Your agents don’t hand off the work. Kungfu keeps the same Work moving across Codex, Claude, OpenCode, and your own execution surface.
This report summarizes scanner evidence for kungfu-systems/kungfu, a C++ project with 4,527 GitHub stars. SynthScan examined 835,631 lines of code across 4897 source files, recording 5232 pattern matches distributed across 17 syntactic categories. The legacy adjusted pattern signal is 6.4 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 3062 finding(s).
Are imports declared and package/API names verified? 1966 finding(s).
Are wrappers, guards, and repeated structures necessary? 2203 finding(s).
Which changes need focused human review? 5232 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 5232 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | developer/sdk/src/sdk-shared.js | 550 | function isProductAssemblyManifest(pkg) { | CODE |
| LOW | developer/sdk/src/sdk-shared.js | 772 | function findRepoRootWithExtensions(startDir) { | CODE |
| LOW | developer/sdk/src/sdk-shared.js | 802 | function resolveReferenceExtensionsRoot(cwd) { | CODE |
| LOW | developer/sdk/src/sdk-shared.js | 858 | function assembleProductExtensions( | CODE |
| LOW | developer/sdk/src/sdk-kfd.js | 163 | function resolveKfdUpstreamAggregate() { | CODE |
| LOW | developer/sdk/src/sdk-kfd.js | 452 | function resolveKfdAgentRuntimeManifest() { | CODE |
| LOW | developer/sdk/src/sdk-kfd.js | 486 | function buildKfdAgentRuntimeStatus() { | CODE |
| LOW | developer/sdk/src/sdk-kfd.js | 987 | function kfdCheckSupportMatrixFacts() { | CODE |
| LOW | developer/sdk/src/sdk-contract.js | 243 | function resolveContractRegistryPath(repoRoot) { | CODE |
| LOW | developer/sdk/src/sdk-contract.js | 482 | function contractKfdProjectionRows(entry) { | CODE |
| LOW | developer/sdk/src/sdk-contract.js | 869 | function buildContractWorldWitness(repoRoot) { | CODE |
| LOW | framework/core/conanfile.py | 31 | def _candidate_timeline_attempt(): | CODE |
| LOW | framework/core/conanfile.py | 51 | def _qualified_core_host_identity(): | CODE |
| LOW | framework/core/conanfile.py | 71 | def _candidate_timeline_stage(stage, phase, runtime, target=None): | CODE |
| LOW | framework/core/conanfile.py | 156 | def _profile_dependency_roots(profile): | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 10 | def test_assignment_identity_options_are_reusable_across_commands(command): | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 19 | def test_agent_activity_history_projection_keeps_process_success_outside_work(): | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 46 | def test_assignment_session_invoker_bounds_provider_writes_beyond_read_probes(): | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 70 | def test_deterministic_mock_session_invoker_has_no_clock_cutoff(): | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 101 | def test_next_work_selects_the_only_captured_assignment(tmp_path): | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 112 | def test_next_work_requires_explicit_selection_when_ambiguous(tmp_path): | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 127 | def test_explicit_work_selector_can_start_a_fresh_attempt_while_work_executes( | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 143 | def test_explicit_settled_work_reaches_the_fail_closed_start_plan( | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 168 | def test_work_start_phase_plan_only_uses_legal_forward_transitions(phase, mode, stages): | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 185 | def test_work_start_phase_plan_rejects_settled_or_review_work(phase): | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 193 | def test_codex_work_start_plan_discloses_exact_invocation_project_trust(tmp_path): | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 216 | def test_codex_project_trust_is_exact_explicit_and_invocation_scoped(tmp_path): | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 230 | def test_managed_work_start_builds_a_strict_assignment_work_ref(): | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 253 | def test_resumed_authority_writes_remain_visible_when_run_gate_fails( | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 376 | def test_task_capture_creates_a_bounded_assignment_not_runtime(tmp_path): | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 388 | def test_agent_route_completion_persists_shared_onboarding_state(tmp_path): | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 420 | def test_run_from_a_fresh_directory_converges_on_agent_first_onboarding( | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 460 | def test_native_launch_uses_the_selected_current_project_outside_it( | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 516 | def test_native_launch_prefers_the_working_directory_project_to_global_current( | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 559 | def test_successful_managed_work_start_completes_agent_onboarding( | CODE |
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 642 | def test_managed_provider_plan_uses_selected_current_project_outside_it( | CODE |
| LOW | …rk/core/tests/python/test_agent_work_profile_native.py | 150 | def test_native_profile_bootstrap_accepts_python_revision_zero(tmp_path): | CODE |
| LOW | …rk/core/tests/python/test_agent_work_profile_native.py | 164 | def test_native_profile_authority_bundle_restores_clean_home_exactly(tmp_path): | CODE |
| LOW | …rk/core/tests/python/test_agent_work_profile_native.py | 217 | def test_native_profile_authority_import_preflights_all_operations_before_writing( | CODE |
| LOW | …rk/core/tests/python/test_agent_work_profile_native.py | 244 | def test_native_profile_backend_switch_and_rollback_preserve_five_role_identity( | CODE |
| LOW | …rk/core/tests/python/test_agent_work_profile_native.py | 291 | def test_native_profile_retains_authority_freshness_direction_and_causality(tmp_path): | CODE |
| LOW | …work/core/tests/python/test_generic_primitive_dedup.py | 63 | def test_frame_header_exposes_readonly_buffer(captured_run): | CODE |
| LOW | …work/core/tests/python/test_generic_primitive_dedup.py | 77 | def test_rewind_bundle_decode_matches_generated(captured_run): | CODE |
| LOW | …work/core/tests/python/test_generic_primitive_dedup.py | 84 | def test_rewind_bundle_decode_field_by_field(captured_run): | CODE |
| LOW | …ework/core/tests/python/test_agent_command_contract.py | 60 | def test_run_agent_process_streams_output_before_return(tmp_path): | CODE |
| LOW | …ework/core/tests/python/test_agent_command_contract.py | 85 | def test_run_agent_continuation_rejects_transcript_fields_and_root_drift(): | CODE |
| LOW | …ework/core/tests/python/test_agent_command_contract.py | 115 | def _assert_work_control_command_contract(work_control, command_catalog, api_registry): | CODE |
| LOW | …ework/core/tests/python/test_agent_command_contract.py | 128 | def test_work_control_commands_match_the_runtime_payload_contract(): | CODE |
| LOW | …ework/core/tests/python/test_agent_command_contract.py | 160 | def test_agent_session_cli_forwards_the_same_self_describing_action( | CODE |
| LOW | …ework/core/tests/python/test_agent_command_contract.py | 216 | def test_work_console_registry_accepts_capsule_backend(): | CODE |
| LOW | …tests/python/_agent_profile_sdk_qualification_cases.py | 83 | def test_system_profile_release_receipt_is_exact_root_and_shared_with_status( | CODE |
| LOW | …tests/python/_agent_profile_sdk_qualification_cases.py | 277 | def test_missing_member_fails_with_stable_decision_card(tmp_path): | CODE |
| LOW | …tests/python/_agent_profile_sdk_qualification_cases.py | 293 | def test_member_package_symlink_fails_closed(tmp_path): | CODE |
| LOW | …tests/python/_agent_profile_sdk_qualification_cases.py | 310 | def test_member_package_ignores_dependency_directory_symlinks(tmp_path): | CODE |
| LOW | …tests/python/_work_authority_surface_recovery_cases.py | 10 | def test_fresh_recovery_separates_retained_authority_from_target_profile( | CODE |
| LOW | …tests/python/_work_authority_surface_recovery_cases.py | 63 | def test_resume_prepare_reconciles_the_explicit_recovery_source(tmp_path, monkeypatch): | CODE |
| LOW | …tests/python/_work_authority_surface_recovery_cases.py | 123 | def test_fresh_recovery_prepare_does_not_require_newer_profile_work_hooks( | CODE |
| LOW | …tests/python/_work_authority_surface_recovery_cases.py | 179 | def test_fresh_recovery_apply_uses_only_planned_authority_ports(tmp_path, monkeypatch): | CODE |
| LOW | …tests/python/_work_authority_surface_recovery_cases.py | 268 | def test_fresh_recovery_failure_keeps_public_executable_next_actions( | CODE |
| LOW | …tests/python/_work_authority_surface_recovery_cases.py | 301 | def test_fresh_recovery_apply_preserves_complete_lifecycle_state(): | CODE |
| 1917 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ork/core/tests/python/_run_product_path_start_cases.py | 5 | CODE | |
| LOW | …rk/core/tests/python/test_agent_work_profile_native.py | 3 | CODE | |
| LOW | …work/core/tests/python/test_generic_primitive_dedup.py | 6 | CODE | |
| LOW | …tests/python/_agent_profile_sdk_qualification_cases.py | 11 | CODE | |
| LOW | …tests/python/_work_authority_surface_recovery_cases.py | 3 | CODE | |
| LOW | framework/core/tests/python/test_episode_control.py | 3 | CODE | |
| LOW | …/core/tests/python/_agent_profile_sdk_runtime_cases.py | 12 | CODE | |
| LOW | …ework/core/tests/python/test_agent_console_contract.py | 5 | CODE | |
| LOW | …ework/core/tests/python/test_agent_console_contract.py | 6 | CODE | |
| LOW | …ework/core/tests/python/test_agent_console_contract.py | 7 | CODE | |
| LOW | …ework/core/tests/python/test_agent_console_contract.py | 8 | CODE | |
| LOW | …mework/core/tests/python/test_durability_capability.py | 8 | CODE | |
| LOW | …ework/core/tests/python/test_storage_backend_switch.py | 3 | CODE | |
| LOW | …ework/core/tests/python/test_storage_backend_switch.py | 17 | CODE | |
| LOW | framework/core/tests/python/test_runtime_upgrade.py | 3 | CODE | |
| LOW | …mework/core/tests/python/test_profile_lifecycle_cli.py | 7 | CODE | |
| LOW | …work/core/tests/python/test_product_release_history.py | 3 | CODE | |
| LOW | …work/core/tests/python/test_product_release_history.py | 10 | CODE | |
| LOW | framework/core/tests/python/test_profile_composition.py | 3 | CODE | |
| LOW | framework/core/tests/python/test_profile_composition.py | 3 | CODE | |
| LOW | framework/core/tests/python/test_profile_composition.py | 3 | CODE | |
| LOW | framework/core/tests/python/test_profile_composition.py | 3 | CODE | |
| LOW | framework/core/tests/python/test_profile_composition.py | 3 | CODE | |
| LOW | framework/core/tests/python/test_profile_composition.py | 3 | CODE | |
| LOW | framework/core/tests/python/test_profile_composition.py | 3 | CODE | |
| LOW | framework/core/tests/python/test_profile_composition.py | 3 | CODE | |
| LOW | framework/core/tests/python/test_profile_composition.py | 3 | CODE | |
| LOW | framework/core/tests/python/test_profile_composition.py | 3 | CODE | |
| LOW | framework/core/tests/python/test_profile_composition.py | 15 | CODE | |
| LOW | framework/core/tests/python/test_profile_composition.py | 16 | CODE | |
| LOW | framework/core/tests/python/test_profile_composition.py | 17 | CODE | |
| LOW | framework/core/tests/python/test_profile_composition.py | 18 | CODE | |
| LOW | framework/core/tests/python/test_episode_admission.py | 3 | CODE | |
| LOW | framework/core/tests/python/test_episode_admission.py | 12 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 3 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 5 | CODE | |
| LOW | …/core/tests/python/_dogfood_profile_lifecycle_cases.py | 5 | CODE | |
| LOW | framework/core/tests/python/test_query_cli.py | 7 | CODE | |
| LOW | …ework/core/tests/python/_fact_kernel_recovery_cases.py | 4 | CODE | |
| 1901 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/Cargo.toml | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/host-spike/Cargo.toml | 21 | # The embedding FFI seam now lives in the shared kungfu-embedding crate (RFC | COMMENT |
| LOW | crates/host-spike/build.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/host-spike/shim/host_shim.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/host-spike/src/main.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/Cargo.toml | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/src/promote.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/src/self_update.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/src/dispatch.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/src/doctor.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/src/msvc.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/src/registrar.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/src/registrar.rs | 21 | // the declaration back, resolves the artifact for the host platform, verifies | COMMENT |
| LOW | crates/shifu/src/registrar.rs | 61 | /// pinned Buildchain binary before a declared distribution task. Normally it | COMMENT |
| LOW | crates/shifu/src/registrar.rs | 281 | platform_slice_root: String, | COMMENT |
| LOW | crates/shifu/src/main.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/src/main.rs | 361 | } | COMMENT |
| LOW | crates/shifu/src/main.rs | 421 | cmd.raw_arg(line); | COMMENT |
| LOW | crates/shifu/src/main.rs | 461 | .map(Path::to_path_buf) | COMMENT |
| LOW | crates/kungfu-embedding/Cargo.toml | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu-core/src/lib.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu-core/src/bootstrap.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu-core/src/bootstrap.rs | 21 | // 3. bootstrap: download the pinned prebuilt release binary into the cache | COMMENT |
| LOW | crates/shifu-core/src/probe.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/Cargo.toml | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/build.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/src/pins.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/src/envs.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/src/variant.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/src/variant.rs | 21 | // resolution), so it is not a mechanical "be python" the trunk can own. | COMMENT |
| LOW | crates/trunk/src/doctor.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/src/fsck.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/src/help.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/src/help.rs | 21 | // | COMMENT |
| LOW | crates/trunk/src/launch.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/pyproject.toml | 41 | # by default so untyped modules do not fail; a module opts into real checking | COMMENT |
| LOW | framework/core/pyproject.toml | 141 | # ~700 errors). But function *bodies* are checked: an unannotated def used to be | COMMENT |
| LOW | framework/core/pyproject.toml | 181 | # a module object, and `sys._framework` / `sys._base_executable` / `sys._home`, | COMMENT |
| LOW | framework/core/pyproject.toml | 201 | disable_error_code = ["override", "attr-defined"] | COMMENT |
| LOW | framework/core/conanfile.py | 681 | # Conan itself runs under Shifu's pinned `uv run --frozen` interpreter. | COMMENT |
| LOW | framework/core/slices/content-store/probe.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/embedding/CMakeLists.txt | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/embedding/main.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/view-encapsulation/CMakeLists.txt | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/view-encapsulation/probe.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/common/sha256.h | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/schema-registry/CMakeLists.txt | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/schema-registry/producer.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/schema-registry/decoder.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/fact-ledger/CMakeLists.txt | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/fact-ledger/action_recorder.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/fact-ledger/export.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/fact-ledger/host.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/fact-ledger/host.cpp | 21 | #include <kungfu/yijinjing/time.h> | COMMENT |
| LOW | framework/core/slices/libwasm-shared-membrane/probe.h | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/libwasm-shared-membrane/host.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/tests/shell-exit-code.test.js | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/tests/bench/dispatch_watcher_bench.js | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/tests/bench/dispatch_load.py | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | …ork/core/tests/python/test_episode_bundle_roundtrip.py | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| 840 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | framework/core/conanfile.py | 523 | except Exception: | CODE |
| HIGH | …ore/tests/python/test_live_peer_continuity_campaign.py | 67 | except PermissionError: | CODE |
| HIGH | …amework/core/tests/python/test_kfx_async_capability.py | 143 | except OSError: | CODE |
| HIGH | …alification/python-kfx-asyncio-performance/workload.py | 418 | except OSError: | CODE |
| HIGH | …/qualification/live-peer-continuity/native_campaign.py | 518 | except peer_lifecycle.PeerLifecycleError: | CODE |
| HIGH | …alification/runtime-activation/performance_workload.py | 189 | except ImportError: | CODE |
| HIGH | framework/core/.gyp/gen_kungfubuildinfo.py | 50 | except Exception: | CODE |
| HIGH | framework/core/src/python/kungfu/release_channel.py | 559 | except FileNotFoundError: | CODE |
| HIGH | …work/core/src/python/kungfu/product_release_history.py | 105 | except FileNotFoundError: | CODE |
| HIGH | framework/core/src/python/kungfu/runtime_processes.py | 42 | except (psutil.Error, OSError, ValueError): | CODE |
| HIGH | framework/core/src/python/kungfu/runtime_processes.py | 55 | except (psutil.Error, OSError, ValueError): | CODE |
| HIGH | framework/core/src/python/kungfu/runtime_state.py | 134 | except OSError: | CODE |
| HIGH | framework/core/src/python/kungfu/runtime_state.py | 595 | except ValueError: | CODE |
| HIGH | framework/core/src/python/kungfu/runtime_state.py | 126 | except FileNotFoundError: | CODE |
| HIGH | …k/core/src/python/kungfu/distribution_update_policy.py | 333 | except FileNotFoundError: | CODE |
| HIGH | framework/core/src/python/kungfu/kfx_host.py | 395 | except asyncio.CancelledError: | CODE |
| HIGH | …ork/core/src/python/kungfu/assignment_orchestration.py | 196 | except FileNotFoundError: | CODE |
| HIGH | framework/core/src/python/kungfu/coordination/locks.py | 185 | except FileNotFoundError: | CODE |
| HIGH | framework/core/src/python/kungfu/skill/catalog.py | 628 | except OSError: | CODE |
| HIGH | …work/core/src/python/kungfu/skill/_registry/support.py | 319 | except OSError: | CODE |
| HIGH | …work/core/src/python/kungfu/_runtime_upgrade/common.py | 159 | except FileNotFoundError: | CODE |
| HIGH | …amework/core/src/python/kungfu/_peer_lifecycle/host.py | 203 | except FileNotFoundError: | CODE |
| HIGH | …amework/core/src/python/kungfu/_peer_lifecycle/host.py | 207 | except FileNotFoundError: | CODE |
| HIGH | …amework/core/src/python/kungfu/_peer_lifecycle/host.py | 243 | except subprocess.TimeoutExpired: | CODE |
| HIGH | framework/core/src/python/kungfu/projects/__init__.py | 194 | except OSError: | CODE |
| HIGH | framework/core/src/python/kungfu/projects/__init__.py | 209 | except OSError: | CODE |
| HIGH | …re/src/python/kungfu/assignment_provenance/__init__.py | 85 | except (OSError, json.JSONDecodeError): | CODE |
| HIGH | framework/core/src/python/kungfu/capability/guest.py | 91 | except (OSError, ValueError): | CODE |
| HIGH | framework/core/src/python/kungfu/runtime/time.py | 50 | except ValueError: | CODE |
| HIGH | framework/core/src/python/kungfu/rewind/proxy.py | 61 | except (ValueError, AttributeError): | CODE |
| HIGH | framework/core/src/python/kungfu/rewind/proxy.py | 115 | except ValueError: | CODE |
| HIGH | …rk/core/src/python/kungfu/rewind/hook/sitecustomize.py | 12 | except Exception: # noqa: BLE001 — never break the user's interpreter | CODE |
| HIGH | …rk/core/src/python/kungfu/rewind/hook/sitecustomize.py | 35 | except Exception: # noqa: BLE001 | CODE |
| HIGH | …rk/core/src/python/kungfu/rewind/hook/rewind_client.py | 287 | except Exception: # noqa: BLE001 — adapters must never break imports | CODE |
| HIGH | …rk/core/src/python/kungfu/rewind/hook/rewind_client.py | 56 | except OSError: | CODE |
| HIGH | …mework/core/src/python/kungfu/agent/session_surface.py | 210 | except (OSError, ValueError): | CODE |
| HIGH | …mework/core/src/python/kungfu/agent/session_surface.py | 327 | except WorkspaceTargetRequired: | CODE |
| HIGH | …mework/core/src/python/kungfu/agent/session_surface.py | 408 | except OSError: | CODE |
| HIGH | …mework/core/src/python/kungfu/agent/session_surface.py | 121 | except OSError: | CODE |
| HIGH | …ork/core/src/python/kungfu/agent/provider_bootstrap.py | 544 | except OSError: | CODE |
| HIGH | framework/core/src/python/kungfu/agent/native_launch.py | 152 | except WorkspaceTargetRequired: | CODE |
| HIGH | framework/core/src/python/kungfu/agent/native_launch.py | 161 | except (OSError, ValueError): | CODE |
| HIGH | framework/core/src/python/kungfu/agent/native_launch.py | 186 | except (OSError, ValueError): | CODE |
| HIGH | …ork/core/src/python/kungfu/agent/_run_agent/runtime.py | 797 | except BrokenPipeError: | CODE |
| HIGH | …ork/core/src/python/kungfu/agent/_run_agent/runtime.py | 802 | except BrokenPipeError: | CODE |
| HIGH | framework/core/src/python/kungfu/cli/site.py | 26 | except OSError: | CODE |
| HIGH | framework/core/src/python/kungfu/cli/site.py | 42 | except (AttributeError, OSError, TypeError): | CODE |
| HIGH | framework/core/src/python/kungfu/cli/site.py | 46 | except (AttributeError, OSError, TypeError): | CODE |
| HIGH | framework/core/src/python/kungfu/cli/site.py | 382 | except OSError: | CODE |
| HIGH | framework/core/src/python/kungfu/cli/site.py | 398 | except OSError: | CODE |
| HIGH | framework/core/src/python/kungfu/cli/site.py | 404 | except OSError: | CODE |
| HIGH | …rk/core/src/python/kungfu/cli/bridging/pdm/__init__.py | 92 | except Exception: | CODE |
| HIGH | …ework/core/src/python/kungfu/cli/commands/workspace.py | 550 | except KeyboardInterrupt: | CODE |
| HIGH | …mework/core/src/python/kungfu/_exit_bundle/importer.py | 173 | except (RuntimeError, ValueError): | CODE |
| HIGH | …ore/src/python/kungfu/_distribution_update/download.py | 254 | except FileNotFoundError: | CODE |
| HIGH | …core/src/python/kungfu/_profile_composition/support.py | 112 | except (OSError, json.JSONDecodeError, AttributeError): | CODE |
| HIGH | …core/src/python/kungfu/_profile_composition/support.py | 134 | except (KeyError, profile_sdk.ProfileSdkError): | CODE |
| HIGH | …/python/kungfu/assignment_runtime/profile_lifecycle.py | 91 | except (KeyError, profile_sdk.ProfileSdkError): | CODE |
| HIGH | …work/core/src/python/kungfu/_runtime_service/engine.py | 193 | except Exception: # noqa: BLE001 - lock logic must never break serving | CODE |
| HIGH | …work/core/src/python/kungfu/_runtime_service/common.py | 161 | except (psutil.Error, OSError, ValueError, AttributeError): | CODE |
| 6 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ework/core/tests/python/test_storage_backend_switch.py | 149 | CODE | |
| LOW | …ework/core/tests/python/test_storage_backend_switch.py | 160 | CODE | |
| LOW | framework/core/tests/python/test_release_provenance.py | 186 | CODE | |
| LOW | framework/core/tests/python/test_release_provenance.py | 333 | CODE | |
| LOW | …ts/python/_agent_console_contract_interactive_cases.py | 692 | CODE | |
| LOW | framework/core/tests/python/test_exit_verifier.py | 194 | CODE | |
| LOW | …k/core/tests/python/test_agent_native_first_run_pty.py | 13 | CODE | |
| LOW | …amework/core/tests/python/test_cli_surface_contract.py | 292 | CODE | |
| LOW | …re/tests/qualification/fact_kernel_dogfood/workload.py | 532 | CODE | |
| LOW | …alification/python-kfx-asyncio-performance/workload.py | 341 | CODE | |
| LOW | …alification/python-kfx-asyncio-performance/workload.py | 481 | CODE | |
| LOW | …alification/python-kfx-asyncio-performance/workload.py | 352 | CODE | |
| LOW | …/qualification/live-peer-continuity/native_campaign.py | 85 | CODE | |
| LOW | …/qualification/live-peer-continuity/native_campaign.py | 274 | CODE | |
| LOW | …qualification/fact-kernel-fold-performance/workload.py | 66 | CODE | |
| LOW | framework/core/src/python/kungfu/assignment_evidence.py | 60 | CODE | |
| LOW | framework/core/src/python/kungfu/release_channel.py | 219 | CODE | |
| LOW | framework/core/src/python/kungfu/profile_sdk_kfd3.py | 690 | CODE | |
| LOW | framework/core/src/python/kungfu/dogfood.py | 88 | CODE | |
| LOW | framework/core/src/python/kungfu/distribution_update.py | 286 | CODE | |
| LOW | …ore/src/python/kungfu/workspace_federation_observer.py | 240 | CODE | |
| LOW | framework/core/src/python/kungfu/diagnostics.py | 343 | CODE | |
| LOW | framework/core/src/python/kungfu/profile_composition.py | 115 | CODE | |
| LOW | framework/core/src/python/kungfu/profile_sdk_support.py | 440 | CODE | |
| LOW | …work/core/src/python/kungfu/product_release_history.py | 149 | CODE | |
| LOW | …work/core/src/python/kungfu/product_release_history.py | 431 | CODE | |
| LOW | …work/core/src/python/kungfu/product_release_history.py | 658 | CODE | |
| LOW | …work/core/src/python/kungfu/product_release_history.py | 736 | CODE | |
| LOW | framework/core/src/python/kungfu/exit_verifier.py | 191 | CODE | |
| LOW | …amework/core/src/python/kungfu/workspace_federation.py | 97 | CODE | |
| LOW | …ework/core/src/python/kungfu/project_cut_read_model.py | 19 | CODE | |
| LOW | framework/core/src/python/kungfu/release_verifier.py | 335 | CODE | |
| LOW | framework/core/src/python/kungfu/agent_work_lab.py | 856 | CODE | |
| LOW | framework/core/src/python/kungfu/contract.py | 23 | CODE | |
| LOW | framework/core/src/python/kungfu/contract.py | 84 | CODE | |
| LOW | …e/src/python/kungfu/workspace_federation_projection.py | 57 | CODE | |
| LOW | framework/core/src/python/kungfu/runtime_broker.py | 307 | CODE | |
| LOW | framework/core/src/python/kungfu/workspace_guidance.py | 437 | CODE | |
| LOW | framework/core/src/python/kungfu/coordination/locks.py | 93 | CODE | |
| LOW | framework/core/src/python/kungfu/coordination/locks.py | 199 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/audit.py | 445 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/audit.py | 482 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/registry.py | 172 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/registry.py | 497 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/registry.py | 589 | CODE | |
| LOW | …work/core/src/python/kungfu/skill/_registry/support.py | 402 | CODE | |
| LOW | …core/src/python/kungfu/_runtime_upgrade/release_cut.py | 803 | CODE | |
| LOW | …/src/python/kungfu/_runtime_upgrade/image_lifecycle.py | 263 | CODE | |
| LOW | …/src/python/kungfu/_runtime_upgrade/image_lifecycle.py | 398 | CODE | |
| LOW | …amework/core/src/python/kungfu/_peer_lifecycle/host.py | 345 | CODE | |
| LOW | …mework/core/src/python/kungfu/_peer_lifecycle/state.py | 372 | CODE | |
| LOW | framework/core/src/python/kungfu/capability/guest.py | 71 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/managed_run.py | 99 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/ingest.py | 85 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/export.py | 30 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/replay.py | 174 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/replay.py | 193 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/adapters.py | 149 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/adapters.py | 217 | CODE | |
| LOW | …ore/src/python/kungfu/agent/agent_hub_qualification.py | 94 | CODE | |
| 58 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | framework/core/src/python/kungfu/rewind/fb/RunBegin.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …k/core/src/python/kungfu/rewind/fb/ApprovalDecision.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …mework/core/src/python/kungfu/rewind/fb/RetryMarker.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | framework/core/src/python/kungfu/rewind/fb/ToolCall.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …ework/core/src/python/kungfu/rewind/fb/CostSnapshot.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …ework/core/src/python/kungfu/rewind/fb/ModelRequest.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …mework/core/src/python/kungfu/rewind/fb/RunProgress.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | framework/core/src/python/kungfu/rewind/fb/RunEnd.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …amework/core/src/python/kungfu/rewind/fb/ToolResult.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …work/core/src/python/kungfu/rewind/fb/ModelResponse.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …work/core/src/python/kungfu/rewind/reflection/Field.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …rk/core/src/python/kungfu/rewind/reflection/Service.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …k/core/src/python/kungfu/rewind/reflection/KeyValue.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …ork/core/src/python/kungfu/rewind/reflection/Object.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …ework/core/src/python/kungfu/rewind/reflection/Type.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …core/src/python/kungfu/rewind/reflection/SchemaFile.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …rk/core/src/python/kungfu/rewind/reflection/RPCCall.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …rk/core/src/python/kungfu/rewind/reflection/EnumVal.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …ework/core/src/python/kungfu/rewind/reflection/Enum.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …ork/core/src/python/kungfu/rewind/reflection/Schema.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | developer/sdk/src/sdk-shared.js | 402 | // ── product commands ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | developer/sdk/src/sdk-shared.js | 1297 | // ── KFD-1 contract prototype ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | developer/sdk/src/sdk-contract.js | 1267 | // ── kfx view extension build ────────────────────────────────────────────── | COMMENT |
| MEDIUM | developer/sdk/src/sdk-contract.js | 1300 | // ── kfx C++ extension build ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | developer/sdk/src/sdk-contract.js | 1465 | // ── kfx Python AOT extension build ───────────────────────────────────────── | COMMENT |
| MEDIUM | framework/core/pyproject.toml | 3 | # ============================================================================ | COMMENT |
| MEDIUM | framework/core/pyproject.toml | 7 | # ============================================================================ | COMMENT |
| MEDIUM | framework/core/slices/embedding/main.cpp | 56 | // ── write side ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/core/slices/schema-registry/producer.cpp | 103 | // ── bundle format pieces ────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/core/slices/schema-registry/decoder.cpp | 90 | // ── reopen the journal independently and decode by binding ──────── | COMMENT |
| MEDIUM | framework/core/fuzz/CMakeLists.txt | 127 | # ── Registered fuzz targets ───────────────────────────────────────── | COMMENT |
| MEDIUM | …work/core/src/python/kungfu/rewind/hook/rewind_hook.js | 130 | // ── post-require adapters (mini require-in-the-middle) ────────── | COMMENT |
| MEDIUM | …rk/core/src/python/kungfu/rewind/hook/rewind_client.py | 122 | # ── kfx action-envelope events ────────────────────────────────────── | COMMENT |
| MEDIUM | …rk/core/src/python/kungfu/rewind/hook/rewind_client.py | 199 | # ── post-import adapters ──────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/kfx/src/index.ts | 132 | // ── capability surface ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/kfx/src/index.ts | 162 | // ── manifest data (`kungfu.kfx.json`) ───────────────────────────────────── | COMMENT |
| MEDIUM | framework/kfx/src/index.ts | 342 | // ── load plan: host-agnostic discovery + decision (KF-ADR-019f86da-4f90-7afa-a1e1-0510f00916be) ────────────── | COMMENT |
| MEDIUM | framework/kfx/src/index.ts | 1309 | // ── runtime contract (what the shell hands a mounted view) ──────────────── | COMMENT |
| MEDIUM | framework/kfx/src/index.ts | 1540 | // ── UI tokens (dark, dense, monospace — no component library) ───────────── | COMMENT |
| MEDIUM | framework/gui/src/main/sandbox-host.ts | 53 | // ── electron glue ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/gui/src/main/terminal-host.ts | 108 | // ── pure relay core ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/gui/src/main/terminal-host.ts | 176 | // ── electron glue ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/api/src/capability/sandbox.ts | 26 | // ── host (trusted) ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/api/src/capability/sandbox.ts | 90 | // ── guest (sandboxed) ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/api/src/capability/kungfu-guest.ts | 32 | // ── trusted tier: in-process async surface, zero-copy by reference ─────────── | COMMENT |
| MEDIUM | framework/api/src/capability/kungfu-guest.ts | 84 | // ── default tier: OS-sandboxed child served over the stdio relay ───────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | framework/core/conanfile.py | 523 | except Exception: | CODE |
| LOW | …ework/core/tests/python/windows_continuity_sentinel.py | 287 | except Exception as error: | CODE |
| LOW | …/core/tests/qualification/episode/semantic_workload.py | 486 | except Exception as error: | CODE |
| LOW | …/core/tests/qualification/episode/semantic_workload.py | 505 | except Exception as error: | CODE |
| LOW | …k/core/tests/qualification/episode/episode_workload.py | 83 | except Exception: | CODE |
| LOW | …k/core/tests/qualification/episode/episode_workload.py | 210 | except Exception as error: | CODE |
| LOW | …k/core/tests/qualification/episode/episode_workload.py | 661 | except Exception as error: | CODE |
| MEDIUM | …k/core/tests/qualification/episode/episode_workload.py | 70 | def _process_resources() -> tuple[int, int | None]: | CODE |
| LOW | …/qualification/live-peer-continuity/native_campaign.py | 511 | except Exception as failure: # noqa: BLE001 | CODE |
| LOW | framework/core/.gyp/gen_kungfubuildinfo.py | 50 | except Exception: | CODE |
| LOW | framework/core/src/python/kungfu/recovery.py | 490 | except Exception as error: # authority errors must remain visible | CODE |
| LOW | framework/core/src/python/kungfu/runtime_leases.py | 409 | except Exception: | CODE |
| MEDIUM | framework/core/src/python/kungfu/runtime_leases.py | 48 | def _read_state(self) -> dict[str, Any]: | CODE |
| LOW | …work/core/src/python/kungfu/agent_work_lab_template.py | 311 | except Exception: | CODE |
| LOW | framework/core/src/python/kungfu/diagnostics.py | 467 | except Exception as error: | CODE |
| LOW | framework/core/src/python/kungfu/profile_sdk.py | 740 | except Exception: | CODE |
| LOW | framework/core/src/python/kungfu/durability.py | 436 | except Exception as error: # noqa: BLE001 - retained for inspection | CODE |
| LOW | framework/core/src/python/kungfu/agent_work_lab.py | 489 | except Exception as error: # pragma: no cover - host callback failure | CODE |
| LOW | framework/core/src/python/kungfu/skill/catalog.py | 623 | except Exception: | STRING |
| LOW | …k/core/src/python/kungfu/project_tour/orchestration.py | 154 | except Exception as error: | CODE |
| LOW | framework/core/src/python/kungfu/rewind/managed_run.py | 190 | except Exception as exc: | CODE |
| LOW | framework/core/src/python/kungfu/rewind/managed_run.py | 252 | except Exception as exc: # a malformed provider payload must not crash the run | CODE |
| LOW | framework/core/src/python/kungfu/rewind/proxy.py | 99 | except Exception as e: # noqa: BLE001 — the child must get an answer | CODE |
| LOW | …rk/core/src/python/kungfu/rewind/hook/sitecustomize.py | 12 | except Exception: # noqa: BLE001 — never break the user's interpreter | CODE |
| LOW | …rk/core/src/python/kungfu/rewind/hook/sitecustomize.py | 35 | except Exception: # noqa: BLE001 | CODE |
| LOW | …rk/core/src/python/kungfu/rewind/hook/rewind_client.py | 170 | except Exception as e: | CODE |
| LOW | …rk/core/src/python/kungfu/rewind/hook/rewind_client.py | 271 | except Exception: # noqa: BLE001 — a broken kfx adapter must not break the run | CODE |
| LOW | …rk/core/src/python/kungfu/rewind/hook/rewind_client.py | 287 | except Exception: # noqa: BLE001 — adapters must never break imports | CODE |
| LOW | …amework/core/src/python/kungfu/agent/domain_profile.py | 44 | except Exception as error: # noqa: BLE001 - preserve ValueError surface | CODE |
| LOW | framework/core/src/python/kungfu/agent/action_loop.py | 204 | except Exception as error: # public adapter returns uncertainty, not false success | CODE |
| LOW | framework/core/src/python/kungfu/agent/action_loop.py | 957 | except Exception as error: | CODE |
| LOW | framework/core/src/python/kungfu/agent/native_launch.py | 901 | except Exception as error: # pragma: no cover | CODE |
| LOW | framework/core/src/python/kungfu/agent/native_launch.py | 940 | except Exception as error: # pragma: no cover - defensive lifecycle path | CODE |
| LOW | …ework/core/src/python/kungfu/agent/native_authority.py | 141 | except Exception as error: # noqa: BLE001 - normalize missing bindings | CODE |
| MEDIUM | …ework/core/src/python/kungfu/agent/native_authority.py | 138 | def require_action_runtime() -> Any: | CODE |
| LOW | …/core/src/python/kungfu/agent/_work_profile/session.py | 358 | except Exception as error: # noqa: BLE001 - preserve ValueError surface | CODE |
| LOW | …ork/core/src/python/kungfu/agent/_run_agent/runtime.py | 776 | except Exception as error: # pragma: no cover - host callback failure | CODE |
| LOW | framework/core/src/python/kungfu/cli/site.py | 110 | except Exception: | CODE |
| LOW | framework/core/src/python/kungfu/cli/site.py | 477 | except Exception as err: | CODE |
| LOW | framework/core/src/python/kungfu/cli/site.py | 497 | except Exception as err: | CODE |
| LOW | …rk/core/src/python/kungfu/cli/bridging/pdm/__init__.py | 92 | except Exception: | CODE |
| MEDIUM | …rk/core/src/python/kungfu/cli/bridging/pdm/__init__.py | 87 | def __init__(self): | CODE |
| LOW | framework/core/src/python/kungfu/cli/commands/lock.py | 36 | except Exception as exc: # noqa: BLE001 — audit is additive, never load-bearing | CODE |
| LOW | framework/core/src/python/kungfu/cli/commands/lock.py | 44 | except Exception as exc: # noqa: BLE001 | CODE |
| MEDIUM | framework/core/src/python/kungfu/cli/commands/lock.py | 41 | def _safe_audit(fn): | CODE |
| LOW | …ore/src/python/kungfu/storage/fact_kernel_integrity.py | 191 | except Exception as error: | CODE |
| LOW | …rk/core/src/python/kungfu/project_template/__init__.py | 609 | except Exception: | CODE |
| LOW | …/core/src/python/kungfu/assignment_runtime/__init__.py | 193 | except Exception as cause: | CODE |
| LOW | …/core/src/python/kungfu/assignment_runtime/__init__.py | 222 | except Exception as cause: | CODE |
| LOW | …work/core/src/python/kungfu/_runtime_service/engine.py | 193 | except Exception: # noqa: BLE001 - lock logic must never break serving | CODE |
| LOW | …work/core/src/python/kungfu/_runtime_service/engine.py | 213 | except Exception: # noqa: BLE001 | CODE |
| LOW | framework/core/src/python/kungfu/remote/store.py | 257 | except Exception as exc: # noqa: BLE001 - error is persisted in the manifest | CODE |
| LOW | framework/storage/python/kungfu_sdk/native.py | 366 | except Exception: | CODE |
| LOW | framework/api/src/capability/guest-harness/py-child.py | 33 | except Exception as err: # noqa: BLE001 — report and fail visibly | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …core/tests/python/_skill_lifecycle_dependency_cases.py | 45 | __all__ = [ | CODE |
| LOW | …ework/core/tests/python/_fact_kernel_recovery_cases.py | 31 | __all__ = [ | CODE |
| LOW | …re/tests/python/_profile_composition_contract_cases.py | 28 | __all__ = [ | CODE |
| LOW | …ork/core/tests/python/_fact_kernel_durability_cases.py | 31 | __all__ = [ | CODE |
| LOW | …ework/core/tests/python/_assignment_runtime_support.py | 416 | __all__ = [name for name in globals() if not name.startswith("__")] | CODE |
| LOW | …ore/tests/python/_profile_composition_catalog_cases.py | 28 | __all__ = [ | CODE |
| LOW | …e/tests/python/_skill_lifecycle_runtime_audit_cases.py | 45 | __all__ = [ | CODE |
| LOW | …/core/tests/python/_profile_composition_query_cases.py | 28 | __all__ = [ | CODE |
| LOW | …core/tests/python/_assignment_orchestration_support.py | 363 | __all__ = [name for name in globals() if not name.startswith("__")] | CODE |
| LOW | …re/tests/python/_assignment_runtime_semantics_cases.py | 740 | __all__ = [name for name in globals() if name.startswith("test_")] | CODE |
| LOW | …k/core/tests/python/_agent_console_contract_support.py | 112 | __all__ = [name for name in globals() if not name.startswith("__")] | CODE |
| LOW | …ore/tests/python/_assignment_runtime_recovery_cases.py | 516 | __all__ = [name for name in globals() if name.startswith("test_")] | CODE |
| LOW | …core/tests/python/_assignment_runtime_profile_cases.py | 171 | __all__ = [name for name in globals() if name.startswith("test_")] | CODE |
| LOW | …work/core/tests/python/_distribution_update_support.py | 253 | __all__ = [name for name in globals() if not name.startswith("__")] | CODE |
| LOW | …ork/core/tests/python/_fact_kernel_validation_cases.py | 31 | __all__ = [ | CODE |
| LOW | …k/core/tests/python/_skill_lifecycle_registry_cases.py | 45 | __all__ = [ | CODE |
| LOW | …amework/core/tests/python/_fact_kernel_format_cases.py | 31 | __all__ = [ | CODE |
| LOW | …/tests/python/_profile_composition_assessment_cases.py | 28 | __all__ = [ | CODE |
| LOW | …e/tests/python/_assignment_runtime_validation_cases.py | 993 | __all__ = [name for name in globals() if name.startswith("test_")] | CODE |
| LOW | framework/core/src/python/kungfu/config.py | 432 | def _set_dotted(target: dict[str, Any], key: str, value: Any) -> None: | CODE |
| LOW | framework/core/src/python/kungfu/runtime_state.py | 748 | def _set_snapshot_lifecycle(state: dict[str, Any], lifecycle: str) -> None: | CODE |
| LOW | framework/core/src/python/kungfu/kfx_host.py | 449 | __all__ = [ | CODE |
| LOW | …mework/core/src/python/kungfu/coordination/__init__.py | 18 | __all__ = [ | CODE |
| LOW | framework/core/src/python/kungfu/skill/__init__.py | 69 | __all__ = [ | CODE |
| LOW | framework/core/src/python/kungfu/capability/__init__.py | 19 | __all__ = [ | CODE |
| LOW | framework/core/src/python/kungfu/capability/guest.py | 336 | __all__ = [ | CODE |
| LOW | …work/core/src/python/kungfu/runtime/live/event_loop.py | 252 | __all__ = ["JournalAsyncioBridge", "LiveEventLoop"] | CODE |
| LOW | …amework/core/src/python/kungfu/rewind/cost/__init__.py | 33 | __all__ = [ | CODE |
| LOW | framework/core/src/python/kungfu/agent/__init__.py | 35 | __all__ = [ | CODE |
| LOW | framework/core/src/python/kungfu/agent/advisory.py | 565 | __all__ = [ | CODE |
| LOW | …rk/core/src/python/kungfu/cli/bridging/__registry__.py | 8 | __all__ = [ | CODE |
| LOW | …rk/core/src/python/kungfu/cli/commands/__registry__.py | 52 | __all__ = [ | CODE |
| LOW | …/core/src/python/kungfu/cli/commands/work_semantics.py | 158 | __all__ = [ | CODE |
| LOW | …/core/src/python/kungfu/assignment_runtime/__init__.py | 570 | __all__ = [ | CODE |
| LOW | framework/storage/python/kungfu_sdk/__init__.py | 19 | __all__ = [ | CODE |
| LOW | …s/work-control/work-control-actions/domain/__init__.py | 7 | __all__ = ["initiative_bundle", "native_state", "work_control", "work_semantics"] | CODE |
| LOW | extensions/dogfood/dogfood-actions/domain/dogfood.py | 91 | __all__ = [ | CODE |
| LOW | extensions/dogfood/dogfood-actions/domain/__init__.py | 5 | __all__ = ["dogfood"] | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | developer/sdk/README.md | 17 | kungfu sdk create app my-app # scaffold into ./my-app | CODE |
| MEDIUM | developer/sdk/README.md | 30 | kungfu sdk create extension my-view # scaffold into ./my-view | CODE |
| MEDIUM | developer/sdk/src/sdk-shared.js | 3 | // First cut of the modern SDK surface: scaffold a complete Kungfu desktop app | COMMENT |
| MEDIUM | crates/Cargo.toml | 36 | # strip symbols; the launcher's hot path is process orchestration, not compute. | COMMENT |
| MEDIUM | …mework/core/tests/python/test_action_runtime_shadow.py | 185 | # Residual Python orchestration with replayed kernel I/O. | COMMENT |
| MEDIUM | framework/core/src/python/kungfu/profile_sdk.py | 536 | # bytes after they were hashed and make the scaffold fail its own | COMMENT |
| MEDIUM | framework/core/src/python/kungfu/cli/commands/sdk.py | 3 | # `kungfu sdk` — the application assembly toolkit: scaffold apps and view | COMMENT |
| MEDIUM | …work/core/src/python/kungfu/cli/commands/assignment.py | 376 | # returning to the Assignment orchestration path. | COMMENT |
| MEDIUM | docs/adr/KF-ADR-019f87cc-bd1f-786d-896d-07ea9245861e.md | 20 | # KF-ADR-019f87cc-bd1f-786d-896d-07ea9245861e: Assignment orchestration state is fact-backed and portably sealed | COMMENT |
| MEDIUM | docs/adr/KF-ADR-019f86da-4f90-7d58-b5b3-b6d5041dcab6.md | 44 | ### 1. One entry orchestrates; existing components remain authoritative | COMMENT |
| MEDIUM | docs/adr/KF-ADR-019fee22-e71d-7da9-8a44-9403c21a5d62.md | 16 | # KF-ADR-019fee22-e71d-7da9-8a44-9403c21a5d62: Kungfu Skill v2 is a content-rooted Work-scoped orchestration contract | COMMENT |
| MEDIUM | …ensions/agent-work-lab/experience/starter-project.json | 35 | "content": "# Northstar Notes launch brief\n\n<!-- Ask an agent to replace this scaffold using only the facts in i | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/Cargo.toml | 6 | # docs/development/rust-adoption.md for the adoption paradigm (source layout, consumption | COMMENT |
| MEDIUM | …ll-multi-surface-runtime-audit/managed-run/report.json | 88 | "text": "I’ll qualify the admitted Skill surface read-only, with only the requested `skill admit --execute` and `ski | CODE |
| MEDIUM | …-multi-surface-runtime-audit/managed-run/response.json | 6 | "stdout": "{\"type\":\"thread.started\",\"thread_id\":\"01a00005-b138-7d52-b4a5-5edddb06cd8f\"}\n{\"type\":\"turn.star | CODE |
| MEDIUM | …-multi-surface-runtime-audit/managed-run/response.json | 12 | "text": "I’ll qualify the admitted Skill surface read-only, with only the requested `skill admit --execute` and `ski | CODE |
| MEDIUM | framework/core/pyproject.toml | 157 | # public Python SDK surface, guest-harness backs the capability guest contract, | COMMENT |
| MEDIUM | …amework/core/tests/python/test_coordination_arbiter.py | 8 | # by the cross-process arbiter harness. | COMMENT |
| MEDIUM | …e/.deps/hana-1.80.0/include/boost/hana/fwd/prepend.hpp | 38 | //! > more nuanced and bears its name better for e.g. `hana::optional`. | COMMENT |
| MEDIUM | …ork/core/src/libkungfu/src/runtime/util/stacktrace.cpp | 217 | // allocation, so it is a more robust artifact under heap corruption than the | COMMENT |
| MEDIUM | …ork/core/src/libkungfu/src/runtime/util/stacktrace.cpp | 222 | // the essential "what/where" is already on disk and the robust dump gets its shot | COMMENT |
| MEDIUM | …amework/api/src/capability/guest-harness/py_trusted.py | 6 | # relay), so the harness reads the JSON result from it. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …amework/core/src/python/kungfu/workspace_federation.py | 97 | CODE | |
| LOW | …ork/core/src/python/kungfu/assignment_orchestration.py | 611 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/approvals.py | 67 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/events.py | 68 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/events.py | 264 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/managed_cli.py | 76 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/reporting.py | 161 | CODE | |
| LOW | …ework/core/src/python/kungfu/agent/runtime_profiles.py | 306 | CODE | |
| LOW | …ework/core/src/python/kungfu/agent/runtime_profiles.py | 521 | CODE | |
| LOW | framework/core/src/python/kungfu/agent/run_agent.py | 171 | CODE | |
| LOW | framework/core/src/python/kungfu/agent/native_launch.py | 299 | CODE | |
| LOW | …ork/core/src/python/kungfu/agent/_run_agent/runtime.py | 497 | CODE | |
| LOW | …ore/src/python/kungfu/cli/commands/_skill/lifecycle.py | 170 | CODE | |
| LOW | framework/core/src/python/kungfu/storage/service.py | 289 | CODE | |
| LOW | …ork/core/src/python/kungfu/storage/_service_episode.py | 56 | CODE | |
| LOW | …ork/core/src/python/kungfu/storage/_service_episode.py | 124 | CODE | |
| LOW | …/core/src/python/kungfu/assignment_runtime/recovery.py | 64 | CODE | |
| LOW | …ork/core/src/python/kungfu/assignment_runtime/local.py | 730 | CODE | |
| LOW | …ork-control-actions/domain/_work_control_assignment.py | 167 | CODE | |
| LOW | …work-control-actions/domain/_work_control_lifecycle.py | 559 | CODE | |
| LOW | …ons/dogfood/dogfood-actions/domain/_dogfood_records.py | 369 | CODE | |
| LOW | …ons/dogfood/dogfood-actions/domain/_dogfood_records.py | 578 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | framework/core/src/python/kungfu/rewind/fb/RunBegin.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …k/core/src/python/kungfu/rewind/fb/ApprovalDecision.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …mework/core/src/python/kungfu/rewind/fb/RetryMarker.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | framework/core/src/python/kungfu/rewind/fb/ToolCall.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …ework/core/src/python/kungfu/rewind/fb/CostSnapshot.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …ework/core/src/python/kungfu/rewind/fb/ModelRequest.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …mework/core/src/python/kungfu/rewind/fb/RunProgress.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | framework/core/src/python/kungfu/rewind/fb/RunEnd.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …amework/core/src/python/kungfu/rewind/fb/ToolResult.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …work/core/src/python/kungfu/rewind/fb/ModelResponse.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …work/core/src/python/kungfu/rewind/reflection/Field.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …rk/core/src/python/kungfu/rewind/reflection/Service.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …k/core/src/python/kungfu/rewind/reflection/KeyValue.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …ork/core/src/python/kungfu/rewind/reflection/Object.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …ework/core/src/python/kungfu/rewind/reflection/Type.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …core/src/python/kungfu/rewind/reflection/SchemaFile.py | 24 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …rk/core/src/python/kungfu/rewind/reflection/RPCCall.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …rk/core/src/python/kungfu/rewind/reflection/EnumVal.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …ework/core/src/python/kungfu/rewind/reflection/Enum.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …ork/core/src/python/kungfu/rewind/reflection/Schema.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …tests/python/_agent_profile_sdk_qualification_cases.py | 143 | bundle.write_text("export function View() { return null; }\n") | CODE |
| HIGH | …tests/python/_agent_profile_sdk_qualification_cases.py | 176 | bundle.write_text("export function View() { return null; }\n") | CODE |
| HIGH | framework/core/tests/python/test_release_channel.py | 270 | null, | CODE |
| HIGH | …ework/core/src/python/kungfu/runtime_service_config.py | 293 | "write the unit; then run: systemctl --user daemon-reload && systemctl --user enable --now kungfu-supervisor | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | framework/core/tests/storage-node-binding.test.js | 615 | print(json.dumps(node_safe(out), sort_keys=True, separators=(",", ":"))) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | framework/core/src/python/kungfu/agent/agent_hub.py | 630 | def handle_request( | CODE |
| LOW | …work/core/src/python/kungfu/_runtime_service/engine.py | 231 | def handle_request(self, request: RuntimeEngineRequest) -> RuntimeEngineReceipt: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …core/.deps/hana-1.80.0/include/boost/hana/fwd/type.hpp | 501 | //! `std::integral_constant`s, don't forget to include the | COMMENT |