A local-first runtime that records real-world agent work and verifies what actually got done.
This report presents the forensic synthetic code analysis of kungfu-systems/kungfu, a C++ project with 3,882 GitHub stars. SynthScan v2.0 examined 348,130 lines of code across 1646 source files, recording 1762 pattern matches distributed across 17 syntactic categories. The overall adjusted score of 5.5 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 1762 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pnpm-workspace.yaml | 21 | # Disable pnpm's default minimum-release-age supply-chain check. We frequently | COMMENT |
| LOW | crates/Cargo.toml | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/host-spike/Cargo.toml | 21 | # The embedding FFI seam now lives in the shared kungfu-embedding crate (RFC | COMMENT |
| LOW | crates/host-spike/build.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/host-spike/shim/host_shim.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/host-spike/src/main.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/Cargo.toml | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/src/promote.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/src/self_update.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/src/dispatch.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/src/doctor.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/src/msvc.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/src/registrar.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/src/registrar.rs | 21 | // the declaration back, resolves the artifact for the host platform, verifies | COMMENT |
| LOW | crates/shifu/src/registrar.rs | 41 | use std::process::Command; | COMMENT |
| LOW | crates/shifu/src/registrar.rs | 241 | /// Pinned content hash from the declaration; empty when the artifact's | COMMENT |
| LOW | crates/shifu/src/main.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu/src/main.rs | 21 | // delegates to the repo's ./shifu entrypoint, which resolves the version that | COMMENT |
| LOW | crates/shifu/src/main.rs | 381 | "detached".to_string() | COMMENT |
| LOW | crates/shifu/src/main.rs | 441 | cmd.env("SHIFU_DELEGATED", "1").current_dir(&root); | COMMENT |
| LOW | crates/shifu/src/main.rs | 481 | COMMENT | |
| LOW | crates/kungfu-embedding/Cargo.toml | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/kungfu-embedding/src/lib.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/kungfu-embedding/src/lib.rs | 21 | //! so an older core still yields a working journal-read context. | COMMENT |
| LOW | crates/kungfu-embedding/src/lib.rs | 41 | //! | COMMENT |
| LOW | crates/shifu-core/Cargo.toml | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu-core/src/lib.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu-core/src/bootstrap.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/shifu-core/src/bootstrap.rs | 21 | // 3. bootstrap: download the pinned prebuilt release binary into the cache | COMMENT |
| LOW | crates/shifu-core/src/probe.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/Cargo.toml | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/build.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/src/pins.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/src/envs.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/src/variant.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/src/variant.rs | 21 | // resolution), so it is not a mechanical "be python" the trunk can own. | COMMENT |
| LOW | crates/trunk/src/doctor.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/src/fsck.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/src/help.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | crates/trunk/src/help.rs | 21 | // VERSION <version> | COMMENT |
| LOW | crates/trunk/src/launch.rs | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/pyproject.toml | 41 | # not fail; a module opts into real checking as it gains annotations. | COMMENT |
| LOW | framework/core/pyproject.toml | 121 | # flatbuffers/flatc 生成物标 "do not modify",不纳入格式化基线(重新生成会覆盖): | COMMENT |
| LOW | framework/core/pyproject.toml | 161 | # 钉 uv 自管 standalone CPython(而非系统/发行版 python):跨机一致,且根治 nuitka 在 | COMMENT |
| LOW | framework/core/slices/content-store/probe.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/embedding/CMakeLists.txt | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/embedding/main.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/view-encapsulation/CMakeLists.txt | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/view-encapsulation/probe.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/common/sha256.h | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/schema-registry/CMakeLists.txt | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/schema-registry/producer.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/schema-registry/decoder.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/fact-ledger/CMakeLists.txt | 1 | # SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/fact-ledger/action_recorder.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/fact-ledger/export.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/fact-ledger/host.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/fact-ledger/host.cpp | 21 | #include <kungfu/yijinjing/time.h> | COMMENT |
| LOW | framework/core/slices/libwasm-shared-membrane/probe.h | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| LOW | framework/core/slices/libwasm-shared-membrane/host.cpp | 1 | // SPDX-License-Identifier: Apache-2.0 | COMMENT |
| 807 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | developer/sdk/src/sdk.js | 450 | function isProductAssemblyManifest(pkg) { | CODE |
| LOW | developer/sdk/src/sdk.js | 672 | function findRepoRootWithExtensions(startDir) { | CODE |
| LOW | developer/sdk/src/sdk.js | 702 | function resolveReferenceExtensionsRoot(cwd) { | CODE |
| LOW | developer/sdk/src/sdk.js | 758 | function assembleProductExtensions( | CODE |
| LOW | developer/sdk/src/sdk.js | 1376 | function resolveContractRegistryPath(repoRoot) { | CODE |
| LOW | developer/sdk/src/sdk.js | 1963 | function buildContractWorldWitness(repoRoot) { | CODE |
| LOW | developer/sdk/src/sdk.js | 2775 | function resolveKfdUpstreamAggregate() { | CODE |
| LOW | …work/core/tests/python/test_generic_primitive_dedup.py | 64 | def _ref_frame_data_type_value(header): | CODE |
| LOW | …work/core/tests/python/test_generic_primitive_dedup.py | 155 | def test_atlas_checksum_matches_reference(captured_run, algorithm): | CODE |
| LOW | …work/core/tests/python/test_generic_primitive_dedup.py | 177 | def test_atlas_checksum_frame_uses_readonly_header_buffer(captured_run): | CODE |
| LOW | …work/core/tests/python/test_generic_primitive_dedup.py | 191 | def test_rewind_bundle_decode_matches_generated(captured_run): | CODE |
| LOW | …work/core/tests/python/test_generic_primitive_dedup.py | 198 | def test_rewind_bundle_decode_field_by_field(captured_run): | CODE |
| LOW | framework/core/tests/python/test_content_hash.py | 17 | def test_content_hash_canonical_format_parse_and_verify(): | CODE |
| LOW | framework/core/tests/python/test_content_hash.py | 28 | def test_content_hash_rejects_reserved_but_unimplemented_algorithm(): | CODE |
| LOW | …ework/core/tests/python/test_agent_console_contract.py | 40 | def test_agent_runtime_profile_is_part_of_the_global_config_contract(): | CODE |
| LOW | …ework/core/tests/python/test_agent_console_contract.py | 64 | def test_agent_runtime_profile_rejects_opaque_extra_fields(): | CODE |
| LOW | …ework/core/tests/python/test_agent_console_contract.py | 88 | def test_work_console_requires_a_bound_work_ref_for_work_bindings(): | CODE |
| LOW | …ework/core/tests/python/test_agent_console_contract.py | 119 | def test_agent_console_envelope_binds_work_and_discovery_entrypoints(): | CODE |
| LOW | …ework/core/tests/python/test_agent_console_contract.py | 143 | def test_discovery_returns_path_and_app_candidates_without_first_hit_collapse(): | CODE |
| LOW | …ework/core/tests/python/test_agent_console_contract.py | 157 | def test_runtime_profile_plan_apply_default_and_remove_are_preview_first( | CODE |
| LOW | …ework/core/tests/python/test_agent_console_contract.py | 232 | def test_agent_session_cli_forwards_the_same_self_describing_action( | CODE |
| LOW | …ework/core/tests/python/test_agent_console_contract.py | 287 | def test_work_console_registry_accepts_capsule_backend(): | CODE |
| LOW | …mework/core/tests/python/test_durability_capability.py | 12 | def test_python_projection_preserves_libkungfu_capability(): | CODE |
| LOW | …mework/core/tests/python/test_durability_capability.py | 43 | def test_agent_capabilities_embeds_the_same_durability_report(tmp_path): | CODE |
| LOW | …mework/core/tests/python/test_profile_lifecycle_cli.py | 12 | def test_profile_lifecycle_python_service_and_cli_share_core_contract(tmp_path): | CODE |
| LOW | …mework/core/tests/python/test_profile_lifecycle_cli.py | 26 | def test_profile_lifecycle_cli_lists_empty_workspace_without_sidecar_authority( | CODE |
| LOW | framework/core/tests/python/test_profile_composition.py | 295 | def test_catalog_joins_exact_profile_artifacts_without_new_authority(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_profile_composition.py | 306 | def test_manager_projects_lifecycle_and_current_source_health(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_profile_composition.py | 323 | def test_manager_reports_source_drift_without_hiding_lifecycle_state(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_profile_composition.py | 337 | def test_current_lifecycle_authorization_rejects_drift_then_applies(tmp_path): | CODE |
| LOW⚡ | framework/core/tests/python/test_profile_composition.py | 355 | def test_catalog_rejects_cross_profile_view_surface_reference(tmp_path): | CODE |
| LOW⚡ | framework/core/tests/python/test_profile_composition.py | 364 | def test_catalog_accepts_profile_owned_view_without_domain_interpretation(tmp_path): | CODE |
| LOW⚡ | framework/core/tests/python/test_profile_composition.py | 373 | def test_catalog_rejects_uninstalled_artifact_schema(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_profile_composition.py | 397 | def test_installed_cli_catalog_and_query_plan_share_roots(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_profile_composition.py | 436 | def test_query_receipt_preserves_core_definition_and_proof_roots(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_profile_composition.py | 450 | def test_non_mission_profile_resolves_query_materializes_contract_and_binds_claim_instance( | CODE |
| LOW | framework/core/tests/python/test_profile_composition.py | 558 | def test_resolved_query_rejects_binding_and_surface_drift(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_profile_composition.py | 602 | def test_installed_cli_contract_and_resolved_query_share_public_receipts(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_profile_composition.py | 712 | def test_assessment_plan_binds_verified_episode_query_proof_and_decision(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_profile_composition.py | 749 | def test_installed_cli_assessment_plan_decide_and_run(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_fast_hash.py | 33 | def test_fast_hash_canonical_digest_lengths(): | CODE |
| LOW | framework/core/tests/python/test_query_cli.py | 16 | def test_storage_layout_lazy_context_keeps_all_runtime_paths(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_query_cli.py | 27 | def test_facts_cli_exposes_the_libkungfu_owned_contract(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_query_cli.py | 45 | def test_offline_agent_discovers_and_proves_query_in_three_commands(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_query_cli.py | 84 | def test_query_cli_validate_explain_and_stream_formats_share_the_plan(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_query_cli.py | 153 | def test_query_cli_returns_stable_validation_error_code(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_query_cli.py | 170 | def test_query_cli_shares_saved_view_and_resumes_changelog(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_query_cli.py | 233 | def test_query_cli_keeps_profile_views_generic_and_legacy_readable(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_query_cli.py | 278 | def test_query_cli_rejects_incomplete_profile_view_envelope(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_query_cli.py | 309 | def test_workspace_saved_query_catalog_survives_reopen_and_tracks_revisions(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_query_cli.py | 415 | def test_query_cli_compiles_bounded_sql_and_runs_sqlite_engine(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_query_cli.py | 476 | def test_query_cli_compiles_and_proves_temporal_attention_pattern(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_first_party_baked.py | 30 | def test_reads_baked_manifest_at_the_product_root(tmp_path, monkeypatch): | CODE |
| LOW | framework/core/tests/python/test_first_party_baked.py | 39 | def test_env_manifest_wins_over_baked(tmp_path, monkeypatch): | CODE |
| LOW | framework/core/tests/python/test_agent_profile_sdk.py | 207 | def make_collaboration_action_lifecycle(source): | CODE |
| LOW | framework/core/tests/python/test_agent_profile_sdk.py | 227 | def test_profile_resolution_skips_unreadable_unrelated_siblings(tmp_path, monkeypatch): | CODE |
| LOW | framework/core/tests/python/test_agent_profile_sdk.py | 242 | def test_scaffold_is_plan_first_deterministic_and_does_not_self_certify(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_agent_profile_sdk.py | 253 | def test_scaffold_can_declare_generic_dual_first_collaboration(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_agent_profile_sdk.py | 270 | def test_unresolved_semantics_return_open_decision_cards(tmp_path): | CODE |
| LOW | framework/core/tests/python/test_agent_profile_sdk.py | 283 | def test_destructive_migration_and_unsupported_evidence_fail_closed(tmp_path): | CODE |
| 464 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …work/core/tests/python/test_generic_primitive_dedup.py | 9 | CODE | |
| LOW | …mework/core/tests/python/test_durability_capability.py | 8 | CODE | |
| LOW | …mework/core/tests/python/test_profile_lifecycle_cli.py | 7 | CODE | |
| LOW | framework/core/tests/python/test_profile_composition.py | 10 | CODE | |
| LOW | framework/core/tests/python/test_query_cli.py | 7 | CODE | |
| LOW | framework/core/tests/python/test_agent_profile_sdk.py | 11 | CODE | |
| LOW | …ork/core/tests/python/test_episode_bundle_roundtrip.py | 13 | CODE | |
| LOW | framework/core/tests/python/test_action_envelope.py | 3 | CODE | |
| LOW | …amework/core/tests/python/test_content_store_facade.py | 12 | CODE | |
| LOW | …/core/tests/python/test_episode_manifest_projection.py | 10 | CODE | |
| LOW | …amework/core/tests/python/test_episode_content_root.py | 14 | CODE | |
| LOW | framework/core/tests/python/test_atlas_storage.py | 498 | CODE | |
| LOW | framework/core/tests/python/test_atlas_storage.py | 666 | CODE | |
| LOW | framework/core/tests/python/test_atlas_storage.py | 891 | CODE | |
| LOW | framework/core/tests/python/test_storage_cli.py | 7 | CODE | |
| LOW | …rk/core/tests/python/test_episode_manifest_recovery.py | 11 | CODE | |
| LOW | …mework/core/tests/python/test_episode_manifest_fsck.py | 15 | CODE | |
| LOW | …s/python/test_episode_qualification_semantic_oracle.py | 4 | CODE | |
| LOW | …/core/tests/qualification/episode/semantic_workload.py | 4 | CODE | |
| LOW | …k/core/tests/qualification/episode/episode_workload.py | 14 | CODE | |
| LOW | …rk/core/tests/qualification/episode/semantic_oracle.py | 9 | CODE | |
| LOW | …/qualification/live-peer-continuity/native_campaign.py | 3 | CODE | |
| LOW | …alification/runtime-activation/performance_workload.py | 3 | CODE | |
| LOW | framework/core/src/python/kungfu/kfx_contract.py | 3 | CODE | |
| LOW | framework/core/src/python/kungfu/profile_composition.py | 10 | CODE | |
| LOW | framework/core/src/python/kungfu/profile_sdk.py | 10 | CODE | |
| LOW | framework/core/src/python/kungfu/__init__.py | 3 | CODE | |
| LOW | framework/core/src/python/kungfu/durability.py | 5 | CODE | |
| LOW | framework/core/src/python/kungfu/action_envelope.py | 3 | CODE | |
| LOW | framework/core/src/python/kungfu/workspace.py | 3 | CODE | |
| LOW | framework/core/src/python/kungfu/content_hash.py | 3 | CODE | |
| LOW | framework/core/src/python/kungfu/projection.py | 5 | CODE | |
| LOW | framework/core/src/python/kungfu/runtime_service.py | 3 | CODE | |
| LOW | framework/core/src/python/kungfu/contract.py | 3 | CODE | |
| LOW | framework/core/src/python/kungfu/runtime_broker.py | 3 | CODE | |
| LOW | framework/core/src/python/kungfu/workspace_guidance.py | 3 | CODE | |
| LOW | …/core/src/python/kungfu/coordination/arbiter_client.py | 16 | CODE | |
| LOW | framework/core/src/python/kungfu/coordination/audit.py | 8 | CODE | |
| LOW | framework/core/src/python/kungfu/coordination/locks.py | 25 | CODE | |
| LOW | …mework/core/src/python/kungfu/coordination/__init__.py | 8 | CODE | |
| LOW | …mework/core/src/python/kungfu/coordination/__init__.py | 8 | CODE | |
| LOW | …mework/core/src/python/kungfu/coordination/__init__.py | 8 | CODE | |
| LOW | …mework/core/src/python/kungfu/coordination/__init__.py | 8 | CODE | |
| LOW | …mework/core/src/python/kungfu/coordination/__init__.py | 8 | CODE | |
| LOW | …amework/core/src/python/kungfu/coordination/arbiter.py | 22 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/catalog.py | 3 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/provider.py | 3 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/registry.py | 3 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/__init__.py | 3 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/__init__.py | 3 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/__init__.py | 4 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/__init__.py | 4 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/__init__.py | 5 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/__init__.py | 5 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/__init__.py | 5 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/__init__.py | 5 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/__init__.py | 5 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/__init__.py | 12 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/__init__.py | 12 | CODE | |
| LOW | framework/core/src/python/kungfu/skill/__init__.py | 12 | CODE | |
| 115 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …amework/core/src/python/kungfu/rewind/reflection_fb.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | framework/core/src/python/kungfu/rewind/fb/RunBegin.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …k/core/src/python/kungfu/rewind/fb/ApprovalDecision.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …mework/core/src/python/kungfu/rewind/fb/RetryMarker.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | framework/core/src/python/kungfu/rewind/fb/ToolCall.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …ework/core/src/python/kungfu/rewind/fb/CostSnapshot.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …ework/core/src/python/kungfu/rewind/fb/ModelRequest.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | framework/core/src/python/kungfu/rewind/fb/RunEnd.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …amework/core/src/python/kungfu/rewind/fb/ToolResult.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …work/core/src/python/kungfu/rewind/fb/ModelResponse.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …k/core/src/python/kungfu/work/fb/CheckpointRecorded.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …ork/core/src/python/kungfu/work/fb/ArtifactRecorded.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …ork/core/src/python/kungfu/work/fb/DecisionRecorded.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | framework/core/src/python/kungfu/work/fb/RunLinked.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …work/core/src/python/kungfu/work/fb/WorkItemCreated.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …rk/core/src/python/kungfu/work/fb/WorkStatusChanged.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …mework/core/src/python/kungfu/work/fb/NextActionSet.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …k/core/src/python/kungfu/work/fb/ValidationRecorded.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …amework/core/src/python/kungfu/atlas/fb/ImportBegin.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …mework/core/src/python/kungfu/atlas/fb/GoalSnapshot.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …ork/core/src/python/kungfu/atlas/fb/MissionSnapshot.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | …work/core/src/python/kungfu/atlas/fb/MarkerSnapshot.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| HIGH | framework/core/src/python/kungfu/atlas/fb/ImportEnd.py | 0 | this method is deprecated. please switch to getrootas. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | developer/sdk/src/sdk.js | 391 | // ── product commands ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | developer/sdk/src/sdk.js | 1194 | // ── KFD-1 contract prototype ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | developer/sdk/src/sdk.js | 2328 | // ── kfx view extension build ────────────────────────────────────────────── | COMMENT |
| MEDIUM | developer/sdk/src/sdk.js | 2451 | // ── kfx C++ extension build ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | developer/sdk/src/sdk.js | 2584 | // ── kfx Python AOT extension build ───────────────────────────────────────── | COMMENT |
| MEDIUM | framework/core/pyproject.toml | 3 | # ============================================================================ | COMMENT |
| MEDIUM | framework/core/pyproject.toml | 7 | # ============================================================================ | COMMENT |
| MEDIUM | framework/core/slices/embedding/main.cpp | 56 | // ── write side ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/core/slices/schema-registry/producer.cpp | 103 | // ── bundle format pieces ────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/core/slices/schema-registry/decoder.cpp | 90 | // ── reopen the journal independently and decode by binding ──────── | COMMENT |
| MEDIUM | framework/core/fuzz/CMakeLists.txt | 127 | # ── Registered fuzz targets ───────────────────────────────────────── | COMMENT |
| MEDIUM | …work/core/src/python/kungfu/rewind/hook/rewind_hook.js | 128 | // ── post-require adapters (mini require-in-the-middle) ────────── | COMMENT |
| MEDIUM | …rk/core/src/python/kungfu/rewind/hook/rewind_client.py | 122 | # ── kfx action-envelope events ────────────────────────────────────── | COMMENT |
| MEDIUM | …rk/core/src/python/kungfu/rewind/hook/rewind_client.py | 199 | # ── post-import adapters ──────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/kfx/src/index.ts | 105 | // ── capability surface ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/kfx/src/index.ts | 122 | // ── manifest data (package.json `kungfuConfig`) ─────────────────────────── | COMMENT |
| MEDIUM | framework/kfx/src/index.ts | 311 | // ── load plan: host-agnostic discovery + decision (ADR-0017) ────────────── | COMMENT |
| MEDIUM | framework/kfx/src/index.ts | 1120 | // ── runtime contract (what the shell hands a mounted view) ──────────────── | COMMENT |
| MEDIUM | framework/kfx/src/index.ts | 1351 | // ── UI tokens (dark, dense, monospace — no component library) ───────────── | COMMENT |
| MEDIUM | framework/gui/src/main/sandbox-host.ts | 37 | // ── electron glue ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/gui/src/main/terminal-host.ts | 108 | // ── pure relay core ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/gui/src/main/terminal-host.ts | 176 | // ── electron glue ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/api/src/capability/service-authz.ts | 96 | // ── persistence: the same ConfigStore shell state uses ─────────────────────── | COMMENT |
| MEDIUM | framework/api/src/capability/sandbox.ts | 26 | // ── host (trusted) ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/api/src/capability/sandbox.ts | 90 | // ── guest (sandboxed) ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/api/src/capability/kungfu-guest.ts | 32 | // ── trusted tier: in-process async surface, zero-copy by reference ─────────── | COMMENT |
| MEDIUM | framework/api/src/capability/kungfu-guest.ts | 84 | // ── default tier: OS-sandboxed child served over the stdio relay ───────────── | COMMENT |
| MEDIUM | framework/api/src/capability/guest-harness/authz-run.ts | 49 | // ── Part A: three-layer resolution ─────────────────────────────────────────── | COMMENT |
| MEDIUM | framework/api/src/capability/guest-harness/authz-run.ts | 104 | // ── Part B: persistence round-trip through a ConfigStore double ─────────────── | COMMENT |
| MEDIUM | framework/api/src/capability/guest-harness/authz-run.ts | 168 | // ── Part C: resolved profile drives real egress (ties to stage 2b) ──────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | framework/core/conanfile.py | 338 | except Exception: | CODE |
| LOW | …/core/tests/qualification/episode/semantic_workload.py | 486 | except Exception as error: | CODE |
| LOW | …/core/tests/qualification/episode/semantic_workload.py | 505 | except Exception as error: | CODE |
| LOW | …k/core/tests/qualification/episode/episode_workload.py | 83 | except Exception: | CODE |
| LOW | …k/core/tests/qualification/episode/episode_workload.py | 210 | except Exception as error: | CODE |
| LOW | …k/core/tests/qualification/episode/episode_workload.py | 661 | except Exception as error: | CODE |
| MEDIUM | …k/core/tests/qualification/episode/episode_workload.py | 70 | def _process_resources() -> tuple[int, int | None]: | CODE |
| LOW | …/qualification/live-peer-continuity/native_campaign.py | 366 | except Exception as failure: # noqa: BLE001 | CODE |
| LOW | framework/core/.gyp/gen_kungfubuildinfo.py | 50 | except Exception: | CODE |
| LOW | framework/core/src/python/kungfu/durability.py | 436 | except Exception as error: # noqa: BLE001 - retained for inspection | CODE |
| LOW | framework/core/src/python/kungfu/runtime_service.py | 987 | except Exception: # noqa: BLE001 - lock logic must never break serving | CODE |
| LOW | framework/core/src/python/kungfu/runtime_service.py | 1007 | except Exception: # noqa: BLE001 | CODE |
| LOW | framework/core/src/python/kungfu/runtime_broker.py | 1381 | except Exception: | CODE |
| MEDIUM | framework/core/src/python/kungfu/runtime_broker.py | 1020 | def _read_state(self) -> dict[str, Any]: | CODE |
| LOW | …work/core/src/python/kungfu/runtime/live/event_loop.py | 148 | except Exception as e: | CODE |
| MEDIUM | …work/core/src/python/kungfu/runtime/live/event_loop.py | 145 | def wrapper(): | CODE |
| LOW | framework/core/src/python/kungfu/rewind/managed_run.py | 190 | except Exception as exc: | CODE |
| LOW | framework/core/src/python/kungfu/rewind/managed_run.py | 252 | except Exception as exc: # a malformed provider payload must not crash the run | CODE |
| LOW | framework/core/src/python/kungfu/rewind/proxy.py | 99 | except Exception as e: # noqa: BLE001 — the child must get an answer | CODE |
| LOW | framework/core/src/python/kungfu/rewind/managed_cli.py | 211 | except Exception as exc: | CODE |
| LOW | …rk/core/src/python/kungfu/rewind/hook/sitecustomize.py | 12 | except Exception: # noqa: BLE001 — never break the user's interpreter | CODE |
| LOW | …rk/core/src/python/kungfu/rewind/hook/sitecustomize.py | 35 | except Exception: # noqa: BLE001 | CODE |
| LOW | …rk/core/src/python/kungfu/rewind/hook/rewind_client.py | 170 | except Exception as e: | CODE |
| LOW | …rk/core/src/python/kungfu/rewind/hook/rewind_client.py | 271 | except Exception: # noqa: BLE001 — a broken kfx adapter must not break the run | CODE |
| LOW | …rk/core/src/python/kungfu/rewind/hook/rewind_client.py | 287 | except Exception: # noqa: BLE001 — adapters must never break imports | CODE |
| LOW | framework/core/src/python/kungfu/cli/site.py | 110 | except Exception: | CODE |
| LOW | framework/core/src/python/kungfu/cli/site.py | 477 | except Exception as err: | CODE |
| LOW | framework/core/src/python/kungfu/cli/site.py | 497 | except Exception as err: | CODE |
| LOW | …rk/core/src/python/kungfu/cli/bridging/pdm/__init__.py | 92 | except Exception: | CODE |
| MEDIUM | …rk/core/src/python/kungfu/cli/bridging/pdm/__init__.py | 87 | def __init__(self): | CODE |
| LOW | framework/core/src/python/kungfu/cli/commands/lock.py | 36 | except Exception as exc: # noqa: BLE001 — audit is additive, never load-bearing | CODE |
| LOW | framework/core/src/python/kungfu/cli/commands/lock.py | 44 | except Exception as exc: # noqa: BLE001 | CODE |
| MEDIUM | framework/core/src/python/kungfu/cli/commands/lock.py | 41 | def _safe_audit(fn): | CODE |
| LOW | framework/core/src/python/kungfu/atlas/store.py | 331 | except Exception as error: # sealed import remains durable and inspectable | CODE |
| LOW | framework/core/src/python/kungfu/remote/store.py | 290 | except Exception as exc: # noqa: BLE001 - error is persisted in the manifest | CODE |
| LOW | framework/api/src/capability/guest-harness/py-child.py | 32 | except Exception as err: # noqa: BLE001 — report and fail visibly | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | framework/core/src/python/kungfu/profile_composition.py | 113 | CODE | |
| LOW | framework/core/src/python/kungfu/profile_composition.py | 827 | CODE | |
| LOW | framework/core/src/python/kungfu/runtime_service.py | 281 | CODE | |
| LOW | framework/core/src/python/kungfu/runtime_service.py | 745 | CODE | |
| LOW | framework/core/src/python/kungfu/runtime_service.py | 1395 | CODE | |
| LOW | framework/core/src/python/kungfu/runtime_service.py | 965 | CODE | |
| LOW | framework/core/src/python/kungfu/contract.py | 22 | CODE | |
| LOW | framework/core/src/python/kungfu/contract.py | 83 | CODE | |
| LOW | framework/core/src/python/kungfu/runtime_broker.py | 1465 | CODE | |
| LOW | framework/core/src/python/kungfu/workspace_guidance.py | 437 | CODE | |
| LOW | framework/core/src/python/kungfu/coordination/locks.py | 62 | CODE | |
| LOW | framework/core/src/python/kungfu/capability/guest.py | 41 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/managed_run.py | 99 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/ingest.py | 85 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/export.py | 30 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/replay.py | 172 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/replay.py | 191 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/adapters.py | 46 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/adapters.py | 61 | CODE | |
| LOW | framework/core/src/python/kungfu/agent/resources.py | 68 | CODE | |
| LOW | framework/core/src/python/kungfu/cli/site.py | 82 | CODE | |
| LOW | framework/core/src/python/kungfu/cli/site.py | 414 | CODE | |
| LOW | framework/core/src/python/kungfu/cli/commands/skill.py | 540 | CODE | |
| LOW | framework/core/src/python/kungfu/cli/commands/env.py | 14 | CODE | |
| LOW | framework/core/src/python/kungfu/cli/commands/codex.py | 70 | CODE | |
| LOW | …amework/core/src/python/kungfu/cli/commands/storage.py | 292 | CODE | |
| LOW | …amework/core/src/python/kungfu/cli/commands/storage.py | 427 | CODE | |
| LOW | …amework/core/src/python/kungfu/cli/commands/storage.py | 526 | CODE | |
| LOW | framework/core/src/python/kungfu/cli/commands/agent.py | 887 | CODE | |
| LOW | framework/core/src/python/kungfu/storage/service.py | 41 | CODE | |
| LOW | framework/core/src/python/kungfu/work/store.py | 243 | CODE | |
| LOW | framework/core/src/python/kungfu/sources/store.py | 112 | CODE | |
| LOW | framework/core/src/python/kungfu/atlas/store.py | 579 | CODE | |
| LOW | …mework/core/src/python/kungfu/atlas/mission_control.py | 634 | CODE | |
| LOW | …mework/core/src/python/kungfu/atlas/mission_control.py | 1111 | CODE | |
| LOW | …mework/core/src/python/kungfu/atlas/mission_control.py | 1165 | CODE | |
| LOW | framework/core/src/python/kungfu/atlas/payloads.py | 951 | CODE | |
| LOW | framework/core/src/python/kungfu/remote/store.py | 238 | CODE | |
| LOW | …ons/mission-control/mission-control-actions/adapter.py | 75 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …amework/core/src/python/kungfu/rewind/reflection_fb.py | 52 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …amework/core/src/python/kungfu/rewind/reflection_fb.py | 144 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …amework/core/src/python/kungfu/rewind/reflection_fb.py | 194 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …amework/core/src/python/kungfu/rewind/reflection_fb.py | 313 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …amework/core/src/python/kungfu/rewind/reflection_fb.py | 473 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …amework/core/src/python/kungfu/rewind/reflection_fb.py | 684 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …amework/core/src/python/kungfu/rewind/reflection_fb.py | 851 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …amework/core/src/python/kungfu/rewind/reflection_fb.py | 973 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …amework/core/src/python/kungfu/rewind/reflection_fb.py | 1113 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …amework/core/src/python/kungfu/rewind/reflection_fb.py | 1181 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | framework/core/src/python/kungfu/rewind/fb/RunBegin.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …k/core/src/python/kungfu/rewind/fb/ApprovalDecision.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …mework/core/src/python/kungfu/rewind/fb/RetryMarker.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | framework/core/src/python/kungfu/rewind/fb/ToolCall.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …ework/core/src/python/kungfu/rewind/fb/CostSnapshot.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …ework/core/src/python/kungfu/rewind/fb/ModelRequest.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | framework/core/src/python/kungfu/rewind/fb/RunEnd.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …amework/core/src/python/kungfu/rewind/fb/ToolResult.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …work/core/src/python/kungfu/rewind/fb/ModelResponse.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …k/core/src/python/kungfu/work/fb/CheckpointRecorded.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …ork/core/src/python/kungfu/work/fb/ArtifactRecorded.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …ork/core/src/python/kungfu/work/fb/DecisionRecorded.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | framework/core/src/python/kungfu/work/fb/RunLinked.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …work/core/src/python/kungfu/work/fb/WorkItemCreated.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …rk/core/src/python/kungfu/work/fb/WorkStatusChanged.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …mework/core/src/python/kungfu/work/fb/NextActionSet.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …k/core/src/python/kungfu/work/fb/ValidationRecorded.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …amework/core/src/python/kungfu/atlas/fb/ImportBegin.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …mework/core/src/python/kungfu/atlas/fb/GoalSnapshot.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …ork/core/src/python/kungfu/atlas/fb/MissionSnapshot.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | …work/core/src/python/kungfu/atlas/fb/MarkerSnapshot.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| MEDIUM | framework/core/src/python/kungfu/atlas/fb/ImportEnd.py | 21 | """This method is deprecated. Please switch to GetRootAs.""" | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/Cargo.toml | 6 | # docs/development/rust-adoption.md for the adoption paradigm (source layout, consumption | COMMENT |
| MEDIUM | …amework/core/tests/python/test_coordination_arbiter.py | 8 | # by the cross-process arbiter harness. | COMMENT |
| MEDIUM | …e/.deps/hana-1.80.0/include/boost/hana/fwd/prepend.hpp | 38 | //! > more nuanced and bears its name better for e.g. `hana::optional`. | COMMENT |
| MEDIUM | …ork/core/src/libkungfu/src/runtime/util/stacktrace.cpp | 217 | // allocation, so it is a more robust artifact under heap corruption than the | COMMENT |
| MEDIUM | …ork/core/src/libkungfu/src/runtime/util/stacktrace.cpp | 222 | // the essential "what/where" is already on disk and the robust dump gets its shot | COMMENT |
| MEDIUM | …amework/api/src/capability/guest-harness/py_trusted.py | 6 | # relay), so the harness reads the JSON result from it. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | developer/sdk/README.md | 17 | kungfu sdk create app my-app # scaffold into ./my-app | CODE |
| MEDIUM | developer/sdk/README.md | 30 | kungfu sdk create extension my-view # scaffold into ./my-view | CODE |
| MEDIUM | developer/sdk/src/sdk.js | 4 | // First cut of the modern SDK surface: scaffold a complete Kungfu desktop app | COMMENT |
| MEDIUM | crates/Cargo.toml | 29 | # strip symbols; the launcher's hot path is process orchestration, not compute. | COMMENT |
| MEDIUM | framework/core/src/python/kungfu/cli/commands/sdk.py | 3 | # `kungfu sdk` — the application assembly toolkit: scaffold apps and view | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | crates/libwasm-spike/src/lib.rs | 360 | let _ = (self.reader.api.value.reader_release_batch.unwrap())( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | framework/core/src/python/kungfu/config.py | 415 | def _set_dotted(target: dict[str, Any], key: str, value: Any) -> None: | CODE |
| LOW | framework/core/src/python/kungfu/runtime_broker.py | 991 | def _set_snapshot_lifecycle(state: dict[str, Any], lifecycle: str) -> None: | CODE |
| LOW | …mework/core/src/python/kungfu/coordination/__init__.py | 10 | __all__ = ["acquire", "release", "held", "with_lock", "status"] | CODE |
| LOW | framework/core/src/python/kungfu/skill/__init__.py | 34 | __all__ = [ | CODE |
| LOW | framework/core/src/python/kungfu/capability/__init__.py | 13 | __all__ = ["connect"] | CODE |
| LOW | …amework/core/src/python/kungfu/rewind/cost/__init__.py | 33 | __all__ = [ | CODE |
| LOW | framework/core/src/python/kungfu/agent/__init__.py | 15 | __all__ = [ | CODE |
| LOW | …rk/core/src/python/kungfu/cli/bridging/__registry__.py | 8 | __all__ = [ | CODE |
| LOW | …rk/core/src/python/kungfu/cli/commands/__registry__.py | 31 | __all__ = [ | CODE |
| LOW | framework/sdk/python/kungfu_sdk/__init__.py | 10 | __all__ = [ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …work/core/src/python/kungfu/runtime/live/event_loop.py | 180 | CODE | |
| LOW | …work/core/src/python/kungfu/runtime/live/event_loop.py | 199 | CODE | |
| LOW | …work/core/src/python/kungfu/runtime/live/event_loop.py | 265 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/approvals.py | 67 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/events.py | 201 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/managed_cli.py | 71 | CODE | |
| LOW | framework/core/src/python/kungfu/rewind/reporting.py | 160 | CODE | |
| LOW | framework/core/src/python/kungfu/storage/service.py | 457 | CODE | |
| LOW | framework/core/src/python/kungfu/storage/service.py | 507 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | framework/core/tests/python/test_agent_profile_sdk.py | 623 | bundle.write_text("export function View() { return null; }\n") | CODE |
| HIGH | framework/core/src/python/kungfu/runtime_service.py | 1780 | "write the unit; then run: systemctl --user daemon-reload && systemctl --user enable --now kungfu-supervisor | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | framework/core/tests/storage-node-binding.test.js | 520 | print(json.dumps(node_safe(out), sort_keys=True, separators=(",", ":"))) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …core/.deps/hana-1.80.0/include/boost/hana/fwd/type.hpp | 501 | //! `std::integral_constant`s, don't forget to include the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | framework/core/src/python/kungfu/runtime_service.py | 1025 | def handle_request(self, request: RuntimeEngineRequest) -> RuntimeEngineReceipt: | CODE |