Gajae Code MVP
This report presents the forensic synthetic code analysis of Yeachan-Heo/gajae-code, a TypeScript project with 2,433 GitHub stars. SynthScan v2.0 examined 1,438,797 lines of code across 4428 source files, recording 4689 pattern matches distributed across 22 syntactic categories. The overall adjusted score of 4.2 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
Longitudinal tracking requires multiple scan runs. Once this repository is re-scanned after new commits land, this chart will visualise how the synthetic code signal evolves over time — enabling you to detect whether AI authorship is growing, stabilising, or being actively corrected by human engineers.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 4689 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | python/gjc-sdk/tests/test_frames.py | 6 | def test_reply_serialization_includes_token() -> None: | CODE |
| LOW⚡ | python/gjc-sdk/tests/test_frames.py | 11 | def test_serialization_preserves_nested_user_payload() -> None: | CODE |
| LOW⚡ | python/gjc-sdk/tests/test_frames.py | 18 | def test_unknown_frame_is_preserved() -> None: | CODE |
| LOW⚡ | python/gjc-sdk/tests/test_frames.py | 29 | def test_action_needed_round_trip() -> None: | CODE |
| LOW⚡ | python/gjc-sdk/tests/test_frames.py | 34 | def test_reply_repr_hides_token() -> None: | CODE |
| LOW⚡ | python/gjc-sdk/tests/test_frames.py | 38 | def test_action_resolved_without_session_id_is_typed() -> None: | CODE |
| LOW⚡ | python/gjc-sdk/tests/test_frames.py | 43 | def test_query_page_round_trip() -> None: | CODE |
| LOW | python/gjc-sdk/tests/test_vectors.py | 64 | def test_vector_semantics_and_tolerance(tmp_path: Path) -> None: | CODE |
| LOW | python/gjc-sdk/tests/test_vectors.py | 85 | def test_real_session_enabled_guard() -> None: | CODE |
| LOW | python/gjc-sdk/tests/test_transport.py | 18 | async def test_ws_transport_receives_frame_larger_than_one_megabyte() -> None: | CODE |
| LOW | python/gjc-sdk/tests/test_transport.py | 32 | async def test_socket_transport_receives_frame_larger_than_one_megabyte() -> None: | CODE |
| LOW | python/gjc-sdk/tests/test_transport.py | 53 | async def test_stdio_transport_receives_frame_larger_than_one_megabyte() -> None: | CODE |
| LOW⚡ | python/gjc-sdk/tests/test_discovery.py | 16 | def test_tombstone_allows_empty_token(tmp_path: Path) -> None: | CODE |
| LOW⚡ | python/gjc-sdk/tests/test_discovery.py | 24 | def test_live_empty_token_is_warning_not_endpoint(tmp_path: Path) -> None: | CODE |
| LOW⚡ | python/gjc-sdk/tests/test_discovery.py | 29 | def test_pid_must_be_positive_integer(tmp_path: Path) -> None: | CODE |
| LOW⚡ | python/gjc-sdk/tests/test_discovery.py | 38 | def test_selection_fails_closed(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None: | CODE |
| LOW⚡ | python/gjc-sdk/tests/test_discovery.py | 66 | def test_endpoint_repr_hides_token(tmp_path: Path) -> None: | CODE |
| LOW⚡ | python/gjc-sdk/tests/test_discovery.py | 71 | def test_rejects_unsupported_endpoint_scheme(tmp_path: Path) -> None: | CODE |
| LOW⚡ | python/gjc-sdk/tests/test_discovery.py | 77 | def test_refuses_symlinked_discovery_directory(tmp_path: Path) -> None: | CODE |
| LOW⚡ | python/gjc-sdk/tests/test_discovery.py | 87 | def test_refuses_symlinked_discovery_record(tmp_path: Path) -> None: | CODE |
| LOW⚡ | python/gjc-sdk/tests/test_discovery.py | 97 | def test_stale_token_is_ignored_with_warning(tmp_path: Path) -> None: | CODE |
| LOW | python/gjc-sdk/tests/test_client.py | 36 | async def test_control_correlates_out_of_order_and_preserves_actions() -> None: | CODE |
| LOW | python/gjc-sdk/tests/test_client.py | 56 | async def test_query_returns_paginated_response() -> None: | CODE |
| LOW | python/gjc-sdk/tests/test_client.py | 82 | def test_explicit_session_selection_fails_closed( | CODE |
| LOW | python/gjc-sdk/tests/test_client.py | 99 | def test_non_canonical_vector_is_parse_tolerant() -> None: | CODE |
| LOW | python/gjc-sdk/tests/test_client.py | 150 | async def test_fixture_boots_and_registers_ask_when_available() -> None: | CODE |
| LOW | python/gjc-sdk/tests/test_client.py | 196 | async def test_real_session_all_transports_cleanup() -> None: | CODE |
| LOW | scripts/telegram-daemon-generation-guard.test.ts | 232 | "export function hasSafeChatDaemonStateShape(value: unknown) { return value !== null; }", | CODE |
| LOW | scripts/telegram-daemon-generation-guard.test.ts | 233 | "export function isExactPreUpgradeUnavailableChatDaemonState(value: unknown) { return value === 'unavailable'; }", | CODE |
| LOW | scripts/telegram-daemon-generation-guard.test.ts | 331 | base.set(config, "export function parseNotificationSettingsSnapshot() { return { toolActivity: { enabled: false } }; }" | CODE |
| LOW | scripts/telegram-daemon-generation-guard.test.ts | 332 | head.set(config, "export function parseNotificationSettingsSnapshot() { return { toolActivity: { enabled: true } }; }") | CODE |
| LOW | scripts/telegram-daemon-generation-guard.test.ts | 375 | "export function isExactPreUpgradeUnavailableChatDaemonState(value: unknown) { return value === 'unavailable'; }", | CODE |
| LOW | scripts/telegram-daemon-generation-guard.test.ts | 376 | "export function isExactPreUpgradeUnavailableChatDaemonState(value: unknown) { return value === 'legacy'; }", | CODE |
| LOW | scripts/telegram-daemon-generation-guard.test.ts | 421 | 'function isUnsupportedTelegramDirectoryBarrier(error: unknown) { return (error as { code?: string }).code === "EINV | CODE |
| LOW | scripts/telegram-daemon-generation-guard.test.ts | 427 | 'function isUnsupportedTelegramDirectoryBarrier(error: unknown) { return (error as { code?: string }).code === "EACCE | CODE |
| LOW | scripts/generate-json-schemas.ts | 99 | function settingDefinitionToJsonSchema(settingPath: string, definition: SettingDefinition): JsonSchemaObject { | CODE |
| LOW | scripts/ci-release-build-binaries.ts | 86 | function shouldAdhocSignDarwinBinary(target: BinaryTarget): boolean { | CODE |
| LOW | scripts/ci-dev-affected.ts | 423 | export function isWindowsSessionPathRegressionPath(changedPath: string): boolean { | CODE |
| LOW | scripts/ci-dev-affected.ts | 434 | export function needsWindowsSessionPathRegression(paths: readonly string[]): boolean { | CODE |
| LOW | scripts/ci-dev-affected.ts | 608 | async function assertCheckedOutSourceHead(sourceSha: string): Promise<void> { | CODE |
| LOW | scripts/ci-dev-affected.ts | 984 | function addCodingAgentSdkProductionHostTask(tasks: Map<string, Task>): void { | CODE |
| LOW | scripts/ci-dev-affected.ts | 1029 | function isCodingAgentShardOneCoveragePath(changedPath: string): boolean { | CODE |
| LOW | scripts/ci-dev-affected.ts | 1156 | function isRootPackageReleaseHarnessOnly(paths: readonly string[]): boolean { | CODE |
| LOW | scripts/ci-dev-affected.ts | 1168 | function isReleaseHarnessScriptPath(changedPath: string): boolean { | CODE |
| LOW | scripts/ci-dev-affected.ts | 1206 | function isBridgeClientSdkPackageSmokePath(changedPath: string): boolean { | CODE |
| LOW | scripts/ci-dev-affected.ts | 1316 | async function assertTypeScriptInventoryLive(inventory: BuildInventory): Promise<void> { | CODE |
| LOW | scripts/ci-dev-affected.ts | 1398 | export function requiresCargoWorkspaceEmergency( | CODE |
| LOW | scripts/ci-dev-affected.ts | 1561 | export function validateAffectedAggregate(results: AffectedAggregateResults): void { | CODE |
| LOW | scripts/ci-dev-affected.ts | 1798 | async function readValidatedEvidencePlan(root: string): Promise<{ tasks: Task[]; raw: Uint8Array; mode: PlanMode }> { | CODE |
| LOW | scripts/tool_io.py | 138 | def list_recent_session_files(config: ToolIOConfig) -> list[Path]: | CODE |
| LOW | scripts/check-visible-definitions.ts | 83 | function getIgnoredDefinitionPaths(paths: string[]): string[] { | CODE |
| LOW | scripts/rebrand-inventory.ts | 161 | function listBundledWorkflowSkills(): VisibleDefinition[] { | CODE |
| LOW | scripts/rebrand-inventory.ts | 228 | function collectRootMetadataViolations(): MetadataViolation[] { | CODE |
| LOW | scripts/verify-gjc-state-writers.ts | 105 | function lineLooksLikeGeneratedStringLiteral(line: string): boolean { | CODE |
| LOW | scripts/verify-gjc-state-writers.ts | 109 | function nearbyAssignmentTargetsThisLine(lines: readonly string[], index: number): boolean { | CODE |
| LOW | scripts/verify-gjc-state-writers.ts | 126 | function isGuardedOutsideProjectGjcFallback(lines: readonly string[], index: number): boolean { | CODE |
| LOW | scripts/verify-gjc-state-writers.ts | 132 | function isGuardedOutsideProjectGjcTernaryFallback(lines: readonly string[], index: number): boolean { | CODE |
| LOW | scripts/generate-gjc-plugins.ts | 292 | export function findUnexpectedPluginFiles(files: ReadonlyMap<string, string>, root = pluginsDir): string[] { | CODE |
| LOW | scripts/verify-module-trace.ts | 768 | function literalDynamicImportSpecifiers(source: string): string[] { | CODE |
| LOW | scripts/harness-gates.test.ts | 42 | function structurallyValidBaseline(): string { | CODE |
| 3382 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | Cargo.toml | 65 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 67 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 71 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 73 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 82 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 84 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 87 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 89 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 97 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 99 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 107 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 109 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 112 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 114 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 121 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 123 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 128 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 130 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 135 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 137 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 142 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 144 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 148 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 150 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 154 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 156 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 160 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 162 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 166 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 168 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 174 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 176 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 183 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 185 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 193 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 195 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 200 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 202 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 208 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 210 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 213 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 215 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 221 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 223 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 232 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 234 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 239 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 241 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 244 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 246 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 265 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 267 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 272 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 274 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 279 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 281 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 288 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 290 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 303 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 305 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| 566 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .config/nextest.toml | 1 | # CI reliability policy for cargo-nextest. | COMMENT |
| LOW | artifacts/issue-3900-live-cpa-probe.ts | 1 | // Live probe for issue #3900, via the CPA proxy configured in | COMMENT |
| LOW | crates/brush-builtins-vendored/src/factory.rs | 21 | /// # Arguments | COMMENT |
| LOW | crates/brush-builtins-vendored/src/fc.rs | 201 | COMMENT | |
| LOW | crates/brush-builtins-vendored/src/history.rs | 21 | /// Appends the history from the current session to the history file. | COMMENT |
| LOW | crates/brush-builtins-vendored/src/read.rs | 21 | /// Default line delimiter (newline). | COMMENT |
| LOW | crates/brush-builtins-vendored/src/read.rs | 41 | COMMENT | |
| LOW | crates/brush-builtins-vendored/src/read.rs | 281 | Interrupted, | COMMENT |
| LOW | crates/brush-builtins-vendored/src/read.rs | 301 | /// Single-byte read buffer. | COMMENT |
| LOW | crates/brush-builtins-vendored/src/ulimit.rs | 361 | hard: bool, | COMMENT |
| LOW | crates/brush-builtins-vendored/src/ulimit.rs | 381 | #[arg(short = 'i', default_missing_value = "", num_args(0..=1), help = ResourceDescription::SIGPENDING)] | COMMENT |
| LOW | crates/brush-builtins-vendored/src/ulimit.rs | 401 | /// the maximum real-time scheduling priority | COMMENT |
| LOW | crates/brush-builtins-vendored/src/complete.rs | 521 | /// Set programmable command completion options. | COMMENT |
| LOW | crates/brush-builtins-vendored/src/declare.rs | 41 | crate::minus_or_plus_flag_arg!(MakeExportedFlag, 'x', "Mark the variable for export."); | COMMENT |
| LOW | crates/brush-builtins-vendored/src/declare.rs | 61 | /// variable being shadowed. | COMMENT |
| LOW | crates/brush-builtins-vendored/src/declare.rs | 81 | #[clap(flatten)] // -n | COMMENT |
| LOW | crates/brush-builtins-vendored/src/bind.rs | 41 | pub(crate) struct BindCommand { | COMMENT |
| LOW | crates/brush-builtins-vendored/src/bind.rs | 61 | /// List variables. | COMMENT |
| LOW | crates/pi-shell/src/minimizer.rs | 41 | pub changed: bool, | COMMENT |
| LOW | crates/pi-shell/src/shell.rs | 241 | /// Optional per-stream raw byte sinks for [`execute_shell_streams`]. | COMMENT |
| LOW | crates/pi-shell/src/shell.rs | 1121 | } | COMMENT |
| LOW | crates/pi-shell/src/shell.rs | 1221 | } | COMMENT |
| LOW | crates/pi-shell/src/shell.rs | 1961 | /// **Pipeline carve-out.** Non-interactive brush, non-terminal stdin | COMMENT |
| LOW | crates/pi-shell/src/fixup.rs | 1 | //! Conservative pre-execution rewrites for bash commands. | COMMENT |
| LOW | crates/pi-shell/src/process.rs | 1861 | /// Pure target-classifier separated from process discovery so it is testable | COMMENT |
| LOW | crates/pi-shell/src/process.rs | 1901 | #[cfg(test)] | COMMENT |
| LOW | crates/pi-shell/src/minimizer/primitives.rs | 161 | for line in lines.iter().skip(lines.len() - max_lines / 2) { | COMMENT |
| LOW | crates/pi-shell/src/minimizer/config.rs | 21 | /// N-API opt-in handle for the minimizer. | COMMENT |
| LOW | crates/pi-shell/src/minimizer/plan.rs | 1 | //! Structural analysis of a shell command using `brush-parser`. | COMMENT |
| LOW | crates/pi-shell/src/minimizer/plan.rs | 21 | //! we return `Unsupported` and the engine passes through. | COMMENT |
| LOW | crates/pi-shell/src/minimizer/pipeline.rs | 1 | //! Declarative filter pipelines loaded from TOML. | COMMENT |
| LOW | crates/pi-shell/src/minimizer/engine.rs | 41 | }, | COMMENT |
| LOW | crates/pi-ast/src/summary.rs | 621 | | "input_fields_definition" | COMMENT |
| LOW | crates/pi-ast/src/summary.rs | 661 | #[cfg(feature = "full-langs")] | COMMENT |
| LOW | crates/brush-core-vendored/examples/custom-builtin.rs | 1 | //! Example of implementing a custom builtin command for a brush-core based | COMMENT |
| LOW | crates/brush-core-vendored/examples/custom-builtin.rs | 21 | COMMENT | |
| LOW | crates/brush-core-vendored/examples/custom-builtin.rs | 61 | COMMENT | |
| LOW | crates/brush-core-vendored/src/int_utils.rs | 41 | /// # Type Parameters | COMMENT |
| LOW | crates/brush-core-vendored/src/variables.rs | 21 | /// Whether or not the variable is marked as exported to child processes. | COMMENT |
| LOW | crates/brush-core-vendored/src/variables.rs | 581 | COMMENT | |
| LOW | crates/brush-core-vendored/src/builtins.rs | 21 | ) -> BoxFuture<'_, Result<results::ExecutionResult, error::Error>>; | COMMENT |
| LOW | crates/brush-core-vendored/src/builtins.rs | 121 | /// declarations as arguments. | COMMENT |
| LOW | crates/brush-core-vendored/src/builtins.rs | 281 | .placeholder(styling::AnsiColor::Cyan.on_default()) | COMMENT |
| LOW | crates/brush-core-vendored/src/builtins.rs | 301 | /// #[derive(Parser)] | COMMENT |
| LOW | crates/brush-core-vendored/src/shell.rs | 281 | .call_stack | COMMENT |
| LOW | crates/brush-core-vendored/src/error.rs | 21 | /// Monolithic error type for the shell | COMMENT |
| LOW | crates/brush-core-vendored/src/error.rs | 81 | #[error("not yet implemented: {0}")] | COMMENT |
| LOW | crates/brush-core-vendored/src/error.rs | 461 | /// Convenience function for returning an error for unimplemented functionality. | COMMENT |
| LOW | crates/brush-core-vendored/src/patterns.rs | 101 | } | COMMENT |
| LOW | crates/brush-core-vendored/src/patterns.rs | 841 | /// failing the test via `anyhow::bail!` otherwise. Avoids `panic!` which | COMMENT |
| LOW | crates/brush-core-vendored/src/env.rs | 461 | None | COMMENT |
| LOW | crates/brush-core-vendored/src/env.rs | 501 | self.add(name, var, scope_if_creating) | COMMENT |
| LOW | crates/brush-core-vendored/src/env.rs | 601 | // | COMMENT |
| LOW | crates/brush-core-vendored/src/env.rs | 621 | /// name. | COMMENT |
| LOW | crates/brush-core-vendored/src/terminal.rs | 1 | //! Terminal control utilities. | COMMENT |
| LOW | crates/brush-core-vendored/src/results.rs | 121 | #[derive(Clone, Copy, Default)] | COMMENT |
| LOW | crates/brush-core-vendored/src/completion.rs | 21 | /// Type of action to take to generate completion candidates. | COMMENT |
| LOW | crates/brush-core-vendored/src/completion.rs | 41 | #[clap(name = "directory")] | COMMENT |
| LOW | crates/brush-core-vendored/src/completion.rs | 61 | /// Complete with names of valid shell help topics. | COMMENT |
| LOW | crates/brush-core-vendored/src/completion.rs | 81 | SetOpt, | COMMENT |
| 309 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | scripts/gjc-session/create.test.ts | 62 | print(json.dumps({"schema_version":1,"ok":True,"code":"generation_published","generation":request["owner_generation" | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 63 | elif request["op"] == "plan": | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 101 | print(json.dumps({"schema_version": 1, "ok": True, "code": code, "execution": execution, "server_state": server_stat | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 102 | elif request["op"] == "bootstrap": | CODE |
| HIGH⚡ | scripts/gjc-session/create.test.ts | 130 | print(json.dumps({"schema_version":1,"ok":True,"code":"bootstrapped","native_session_id":receipt_native_id,"server_p | CODE |
| HIGH⚡ | scripts/gjc-session/create.test.ts | 131 | elif request["op"] == "observe_terminal": | CODE |
| HIGH⚡ | scripts/gjc-session/create.test.ts | 140 | print(json.dumps(verdict, separators=(",", ":"))) | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 187 | print(json.dumps(verdict, separators=(",", ":"))) | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 313 | print(json.dumps({"schema_version":1,"ok":True,"code":"generation_published","generation":request["owner_generation" | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 315 | print("{}") | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 433 | print(json.dumps({"schema_version":1,"ok":True,"code":"generation_published","generation":request["owner_generation"]}) | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 439 | print(json.dumps({"schema_version":1,"ok":True,"code":"not_required","execution":{"mode":"direct","argv":request["tmux_ | CODE |
| HIGH⚡ | …/coding-agent/test/core/apply-patch-regression.test.ts | 233 | + return True`, | CODE |
| HIGH⚡ | …/coding-agent/test/core/apply-patch-regression.test.ts | 241 | expect(lines[6]).toBe(" return True"); // Section B changed | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …ing-agent/test/agent-session-irc-ghost-message.test.ts | 83 | return harness.session.agent.state.messages.filter( | CODE |
| CRITICAL | …ges/coding-agent/test/agent-session-irc-roster.test.ts | 94 | return harness.session.agent.state.messages.find( | CODE |
| CRITICAL | …rc/modes/controllers/runtime-mcp-command-controller.ts | 727 | await this.ctx.session.modelRegistry.authStorage.remove(credentialId); | CODE |
| CRITICAL | …ding-agent/src/modes/controllers/command-controller.ts | 444 | const credentialSource = this.ctx.session.modelRegistry.authStorage.describeCredentialSource( | CODE |
| CRITICAL | …ing-agent/src/modes/controllers/selector-controller.ts | 2974 | await this.ctx.session.modelRegistry.authStorage.login( | CODE |
| CRITICAL | …ing-agent/src/modes/controllers/selector-controller.ts | 3050 | await this.ctx.session.modelRegistry.authStorage.logout(providerId); | CODE |
| CRITICAL | …ing-agent/src/modes/controllers/selector-controller.ts | 3088 | this.ctx.session.modelRegistry.authStorage.hasAuth(provider.id), | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | artifacts/issue-3900-live-cpa-probe.ts | 5 | // Step 1: run a real tool-use turn with thinking enabled and capture the | COMMENT |
| LOW⚡ | artifacts/issue-3900-live-cpa-probe.ts | 7 | // Step 2: tamper the thinking text (signature now mismatches), append the | COMMENT |
| LOW | artifacts/issue-3900-live-cpa-probe.ts | 52 | // Step 1: obtain a genuinely signed thinking + tool_use turn. | COMMENT |
| LOW | artifacts/issue-3900-live-cpa-probe.ts | 74 | // Step 2: tamper the signed thinking text and continue with the tool result. | COMMENT |
| LOW | crates/brush-core-vendored/examples/custom-builtin.rs | 80 | // Step 3: Implement the Command trait | COMMENT |
| LOW | crates/brush-core-vendored/examples/custom-builtin.rs | 118 | // Step 4: Integrate your builtin into a shell | COMMENT |
| LOW⚡ | crates/pi-natives/src/pty.rs | 839 | // Step 1: Close the ConPTY input pipe first. | COMMENT |
| LOW⚡ | crates/pi-natives/src/pty.rs | 845 | // Step 2: Drain the reader thread. | COMMENT |
| LOW | crates/pi-natives/src/pty.rs | 880 | // Step 3: Drop master (calls ClosePseudoConsole on Windows). | COMMENT |
| LOW | crates/pi-natives/src/pty.rs | 901 | // Step 4: Join reader thread if it finished. | COMMENT |
| LOW | …es/coding-agent/test/gjc-runtime/state-handoff.test.ts | 686 | // Step 1: D -> R. | COMMENT |
| LOW | …es/coding-agent/test/gjc-runtime/state-handoff.test.ts | 709 | // Step 2: R -> U. | COMMENT |
| LOW⚡ | …est/modes/utils/render-initial-messages-dedupe.test.ts | 125 | // Step 1: one call — represents navigateTree's internal rawContext build. | COMMENT |
| LOW⚡ | …est/modes/utils/render-initial-messages-dedupe.test.ts | 129 | // Step 2: renderInitialMessages with the prebuilt context must NOT call it again. | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 684 | // Step 0: Normalize URL (ensure scheme for special handlers) | COMMENT |
| LOW⚡ | packages/coding-agent/src/tools/fetch.ts | 703 | // Step 1: Try special handlers for known sites (unless raw mode) | COMMENT |
| LOW⚡ | packages/coding-agent/src/tools/fetch.ts | 709 | // Step 2: Fetch page | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 868 | // Step 3: Handle convertible binary files (PDF, DOCX, etc.) | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 902 | // Step 4: Handle non-HTML text content | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 952 | // Step 5: For HTML, try digestible formats first (unless raw mode) | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 1055 | // Step 6: If rendered output is low quality, try more targeted fallbacks | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 245 | // Step 1: initial query was sent on start | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 249 | // Step 2: Mode 2031 notification arrives — queues re-query since initial is pending | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 252 | // Step 3: Complete initial OSC 11 response (light) | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 258 | // Step 4: Complete initial DA1 — should start queued query | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 264 | // Step 5: Complete 2nd OSC 11 response with a different color (dark) | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 267 | // Step 6: Complete 2nd DA1 | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 270 | // Step 7: Verify appearance changed and callback fired | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 33 | // Step 1: Create context with the calculate tool | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 40 | // Step 2: Ask the LLM to make a tool call | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 47 | // Step 3: Get the assistant's response (should contain a tool call) | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 61 | // Step 4: Send a user message WITHOUT providing tool result | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 69 | // Step 5: The fix should filter out the orphaned tool call, and the request should succeed | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | artifacts/issue-3900-live-cpa-probe.ts | 5 | // Step 1: run a real tool-use turn with thinking enabled and capture the | COMMENT |
| LOW⚡ | artifacts/issue-3900-live-cpa-probe.ts | 7 | // Step 2: tamper the thinking text (signature now mismatches), append the | COMMENT |
| LOW | artifacts/issue-3900-live-cpa-probe.ts | 52 | // Step 1: obtain a genuinely signed thinking + tool_use turn. | COMMENT |
| LOW | artifacts/issue-3900-live-cpa-probe.ts | 74 | // Step 2: tamper the signed thinking text and continue with the tool result. | COMMENT |
| LOW | crates/brush-core-vendored/examples/custom-builtin.rs | 80 | // Step 3: Implement the Command trait | COMMENT |
| LOW | crates/brush-core-vendored/examples/custom-builtin.rs | 118 | // Step 4: Integrate your builtin into a shell | COMMENT |
| LOW⚡ | crates/pi-natives/src/pty.rs | 839 | // Step 1: Close the ConPTY input pipe first. | COMMENT |
| LOW⚡ | crates/pi-natives/src/pty.rs | 845 | // Step 2: Drain the reader thread. | COMMENT |
| LOW | crates/pi-natives/src/pty.rs | 880 | // Step 3: Drop master (calls ClosePseudoConsole on Windows). | COMMENT |
| LOW | crates/pi-natives/src/pty.rs | 901 | // Step 4: Join reader thread if it finished. | COMMENT |
| LOW | …es/coding-agent/test/gjc-runtime/state-handoff.test.ts | 686 | // Step 1: D -> R. | COMMENT |
| LOW | …es/coding-agent/test/gjc-runtime/state-handoff.test.ts | 709 | // Step 2: R -> U. | COMMENT |
| LOW⚡ | …est/modes/utils/render-initial-messages-dedupe.test.ts | 125 | // Step 1: one call — represents navigateTree's internal rawContext build. | COMMENT |
| LOW⚡ | …est/modes/utils/render-initial-messages-dedupe.test.ts | 129 | // Step 2: renderInitialMessages with the prebuilt context must NOT call it again. | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 684 | // Step 0: Normalize URL (ensure scheme for special handlers) | COMMENT |
| LOW⚡ | packages/coding-agent/src/tools/fetch.ts | 703 | // Step 1: Try special handlers for known sites (unless raw mode) | COMMENT |
| LOW⚡ | packages/coding-agent/src/tools/fetch.ts | 709 | // Step 2: Fetch page | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 868 | // Step 3: Handle convertible binary files (PDF, DOCX, etc.) | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 902 | // Step 4: Handle non-HTML text content | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 952 | // Step 5: For HTML, try digestible formats first (unless raw mode) | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 1055 | // Step 6: If rendered output is low quality, try more targeted fallbacks | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 245 | // Step 1: initial query was sent on start | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 249 | // Step 2: Mode 2031 notification arrives — queues re-query since initial is pending | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 252 | // Step 3: Complete initial OSC 11 response (light) | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 258 | // Step 4: Complete initial DA1 — should start queued query | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 264 | // Step 5: Complete 2nd OSC 11 response with a different color (dark) | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 267 | // Step 6: Complete 2nd DA1 | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 270 | // Step 7: Verify appearance changed and callback fired | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 33 | // Step 1: Create context with the calculate tool | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 40 | // Step 2: Ask the LLM to make a tool call | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 47 | // Step 3: Get the assistant's response (should contain a tool call) | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 61 | // Step 4: Send a user message WITHOUT providing tool result | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 69 | // Step 5: The fix should filter out the orphaned tool call, and the request should succeed | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/pi-shell/src/minimizer/filters/gt.rs | 221 | assert!(!out.text.contains("user@example.com")); | CODE |
| LOW⚡ | scripts/gjc-session/create.test.ts | 974 | ["schema", JSON.stringify({ schema_version: 2, session_id: "placeholder", generation: "prior" })], | CODE |
| LOW⚡ | scripts/gjc-session/create.test.ts | 976 | ["empty", JSON.stringify({ schema_version: 1, session_id: "placeholder", generation: "" })], | CODE |
| LOW⚡ | scripts/gjc-session/create.test.ts | 977 | ["traversal", JSON.stringify({ schema_version: 1, session_id: "placeholder", generation: "../outside" })], | CODE |
| LOW⚡ | scripts/gjc-session/create.test.ts | 982 | const bytes = typeof body === "string" && (label === "schema" || label === "empty" || label === "traversal") ? body.re | CODE |
| LOW | scripts/gjc-session/create.test.ts | 1005 | { schema_version: 1, generation: "prior", session_id: "placeholder", classification: "unexpected_owner_loss", dedupe_k | CODE |
| LOW | scripts/gjc-session/create.test.ts | 1006 | { schema_version: 1, generation: "prior", session_id: "placeholder", classification: "unknown", dedupe_key: "bad" }, | CODE |
| LOW | packages/coding-agent/test/auth-broker-import.test.ts | 241 | email: "foo@bar.com", | CODE |
| LOW | packages/coding-agent/test/auth-broker-import.test.ts | 264 | expect(persisted?.email).toBe("foo@bar.com"); | CODE |
| LOW | …coding-agent/test/custom-model-preset-creation.test.ts | 38 | name: "placeholder", | CODE |
| LOW | packages/coding-agent/test/sdk-skills.test.ts | 114 | fs.writeFileSync(path.join(userAgentDir, "placeholder.txt"), "placeholder"); | CODE |
| LOW | packages/coding-agent/test/acp-builtins.test.ts | 340 | metadata: { email: "user@example.com" }, | CODE |
| LOW | …ckages/coding-agent/test/notifications-service.test.ts | 894 | [endpoint]: JSON.stringify({ sessionId: "placeholder", url: "ws://x", token: "t", pid: 999 }), | CODE |
| LOW | …/issue-3761-symlinked-notifications-activation.test.ts | 20 | const BOT_TOKEN = "123456:AA-fake-token-for-issue-3761"; | CODE |
| LOW | …ing-agent/test/agent-session-tool-rebuild-skip.test.ts | 398 | const dynamicTool = createMcpCustomTool("mcp__nucleus_search", "nucleus", "search", "placeholder"); | CODE |
| LOW | …oding-agent/test/runtime-mcp/manager-lifecycle.test.ts | 1439 | env: { TOKEN: "placeholder" }, | CODE |
| LOW | …oding-agent/test/runtime-mcp/manager-lifecycle.test.ts | 1474 | env: { TOKEN: "placeholder" }, | CODE |
| LOW | …ages/coding-agent/src/gjc-runtime/ultragoal-runtime.ts | 1717 | return !["todo", "tbd", "n/a", "na", "none", "placeholder", "empty", "stub"].includes(normalized); | CODE |
| LOW⚡ | packages/coding-agent/src/session/session-manager.ts | 3441 | const summary = materializeResidentValueSync(entry.summary, stores, "summary", cache, "placeholder"); | CODE |
| LOW⚡ | packages/coding-agent/src/session/session-manager.ts | 3447 | "placeholder", | CODE |
| LOW⚡ | packages/coding-agent/src/session/session-manager.ts | 3457 | "placeholder", | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 200 | type ResidentBlobMissingPolicy = "throw" | "placeholder"; | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 3241 | if (missingPolicy === "placeholder" && err instanceof ResidentBlobMissingError) { | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 3325 | return materializeResidentEntrySync(entry, stores, cache, "placeholder"); | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 3389 | return materializeResidentEntriesSync(entries, stores, "placeholder"); | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 3397 | return materializeResidentEntrySync(entry, stores, cache, "placeholder"); | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 3483 | "placeholder", | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 5586 | missingPolicy: "placeholder", | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 5621 | missingPolicy: "placeholder", | CODE |
| LOW | packages/tui/bench/sanitize.ts | 286 | const bigAnsi = ("\x1b[31mred\x1b[0m " + "lorem ipsum dolor ".repeat(20)).repeat(5); | CODE |
| LOW | packages/tui/test/markdown.test.ts | 1069 | expect(joinedPlain.includes("user@example.com"), "Should contain email").toBeTruthy(); | CODE |
| LOW | packages/tui/src/components/markdown.ts | 949 | // text="foo@bar.com" but href="mailto:foo@bar.com") | COMMENT |
| LOW | packages/agent/test/pruning-redteam.test.ts | 378 | const failure = toolEntry("multi-block", "edit", "placeholder"); | CODE |
| LOW | packages/agent/test/pruning-redteam.test.ts | 401 | const emptyFirst = toolEntry("empty-first", "edit", "placeholder"); | CODE |
| LOW | packages/agent/test/pruning-redteam.test.ts | 419 | const output = toolEntry("all-text", "edit", "placeholder"); | CODE |
| LOW | packages/agent/test/pruning-redteam.test.ts | 440 | const output = toolEntry("mixed", "edit", "placeholder"); | CODE |
| LOW | packages/ai/test/claude-usage-headers.test.ts | 65 | email: "user@example.com", | CODE |
| LOW | packages/ai/test/claude-usage-retry.test.ts | 27 | email: "user@example.com", | CODE |
| LOW | packages/ai/test/total-tokens.test.ts | 38 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna a | CODE |
| LOW | packages/ai/test/total-tokens.test.ts | 38 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna a | CODE |
| LOW | packages/ai/test/anthropic-oauth.test.ts | 131 | email_address: "user@example.com", | CODE |
| LOW | packages/ai/test/anthropic-oauth.test.ts | 145 | expect(result.email).toBe("user@example.com"); | CODE |
| LOW | packages/ai/test/oauth-xai.test.ts | 195 | email: "user@example.com", | CODE |
| LOW | packages/ai/test/anthropic-tool-schema.test.ts | 458 | default: "user@example.com", | CODE |
| LOW | packages/ai/test/anthropic-tool-schema.test.ts | 465 | default: "user@example.com", // SDK would move this into description | CODE |
| LOW | packages/ai/test/remote-auth-store.test.ts | 284 | email: "user@example.com", | CODE |
| LOW⚡ | packages/ai/test/context-overflow.test.ts | 33 | // Lorem ipsum paragraph for realistic token estimation | COMMENT |
| LOW⚡ | packages/ai/test/context-overflow.test.ts | 34 | const LOREM_IPSUM = `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore | CODE |
| LOW⚡ | packages/ai/test/context-overflow.test.ts | 34 | const LOREM_IPSUM = `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore | CODE |
| LOW | packages/ai/src/utils/oauth/perplexity.ts | 94 | placeholder: "user@example.com", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | python/gjc-sdk/tests/test_vectors.py | 1 | CODE | |
| LOW | python/gjc-sdk/tests/test_transport.py | 1 | CODE | |
| LOW | python/gjc-sdk/tests/test_client.py | 1 | CODE | |
| LOW | python/gjc-sdk/gjc_sdk/discovery.py | 1 | CODE | |
| LOW | python/gjc-sdk/gjc_sdk/transport.py | 1 | CODE | |
| LOW | python/gjc-sdk/gjc_sdk/client.py | 1 | CODE | |
| LOW | python/gjc-sdk/gjc_sdk/__init__.py | 1 | CODE | |
| LOW | python/gjc-sdk/gjc_sdk/__init__.py | 2 | CODE | |
| LOW | python/gjc-sdk/gjc_sdk/__init__.py | 2 | CODE | |
| LOW | python/gjc-sdk/gjc_sdk/__init__.py | 2 | CODE | |
| LOW | python/gjc-sdk/gjc_sdk/__init__.py | 2 | CODE | |
| LOW | python/gjc-sdk/gjc_sdk/__init__.py | 2 | CODE | |
| LOW | python/gjc-sdk/gjc_sdk/__init__.py | 2 | CODE | |
| LOW | python/gjc-sdk/gjc_sdk/frames.py | 1 | CODE | |
| LOW | scripts/tool_io.py | 3 | CODE | |
| LOW | scripts/analyze_small_edits.py | 3 | CODE | |
| LOW | scripts/session-stats/sync.py | 27 | CODE | |
| LOW | scripts/session-stats/sync.py | 39 | CODE | |
| LOW | scripts/session-stats/analyze_search_relevance.py | 22 | CODE | |
| LOW | scripts/session-stats/analyze_selector_reads.py | 24 | CODE | |
| LOW | scripts/session-stats/plot_tools.py | 18 | CODE | |
| LOW | scripts/session-stats/plot_read_summarizer.py | 18 | CODE | |
| LOW | scripts/session-stats/optimize_read_config.py | 26 | CODE | |
| LOW | scripts/session-stats/optimize_read_config.py | 30 | CODE | |
| LOW | scripts/session-stats/analyze.py | 13 | CODE | |
| LOW | scripts/session-stats/harmony_backtest.py | 11 | CODE | |
| LOW | scripts/session-stats/harmony_backtest.py | 19 | CODE | |
| LOW | scripts/session-stats/read_optimizer.py | 23 | CODE | |
| LOW | packages/coding-agent/bench/perf-corpus-rlm-analysis.py | 10 | CODE | |
| LOW | packages/coding-agent/src/eval/py/runner.py | 26 | CODE | |
| LOW | packages/coding-agent/src/eval/py/prelude.py | 1 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/session-stats/sync.py | 441 | except Exception: | CODE |
| LOW | scripts/session-stats/sync.py | 661 | except Exception: | CODE |
| LOW | scripts/session-stats/sync.py | 880 | except Exception: | CODE |
| LOW | scripts/session-stats/sync.py | 974 | except Exception as e: | CODE |
| LOW | scripts/session-stats/sync.py | 996 | except Exception as e: | CODE |
| LOW | scripts/session-stats/analyze.py | 466 | except Exception: | STRING |
| LOW | scripts/session-stats/analyze.py | 654 | except Exception: | STRING |
| LOW | scripts/session-stats/analyze.py | 793 | except Exception: | STRING |
| LOW | scripts/session-stats/analyze.py | 806 | except Exception: | STRING |
| LOW | scripts/gjc-session/postmortem.sh | 125 | except Exception: | CODE |
| LOW | scripts/gjc-session/create.sh | 257 | except Exception: | CODE |
| LOW | scripts/gjc-session/create.sh | 283 | except Exception: | CODE |
| LOW | scripts/gjc-session/create.sh | 404 | except Exception: | CODE |
| LOW | scripts/gjc-session/create.sh | 428 | except Exception: | CODE |
| LOW | scripts/gjc-session/create.sh | 447 | except Exception: pass | CODE |
| LOW | scripts/gjc-session/create.sh | 744 | except Exception: raise SystemExit(1) | CODE |
| LOW | scripts/gjc-session/create.sh | 795 | except Exception: | CODE |
| LOW | scripts/gjc-session/create.sh | 817 | except Exception: | CODE |
| LOW | scripts/gjc-session/create.sh | 870 | except Exception: | CODE |
| MEDIUM | scripts/gjc-session/create.sh | 122 | def valid_started(): | CODE |
| LOW | scripts/gjc-session/issue-1938-cgroup-repro.sh | 406 | except Exception: raise SystemExit(1) | CODE |
| LOW⚡ | packages/coding-agent/src/eval/py/runner.py | 60 | except Exception: | CODE |
| LOW⚡ | packages/coding-agent/src/eval/py/runner.py | 320 | except Exception: | CODE |
| LOW⚡ | packages/coding-agent/src/eval/py/runner.py | 323 | except Exception: | CODE |
| LOW⚡ | packages/coding-agent/src/eval/py/runner.py | 327 | except Exception: | CODE |
| LOW⚡ | packages/coding-agent/src/eval/py/runner.py | 708 | except Exception: | CODE |
| LOW⚡ | packages/coding-agent/src/eval/py/runner.py | 718 | except Exception: | CODE |
| LOW⚡ | packages/coding-agent/src/eval/py/runner.py | 846 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/runner.py | 303 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/runner.py | 306 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/runner.py | 645 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/runner.py | 660 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/runner.py | 672 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/runner.py | 903 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/prelude.py | 33 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | python/gjc-sdk/tests/test_vectors.py | 32 | CODE | |
| LOW | python/gjc-sdk/gjc_sdk/client.py | 94 | CODE | |
| LOW | python/gjc-sdk/gjc_sdk/frames.py | 101 | CODE | |
| LOW | scripts/tool_io.py | 154 | CODE | |
| LOW | scripts/analyze_small_edits.py | 249 | CODE | |
| LOW | scripts/session-stats/sync.py | 284 | CODE | |
| LOW | scripts/session-stats/sync.py | 417 | CODE | |
| LOW | scripts/session-stats/sync.py | 498 | CODE | |
| LOW | scripts/session-stats/sync.py | 590 | CODE | |
| LOW | scripts/session-stats/analyze.py | 397 | CODE | |
| LOW | scripts/session-stats/analyze.py | 573 | CODE | |
| LOW | scripts/session-stats/read_optimizer.py | 261 | CODE | |
| LOW | scripts/session-stats/read_optimizer.py | 316 | CODE | |
| LOW | scripts/session-stats/read_optimizer.py | 430 | CODE | |
| LOW | packages/coding-agent/bench/perf-corpus-rlm-analysis.py | 204 | CODE | |
| LOW | packages/coding-agent/bench/perf-corpus-rlm-analysis.py | 1515 | CODE | |
| LOW | packages/coding-agent/bench/perf-corpus-rlm-analysis.py | 1992 | CODE | |
| LOW | packages/coding-agent/src/eval/py/runner.py | 332 | CODE | |
| LOW | packages/coding-agent/src/eval/py/prelude.py | 175 | CODE | |
| LOW | packages/coding-agent/src/eval/py/prelude.py | 324 | CODE | |
| LOW | packages/ai/scripts/cursor-log.py | 66 | CODE | |
| LOW | packages/ai/scripts/cursor-log.py | 145 | CODE | |
| LOW | packages/ai/scripts/cursor-log.py | 203 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docs/tui-runtime-internals.md | 171 | ## Status and loader orchestration | COMMENT |
| MEDIUM | docs/handoff-generation-pipeline.md | 220 | ## Short-session and minimum-content guardrails | COMMENT |
| MEDIUM | docs/hermes-mcp-bridge.md | 142 | ## Turn orchestration flow | COMMENT |
| MEDIUM | packages/coding-agent/src/commands/commit.ts | 35 | // The agentic commit flow opens HTTP/2 keep-alive sockets to the model | COMMENT |
| MEDIUM | packages/ai/test/issue-1227-repro.test.ts | 105 | // The critical /btw scenario: session already has tool history (prior agentic | COMMENT |
| MEDIUM | packages/natives/scripts/gen-enums.ts | 349 | // content replacement — no scaffold, no template file. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | artifacts/dev-14ae92-ci-repair-receipt.json | 45 | "mechanism": "#4004 changed resolveIntentTracingEnabled from `(setting||flag) && hasUI` to `(setting||flag) && !su | CODE |
| MEDIUM | packages/coding-agent/test/sdk-broker.test.ts | 1084 | // Poll instead of a fixed delay so the assertion is robust to CI scheduling | COMMENT |
| MEDIUM | …/coding-agent/test/harness-control-plane/owner.test.ts | 309 | // Poll for the owner to release the lease + close the endpoint (robust under load). | COMMENT |
| MEDIUM | packages/utils/src/which.ts | 1 | // OS-agnostic "which" helper with robust macOS toolchain lookup and flexible cache control. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/install.sh | 69 | # Check if bun is available | COMMENT |
| LOW | scripts/install.sh | 118 | # Check if git is available | COMMENT |
| LOW | scripts/install.sh | 137 | # Check if git-lfs is available | COMMENT |
| LOW | scripts/install.sh | 249 | # Check if in PATH | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …/coding-agent/test/core/apply-patch-regression.test.ts | 216 | def helper(): | CODE |
| LOW⚡ | …/coding-agent/test/core/apply-patch-regression.test.ts | 220 | def helper(): | CODE |
| LOW⚡ | …/coding-agent/test/core/apply-patch-regression.test.ts | 230 | diff: `@@ -6,2 +6,2 @@ def helper(): | CODE |
| LOW⚡ | …/coding-agent/test/core/apply-patch-regression.test.ts | 231 | def helper(): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | scripts/session-stats/harmony_backtest.py | 30 | NULLISH_RE = re.compile(r"\b(undefined|null)\b") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/coding-agent/src/eval/py/prelude.py | 182 | Read task/agent output by ID. Returns text or JSON depending on format. Args: *ids: Output | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/ai/README.md | 923 | apiKey: "your-api-key", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | scripts/gjc-session/create.sh | 2 | # Create a public-safe GJC tmux session through the owner-isolation protocol. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/coding-agent/src/web/scrapers/terraform.ts | 137 | // Usage example | COMMENT |
| LOW | packages/coding-agent/src/web/scrapers/terraform.ts | 251 | // Usage example | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/natives/test/native.test.ts | 35 | // TODO: implement | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | python/gjc-sdk/gjc_sdk/__init__.py | 4 | __all__ = [ | CODE |