/gateway-entry.py | 45 | except Exception: | CODE |
| LOW | desktop/electron/scripts/gateway-entry.py | 67 | except Exception: | CODE |
| LOW | desktop/electron/scripts/gateway-entry.py | 98 | except Exception: | CODE |
| LOW | desktop/electron/scripts/gateway-entry.py | 261 | except Exception as exc: | CODE |
| LOW | desktop/electron/scripts/gateway-entry.py | 330 | except Exception: | CODE |
| MEDIUM | desktop/electron/scripts/gateway-entry.py | 41 | def _run_desktop_ca_probe() -> int: | CODE |
| LOW | desktop/electron/scripts/live_html_evidence.py | 322 | except Exception as error: | CODE |
| LOW | desktop/electron/scripts/live_html_evidence.py | 337 | except Exception as error: | CODE |
| LOW | desktop/electron/scripts/live_html_evidence.py | 654 | except Exception as error: | STRING |
| LOW | desktop/electron/scripts/live_html_evidence.py | 664 | except Exception as error: | STRING |
| LOW | desktop/electron/scripts/live_html_evidence.py | 676 | except Exception as error: | STRING |
| LOW | desktop/electron/scripts/live_html_evidence.py | 741 | except Exception as error: | STRING |
| LOW | desktop/electron/scripts/live_html_evidence.py | 765 | except Exception as error: | STRING |
| LOW | …n/scripts/pyinstaller_runtime_hooks/ensure_ca_trust.py | 18 | except Exception: | CODE |
| LOW | …n/scripts/pyinstaller_runtime_hooks/ensure_ca_trust.py | 58 | except Exception: | CODE |
| LOW | …n/scripts/pyinstaller_runtime_hooks/ensure_ca_trust.py | 75 | except Exception: | CODE |
| LOW | …n/scripts/pyinstaller_runtime_hooks/ensure_ca_trust.py | 83 | except Exception: | CODE |
| MEDIUM | …n/scripts/pyinstaller_runtime_hooks/ensure_ca_trust.py | 52 | def _certifi_bundle_path() -> Path: | CODE |
| LOW | scripts/live_provider_profile_smoke.py | 343 | except Exception as exc: # noqa: BLE001 - smoke reports compact diagnostic | CODE |
| LOW | scripts/live_provider_profile_smoke.py | 393 | except Exception as exc: # noqa: BLE001 - smoke reports compact diagnostic | CODE |
| LOW | scripts/live_provider_profile_smoke.py | 436 | except Exception as exc: # noqa: BLE001 - smoke reports compact diagnostic | CODE |
| LOW | scripts/live_provider_profile_smoke.py | 492 | except Exception as exc: # noqa: BLE001 - smoke reports compact diagnostic | CODE |
| LOW | scripts/live_provider_thinking_smoke.py | 218 | except Exception as exc: # noqa: BLE001 - smoke reports compact diagnostics | CODE |
| LOW | scripts/live_provider_thinking_smoke.py | 305 | except Exception as exc: # noqa: BLE001 - smoke reports compact diagnostics | CODE |
| LOW | scripts/live_long_task_case_driver.py | 686 | except Exception: | CODE |
| LOW | scripts/live_long_task_case_driver.py | 1156 | except Exception: | CODE |
| LOW | scripts/live_long_task_case_driver.py | 2167 | except Exception: | CODE |
| LOW | scripts/live_long_task_case_driver.py | 2184 | except Exception as exc: | CODE |
| LOW | scripts/live_long_task_case_driver.py | 2248 | except Exception: | CODE |
| LOW | scripts/bench_tui_replay.py | 296 | except Exception as exc: # pragma: no cover - summarized for CLI evidence. | CODE |
| LOW | scripts/live_mixed_provider_gateway.py | 1082 | except Exception as exc: # noqa: BLE001 - live harness must keep matrix running | CODE |
| LOW | scripts/live_mixed_provider_gateway.py | 1094 | except Exception: # Router decision absence is reported by validation. | CODE |
| LOW | scripts/live_mixed_provider_gateway.py | 1657 | except Exception as exc: # noqa: BLE001 - preserve a safe partial verdict | CODE |
| LOW | scripts/live_workspace_file_cases.py | 297 | except Exception as exc: | CODE |
| LOW | scripts/live_workspace_file_cases.py | 657 | except Exception as exc: | CODE |
| LOW | scripts/live_workspace_file_cases.py | 688 | except Exception as exc: | CODE |
| LOW | scripts/database_diagnostic_matrix.py | 106 | except Exception as exc: | CODE |
| 1431 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_skills_provenance_contract.py | 22 | CODE | |
| LOW | tests/test_live_provider_profile_gateway_e2e.py | 1437 | CODE | |
| LOW | tests/test_provider_text_tool_normalization.py | 385 | CODE | |
| LOW | tests/test_provider_text_tool_normalization.py | 2299 | CODE | |
| LOW | tests/test_provider_text_tool_normalization.py | 403 | CODE | |
| LOW | tests/test_selected_skills.py | 125 | CODE | |
| LOW | tests/test_live_tokenrhythm_functional.py | 265 | CODE | |
| LOW | tests/test_skills_third_party_notices.py | 17 | CODE | |
| LOW | tests/test_release_consistency.py | 452 | CODE | |
| LOW | tests/test_artifacts.py | 2180 | CODE | |
| LOW | tests/test_artifacts.py | 2566 | CODE | |
| LOW | tests/test_request_proof_levers.py | 726 | CODE | |
| LOW | tests/test_process_tree.py | 871 | CODE | |
| LOW | tests/test_process_tree.py | 2777 | CODE | |
| LOW | tests/test_artifact_validation.py | 85 | CODE | |
| LOW | tests/test_git_runtime.py | 118 | CODE | |
| LOW | tests/test_provider_replay_state.py | 863 | CODE | |
| LOW | tests/test_provider_replay_state.py | 976 | CODE | |
| LOW | tests/test_provider_replay_state.py | 1056 | CODE | |
| LOW | tests/test_model_router_behavior.py | 844 | CODE | |
| LOW | tests/test_skills_hub_skillhub.py | 303 | CODE | |
| LOW | tests/test_tools/test_memory_workspace_ownership.py | 26 | CODE | |
| LOW | tests/test_tools/test_registry_visibility_boundary.py | 83 | CODE | |
| LOW | tests/test_tools/test_attachment_document_lifecycle.py | 177 | CODE | |
| LOW | tests/test_tools/test_policy_runtime_boundary.py | 50 | CODE | |
| LOW | tests/test_tools/test_pty_backend.py | 337 | CODE | |
| LOW | tests/test_tools/test_filesystem_mutation_receipts.py | 193 | CODE | |
| LOW | tests/test_tools/test_dispatch_legacy_coverage.py | 95 | CODE | |
| LOW | tests/test_tools/test_dispatch_legacy_coverage.py | 110 | CODE | |
| LOW | tests/test_tools/test_web_fetch_proxy.py | 30 | CODE | |
| LOW | tests/test_tools/test_generic_artifact_authoring.py | 66 | CODE | |
| LOW | tests/test_tools/test_policy_config_boundary.py | 50 | CODE | |
| LOW | tests/test_tools/test_bounded_output_capture.py | 240 | CODE | |
| LOW | tests/test_tools/test_policy_explicit_grants.py | 70 | CODE | |
| LOW | tests/integration/cli/tui_real_terminal/scenarios.py | 473 | CODE | |
| LOW | …/integration/cli/tui_real_terminal/fake_opentui_app.py | 65 | CODE | |
| LOW | …ion/cli/tui_real_terminal/test_packaged_gateway_e2e.py | 99 | CODE | |
| LOW | tests/integration/cli/tui_real_terminal/replay.py | 17 | CODE | |
| LOW | tests/integration/cli/tui_real_terminal/framebuffer.py | 138 | CODE | |
| LOW | tests/integration/cli/tui_real_terminal/framebuffer.py | 654 | CODE | |
| LOW | tests/test_telemetry/test_recorder.py | 329 | CODE | |
| LOW | tests/test_telemetry/test_uploader.py | 312 | CODE | |
| LOW | tests/test_telemetry/test_uploader.py | 318 | CODE | |
| LOW | tests/test_telemetry/test_outbox.py | 476 | CODE | |
| LOW | tests/test_telemetry/test_growth_state.py | 146 | CODE | |
| LOW | tests/test_telemetry/test_desktop_turn_counts.py | 144 | CODE | |
| LOW | tests/test_desktop/test_gateway_functional_probes.py | 114 | CODE | |
| LOW | tests/test_channels/test_feishu_send_file.py | 464 | CODE | |
| LOW | …ts/test_channels/test_artifact_delivery_idempotency.py | 156 | CODE | |
| LOW | tests/test_mcp/test_sse_client.py | 119 | CODE | |
| LOW | tests/test_mcp/test_desktop_browser_client.py | 532 | CODE | |
| LOW | tests/test_mcp/test_desktop_browser_client.py | 539 | CODE | |
| LOW | tests/test_skills/test_managed_toolchains.py | 71 | CODE | |
| LOW | tests/test_skills/test_managed_toolchains.py | 3072 | CODE | |
| LOW | tests/test_scripts/test_router_live_script_defaults.py | 45 | CODE | |
| LOW | tests/test_ci/test_windows_signed_update_audit.py | 861 | CODE | |
| LOW | tests/test_ci/test_migration_v019.py | 60 | CODE | |
| LOW | tests/test_ci/test_upgrade_baselines.py | 245 | CODE | |
| LOW | tests/test_ci/test_release_signing_preflight.py | 808 | CODE | |
| LOW | tests/test_ci/test_release_signing_preflight.py | 1113 | CODE | |
| 950 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_private_paths.py | 72 | def set_protected_dacl(self, handle: object, sddl: str) -> None: | CODE |
| LOW | tests/test_private_paths.py | 112 | def set_protected_dacl(self, handle: object, _sddl: str) -> None: | CODE |
| LOW | tests/test_private_paths.py | 154 | def set_protected_dacl(self, handle: object, sddl: str) -> None: | CODE |
| LOW | tests/test_private_paths.py | 187 | def set_protected_dacl(self, _handle: object, _sddl: str) -> None: | CODE |
| LOW | tests/test_private_paths.py | 223 | def set_protected_dacl(self, _handle: object, _sddl: str) -> None: | CODE |
| LOW | tests/test_private_paths.py | 278 | def set_protected_dacl(self, _handle: object, _sddl: str) -> None: | CODE |
| LOW | tests/unit/cli/tui/test_native_chat_runtime.py | 51 | def set_cancel_callback(self, cb: Callable[[], None] | None) -> None: | CODE |
| LOW | tests/unit/cli/tui/test_native_chat_runtime.py | 54 | def set_shutdown_callback(self, cb: Callable[[], None] | None) -> None: | CODE |
| LOW | tests/unit/cli/tui/test_runtime.py | 55 | def set_cancel_callback(self, cb) -> None: # noqa: ANN001 | CODE |
| LOW | tests/unit/cli/tui/test_runtime.py | 58 | def set_shutdown_callback(self, cb) -> None: # noqa: ANN001 | CODE |
| LOW | tests/unit/cli/tui/test_runtime.py | 1305 | def set_cancel_callback(self, cb) -> None: # noqa: ANN001 | CODE |
| LOW | tests/unit/cli/tui/test_runtime.py | 1308 | def set_shutdown_callback(self, cb) -> None: # noqa: ANN001 | CODE |
| LOW | tests/unit/cli/tui/test_router_hud_plugin.py | 224 | def set_toolbar(self, key: str, value: object | None) -> None: | CODE |
| LOW | tests/unit/cli/tui/test_router_hud_plugin.py | 256 | def set_toolbar(self, key: str, value: object | None) -> None: | CODE |
| LOW | tests/unit/cli/tui/test_router_hud_plugin.py | 276 | def set_toolbar(self, key: str, value: object | None) -> None: | CODE |
| LOW | tests/unit/cli/tui/test_backend_hardening.py | 56 | def set_cancel_callback(self, cb) -> None: # noqa: ANN001 | CODE |
| LOW | tests/unit/cli/tui/test_backend_hardening.py | 59 | def set_shutdown_callback(self, cb) -> None: # noqa: ANN001 | CODE |
| LOW | tests/unit/cli/tui/test_opentui_renderer.py | 45 | def set_toolbar(self, key: str, value: object | None) -> None: | CODE |
| LOW | tests/unit/cli/repl/test_opentui_chat_adapter.py | 42 | def set_cancel_callback(self, cb: Callable[[], None] | None) -> None: | CODE |
| LOW | tests/unit/cli/repl/test_opentui_chat_adapter.py | 45 | def set_shutdown_callback(self, cb: Callable[[], None] | None) -> None: | CODE |
| LOW | tests/unit/cli/repl/test_runtime_bridge.py | 78 | def set_toolbar(self, key: str, value: object | None) -> None: | CODE |
| LOW | tests/unit/cli/repl/test_runtime_bridge.py | 91 | def set_cancel_callback(self, cb) -> None: | CODE |
| LOW | tests/unit/cli/repl/test_runtime_bridge.py | 94 | def set_shutdown_callback(self, cb) -> None: | CODE |
| LOW | …/integration/cli/tui_real_terminal/fake_opentui_app.py | 299 | def _set_toolbar(output: Any, key: str, value: object | None) -> None: | CODE |
| LOW | tests/integration/cli/tui_real_terminal/replay.py | 104 | def _set_toolbar(output: Any, key: str, value: object | None) -> None: | CODE |
| LOW | …tion/cli/tui_real_terminal/test_architecture_prompt.py | 66 | def set_toolbar(self, key: str, value: object | None) -> None: | CODE |
| LOW | tests/integration/cli/tui_real_terminal/driver.py | 536 | def _set_pty_size(self) -> None: | CODE |
| LOW | tests/test_desktop/test_gateway_tls_runtime.py | 62 | def _set_frozen(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | tests/test_memory/test_profile_import.py | 311 | def set_protected_dacl(self, handle: object, sddl: str) -> None: | CODE |
| LOW | tests/test_channels/test_stream_terminal_routing.py | 168 | async def update_activity(self, activity: Any) -> None: | CODE |
| LOW | tests/test_cli/test_chat_cmd.py | 127 | def set_toolbar(self, key: str, value) -> None: | CODE |
| LOW | tests/test_cli/test_chat_cmd.py | 142 | def set_cancel_callback(self, cb) -> None: | CODE |
| LOW | tests/test_cli/test_chat_cmd.py | 145 | def set_shutdown_callback(self, cb) -> None: | CODE |
| LOW | tests/test_cli/test_migrate_cmd.py | 60 | def _set_fake_home(monkeypatch, home: Path) -> None: | CODE |
| LOW | tests/test_application/test_session_reset.py | 82 | def update_cache(self, session_key: str, epoch: int) -> None: | CODE |
| LOW⚡ | tests/test_engine/test_preflight_compaction.py | 681 | def set_history(self, history: list[Any]) -> None: | CODE |
| LOW⚡ | tests/test_engine/test_preflight_compaction.py | 684 | def set_request_image_context(self, messages: list[Any]) -> None: | CODE |
| LOW⚡ | tests/test_engine/test_preflight_compaction.py | 1045 | def set_history(self, history: list[Any]) -> None: | CODE |
| LOW⚡ | tests/test_engine/test_preflight_compaction.py | 1048 | def set_request_image_context(self, messages: list[Any]) -> None: | CODE |
| LOW⚡ | tests/test_engine/test_preflight_compaction.py | 1213 | def set_history(self, history: list[Any]) -> None: | CODE |
| LOW⚡ | tests/test_engine/test_preflight_compaction.py | 1216 | def set_request_image_context(self, messages: list[Any]) -> None: | CODE |
| LOW⚡ | tests/test_engine/test_preflight_compaction.py | 1274 | def set_history(self, history: list[Any]) -> None: | CODE |
| LOW⚡ | tests/test_engine/test_preflight_compaction.py | 1277 | def set_request_image_context(self, messages: list[Any]) -> None: | CODE |
| LOW⚡ | tests/test_engine/test_runtime_artifacts.py | 1247 | def set_history(self, history) -> None: | CODE |
| LOW⚡ | tests/test_engine/test_runtime_artifacts.py | 1250 | def set_request_image_context(self, messages) -> None: | CODE |
| LOW | …t_engine/turn_runner/test_attachment_stage_snapshot.py | 86 | def set_history(self, _history: Any) -> None: | CODE |
| LOW | …ine/turn_runner/test_stream_consumer_stage_snapshot.py | 80 | def set_history(self, _history: Any) -> None: | CODE |
| LOW | tests/test_gateway/test_task_runtime_wait_slots.py | 33 | async def update_agent_task(self, task_id: str, **fields: Any) -> None: | CODE |
| LOW⚡ | tests/test_gateway/test_router_boot.py | 1602 | def set_session_lock_provider(self, provider: Any) -> None: | CODE |
| LOW⚡ | tests/test_gateway/test_router_boot.py | 1675 | def set_session_lock_provider(self, _provider: Any) -> None: | CODE |
| LOW⚡ | tests/test_gateway/test_router_boot.py | 1758 | def set_session_lock_provider(self, _provider: Any) -> None: | CODE |
| LOW⚡ | tests/test_gateway/test_router_boot.py | 1864 | def set_session_lock_provider(self, _provider: Any) -> None: | CODE |
| LOW | tests/test_gateway/test_router_boot.py | 526 | def set_session_lock_provider(self, _provider: Any) -> None: | CODE |
| LOW | tests/test_gateway/test_router_boot.py | 1969 | def set_session_lock_provider(self, _provider: Any) -> None: ... | CODE |
| LOW | tests/test_gateway/test_process_completion_delivery.py | 58 | async def update_agent_task(self, task_id: str, **fields: Any) -> None: | CODE |
| LOW | tests/test_gateway/test_goal_rpc.py | 296 | async def _settle_set_task(stack: _GoalRpcStack, response: dict[str, Any]) -> None: | CODE |
| LOW | …sts/test_gateway/test_task_runtime_terminal_cleanup.py | 2196 | async def set_session_mode() -> None: | CODE |
| LOW | tests/test_gateway/test_task_runtime_turn_committed.py | 67 | async def update_agent_task(self, task_id: str, **updates: Any) -> None: | CODE |
| LOW | tests/test_gateway/test_rpc_session_services.py | 22 | def set_cached_epoch(self, session_key: str, epoch: int) -> None: | CODE |
| LOW | tests/test_gateway/test_task_runtime_reservations.py | 52 | async def update_agent_task(self, task_id: str, **fields: Any) -> None: | CODE |
| 498 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | compose.yaml | 1 | services: | COMMENT |
| LOW | compose.yaml | 21 | volumes: | COMMENT |
| LOW | tests/test_tools/test_dispatch_properties.py | 401 | COMMENT | |
| LOW | tests/test_ci/test_architecture_import_contracts.py | 21 | ("agents", "session"), | COMMENT |
| LOW | tests/test_ci/test_rpc_architecture_contracts.py | 121 | "src/opensquilla/gateway/websocket.py": 1, | COMMENT |
| LOW | tests/test_ci/test_rpc_architecture_contracts.py | 181 | ) | COMMENT |
| LOW | tests/test_gateway/test_ws_writer_queue.py | 1041 | # mechanically: | COMMENT |
| LOW | tests/test_persistence/test_schema_convergence.py | 41 | COMMENT | |
| LOW | tests/test_provider/test_spec_substrate.py | 41 | # (deepseek, zhipuai, ...) here would vendor entire foreign tables | COMMENT |
| LOW | tests/test_provider/test_reasoning_dialects.py | 21 | ReasoningEnableArgs, | COMMENT |
| LOW | tests/test_provider/test_catalog_layers.py | 721 | ) | COMMENT |
| LOW | tests/test_provider/golden/_harness.py | 61 | # sets — never invented. "none" normally freezes omission; an exact | COMMENT |
| LOW | tests/test_provider/golden/_harness.py | 101 | # seed-1-6 ladder (model_catalog byteplus branch) -> shared "volcengine" | COMMENT |
| LOW | desktop/electron/src/main.ts | 3521 | // Append an extension implied by the MIME type unless the name already ends with | COMMENT |
| LOW | desktop/electron/src/desktop-renderer-log.ts | 1 | // Boundary and formatting helpers for persisting renderer observability to desktop.log. | COMMENT |
| LOW | docs/configuration.md | 341 | # Aggregate byte ceiling for the disk-backed staged-upload store. When reached, | COMMENT |
| LOW | …nsquilla-webui/e2e/share-export-image-artifact.spec.ts | 1 | import { test, expect, type Page, type Route } from '@playwright/test' | COMMENT |
| LOW | opensquilla-webui/e2e/theme.spec.ts | 1 | import { test, expect, type Page } from '@playwright/test' | COMMENT |
| LOW | opensquilla-webui/src/App.vue | 1861 | // macOS' Ctrl+K (emacs kill-to-end-of-line inside text fields). preventDefault | COMMENT |
| LOW | …posables/chat/useChatRpcEventHandlers.issue344.test.ts | 1 | // Issue #344: a stale task's late stream events bled into the current turn. | COMMENT |
| LOW | …illa-webui/src/composables/chat/useChatAnswerReveal.ts | 1 | import { ref, watch, onScopeDispose, type Ref } from 'vue' | COMMENT |
| LOW | …lla-webui/src/composables/chat/useChatStallWatchdog.ts | 1 | import { computed, onScopeDispose, ref, watch, type Ref } from 'vue' | COMMENT |
| LOW | …la-webui/src/composables/setup/useSetupProviderForm.ts | 301 | onRemoveCredential?: () => void | COMMENT |
| LOW | …squilla-webui/src/composables/setup/useSetupCatalog.ts | 81 | // sentence (onboarding/status.py, onboarding/next_steps.py) rendered verbatim | COMMENT |
| LOW | …quilla-webui/src/composables/setup/settingsSections.ts | 1 | // Canonical list of Settings rail sections, kept in a standalone module so both | COMMENT |
| LOW | …ensquilla-webui/src/utils/workbench/artifactPreview.ts | 541 | // Keep the policy ahead of every byte of untrusted markup. Parsing first can | COMMENT |
| LOW | opensquilla-webui/src/components/ControlSwitch.vue | 1 | <script setup lang="ts"> | COMMENT |
| LOW | …uilla-webui/src/components/settings/SettingsDialog.vue | 741 | // positive click count. Preserve focus restoration for keyboard activation. | COMMENT |
| LOW | opensquilla-webui/src/components/chat/ChatComposer.vue | 741 | // | COMMENT |
| LOW | …a-webui/src/components/chat/ChatComposer.paste.test.ts | 1 | // @vitest-environment happy-dom | COMMENT |
| LOW | opensquilla-webui/src/components/run/RunTrace.vue | 761 | isToolItemOpen?: (renderKey: string) => boolean | COMMENT |
| LOW | opensquilla-webui/src/views/ChannelsView.vue | 1501 | }) | COMMENT |
| LOW | opensquilla-webui/src/themes/tokens.ts | 1 | // Eagerly bundle every value theme's L1 token block ([data-theme="<id>"]) into | COMMENT |
| LOW | opensquilla-webui/src/router/lastRoute.ts | 1 | // Persist + restore the last-viewed view so the app reopens where you left off | COMMENT |
| LOW | scripts/install_source.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .github/workflows/docker-image.yml | 1 | name: Container Images | COMMENT |
| LOW | src/opensquilla/tools/types.py | 161 | sandbox_policy: Any | None = field(default=None, repr=False) | COMMENT |
| LOW | src/opensquilla/tools/types.py | 181 | ) | COMMENT |
| LOW | src/opensquilla/tools/types.py | 201 | goal_service: Any | None = field(default=None, repr=False) | COMMENT |
| LOW | src/opensquilla/tools/types.py | 221 | # Process-local task ancestry used only to persist exact subprocess | COMMENT |
| LOW | src/opensquilla/tools/types.py | 481 | # Control tools may end the current model tool loop after their result is | COMMENT |
| LOW | src/opensquilla/tools/envelope.py | 101 | _USER_MESSAGE_MAX_CHARS: Final[int] = 500 | COMMENT |
| LOW | src/opensquilla/recovery/consolidate.py | 3621 | if payload.get("phase") not in {"prepared", "external_roots_merged"}: | COMMENT |
| LOW | src/opensquilla/contracts/attachments.py | 101 | # Ordinary document bytes stay in controlled storage for tool access. | COMMENT |
| LOW | src/opensquilla/provider/compat_policy.py | 241 | # an itemless JSON Schema array accepts arbitrary values, so a string | COMMENT |
| LOW | src/opensquilla/provider/compat_policy.py | 281 | # attaching usage metadata. This is safe to ignore only when the choice | COMMENT |
| LOW | src/opensquilla/provider/compat_policy.py | 341 | COMMENT | |
| LOW | src/opensquilla/provider/registry.py | 21 | COMMENT | |
| LOW | src/opensquilla/provider/registry.py | 81 | runtime_supported: bool = True | COMMENT |
| LOW | src/opensquilla/provider/types.py | 121 | usage_missing_count: int = 0 | COMMENT |
| LOW | src/opensquilla/provider/openai.py | 3261 | # OpenAIProvider(base_url="https://openrouter.ai/...") resolving | COMMENT |
| LOW | src/opensquilla/provider/model_catalog.py | 81 | # budget over-estimate and skip trimming while the runtime silently truncates. | COMMENT |
| LOW | src/opensquilla/provider/model_catalog.py | 441 | """ | COMMENT |
| LOW | src/opensquilla/provider/ensemble.py | 5921 | COMMENT | |
| LOW | src/opensquilla/provider/catalog_overrides.toml | 1 | # catalog_overrides.toml — packaged metadata corrections for the layered | COMMENT |
| LOW | src/opensquilla/provider/catalog_overrides.toml | 21 | # quality_prior = 0.7 | COMMENT |
| LOW | src/opensquilla/provider/catalog_overrides.toml | 41 | # _STATIC_FALLBACK in src/opensquilla/provider/model_catalog.py (tuples of | COMMENT |
| LOW | src/opensquilla/provider/catalog_overrides.toml | 221 | supports_vision = false | COMMENT |
| LOW | src/opensquilla/provider/catalog_overrides.toml | 801 | [qwen_token_plan."minimax-m2.5"] | COMMENT |
| LOW | src/opensquilla/cli/tui/backend/runtime.py | 461 | and turn_task is not None | COMMENT |
| 452 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …i/src/composables/chat/useChatSend.attachments.test.ts | 1536 | expect(live.rpc.call.mock.calls.filter(([method]: unknown[]) => method === 'chat.send')).toHaveLength(1) | CODE |
| CRITICAL | …a-webui/src/composables/chat/useChatCompaction.test.ts | 316 | expect(h.api.compactStatus.value.detail.includes('original context is preserved')).toBe(preserved) | CODE |
| CRITICAL | …/src/composables/setup/useSetupCatalog.privacy.test.ts | 1220 | expect(api.capabilitiesPanel.value.options.imageModels.map(model => model.id)).toEqual([ | CODE |
| CRITICAL | …/src/composables/setup/useSetupCatalog.privacy.test.ts | 4611 | expect(reopened.api.providerPanel.value.configuredProviders.map(row => row.providerId)) | CODE |
| CRITICAL | …ui/src/composables/skills/skillInstallReceipts.test.ts | 116 | expect(registry.installActivities.value.github.items.map(item => item.displayName)) | CODE |
| CRITICAL | …ui/src/composables/skills/skillInstallReceipts.test.ts | 118 | expect(registry.installActivities.value.github.items.map(item => item.status)) | CODE |
| CRITICAL | …-webui/src/composables/skills/useSkillRegistry.test.ts | 206 | expect(registry.installActivities.value.github.items.map(item => item.displayName)).toEqual([ | CODE |
| CRITICAL | …-webui/src/composables/skills/useSkillRegistry.test.ts | 280 | expect(registry.installActivities.value.github.items.map(item => item.status)) | CODE |
| CRITICAL | …-webui/src/composables/skills/useSkillRegistry.test.ts | 288 | expect(registry.installActivities.value.github.items.map(item => item.status)) | CODE |
| CRITICAL | …-webui/src/composables/skills/useSkillRegistry.test.ts | 322 | expect(registry.installActivities.value.github.items.map(item => item.status)) | CODE |
| CRITICAL | …-webui/src/composables/skills/useSkillRegistry.test.ts | 398 | expect(registry.installActivities.value.github.items.map(item => item.status)).toEqual([ | CODE |
| CRITICAL | …-webui/src/composables/skills/useSkillRegistry.test.ts | 404 | expect(registry.installActivities.value.github.items.slice(2).every(item => | CODE |
| CRITICAL | …-webui/src/composables/skills/useSkillRegistry.test.ts | 435 | expect(registry.installActivities.value.github.items.map(item => item.status)).toEqual([ | CODE |
| CRITICAL | …-webui/src/composables/skills/useSkillRegistry.test.ts | 523 | expect(registry.installActivities.value.clawhub.items.some(item => | CODE |
| CRITICAL⚡ | …-webui/src/composables/skills/useSkillRegistry.test.ts | 745 | expect(registry.installActivities.value.clawhub.items.map(item => item.identifier)) | CODE |
| CRITICAL⚡ | …-webui/src/composables/skills/useSkillRegistry.test.ts | 752 | expect(registry.installActivities.value.clawhub.items.map(item => item.identifier)) | CODE |
| CRITICAL⚡ | …-webui/src/composables/skills/useSkillRegistry.test.ts | 755 | expect(registry.installActivities.value.github.items.map(item => item.identifier)) | CODE |
| CRITICAL | …nsquilla-webui/src/app/desktopSessionDeepLinks.test.ts | 97 | expect(test.options.openSession.mock.calls.map(([key]) => key)).toEqual([FIRST_KEY, SECOND_KEY]) | CODE |
| CRITICAL | …-webui/src/components/channels/ChannelConfigEditor.vue | 159 | const row = props.editor.panel.value.channelFields.find(r => r.field.name === 'app_id') | CODE |
| CRITICAL | …-webui/src/components/channels/ChannelConfigEditor.vue | 163 | const row = props.editor.panel.value.channelFields.find(r => r.field.name === 'domain') | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/test_memory_vector_normalization.py | 0 | insert or replace into chunks (id, path, source, start_line, end_line, hash, model, text, embedding, updated_at) values | STRING |
| HIGH | tests/test_memory_store_keyword_fallback.py | 0 | insert or replace into chunks (id, path, source, start_line, end_line, hash, model, text, embedding, updated_at) values | STRING |
| HIGH | src/opensquilla/memory/store.py | 0 | insert or replace into chunks (id, path, source, start_line, end_line, hash, model, text, embedding, updated_at) values | STRING |
| HIGH | …st_migrations/test_v038_artifact_prompt_annotations.py | 0 | insert into artifact_revisions ( revision_id, document_id, generation, artifact_id, artifact_sha256, filename, media_typ | STRING |
| HIGH | tests/test_migrations/test_v040_document_resources.py | 0 | insert into artifact_revisions ( revision_id, document_id, generation, artifact_id, artifact_sha256, filename, media_typ | STRING |
| HIGH | tests/test_migrations/test_v037_artifact_sessions.py | 0 | insert into artifact_revisions ( revision_id, document_id, generation, artifact_id, artifact_sha256, filename, media_typ | STRING |
| HIGH | …est_migrations/test_v039_artifact_mutation_attempts.py | 0 | insert into artifact_revisions ( revision_id, document_id, generation, artifact_id, artifact_sha256, filename, media_typ | STRING |
| HIGH | tests/test_migration/test_opensquilla_home_migration.py | 0 | create table scheduler_jobs ( id text primary key, name text not null default '', cron_expr text not null, handler_key t | STRING |
| HIGH | src/opensquilla/scheduler/persistence.py | 0 | create table scheduler_jobs ( id text primary key, name text not null default '', cron_expr text not null, handler_key t | STRING |
| HIGH | tests/test_scheduler/test_persistence.py | 0 | create table scheduler_jobs ( id text primary key, name text not null default '', cron_expr text not null, handler_key t | STRING |
| HIGH | tests/test_ci/test_migration_v016.py | 0 | insert into meta_skill_runs ( run_id, meta_skill_name, meta_skill_digest, plan_snapshot_json, triggered_by, status, star | STRING |
| HIGH | tests/test_ci/test_migration_v014.py | 0 | insert into meta_skill_runs ( run_id, meta_skill_name, meta_skill_digest, plan_snapshot_json, triggered_by, status, star | STRING |
| HIGH | tests/test_ci/test_migration_v011.py | 0 | insert into meta_skill_runs ( run_id, meta_skill_name, meta_skill_digest, plan_snapshot_json, triggered_by, status, star | STRING |
| HIGH | …s/test_sandbox/test_filesystem_side_effect_executor.py | 0 | *** begin patch *** add file: created.txt +hello *** end patch | STRING |
| HIGH | tests/test_sandbox/test_seatbelt_backend.py | 0 | *** begin patch *** add file: created.txt +hello *** end patch | STRING |
| HIGH | …test_sandbox/test_windows_default_filesystem_policy.py | 0 | *** begin patch *** add file: created.txt +hello *** end patch | STRING |
| HIGH | …ts/test_observability/test_usage_telemetry_identity.py | 0 | create table if not exists telemetry_daily_usage ( day text primary key, conversation_turns integer not null default 0, | STRING |
| HIGH | src/opensquilla/observability/daily_usage_store.py | 0 | create table if not exists telemetry_daily_usage ( day text primary key, conversation_turns integer not null default 0, | STRING |
| HIGH | src/opensquilla/session/storage.py | 0 | create table if not exists telemetry_daily_usage ( day text primary key, conversation_turns integer not null default 0, | STRING |
| HIGH | tests/test_gateway/test_turn_ingress_rpc.py | 0 | insert into pending_chat_inputs ( pending_input_id, session_key, source_scope, client_request_id, client_message_id, req | STRING |
| HIGH | tests/test_session/test_pending_chat_inputs.py | 0 | insert into pending_chat_inputs ( pending_input_id, session_key, source_scope, client_request_id, client_message_id, req | STRING |
| HIGH | src/opensquilla/session/storage.py | 0 | insert into pending_chat_inputs ( pending_input_id, session_key, source_scope, client_request_id, client_message_id, req | STRING |
| HIGH | scripts/live_provider_profile_smoke.py | 0 | require an array of exact public result rows before and after sanitizing. | STRING |
| HIGH | scripts/live_mixed_provider_gateway.py | 0 | require an array of exact public result rows before and after sanitizing. | STRING |
| HIGH | scripts/live_provider_profile_gateway_e2e.py | 0 | require an array of exact public result rows before and after sanitizing. | STRING |
| HIGH | scripts/live_multi_provider_matrix.py | 0 | require an array of exact public result rows before and after sanitizing. | STRING |
| HIGH | src/opensquilla/provider/openai_responses.py | 0 | list available models. by default any auth/transport failure degrades to an empty list (the historical contract every ru | STRING |
| HIGH | src/opensquilla/provider/openai.py | 0 | list available models. by default any auth/transport failure degrades to an empty list (the historical contract every ru | STRING |
| HIGH | src/opensquilla/provider/ollama.py | 0 | list available models. by default any auth/transport failure degrades to an empty list (the historical contract every ru | STRING |
| HIGH | src/opensquilla/provider/openai.py | 0 | model id this provider was configured with. public so callers (e.g. derived-cache key construction) can identify the und | STRING |
| HIGH | src/opensquilla/provider/anthropic.py | 0 | model id this provider was configured with. public so callers (e.g. derived-cache key construction) can identify the und | STRING |
| HIGH | src/opensquilla/provider/ollama.py | 0 | model id this provider was configured with. public so callers (e.g. derived-cache key construction) can identify the und | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | tests/test_tools/test_dispatch_equivalence.py | 170 | # Async harness runner | COMMENT |
| MEDIUM | …/integration/cli/tui_real_terminal/fake_opentui_app.py | 188 | # harness releases this barrier only after it records styled cells. | COMMENT |
| MEDIUM | …/integration/cli/tui_real_terminal/fake_opentui_app.py | 214 | # Mirror the real turn shape so the harness exercises the live | COMMENT |
| MEDIUM | …/integration/cli/tui_real_terminal/fake_opentui_app.py | 279 | # Echo the submitted input back so the harness can prove a multi-line | COMMENT |
| MEDIUM | tests/integration/cli/tui_real_terminal/targets.py | 19 | # harness budget identical to the packaged gate so machine load cannot turn a | COMMENT |
| MEDIUM | …ion/cli/tui_real_terminal/test_visual_layout_matrix.py | 93 | # A wait-for-text-only harness can accidentally capture the same final | COMMENT |
| MEDIUM | tests/test_ci/test_windows_signatures.py | 20 | # Every case starts a real PowerShell process. Run this harness outside the | COMMENT |
| MEDIUM | tests/test_ci/test_architecture_import_contracts.py | 109 | # The measurement-only eval harness observes providers (and pricing) through | COMMENT |
| MEDIUM | tests/test_engine/test_routing_policy_parity.py | 812 | # The harness must restore the real estimator for unrelated tests. | COMMENT |
| MEDIUM | …gine/turn_runner/test_turn_finalizer_stage_snapshot.py | 28 | # harness -- this stage sits one step after the stream consumer, so the | COMMENT |
| MEDIUM⚡ | …gine/turn_runner/test_turn_finalizer_stage_snapshot.py | 56 | # harness can pin bit-identical behavior across modes. | COMMENT |
| MEDIUM | …gine/turn_runner/test_turn_finalizer_stage_snapshot.py | 96 | # them into a separate bucket so the harness can pin each | COMMENT |
| MEDIUM | …gine/turn_runner/test_turn_finalizer_stage_snapshot.py | 453 | # recording session manager so the harness can pin the system-role | COMMENT |
| MEDIUM | …gine/turn_runner/test_turn_finalizer_stage_snapshot.py | 470 | # Record memory-capture invocations so the harness can pin call | COMMENT |
| MEDIUM | …gine/turn_runner/test_turn_finalizer_stage_snapshot.py | 480 | # session.keys source (imported lazily by the harness adapter). | COMMENT |
| MEDIUM | …n_runner/test_compaction_and_history_stage_snapshot.py | 41 | # Reuse upstream patch helpers from's equivalence harness — this | COMMENT |
| MEDIUM | …t_engine/turn_runner/test_attachment_stage_snapshot.py | 27 | # Reuse upstream patch helpers from's equivalence harness — this | COMMENT |
| MEDIUM | …t_engine/turn_runner/test_attachment_stage_snapshot.py | 110 | # Local budget / thinking / compaction patches — match's harness shape. | COMMENT |
| MEDIUM | …t_engine/turn_runner/test_attachment_stage_snapshot.py | 247 | # when this harness has no workspace. | COMMENT |
| MEDIUM⚡ | …ine/turn_runner/test_stream_consumer_stage_snapshot.py | 101 | # equivalence harness shape. | COMMENT |
| MEDIUM | …ine/turn_runner/test_stream_consumer_stage_snapshot.py | 37 | # Reuse upstream patch helpers from's equivalence harness -- this | COMMENT |
| MEDIUM | …ine/turn_runner/test_stream_consumer_stage_snapshot.py | 475 | # the session.keys source (imported lazily by the harness adapter). | COMMENT |
| MEDIUM | …ine/turn_runner/test_stream_consumer_stage_snapshot.py | 765 | # The harness may append an ErrorEvent at the tail when a pending | COMMENT |
| MEDIUM | scripts/refresh_models_dev_snapshot.py | 91 | # worse than "unknown", and nuanced pricing is corrections-owned. | COMMENT |
| MEDIUM | scripts/live_mixed_provider_gateway.py | 530 | # by an unrelated stale reference. No live image is sent by this harness. | COMMENT |
| MEDIUM | scripts/live_mixed_provider_gateway.py | 883 | # harness (for example deepseek-chat -> deepseek-v4-flash). | COMMENT |
| MEDIUM | scripts/live_mixed_provider_gateway.py | 1082 | except Exception as exc: # noqa: BLE001 - live harness must keep matrix running | CODE |
| MEDIUM | scripts/live_provider_profile_gateway_e2e.py | 2353 | # This can only clear the harness process. The caller must also | COMMENT |
| MEDIUM | scripts/live_provider_profile_gateway_e2e.py | 2340 | except Exception as exc: # noqa: BLE001 - live harness must fail closed | CODE |
| MEDIUM | scripts/live_multi_provider_matrix.py | 66 | # These entries are intentionally represented as skips. The harness must not | COMMENT |
| MEDIUM | scripts/live_deliverable_acceptance.py | 1145 | break # The caller's finally stops this harness-owned Gateway. | CODE |
| MEDIUM | .github/scripts/desktop_fault_injection.py | 264 | # A distinct key per source avoids conflating this harness's coverage | COMMENT |
| MEDIUM | .github/scripts/plan_ci.py | 76 | # installer, its verification harness, or historical data handling retain every | COMMENT |
| MEDIUM | .github/scripts/plan_ci.py | 1950 | # owns a Desktop harness contract. | COMMENT |
| MEDIUM | src/opensquilla/cli/ensemble_cmd.py | 149 | # Config loading is a CLI concern; the eval harness owns provider coupling. | COMMENT |
| MEDIUM | src/opensquilla/cli/tui/opentui/surface.py | 689 | # The readiness sentinel is harness scaffolding (tmux drivers wait for | COMMENT |
| MEDIUM | src/opensquilla/engine/runtime.py | 6774 | # Same precedence as the harness catalog adapter: a | COMMENT |
| MEDIUM | src/opensquilla/engine/runtime.py | 7628 | # this preserves the harness's read-after-stream | COMMENT |
| MEDIUM | src/opensquilla/engine/runtime.py | 7637 | # Post-stage edge owned by the harness: flush remaining | COMMENT |
| MEDIUM | src/opensquilla/engine/runtime.py | 11885 | # Total savings is the comprehensive per-turn estimate used by | COMMENT |
| MEDIUM | …pensquilla/engine/turn_runner/stream_consumer_stage.py | 308 | # PASSED IN by the harness -- references, not copies. | COMMENT |
| MEDIUM | …pensquilla/engine/turn_runner/stream_consumer_stage.py | 1001 | # comprehensive score rejects for ensemble turns: the input-price | COMMENT |
| MEDIUM⚡ | …ensquilla/engine/turn_runner/prompt_assembler_stage.py | 136 | # TurnRunner. The runtime adapters in ``harness.py`` bind these to the | COMMENT |
| MEDIUM | src/opensquilla/engine/turn_runner/context.py | 149 | # Populated by StreamConsumerStage. Written by the harness | COMMENT |
| MEDIUM | src/opensquilla/engine/turn_runner/context.py | 159 | # Populated by TurnFinalizerStage. Written by the harness | COMMENT |
| MEDIUM | …opensquilla/engine/turn_runner/turn_finalizer_stage.py | 494 | # Heartbeat-normalized final text (the harness writes this onto | COMMENT |
| MEDIUM⚡ | …squilla/engine/turn_runner/provider_and_tools_stage.py | 39 | # TurnRunner. The runtime adapters in ``harness.py`` bind these to the | COMMENT |
| MEDIUM⚡ | …squilla/engine/turn_runner/provider_and_tools_stage.py | 99 | # the harness accumulates onto TurnContext) | COMMENT |
| MEDIUM | …squilla/engine/turn_runner/provider_and_tools_stage.py | 208 | # produces. The harness emits the turn_error trace + persists | COMMENT |
| MEDIUM⚡ | …pensquilla/engine/turn_runner/agent_bootstrap_stage.py | 159 | # full TurnRunner. The runtime adapters in ``harness.py`` bind these to the | COMMENT |
| MEDIUM | src/opensquilla/gateway/boot.py | 5524 | # setattr (not direct assignment) so this is robust to uvicorn type stubs | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/test_health/test_model.py | 69 | command="opensquilla providers configure openrouter --api-key YOUR_API_KEY", | CODE |
| HIGH⚡ | tests/test_health/test_evaluator.py | 216 | assert "opensquilla providers configure zhipu --api-key YOUR_API_KEY" in commands | CODE |
| HIGH⚡ | tests/test_health/test_evaluator.py | 217 | assert "opensquilla providers configure zai --api-key YOUR_API_KEY" not in commands | CODE |
| HIGH | tests/test_health/test_evaluator.py | 183 | "opensquilla providers configure zhipu --api-key YOUR_API_KEY" | CODE |
| HIGH | tests/test_health/test_evaluator.py | 325 | "opensquilla providers configure openrouter --api-key YOUR_API_KEY" | CODE |
| HIGH | tests/test_health/test_evaluator.py | 415 | "opensquilla providers configure openrouter --api-key YOUR_API_KEY", | CODE |
| HIGH | tests/test_health/test_evaluator.py | 966 | "opensquilla configure image-generation --image-provider openai --api-key YOUR_API_KEY", | CODE |
| HIGH | tests/test_health/test_evaluator.py | 1039 | "opensquilla configure image-generation --image-provider openai --api-key YOUR_API_KEY" | CODE |
| HIGH | tests/test_health/test_recovery_commands.py | 26 | "YOUR_API_KEY": "dummy-key", | CODE |
| HIGH⚡ | tests/test_cli/test_doctor_cmd.py | 507 | assert commands == ["opensquilla providers configure openrouter --api-key YOUR_API_KEY"] | CODE |
| HIGH | tests/test_cli/test_doctor_cmd.py | 45 | "--api-key YOUR_API_KEY" | CODE |
| HIGH | tests/test_cli/test_doctor_cmd.py | 214 | "opensquilla providers configure openrouter --api-key YOUR_API_KEY " | CODE |
| HIGH | tests/test_cli/test_doctor_cmd.py | 243 | "opensquilla providers configure openrouter --api-key YOUR_API_KEY " | CODE |
| HIGH | tests/test_cli/test_doctor_cmd.py | 358 | "opensquilla providers configure openrouter --api-key YOUR_API_KEY " | CODE |
| HIGH | tests/test_cli/test_doctor_cmd.py | 656 | "opensquilla providers configure openrouter --api-key YOUR_API_KEY " | CODE |
| HIGH | tests/test_cli/test_doctor_cmd.py | 701 | "--search-provider brave --api-key YOUR_API_KEY" | CODE |
| HIGH | tests/test_cli/test_doctor_cmd.py | 784 | "--image-provider openai --api-key YOUR_API_KEY" | CODE |
| HIGH | tests/test_cli/test_doctor_cmd.py | 800 | "opensquilla providers configure openrouter --api-key YOUR_API_KEY" | CODE |
| HIGH | tests/test_cli/test_doctor_cmd.py | 881 | "--image-provider openai --api-key YOUR_API_KEY" | CODE |
| HIGH | tests/test_cli/test_doctor_cmd.py | 933 | "--image-provider openai --api-key YOUR_API_KEY" | CODE |
| HIGH | tests/test_gateway/test_rpc_doctor.py | 164 | "opensquilla providers configure openrouter --api-key YOUR_API_KEY " | CODE |
| HIGH | src/opensquilla/health/evaluator.py | 29 | _API_KEY_PLACEHOLDER = "YOUR_API_KEY" | CODE |
| HIGH | src/opensquilla/cli/doctor_cmd.py | 33 | _API_KEY_PLACEHOLDER = "YOUR_API_KEY" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_provider_text_tool_normalization.py | 322 | CODE | |
| LOW | tests/test_provider_text_tool_normalization.py | 385 | CODE | |
| LOW | tests/test_process_tree.py | 28 | CODE | |
| LOW | tests/test_install_scripts.py | 406 | CODE | |
| LOW | tests/test_tools/test_media_image.py | 415 | CODE | |
| LOW | tests/test_ci/test_upgrade_baselines.py | 1053 | CODE | |
| LOW | tests/test_engine/test_subagent_usage_rollup.py | 79 | CODE | |
| LOW | …ne/turn_runner/test_prompt_assembler_stage_snapshot.py | 196 | CODE | |
| LOW | …ine/turn_runner/test_agent_bootstrap_stage_snapshot.py | 239 | CODE | |
| LOW | …_engine/turn_runner/test_stream_consumer_stage_unit.py | 287 | CODE | |
| LOW | …_engine/turn_runner/test_stream_consumer_stage_unit.py | 151 | CODE | |
| LOW | …t_engine/turn_runner/test_turn_finalizer_stage_unit.py | 188 | CODE | |
| LOW | …_engine/turn_runner/test_agent_bootstrap_stage_unit.py | 243 | CODE | |
| LOW | …engine/turn_runner/test_prompt_assembler_stage_unit.py | 228 | CODE | |
| LOW | …/turn_runner/test_compaction_and_history_stage_unit.py | 78 | CODE | |
| LOW | tests/test_telemetry_server/test_dashboard_queries.py | 135 | CODE | |
| LOW | tests/test_gateway/test_goal_rpc.py | 145 | CODE | |
| LOW | tests/test_gateway/test_rpc_sessions.py | 351 | CODE | |
| LOW | tests/test_gateway/test_rpc_sessions.py | 425 | CODE | |
| LOW | tests/test_gateway/test_usage_query.py | 120 | CODE | |
| LOW | …op/electron/scripts/nsis/test-legacy-upgrade-native.py | 96 | CODE | |
| LOW | scripts/live_provider_profile_gateway_e2e.py | 375 | CODE | |
| LOW | scripts/live_reasoning_replay_e2e.py | 1924 | CODE | |
| LOW | scripts/long_task_fault_proxy.py | 344 | CODE | |
| LOW | src/opensquilla/result_budget.py | 164 | CODE | |
| LOW | src/opensquilla/tools/registry.py | 561 | CODE | |
| LOW | src/opensquilla/tools/registry.py | 590 | CODE | |
| LOW | src/opensquilla/tools/registry.py | 619 | CODE | |
| LOW | src/opensquilla/tools/rpc_payload.py | 49 | CODE | |
| LOW | src/opensquilla/tools/rpc_payload.py | 86 | CODE | |
| LOW | src/opensquilla/tools/policy_runtime.py | 94 | CODE | |
| LOW | src/opensquilla/tools/builtin/media.py | 2176 | CODE | |
| LOW | src/opensquilla/tools/builtin/media.py | 2285 | CODE | |
| LOW | src/opensquilla/tools/builtin/web.py | 845 | CODE | |
| LOW | src/opensquilla/tools/builtin/web.py | 1127 | CODE | |
| LOW | src/opensquilla/tools/builtin/shell.py | 7236 | CODE | |
| LOW | src/opensquilla/tools/builtin/shell.py | 7938 | CODE | |
| LOW | src/opensquilla/tools/builtin/shell.py | 8612 | CODE | |
| LOW | src/opensquilla/tools/builtin/browser.py | 66 | CODE | |
| LOW | src/opensquilla/tools/builtin/admin.py | 340 | CODE | |
| LOW | src/opensquilla/tools/builtin/admin.py | 58 | CODE | |
| LOW | src/opensquilla/tools/builtin/tool_results.py | 479 | CODE | |
| LOW | src/opensquilla/tools/builtin/tool_results.py | 500 | CODE | |
| LOW | src/opensquilla/memory/retrieval.py | 160 | CODE | |
| LOW | src/opensquilla/identity/prompt.py | 22 | CODE | |
| LOW | src/opensquilla/provider/registry.py | 136 | CODE | |
| LOW | src/opensquilla/provider/trace_recorder.py | 181 | CODE | |
| LOW | src/opensquilla/provider/openai.py | 3237 | CODE | |
| LOW | src/opensquilla/provider/ensemble.py | 7629 | CODE | |
| LOW | src/opensquilla/provider/ensemble.py | 1545 | CODE | |
| LOW | src/opensquilla/provider/ensemble.py | 5111 | CODE | |
| LOW | src/opensquilla/provider/anthropic.py | 343 | CODE | |
| LOW | src/opensquilla/provider/image_projection.py | 706 | CODE | |
| LOW | src/opensquilla/scheduler/handlers.py | 731 | CODE | |
| LOW | src/opensquilla/scheduler/ops.py | 171 | CODE | |
| LOW | src/opensquilla/scheduler/engine.py | 120 | CODE | |
| LOW | src/opensquilla/agents/registry.py | 50 | CODE | |
| LOW | src/opensquilla/cli/agent_cmd.py | 163 | CODE | |
| LOW | src/opensquilla/cli/agent_cmd.py | 913 | CODE | |
| LOW | src/opensquilla/cli/migrate_cmd.py | 279 | CODE | |
| 96 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tests/test_live_tokenrhythm_transport.py | 59 | ("GET", "https://example.com/", {"X-Test": _KEY}, "placeholder"), | CODE |
| LOW⚡ | tests/test_live_tokenrhythm_transport.py | 60 | ("GET", "https://example.com/?key=" + _KEY, {}, "placeholder"), | CODE |
| LOW⚡ | tests/test_live_tokenrhythm_transport.py | 63 | ("GET", "https://tokenrhythm.studio/api/models", {"Authorization": _KEY}, "placeholder"), | CODE |
| LOW | tests/test_provider_connection_failure.py | 98 | provider_kwargs = {"api_key": "dummy-key", "base_url": "https://provider.test"} | CODE |
| LOW | tests/test_health/test_recovery_commands.py | 26 | "YOUR_API_KEY": "dummy-key", | CODE |
| LOW | tests/unit/cli/tui/test_opentui_surface.py | 615 | "placeholder": "send a message", | CODE |
| LOW⚡ | tests/test_tools/test_web_fetch.py | 93 | assert await module._try_firecrawl("https://example.test", "dummy-key") is None | CODE |
| LOW | tests/test_tools/test_web_fetch.py | 116 | monkeypatch.setenv("FIRECRAWL_API_KEY", "dummy-key") | CODE |
| LOW⚡ | tests/test_telemetry/test_identity.py | 64 | fake_key = object() | CODE |
| LOW⚡ | tests/test_telemetry/test_identity.py | 69 | return nullcontext(fake_key) | CODE |
| LOW⚡ | tests/test_telemetry/test_identity.py | 72 | assert key is fake_key and name == "MachineGuid" | CODE |
| LOW | tests/test_cli/test_models_probe.py | 42 | api_key = "sk-test-dummy-key" | STRING |
| LOW | tests/test_cli/test_models_probe.py | 377 | api_key = "sk-test-dummy-key" | STRING |
| LOW | tests/test_cli/test_models_probe.py | 425 | api_key = "sk-test-dummy-key" | STRING |
| LOW | …/test_engine/test_tokenjuice_tool_result_projection.py | 2465 | api_key="public-dummy-key", model="gpt-4o", base_url="https://probe.invalid/v1", | CODE |
| LOW⚡ | tests/test_engine/test_agent_llm_budget.py | 2315 | big_output = ("synthetic log line: lorem ipsum dolor sit amet 0123456789\n" * 700)[:40_000] | CODE |
| LOW⚡ | tests/test_engine/test_agent_llm_budget.py | 2315 | big_output = ("synthetic log line: lorem ipsum dolor sit amet 0123456789\n" * 700)[:40_000] | CODE |
| LOW⚡ | tests/test_sandbox/test_filesystem_worker.py | 257 | loop.write_text("placeholder", encoding="utf-8") | CODE |
| LOW | tests/test_sandbox/test_filesystem_worker.py | 322 | logical.write_text("placeholder", encoding="utf-8") | CODE |
| LOW⚡ | tests/test_gateway/test_rpc_sessions.py | 7805 | "api_key": "dummy-key", | CODE |
| LOW⚡ | tests/test_gateway/test_rpc_sessions.py | 7815 | api_key="dummy-key", | CODE |
| LOW⚡ | tests/test_gateway/test_model_catalog_refresh.py | 679 | active = _config(tmp_path, key="shared-dummy-key") | CODE |
| LOW⚡ | tests/test_gateway/test_model_catalog_refresh.py | 682 | api_key="shared-dummy-key", | CODE |
| LOW | tests/test_gateway/test_model_catalog_refresh.py | 94 | **{**kwargs, "api_key": "different-dummy-key", "persist_entitlement": False}, | CODE |
| LOW⚡ | tests/test_gateway/test_compaction_target.py | 151 | "api_key": "dummy-key", | CODE |
| LOW⚡ | tests/test_gateway/test_compaction_target.py | 161 | api_key="dummy-key", | CODE |
| LOW | tests/test_gateway/test_compaction_target.py | 391 | "api_key": "dummy-key", | CODE |
| LOW | tests/test_gateway/test_compaction_target.py | 404 | api_key="dummy-key", | CODE |
| LOW | tests/test_gateway/test_compaction_target.py | 422 | "api_key": "dummy-key", | CODE |
| LOW | tests/test_gateway/test_compaction_target.py | 434 | api_key="dummy-key", | CODE |
| LOW⚡ | tests/test_onboarding/test_channel_specs.py | 345 | assert fields["app_secret"]["placeholder"] | CODE |
| LOW | tests/test_onboarding/test_channel_specs.py | 464 | "text": "dummy-value", | CODE |
| LOW | tests/test_onboarding/test_models_discover.py | 37 | provider_id=provider, base_url=base_url, api_key="dummy-key", cache_only=True, | CODE |
| LOW | desktop/electron/src/browser-playwright.ts | 647 | (node as HTMLElement).innerText, node.getAttribute('placeholder'), node.getAttribute('title')] | CODE |
| LOW | …p/electron/src/native-workbench-annotation-contract.ts | 113 | 'placeholder', | CODE |
| LOW | desktop/electron/src/native-workbench-surface.ts | 2301 | name: (node.getAttribute('aria-label') || node.innerText || node.getAttribute('placeholder') || '').slice(0,25 | CODE |
| LOW | opensquilla-webui/e2e/toasts.spec.ts | 62 | await expect(textarea).toHaveAttribute('placeholder', 'Assign a task or ask anything') | CODE |
| LOW | opensquilla-webui/e2e/toasts.spec.ts | 63 | const placeholder = await textarea.getAttribute('placeholder') | CODE |
| LOW | opensquilla-webui/e2e/channels-workspace-edit.spec.ts | 30 | await surface.locator('input[name="setup_channel_token"]').fill('0000:e2e-dummy-token') | CODE |
| LOW | opensquilla-webui/src/locales/ja.json | 272 | "placeholder": "この領域の変更内容を入力…", | CODE |
| LOW | opensquilla-webui/src/locales/ja.json | 2285 | "placeholder": "セッションを検索…", | CODE |
| LOW | opensquilla-webui/src/locales/ja.json | 2328 | "placeholder": "新しいタスクを開始…", | CODE |
| LOW | opensquilla-webui/src/locales/ja.json | 3481 | "placeholder": "メッセージを送信...", | CODE |
| LOW | opensquilla-webui/src/locales/ja.json | 3971 | "placeholder": "エージェントに調査・計画してほしい内容を入力", | CODE |
| LOW | opensquilla-webui/src/locales/ja.json | 4014 | "placeholder": "目標を説明して送信すると、取り組みを開始します", | CODE |
| LOW | opensquilla-webui/src/locales/ja.json | 4356 | "placeholder": "タスクを検索", | CODE |
| LOW | opensquilla-webui/src/locales/de.json | 272 | "placeholder": "Beschreiben Sie die Änderung für diesen Bereich…", | CODE |
| LOW | opensquilla-webui/src/locales/de.json | 2285 | "placeholder": "Sitzungen durchsuchen…", | CODE |
| LOW | opensquilla-webui/src/locales/de.json | 2328 | "placeholder": "Eine neue Aufgabe starten…", | CODE |
| LOW | opensquilla-webui/src/locales/de.json | 3481 | "placeholder": "Eine Nachricht senden...", | CODE |
| LOW | opensquilla-webui/src/locales/de.json | 3971 | "placeholder": "Beschreiben Sie, was der Agent untersuchen und planen soll", | CODE |
| LOW | opensquilla-webui/src/locales/de.json | 4014 | "placeholder": "Beschreibe das Ziel und sende, um daran zu arbeiten", | CODE |
| LOW | opensquilla-webui/src/locales/de.json | 4356 | "placeholder": "Aufgaben suchen", | CODE |
| LOW | opensquilla-webui/src/locales/en.json | 273 | "placeholder": "Describe the change for this area…", | CODE |
| LOW | opensquilla-webui/src/locales/en.json | 2368 | "placeholder": "Search sessions…", | CODE |
| LOW | opensquilla-webui/src/locales/en.json | 2411 | "placeholder": "Start a new task…", | CODE |
| LOW⚡ | opensquilla-webui/src/locales/en.json | 3566 | "placeholder": "Send a message...", | CODE |
| LOW | opensquilla-webui/src/locales/en.json | 4056 | "placeholder": "Describe what you want the agent to investigate and plan", | CODE |
| LOW | opensquilla-webui/src/locales/en.json | 4099 | "placeholder": "Describe the goal, then press send to start working toward it", | CODE |
| LOW | opensquilla-webui/src/locales/en.json | 4441 | "placeholder": "Search tasks", | CODE |
| 34 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | CONTRIBUTORS.md | 200 | | [@HuaXiawithMoon](https://github.com/HuaXiawithMoon) | Kept `code-task` build scaffolding non-interactive by switching | CODE |
| MEDIUM⚡ | tests/test_provider_model_catalog.py | 731 | # max_tokens cannot exceed the (smaller) local context window. | COMMENT |
| MEDIUM | tests/test_ci/test_windows_signed_update_audit.py | 522 | # The full synthetic orchestration also starts PowerShell and real Node. | STRING |
| MEDIUM | tests/test_ci/test_windows_signed_update_audit.py | 682 | # The full orchestration reads its handoff JSON. PowerShell 7 may produce a | STRING |
| MEDIUM⚡ | tests/test_ci/test_upgrade_baselines.py | 930 | # Only exercise driver orchestration here. Native process identities and | STRING |
| MEDIUM | …/test_engine/test_tokenjuice_tool_result_projection.py | 2467 | # Keep the default context window and final request admission checks. | COMMENT |
| MEDIUM⚡ | tests/test_engine/test_routing_policy_stages.py | 394 | # 40% of the context window kicks in below the absolute c3 floor. | COMMENT |
| MEDIUM | tests/test_onboarding/test_flow_provider_verify.py | 108 | # The context window rides the label; a zero window keeps a bare id row; | COMMENT |
| MEDIUM | src/opensquilla/provider/types.py | 653 | # context window, but it must never enlarge an explicit caller limit. | COMMENT |
| MEDIUM | src/opensquilla/provider/openai.py | 2584 | # Keep the initial user task pinned. In long agentic coding loops, spending all remaining | COMMENT |
| MEDIUM | src/opensquilla/provider/model_catalog.py | 43 | # context window is a physical capability, not a safe automatic reservation. | COMMENT |
| MEDIUM | src/opensquilla/provider/model_catalog.py | 260 | # context window. They are provider-scoped policy inputs and must | COMMENT |
| MEDIUM | src/opensquilla/provider/model_catalog.py | 1573 | # Clamp to context window. Some provider catalogs report a model's | COMMENT |
| MEDIUM | src/opensquilla/provider/model_catalog.py | 1574 | # max_completion_tokens as almost the entire context window; using that | COMMENT |
| MEDIUM | src/opensquilla/provider/model_catalog.py | 1605 | # that occupies almost the entire shared context window. Keep | COMMENT |
| MEDIUM | src/opensquilla/provider/ollama.py | 59 | # Default to a context window large enough for real agent turns; callers can | COMMENT |
| MEDIUM | src/opensquilla/provider/image_projection.py | 1029 | # Alternate names used by orchestration code and tests. | COMMENT |
| MEDIUM | src/opensquilla/cli/tui/opentui/surface.py | 689 | # The readiness sentinel is harness scaffolding (tmux drivers wait for | COMMENT |
| MEDIUM | src/opensquilla/engine/agent.py | 10523 | # model's total context window here can make a | COMMENT |
| MEDIUM | src/opensquilla/engine/turn_runner/harness.py | 569 | # Explicit config override for the model context window. Zero (the | COMMENT |
| MEDIUM | src/opensquilla/gateway/compaction_target.py | 69 | # physical context window. Generation is reserved against this window. | COMMENT |
| MEDIUM⚡ | src/opensquilla/gateway/boot.py | 4474 | # ── TurnRunner (shared agent orchestration layer) ──────────────── | COMMENT |
| MEDIUM | src/opensquilla/session/models.py | 205 | # Agent id for multi-agent support | COMMENT |
| MEDIUM | src/opensquilla/session/storage.py | 9579 | # Terminal classification and guardrails apply only while the Goal | COMMENT |
| MEDIUM | src/opensquilla/session/storage.py | 9599 | # applying old-objective guardrails to it. | COMMENT |
| MEDIUM | src/opensquilla/session/storage.py | 9612 | # bookkeeping checkpoint is resumable orchestration | COMMENT |
| MEDIUM | src/opensquilla/session/compaction.py | 1512 | # still fits the context window. The default token-budget path retains its | COMMENT |
| MEDIUM | src/opensquilla/session/manager.py | 4053 | # retry scaffolding. Those are finalized through the normal turn | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | opensquilla-webui/e2e/share-export.spec.ts | 219 | expect(metrics.disclaimer).toBe('Content generated by AI, for reference only.') | CODE |
| HIGH | …bui/src/composables/chat/useChatMessageActions.test.ts | 1017 | () => 'Content generated by AI, for reference only.', | CODE |
| HIGH | …bui/src/composables/chat/useChatMessageActions.test.ts | 1028 | `${text}\n\nContent generated by AI, for reference only.`, | CODE |
| HIGH | …-webui/src/composables/chat/useChatShareExport.test.ts | 47 | 'Content generated by AI, for reference only.', | CODE |
| HIGH | …-webui/src/composables/chat/useChatShareExport.test.ts | 51 | expect(metrics.disclaimer).toBe('Content generated by AI, for reference only.') | CODE |
| HIGH | …bui/src/composables/chat/useChatMarkdownExport.test.ts | 28 | aiGeneratedLabel: 'Content generated by AI, for reference only.', | CODE |
| HIGH | …bui/src/composables/chat/useChatMarkdownExport.test.ts | 58 | aiGeneratedLabel: 'Content generated by AI, for reference only.', | CODE |
| HIGH | …bui/src/composables/chat/useChatMarkdownExport.test.ts | 69 | expect(markdown).toContain('> Content generated by AI, for reference only.') | CODE |
| HIGH | …bui/src/composables/chat/useChatMarkdownExport.test.ts | 76 | aiGeneratedLabel: 'Content generated by AI, for reference only.', | CODE |
| HIGH | …bui/src/composables/chat/useChatMarkdownExport.test.ts | 132 | aiGeneratedLabel: 'Content generated by AI, for reference only.', | CODE |
| HIGH⚡ | opensquilla-webui/src/locales/en.json | 3569 | "aiDisclaimer": "Content generated by AI may be inaccurate. For reference only; verify important information.", | CODE |
| HIGH⚡ | opensquilla-webui/src/locales/en.json | 3570 | "aiGeneratedLabel": "Content generated by AI, for reference only.", | CODE |
| HIGH | …ui/src/components/chat/ChatComposer.disclaimer.test.ts | 44 | 'Content generated by AI may be inaccurate. For reference only; verify important information.', | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/test_provider_stream_contract.py | 233 | CODE | |
| MEDIUM | tests/test_provider_ensemble.py | 5357 | CODE | |
| MEDIUM | tests/unit/cli/tui/test_opentui_notice_capture.py | 162 | CODE | |
| MEDIUM | tests/unit/cli/repl/test_slash_adapter.py | 86 | CODE | |
| MEDIUM | tests/test_migration/test_sandbox_direct_update.py | 232 | CODE | |
| MEDIUM | tests/test_channels/test_feishu_send_file.py | 317 | CODE | |
| MEDIUM | tests/test_channels/test_channel_attachment_metadata.py | 266 | CODE | |
| MEDIUM | tests/test_cli/test_chat_cmd.py | 2189 | CODE | |
| MEDIUM | tests/test_cli/test_chat_cmd.py | 2220 | CODE | |
| MEDIUM | tests/test_cli/test_chat_cmd.py | 2259 | CODE | |
| MEDIUM | tests/test_cli/test_gateway_cmd.py | 735 | CODE | |
| MEDIUM | …ts/test_engine/test_compaction_parent_turn_deadline.py | 108 | CODE | |
| MEDIUM | …ts/test_engine/test_compaction_parent_turn_deadline.py | 243 | CODE | |
| MEDIUM | tests/test_engine/test_provider_history_dedup.py | 30 | CODE | |
| MEDIUM | tests/test_engine/test_agent_llm_budget.py | 1731 | CODE | |
| MEDIUM | tests/test_engine/test_stream_wrappers.py | 353 | CODE | |
| MEDIUM | tests/test_engine/test_stream_wrappers.py | 367 | CODE | |
| MEDIUM | …ts/test_engine/test_provider_context_block_feedback.py | 39 | CODE | |
| MEDIUM | …n_runner/test_compaction_and_history_stage_snapshot.py | 190 | CODE | |
| MEDIUM | …t_engine/turn_runner/test_attachment_stage_snapshot.py | 107 | CODE | |
| MEDIUM | tests/test_sandbox/test_windows_setup_identity_reuse.py | 381 | CODE | |
| MEDIUM | tests/test_session/test_compaction_unified_summary.py | 390 | CODE | |
| MEDIUM | tests/test_onboarding/test_provider_probe.py | 929 | CODE | |
| MEDIUM | tests/test_onboarding/test_provider_probe.py | 1168 | CODE | |
| MEDIUM | tests/test_provider/test_error_secret_boundary.py | 440 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/test_gateway/test_compacted_title_recovery.py | 20 | _REFUSAL = "I'm unable to provide assistance with this request" | CODE |
| MEDIUM | tests/test_gateway/test_compacted_title_recovery.py | 21 | _TRUNCATED_REFUSAL = "I'm unable to provide assistance with this reque" | CODE |
| MEDIUM | tests/test_gateway/test_session_title_recovery.py | 29 | "I'm unable to provide assistance with this reque", | CODE |
| MEDIUM | tests/test_gateway/test_session_preview_adapter.py | 189 | refusal = "I'm unable to provide assistance with this request" | CODE |
| MEDIUM | tests/test_gateway/test_session_preview_adapter.py | 200 | derived_title="I'm unable to provide assistance with this reque", | CODE |
| MEDIUM | tests/test_session/test_title_quality.py | 15 | "I'm unable to provide assistance with this request.", | CODE |
| MEDIUM | tests/test_session/test_title_quality.py | 31 | "I'm unable to provide assistance with this reque", | CODE |
| MEDIUM⚡ | tests/test_session/test_title_quality.py | 46 | "I'm unable to provide assistance with this", | CODE |
| MEDIUM⚡ | tests/test_session/test_title_quality.py | 47 | "I'm unable to provide assistance with this requ", | CODE |
| MEDIUM⚡ | tests/test_session/test_title_quality.py | 48 | "I'm unable to provide assistance with this reques", | CODE |
| MEDIUM⚡ | tests/test_session/test_title_quality.py | 69 | "I'm unable to provide assistance with this request.", | CODE |
| MEDIUM | tests/test_session/test_compaction_provider_runtime.py | 1632 | TextDeltaEvent(text="I cannot provide a summary of this conversation."), | CODE |
| MEDIUM | tests/test_session/test_naming_refusal.py | 126 | _payload("I'm unable to provide assistance with this request"), id="unable-to-assist" | CODE |
| MEDIUM | src/opensquilla/session/title_quality.py | 34 | {"i'm unable to provide assistance with this reque"} | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/opensquilla/scheduler/timer.py | 82 | # Step 1: recover reservations left by a previous process. Active | COMMENT |
| LOW | src/opensquilla/scheduler/timer.py | 103 | # Step 2: collect missed jobs | COMMENT |
| LOW | src/opensquilla/scheduler/timer.py | 114 | # Step 3: first max_catchup jobs — run with stagger | COMMENT |
| LOW | src/opensquilla/scheduler/timer.py | 146 | # Step 4: fast-forward remaining (except AT one-shots). Delegates to | COMMENT |
| LOW | src/opensquilla/skills/bundled/skill-creator/SKILL.md | 230 | ### Step 1: Understanding the Skill with Concrete Examples | COMMENT |
| LOW | src/opensquilla/skills/bundled/skill-creator/SKILL.md | 247 | ### Step 2: Planning the Reusable Skill Contents | COMMENT |
| LOW | src/opensquilla/skills/bundled/skill-creator/SKILL.md | 271 | ### Step 3: Initializing the Skill | COMMENT |
| LOW | src/opensquilla/skills/bundled/skill-creator/SKILL.md | 309 | ### Step 4: Edit the Skill | COMMENT |
| LOW | src/opensquilla/skills/bundled/skill-creator/SKILL.md | 350 | ### Step 5: Packaging a Skill | COMMENT |
| LOW | src/opensquilla/skills/bundled/skill-creator/SKILL.md | 378 | ### Step 6: Iterate | COMMENT |
| LOW | …ensquilla/skills/bundled/pptx/scripts/render_thumbs.sh | 92 | # Step 1: pptx -> pdf | COMMENT |
| LOW | …ensquilla/skills/bundled/pptx/scripts/render_thumbs.sh | 105 | # Step 2: pdf -> per-page jpg | COMMENT |
| LOW⚡ | src/opensquilla/gateway/websocket.py | 3151 | # Step 1: Send connect.challenge | COMMENT |
| LOW⚡ | src/opensquilla/gateway/websocket.py | 3158 | # Step 2: Pre-auth timeout — client must send connect request | COMMENT |
| LOW | src/opensquilla/gateway/websocket.py | 3170 | # Step 3: Parse the connect request | COMMENT |
| LOW | src/opensquilla/gateway/websocket.py | 3219 | # Step 4: Resolve auth via server-side ScopeResolver | COMMENT |
| LOW | src/opensquilla/gateway/websocket.py | 3253 | # Step 5: Negotiate protocol version | COMMENT |
| LOW | src/opensquilla/gateway/websocket.py | 3307 | # Step 6: Send HelloOk | COMMENT |
| LOW | src/opensquilla/gateway/websocket.py | 3411 | # Step 7: Main message loop | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/opensquilla/scheduler/timer.py | 82 | # Step 1: recover reservations left by a previous process. Active | COMMENT |
| LOW | src/opensquilla/scheduler/timer.py | 103 | # Step 2: collect missed jobs | COMMENT |
| LOW | src/opensquilla/scheduler/timer.py | 114 | # Step 3: first max_catchup jobs — run with stagger | COMMENT |
| LOW | src/opensquilla/scheduler/timer.py | 146 | # Step 4: fast-forward remaining (except AT one-shots). Delegates to | COMMENT |
| LOW | …ensquilla/skills/bundled/pptx/scripts/render_thumbs.sh | 92 | # Step 1: pptx -> pdf | COMMENT |
| LOW | …ensquilla/skills/bundled/pptx/scripts/render_thumbs.sh | 105 | # Step 2: pdf -> per-page jpg | COMMENT |
| LOW⚡ | src/opensquilla/gateway/websocket.py | 3151 | # Step 1: Send connect.challenge | COMMENT |
| LOW⚡ | src/opensquilla/gateway/websocket.py | 3158 | # Step 2: Pre-auth timeout — client must send connect request | COMMENT |
| LOW | src/opensquilla/gateway/websocket.py | 3170 | # Step 3: Parse the connect request | COMMENT |
| LOW | src/opensquilla/gateway/websocket.py | 3219 | # Step 4: Resolve auth via server-side ScopeResolver | COMMENT |
| LOW | src/opensquilla/gateway/websocket.py | 3253 | # Step 5: Negotiate protocol version | COMMENT |
| LOW | src/opensquilla/gateway/websocket.py | 3307 | # Step 6: Send HelloOk | COMMENT |
| LOW | src/opensquilla/gateway/websocket.py | 3411 | # Step 7: Main message loop | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/test_agents/test_registry_write_open_nofollow.py | 46 | # Create the file first so lstat() returns a regular file (not ENOENT). | COMMENT |
| MEDIUM | src/opensquilla/recovery/cleanup.py | 939 | # Creating the persistent compatibility lock changes only its | COMMENT |
| MEDIUM | src/opensquilla/engine/subagent.py | 629 | # Create a dummy completed task as placeholder | COMMENT |
| MEDIUM | src/opensquilla/gateway/model_catalog_refresh.py | 1463 | # Create the child only after the closed check and register it in | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …lla/skills/bundled/skill-creator/scripts/init_skill.py | 256 | Initialize a new skill directory with template SKILL.md. Args: skill_name: Name of the skill p | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_readme_links.py | 56 | # Check if file exists at repo root | COMMENT |
| LOW | src/opensquilla/memory/store.py | 700 | # Check if file changed | COMMENT |
| LOW | …lla/skills/bundled/skill-creator/scripts/init_skill.py | 271 | # Check if directory already exists | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_tools/test_source_edit_tools.py | 413 | "def helper(value):\n" | CODE |
| LOW | tests/test_tools/test_source_edit_tools.py | 428 | "preview": "def helper(value):", | CODE |
| LOW | scripts/live_tokenrhythm_transport.py | 111 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ensquilla/skills/bundled/pptx/scripts/render_thumbs.sh | 7 | # Usage: | COMMENT |