Gajae Code MVP
This report summarizes scanner evidence for Yeachan-Heo/gajae-code, a TypeScript project with 3,043 GitHub stars. SynthScan examined 2,404,514 lines of code across 6161 source files, recording 7342 pattern matches distributed across 22 syntactic categories. The legacy adjusted pattern signal is 3.7 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 6403 finding(s).
Are imports declared and package/API names verified? 139 finding(s).
Are wrappers, guards, and repeated structures necessary? 6389 finding(s).
Which changes need focused human review? 7342 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 7342 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | python/gjc-sdk/tests/test_generated_skill_template.py | 86 | def test_python_template_composes_queries_through_broker_cli_and_redacts( | CODE |
| LOW | python/gjc-sdk/tests/test_generated_skill_template.py | 104 | def test_python_template_requires_exact_bound_approval( | CODE |
| LOW | python/gjc-sdk/tests/test_generated_skill_template.py | 161 | def test_python_template_requires_explicit_session_and_rejects_bypass_inputs( | CODE |
| LOW | python/gjc-sdk/tests/test_generated_skill_template.py | 200 | def test_python_template_rejects_forbidden_operation_before_approval( | CODE |
| LOW | python/gjc-sdk/tests/test_generated_skill_template.py | 224 | def test_python_template_binds_workflow_gate_answer_to_session( | CODE |
| LOW | python/gjc-sdk/tests/test_generated_skill_template.py | 256 | def test_python_template_contains_no_endpoint_authority_bypass() -> None: | CODE |
| LOW | docs/examples/gjc-hooks/pre/bash-hol-guard.ts | 24 | export default function registerHolGuardPreflight(api: HookApi): void { | CODE |
| LOW | integrations/streamdeck-cmux/plugin/plugin.js | 162 | async function savedSessionProjectCounts() { | CODE |
| LOW | scripts/benchmark-code-mode-exploratory-results.json | 2354 | "finalAnswer": "{\"answer\":\"In openai-codex-responses.ts, the freeform custom-tool gate checks the model c | CODE |
| LOW | scripts/benchmark-code-mode-exploratory-results.json | 2799 | "finalAnswer": "{\"answer\":\"In openai-codex-responses.ts, the freeform custom-tool gate checks the model c | CODE |
| LOW | scripts/benchmark-code-mode-exploratory-results.json | 2843 | "resultExcerpt": " */\nfunction supportsFreeformApplyPatchCodex(model: Model<\"openai-codex-responses\"> | CODE |
| LOW | scripts/benchmark-code-mode-exploratory-results.json | 3272 | "finalAnswer": "{\"answer\":\"In openai-codex-responses.ts, freeform custom tools are gated by the model cap | CODE |
| LOW | scripts/benchmark-code-mode-exploratory-results.json | 3316 | "resultExcerpt": " */\nfunction supportsFreeformApplyPatchCodex(model: Model<\"openai-codex-responses\"> | CODE |
| LOW | scripts/benchmark-code-mode-exploratory-results.json | 4167 | "resultExcerpt": "# packages/coding-agent/src/tools/\n## output-meta.ts\n 985|\n*986|const BODY_TRUNCATI | CODE |
| LOW | scripts/worktree-deps.ts | 97 | function defaultPackageTargetExists(resolvedPath: string): boolean { | CODE |
| LOW | scripts/worktree-deps.ts | 106 | export function findForeignWorkspaceLinks(repoRoot: string): ForeignWorkspaceLink[] { | CODE |
| LOW | scripts/worktree-deps.ts | 158 | export function listWorkspacePackageNames(repoRoot: string): string[] { | CODE |
| LOW | scripts/worktree-deps.ts | 184 | export function inspectWorkspaceDependencies(probe: WorkspaceDependencyProbe): WorkspaceDependencySnapshot { | CODE |
| LOW | scripts/worktree-deps.ts | 223 | export function formatWorkspaceDependencyFailure(snapshot: WorkspaceDependencySnapshot): string { | CODE |
| LOW | scripts/telegram-daemon-generation-guard.test.ts | 274 | "export function hasSafeChatDaemonStateShape(value: unknown) { return value !== null; }", | CODE |
| LOW | scripts/telegram-daemon-generation-guard.test.ts | 275 | "export function isExactPreUpgradeUnavailableChatDaemonState(value: unknown) { return value === 'unavailable'; }", | CODE |
| LOW | scripts/telegram-daemon-generation-guard.test.ts | 384 | base.set(config, "export function parseNotificationSettingsSnapshot() { return { toolActivity: { enabled: false } }; }" | CODE |
| LOW | scripts/telegram-daemon-generation-guard.test.ts | 385 | head.set(config, "export function parseNotificationSettingsSnapshot() { return { toolActivity: { enabled: true } }; }") | CODE |
| LOW | scripts/telegram-daemon-generation-guard.test.ts | 428 | "export function isExactPreUpgradeUnavailableChatDaemonState(value: unknown) { return value === 'unavailable'; }", | CODE |
| LOW | scripts/telegram-daemon-generation-guard.test.ts | 429 | "export function isExactPreUpgradeUnavailableChatDaemonState(value: unknown) { return value === 'legacy'; }", | CODE |
| LOW | scripts/telegram-daemon-generation-guard.test.ts | 474 | 'function isUnsupportedTelegramDirectoryBarrier(error: unknown) { return (error as { code?: string }).code === "EINV | CODE |
| LOW | scripts/telegram-daemon-generation-guard.test.ts | 480 | 'function isUnsupportedTelegramDirectoryBarrier(error: unknown) { return (error as { code?: string }).code === "EACCE | CODE |
| LOW | scripts/generate-json-schemas.ts | 86 | function stampMaxTokensSafeCeiling(node: unknown): void { | CODE |
| LOW | scripts/generate-json-schemas.ts | 129 | function settingDefinitionToJsonSchema(settingPath: string, definition: SettingDefinition): JsonSchemaObject { | CODE |
| LOW | scripts/generate-json-schemas.ts | 200 | function constrainedRecordSelectorSchema(valueSchema: { | CODE |
| LOW | scripts/macos-code-signing.ts | 17 | export function buildMacOSAdHocCodeSignCommand(requirementPath: string, binaryPath: string): string[] { | CODE |
| LOW | scripts/ci-release-build-binaries.ts | 87 | function shouldAdhocSignDarwinBinary(target: BinaryTarget): boolean { | CODE |
| LOW | scripts/ci-dev-affected.ts | 30 | export function isTelegramDaemonGenerationGuardFile(changedPath: string): boolean { | CODE |
| LOW | scripts/ci-dev-affected.ts | 34 | export function needsTelegramDaemonGenerationGuard(paths: readonly string[]): boolean { | CODE |
| LOW | scripts/ci-dev-affected.ts | 648 | export function isWindowsSessionPathRegressionPath(changedPath: string): boolean { | CODE |
| LOW | scripts/ci-dev-affected.ts | 720 | export function needsWindowsSessionPathRegression(paths: readonly string[]): boolean { | CODE |
| LOW | scripts/ci-dev-affected.ts | 900 | async function assertCheckedOutSourceHead(sourceSha: string): Promise<void> { | CODE |
| LOW | scripts/ci-dev-affected.ts | 1373 | function addCodingAgentSdkProductionHostTask(tasks: Map<string, Task>): void { | CODE |
| LOW | scripts/ci-dev-affected.ts | 1416 | function isCodingAgentShardOneCoveragePath(changedPath: string): boolean { | CODE |
| LOW | scripts/ci-dev-affected.ts | 1575 | function isRootPackageReleaseHarnessOnly(paths: readonly string[]): boolean { | CODE |
| LOW | scripts/ci-dev-affected.ts | 1587 | function isReleaseHarnessScriptPath(changedPath: string): boolean { | CODE |
| LOW | scripts/ci-dev-affected.ts | 1731 | async function assertTypeScriptInventoryLive(inventory: BuildInventory): Promise<void> { | CODE |
| LOW | scripts/ci-dev-affected.ts | 1813 | export function requiresCargoWorkspaceEmergency( | CODE |
| LOW | scripts/ci-dev-affected.ts | 1981 | export function validateAffectedAggregate(results: AffectedAggregateResults): void { | CODE |
| LOW | scripts/ci-dev-affected.ts | 2218 | async function readValidatedEvidencePlan(root: string): Promise<{ tasks: Task[]; raw: Uint8Array; mode: PlanMode }> { | CODE |
| LOW | scripts/tool_io.py | 138 | def list_recent_session_files(config: ToolIOConfig) -> list[Path]: | CODE |
| LOW | scripts/check-visible-definitions.ts | 83 | function getIgnoredDefinitionPaths(paths: string[]): string[] { | CODE |
| LOW | scripts/rebrand-inventory.ts | 166 | function listBundledWorkflowSkills(): VisibleDefinition[] { | CODE |
| LOW | scripts/rebrand-inventory.ts | 288 | function collectRootMetadataViolations(): MetadataViolation[] { | CODE |
| LOW | scripts/verify-gjc-state-writers.ts | 171 | function lineLooksLikeGeneratedStringLiteral(line: string): boolean { | CODE |
| LOW | scripts/verify-gjc-state-writers.ts | 175 | function nearbyAssignmentTargetsThisLine(lines: readonly string[], index: number): boolean { | CODE |
| LOW | scripts/verify-gjc-state-writers.ts | 198 | function isGuardedOutsideProjectGjcFallback(lines: readonly string[], index: number): boolean { | CODE |
| LOW | scripts/verify-gjc-state-writers.ts | 204 | function isGuardedOutsideProjectGjcTernaryFallback(lines: readonly string[], index: number): boolean { | CODE |
| LOW | scripts/generate-gjc-plugins.ts | 430 | export function findUnexpectedPluginFiles(files: ReadonlyMap<string, string>, root = pluginsDir): string[] { | CODE |
| LOW | scripts/verify-module-trace.ts | 768 | function literalDynamicImportSpecifiers(source: string): string[] { | CODE |
| LOW | scripts/harness-gates.test.ts | 44 | function structurallyValidBaseline(): string { | CODE |
| LOW | scripts/generate-gjc-sdk-skills.ts | 105 | function isSameRegularFileIdentity(first: RegularFileIdentity, second: RegularFileIdentity): boolean { | CODE |
| LOW | scripts/generate-gjc-sdk-skills.ts | 148 | export function validatePromptAllowlistConsistency(): string | null { | CODE |
| LOW | scripts/generate-gjc-sdk-skills.ts | 543 | export async function findUnexpectedSdkSkillFiles(files: ReadonlyMap<string, string>, root = bundleDir): Promise<string[ | CODE |
| LOW | scripts/run-sdk-production-host-isolated.ts | 32 | export async function runSdkProductionHostIsolated( | CODE |
| 5529 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | Cargo.toml | 71 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 73 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 77 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 79 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 88 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 90 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 93 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 95 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 103 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 105 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 113 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 115 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 118 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 120 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 127 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 129 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 134 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 136 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 141 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 143 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 149 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 151 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 155 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 157 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 161 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 163 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 168 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 170 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 174 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 176 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 182 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 184 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 195 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 197 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 205 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 207 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 212 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 214 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 221 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 223 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 226 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 228 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 236 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 238 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 248 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 250 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 255 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 257 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 260 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 262 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 289 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 291 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 296 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 298 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 304 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 306 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 314 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 319 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 342 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | Cargo.toml | 344 | # ────────────────────────────────────────────────────────────────────────────── | COMMENT |
| 682 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bunfig.toml | 21 | # Untracked test working space (AGENTS.md, issue #4420). Debugging and | COMMENT |
| LOW | .config/nextest.toml | 1 | # CI reliability policy for cargo-nextest. | COMMENT |
| LOW | crates/pi-walker/src/lib.rs | 1 | // Vendored from oh-my-pi (MIT) crates/pi-walker/src/lib.rs @ | COMMENT |
| LOW | crates/pi-walker/src/lib.rs | 81 | COMMENT | |
| LOW | crates/pi-walker/src/lib.rs | 141 | /// Size metadata policy for high-level requests. | COMMENT |
| LOW | crates/pi-walker/src/lib.rs | 521 | pub enum WalkRank { | COMMENT |
| LOW | crates/pi-walker/src/lib.rs | 981 | COMMENT | |
| LOW | crates/pi-walker/src/lib.rs | 1101 | Ok(stats) | COMMENT |
| LOW | crates/pi-diff/src/lib.rs | 1 | // Vendored from oh-my-pi (MIT) crates/pi-diff/src/lib.rs @ | COMMENT |
| LOW | crates/brush-builtins-vendored/src/factory.rs | 21 | /// # Arguments | COMMENT |
| LOW | crates/brush-builtins-vendored/src/fc.rs | 201 | COMMENT | |
| LOW | crates/brush-builtins-vendored/src/history.rs | 21 | /// Appends the history from the current session to the history file. | COMMENT |
| LOW | crates/brush-builtins-vendored/src/read.rs | 41 | COMMENT | |
| LOW | crates/brush-builtins-vendored/src/read.rs | 281 | } | COMMENT |
| LOW | crates/brush-builtins-vendored/src/read.rs | 301 | InputNotReady, | COMMENT |
| LOW | crates/brush-builtins-vendored/src/ulimit.rs | 361 | hard: bool, | COMMENT |
| LOW | crates/brush-builtins-vendored/src/ulimit.rs | 381 | #[arg(short = 'i', default_missing_value = "", num_args(0..=1), help = ResourceDescription::SIGPENDING)] | COMMENT |
| LOW | crates/brush-builtins-vendored/src/ulimit.rs | 401 | /// the maximum real-time scheduling priority | COMMENT |
| LOW | crates/brush-builtins-vendored/src/declare.rs | 41 | crate::minus_or_plus_flag_arg!(MakeExportedFlag, 'x', "Mark the variable for export."); | COMMENT |
| LOW | crates/brush-builtins-vendored/src/declare.rs | 61 | /// variable being shadowed. | COMMENT |
| LOW | crates/brush-builtins-vendored/src/declare.rs | 81 | #[clap(flatten)] // -n | COMMENT |
| LOW | crates/brush-builtins-vendored/src/bind.rs | 41 | pub(crate) struct BindCommand { | COMMENT |
| LOW | crates/brush-builtins-vendored/src/bind.rs | 61 | /// List variables. | COMMENT |
| LOW | crates/pi-shell/src/minimizer.rs | 41 | pub changed: bool, | COMMENT |
| LOW | crates/pi-shell/src/shell.rs | 1481 | } | COMMENT |
| LOW | crates/pi-shell/src/shell.rs | 1661 | return Err(err); | COMMENT |
| LOW | crates/pi-shell/src/shell.rs | 2441 | assert_eq!(child_session_action(false, true, true), ChildSessionAction::None,); | COMMENT |
| LOW | crates/pi-shell/src/shell.rs | 2461 | fn pipeline_stage_does_not_detach() { | COMMENT |
| LOW | crates/pi-shell/src/shell.rs | 2681 | /// The host-console probe itself is pinned by | COMMENT |
| LOW | crates/pi-shell/src/fixup.rs | 1 | //! Conservative pre-execution rewrites for bash commands. | COMMENT |
| LOW | crates/pi-shell/src/process.rs | 21 | /// `Process::from_pid` returns `None` for both a genuinely dead pid and a pid | COMMENT |
| LOW | crates/pi-shell/src/process.rs | 41 | /// limitation, an invalid (non-positive) pid, or a transient I/O | COMMENT |
| LOW | crates/pi-shell/src/process.rs | 61 | #[derive(Clone, Copy, Debug, PartialEq, Eq)] | COMMENT |
| LOW | crates/pi-shell/src/process.rs | 901 | /// silently truncates the second call to the supplied buffer size even | COMMENT |
| LOW | crates/pi-shell/src/process.rs | 1021 | /// refuses it with `EPERM` for setuid or entitlement-carrying children such | COMMENT |
| LOW | crates/pi-shell/src/process.rs | 1841 | Some(tree) | COMMENT |
| LOW | crates/pi-shell/src/process.rs | 2301 | COMMENT | |
| LOW | crates/pi-shell/src/process.rs | 2561 | /// acting on any pid difference derived from it. | COMMENT |
| LOW | crates/pi-shell/src/process.rs | 2661 | } | COMMENT |
| LOW | crates/pi-shell/src/process.rs | 2961 | ); | COMMENT |
| LOW | crates/pi-shell/src/minimizer/primitives.rs | 161 | for line in lines.iter().skip(lines.len() - max_lines / 2) { | COMMENT |
| LOW | crates/pi-shell/src/minimizer/config.rs | 21 | fn normalize_max_capture_bytes(value: u32) -> u32 { | COMMENT |
| LOW | crates/pi-shell/src/minimizer/plan.rs | 1 | //! Structural analysis of a shell command using `brush-parser`. | COMMENT |
| LOW | crates/pi-shell/src/minimizer/plan.rs | 21 | //! we return `Unsupported` and the engine passes through. | COMMENT |
| LOW | crates/pi-shell/src/minimizer/pipeline.rs | 1 | //! Declarative filter pipelines loaded from TOML. | COMMENT |
| LOW | crates/pi-shell/src/minimizer/engine.rs | 41 | }, | COMMENT |
| LOW | crates/pi-ast/src/block.rs | 1 | // Vendored from oh-my-pi (MIT) crates/pi-ast/src/block.rs @ | COMMENT |
| LOW | crates/pi-ast/src/block.rs | 81 | // Query a one-column-wide range over the first content character rather | COMMENT |
| LOW | crates/pi-ast/src/block.rs | 241 | /// boundary line sitting *outside* that window. | COMMENT |
| LOW | crates/pi-ast/src/block.rs | 281 | pub struct NodeSpan { | COMMENT |
| LOW | crates/pi-ast/src/block.rs | 541 | assert_eq!(resolve(code, "b.ts", 1), None); | COMMENT |
| LOW | crates/pi-ast/src/block.rs | 741 | COMMENT | |
| LOW | crates/pi-ast/src/block.rs | 881 | // Source 0 was evicted well before the loop ended (twice `MAX_ENTRIES` | COMMENT |
| LOW | crates/pi-ast/src/parse_cache.rs | 1 | // Vendored from oh-my-pi (MIT) crates/pi-ast/src/parse_cache.rs @ | COMMENT |
| LOW | crates/pi-ast/src/parse_cache.rs | 41 | /// multi-megabyte blob dominate process RSS. Files above this are still parsed, | COMMENT |
| LOW | crates/pi-ast/src/summary.rs | 21 | /// Language alias (e.g. "rust", "typescript") used before path inference. | COMMENT |
| LOW | crates/brush-core-vendored/examples/custom-builtin.rs | 1 | //! Example of implementing a custom builtin command for a brush-core based | COMMENT |
| LOW | crates/brush-core-vendored/examples/custom-builtin.rs | 21 | COMMENT | |
| LOW | crates/brush-core-vendored/examples/custom-builtin.rs | 61 | COMMENT | |
| LOW | crates/brush-core-vendored/src/int_utils.rs | 41 | /// # Type Parameters | COMMENT |
| 586 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | scripts/generate-gjc-sdk-skills.ts | 390 | return False | CODE |
| HIGH | scripts/generate-gjc-sdk-skills.ts | 462 | print(f"Approval required: {challenge}\\nType the exact challenge: ", file=sys.stderr, end="", flush=True) | CODE |
| HIGH | scripts/generate-gjc-sdk-skills.ts | 477 | print(json.dumps({"sessionId": args.session_id, "result": result}, indent=2)) | CODE |
| HIGH⚡ | scripts/generate-gjc-sdk-skills.ts | 500 | print(json.dumps(redact({"sessionId": args.session_id, "result": result}), indent=2)) | CODE |
| HIGH⚡ | scripts/generate-gjc-sdk-skills.ts | 506 | print(json.dumps(error.envelope, ensure_ascii=False, separators=(",", ":"))) | CODE |
| HIGH⚡ | scripts/generate-gjc-sdk-skills.ts | 509 | print("GJC SDK request failed safely.", file=sys.stderr) | CODE |
| HIGH | scripts/install-tests/install-sh-binary-upgrade.test.ts | 148 | elif write_fmt == "%{redirect_url}": | CODE |
| HIGH | scripts/install-tests/install-sh-binary-upgrade.test.ts | 921 | elif time.monotonic() >= deadline: | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 62 | print(json.dumps({"schema_version":1,"ok":True,"code":"generation_published","generation":request["owner_generation" | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 63 | elif request["op"] == "plan": | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 101 | print(json.dumps({"schema_version": 1, "ok": True, "code": code, "execution": execution, "server_state": server_stat | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 102 | elif request["op"] == "bootstrap": | CODE |
| HIGH⚡ | scripts/gjc-session/create.test.ts | 130 | print(json.dumps({"schema_version":1,"ok":True,"code":"bootstrapped","native_session_id":receipt_native_id,"server_p | CODE |
| HIGH⚡ | scripts/gjc-session/create.test.ts | 131 | elif request["op"] == "observe_terminal": | CODE |
| HIGH⚡ | scripts/gjc-session/create.test.ts | 140 | print(json.dumps(verdict, separators=(",", ":"))) | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 187 | print(json.dumps(verdict, separators=(",", ":"))) | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 313 | print(json.dumps({"schema_version":1,"ok":True,"code":"generation_published","generation":request["owner_generation" | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 315 | print("{}") | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 433 | print(json.dumps({"schema_version":1,"ok":True,"code":"generation_published","generation":request["owner_generation"]}) | CODE |
| HIGH | scripts/gjc-session/create.test.ts | 439 | print(json.dumps({"schema_version":1,"ok":True,"code":"not_required","execution":{"mode":"direct","argv":request["tmux_ | CODE |
| HIGH | …ding-agent/test/core/python-eval-output-helper.test.ts | 99 | print(json.dumps(result))`, | CODE |
| HIGH | …ding-agent/test/core/python-eval-output-helper.test.ts | 153 | print(f"{item['id']}: {item['content']}")`, | CODE |
| HIGH⚡ | …ding-agent/test/core/python-eval-output-helper.test.ts | 208 | print(f"line_count: {len(lines)}") | CODE |
| HIGH⚡ | …ding-agent/test/core/python-eval-output-helper.test.ts | 209 | print(f"long_line_len: {len(lines[1])}") | CODE |
| HIGH⚡ | …ding-agent/test/core/python-eval-output-helper.test.ts | 210 | print(f"long_line_intact: {lines[1] == 'x' * 1000}")`, | CODE |
| HIGH⚡ | …/coding-agent/test/core/apply-patch-regression.test.ts | 233 | + return True`, | CODE |
| HIGH⚡ | …/coding-agent/test/core/apply-patch-regression.test.ts | 241 | expect(lines[6]).toBe(" return True"); // Section B changed | CODE |
| HIGH | packages/coding-agent/src/crash/report.ts | 286 | print(text: string): void; | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …ing-agent/test/agent-session-irc-ghost-message.test.ts | 84 | return harness.session.agent.state.messages.filter( | CODE |
| CRITICAL | …oding-agent/test/agent-session-steer-interrupt.test.ts | 714 | const users = h.s.agent.state.messages.filter(m => m.role === "user").map(m => JSON.stringify(m.content)); | CODE |
| CRITICAL | …agent/test/issue-4508-cross-convention-fixture.test.ts | 265 | const tool = created.session.agent.state.tools.find(candidate => | CODE |
| CRITICAL | …agent/test/issue-4508-cross-convention-fixture.test.ts | 272 | const readTool = created.session.agent.state.tools.find(candidate => candidate.name === HOOK_TOOL); | CODE |
| CRITICAL | …agent/test/sdk-missing-model-runtime-admission.test.ts | 170 | expect(harness.session.agent.state.messages.filter(message => message.role === "user")).toEqual([]); | CODE |
| CRITICAL | …ges/coding-agent/test/agent-session-irc-roster.test.ts | 98 | return harness.session.agent.state.messages.find( | CODE |
| CRITICAL | …/coding-agent/test/sdk-missing-model-preflight.test.ts | 126 | expect(harness.session.agent.state.messages.filter(message => message.role === "user")).toEqual([]); | CODE |
| CRITICAL | …ages/coding-agent/test/acp-deep-interview-wire.test.ts | 1327 | expect(choiceSchema.requestedSchema.properties.value.oneOf.map(choice => choice.const)).toEqual( | CODE |
| CRITICAL | …rc/modes/controllers/runtime-mcp-command-controller.ts | 876 | await this.ctx.session.modelRegistry.authStorage.remove(credentialId); | CODE |
| CRITICAL | …ding-agent/src/modes/controllers/command-controller.ts | 756 | const credentialSource = this.ctx.session.modelRegistry.authStorage.describeCredentialSource( | CODE |
| CRITICAL | …ing-agent/src/modes/controllers/selector-controller.ts | 3804 | await this.ctx.session.modelRegistry.authStorage.login( | CODE |
| CRITICAL | …ing-agent/src/modes/controllers/selector-controller.ts | 4034 | this.ctx.session.modelRegistry.authStorage.hasAuth(provider.id), | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | autoresearch.sh | 3 | # Wraps the deterministic mock orchestration-token benchmark (no live network, | COMMENT |
| MEDIUM | docs/tui-runtime-internals.md | 175 | ## Status and loader orchestration | COMMENT |
| MEDIUM | docs/handoff-generation-pipeline.md | 220 | ## Short-session and minimum-content guardrails | COMMENT |
| MEDIUM | docs/hermes-mcp-bridge.md | 206 | ## Turn orchestration flow | COMMENT |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10083 | "finalAnswer": "{\"answer\":\"The root manifest package.json exposes benchmark commands as npm/bun scripts u | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10096 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun run | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10150 | "finalAnswer": "{\"answer\":\"The root package manifest is package.json. It exposes benchmark commands as ro | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10163 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun run | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10274 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10302 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10330 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10367 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10441 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10469 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10498 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10536 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10606 | "finalAnswer": "{\"answer\":\"The root package.json exposes benchmark commands as npm/bun scripts runnable w | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10619 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun run | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10673 | "finalAnswer": "{\n \"answer\": \"The root package manifest is package.json. It exposes benchmark commands | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10686 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun run | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10795 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10814 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10833 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10861 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10925 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10953 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 10981 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 11018 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 11087 | "finalAnswer": "{\"answer\":\"The root package.json exposes benchmarks as npm/bun scripts under the root \\\ | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 11100 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun run | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 11154 | "finalAnswer": "{\"answer\":\"The root package.json exposes benchmark commands as root npm/bun scripts under | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 11167 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun run | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 11270 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 11298 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 11361 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 11380 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 11399 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 11427 | "resultExcerpt": "# AGENTS.md\n 99|bun run conformance:run # ACP conformance\n*100|bun | CODE |
| MEDIUM | scripts/benchmark-code-mode-300s-081f4-results.json | 137 | "prompt": "Investigate the root package's benchmark script conventions. Start with a repository-wide search for `b | CODE |
| MEDIUM | …kages/coding-agent/src/tools/tool-catalog.generated.ts | 2274 | "description": "Lists, inspects, awaits, pauses, resumes, steers, or cancels detached task subagents.\n\nTask launches | CODE |
| MEDIUM | packages/coding-agent/src/prompts/system/master-mode.md | 12 | ## Peer orchestration | COMMENT |
| MEDIUM | packages/coding-agent/src/commands/commit.ts | 35 | // The agentic commit flow opens keep-alive sockets to the model | COMMENT |
| MEDIUM | …g-agent/src/session/internal/session-memory-sidecar.ts | 228 | // Reducer disk-ref demotion guardrails | COMMENT |
| MEDIUM | packages/ai/test/openai-completions-tool-choice.test.ts | 230 | // The critical /btw scenario: session already has tool history (prior agentic | COMMENT |
| MEDIUM | packages/ai/src/model-thinking.ts | 719 | // Groq's agentic `compound` systems reject `reasoning_effort` outright | COMMENT |
| MEDIUM | packages/natives/scripts/gen-enums.ts | 353 | // content replacement — no scaffold, no template file. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/pi-shell/src/minimizer/filters/gt.rs | 221 | assert!(!out.text.contains("user@example.com")); | CODE |
| LOW⚡ | scripts/gjc-session/create.test.ts | 974 | ["schema", JSON.stringify({ schema_version: 2, session_id: "placeholder", generation: "prior" })], | CODE |
| LOW⚡ | scripts/gjc-session/create.test.ts | 976 | ["empty", JSON.stringify({ schema_version: 1, session_id: "placeholder", generation: "" })], | CODE |
| LOW⚡ | scripts/gjc-session/create.test.ts | 977 | ["traversal", JSON.stringify({ schema_version: 1, session_id: "placeholder", generation: "../outside" })], | CODE |
| LOW⚡ | scripts/gjc-session/create.test.ts | 982 | const bytes = typeof body === "string" && (label === "schema" || label === "empty" || label === "traversal") ? body.re | CODE |
| LOW | scripts/gjc-session/create.test.ts | 1005 | { schema_version: 1, generation: "prior", session_id: "placeholder", classification: "unexpected_owner_loss", dedupe_k | CODE |
| LOW | scripts/gjc-session/create.test.ts | 1006 | { schema_version: 1, generation: "prior", session_id: "placeholder", classification: "unknown", dedupe_key: "bad" }, | CODE |
| LOW | packages/coding-agent/test/file-lock-gc-toctou.test.ts | 1559 | test.skipIf(process.platform === "win32" || process.platform === "linux").each(["tree", "placeholder"])( | CODE |
| LOW | packages/coding-agent/test/auth-broker-import.test.ts | 241 | email: "foo@bar.com", | CODE |
| LOW | packages/coding-agent/test/auth-broker-import.test.ts | 264 | expect(persisted?.email).toBe("foo@bar.com"); | CODE |
| LOW | …ckages/coding-agent/test/credential-switch-org.test.ts | 19 | email: "user@example.com", | CODE |
| LOW | …coding-agent/test/custom-model-preset-creation.test.ts | 39 | name: "placeholder", | CODE |
| LOW | packages/coding-agent/test/config-cli.test.ts | 390 | for (const key of secretKeys) settings.set(key as never, `dummy-value-for-${key}` as never); | CODE |
| LOW | packages/coding-agent/test/auth-cli-redaction.test.ts | 208 | expect(output.stderr).not.toContain("user@example.com"); | CODE |
| LOW | packages/coding-agent/test/sdk-skills.test.ts | 239 | fs.writeFileSync(path.join(userAgentDir, "placeholder.txt"), "placeholder"); | CODE |
| LOW | packages/coding-agent/test/acp-builtins.test.ts | 399 | identityLabel: "user@example.com", | CODE |
| LOW | packages/coding-agent/test/acp-builtins.test.ts | 428 | metadata: { email: "user@example.com" }, | CODE |
| LOW | packages/coding-agent/test/acp-builtins.test.ts | 466 | expect(output[0]).toContain("user@example.com"); | CODE |
| LOW | …oding-agent/test/agent-session-resilient-retry.test.ts | 1501 | authStorage.setRuntimeApiKey(model.provider, "fake-key"); | CODE |
| LOW | …oding-agent/test/agent-session-resilient-retry.test.ts | 1582 | authStorage.setRuntimeApiKey(model.provider, "fake-key"); | CODE |
| LOW | …oding-agent/test/agent-session-resilient-retry.test.ts | 1652 | authStorage.setRuntimeApiKey(model.provider, "fake-key"); | CODE |
| LOW | …oding-agent/test/agent-session-resilient-retry.test.ts | 1712 | authStorage.setRuntimeApiKey(primary.provider, "fake-key"); | CODE |
| LOW | …oding-agent/test/agent-session-resilient-retry.test.ts | 1861 | authStorage.setRuntimeApiKey(model.provider, "fake-key"); | CODE |
| LOW | …oding-agent/test/agent-session-resilient-retry.test.ts | 1919 | authStorage.setRuntimeApiKey(primary.provider, "fake-key"); | CODE |
| LOW | …oding-agent/test/agent-session-resilient-retry.test.ts | 1978 | authStorage.setRuntimeApiKey(model.provider, "fake-key"); | CODE |
| LOW | …oding-agent/test/agent-session-resilient-retry.test.ts | 2025 | authStorage.setRuntimeApiKey(model.provider, "fake-key"); | CODE |
| LOW | …oding-agent/test/agent-session-resilient-retry.test.ts | 2079 | authStorage.setRuntimeApiKey(model.provider, "fake-key"); | CODE |
| LOW | …oding-agent/test/agent-session-resilient-retry.test.ts | 2139 | authStorage.setRuntimeApiKey(model.provider, "fake-key"); | CODE |
| LOW | …ckages/coding-agent/test/notifications-service.test.ts | 1091 | [endpoint]: JSON.stringify({ sessionId: "placeholder", url: "ws://x", token: "t", pid: 999 }), | CODE |
| LOW | …ing-agent/test/agent-session-tool-rebuild-skip.test.ts | 400 | const dynamicTool = createMcpCustomTool("mcp__nucleus_search", "nucleus", "search", "placeholder"); | CODE |
| LOW | …ages/coding-agent/test/account-inventory-usage.test.ts | 19 | identityLabel: "user@example.com", | CODE |
| LOW | …nt/test/gjc-runtime/deep-interview-placeholder.test.ts | 23 | "placeholder", | CODE |
| LOW | …agent/test/acp/acp-post-start-operator-message.test.ts | 92 | expect(serialized).not.toContain("user@example.com"); | CODE |
| LOW | …oding-agent/test/runtime-mcp/manager-lifecycle.test.ts | 1757 | env: { TOKEN: "placeholder" }, | CODE |
| LOW | …oding-agent/test/runtime-mcp/manager-lifecycle.test.ts | 1792 | env: { TOKEN: "placeholder" }, | CODE |
| LOW | …s/coding-agent/src/gjc-runtime/workflow-placeholder.ts | 9 | "placeholder", | CODE |
| LOW | packages/coding-agent/src/gjc-runtime/gc-render.ts | 104 | ["placeholder", record.retainedPaths.placeholder], | CODE |
| LOW | …ages/coding-agent/src/gjc-runtime/ultragoal-runtime.ts | 1780 | return !["todo", "tbd", "n/a", "na", "none", "placeholder", "empty", "stub"].includes(normalized); | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 5371 | /** Fired when `missingPolicy: "placeholder"` substitutes for content that is gone for good. */ | COMMENT |
| LOW⚡ | packages/coding-agent/src/session/session-manager.ts | 5762 | const summary = materializeResidentValueSync(entry.summary, stores, "summary", cache, "placeholder"); | CODE |
| LOW⚡ | packages/coding-agent/src/session/session-manager.ts | 5768 | "placeholder", | CODE |
| LOW⚡ | packages/coding-agent/src/session/session-manager.ts | 5778 | "placeholder", | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 316 | type ResidentBlobMissingPolicy = "throw" | "placeholder"; | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 5514 | if (missingPolicy === "placeholder" && err instanceof ResidentBlobMissingError) { | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 5616 | return materializeResidentEntrySync(entry, stores, cache, "placeholder"); | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 5680 | return materializeResidentEntriesSync(entries, stores, "placeholder"); | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 5688 | return materializeResidentEntrySync(entry, stores, cache, "placeholder"); | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 5804 | "placeholder", | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 8528 | missingPolicy: "placeholder", | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 9211 | missingPolicy: "placeholder", | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 9424 | missingPolicy: "placeholder", | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 10245 | missingPolicy: "placeholder", | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 10291 | missingPolicy: "placeholder", | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 15992 | missingPolicy: "placeholder", | CODE |
| LOW | packages/coding-agent/src/session/session-manager.ts | 16056 | missingPolicy: "placeholder", | CODE |
| LOW | packages/tui/bench/sanitize.ts | 286 | const bigAnsi = ("\x1b[31mred\x1b[0m " + "lorem ipsum dolor ".repeat(20)).repeat(5); | CODE |
| LOW | packages/tui/test/markdown.test.ts | 1648 | expect(joinedPlain.includes("user@example.com"), "Should contain email").toBeTruthy(); | CODE |
| LOW | packages/tui/src/components/markdown.ts | 1706 | // text="foo@bar.com" but href="mailto:foo@bar.com") | COMMENT |
| LOW | packages/agent/test/pruning-redteam.test.ts | 378 | const failure = toolEntry("multi-block", "edit", "placeholder"); | CODE |
| LOW | packages/agent/test/pruning-redteam.test.ts | 401 | const emptyFirst = toolEntry("empty-first", "edit", "placeholder"); | CODE |
| 16 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | scripts/issue-4481-main-thread-capture.py | 274 | except ChildProcessError: | CODE |
| HIGH | scripts/session-stats/sync.py | 661 | except Exception: | CODE |
| HIGH | packages/coding-agent/src/eval/py/runner.py | 170 | except Exception: | CODE |
| HIGH | packages/coding-agent/src/eval/py/runner.py | 445 | except subprocess.TimeoutExpired: | CODE |
| HIGH | packages/coding-agent/src/eval/py/runner.py | 461 | except Exception: | CODE |
| HIGH | packages/coding-agent/src/eval/py/runner.py | 946 | except (OSError, ValueError): | CODE |
| HIGH | packages/coding-agent/src/eval/py/runner.py | 954 | except (OSError, ValueError): | CODE |
| HIGH | packages/coding-agent/src/eval/py/runner.py | 1037 | except Exception: | CODE |
| HIGH | packages/coding-agent/src/eval/py/runner.py | 1041 | except Exception: | CODE |
| HIGH | packages/coding-agent/src/eval/py/runner.py | 440 | except Exception: | CODE |
| HIGH | packages/coding-agent/src/eval/py/runner.py | 457 | except Exception: | CODE |
| HIGH | packages/coding-agent/src/eval/py/prelude.py | 33 | except Exception: | CODE |
| HIGH | packages/ai/scripts/cursor-log.py | 245 | except KeyboardInterrupt: | CODE |
| HIGH | packages/ai/scripts/cursor-log.py | 219 | except json.JSONDecodeError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/brush-core-vendored/examples/custom-builtin.rs | 80 | // Step 3: Implement the Command trait | COMMENT |
| LOW | crates/brush-core-vendored/examples/custom-builtin.rs | 118 | // Step 4: Integrate your builtin into a shell | COMMENT |
| LOW⚡ | crates/pi-natives/src/pty.rs | 922 | // Step 1: Close the ConPTY input pipe first. | COMMENT |
| LOW⚡ | crates/pi-natives/src/pty.rs | 928 | // Step 2: Drain the reader thread. | COMMENT |
| LOW | crates/pi-natives/src/pty.rs | 965 | // Step 3: Drop master (calls ClosePseudoConsole on Windows). | COMMENT |
| LOW | crates/pi-natives/src/pty.rs | 986 | // Step 4: Join reader thread if it finished. | COMMENT |
| LOW | …es/coding-agent/test/gjc-runtime/state-handoff.test.ts | 2353 | // Step 1: D -> R. | COMMENT |
| LOW | …es/coding-agent/test/gjc-runtime/state-handoff.test.ts | 2376 | // Step 2: R -> U. | COMMENT |
| LOW⚡ | …est/modes/utils/render-initial-messages-dedupe.test.ts | 137 | // Step 1: one call — represents navigateTree's internal rawContext build. | COMMENT |
| LOW⚡ | …est/modes/utils/render-initial-messages-dedupe.test.ts | 141 | // Step 2: renderInitialMessages with the prebuilt context must NOT call it again. | COMMENT |
| LOW⚡ | packages/coding-agent/src/tools/fetch.ts | 771 | // Step 1: Try special handlers for known sites (unless raw mode) | COMMENT |
| LOW⚡ | packages/coding-agent/src/tools/fetch.ts | 777 | // Step 2: Fetch page | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 752 | // Step 0: Normalize URL (ensure scheme for special handlers) | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 1004 | // Step 3: Handle convertible binary files (PDF, DOCX, etc.) | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 1053 | // Step 4: Handle non-HTML text content | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 1103 | // Step 5: For HTML, try digestible formats first (unless raw mode) | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 1206 | // Step 6: If rendered output is low quality, try more targeted fallbacks | COMMENT |
| LOW | packages/coding-agent/src/setup/paseo/paseo-setup.ts | 139 | // Step 1: provider entry + provider-key provenance. | COMMENT |
| LOW | packages/coding-agent/src/setup/paseo/paseo-setup.ts | 160 | // Step 2: seed empty orchestration roles only. | COMMENT |
| LOW | packages/coding-agent/src/setup/paseo/paseo-setup.ts | 187 | // Step 3: the symlink bridge. | COMMENT |
| LOW | packages/coding-agent/src/setup/paseo/paseo-setup.ts | 215 | // Step 4: register the bridge with GJC skill discovery. | COMMENT |
| LOW | …agent/src/extensibility/plugins/marketplace/manager.ts | 870 | // Step 1: move any existing occupant out of finalPath into the backup | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 245 | // Step 1: initial query was sent on start | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 249 | // Step 2: Mode 2031 notification arrives — queues re-query since initial is pending | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 252 | // Step 3: Complete initial OSC 11 response (light) | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 258 | // Step 4: Complete initial DA1 — should start queued query | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 264 | // Step 5: Complete 2nd OSC 11 response with a different color (dark) | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 267 | // Step 6: Complete 2nd DA1 | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 270 | // Step 7: Verify appearance changed and callback fired | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 33 | // Step 1: Create context with the calculate tool | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 40 | // Step 2: Ask the LLM to make a tool call | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 47 | // Step 3: Get the assistant's response (should contain a tool call) | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 61 | // Step 4: Send a user message WITHOUT providing tool result | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 69 | // Step 5: The fix should filter out the orphaned tool call, and the request should succeed | COMMENT |
| LOW | packages/ai/test/antigravity-discovery.test.ts | 555 | // Step 1: Populate cache with old UA (simulates old gjc version or env var not set) | COMMENT |
| LOW | packages/ai/test/antigravity-discovery.test.ts | 576 | // Step 2: New resolution with new UA (upgraded gjc or env var is now set) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/brush-core-vendored/examples/custom-builtin.rs | 80 | // Step 3: Implement the Command trait | COMMENT |
| LOW | crates/brush-core-vendored/examples/custom-builtin.rs | 118 | // Step 4: Integrate your builtin into a shell | COMMENT |
| LOW⚡ | crates/pi-natives/src/pty.rs | 922 | // Step 1: Close the ConPTY input pipe first. | COMMENT |
| LOW⚡ | crates/pi-natives/src/pty.rs | 928 | // Step 2: Drain the reader thread. | COMMENT |
| LOW | crates/pi-natives/src/pty.rs | 965 | // Step 3: Drop master (calls ClosePseudoConsole on Windows). | COMMENT |
| LOW | crates/pi-natives/src/pty.rs | 986 | // Step 4: Join reader thread if it finished. | COMMENT |
| LOW | …es/coding-agent/test/gjc-runtime/state-handoff.test.ts | 2353 | // Step 1: D -> R. | COMMENT |
| LOW | …es/coding-agent/test/gjc-runtime/state-handoff.test.ts | 2376 | // Step 2: R -> U. | COMMENT |
| LOW⚡ | …est/modes/utils/render-initial-messages-dedupe.test.ts | 137 | // Step 1: one call — represents navigateTree's internal rawContext build. | COMMENT |
| LOW⚡ | …est/modes/utils/render-initial-messages-dedupe.test.ts | 141 | // Step 2: renderInitialMessages with the prebuilt context must NOT call it again. | COMMENT |
| LOW⚡ | packages/coding-agent/src/tools/fetch.ts | 771 | // Step 1: Try special handlers for known sites (unless raw mode) | COMMENT |
| LOW⚡ | packages/coding-agent/src/tools/fetch.ts | 777 | // Step 2: Fetch page | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 752 | // Step 0: Normalize URL (ensure scheme for special handlers) | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 1004 | // Step 3: Handle convertible binary files (PDF, DOCX, etc.) | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 1053 | // Step 4: Handle non-HTML text content | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 1103 | // Step 5: For HTML, try digestible formats first (unless raw mode) | COMMENT |
| LOW | packages/coding-agent/src/tools/fetch.ts | 1206 | // Step 6: If rendered output is low quality, try more targeted fallbacks | COMMENT |
| LOW | packages/coding-agent/src/setup/paseo/paseo-setup.ts | 139 | // Step 1: provider entry + provider-key provenance. | COMMENT |
| LOW | packages/coding-agent/src/setup/paseo/paseo-setup.ts | 160 | // Step 2: seed empty orchestration roles only. | COMMENT |
| LOW | packages/coding-agent/src/setup/paseo/paseo-setup.ts | 187 | // Step 3: the symlink bridge. | COMMENT |
| LOW | packages/coding-agent/src/setup/paseo/paseo-setup.ts | 215 | // Step 4: register the bridge with GJC skill discovery. | COMMENT |
| LOW | …agent/src/extensibility/plugins/marketplace/manager.ts | 870 | // Step 1: move any existing occupant out of finalPath into the backup | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 245 | // Step 1: initial query was sent on start | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 249 | // Step 2: Mode 2031 notification arrives — queues re-query since initial is pending | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 252 | // Step 3: Complete initial OSC 11 response (light) | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 258 | // Step 4: Complete initial DA1 — should start queued query | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 264 | // Step 5: Complete 2nd OSC 11 response with a different color (dark) | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 267 | // Step 6: Complete 2nd DA1 | COMMENT |
| LOW⚡ | packages/tui/test/terminal-appearance.test.ts | 270 | // Step 7: Verify appearance changed and callback fired | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 33 | // Step 1: Create context with the calculate tool | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 40 | // Step 2: Ask the LLM to make a tool call | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 47 | // Step 3: Get the assistant's response (should contain a tool call) | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 61 | // Step 4: Send a user message WITHOUT providing tool result | COMMENT |
| LOW⚡ | packages/ai/test/tool-call-without-result.test.ts | 69 | // Step 5: The fix should filter out the orphaned tool call, and the request should succeed | COMMENT |
| LOW | packages/ai/test/antigravity-discovery.test.ts | 555 | // Step 1: Populate cache with old UA (simulates old gjc version or env var not set) | COMMENT |
| LOW | packages/ai/test/antigravity-discovery.test.ts | 576 | // Step 2: New resolution with new UA (upgraded gjc or env var is now set) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | autoresearch.sh | 2 | # Research-only harness for mission ai-harness-trends-gjc-improvements. | COMMENT |
| MEDIUM | crates/pi-edit/tests/common/mod.rs | 34 | #![allow(dead_code, reason = "each test binary uses a subset of the harness")] | COMMENT |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 8759 | "resultExcerpt": "# packages/ai/src/\n## types.ts\n 1032|\t * wire, but it may differ from the harness-i | CODE |
| MEDIUM | scripts/benchmark-code-mode-exploratory-results.json | 9679 | "resultExcerpt": "# packages/ai/src/\n## types.ts\n 1032|\t * wire, but it may differ from the harness-i | CODE |
| MEDIUM | scripts/issue-4481-main-thread-capture.test.ts | 40 | describe.skipIf(process.platform !== "linux")("issue #4481 PTY capture harness", () => { | CODE |
| MEDIUM | scripts/benchmark-code-mode-300s-081f4-results.json | 41 | "systemPrompt": "# Issue #5792 benchmark system prompt\n\nYou are conducting a read-only investigation of this checked | CODE |
| MEDIUM | …es/coding-agent/bench/session-replay/profile-report.ts | 489 | lines.push("## Harness notes", "", ...report.harness.notes.map(note => `- ${note}`), ""); | CODE |
| MEDIUM | packages/coding-agent/test/sdk-broker.test.ts | 2372 | // Poll instead of a fixed delay so the assertion is robust to CI scheduling | COMMENT |
| MEDIUM | …oding-agent/test/composer-detach-overlay-paths.test.ts | 34 | * Issue #4657 regression harness: mount a real CustomEditor in a real | COMMENT |
| MEDIUM | …/coding-agent/test/harness-control-plane/owner.test.ts | 399 | // Poll for the owner to release the lease + close the endpoint (robust under load). | COMMENT |
| MEDIUM | …/test/harness-control-plane/cli-detached-owner.test.ts | 292 | // `#finalizeVerb` (commands/harness.ts) answers `{ completed: false, reason: "owner-not-live" }` | COMMENT |
| MEDIUM | packages/coding-agent/src/session/session-manager.ts | 19120 | // build-mode signal; the gate is robust to undefined (default: silent). | COMMENT |
| MEDIUM | packages/utils/src/which.ts | 1 | // OS-agnostic "which" helper with robust macOS toolchain lookup and flexible cache control. | COMMENT |
| MEDIUM | .github/workflows/dev-ci.yml | 537 | # RSS checkpoint compare: runs the existing harness scripts/verify-rss-checkpoints.ts | COMMENT |
| MEDIUM | .github/workflows/dev-ci.yml | 541 | # the job summary, not failed; a missing baseline or harness error still fails the | COMMENT |
| MEDIUM | .github/workflows/dev-ci.yml | 556 | # session manager, or the harness itself). | COMMENT |
| MEDIUM | .github/workflows/dev-ci.yml | 649 | # without failing; every other harness error (missing baseline, bad binary, | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/cheatsheet/src/fonts.py | 43 | except Exception as exc: # 폰트가 없거나 fontTools 부재 | CODE |
| LOW | docs/cheatsheet/src/fonts.py | 49 | except Exception as exc: | CODE |
| LOW | scripts/generate-gjc-sdk-skills.ts | 449 | except Exception: | CODE |
| LOW⚡ | scripts/generate-gjc-sdk-skills.ts | 508 | except Exception: | CODE |
| LOW | scripts/session-stats/sync.py | 441 | except Exception: | CODE |
| LOW | scripts/session-stats/sync.py | 661 | except Exception: | CODE |
| LOW | scripts/session-stats/sync.py | 880 | except Exception: | CODE |
| LOW | scripts/session-stats/sync.py | 974 | except Exception as e: | CODE |
| LOW | scripts/session-stats/sync.py | 996 | except Exception as e: | CODE |
| LOW | scripts/session-stats/analyze.py | 466 | except Exception: | STRING |
| LOW | scripts/session-stats/analyze.py | 654 | except Exception: | STRING |
| LOW | scripts/session-stats/analyze.py | 793 | except Exception: | STRING |
| LOW | scripts/session-stats/analyze.py | 806 | except Exception: | STRING |
| LOW | scripts/gjc-session/postmortem.sh | 125 | except Exception: | CODE |
| LOW | scripts/gjc-session/create.sh | 257 | except Exception: | CODE |
| LOW | scripts/gjc-session/create.sh | 283 | except Exception: | CODE |
| LOW | scripts/gjc-session/create.sh | 404 | except Exception: | CODE |
| LOW | scripts/gjc-session/create.sh | 428 | except Exception: | CODE |
| LOW | scripts/gjc-session/create.sh | 447 | except Exception: pass | CODE |
| LOW | scripts/gjc-session/create.sh | 744 | except Exception: raise SystemExit(1) | CODE |
| LOW | scripts/gjc-session/create.sh | 795 | except Exception: | CODE |
| LOW | scripts/gjc-session/create.sh | 817 | except Exception: | CODE |
| LOW | scripts/gjc-session/create.sh | 870 | except Exception: | CODE |
| MEDIUM | scripts/gjc-session/create.sh | 122 | def valid_started(): | CODE |
| LOW | scripts/gjc-session/issue-1938-cgroup-repro.sh | 406 | except Exception: raise SystemExit(1) | CODE |
| LOW⚡ | packages/coding-agent/src/eval/py/runner.py | 454 | except Exception: | CODE |
| LOW⚡ | packages/coding-agent/src/eval/py/runner.py | 457 | except Exception: | CODE |
| LOW⚡ | packages/coding-agent/src/eval/py/runner.py | 461 | except Exception: | CODE |
| LOW⚡ | packages/coding-agent/src/eval/py/runner.py | 842 | except Exception: | CODE |
| LOW⚡ | packages/coding-agent/src/eval/py/runner.py | 852 | except Exception: | CODE |
| LOW⚡ | packages/coding-agent/src/eval/py/runner.py | 980 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/runner.py | 66 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/runner.py | 170 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/runner.py | 437 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/runner.py | 440 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/runner.py | 779 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/runner.py | 794 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/runner.py | 806 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/runner.py | 1037 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/runner.py | 1041 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/prelude.py | 33 | except Exception: | CODE |
| LOW | packages/coding-agent/src/eval/py/prelude.py | 231 | except Exception as e: | CODE |
| LOW | sdk-skills/gjc-sdk-author/templates/direct-sdk.py | 114 | except Exception: | CODE |
| LOW | sdk-skills/gjc-sdk-author/templates/direct-sdk.py | 173 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/cheatsheet/src/content.py | 590 | CODE | |
| LOW | docs/cheatsheet/src/sheet.py | 185 | CODE | |
| LOW | scripts/tool_io.py | 154 | CODE | |
| LOW | scripts/analyze_small_edits.py | 249 | CODE | |
| LOW | scripts/issue-4481-main-thread-capture.py | 145 | CODE | |
| LOW | scripts/session-stats/sync.py | 284 | CODE | |
| LOW | scripts/session-stats/sync.py | 417 | CODE | |
| LOW | scripts/session-stats/sync.py | 498 | CODE | |
| LOW | scripts/session-stats/sync.py | 590 | CODE | |
| LOW | scripts/session-stats/analyze.py | 397 | CODE | |
| LOW | scripts/session-stats/analyze.py | 573 | CODE | |
| LOW | scripts/session-stats/read_optimizer.py | 261 | CODE | |
| LOW | scripts/session-stats/read_optimizer.py | 316 | CODE | |
| LOW | scripts/session-stats/read_optimizer.py | 430 | CODE | |
| LOW | packages/coding-agent/bench/perf-corpus-rlm-analysis.py | 204 | CODE | |
| LOW | packages/coding-agent/bench/perf-corpus-rlm-analysis.py | 1515 | CODE | |
| LOW | packages/coding-agent/bench/perf-corpus-rlm-analysis.py | 1992 | CODE | |
| LOW | packages/coding-agent/src/eval/py/runner.py | 466 | CODE | |
| LOW | packages/coding-agent/src/eval/py/prelude.py | 309 | CODE | |
| LOW | packages/ai/scripts/cursor-log.py | 66 | CODE | |
| LOW | packages/ai/scripts/cursor-log.py | 145 | CODE | |
| LOW | packages/ai/scripts/cursor-log.py | 203 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | python/gjc-sdk/tests/test_generated_skill_template.py | 1 | CODE | |
| LOW | docs/cheatsheet/src/content.py | 3 | CODE | |
| LOW | docs/cheatsheet/src/content.py | 3 | CODE | |
| LOW | scripts/tool_io.py | 3 | CODE | |
| LOW | scripts/analyze_small_edits.py | 3 | CODE | |
| LOW | scripts/session-stats/sync.py | 27 | CODE | |
| LOW | scripts/session-stats/sync.py | 39 | CODE | |
| LOW | scripts/session-stats/analyze_search_relevance.py | 22 | CODE | |
| LOW | scripts/session-stats/analyze_selector_reads.py | 24 | CODE | |
| LOW | scripts/session-stats/plot_tools.py | 18 | CODE | |
| LOW | scripts/session-stats/plot_read_summarizer.py | 18 | CODE | |
| LOW | scripts/session-stats/optimize_read_config.py | 26 | CODE | |
| LOW | scripts/session-stats/optimize_read_config.py | 30 | CODE | |
| LOW | scripts/session-stats/analyze.py | 13 | CODE | |
| LOW | scripts/session-stats/harmony_backtest.py | 11 | CODE | |
| LOW | scripts/session-stats/harmony_backtest.py | 19 | CODE | |
| LOW | scripts/session-stats/read_optimizer.py | 23 | CODE | |
| LOW | packages/coding-agent/bench/perf-corpus-rlm-analysis.py | 10 | CODE | |
| LOW | packages/coding-agent/src/eval/py/runner.py | 26 | CODE | |
| LOW | packages/coding-agent/src/eval/py/prelude.py | 1 | CODE | |
| LOW | sdk-skills/gjc-sdk-author/templates/direct-sdk.py | 3 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …/coding-agent/test/core/apply-patch-regression.test.ts | 216 | def helper(): | CODE |
| LOW⚡ | …/coding-agent/test/core/apply-patch-regression.test.ts | 220 | def helper(): | CODE |
| LOW⚡ | …/coding-agent/test/core/apply-patch-regression.test.ts | 230 | diff: `@@ -6,2 +6,2 @@ def helper(): | CODE |
| LOW⚡ | …/coding-agent/test/core/apply-patch-regression.test.ts | 231 | def helper(): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | scripts/session-stats/harmony_backtest.py | 30 | NULLISH_RE = re.compile(r"\b(undefined|null)\b") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/coding-agent/src/eval/py/prelude.py | 182 | Read task/agent output by ID. Returns text or JSON depending on format. Args: *ids: Output | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/ai/README.md | 923 | apiKey: "your-api-key", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/install.sh | 5 | # Usage: | COMMENT |
| LOW | packages/coding-agent/src/web/scrapers/terraform.ts | 137 | // Usage example | COMMENT |
| LOW | packages/coding-agent/src/web/scrapers/terraform.ts | 251 | // Usage example | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | scripts/gjc-session/create.sh | 2 | # Create a public-safe GJC tmux session through the owner-isolation protocol. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/coding-agent/src/eval/py/prelude.py | 210 | # Check if tool bridge is available | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/natives/test/native.test.ts | 38 | // TODO: implement | COMMENT |