Repository Analysis

holaboss-ai/holaOS

Open-source All in One AI agent workspace. Run any agent — Claude Code, Codex — across your tools (100+ integrations + MCP), apps, browser, and files, with shared memory. Built-in models or BYOK.

5.4 Low AI signal View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of holaboss-ai/holaOS, a TypeScript project with 5,469 GitHub stars. SynthScan v2.0 examined 507,157 lines of code across 1441 source files, recording 2663 pattern matches distributed across 13 syntactic categories. The overall adjusted score of 5.4 places this repository in the Low AI signal band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

5.4
Adjusted Score
5.4
Raw Score
100%
Time Factor
2026-08-02
Last Push
5.5K
Stars
TypeScript
Language
507.2K
Lines of Code
1.4K
Files
2.7K
Pattern Hits
2026-08-02
Scan Date
0.00
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

Longitudinal tracking requires multiple scan runs. Once this repository is re-scanned after new commits land, this chart will visualise how the synthetic code signal evolves over time — enabling you to detect whether AI authorship is growing, stabilising, or being actively corrected by human engineers.

No multi-scan history yet — run the scanner again to build trend data.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 1HIGH 2MEDIUM 165LOW 2495

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 2663 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Hyper-Verbose Identifiers2229 hits · 1890 pts
SeverityFileLineSnippetContext
LOWruntime/api-server/src/workspace-attachment-memory.ts677export function attachmentDocumentRootNodeId(treeId: string): string {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts681function attachmentDocumentChunkNodeId(treeId: string, index: number): string {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts689function toolResultDocumentRootNodeId(treeId: string): string {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts693function toolResultDocumentChunkNodeId(treeId: string, index: number): string {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts705function outputDocumentChunkNodeId(treeId: string, index: number): string {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts713function imageUrlDocumentRootNodeId(treeId: string): string {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts717function imageUrlDocumentChunkNodeId(treeId: string, index: number): string {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts108export function workspaceArtifactBackfillStateToken(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts201function workspaceRelatedEntityResolver(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts259function outputArtifactContextDescriptorPriority(descriptor: WorkspaceOutputDocumentTreeDescriptor): number {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts266function compareOutputArtifactContextDescriptors(CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts277function compareToolResultArtifactContextDescriptors(CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts291function compareAttachmentArtifactContextDescriptors(CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts303function compareImageUrlArtifactContextDescriptors(CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts352function artifactRelatedExtractionContent(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts370async function extractArtifactDocumentRelatedInfo(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts398function artifactDocumentRelations(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts454function artifactDocumentRelationsFromStoredPath(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts504function syncStoredArtifactRootDocument(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts605function chunkExcerptsForArtifactTree(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts758function imageExtensionForMimeType(value: string | null | undefined): string {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts815function detectInlineImageMimeType(bytes: Uint8Array): string | null {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts921function hasExtractableAttachmentContent(attachment: TurnInputAttachment): boolean {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts976function normalizeAttachmentTextContent(rawText: string, attachment: TurnInputAttachment): string {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts983function hasExtractableOutputContent(output: OutputRecord): boolean {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1031function sourceTurnInputAttachmentPosition(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1056function sourceTurnInputImageUrlPosition(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1212async function resolveReferencedImageUrlSource(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1246function resolveReferencedImageUrlSourceSync(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1276function normalizeOutputTextContent(rawText: string, output: OutputRecord): string {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1311function extractImageTextContentWithMacOsVision(absolutePath: string): string | null {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1331function extractImageTextContentWithMacOsVisionBytes(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1350function normalizeImageVisionModelText(payload: Record<string, unknown> | null): string | null {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1391function visionCapableImageMimeType(value: string | null | undefined): string | null {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1405async function extractImageTextContentWithModel(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1492function normalizeExtractedDocumentText(value: string): string {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1501function normalizeWorkbookCellText(value: unknown): string {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1561function workbookRowsFromWorksheet(worksheet: ExcelJSWorksheet): string[][] {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1653async function extractSpreadsheetTextContent(buffer: Buffer, fileName: string): Promise<string | null> {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1695async function readAttachmentTextContent(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1800function readOutputTextContentForBackfill(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1834async function readReferencedImageUrlTextContent(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1861function splitAttachmentTextIntoChunks(value: string): AttachmentChunk[] {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1917function attachmentDocumentRootBody(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1958function attachmentDocumentChunkBody(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts1978function toolResultDocumentRootBody(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts2020function toolResultDocumentChunkBody(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts2145function imageUrlDocumentChunkBody(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts2185async function syncAttachmentNodeEmbedding(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts2277async function syncToolResultNodeEmbedding(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts2329async function syncImageUrlNodeEmbedding(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts2456function attachmentDescriptorFromRootNode(CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts2495function toolResultDescriptorFromRootNode(CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts2533function outputDescriptorFromRootNode(CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts2568function outputArtifactSourceContext(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts2611function imageUrlDescriptorFromRootNode(CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts2641function forwardedOutputRelationTarget(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts2676export function resolveWorkspaceArtifactRelationIdentity(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts2739function outputArtifactRelationsForDescriptor(params: {CODE
LOWruntime/api-server/src/workspace-attachment-memory.ts2937function syncWorkspaceOutputArtifactRelations(params: {CODE
2169 more matches not shown…
Decorative Section Separators147 hits · 460 pts
SeverityFileLineSnippetContext
MEDIUMruntime/api-server/src/app.test.ts14755// ── archive_url tests ──────────────────────────────────────────────────────────COMMENT
MEDIUMruntime/api-server/src/app.ts8936 // ─── Workspace projects ───────────────────────────────────────────COMMENT
MEDIUMruntime/api-server/src/integration-store-catalog.ts55 // ───── Hero ─────────────────────────────────────────────────────COMMENT
MEDIUMruntime/api-server/src/integration-store-catalog.ts73 // ───── Supported: tech ─────────────────────────────────────────COMMENT
MEDIUMruntime/api-server/src/integration-store-catalog.ts103 // ───── Supported: marketing ────────────────────────────────────COMMENT
MEDIUMruntime/api-server/src/workspace-skill-import.test.ts17// ─── parseGithubSkillRef ──────────────────────────────────────────────COMMENT
MEDIUMruntime/api-server/src/workspace-skill-import.test.ts47// ─── slugifySkillId ───────────────────────────────────────────────────COMMENT
MEDIUMruntime/api-server/src/workspace-skill-import.test.ts57// ─── mapSkillFrontmatter ──────────────────────────────────────────────COMMENT
MEDIUMruntime/api-server/src/workspace-skill-import.test.ts86// ─── importSkillFromGithub (full path, stubbed fetch) ─────────────────COMMENT
MEDIUMruntime/deploy/package_macos_runtime.sh40# ─── Incremental cache gate ─────────────────────────────────────────────COMMENT
MEDIUM…bedded-skills/app-builder-sdk/sdk-package/src/types.ts3// ─── Bridge ────────────────────────────────────────────────────────────────COMMENT
MEDIUM…bedded-skills/app-builder-sdk/sdk-package/src/types.ts32// ─── Transport contract ────────────────────────────────────────────────────COMMENT
MEDIUM…bedded-skills/app-builder-sdk/sdk-package/src/types.ts46// ─── Provider Registry ─────────────────────────────────────────────────────COMMENT
MEDIUM…bedded-skills/app-builder-sdk/sdk-package/src/types.ts72// ─── Type helpers: schema → row type vending ───────────────────────────────COMMENT
MEDIUM…bedded-skills/app-builder-sdk/sdk-package/src/types.ts101// ─── Resource ──────────────────────────────────────────────────────────────COMMENT
MEDIUM…bedded-skills/app-builder-sdk/sdk-package/src/types.ts132// ─── Action ────────────────────────────────────────────────────────────────COMMENT
MEDIUM…bedded-skills/app-builder-sdk/sdk-package/src/types.ts196// ─── Sync ──────────────────────────────────────────────────────────────────COMMENT
MEDIUM…bedded-skills/app-builder-sdk/sdk-package/src/types.ts221// ─── DbView ────────────────────────────────────────────────────────────────COMMENT
MEDIUM…bedded-skills/app-builder-sdk/sdk-package/src/types.ts245// ─── App ───────────────────────────────────────────────────────────────────COMMENT
MEDIUM…bedded-skills/app-builder-sdk/sdk-package/src/types.ts306// ─── Internal runtime state ────────────────────────────────────────────────COMMENT
MEDIUM…bedded-skills/app-builder-sdk/sdk-package/src/types.ts364// ─── State backend contract ────────────────────────────────────────────────COMMENT
MEDIUM…er-sdk/sdk-package/src/runtime/state-backend-sqlite.ts178 // ─── private ──────────────────────────────────────────────────────────────COMMENT
MEDIUM…/app-builder-sdk/sdk-package/src/runtime/mcp-server.ts171// ─── Tool registration ─────────────────────────────────────────────────────COMMENT
MEDIUM…/app-builder-sdk/sdk-package/src/runtime/mcp-server.ts337// ─── Tool handlers extracted for clarity / unit reuse ──────────────────────COMMENT
MEDIUM…/app-builder-sdk/sdk-package/src/runtime/mcp-server.ts434// ─── Helpers ───────────────────────────────────────────────────────────────COMMENT
MEDIUM…pp-builder-sdk/reference/slack-messaging/e2e-bearer.ts46// ─── SUT ────────────────────────────────────────────────────────────────────COMMENT
MEDIUM…pp-builder-sdk/reference/slack-messaging/e2e-bearer.ts53// ─── Scenario ───────────────────────────────────────────────────────────────COMMENT
MEDIUM…kills/app-builder-sdk/reference/slack-messaging/e2e.ts20// ─── Env ───────────────────────────────────────────────────────────────────COMMENT
MEDIUM…kills/app-builder-sdk/reference/slack-messaging/e2e.ts33// ─── Auto-discover: Composio Slack connection ──────────────────────────────COMMENT
MEDIUM…kills/app-builder-sdk/reference/slack-messaging/e2e.ts71// ─── Build SUT ─────────────────────────────────────────────────────────────COMMENT
MEDIUM…kills/app-builder-sdk/reference/slack-messaging/e2e.ts78// ─── Auto-discover: own Slack user_id for DM-to-self ───────────────────────COMMENT
MEDIUM…kills/app-builder-sdk/reference/slack-messaging/e2e.ts95// ─── Minimal BDD harness ───────────────────────────────────────────────────COMMENT
MEDIUM…kills/app-builder-sdk/reference/slack-messaging/e2e.ts151// ───────────────────────────────────────────────────────────────────────────COMMENT
MEDIUM…kills/app-builder-sdk/reference/slack-messaging/e2e.ts153// ───────────────────────────────────────────────────────────────────────────COMMENT
MEDIUM…kills/app-builder-sdk/reference/slack-messaging/e2e.ts301// ─── Summary ───────────────────────────────────────────────────────────────COMMENT
MEDIUM…ills/app-builder-sdk/reference/gcalendar-events/e2e.ts24// ─── Env ───────────────────────────────────────────────────────────────────COMMENT
MEDIUM…ills/app-builder-sdk/reference/gcalendar-events/e2e.ts37// ─── Auto-discover: Composio Calendar connection ───────────────────────────COMMENT
MEDIUM…ills/app-builder-sdk/reference/gcalendar-events/e2e.ts75// ─── Build SUT ─────────────────────────────────────────────────────────────COMMENT
MEDIUM…ills/app-builder-sdk/reference/gcalendar-events/e2e.ts84// ─── Minimal BDD harness ───────────────────────────────────────────────────COMMENT
MEDIUM…ills/app-builder-sdk/reference/gcalendar-events/e2e.ts143// ───────────────────────────────────────────────────────────────────────────COMMENT
MEDIUM…ills/app-builder-sdk/reference/gcalendar-events/e2e.ts145// ───────────────────────────────────────────────────────────────────────────COMMENT
MEDIUM…ills/app-builder-sdk/reference/gcalendar-events/e2e.ts275// ─── Summary ───────────────────────────────────────────────────────────────COMMENT
MEDIUM…ls/app-builder-sdk/reference/telegram-messaging/e2e.ts22// ─── Env ───────────────────────────────────────────────────────────────────COMMENT
MEDIUMruntime/state-store/src/store.ts1952 // ─── Workspace projects ─────────────────────────────────────────────COMMENT
MEDIUMruntime/harness-host/src/codex.ts120 // ── JSON-RPC dispatch state ─────────────────────────────────────────COMMENT
MEDIUMruntime/harness-host/src/codex.ts159 // ── Streaming state ─────────────────────────────────────────────────COMMENT
MEDIUMruntime/harness-host/src/codex.ts427 // ── Stdout reader ───────────────────────────────────────────────────COMMENT
MEDIUMruntime/harness-host/src/codex.ts462 // ── Handshake → turn ────────────────────────────────────────────────COMMENT
MEDIUMruntime/harness-host/src/codex.ts600 // ── Graceful shutdown ───────────────────────────────────────────────COMMENT
MEDIUMruntime/channel-gateway/src/connectors/wecom.ts58// ── Structural slices of @wecom/aibot-node-sdk (lazily imported) ─────────────COMMENT
MEDIUMruntime/channel-gateway/src/connectors/wecom.ts261 // ── Streaming (editMessages path) ──────────────────────────────────────────COMMENT
MEDIUMruntime/channel-gateway/src/connectors/qq.ts42// ── Structural slices of qq-official-bot (lazily imported) ───────────────────COMMENT
MEDIUMruntime/channel-gateway/src/connectors/discord.ts58// ── Structural slices of discord.js (lazily imported) ────────────────────────COMMENT
MEDIUMdocs/proposals.md243│ 📄 Q3 launch #2 │ ┌──── Artifact ─────────────┐ │CODE
MEDIUMdocs/plans/2026-06-27-holaapp-bundles-prd.md161# ── what the user SEES ───────────────────────────────────────────COMMENT
MEDIUMdocs/plans/2026-06-27-holaapp-bundles-prd.md171# ── the hidden COPILOT layer (NEVER surfaced to the user) ─────────COMMENT
MEDIUMdocs/plans/2026-06-27-holaapp-bundles-prd.md188# ── connections the app needs (optional) ─────────────────────────COMMENT
MEDIUMpackages/app-builder-sdk/test/slack.test.ts134 // ─── Regression: real-Slack bugs found by E2E ────────────────────────────COMMENT
MEDIUM…/app-builder-sdk/test/manifest-and-entry-point.test.ts161// ─── helpers ──────────────────────────────────────────────────────────────COMMENT
MEDIUM…pp-builder-sdk/reference/slack-messaging/e2e-bearer.ts46// ─── SUT ────────────────────────────────────────────────────────────────────COMMENT
87 more matches not shown…
Structural Annotation Overuse117 hits · 162 pts
SeverityFileLineSnippetContext
LOWruntime/api-server/src/composio-minimal-example.ts344 // Step 1: Create managed connect link (get OAuth redirect URL)COMMENT
LOWruntime/api-server/src/composio-minimal-example.ts356 // Step 2: Wait for connected account to become ACTIVECOMMENT
LOWruntime/api-server/src/composio-minimal-example.ts369 // Step 3: Make a proxy request to verify the token worksCOMMENT
LOWruntime/api-server/src/composio-test-server.ts258 // Step 1: Create connect linkCOMMENT
LOWruntime/api-server/src/composio-test-server.ts278 // Step 2: Open OAuth popup + poll statusCOMMENT
LOWruntime/api-server/src/composio-test-server.ts341 // Step 3: Proxy requestCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md43### Step 1: Write failing Composio service testsCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md179### Step 2: Run tests to verify they failCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md189### Step 3: Implement ComposioServiceCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md439### Step 4: Run tests to verify they passCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md449### Step 5: CommitCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md466### Step 1: Write failing broker test for Composio token resolutionCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md572### Step 2: Run tests to verify they failCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md582### Step 3: Extend IntegrationBrokerServiceCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md641### Step 4: Run tests to verify they passCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md651### Step 5: Run all existing integration tests to verify no regressionCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md662### Step 6: CommitCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md678### Step 1: Add Composio service construction and routesCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md700### Step 2: Add the connect routesCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md793### Step 3: Add the provider-to-toolkit mapping constantCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md807### Step 4: Run existing tests to verify no regressionCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md818### Step 5: CommitCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md836### Step 1: Add Composio connect typesCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md865### Step 2: Add preload IPC methodsCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md878### Step 3: Add main process IPC handlersCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md936### Step 4: Verify desktop typecheckCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md946### Step 5: CommitCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md962### Step 1: Read the current pane codeCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md966### Step 2: Add Composio connect state and handlerCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md1029### Step 3: Add the Managed Connect buttonCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md1046### Step 4: Verify desktop typecheckCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md1056### Step 5: CommitCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md1069### Step 1: Run all runtime testsCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md1086### Step 2: Verify desktop buildCOMMENT
LOW…ans/2026-03-31-composio-phase-4-implementation-plan.md1096### Step 3: Manual E2E verification (requires COMPOSIO_API_KEY)COMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md65### Step 1: Write failing broker service testsCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md367### Step 2: Run tests to verify they failCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md377### Step 3: Implement the broker serviceCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md509### Step 4: Run tests to verify they passCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md519### Step 5: CommitCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md535### Step 1: Write failing route testCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md622### Step 2: Run tests to verify the route test failsCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md632### Step 3: Register the broker route in app.tsCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md675### Step 4: Run tests to verify they passCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md685### Step 5: Verify existing tests still passCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md696### Step 6: CommitCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md716### Step 1: Create the integration clientCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md782### Step 2: Update google-api.ts to use the integration clientCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md846### Step 3: Update app.runtime.yaml env_contractCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md870### Step 4: Verify the module buildsCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md880### Step 5: CommitCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md901### Step 1: Create the integration clientCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md967### Step 2: Update google-api.ts to use the integration clientCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md996### Step 3: Update app.runtime.yaml env_contractCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md1020### Step 4: Verify the module buildsCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md1030### Step 5: CommitCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md1051### Step 1: Create the integration clientCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md1117### Step 2: Update github-api.ts to use the integration clientCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md1177### Step 3: Update app.runtime.yaml env_contractCOMMENT
LOW…2026-03-30-integrations-phase-2-implementation-plan.md1201### Step 4: Verify the module buildsCOMMENT
57 more matches not shown…
Over-Commented Block119 hits · 102 pts
SeverityFileLineSnippetContext
LOWruntime/api-server/src/ts-runner.ts2121 // harness's resume model:COMMENT
LOWruntime/api-server/src/claimed-input-executor.ts3861 // immutable, so it must win over binding state. The bindingCOMMENT
LOWruntime/api-server/src/image-generation-model.ts561COMMENT
LOWruntime/api-server/src/app-lifecycle-worker.ts501}): Promise<AppSetupLogResult | null> {COMMENT
LOWruntime/api-server/src/composio-api-client.ts1// Server-side client for Composio's curated API surface, used by theCOMMENT
LOWruntime/api-server/src/runtime-tools-mcp.ts61 // Integration connect/config. propose_connect returns its "Connect" cardCOMMENT
LOWruntime/api-server/src/app.ts3741COMMENT
LOWruntime/api-server/src/app.ts4061 appId,COMMENT
LOWruntime/api-server/src/app.ts4521 const appId = typeof entry.app_id === "string" ? entry.app_id : "";COMMENT
LOWruntime/api-server/src/app.ts9901 // Serialize concurrent installs for the same (workspaceId, appId).COMMENT
LOWruntime/api-server/src/runner-worker.ts861 // TTFT dissection line (greppable in runtime.log via stdout). The harnessCOMMENT
LOWruntime/api-server/src/runtime-agent-tools.ts8821 workspaceDir,COMMENT
LOWruntime/api-server/src/runtime-agent-tools.ts8841 // the caller is the App Builder subagent itself, queue the follow-upCOMMENT
LOWruntime/api-server/src/active-account-resolver.ts1// Account resolution for "which of the user's N connected accountsCOMMENT
LOWruntime/api-server/src/workspace-app-host-lint.ts1// Reject app source that hardcodes upstream API hosts for toolkits weCOMMENT
LOWruntime/api-server/src/integration-proposal-gate.ts1// Gate logic for "agent proposed N integration Connect cards; user hasCOMMENT
LOWruntime/api-server/src/workspace-app-ui-lint.ts1// Dashboard-app UI integrity lints, fired at workspace_apps_registerCOMMENT
LOWruntime/api-server/src/workspace-app-ui-lint.ts21// the design system becomes purely advisory.COMMENT
LOWruntime/api-server/src/workspace-app-ui-lint.ts61 ".cache",COMMENT
LOW…bedded-skills/app-builder-sdk/sdk-package/src/types.ts361 derivedTools: DerivedTool[]COMMENT
LOW…dk/sdk-package/src/bridge-transports/runtime-broker.ts1// Runtime-broker transport — production path inside the Holaboss runtime.COMMENT
LOW…uilder-sdk/sdk-package/src/bridge-transports/bearer.ts1// Generic OAuth bearer-token transport.COMMENT
LOW…/app-builder-sdk/sdk-package/src/runtime/mcp-server.ts1// MCP server boot — exposes SDK app's derived tools as a real MCP serverCOMMENT
LOW…lder-sdk/sdk-package/src/runtime/integration-status.ts1// Integration readiness probe — the canonical way for an SDK app to askCOMMENT
LOW…kills/app-builder-sdk/reference/slack-messaging/app.ts1// SDK REFERENCE — NOT a production module.COMMENT
LOW…kills/app-builder-sdk/reference/slack-messaging/e2e.ts1// Real E2E for the Slack app — BDD-style scenarios against a live Slack workspace.COMMENT
LOW…ls/app-builder-sdk/reference/slack-messaging/server.ts1// Production entry point for the Slack v2 app module.COMMENT
LOW…ills/app-builder-sdk/reference/gcalendar-events/app.ts1// SDK REFERENCE — NOT a production module.COMMENT
LOW…ills/app-builder-sdk/reference/gcalendar-events/e2e.ts1// Real E2E for the Google Calendar app — BDD scenarios against your live calendar.COMMENT
LOW…ls/app-builder-sdk/reference/telegram-messaging/app.ts1// SDK REFERENCE — NOT a production module.COMMENT
LOW…ls/app-builder-sdk/reference/telegram-messaging/app.ts21// { ok: false, description, error_code } in the body. SDK's BridgeClient onlyCOMMENT
LOW…ls/app-builder-sdk/reference/telegram-messaging/e2e.ts1// Real E2E for the Telegram app — BDD-style scenarios against a live bot.COMMENT
LOWruntime/state-store/src/store.test.ts481 assert.equal(path.resolve(err.workspacePath ?? ""), path.resolve(customPath));COMMENT
LOWruntime/state-store/src/store.ts1581 #db: Database.Database | null = null;COMMENT
LOWruntime/state-store/src/store.ts5701 params.createdAt ?? utcNowIso()COMMENT
LOWruntime/state-store/src/store.ts14121 })();COMMENT
LOWruntime/state-store/src/store.ts14161 // collisions — the INSERT OR IGNOREs above ran first), fold the legacyCOMMENT
LOWruntime/state-store/src/store.ts14221 // No monolith file on disk → nothing to fold. Check BEFORE this.db(), whichCOMMENT
LOWruntime/state-store/src/store.ts14241 // would block a real fold if data ever appears. Only a monolith that carriedCOMMENT
LOWruntime/state-store/src/store.ts14481 }COMMENT
LOWruntime/harness-host/src/tool-image-cap.ts1// Cap the images a TOOL returns before they re-enter the model context.COMMENT
LOWruntime/harness-host/src/upstream-error-capture.ts1// LLM provider HTTP errors get normalized to a one-line `errorMessage` byCOMMENT
LOWruntime/harness-host/src/upstream-error-capture.ts141// fresh `globalThis.fetch` stub. Production code never needs this — theCOMMENT
LOWruntime/harness-host/src/claude-code.ts221 const rl = createInterface({ input: child.stdout, crlfDelay: Infinity });COMMENT
LOWruntime/harness-host/src/pi.ts2941 ...(composioInline.tools as unknown as ToolDefinition[]),COMMENT
LOWruntime/harness-host/src/pi.ts3301 // overflow compaction (_runAutoCompaction("overflow") → agent.continue).COMMENT
LOWruntime/harness-host/src/pi.ts3861 thinkingValue: request.thinking_value ?? null,COMMENT
LOWruntime/harness-host/src/pi.ts3901 // resolve before that setTimeout fires, which would tear downCOMMENT
LOWruntime/harness-host/src/pi.ts4001 ? error.nameCOMMENT
LOWruntime/harness-host/src/codex.ts181 finalStatus = "failed";COMMENT
LOW…ans/2026-05-22-interface-design-skill-noop-forensic.md61#47 workspace_apps_registerCOMMENT
LOWscripts/runtime-logs.sh1#!/usr/bin/env bashCOMMENT
LOW…ges/app-builder-sdk/test/workspace-integration.test.ts1// Workspace integration smoke test.COMMENT
LOW…kages/app-builder-sdk/reference/slack-messaging/app.ts1// SDK REFERENCE — NOT a production module.COMMENT
LOW…kages/app-builder-sdk/reference/slack-messaging/e2e.ts1// Real E2E for the Slack app — BDD-style scenarios against a live Slack workspace.COMMENT
LOW…es/app-builder-sdk/reference/slack-messaging/server.ts1// Production entry point for the Slack v2 app module.COMMENT
LOW…gagement-inbox/src/client/components/thread-detail.tsx61// │ │ REPLYING TO │ │ ← context calloutCOMMENT
LOW…ages/app-builder-sdk/reference/gcalendar-events/app.ts1// SDK REFERENCE — NOT a production module.COMMENT
LOW…ages/app-builder-sdk/reference/gcalendar-events/e2e.ts1// Real E2E for the Google Calendar app — BDD scenarios against your live calendar.COMMENT
LOW…es/app-builder-sdk/reference/telegram-messaging/app.ts1// SDK REFERENCE — NOT a production module.COMMENT
59 more matches not shown…
Modern AI Meta-Vocabulary15 hits · 44 pts
SeverityFileLineSnippetContext
MEDIUMruntime/api-server/src/app.test.ts1013 // single-tenant: scaffold created the app under the root workspace dirCOMMENT
MEDIUMruntime/api-server/src/app.test.ts1141 // single-tenant: scaffold created the app under the root workspace dirCOMMENT
MEDIUMruntime/api-server/src/runtime-agent-tools.test.ts2630 // No src/client; the scaffold default is integration-only. RegisterCOMMENT
MEDIUMruntime/api-server/src/workspace-runtime-plan.ts160// floor (the session picker overrides it) and matches the runner-prep scaffold default.COMMENT
MEDIUM…harnesses/src/embedded-skills/app-builder-sdk/SKILL.md156### Multi-step orchestration belongs in workflowsCOMMENT
MEDIUMruntime/harness-host/src/codex.ts1016 "# Holaboss-managed: codex native multi-agent + auto-memory are",CODE
MEDIUM…ans/2026-05-22-interface-design-skill-noop-forensic.md41### Pre-scaffold gateCOMMENT
MEDIUM…ans/2026-05-22-interface-design-skill-noop-forensic.md53Total tool calls in the child (build) session: **71**. Skill invocations: **2** — `app-builder-sdk` (call #3, before scaCODE
MEDIUM…ans/2026-05-22-interface-design-skill-noop-forensic.md58#3 skill(app-builder-sdk) ← pre-scaffold gate ✓COMMENT
MEDIUMdocs/plans/2026-05-25-memory-rag-implementation-plan.md13# Memory RAG implementation planCOMMENT
MEDIUMdocs/plans/2026-05-25-memory-rag-implementation-plan.md143## Phase 0: Lock the RAG contractCOMMENT
MEDIUMdocs/plans/2026-05-25-memory-rag-implementation-plan.md308## Phase 2: Add an LLM-based RAG-grade rerankerCOMMENT
MEDIUMdocs/plans/2026-06-27-capability-design-final.md47## 2. What a capability is NOT (guardrails — these were tried and removed)COMMENT
MEDIUM…ges/app-builder-sdk/test/workspace-integration.test.ts49 // package name. In a real workspace the app-builder skill / scaffoldCOMMENT
MEDIUMapps/desktop/electron/main.ts22375 // still return their root so those guardrails keep applying.COMMENT
Verbosity Indicators14 hits · 24 pts
SeverityFileLineSnippetContext
LOWruntime/api-server/src/composio-minimal-example.ts344 // Step 1: Create managed connect link (get OAuth redirect URL)COMMENT
LOWruntime/api-server/src/composio-minimal-example.ts356 // Step 2: Wait for connected account to become ACTIVECOMMENT
LOWruntime/api-server/src/composio-minimal-example.ts369 // Step 3: Make a proxy request to verify the token worksCOMMENT
LOWruntime/api-server/src/composio-test-server.ts258 // Step 1: Create connect linkCOMMENT
LOWruntime/api-server/src/composio-test-server.ts278 // Step 2: Open OAuth popup + poll statusCOMMENT
LOWruntime/api-server/src/composio-test-server.ts341 // Step 3: Proxy requestCOMMENT
LOW…ges/app-builder-sdk/test/workspace-integration.test.ts66 // Step 1: lifecycle.setupCOMMENT
LOW…ges/app-builder-sdk/test/workspace-integration.test.ts74 // Step 2: lifecycle.startCOMMENT
LOW…ges/app-builder-sdk/test/workspace-integration.test.ts102 // Step 3: verify /mcp/healthCOMMENT
LOW…ges/app-builder-sdk/test/workspace-integration.test.ts118 // Step 4: verify Slack-specific tools registered (proves SDK derivedTools()COMMENT
LOW…ges/app-builder-sdk/test/workspace-integration.test.ts126 // Step 5: clean shutdownCOMMENT
LOWapps/desktop/src/components/publish/PublishScreen.tsx742// Step 1: About — name, description, category, tags, cover, screenshotsCOMMENT
LOWapps/desktop/src/components/publish/PublishScreen.tsx893// Step 2: Bundle — pick apps. The schematic illustration lives on the right.COMMENT
LOWapps/desktop/src/components/publish/PublishScreen.tsx1017// Step 3: Docs — README + onboarding (with prominent AI generate)COMMENT
Hallucination Indicators1 hit · 10 pts
SeverityFileLineSnippetContext
CRITICALdocs/superpowers/plans/2026-06-16-geo-plugin.md1454 GEO_PLUGIN_TEMPLATE_DEFINITION.payload.onboarding.fixed_structure.objects.map(CODE
AI Slop Vocabulary3 hits · 9 pts
SeverityFileLineSnippetContext
MEDIUMruntime/channel-gateway/src/connectors/wechat.ts43// a downloadable file — robust across formats).COMMENT
MEDIUMpackages/editor/src/extensions/BubbleToolbar.tsx82 // Restoring this snapshot before applying makes the action robust.COMMENT
MEDIUMapps/desktop/electron/main.ts4041// name via app.getName()) makes this robust to the product name — includingCOMMENT
Fake / Example Data9 hits · 8 pts
SeverityFileLineSnippetContext
LOW…ntime/api-server/src/integration-proposal-gate.test.ts294 accountLabel: "user@example.com",CODE
LOW…ntime/api-server/src/integration-proposal-gate.test.ts366 accountLabel: "user@example.com",CODE
LOW…ntime/api-server/src/integration-proposal-gate.test.ts419 accountLabel: "user@example.com",CODE
LOWruntime/api-server/src/runtime-agent-tools.test.ts3478 accountLabel: "user@example.com",CODE
LOWruntime/api-server/src/desktop-browser-tools.ts1485 "placeholder" in element ? String(element.placeholder || "") : "",CODE
LOWruntime/api-server/src/desktop-browser-tools.ts1491 const placeholderText = (element) => "placeholder" in element ? String(element.placeholder || "") : "";CODE
LOWruntime/api-server/src/desktop-browser-tools.ts2244 "placeholder" in element ? String(element.placeholder || "") : "",CODE
LOWruntime/api-server/src/desktop-browser-tools.ts2410 "placeholder" in element ? String(element.placeholder || "") : "",CODE
LOW…harnesses/src/embedded-skills/app-builder-sdk/SKILL.md295- **Hardcoded user identity in code** — usernames, email addresses, account ids, workspace names. These are mutable + peCODE
Synthetic Comment Markers1 hit · 8 pts
SeverityFileLineSnippetContext
HIGH…ps/desktop/src/components/publish/LivePreviewPanel.tsx422// Tabs let the user switch. AI-generated content sometimes arrives wrapped inCOMMENT
Cross-Language Confusion (JS/TS)1 hit · 5 pts
SeverityFileLineSnippetContext
HIGHruntime/api-server/src/workspace-attachment-memory.ts104print(recognized.joined(separator: "\n"))CODE
Overly Generic Function Names5 hits · 5 pts
SeverityFileLineSnippetContext
LOW…uilder-sdk/sdk-package/src/runtime/local-action-api.ts106 async function handleRequest(request: Request): Promise<Response> {CODE
LOWruntime/state-store/src/cli.ts222export function handleRequest(operation: string, envelope: RequestEnvelope): JsonValue {CODE
LOW…ckages/app-builder-sdk/src/runtime/local-action-api.ts109 async function handleRequest(request: Request): Promise<Response> {CODE
LOWapps/desktop/electron/browser-pane/http-service.ts397 async function handleRequest(CODE
LOWapps/docs/app/entry.server.tsx9export default async function handleRequest(CODE
Excessive Try-Catch Wrapping2 hits · 2 pts
SeverityFileLineSnippetContext
LOW.github/workflows/publish-macos-intel-desktop.yml195 except Exception as exc:CODE
LOW.github/workflows/ci.yml390 except Exception as exc:CODE