Neo.mjs is a self-evolving software organism: a professional end-to-end AI engineering team whose cross-model swarm inhabits live apps via Neural Link, Active Hybrid GraphRAG, DreamService, and self-healing loops.
This report summarizes scanner evidence for neomjs/neo, a JavaScript project with 3,296 GitHub stars. SynthScan examined 103,048 lines of code across 2708 source files, recording 206 pattern matches distributed across 8 syntactic categories. The legacy adjusted pattern signal is 3.4 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 180 finding(s).
Are imports declared and package/API names verified? 15 finding(s).
Are wrappers, guards, and repeated structures necessary? 15 finding(s).
Which changes need focused human review? 206 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 206 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | package-lock.json | 6726 | "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz", | CODE |
| MEDIUM | .codex/config.template.toml | 63 | # harness, and verify with `printenv NEO_MCP_REMOTE_TOKEN` in that same shell. | COMMENT |
| MEDIUM | .codex/config.template.toml | 64 | # A GUI-launched harness inherits its environment from launchd rather than from a | COMMENT |
| MEDIUM | …tal/resources/data/tickets/backlog/active-chunk-8.json | 1 | [{"id":"15751","parentId":"Backlog/active-chunk-8","title":"Validate DevIndex budget across three scheduled runs"},{"id" | CODE |
| MEDIUM | …tal/resources/data/tickets/backlog/active-chunk-4.json | 1 | [{"id":"14930","parentId":"Backlog/active-chunk-4","title":"Human-drag showcase beat + dock-guide affordance polish pass | CODE |
| MEDIUM | …tal/resources/data/tickets/backlog/active-chunk-5.json | 1 | [{"id":"15149","parentId":"Backlog/active-chunk-5","title":"Measure community-activity shadow coverage and cost"},{"id": | CODE |
| MEDIUM | …tal/resources/data/tickets/backlog/active-chunk-9.json | 1 | [{"id":"15945","parentId":"Backlog/active-chunk-9","title":"Vessel pane is dark but UNSKINNED — pane rules still scoped | CODE |
| MEDIUM | …tal/resources/data/tickets/backlog/active-chunk-2.json | 1 | [{"id":"14582","parentId":"Backlog/active-chunk-2","title":"record_turn_presence: output schema rejects its own action=s | CODE |
| MEDIUM | …al/resources/data/tickets/backlog/active-chunk-14.json | 1 | [{"id":"16882","parentId":"Backlog/active-chunk-14","title":"Every daemon reports a crash as success: uncaughtException | CODE |
| MEDIUM | …al/resources/data/tickets/backlog/active-chunk-18.json | 1 | [{"id":"17621","parentId":"Backlog/active-chunk-18","title":"Land devindex tenant AC receipts on the local deployment"}, | CODE |
| MEDIUM | …tal/resources/data/tickets/backlog/active-chunk-7.json | 1 | [{"id":"15555","parentId":"Backlog/active-chunk-7","title":"Prove macOS denied-permission tear-out fallback and matrix-r | CODE |
| MEDIUM | …rces/data/tickets/v13-0-0/archive-v13-0-0-chunk-7.json | 1 | [{"id":"10677","parentId":"v13.0.0/archive-v13-0-0-chunk-7","title":"Claude Desktop terminal-restart + prompt-injection | CODE |
| MEDIUM | …rces/data/tickets/v13-0-0/archive-v13-0-0-chunk-6.json | 1 | [{"id":"10467","parentId":"v13.0.0/archive-v13-0-0-chunk-6","title":"Bridge daemon wake delivery keystroke-injects into | CODE |
| MEDIUM | …ces/data/tickets/v13-0-0/archive-v13-0-0-chunk-15.json | 1 | [{"id":"12449","parentId":"v13.0.0/archive-v13-0-0-chunk-15","title":"Typed calibration loop (operator-overturns logged | CODE |
| MEDIUM | …ces/data/tickets/v13-0-0/archive-v13-0-0-chunk-10.json | 1 | [{"id":"11313","parentId":"v13.0.0/archive-v13-0-0-chunk-10","title":"Per-file size caps + atlas-monolith detection in s | CODE |
| MEDIUM | …ces/data/tickets/v13-0-0/archive-v13-0-0-chunk-11.json | 1 | [{"id":"11533","parentId":"v13.0.0/archive-v13-0-0-chunk-11","title":"Codify \"PR Diff === PR Body\" mental model in AGE | CODE |
| MEDIUM | …rces/data/tickets/v13-0-0/archive-v13-0-0-chunk-5.json | 1 | [{"id":"10276","parentId":"v13.0.0/archive-v13-0-0-chunk-5","title":"ideation-sandbox: add pre-authoring adjacency sweep | CODE |
| MEDIUM⚡ | …rces/data/tickets/v13-0-0/archive-v13-0-0-chunk-4.json | 1 | [{"id":"10096","parentId":"v13.0.0/archive-v13-0-0-chunk-4","title":"[bug] GraphqlService.query discards partial data wh | CODE |
| MEDIUM | …rces/data/tickets/v13-0-0/archive-v13-0-0-chunk-8.json | 1 | [{"id":"10869","parentId":"v13.0.0/archive-v13-0-0-chunk-8","title":"Mandate A2A notifications for ANY lifecycle event i | CODE |
| MEDIUM⚡ | …ces/data/tickets/v13-0-0/archive-v13-0-0-chunk-17.json | 1 | [{"id":"12922","parentId":"v13.0.0/archive-v13-0-0-chunk-17","title":"Flip @neo-fable-clio participationStatus to active | CODE |
| MEDIUM | …rces/data/tickets/v13-1-0/archive-v13-1-0-chunk-6.json | 1 | [{"id":"14112","parentId":"v13.1.0/archive-v13-1-0-chunk-6","title":"Data-integrity diagnostics runner unit: coverage-wi | CODE |
| MEDIUM | …rces/data/tickets/v13-1-0/archive-v13-1-0-chunk-7.json | 1 | [{"id":"14321","parentId":"v13.1.0/archive-v13-1-0-chunk-7","title":"docs(benefits): refresh AgentMemory.md + DeployingT | CODE |
| MEDIUM | …rces/data/tickets/v13-1-0/archive-v13-1-0-chunk-2.json | 1 | [{"id":"13275","parentId":"v13.1.0/archive-v13-1-0-chunk-2","title":"assertExpectedIdentity: emit a stable machine code | CODE |
| MEDIUM | …rces/data/tickets/v13-1-0/archive-v13-1-0-chunk-3.json | 1 | [{"id":"13491","parentId":"v13.1.0/archive-v13-1-0-chunk-3","title":"Accounts keeper-view: fleet agent-identity setup (p | CODE |
| MEDIUM | …rces/data/tickets/v13-1-0/archive-v13-1-0-chunk-8.json | 1 | [{"id":"14557","parentId":"v13.1.0/archive-v13-1-0-chunk-8","title":"tooling(docs): make mermaid render-verify actually | CODE |
| MEDIUM | …rces/data/tickets/v13-1-0/archive-v13-1-0-chunk-4.json | 1 | [{"id":"13710","parentId":"v13.1.0/archive-v13-1-0-chunk-4","title":"friction→gold: mechanical pre-push branch-freshness | CODE |
| MEDIUM | …es/data/discussions/ideas/archive-v13-0-0-chunk-1.json | 1 | [{"id":"12669","parentId":"Ideas/archive-v13-0-0-chunk-1","state":"closed","title":"Chronological / temporal memory reca | CODE |
| MEDIUM | …l/resources/data/discussions/ideas/active-chunk-2.json | 1 | [{"id":"17782","parentId":"Ideas/active-chunk-2","state":"open","title":"The split runway: substrate before code, receiv | CODE |
| MEDIUM | …es/data/discussions/ideas/archive-v13-1-0-chunk-1.json | 1 | [{"id":"14422","parentId":"Ideas/archive-v13-1-0-chunk-1","state":"closed","title":"The concept graph becomes load-beari | CODE |
| MEDIUM⚡ | …l/resources/data/discussions/ideas/active-chunk-1.json | 1 | [{"id":"15200","parentId":"Ideas/active-chunk-1","state":"open","title":"Evolve cls and wrapperCls into object-shaped co | CODE |
| MEDIUM | …ources/data/pulls/v13-0-0/archive-v13-0-0-chunk-7.json | 1 | [{"id":"11497","parentId":"v13.0.0/archive-v13-0-0-chunk-7","title":"feat(ai): CI PR-body lint for pull-request skill ad | CODE |
| MEDIUM⚡ | …ources/data/pulls/v13-0-0/archive-v13-0-0-chunk-6.json | 1 | [{"id":"11276","parentId":"v13.0.0/archive-v13-0-0-chunk-6","title":"feat(github-workflow): atomic PR review create/upda | CODE |
| MEDIUM⚡ | …ources/data/pulls/v13-0-0/archive-v13-0-0-chunk-1.json | 1 | [{"id":"12966","parentId":"v13.0.0/archive-v13-0-0-chunk-1","title":"fix(release): publish.mjs commits bypass pre-commit | CODE |
| MEDIUM | …urces/data/pulls/v13-0-0/archive-v13-0-0-chunk-12.json | 1 | [{"id":"12485","parentId":"v13.0.0/archive-v13-0-0-chunk-12","title":"feat(agentos): agentIdentity scope param for get_a | CODE |
| MEDIUM | …urces/data/pulls/v13-0-0/archive-v13-0-0-chunk-13.json | 1 | [{"id":"12653","parentId":"v13.0.0/archive-v13-0-0-chunk-13","title":"feat(ai): real GitLab MergeRequestService — MR ops | CODE |
| MEDIUM | …ources/data/pulls/v13-0-0/archive-v13-0-0-chunk-3.json | 1 | [{"id":"10588","parentId":"v13.0.0/archive-v13-0-0-chunk-3","title":"fix(docs): correct §6 boot-summarization claim in A | CODE |
| MEDIUM | …urces/data/pulls/v13-0-0/archive-v13-0-0-chunk-10.json | 1 | [{"id":"12099","parentId":"v13.0.0/archive-v13-0-0-chunk-10","title":"fix(ai): delegate Sandman runner to REM cycle (#12 | CODE |
| MEDIUM | …urces/data/pulls/v13-0-0/archive-v13-0-0-chunk-11.json | 1 | [{"id":"12306","parentId":"v13.0.0/archive-v13-0-0-chunk-11","title":"feat(portal): activate chunked tickets tree (#1230 | CODE |
| MEDIUM | …ources/data/pulls/v13-0-0/archive-v13-0-0-chunk-2.json | 1 | [{"id":"12961","parentId":"v13.0.0/archive-v13-0-0-chunk-2","title":"fix: pin header toolbar scroll extent during column | CODE |
| MEDIUM | …ources/data/pulls/v13-0-0/archive-v13-0-0-chunk-5.json | 1 | [{"id":"11044","parentId":"v13.0.0/archive-v13-0-0-chunk-5","title":"refactor(ai): extract ProcessSupervisorService from | CODE |
| MEDIUM | …ources/data/pulls/v13-0-0/archive-v13-0-0-chunk-4.json | 1 | [{"id":"10831","parentId":"v13.0.0/archive-v13-0-0-chunk-4","title":"docs(agentos): audit MCP env-var substrate (#10824) | CODE |
| MEDIUM | …ources/data/pulls/v13-0-0/archive-v13-0-0-chunk-8.json | 1 | [{"id":"11704","parentId":"v13.0.0/archive-v13-0-0-chunk-8","title":"feat(kb): add Phase 2E tenant config storage (#1163 | CODE |
| MEDIUM | …portal/resources/data/pulls/latest/active-chunk-8.json | 1 | [{"id":"16318","parentId":"Latest/active-chunk-8","title":"feat(memory-core): report whether a seat holds a deliverable | CODE |
| MEDIUM | …ortal/resources/data/pulls/latest/active-chunk-10.json | 1 | [{"id":"16807","parentId":"Latest/active-chunk-10","title":"feat(ai): the deployment-state snapshot carries the revision | CODE |
| MEDIUM | …portal/resources/data/pulls/latest/active-chunk-4.json | 1 | [{"id":"15472","parentId":"Latest/active-chunk-4","title":"refactor(fleet): enforce single-class toggles (#15201)"},{"id | CODE |
| MEDIUM | …portal/resources/data/pulls/latest/active-chunk-5.json | 1 | [{"id":"15685","parentId":"Latest/active-chunk-5","title":"fix(ai): explicit JsonValue union for call_method args (#1567 | CODE |
| MEDIUM | …portal/resources/data/pulls/latest/active-chunk-2.json | 1 | [{"id":"15046","parentId":"Latest/active-chunk-2","title":"fix(codex): make shared context resident-neutral (#15045)"},{ | CODE |
| MEDIUM | …ortal/resources/data/pulls/latest/active-chunk-14.json | 1 | [{"id":"17709","parentId":"Latest/active-chunk-14","title":"test(backup): a bundle folder no longer stands in for the ex | CODE |
| MEDIUM | …ortal/resources/data/pulls/latest/active-chunk-15.json | 1 | [{"id":"17803","parentId":"Latest/active-chunk-15","title":"The enforcement read-back names what was observed, not a hea | CODE |
| MEDIUM | …portal/resources/data/pulls/latest/active-chunk-1.json | 1 | [{"id":"14861","parentId":"Latest/active-chunk-1","title":"docs(roadmap): focus v13.2 on engineering surfaces (#14842)"} | CODE |
| MEDIUM | …portal/resources/data/pulls/latest/active-chunk-6.json | 1 | [{"id":"15889","parentId":"Latest/active-chunk-6","title":"fix(#15886): settle the KB server spec's boot before destroy, | CODE |
| MEDIUM | …ortal/resources/data/pulls/latest/active-chunk-12.json | 1 | [{"id":"17253","parentId":"Latest/active-chunk-12","title":"feat(build): the npm package stops shipping the DevIndex cor | CODE |
| MEDIUM | …portal/resources/data/pulls/latest/active-chunk-7.json | 1 | [{"id":"16104","parentId":"Latest/active-chunk-7","title":"docs(agentos): bound incident falsifiers (#16076)"},{"id":"16 | CODE |
| MEDIUM | …ources/data/pulls/v13-1-0/archive-v13-1-0-chunk-7.json | 1 | [{"id":"14457","parentId":"v13.1.0/archive-v13-1-0-chunk-7","title":"feat(build): add refspec-safe agent push wrapper (# | CODE |
| MEDIUM | …ources/data/pulls/v13-1-0/archive-v13-1-0-chunk-1.json | 1 | [{"id":"14556","parentId":"v13.1.0/archive-v13-1-0-chunk-1","title":"docs(release): v13.1 notes cut-prep — banner out, T | CODE |
| MEDIUM | …ources/data/pulls/v13-1-0/archive-v13-1-0-chunk-2.json | 1 | [{"id":"13385","parentId":"v13.1.0/archive-v13-1-0-chunk-2","title":"feat(memory-core): archiveMemoriesByAgentIdentity t | CODE |
| MEDIUM | …ources/data/pulls/v13-1-0/archive-v13-1-0-chunk-3.json | 1 | [{"id":"13591","parentId":"v13.1.0/archive-v13-1-0-chunk-3","title":"fix(wake): give Codex submit popovers time to settl | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | ROADMAP.md | 45 | - **The rest of Grid Multi-Body** ([#9486](https://github.com/neomjs/neo/issues/9486)): cross-window SubGrid detachment | CODE |
| MEDIUM | learn/agentos/AGENTS_ATLAS.md | 32 | - **Empirical anchors:** Original 5 anchors from #10469 (2026-04-28 panic-test retrospective: Cursor speculation #10411; | CODE |
| MEDIUM | …s/decisions/0018-neo-identity-source-of-truth-model.md | 130 | - **OD-4 — The structure after the split. DECIDED (operator @tobiu, 2026-10-11).** The repository split moved the Agent | CODE |
| MEDIUM | learn/blog/where-an-agent-institution-sits.md | 11 | The numbers behind that feeling are public. MIT's Project NANDA found that about 95 % of the organisations it studied ha | CODE |
| MEDIUM | learn/blog/where-an-agent-institution-sits.md | 31 | | **Agent-only societies** | [Moltbook](https://spectrum.ieee.org/moltbook-agentic-ai-agents-openclaw), populated by Ope | CODE |
| MEDIUM | learn/guides/testing/UnitTesting.md | 161 | unitTestMode : true, // Enable test guardrails | CODE |
| MEDIUM | .agents/workflows/agent-harness.md | 7 | 1. **Read the concept anchor:** [ADR 0020, the Agent Harness concept](https://github.com/neomjs/neo-agent-institution/bl | CODE |
| MEDIUM | …tal/resources/data/tickets/backlog/active-chunk-2.json | 1 | [{"id":"14582","parentId":"Backlog/active-chunk-2","title":"record_turn_presence: output schema rejects its own action=s | CODE |
| MEDIUM | …tal/resources/data/tickets/backlog/active-chunk-7.json | 1 | [{"id":"15555","parentId":"Backlog/active-chunk-7","title":"Prove macOS denied-permission tear-out fallback and matrix-r | CODE |
| MEDIUM | …rces/data/tickets/v12-0-0/archive-v12-0-0-chunk-3.json | 1 | [{"id":"9225","parentId":"v12.0.0/archive-v12-0-0-chunk-3","title":"Handle GitHub IP allow list errors gracefully in Upd | CODE |
| MEDIUM | …ces/data/tickets/v13-0-0/archive-v13-0-0-chunk-14.json | 1 | [{"id":"12204","parentId":"v13.0.0/archive-v13-0-0-chunk-14","title":"Epic: Portal news — PR + Discussion views & chunke | CODE |
| MEDIUM | …ces/data/tickets/v13-0-0/archive-v13-0-0-chunk-13.json | 1 | [{"id":"11995","parentId":"v13.0.0/archive-v13-0-0-chunk-13","title":"Sub-ii: 3-signal wake derivation + orchestrator-lo | CODE |
| MEDIUM | …rces/data/tickets/v13-0-0/archive-v13-0-0-chunk-2.json | 1 | [{"id":"9761","parentId":"v13.0.0/archive-v13-0-0-chunk-2","title":"Stabilize AI Provider Networking and Add Database Ex | CODE |
| MEDIUM⚡ | …rces/data/tickets/v13-0-0/archive-v13-0-0-chunk-4.json | 1 | [{"id":"10096","parentId":"v13.0.0/archive-v13-0-0-chunk-4","title":"[bug] GraphqlService.query discards partial data wh | CODE |
| MEDIUM⚡ | …rces/data/tickets/v13-0-0/archive-v13-0-0-chunk-4.json | 1 | [{"id":"10096","parentId":"v13.0.0/archive-v13-0-0-chunk-4","title":"[bug] GraphqlService.query discards partial data wh | CODE |
| MEDIUM⚡ | …ces/data/tickets/v13-0-0/archive-v13-0-0-chunk-17.json | 1 | [{"id":"12922","parentId":"v13.0.0/archive-v13-0-0-chunk-17","title":"Flip @neo-fable-clio participationStatus to active | CODE |
| MEDIUM⚡ | …ces/data/tickets/v13-0-0/archive-v13-0-0-chunk-17.json | 1 | [{"id":"12922","parentId":"v13.0.0/archive-v13-0-0-chunk-17","title":"Flip @neo-fable-clio participationStatus to active | CODE |
| MEDIUM | …rces/data/tickets/v13-1-0/archive-v13-1-0-chunk-8.json | 1 | [{"id":"14557","parentId":"v13.1.0/archive-v13-1-0-chunk-8","title":"tooling(docs): make mermaid render-verify actually | CODE |
| MEDIUM | …rces/data/tickets/v13-1-0/archive-v13-1-0-chunk-5.json | 1 | [{"id":"13910","parentId":"v13.1.0/archive-v13-1-0-chunk-5","title":"Accept documented Micro-Delta PR reviews across MCP | CODE |
| MEDIUM | …es/data/tickets/v11-19-0/archive-v11-19-0-chunk-1.json | 1 | [{"id":"8438","parentId":"v11.19.0/archive-v11-19-0-chunk-1","title":"Remove redundant name field from Release Index and | CODE |
| MEDIUM | …es/data/discussions/ideas/archive-v13-0-0-chunk-1.json | 1 | [{"id":"12669","parentId":"Ideas/archive-v13-0-0-chunk-1","state":"closed","title":"Chronological / temporal memory reca | CODE |
| MEDIUM⚡ | …l/resources/data/discussions/ideas/active-chunk-1.json | 1 | [{"id":"15200","parentId":"Ideas/active-chunk-1","state":"open","title":"Evolve cls and wrapperCls into object-shaped co | CODE |
| MEDIUM⚡ | …l/resources/data/discussions/ideas/active-chunk-1.json | 1 | [{"id":"15200","parentId":"Ideas/active-chunk-1","state":"open","title":"Evolve cls and wrapperCls into object-shaped co | CODE |
| MEDIUM | …urces/data/pulls/v13-0-0/archive-v13-0-0-chunk-14.json | 1 | [{"id":"12690","parentId":"v13.0.0/archive-v13-0-0-chunk-14","title":"fix(ai): defer wake digest flush during heavy Grap | CODE |
| MEDIUM⚡ | …ources/data/pulls/v13-0-0/archive-v13-0-0-chunk-6.json | 1 | [{"id":"11276","parentId":"v13.0.0/archive-v13-0-0-chunk-6","title":"feat(github-workflow): atomic PR review create/upda | CODE |
| MEDIUM⚡ | …ources/data/pulls/v13-0-0/archive-v13-0-0-chunk-6.json | 1 | [{"id":"11276","parentId":"v13.0.0/archive-v13-0-0-chunk-6","title":"feat(github-workflow): atomic PR review create/upda | CODE |
| MEDIUM⚡ | …ources/data/pulls/v13-0-0/archive-v13-0-0-chunk-1.json | 1 | [{"id":"12966","parentId":"v13.0.0/archive-v13-0-0-chunk-1","title":"fix(release): publish.mjs commits bypass pre-commit | CODE |
| MEDIUM⚡ | …ources/data/pulls/v13-0-0/archive-v13-0-0-chunk-1.json | 1 | [{"id":"12966","parentId":"v13.0.0/archive-v13-0-0-chunk-1","title":"fix(release): publish.mjs commits bypass pre-commit | CODE |
| MEDIUM | …ources/data/pulls/v13-0-0/archive-v13-0-0-chunk-3.json | 1 | [{"id":"10588","parentId":"v13.0.0/archive-v13-0-0-chunk-3","title":"fix(docs): correct §6 boot-summarization claim in A | CODE |
| MEDIUM | …ources/data/pulls/v13-0-0/archive-v13-0-0-chunk-9.json | 1 | [{"id":"11918","parentId":"v13.0.0/archive-v13-0-0-chunk-9","title":"feat(orchestrator): wire MBS via Class B propagatio | CODE |
| MEDIUM | …ources/data/pulls/v13-0-0/archive-v13-0-0-chunk-5.json | 1 | [{"id":"11044","parentId":"v13.0.0/archive-v13-0-0-chunk-5","title":"refactor(ai): extract ProcessSupervisorService from | CODE |
| MEDIUM | …ources/data/pulls/v13-0-0/archive-v13-0-0-chunk-8.json | 1 | [{"id":"11704","parentId":"v13.0.0/archive-v13-0-0-chunk-8","title":"feat(kb): add Phase 2E tenant config storage (#1163 | CODE |
| MEDIUM | …ources/data/pulls/v11-0-0/archive-v11-0-0-chunk-1.json | 1 | [{"id":"7717","parentId":"v11.0.0/archive-v11-0-0-chunk-1","title":"handles gh absence and ENOENT in HealthService; add | CODE |
| MEDIUM | …portal/resources/data/pulls/latest/active-chunk-5.json | 1 | [{"id":"15685","parentId":"Latest/active-chunk-5","title":"fix(ai): explicit JsonValue union for call_method args (#1567 | CODE |
| MEDIUM | …ortal/resources/data/pulls/latest/active-chunk-11.json | 1 | [{"id":"17005","parentId":"Latest/active-chunk-11","title":"test(lifecycle): a fail-closed acceptance gate for the two d | CODE |
| MEDIUM | …portal/resources/data/pulls/latest/active-chunk-6.json | 1 | [{"id":"15889","parentId":"Latest/active-chunk-6","title":"fix(#15886): settle the KB server spec's boot before destroy, | CODE |
| MEDIUM | …ources/data/pulls/v13-1-0/archive-v13-1-0-chunk-7.json | 1 | [{"id":"14457","parentId":"v13.1.0/archive-v13-1-0-chunk-7","title":"feat(build): add refspec-safe agent push wrapper (# | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | learn/guides/testing/WhiteboxE2E.md | 81 | COMMENT | |
| LOW | resources/scss/_motion.scss | 1 | // The product motion vocabulary — the ONLY sanctioned duration/easing source for | COMMENT |
| LOW | …es/scss/theme-neo-dark/dashboard/_preview-accents.scss | 1 | // The accept/reject/signal accent family (dark), shared by BOTH dashboard values sheets. | COMMENT |
| LOW | resources/scss/theme-neo-dark/dashboard/Container.scss | 1 | // The dock VALUES layer (dark): colors for the token family that | COMMENT |
| LOW | …theme-neo-dark/dashboard/dock/interaction/Preview.scss | 1 | // The dock VALUES layer (dark): colors for the preview-affordance token family that | COMMENT |
| LOW | …s/scss/theme-neo-light/dashboard/_preview-accents.scss | 1 | // The accept/reject/signal accent family (light), shared by BOTH dashboard values sheets. | COMMENT |
| LOW | resources/scss/theme-neo-light/dashboard/Container.scss | 1 | // The dock VALUES layer (light): colors for the token family that | COMMENT |
| LOW | …heme-neo-light/dashboard/dock/interaction/Preview.scss | 1 | // The dock VALUES layer (light): colors for the preview-affordance token family that | COMMENT |
| LOW | resources/scss/src/Global.scss | 1 | @use "global/all"; | COMMENT |
| LOW | resources/scss/src/Global.scss | 141 | // drag target until the physical gesture ends — ordinary mouseup, or the gesture's own move | COMMENT |
| LOW | resources/scss/src/Global.scss | 161 | // whose legitimate target IS the iframe opts out per element. The rail reveal's frame shield in | COMMENT |
| LOW | resources/scss/src/tab/Container.scss | 1 | .neo-tab-container { | COMMENT |
| LOW | resources/scss/src/tab/Container.scss | 61 | // These rules are at FILE scope rather than nested under `.neo-tab-container` on purpose: a drag | COMMENT |
| LOW | resources/scss/src/dashboard/Container.scss | 1 | .neo-dashboard { | COMMENT |
| LOW | resources/scss/src/dashboard/Container.scss | 21 | --dock-transition-duration-fast: var(--motion-fast, 120ms); | COMMENT |
| LOW | resources/scss/src/dashboard/Container.scss | 41 | // sets nothing must still get a findable drag target — an invisible splitter is the | COMMENT |
| LOW | resources/scss/src/dashboard/Container.scss | 81 | // tab is navigation, not an action, and must not arrive wearing the generic button's slab. | COMMENT |
| LOW | resources/scss/src/dashboard/Container.scss | 101 | // The strip's cross-axis extent, and the ONE source for it. This value was a `14px` | COMMENT |
| LOW | resources/scss/src/dashboard/Container.scss | 121 | // active state; a rail whose surface is transparent still reads as navigation because the | COMMENT |
| LOW | resources/scss/src/dashboard/Container.scss | 141 | COMMENT | |
| LOW | resources/scss/src/dashboard/Container.scss | 181 | // ───────────────────────────────────────────────────────────────────────────────────── | COMMENT |
| LOW | resources/scss/src/dashboard/Container.scss | 281 | &.neo-dashboard-dock-reveal-overlay-bottom > .neo-dashboard-dock-reveal-header, | COMMENT |
| LOW | resources/scss/src/dashboard/Container.scss | 521 | // Scoped to 0,4,0 (tab) and 0,5,0 (label) on purpose: the neo themes pin `.neo-button` to a fixed | COMMENT |
| LOW | resources/scss/src/dashboard/Container.scss | 621 | // dashboard host and those two origins differ by exactly the host's padding: the per-edge insets | COMMENT |
| LOW | resources/scss/src/dashboard/Container.scss | 701 | // the same side effect that shield's comment calls load-bearing: `pointer-events: none` also removes | COMMENT |
| LOW | resources/scss/src/dashboard/Container.scss | 841 | // Preview-language variant «Signal glow» — the design-exploration switch. The mission- | COMMENT |
| LOW | …/scss/src/dashboard/dock/window/VesselPlaceholder.scss | 1 | // The cross-window pane placeholder — structure only; `theme-*/dashboard/dock/window/VesselPlaceholder.scss` | COMMENT |
| LOW | …urces/scss/src/dashboard/dock/interaction/Preview.scss | 1 | // The hold's rising fill (see `.neo-dock-preview-dwelling` below): bottom to top over the dwell. | COMMENT |
| LOW | …urces/scss/src/dashboard/dock/interaction/Preview.scss | 101 | background-color : var(--agent-dock-preview-reject, #cf222e); | COMMENT |
| LOW | resources/scss/src/list/Buffered.scss | 1 | .neo-buffered-list { | COMMENT |
| LOW | resources/scss/src/apps/workstation/Viewport.scss | 1 | // The token bridge must OUT-RANK the theme on EVERY element the theme can declare on. | COMMENT |
| LOW | resources/scss/src/apps/workstation/Viewport.scss | 21 | // never in that contest — `:root .neo-theme-*` does not match `.workstation-workspace` at boot, so | COMMENT |
| LOW | resources/scss/src/apps/workstation/Viewport.scss | 141 | // Keep target affordances legible beneath the drag proxy a converted vessel shows in the target window | COMMENT |
| LOW | resources/scss/src/apps/workstation/Viewport.scss | 181 | // CROSS-WINDOW CSS HAS TWO INDEPENDENT REACHABILITY GATES, and a fix that closes one reads as | COMMENT |
| LOW | resources/scss/src/apps/workstation/Workspace.scss | 361 | outline-offset: -2px; | COMMENT |
| LOW | …sources/scss/src/apps/portal/news/pulls/Component.scss | 1 | // Pull in the shared news timeline layout (`.neo-ticket-timeline` / `.neo-timeline-item` / avatar / | COMMENT |
| LOW | .codex/config.template.toml | 1 | # Copy this file to .codex/config.toml for local Codex MCP setup. | COMMENT |
| LOW | .codex/config.template.toml | 21 | # If you switch this local config to a smaller model (for example a 400K mini/codex | COMMENT |
| LOW | .codex/config.template.toml | 41 | # `env_vars` stays the per-server allowlist: each server receives only the credentials it needs, and | COMMENT |
| LOW | .codex/config.template.toml | 61 | # can still fail to authenticate if NEO_MCP_REMOTE_TOKEN is absent from the shell | COMMENT |
| LOW | .github/dependabot.yml | 1 | # Version updates. Security updates are a separate surface that needs no config and already runs. | COMMENT |
| LOW | .github/workflows/consumer-runtime-build.yml | 1 | name: Consumer Runtime Build | COMMENT |
| LOW | .github/workflows/spec-retirement-lint.yml | 1 | name: Spec Retirement Lint | COMMENT |
| LOW | .github/workflows/codeql-analysis.yml | 1 | # For most projects, this workflow file will not need changing; you simply need | COMMENT |
| LOW | .github/workflows/codeql-analysis.yml | 41 | # Initializes the CodeQL tools for scanning. | COMMENT |
| LOW | .github/workflows/test.yml | 61 | fail-fast: false | COMMENT |
| LOW | .github/workflows/test.yml | 161 | # Browser provisioning has two network tails, and each has turned a five-minute | COMMENT |
| LOW | .github/workflows/theme-coverage-lint.yml | 1 | name: Theme Coverage Lint | COMMENT |
| LOW | .github/workflows/test-e2e.yml | 1 | name: E2E (engine tier) | COMMENT |
| LOW | .github/workflows/test-e2e.yml | 21 | # `buildScripts/util/e2eCiSelection.mjs` — one source for the invocation and the | COMMENT |
| LOW | .github/workflows/test-e2e.yml | 81 | matrix: | COMMENT |
| LOW | .github/workflows/test-e2e.yml | 261 | # | COMMENT |
| LOW | .github/workflows/test-e2e.yml | 301 | COMMENT | |
| LOW | .github/workflows/classify-test-scope.yml | 1 | name: Classify test scope | COMMENT |
| LOW | .github/workflows/classify-test-scope.yml | 141 | COMMENT | |
| LOW | .github/workflows/classify-test-scope.yml | 241 | file.startsWith('learn/'); | COMMENT |
| LOW | .github/workflows/classify-test-scope.yml | 281 | // written. So the boundary below is stated as RULES over the chain the job actually | COMMENT |
| LOW | .github/workflows/substrate-sync.yml | 1 | # Asserts the agent skill substrate is actually reachable in this checkout. | COMMENT |
| LOW | .github/workflows/same-head-check-repair.yml | 1 | name: Same-Head Check Repair | COMMENT |
| LOW | .github/workflows/theme-value-file-lint.yml | 1 | name: Theme Value File Lint | COMMENT |
| 6 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | resources/scss/src/dashboard/Container.scss | 30 | // ── Maximize presentation ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | resources/scss/src/dashboard/Container.scss | 39 | // ── Splitter affordance floor ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | resources/scss/src/dashboard/Container.scss | 100 | // ── Edge-rail measure ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | resources/scss/src/dashboard/Container.scss | 117 | // ── Edge-rail paint ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | resources/scss/src/dashboard/Container.scss | 146 | // ── Reveal chrome floor ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | resources/scss/src/dashboard/Container.scss | 181 | // ───────────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | resources/scss/src/dashboard/Container.scss | 185 | // ───────────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | resources/scss/src/dashboard/Container.scss | 840 | // ───────────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | resources/scss/src/dashboard/Container.scss | 850 | // ───────────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …urces/scss/src/dashboard/dock/interaction/Preview.scss | 107 | // ───────────────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …urces/scss/src/dashboard/dock/interaction/Preview.scss | 115 | // ───────────────────────────────────────────────────────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | learn/blog/context-engineering-done-right.md | 1144 | // Step 1: Get the issue's GraphQL ID | COMMENT |
| LOW | learn/blog/context-engineering-done-right.md | 1153 | // Step 2: Prepare the updated content | COMMENT |
| LOW | learn/blog/context-engineering-done-right.md | 1164 | // Step 3: Execute the mutation | COMMENT |
| LOW | …building-a-multi-window-dashboard-with-dock-layouts.md | 7 | ## Step 1: what the panes are and where they start | COMMENT |
| LOW | …building-a-multi-window-dashboard-with-dock-layouts.md | 50 | ## Step 2: rules that hold for every caller | COMMENT |
| LOW | …building-a-multi-window-dashboard-with-dock-layouts.md | 86 | ## Step 3: arrangements with names | COMMENT |
| LOW | …building-a-multi-window-dashboard-with-dock-layouts.md | 155 | ## Step 4: an arrangement that comes back tomorrow | COMMENT |
| LOW | …building-a-multi-window-dashboard-with-dock-layouts.md | 178 | ## Step 5: a pane that leaves for its own window | COMMENT |
| LOW | …building-a-multi-window-dashboard-with-dock-layouts.md | 232 | ## Step 6: make it look like your product | COMMENT |
| LOW | learn/guides/advanced/CanvasArchitecture.md | 60 | ### Step 1: Create the App Worker Component | COMMENT |
| LOW | learn/guides/advanced/CanvasArchitecture.md | 81 | ### Step 2: Create the Canvas Worker Logic | COMMENT |
| LOW | learn/guides/advanced/CanvasArchitecture.md | 99 | ### Step 3: Bridge User Input | COMMENT |
| LOW | learn/guides/fundamentals/DeclarativeConfigMerging.md | 35 | ### Step 1: Define the Configuration Object | COMMENT |
| LOW | learn/guides/fundamentals/DeclarativeConfigMerging.md | 60 | ### Step 2: Bind the Item to the Config | COMMENT |
| LOW | learn/guides/fundamentals/DeclarativeConfigMerging.md | 98 | ### Step 3: Subclassing made Easy | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | learn/comparisons/NeoVsReact.md | 66 | const user = useMemo(() => ({ name: 'John Doe' }), []); | CODE |
| LOW | learn/comparisons/NeoVsReact.md | 100 | const [user] = useConfig({name: 'John Doe'}); | CODE |
| LOW | learn/blog/v10-post1-love-story.md | 73 | const user = useMemo(() => ({ name: 'John Doe' }), []); | CODE |
| LOW | learn/blog/v10-post1-love-story.md | 107 | const [user] = useConfig({name: 'John Doe'}); | CODE |
| LOW | learn/guides/userinteraction/Forms.md | 124 | street: '123 Main St' | CODE |
| LOW | learn/guides/datahandling/Records.md | 107 | street: '123 Main St' | CODE |
| LOW | resources/data/users.json | 4 | "name": "Jane Doe", | CODE |
| LOW | examples/treeAccordion/tree.json | 11 | "name": "Lorem ipsum dolor sit amet, consetetur sadipscing elitr,", | CODE |
| LOW | examples/treeAccordion/tree.json | 11 | "name": "Lorem ipsum dolor sit amet, consetetur sadipscing elitr,", | CODE |
| LOW | examples/popover/tree.json | 11 | "name": "Lorem ipsum dolor sit amet, consetetur sadipscing elitr,", | CODE |
| LOW | examples/popover/tree.json | 11 | "name": "Lorem ipsum dolor sit amet, consetetur sadipscing elitr,", | CODE |
| LOW⚡ | apps/email/resources/data/emails.json | 3 | "content" : "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore e | CODE |
| LOW⚡ | apps/email/resources/data/emails.json | 3 | "content" : "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore e | CODE |
| LOW⚡ | apps/email/resources/data/emails.json | 10 | "content" : "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce vestibulum purus consectetur ex conval | CODE |
| LOW⚡ | apps/email/resources/data/emails.json | 10 | "content" : "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce vestibulum purus consectetur ex conval | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | CONTRIBUTING.md | 144 | 1. **Transparency:** If you use an AI agent to generate a Pull Request or formulate an issue, please briefly mention whi | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/playwright/e2e/custom-reporter.js | 83 | function browserLifecycleReceiptFileName(runId) { | CODE |
| LOW | test/playwright/e2e/custom-reporter.js | 97 | export function resolveBrowserLifecycleReceipt({ | CODE |
| LOW | test/playwright/e2e/custom-reporter.js | 124 | export function pruneBrowserLifecycleReceipts(receiptRoot, { | CODE |
| LOW | test/playwright/e2e/custom-reporter.js | 176 | export function classifyBrowserLaunchExit(error, { | CODE |