An open-source AI agent that brings the power of Gemini directly into your terminal.
513 matches across 13 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | evals/skill_extraction.eval.ts | 181 | function createWorkflowComparisonSessions(withScratchpad: boolean): { |
| LOW | evals/skill_extraction.eval.ts | 327 | async function runExtractionAndReadState( |
| LOW | evals/skill_extraction.eval.ts | 559 | async function writeScratchpadStatsReport( |
| LOW | evals/skill_extraction.eval.ts | 599 | function expectSuccessfulExtractionRun(run: ExtractionRunSnapshot): void { |
| LOW | evals/skill_extraction.eval.ts | 656 | function parseScratchpadStatsTrials(): number { |
| LOW | evals/auto_memory_modes.eval.ts | 328 | async function expectSeedSessionEligible( |
| LOW | integration-tests/run_shell_command.test.ts | 54 | function getDisallowedFileReadCommand(testFile: string): { |
| LOW | memory-tests/memory-usage.test.ts | 366 | async function generateSharedLargeChatData(tempDir: string) { |
| LOW | scripts/generate-keybindings-doc.ts | 113 | function getMergedPlatformBindings( |
| LOW | scripts/lint.js | 245 | export function runSensitiveKeywordLinter() { |
| LOW | scripts/lint.js | 397 | export function runGithubActionsPinningLinter() { |
| LOW | scripts/generate-settings-schema.ts | 220 | function buildObjectDefinitionSchema( |
| LOW | scripts/generate-settings-schema.ts | 252 | function buildObjectCollectionSchema( |
| LOW | scripts/get-release-version.js | 124 | function detectRollbackAndGetBaseline({ args, npmDistTag } = {}) { |
| LOW | scripts/get-release-version.js | 238 | function getAndVerifyTags({ npmDistTag, args } = {}) { |
| LOW | packages/test-utils/src/test-rig.ts | 68 | export function createToolCallErrorMessage( |
| LOW | packages/core/src/ide/ide-connection-utils.ts | 112 | export async function getConnectionConfigFromFile( |
| LOW | packages/core/src/ide/process-utils.ts | 165 | async function getIdeProcessInfoForWindows(): Promise<{ |
| LOW | packages/core/src/test-utils/mockWorkspaceContext.ts | 16 | export function createMockWorkspaceContext( |
| LOW | packages/core/src/test-utils/mock-message-bus.ts | 110 | export function getMockMessageBusInstance( |
| LOW | packages/core/src/tools/mcp-tool.ts | 498 | function transformResourceLinkBlock(block: McpResourceLinkBlock): Part { |
| LOW | packages/core/src/tools/mcp-tool.ts | 510 | function transformMcpContentToParts(sdkResponse: Part[]): Part[] { |
| LOW | packages/core/src/tools/mcp-tool.ts | 549 | function getStringifiedResultForDisplay(rawResponse: Part[]): string { |
| LOW | packages/core/src/tools/mcp-client.ts | 827 | export function addMCPStatusChangeListener( |
| LOW | packages/core/src/tools/mcp-client.ts | 836 | export function removeMCPStatusChangeListener( |
| LOW | packages/core/src/tools/mcp-client.ts | 884 | function extractWWWAuthenticateHeader(errorString: string): string | null { |
| LOW | packages/core/src/tools/mcp-client.ts | 984 | function createTransportRequestInit( |
| LOW | packages/core/src/tools/mcp-client.ts | 1037 | function createDynamicOAuthTokenProvider( |
| LOW | packages/core/src/tools/mcp-client.ts | 1671 | function createSSETransportWithAuth( |
| LOW | packages/core/src/tools/edit.ts | 135 | async function calculateExactReplacement( |
| LOW | packages/core/src/tools/edit.ts | 174 | async function calculateFlexibleReplacement( |
| LOW | packages/core/src/tools/edit.ts | 234 | async function calculateRegexReplacement( |
| LOW | packages/core/src/tools/edit.ts | 1244 | async function calculateFuzzyReplacement( |
| LOW | packages/core/src/tools/tools.ts | 124 | export function isBackgroundExecutionData( |
| LOW | packages/core/src/tools/omissionPlaceholderDetector.ts | 94 | export function detectOmissionPlaceholders(text: string): string[] { |
| LOW | packages/core/src/tools/modifiable-tool.ts | 56 | export function isModifiableDeclarativeTool( |
| LOW | packages/core/src/tools/memoryTool.ts | 76 | export function getCurrentGeminiMdFilename(): string { |
| LOW | packages/core/src/tools/memoryTool.ts | 94 | export function getProjectMemoryIndexFilePath(storage: Storage): string { |
| LOW | …e/src/tools/definitions/dynamic-declaration-helpers.ts | 165 | export function getExitPlanModeDeclaration(): FunctionDeclaration { |
| LOW | …e/src/tools/definitions/dynamic-declaration-helpers.ts | 186 | export function getActivateSkillDeclaration( |
| LOW | …e/src/tools/definitions/dynamic-declaration-helpers.ts | 220 | export function getUpdateTopicDeclaration(): FunctionDeclaration { |
| LOW | packages/core/src/tools/definitions/coreTools.ts | 261 | export function getExitPlanModeDefinition(): ToolDefinition { |
| LOW | packages/core/src/tools/definitions/coreTools.ts | 268 | export function getActivateSkillDefinition( |
| LOW | packages/core/src/context/truncation.ts | 81 | export function normalizeFunctionResponse( |
| LOW | packages/core/src/context/chatCompressionService.ts | 102 | export function modelStringToModelConfigAlias(model: string): string { |
| LOW | packages/core/src/context/config/schema.ts | 9 | export function getContextManagementConfigSchema( |
| LOW | packages/core/src/context/config/configLoader.ts | 76 | export async function loadContextManagementConfig( |
| LOW | packages/core/src/context/graph/toGraph.ts | 81 | function isCodeExecutionResultPart( |
| LOW | packages/core/src/context/utils/snapshotGenerator.ts | 90 | export function findLatestSnapshotBaseline( |
| LOW | packages/core/src/context/testing/contextTestUtils.ts | 289 | export function setupContextComponentTest( |
| LOW | …/core/src/context/processors/stateSnapshotProcessor.ts | 46 | export function createStateSnapshotProcessor( |
| LOW | …ore/src/context/processors/blobDegradationProcessor.ts | 24 | export function createBlobDegradationProcessor( |
| LOW | …/src/context/processors/stateSnapshotAsyncProcessor.ts | 39 | export function createStateSnapshotAsyncProcessor( |
| LOW | …re/src/context/processors/nodeDistillationProcessor.ts | 32 | export function createNodeDistillationProcessor( |
| LOW | …es/core/src/context/processors/toolMaskingProcessor.ts | 81 | export function createToolMaskingProcessor( |
| LOW | …core/src/context/processors/nodeTruncationProcessor.ts | 26 | export function createNodeTruncationProcessor( |
| LOW | …core/src/context/processors/rollingSummaryProcessor.ts | 43 | export function createRollingSummaryProcessor( |
| LOW | …e/src/context/processors/historyTruncationProcessor.ts | 32 | export function createHistoryTruncationProcessor( |
| LOW | packages/core/src/core/contentGenerator.ts | 130 | export async function createContentGeneratorConfig( |
| LOW | packages/core/src/core/geminiChat.ts | 133 | export function isValidNonThoughtTextPart(part: Part): boolean { |
| 331 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| CRITICAL | packages/core/src/code_assist/server.ts | 575 | return error.response.data.error.details.some( |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1473 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1508 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1536 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1569 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1600 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1636 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1697 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1710 | const titleWritesDelayed = mocks.mockStdout.write.mock.calls.filter( |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1764 | const titleWritesMid = mocks.mockStdout.write.mock.calls.filter( |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1776 | const titleWritesEnd = mocks.mockStdout.write.mock.calls.filter( |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1823 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1893 | const titleWritesAfterOutput = mocks.mockStdout.write.mock.calls.filter( |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1907 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1942 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 1979 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 2015 | const titleWrites = mocks.mockStdout.write.mock.calls.filter((call) => |
| CRITICAL | packages/cli/src/ui/AppContainer.test.tsx | 3196 | const clearTerminalCalls = mocks.mockStdout.write.mock.calls.filter( |
| CRITICAL | .github/workflows/unassign-inactive-assignees.yml | 191 | const prAuthor = event.source.issue.user.login.toLowerCase(); |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | .gcp/release-docker.yml | 2 | # Step 1: Install root dependencies (includes workspaces) |
| LOW | .gcp/release-docker.yml | 8 | # Step 2: Authenticate for Docker (so we can push images to the artifact registry) |
| LOW | .gcp/release-docker.yml | 14 | # Step 3: Build workspace packages |
| LOW | .gcp/release-docker.yml | 20 | # Step 4: Determine Docker Image Tag |
| LOW | .gcp/release-docker.yml | 38 | # Step 5: Build sandbox container image |
| LOW | .gcp/release-docker.yml | 51 | # Step 8: Publish sandbox container image |
| LOW | .gcp/development-worker.yml | 6 | # Step 1: Install root dependencies |
| LOW | .gcp/development-worker.yml | 12 | # Step 2: Authenticate for Docker |
| LOW | .gcp/development-worker.yml | 18 | # Step 3: Build workspace packages |
| LOW | .gcp/development-worker.yml | 24 | # Step 4: Build Development Image |
| LOW | integration-tests/file-system-interactive.test.ts | 37 | // Step 1: Read the file |
| LOW | integration-tests/file-system-interactive.test.ts | 45 | // Step 2: Write the file |
| LOW | packages/core/src/context/agentHistoryProvider.ts | 42 | // Step 1: Normalize newest messages. |
| LOW | packages/core/src/context/agentHistoryProvider.ts | 49 | // Step 2: Check if truncation is needed based on the token threshold (High Watermark) |
| LOW | packages/core/src/context/agentHistoryProvider.ts | 54 | // Step 3: Split into keep/truncate boundaries |
| LOW | …core/src/context/pipeline/contextWorkingBuffer.test.ts | 271 | // Step 1: Initial state |
| LOW | …core/src/context/pipeline/contextWorkingBuffer.test.ts | 295 | // Step 2: Mutate p2 into m2 |
| LOW | …core/src/context/pipeline/contextWorkingBuffer.test.ts | 309 | // Step 3: Upstream adds new nodes (p4, p5) |
| LOW | packages/core/src/mcp/mcp-oauth-provider.test.ts | 40 | // Step 1: Save client information |
| LOW | packages/core/src/mcp/mcp-oauth-provider.test.ts | 47 | // Step 2: Save code verifier |
| LOW | packages/core/src/mcp/mcp-oauth-provider.test.ts | 50 | // Step 3: Set up callback server |
| LOW | packages/core/src/mcp/mcp-oauth-provider.test.ts | 62 | // Step 4: Redirect to authorization |
| LOW | packages/core/src/mcp/mcp-oauth-provider.test.ts | 66 | // Step 5: Save tokens after exchange |
| LOW | …s/vscode-ide-companion/scripts/check-vscode-release.js | 11 | // Step 1: Find the commit hash of the last release |
| LOW | …s/vscode-ide-companion/scripts/check-vscode-release.js | 46 | // Step 2: Check for new commits |
| LOW | …s/vscode-ide-companion/scripts/check-vscode-release.js | 53 | // Step 3: Check for dependency changes |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | evals/snapshot_fidelity.eval.ts | 127 | // Use a self-consistency of 3 runs to get a robust majority vote |
| MEDIUM | integration-tests/json-output.test.ts | 143 | // come up with a more robust solution. |
| MEDIUM | integration-tests/hooks-system.test.ts | 1643 | // This makes the test more robust by creating multiple start/stop cycles |
| MEDIUM | packages/core/src/tools/edit.ts | 1264 | .map((l) => l.trimEnd()); // Trim end of search lines to be more robust |
| MEDIUM | packages/core/src/utils/memoryImportProcessor.test.ts | 382 | // This test verifies the robust findCodeRegions implementation |
| MEDIUM | packages/core/src/utils/memoryDiscovery.ts | 28 | // TODO: Integrate with a more robust server-side logger if available/appropriate. |
| MEDIUM | packages/core/src/utils/atCommandUtils.ts | 200 | // We rely on validatePath and Config.validatePathAccess for robust checking |
| MEDIUM | packages/core/src/utils/memoryDiscovery.test.ts | 92 | // Use maxRetries option for robust cleanup without race conditions |
| MEDIUM | packages/core/src/utils/bfsFileSearch.ts | 15 | // TODO: Integrate with a more robust server-side logger. |
| MEDIUM | packages/core/src/utils/filesearch/fileSearch.test.ts | 739 | // Perform a more specific search that should leverage the broad search's cached results |
| MEDIUM | packages/core/src/sandbox/windows/GeminiSandbox.cs | 474 | // Ensure we use the 8.3 long-name equivalent for robust security checks per guidelines |
| MEDIUM | …ages/core/src/sandbox/windows/WindowsSandboxManager.ts | 326 | // Track both versions for inheritance checks to be robust against symlinks. |
| MEDIUM | packages/cli/src/ui/utils/commandUtils.ts | 256 | // Copies a string snippet to the clipboard with robust OSC-52 support. |
| MEDIUM | packages/cli/src/utils/skillUtils.ts | 109 | // Reuse existing robust git cloning utility from extension manager. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | integration-tests/clipboard-linux.test.ts | 81 | ); |
| LOW | docs/reference/policy-engine.md | 301 | # (Optional) The name of an MCP server. Can be combined with toolName |
| LOW | docs/reference/policy-engine.md | 321 | # it effectively matches from the start of the command. |
| LOW | scripts/build_package.js | 1 | /** |
| LOW | scripts/sandbox_command.js | 1 | /** |
| LOW | scripts/start.js | 1 | /** |
| LOW | scripts/send_gemini_request.sh | 1 | #!/bin/bash |
| LOW | scripts/build.js | 1 | /** |
| LOW | scripts/clean.js | 1 | /** |
| LOW | scripts/generate-git-commit-info.js | 1 | /** |
| LOW | scripts/build_vscode_companion.js | 1 | /** |
| LOW | scripts/build_sandbox.js | 1 | /** |
| LOW | scripts/copy_files.js | 1 | #!/usr/bin/env node |
| LOW | scripts/harvest_api_reliability.sh | 1 | #!/bin/bash |
| LOW | scripts/copy_bundle_assets.js | 1 | /** |
| LOW | packages/core/src/utils/schemaValidator.ts | 21 | // See: https://ajv.js.org/options.html#strict-mode-options |
| LOW | packages/core/src/hooks/hookTranslator.ts | 221 | |
| LOW | packages/core/src/services/shellExecutionService.ts | 81 | return `${BASH_SHOPT_GUARD} ${command}`; |
| LOW | packages/core/src/services/modelConfigService.ts | 21 | // In many cases the model (or model config alias) is sufficient to fully |
| LOW | packages/core/src/policy/config.ts | 381 | // Priority bands (tiers): |
| LOW | packages/core/src/policy/policies/read-only.toml | 1 | # Priority system for policy rules: |
| LOW | packages/core/src/policy/policies/yolo.toml | 1 | # Priority system for policy rules: |
| LOW | packages/core/src/policy/policies/yolo.toml | 21 | # 4.2: MCP servers with trust=true (persistent trusted servers) |
| LOW | packages/core/src/policy/policies/plan.toml | 1 | # Priority system for policy rules: |
| LOW | packages/core/src/policy/policies/plan.toml | 21 | # 4.2: MCP servers with trust=true (persistent trusted servers) |
| LOW | packages/core/src/policy/policies/write.toml | 1 | # Priority system for policy rules: |
| LOW | packages/cli/src/ui/components/InboxDialog.tsx | 921 | <Text color={theme.text.secondary}>No items in inbox.</Text> |
| LOW | packages/cli/src/ui/components/InboxDialog.tsx | 981 | // terminals. Every visible row — skill items, patch items, memory-patch |
| LOW | packages/cli/src/ui/components/InputPrompt.tsx | 821 | // Record paste time to prevent accidental auto-submission |
| LOW | packages/cli/src/ui/hooks/useGeminiStream.ts | 1101 | // we should maximize the amount of output sent to <Static />. |
| LOW | packages/cli/src/config/settings.ts | 601 | const USER_GCP_PROJECT = '_GEMINI_USER_GCP_PROJECT'; |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | scripts/send_gemini_request.sh | 2 | # ----------------------------------------------------------------------------- |
| MEDIUM | scripts/send_gemini_request.sh | 4 | # ----------------------------------------------------------------------------- |
| MEDIUM | scripts/send_gemini_request.sh | 28 | # ----------------------------------------------------------------------------- |
| MEDIUM | scripts/harvest_api_reliability.sh | 4 | # ------------------------------- |
| MEDIUM | packages/test-utils/src/perf-test-harness.ts | 489 | // ─── Baseline management ───────────────────────────────────────────── |
| MEDIUM | packages/test-utils/src/perf-test-harness.ts | 538 | // ─── Helpers ───────────────────────────────────────────────────────── |
| MEDIUM | …core/src/agents/browser/browserAgentInvocation.test.ts | 270 | // ─── Structured SubagentProgress emission tests ─────────────────────── |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | docs/cli/custom-commands.md | 0 | please summarize the findings for the pattern `{{args}}`. search results: !{grep -r {{args}} .} |
| HIGH | docs/extensions/writing-extensions.md | 0 | please summarize the findings for the pattern `{{args}}`. search results: !{grep -r {{args}} .} |
| HIGH | …ns/examples/custom-commands/commands/fs/grep-code.toml | 0 | please summarize the findings for the pattern `{{args}}`. search results: !{grep -r {{args}} .} |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | README.md | 190 | export GEMINI_API_KEY="YOUR_API_KEY" |
| HIGH | README.md | 206 | export GOOGLE_API_KEY="YOUR_API_KEY" |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | .github/workflows/gemini-cli-bot-brain.yml | 317 | gh pr create --draft --title "🤖 Gemini Bot Productivity Optimizations" --body "Automated changes generated |
| HIGH | .github/workflows/gemini-cli-bot-brain.yml | 325 | gh pr create --draft --title "🤖 Gemini Bot Productivity Optimizations" --body "Automated changes generat |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …s/test-utils/assets/test-servers/google-workspace.json | 502 | "description": "A simple search term (e.g., \"Budget Q3\"), a Google Drive URL, or a full query string (e.g. |
| LOW | packages/cli/examples/scrollable-list-demo.tsx | 29 | .map(() => 'lorem ipsum '.repeat((index % 3) + 1).trim()) |
| LOW | …kages/cli/src/ui/components/shared/text-buffer.test.ts | 2183 | const longText = `not only five centuries, but also the leap into electronic typesetting, remaining essentially un |
| LOW | …kages/cli/src/ui/components/shared/text-buffer.test.ts | 2186 | It is a long established fact that a reader will be distracted by the readable content of a page when looking at its lay |
| LOW | …kages/cli/src/ui/components/shared/text-buffer.test.ts | 2189 | Contrary to popular belief, Lorem Ipsum is not simply random text. It has roots in a piece of classical Latin literature |
| LOW | …s/cli/src/ui/components/shared/ScrollableList.test.tsx | 39 | .map(() => 'lorem ipsum '.repeat((index % 3) + 1).trim()) |
| LOW | packages/cli/src/ui/hooks/useHistoryManager.test.ts | 275 | const email = 'user@example.com'; |
| LOW | packages/cli/src/ui/hooks/useHistoryManager.test.ts | 292 | const email = 'user@example.com'; |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | scripts/review.sh | 67 | # Create a detached worktree from origin/main |
| MEDIUM | .github/workflows/test-build-binary.yml | 85 | # Create the P12 file |
| MEDIUM | .github/workflows/test-build-binary.yml | 88 | # Create a temporary keychain |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | scripts/create_alias.sh | 24 | # Check if the alias already exists |
| LOW | scripts/review.sh | 55 | # Check if it's actually a registered worktree |
| LOW | .github/workflows/eval-pr.yml | 77 | # Check if comment already exists to avoid spamming |
| LOW | .github/workflows/eval-pr.yml | 147 | # Check if user is a maintainer |
| LOW | .github/workflows/release-patch-3-release.yml | 255 | # Check if this was a version consistency failure |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | scripts/send_gemini_request.sh | 18 | # Usage: |
| LOW | scripts/harvest_api_reliability.sh | 9 | # Usage: |