Omnigent is an open-source AI agent framework and meta-harness: orchestrate Claude Code, Codex, Cursor, Pi, and custom agents — swap harnesses without rewriting, enforce policies and sandboxing, and collaborate in real time from any device.
This report presents the forensic synthetic code analysis of omnigent-ai/omnigent, a Python project with 7,253 GitHub stars. SynthScan v2.0 examined 1,117,413 lines of code across 2853 source files, recording 24758 pattern matches distributed across 24 syntactic categories. The overall adjusted score of 30.7 places this repository in the Strong AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 24758 distinct pattern matches across 24 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | omnigent/reasoning_effort.py | 32 | def unsupported_effort_message(effort: str, provider: str, supported: Iterable[str]) -> str: | CODE |
| LOW | omnigent/reasoning_effort.py | 50 | def validate_effort_or_llm_error( | CODE |
| LOW | omnigent/hermes_native_permissions.py | 88 | def hermes_permission_elicitation_id(session_id: str, token: str) -> str: | CODE |
| LOW | omnigent/hermes_native_permissions.py | 102 | def parse_hermes_approval_prompt(pane: str) -> HermesApprovalPrompt | None: | CODE |
| LOW | omnigent/hermes_native_permissions.py | 149 | async def supervise_hermes_approval_mirror( | CODE |
| LOW | omnigent/hermes_native_permissions.py | 275 | async def _post_external_elicitation_resolved( | CODE |
| LOW | omnigent/opencode_native_provider.py | 70 | def build_opencode_model_default_config(model: str) -> dict[str, object]: | CODE |
| LOW | omnigent/opencode_native_provider.py | 88 | def build_opencode_provider_config(resolution: OpenCodeGatewayResolution) -> dict[str, object]: | CODE |
| LOW | omnigent/opencode_native_provider.py | 111 | def write_opencode_provider_config(xdg_config_home: Path, config: Mapping[str, object]) -> Path: | CODE |
| LOW | omnigent/opencode_native_provider.py | 188 | def build_opencode_omnigent_mcp_server( | CODE |
| LOW | omnigent/opencode_native_provider.py | 241 | def resolve_databricks_gateway( | CODE |
| LOW | omnigent/opencode_native_provider.py | 288 | def _gateway_endpoint_for_model(model_id: str | None) -> str | None: | CODE |
| LOW | omnigent/opencode_native_provider.py | 418 | def maybe_merge_user_provider_config(config: dict[str, object]) -> dict[str, object]: | CODE |
| LOW | omnigent/cursor_native_forwarder.py | 237 | def clear_cursor_bridge_state(bridge_dir: Path) -> None: | CODE |
| LOW | omnigent/cursor_native_forwarder.py | 545 | def _last_used_model_from_meta_value(value: object) -> str | None: | CODE |
| LOW | omnigent/cursor_native_forwarder.py | 572 | async def _post_model_change_if_new( | CODE |
| LOW | omnigent/cursor_native_forwarder.py | 704 | async def _patch_external_session_id( | CODE |
| LOW | omnigent/cursor_native_forwarder.py | 731 | async def _post_external_session_status( | CODE |
| LOW | omnigent/cursor_native_forwarder.py | 773 | async def _post_external_compaction_status( | CODE |
| LOW | omnigent/cursor_native_forwarder.py | 801 | async def _persist_native_compaction_item( | CODE |
| LOW | omnigent/cursor_native_forwarder.py | 868 | async def forward_cursor_store_to_session( | CODE |
| LOW | omnigent/cursor_native_forwarder.py | 1202 | async def supervise_cursor_forwarder( | CODE |
| LOW | omnigent/codex_native_state.py | 57 | def _state_dir_for_conversation_id(conversation_id: str) -> Path: | CODE |
| LOW | omnigent/qwen_native_permissions.py | 95 | def qwen_permission_elicitation_id(session_id: str, request_id: str) -> str: | CODE |
| LOW | omnigent/qwen_native_permissions.py | 151 | def _control_response_request_id(event: dict[str, object]) -> str | None: | CODE |
| LOW | omnigent/qwen_native_permissions.py | 216 | async def supervise_qwen_approval_mirror( | CODE |
| LOW | omnigent/qwen_native_permissions.py | 379 | async def _post_external_elicitation_resolved( | CODE |
| LOW | omnigent/hermes_native.py | 106 | def _configured_hermes_command(env: Mapping[str, str]) -> str: | CODE |
| LOW | omnigent/hermes_native.py | 112 | def resolve_hermes_executable( | CODE |
| LOW | omnigent/hermes_native.py | 188 | def _materialize_hermes_agent_spec(tmpdir: Path) -> Path: | CODE |
| LOW | omnigent/hermes_native.py | 292 | async def _prepare_hermes_terminal_via_daemon( | CODE |
| LOW | omnigent/hermes_native.py | 434 | async def _ensure_hermes_terminal_on_runner(client: httpx.AsyncClient, session_id: str) -> None: | CODE |
| LOW | omnigent/hermes_native.py | 451 | async def _wait_for_hermes_terminal_ready( | CODE |
| LOW | omnigent/hermes_native.py | 471 | async def _find_running_hermes_terminal( | CODE |
| LOW | omnigent/hermes_native.py | 497 | def _launched_hermes_terminal_from_payload(payload: object) -> LaunchedHermesTerminal: | CODE |
| LOW | omnigent/hermes_native.py | 521 | async def _attach_terminal_resource(prepared: PreparedHermesTerminal) -> None: | CODE |
| LOW | omnigent/hermes_native.py | 554 | def _direct_tmux_unavailable_reason(prepared: PreparedHermesTerminal) -> str | None: | CODE |
| LOW | omnigent/hermes_native.py | 567 | def _resolve_session_id_for_resume( | CODE |
| LOW | omnigent/hermes_native.py | 615 | def hermes_terminal_resource_id() -> str: | CODE |
| LOW | omnigent/hermes_native_bridge.py | 229 | def bridge_dir_for_session_id(session_id: str) -> Path: | STRING |
| LOW | omnigent/hermes_native_bridge.py | 247 | def build_hermes_native_spawn_env(session_id: str) -> dict[str, str]: | CODE |
| LOW | omnigent/cursor_native_permissions.py | 229 | async def _post_external_elicitation_resolved( | CODE |
| LOW | omnigent/cursor_native_permissions.py | 331 | def cursor_tool_call_elicitation_id(session_id: str, tool_call_id: str) -> str: | CODE |
| LOW | omnigent/cursor_native_permissions.py | 342 | def _iter_embedded_json_objects(raw: bytes) -> list[dict]: | CODE |
| LOW | omnigent/cursor_native_permissions.py | 423 | def read_cursor_pending_tool_calls(store_path: Path) -> list[CursorPendingToolCall]: | CODE |
| LOW | omnigent/cursor_native_permissions.py | 516 | def _iter_askquestion_questions(args: dict[str, object]) -> list[dict]: | CODE |
| LOW | omnigent/cursor_native_permissions.py | 624 | async def supervise_cursor_transcript_elicitations( | CODE |
| LOW | omnigent/goose_native_bridge.py | 51 | def bridge_dir_for_session_id(session_id: str) -> Path: | CODE |
| LOW | omnigent/goose_native_bridge.py | 69 | def build_goose_native_spawn_env( | CODE |
| LOW | omnigent/claude_native_hook.py | 225 | def _annotate_resume_session_context(bridge_dir: Path, payload: dict[str, object]) -> None: | CODE |
| LOW | omnigent/claude_native_hook.py | 255 | def _is_claude_branch_session_start(payload: dict[str, object]) -> bool: | CODE |
| LOW | omnigent/claude_native_hook.py | 287 | def _payload_transcript_has_recent_branch_command( | CODE |
| LOW | omnigent/claude_native_hook.py | 430 | def _create_clear_replacement_session( | CODE |
| LOW | omnigent/claude_native_hook.py | 519 | def _create_fork_replacement_session( | CODE |
| LOW | omnigent/claude_native_hook.py | 591 | def _conversation_url_for_active_session( | CODE |
| LOW | omnigent/claude_native_hook.py | 1091 | def _parse_evaluate_policy_args(argv: list[str]) -> argparse.Namespace: | CODE |
| LOW | omnigent/pi_native_credentials.py | 100 | def _is_databricks_ai_gateway_url(base_url: str) -> bool: | CODE |
| LOW | omnigent/pi_native_credentials.py | 241 | def _databricks_openai_provider( | CODE |
| LOW | omnigent/pi_native_credentials.py | 382 | def _gateway_anthropic_base_url(codex_base_url: str) -> str: | CODE |
| LOW | omnigent/pi_native_credentials.py | 403 | def _cli_config_databricks_transport(entry: ProviderEntry) -> CodexConfigTransport | None: | CODE |
| 14714 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .pre-commit-config.yaml | 118 | # ── File hygiene ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | omnigent/cursor_native_permissions.py | 252 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | omnigent/cursor_native_permissions.py | 281 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | omnigent/update_check.py | 656 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | omnigent/update_check.py | 658 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | omnigent/update_check.py | 917 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | omnigent/update_check.py | 919 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | omnigent/antigravity_native_bridge.py | 248 | # ── Omnigent MCP relay wiring (sys_* tools) ────────────────────────────────── | COMMENT |
| MEDIUM | omnigent/antigravity_native_bridge.py | 822 | # ── Web-turn TUI delivery (tmux send-keys) ─────────────────────────────────── | COMMENT |
| MEDIUM | omnigent/chat.py | 585 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/chat.py | 587 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/chat.py | 600 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/chat.py | 602 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/chat.py | 1543 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/chat.py | 1545 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/chat.py | 2043 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/chat.py | 2045 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/chat.py | 3753 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/chat.py | 3755 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/chat.py | 4115 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/chat.py | 4117 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/cli.py | 4062 | # ── config.yaml ────────────────────────────────── | COMMENT |
| MEDIUM | omnigent/cli.py | 4074 | # ── tools/mcp/*.yaml ───────────────────────────── | COMMENT |
| MEDIUM | omnigent/cli.py | 11889 | # ─── sandbox group ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | omnigent/cli.py | 11900 | # ─── debug group ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | omnigent/cli.py | 12851 | # ── Step 0: Probe the server's auth mode. ────────────────── | COMMENT |
| MEDIUM | omnigent/qwen_native_bridge.py | 466 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/qwen_native_bridge.py | 472 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/qwen_native_bridge.py | 688 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/qwen_native_bridge.py | 690 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/antigravity_native_reader.py | 2154 | # ── Shared reader wiring (elicitation bridge + supervise_reader spawn) ──────── | COMMENT |
| MEDIUM | omnigent/antigravity_native_reader.py | 2317 | # ── Task T-G: /clear-rotation session rotation ─────────────────────────────── | COMMENT |
| MEDIUM | omnigent/claude_native.py | 2555 | # ── daemon-routed launch (HOST_BY_DEFAULT) ───────────────── | COMMENT |
| MEDIUM | omnigent/cli_diagnostics.py | 47 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/cli_diagnostics.py | 49 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/cli_diagnostics.py | 64 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/cli_diagnostics.py | 66 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/cli_diagnostics.py | 106 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/cli_diagnostics.py | 108 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/cli_diagnostics.py | 224 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/cli_diagnostics.py | 226 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/cli_diagnostics.py | 445 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/cli_diagnostics.py | 447 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/claude_native_forwarder.py | 1264 | # ── Register newly-appeared sub-agents ────────────── | COMMENT |
| MEDIUM | omnigent/claude_native_forwarder.py | 1358 | # ── Tail each tracked sub-agent's transcript ──────── | COMMENT |
| MEDIUM | omnigent/tools/mcp.py | 573 | # ── MRTR: detect InputRequiredResult ───────────────────────── | COMMENT |
| MEDIUM | omnigent/tools/builtins/os_env.py | 45 | # ── JSON Schemas ────────────────────────────────────────────── | COMMENT |
| MEDIUM | omnigent/tools/builtins/sys_terminal.py | 253 | # ── JSON Schemas ────────────────────────────────────────────── | COMMENT |
| MEDIUM | omnigent/tools/builtins/spawn.py | 424 | # ── Spawn implementation ────────────────────────────── | COMMENT |
| MEDIUM | omnigent/tools/builtins/spawn.py | 456 | # ── Phase 4: sys_session_list ────────────────────────── | COMMENT |
| MEDIUM | omnigent/tools/builtins/spawn.py | 933 | # ── Check / result helpers ──────────────────────────── | COMMENT |
| MEDIUM | omnigent/tools/builtins/spawn.py | 1003 | # ── 13a: sys_session_get_history / sys_session_close ───────── | COMMENT |
| MEDIUM | omnigent/host/frames.py | 60 | # ── Frame dataclasses ──────────────────────────────────── | COMMENT |
| MEDIUM | omnigent/host/frames.py | 544 | # ── Encode / decode ────────────────────────────────────── | COMMENT |
| MEDIUM | omnigent/host/frames.py | 1169 | # ── Field validators ───────────────────────────────────── | COMMENT |
| MEDIUM⚡ | omnigent/inner/os_env.py | 635 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | omnigent/inner/os_env.py | 637 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | omnigent/inner/tracing.py | 81 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | omnigent/inner/tracing.py | 83 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | omnigent/inner/tracing.py | 104 | # --------------------------------------------------------------------------- | COMMENT |
| 3266 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | uv.toml | 20 | # - google-antigravity: the SDK the `antigravity` harness drives (the | COMMENT |
| MEDIUM⚡ | pyproject.toml | 165 | # Google Antigravity SDK harness (`harness: antigravity`). Optional: the | COMMENT |
| MEDIUM⚡ | pyproject.toml | 166 | # harness module imports the SDK lazily on first turn, so only users of the | COMMENT |
| MEDIUM⚡ | pyproject.toml | 167 | # harness need this extra. Early SDK (v0.1.x) — pin minor. | COMMENT |
| MEDIUM⚡ | pyproject.toml | 169 | # GitHub Copilot SDK harness (`harness: copilot`). Optional: the harness module | COMMENT |
| MEDIUM⚡ | pyproject.toml | 170 | # imports the SDK lazily on first turn, so only users of the harness need this | COMMENT |
| MEDIUM⚡ | pyproject.toml | 174 | # Cursor SDK harness (`harness: cursor`). Optional like antigravity: the | COMMENT |
| MEDIUM⚡ | pyproject.toml | 175 | # harness imports the cursor-sdk lazily on first turn, so only `--harness | COMMENT |
| LOW | omnigent/cli_sandbox.py | 199 | # pending removal. Disposable-sandbox providers just create a new one. | COMMENT |
| MEDIUM | omnigent/hermes_native_bridge.py | 46 | #: Env var carrying the bridge dir into the harness executor process. | COMMENT |
| MEDIUM | omnigent/goose_native_bridge.py | 30 | #: Env var carrying the bridge dir into the harness executor process. | COMMENT |
| MEDIUM | omnigent/claude_native_hook.py | 54 | # respawning harness/tool subprocesses) every ≤30s for 24h — the spin-loop half | COMMENT |
| MEDIUM | omnigent/claude_native_hook.py | 1032 | # Stamp the harness so the over-budget message names claude-native's | COMMENT |
| LOW | omnigent/pi_native_credentials.py | 292 | except Exception: # noqa: BLE001 — any subprocess failure should just return None | CODE |
| MEDIUM | omnigent/native_policy_hook.py | 49 | # ``UserPromptSubmit`` fires when a new user prompt reaches the harness — | COMMENT |
| MEDIUM | omnigent/native_policy_hook.py | 375 | # so the harness's own permission prompt still fires; see docstring. | COMMENT |
| MEDIUM | omnigent/native_policy_hook.py | 382 | # ``defer`` — ``defer`` returns control to the harness's | COMMENT |
| MEDIUM | omnigent/claude_native_bridge.py | 95 | # Tools-changed: harness POSTs to the bridge MCP server's localhost | COMMENT |
| MEDIUM | omnigent/claude_native_bridge.py | 103 | # tool dispatch to complete on the harness event loop. | COMMENT |
| MEDIUM | omnigent/claude_native_bridge.py | 117 | # ``tmux.json`` after the Claude terminal launches; the harness | COMMENT |
| MEDIUM | omnigent/claude_native_bridge.py | 234 | # the same ``$HOME/.omnigent/<harness>-native`` shape codex uses, so apply the | COMMENT |
| MEDIUM | omnigent/claude_native_bridge.py | 269 | # (the same ``$HOME/.omnigent/<harness>-native`` shape codex/antigravity use), | COMMENT |
| MEDIUM | omnigent/opencode_native_forwarder.py | 921 | # Mirror a TUI model switch back to Omnigent (in-harness session-cmd sync). | COMMENT |
| MEDIUM | omnigent/opencode_native_bridge.py | 36 | # Env var the runner stamps on the harness process so the executor can | COMMENT |
| MEDIUM | omnigent/antigravity_native_bridge.py | 56 | # — a broader, distinct concern that must not depend on this harness module.) | COMMENT |
| MEDIUM | omnigent/antigravity_native_bridge.py | 629 | # never sees a torn file. On macOS the harness runs agy under the user's REAL | COMMENT |
| MEDIUM | omnigent/antigravity_native_bridge.py | 833 | # per the established per-harness convention. | COMMENT |
| MEDIUM | omnigent/codex_native.py | 1072 | # harness), the Databricks ucode profile, or Codex's own login — | COMMENT |
| MEDIUM | omnigent/codex_native.py | 1074 | # in-process codex harness. Resolved before any rollout synthesis | COMMENT |
| MEDIUM⚡ | omnigent/model_override.py | 70 | # Reversed native spellings are valid harness ids (NATIVE_HARNESSES) | COMMENT |
| MEDIUM⚡ | omnigent/model_override.py | 73 | # yields when a claude spec declares no config harness. | COMMENT |
| MEDIUM⚡ | omnigent/model_override.py | 83 | # tool-calling turn on the gateway over the chat wire, so the harness is | COMMENT |
| MEDIUM | omnigent/codex_native_hook.py | 145 | # Stamp the harness so policies can tailor messages to codex-native's | COMMENT |
| MEDIUM | omnigent/kimi_native_bridge.py | 26 | #: Env var carrying the bridge dir into the harness executor process. | COMMENT |
| MEDIUM | omnigent/native_server_harness.py | 146 | except Exception as exc: # noqa: BLE001 - converted to a harness error event. | CODE |
| MEDIUM | omnigent/harness_plugins.py | 86 | # Declared feature set per harness id ("what can this harness do?"). Sparse | COMMENT |
| MEDIUM | omnigent/harness_plugins.py | 87 | # is allowed — a harness with no entry simply has no declared capabilities. | COMMENT |
| MEDIUM | omnigent/harness_plugins.py | 205 | # table cannot silently drift. See designs/harness-modular-registry-proposal.md. | COMMENT |
| MEDIUM | omnigent/harness_plugins.py | 215 | # (claude-sdk, codex, pi, openai-agents) have these verified live by the harness | COMMENT |
| MEDIUM | omnigent/harness_plugins.py | 242 | # streaming is declared True unless a live bench run proves a harness does | COMMENT |
| MEDIUM | omnigent/harness_plugins.py | 420 | # Generic ACP harness — drives any user-configured ACP agent command. Same | COMMENT |
| MEDIUM | omnigent/harness_plugins.py | 640 | # stays a valid harness for YAML specs (and the credential-free | COMMENT |
| MEDIUM | omnigent/harness_plugins.py | 920 | # The base ``acp`` harness deliberately has no ``harness_labels`` entry, so it | COMMENT |
| MEDIUM | omnigent/antigravity_native.py | 1482 | # harness reads its bridge dir from its own spawn env | COMMENT |
| MEDIUM⚡ | omnigent/chat.py | 100 | # per session → pm.shutdown() → SIGTERM each harness. 1 s was too | COMMENT |
| MEDIUM⚡ | omnigent/chat.py | 106 | # nor ``executor.harness`` AND no ``--model`` / ``--harness`` | COMMENT |
| MEDIUM⚡ | omnigent/chat.py | 111 | # "executor.config.harness: required" error. | COMMENT |
| MEDIUM⚡ | omnigent/chat.py | 3232 | # A harness-only override drops any prior model pin so the new | COMMENT |
| MEDIUM⚡ | omnigent/chat.py | 3233 | # harness resolves its provider default — e.g. ``omnigent run | COMMENT |
| MEDIUM⚡ | omnigent/chat.py | 3234 | # examples/polly --harness pi`` must not keep Polly's Claude-only | COMMENT |
| MEDIUM⚡ | omnigent/chat.py | 3242 | # When neither harness nor model is declared — after overrides — | COMMENT |
| MEDIUM⚡ | omnigent/chat.py | 3243 | # inject the ad-hoc default. Gated on harness absence so a YAML | COMMENT |
| MEDIUM⚡ | omnigent/chat.py | 3244 | # like ``claude_code_agent.yaml`` (declares harness, no model) | COMMENT |
| MEDIUM⚡ | omnigent/chat.py | 3939 | # Derive the launch harness from the local spec so the REPL's | COMMENT |
| MEDIUM⚡ | omnigent/chat.py | 3940 | # `/model` readout knows the right harness (and thus the right | COMMENT |
| MEDIUM⚡ | omnigent/chat.py | 3942 | # for URL targets / bundles, where the snapshot's harness fills it in. | COMMENT |
| MEDIUM⚡ | omnigent/chat.py | 3948 | # the startup header (harness → model + credential, summary) | COMMENT |
| MEDIUM | omnigent/chat.py | 556 | # snapshot gives the agent name + harness for an honest banner. | COMMENT |
| MEDIUM | omnigent/chat.py | 2493 | # ``error`` item (e.g. a harness start failure like the cursor SDK's | COMMENT |
| MEDIUM | omnigent/chat.py | 3160 | # A configured credential — a provider default serving this harness's | COMMENT |
| 1129 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | omnigent/cursor_native_forwarder.py | 0 | load the persisted forward cursor, or a cold default. | STRING |
| HIGH | omnigent/qwen_native_forwarder.py | 0 | load the persisted forward cursor, or a cold default. | STRING |
| HIGH | omnigent/goose_native_forwarder.py | 0 | load the persisted forward cursor, or a cold default. | STRING |
| HIGH | omnigent/kiro_native_session_forwarder.py | 0 | load the persisted forward cursor, or a cold default. | STRING |
| HIGH | omnigent/hermes_native_forwarder.py | 0 | load the persisted forward cursor, or a cold default. | STRING |
| HIGH | omnigent/cursor_native_forwarder.py | 0 | post one mirrored item as an ``external_conversation_item`` event. | STRING |
| HIGH | omnigent/qwen_native_forwarder.py | 0 | post one mirrored item as an ``external_conversation_item`` event. | STRING |
| HIGH | omnigent/goose_native_forwarder.py | 0 | post one mirrored item as an ``external_conversation_item`` event. | STRING |
| HIGH | omnigent/hermes_native_forwarder.py | 0 | post one mirrored item as an ``external_conversation_item`` event. | STRING |
| HIGH | omnigent/cursor_native_forwarder.py | 0 | indirection so tests can stub the supervisor's clock. | STRING |
| HIGH | omnigent/qwen_native_forwarder.py | 0 | indirection so tests can stub the supervisor's clock. | STRING |
| HIGH | omnigent/goose_native_forwarder.py | 0 | indirection so tests can stub the supervisor's clock. | STRING |
| HIGH | omnigent/hermes_native_forwarder.py | 0 | indirection so tests can stub the supervisor's clock. | STRING |
| HIGH | omnigent/cursor_native_forwarder.py | 0 | indirection so tests can stub the supervisor's backoff sleep. | STRING |
| HIGH | omnigent/qwen_native_forwarder.py | 0 | indirection so tests can stub the supervisor's backoff sleep. | STRING |
| HIGH | omnigent/goose_native_forwarder.py | 0 | indirection so tests can stub the supervisor's backoff sleep. | STRING |
| HIGH | omnigent/hermes_native_forwarder.py | 0 | indirection so tests can stub the supervisor's backoff sleep. | STRING |
| HIGH | omnigent/hermes_native.py | 0 | terminal resource returned by the omnigent runner launch path. | STRING |
| HIGH | omnigent/qwen_native.py | 0 | terminal resource returned by the omnigent runner launch path. | STRING |
| HIGH | omnigent/kimi_native.py | 0 | terminal resource returned by the omnigent runner launch path. | STRING |
| HIGH | omnigent/cursor_native.py | 0 | terminal resource returned by the omnigent runner launch path. | STRING |
| HIGH | omnigent/goose_native.py | 0 | terminal resource returned by the omnigent runner launch path. | STRING |
| HIGH | omnigent/pi_native.py | 0 | terminal resource returned by the omnigent runner launch path. | STRING |
| HIGH | omnigent/kiro_native.py | 0 | terminal resource returned by the omnigent runner launch path. | STRING |
| HIGH | omnigent/opencode_native.py | 0 | terminal resource returned by the omnigent runner launch path. | STRING |
| HIGH | omnigent/hermes_native.py | 0 | prepared native goose terminal attachment details. :param reattached: ``true`` when an existing, still-running session t | STRING |
| HIGH | omnigent/qwen_native.py | 0 | prepared native goose terminal attachment details. :param reattached: ``true`` when an existing, still-running session t | STRING |
| HIGH | omnigent/goose_native.py | 0 | prepared native goose terminal attachment details. :param reattached: ``true`` when an existing, still-running session t | STRING |
| HIGH | omnigent/hermes_native.py | 0 | resolve the native pi executable. :param env: environment mapping to inspect. defaults to ``os.environ``. :param which: | STRING |
| HIGH | omnigent/qwen_native.py | 0 | resolve the native pi executable. :param env: environment mapping to inspect. defaults to ``os.environ``. :param which: | STRING |
| HIGH | omnigent/kimi_native.py | 0 | resolve the native pi executable. :param env: environment mapping to inspect. defaults to ``os.environ``. :param which: | STRING |
| HIGH | omnigent/cursor_native.py | 0 | resolve the native pi executable. :param env: environment mapping to inspect. defaults to ``os.environ``. :param which: | STRING |
| HIGH | omnigent/goose_native.py | 0 | resolve the native pi executable. :param env: environment mapping to inspect. defaults to ``os.environ``. :param which: | STRING |
| HIGH | omnigent/pi_native.py | 0 | resolve the native pi executable. :param env: environment mapping to inspect. defaults to ``os.environ``. :param which: | STRING |
| HIGH | omnigent/hermes_native.py | 0 | launch pi tui in an omnigent terminal. :param server: resolved omnigent server url. :param session_id: optional existing | STRING |
| HIGH | omnigent/qwen_native.py | 0 | launch pi tui in an omnigent terminal. :param server: resolved omnigent server url. :param session_id: optional existing | STRING |
| HIGH | omnigent/kimi_native.py | 0 | launch pi tui in an omnigent terminal. :param server: resolved omnigent server url. :param session_id: optional existing | STRING |
| HIGH | omnigent/goose_native.py | 0 | launch pi tui in an omnigent terminal. :param server: resolved omnigent server url. :param session_id: optional existing | STRING |
| HIGH | omnigent/pi_native.py | 0 | launch pi tui in an omnigent terminal. :param server: resolved omnigent server url. :param session_id: optional existing | STRING |
| HIGH | omnigent/hermes_native.py | 0 | write the terminal-first agent spec used by ``omnigent pi``. :param tmpdir: temporary directory for the generated yaml f | STRING |
| HIGH | omnigent/qwen_native.py | 0 | write the terminal-first agent spec used by ``omnigent pi``. :param tmpdir: temporary directory for the generated yaml f | STRING |
| HIGH | omnigent/kimi_native.py | 0 | write the terminal-first agent spec used by ``omnigent pi``. :param tmpdir: temporary directory for the generated yaml f | STRING |
| HIGH | omnigent/cursor_native.py | 0 | write the terminal-first agent spec used by ``omnigent pi``. :param tmpdir: temporary directory for the generated yaml f | STRING |
| HIGH | omnigent/goose_native.py | 0 | write the terminal-first agent spec used by ``omnigent pi``. :param tmpdir: temporary directory for the generated yaml f | STRING |
| HIGH | omnigent/antigravity_native.py | 0 | write the terminal-first agent spec used by ``omnigent pi``. :param tmpdir: temporary directory for the generated yaml f | STRING |
| HIGH | omnigent/pi_native.py | 0 | write the terminal-first agent spec used by ``omnigent pi``. :param tmpdir: temporary directory for the generated yaml f | STRING |
| HIGH | omnigent/hermes_native.py | 0 | launch pi on an omnigent server via a daemon-spawned runner. :param base_url: omnigent server base url. :param spec_path | STRING |
| HIGH | omnigent/qwen_native.py | 0 | launch pi on an omnigent server via a daemon-spawned runner. :param base_url: omnigent server base url. :param spec_path | STRING |
| HIGH | omnigent/kimi_native.py | 0 | launch pi on an omnigent server via a daemon-spawned runner. :param base_url: omnigent server base url. :param spec_path | STRING |
| HIGH | omnigent/goose_native.py | 0 | launch pi on an omnigent server via a daemon-spawned runner. :param base_url: omnigent server base url. :param spec_path | STRING |
| HIGH | omnigent/pi_native.py | 0 | launch pi on an omnigent server via a daemon-spawned runner. :param base_url: omnigent server base url. :param spec_path | STRING |
| HIGH | omnigent/hermes_native.py | 0 | create or resume a goose-native session through a daemon runner. :returns: prepared terminal details for attaching. | STRING |
| HIGH | omnigent/qwen_native.py | 0 | create or resume a goose-native session through a daemon runner. :returns: prepared terminal details for attaching. | STRING |
| HIGH | omnigent/kimi_native.py | 0 | create or resume a goose-native session through a daemon runner. :returns: prepared terminal details for attaching. | STRING |
| HIGH | omnigent/goose_native.py | 0 | create or resume a goose-native session through a daemon runner. :returns: prepared terminal details for attaching. | STRING |
| HIGH | omnigent/hermes_native.py | 0 | decode terminal launch metadata returned by the runner. | STRING |
| HIGH | omnigent/qwen_native.py | 0 | decode terminal launch metadata returned by the runner. | STRING |
| HIGH | omnigent/kimi_native.py | 0 | decode terminal launch metadata returned by the runner. | STRING |
| HIGH | omnigent/cursor_native.py | 0 | decode terminal launch metadata returned by the runner. | STRING |
| HIGH | omnigent/goose_native.py | 0 | decode terminal launch metadata returned by the runner. | STRING |
| 303 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | setup.py | 17 | CODE | |
| LOW | omnigent/reasoning_effort.py | 3 | CODE | |
| LOW | omnigent/opencode_native_client.py | 18 | CODE | |
| LOW | omnigent/hermes_native_permissions.py | 31 | CODE | |
| LOW | omnigent/opencode_native_provider.py | 20 | CODE | |
| LOW | omnigent/cursor_native_forwarder.py | 34 | CODE | |
| LOW | omnigent/codex_native_state.py | 14 | CODE | |
| LOW | omnigent/qwen_native_permissions.py | 37 | CODE | |
| LOW | omnigent/cli_sandbox.py | 14 | CODE | |
| LOW | omnigent/hermes_native.py | 17 | CODE | |
| LOW | omnigent/hermes_native_bridge.py | 24 | CODE | |
| LOW | omnigent/harness_install_spec.py | 3 | CODE | |
| LOW | omnigent/cursor_native_permissions.py | 31 | CODE | |
| LOW | omnigent/goose_native_bridge.py | 16 | CODE | |
| LOW | omnigent/claude_native_hook.py | 3 | CODE | |
| LOW | omnigent/pi_native_credentials.py | 19 | CODE | |
| LOW | omnigent/opencode_native_state.py | 14 | CODE | |
| LOW | omnigent/native_policy_hook.py | 21 | CODE | |
| LOW | omnigent/session_lifecycle.py | 3 | CODE | |
| LOW | omnigent/cursor_native_status.py | 24 | CODE | |
| LOW | omnigent/qwen_native.py | 18 | CODE | |
| LOW | omnigent/_native_resume_hint.py | 3 | CODE | |
| LOW | omnigent/claude_native_bridge.py | 27 | CODE | |
| LOW | omnigent/config.py | 3 | CODE | |
| LOW | omnigent/kimi_native.py | 15 | CODE | |
| LOW | omnigent/claude_native_state.py | 41 | CODE | |
| LOW | omnigent/opencode_native_forwarder.py | 18 | CODE | |
| LOW | omnigent/native_coding_agents.py | 3 | CODE | |
| LOW | omnigent/cursor_native.py | 15 | CODE | |
| LOW | omnigent/_native_forwarder_health.py | 23 | CODE | |
| LOW | omnigent/_env_compat.py | 18 | CODE | |
| LOW | omnigent/update_check.py | 36 | CODE | |
| LOW | omnigent/opencode_native_bridge.py | 24 | CODE | |
| LOW | omnigent/antigravity_native_bridge.py | 3 | CODE | |
| LOW | omnigent/goose_native.py | 18 | CODE | |
| LOW | omnigent/kimi_native_forwarder.py | 31 | CODE | |
| LOW | omnigent/codex_native.py | 3 | CODE | |
| LOW | omnigent/claude_launcher.py | 47 | CODE | |
| LOW | omnigent/_wrapper_labels.py | 23 | CODE | |
| LOW | omnigent/model_override.py | 10 | CODE | |
| LOW | omnigent/antigravity_native_rpc.py | 54 | CODE | |
| LOW | omnigent/process_logging.py | 3 | CODE | |
| LOW | omnigent/antigravity_native_interactions.py | 55 | CODE | |
| LOW | omnigent/native_terminal.py | 3 | CODE | |
| LOW | omnigent/codex_native_bridge.py | 3 | CODE | |
| LOW | omnigent/codex_native_hook.py | 12 | CODE | |
| LOW | omnigent/opencode_native_app_server.py | 27 | CODE | |
| LOW | omnigent/__init__.py | 32 | CODE | |
| LOW | omnigent/__init__.py | 32 | CODE | |
| LOW | omnigent/__init__.py | 32 | CODE | |
| LOW | omnigent/__init__.py | 32 | CODE | |
| LOW | omnigent/__init__.py | 32 | CODE | |
| LOW | omnigent/__init__.py | 32 | CODE | |
| LOW | omnigent/__init__.py | 32 | CODE | |
| LOW | omnigent/__init__.py | 32 | CODE | |
| LOW | omnigent/__init__.py | 32 | CODE | |
| LOW | omnigent/__init__.py | 43 | CODE | |
| LOW | omnigent/__init__.py | 43 | CODE | |
| LOW | omnigent/__init__.py | 43 | CODE | |
| LOW | omnigent/__init__.py | 43 | CODE | |
| 1874 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | uv.toml | 1 | # Fail loudly on a uv too old to honor the cooldown below: relative | COMMENT |
| LOW | uv.toml | 21 | # `antigravity` extra in pyproject), published 2026-06-11. Drop once aged | COMMENT |
| LOW | pyproject.toml | 41 | # bytes; pin below 15 until upstream fixes the regression (see issue #1514). | COMMENT |
| LOW | pyproject.toml | 101 | # transitive dep; pinned here now that we import it directly. | COMMENT |
| LOW | pyproject.toml | 121 | # S3-compatible artifact store (AWS S3, Cloudflare R2, MinIO, …). Selected | COMMENT |
| LOW | pyproject.toml | 141 | # Same lazy-import posture as above. Pre-1.0 SDK: pin minor. | COMMENT |
| LOW | pyproject.toml | 161 | agents-sdk = [ | COMMENT |
| LOW | pyproject.toml | 201 | # Line coverage during the unit-test matrix. Each CI shard writes its | COMMENT |
| LOW | pyproject.toml | 221 | # producing a junit XML or per-test traceback. With --timeout=N, | COMMENT |
| LOW | pyproject.toml | 241 | "types-PyYAML>=6.0", | COMMENT |
| LOW | pyproject.toml | 301 | # collected as asyncio. Inner (omnigent-legacy) tests rely on | COMMENT |
| LOW | pyproject.toml | 361 | # shard). `relative_files` stores paths relative to the repo root so the | COMMENT |
| LOW | pyproject.toml | 381 | # migration that belongs in its own cleanup PR. | COMMENT |
| LOW | pyproject.toml | 401 | # ``B`` — flake8-bugbear (latent bugs, e.g. mutable defaults, | COMMENT |
| LOW | pyproject.toml | 421 | # SIM102/103/108: style-only transforms (collapse nested if / return | COMMENT |
| LOW | pyproject.toml | 441 | # mock callback signatures) and intercept broad exceptions to assert on | COMMENT |
| LOW | omnigent/cursor_native_forwarder.py | 61 | COMMENT | |
| LOW | omnigent/cursor_native_forwarder.py | 101 | # the ~0.7s poll so a brief supervisor backoff/restart never drops a live claim. | COMMENT |
| LOW | omnigent/cursor_native_forwarder.py | 121 | # replayed transcript (so the block holds exactly one real open/close pair), and | COMMENT |
| LOW | omnigent/cursor_native_forwarder.py | 1001 | ) | COMMENT |
| LOW | omnigent/hermes_native_bridge.py | 61 | _PASTE_COMMIT_TIMEOUT_S = 5.0 | COMMENT |
| LOW | omnigent/cursor_native_permissions.py | 261 | # | COMMENT |
| LOW | omnigent/cursor_native_permissions.py | 281 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| LOW | omnigent/claude_native_hook.py | 41 | COMMENT | |
| LOW | omnigent/claude_native_hook.py | 121 | # the caller fail-ask. A "hard failure" is the server being sick or unreachable | COMMENT |
| LOW | omnigent/claude_native_hook.py | 141 | # An established connection that drops in under this many seconds is treated as | COMMENT |
| LOW | omnigent/claude_native_hook.py | 1021 | # statusLine wrapper writes the active model id into ``context.json`` on | COMMENT |
| LOW | omnigent/pi_native_credentials.py | 61 | # Default model for the Databricks AI Gateway's Anthropic surface — the same | COMMENT |
| LOW | omnigent/native_policy_hook.py | 41 | # loop quickly rather than blocking on the day-long read timeout. | COMMENT |
| LOW | omnigent/claude_native_bridge.py | 101 | _TOOLS_CHANGED_POST_TIMEOUT_S = 10.0 | COMMENT |
| LOW | omnigent/claude_native_bridge.py | 121 | # Claude Code renders this prompt glyph in its input box once the TUI | COMMENT |
| LOW | omnigent/claude_native_bridge.py | 141 | _PROMPT_SCAN_TAIL_LINES = 5 | COMMENT |
| LOW | omnigent/claude_native_bridge.py | 1161 | "type": "command", | COMMENT |
| LOW | omnigent/claude_native_bridge.py | 1181 | # (``■`` in the TUI). The payload carries ``task_id`` so the | COMMENT |
| LOW | omnigent/claude_native_bridge.py | 1281 | # through to its TUI picker in bypassPermissions mode. In | COMMENT |
| LOW | omnigent/claude_native_bridge.py | 1341 | """ | COMMENT |
| LOW | omnigent/claude_native_bridge.py | 2541 | ) | COMMENT |
| LOW | omnigent/claude_native_bridge.py | 4321 | COMMENT | |
| LOW | omnigent/claude_native_bridge.py | 4341 | COMMENT | |
| LOW | omnigent/opencode_native_forwarder.py | 161 | self._policy_evaluator = policy_evaluator | COMMENT |
| LOW | omnigent/opencode_native_forwarder.py | 901 | # on the message + session. (Verified against a real ``opencode serve``.) | COMMENT |
| LOW | omnigent/cursor_native.py | 201 | # Catalog of cursor-agent *base* models, in web-picker display order. | COMMENT |
| LOW | omnigent/cursor_native.py | 501 | ) | COMMENT |
| LOW | omnigent/update_check.py | 61 | _CACHE_FILE = _CACHE_DIR / ".update_check.json" | COMMENT |
| LOW | omnigent/opencode_native_bridge.py | 61 | # the elicitation against the Omnigent server (mirrors codex-native's | COMMENT |
| LOW | omnigent/antigravity_native_bridge.py | 61 | # (login method, then color-scheme / telemetry steps) that has no pre-emptive | COMMENT |
| LOW | omnigent/antigravity_native_bridge.py | 241 | """ | COMMENT |
| LOW | omnigent/antigravity_native_bridge.py | 261 | # (b) be incorrect under concurrency: the relay command is bridge-dir-specific, so | COMMENT |
| LOW | omnigent/antigravity_native_bridge.py | 281 | # isolation entirely on macOS (#1493) restored auth but reintroduced the | COMMENT |
| LOW | omnigent/antigravity_native_bridge.py | 821 | COMMENT | |
| LOW | omnigent/antigravity_native_bridge.py | 841 | _TMUX_POLL_INTERVAL_S = 0.2 | COMMENT |
| LOW | omnigent/_wrapper_labels.py | 21 | """ | COMMENT |
| LOW | omnigent/_wrapper_labels.py | 61 | # Value the ``omnigent kiro`` wrapper writes into | COMMENT |
| LOW | omnigent/model_override.py | 81 | # openai-agents (and its "openai-agents-sdk" / "agents_sdk" spellings) is | COMMENT |
| LOW | omnigent/antigravity_native_rpc.py | 101 | # GetConversationMetadata), kept tight so scanning several candidate ports stays | COMMENT |
| LOW | omnigent/antigravity_native_rpc.py | 121 | # short so a port that never accepts the connection fails fast (the reader is | COMMENT |
| LOW | omnigent/antigravity_native_rpc.py | 141 | COMMENT | |
| LOW | omnigent/antigravity_native_interactions.py | 81 | _AGY_ELICITATION_ID_DIGEST_LENGTH = 32 | COMMENT |
| LOW | omnigent/kimi_native_bridge.py | 41 | _POLL_INTERVAL_S = 0.15 | COMMENT |
| LOW | omnigent/antigravity_native.py | 301 | # ``sys_session_*`` write surface from this ``spawn: true`` gate. | COMMENT |
| 1132 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | omnigent/opencode_native_bridge.py | 112 | return body && typeof body === "object" ? body : { result: "ALLOW" }; | CODE |
| HIGH | omnigent/opencode_native_bridge.py | 126 | if (p && p.type === "text" && typeof p.text === "string") out.push(p.text); | CODE |
| HIGH | omnigent/opencode_native_bridge.py | 126 | if (p && p.type === "text" && typeof p.text === "string") out.push(p.text); | CODE |
| HIGH | omnigent/opencode_native_bridge.py | 160 | input && input.tool, | CODE |
| HIGH | omnigent/cli.py | 3367 | "Run `cd web && npm install && npm run build`, " | CODE |
| HIGH | omnigent/antigravity_native_reader.py | 1754 | deferred during that window — e.g. the next segment of a chained ``a && b`` | STRING |
| HIGH | omnigent/host/frames.py | 1233 | Tolerant by design: absent, null, or non-mapping values all decode | STRING |
| HIGH | omnigent/inner/pi_executor.py | 472 | * or null. Fail-open (null) on any transport error: a wedged native tool | COMMENT |
| HIGH⚡ | omnigent/inner/pi_executor.py | 484 | buf += chunk.toString(); | CODE |
| HIGH⚡ | omnigent/inner/pi_executor.py | 490 | resolve(resp && resp.verdict ? resp.verdict : null); | CODE |
| HIGH⚡ | omnigent/inner/pi_executor.py | 490 | resolve(resp && resp.verdict ? resp.verdict : null); | CODE |
| HIGH⚡ | omnigent/inner/pi_executor.py | 492 | resolve(null); | CODE |
| HIGH⚡ | omnigent/inner/pi_executor.py | 496 | client.on("error", () => resolve(null)); | CODE |
| HIGH⚡ | omnigent/inner/pi_executor.py | 499 | client.on("error", () => resolve(null)); | CODE |
| HIGH⚡ | omnigent/inner/pi_executor.py | 510 | if (!event || typeof event.toolName !== "string") return; | CODE |
| HIGH⚡ | omnigent/inner/pi_executor.py | 513 | if (verdict && verdict.block) {{ | CODE |
| HIGH | omnigent/inner/pi_executor.py | 431 | buf += chunk.toString(); | CODE |
| HIGH | omnigent/inner/pi_executor.py | 443 | const isError = resp.result && (resp.result.error || resp.result.blocked); | CODE |
| HIGH | omnigent/inner/pi_executor.py | 525 | promptSnippet: tool.promptSnippet || tool.description, | CODE |
| HIGH | omnigent/inner/policies.py | 577 | "- If allowed_label_keys is non-null, only use those keys in set_labels.\n\n" | CODE |
| HIGH | omnigent/spec/_omnigent_compat.py | 279 | return "file is empty (or contains only YAML comments / null)" | CODE |
| HIGH | omnigent/server/schemas.py | 1231 | still null, and they appear on the session snapshot once | STRING |
| HIGH | omnigent/server/schemas.py | 2378 | "sequence_number": null}``. | STRING |
| HIGH | omnigent/server/schemas.py | 2832 | null}``. | STRING |
| HIGH | omnigent/server/schemas.py | 2905 | "parent_session_id": <parent>, "sequence_number": null}``. | STRING |
| HIGH | omnigent/server/app.py | 1985 | ``{"user_id": null, "is_admin": false}`` if unauthenticated | STRING |
| HIGH | omnigent/server/routes/sessions.py | 423 | # ``{"servers": {"safe": {"status": "starting", "error": null}}}``. | COMMENT |
| HIGH | omnigent/server/routes/sessions.py | 12593 | # manual Add Agent child flow where ``sub_agent_name`` is null) keep | COMMENT |
| HIGH | omnigent/server/routes/sessions.py | 20763 | ``{"owner": null}``. | STRING |
| HIGH | omnigent/policies/builtins/working_dir.py | 342 | :param command: The shell command string, e.g. ``"cd /etc && ls"``. | STRING |
| HIGH | omnigent/policies/builtins/_shell.py | 6 | commands (``a && b ; c``), prefix them with env-assignments or wrappers | STRING |
| HIGH | omnigent/policies/builtins/_shell.py | 137 | ``"cd /repo && npm test"``. | STRING |
| HIGH | omnigent/policies/builtins/orchestration.py | 145 | :param command: A shell command string, e.g. ``"cd repo && rm -rf build"``. | STRING |
| HIGH | omnigent/telemetry/client.py | 23 | "environment": null, | STRING |
| HIGH | omnigent/onboarding/sandboxes/bootstrap.py | 525 | f"rm -f ~/.databrickscfg && printf '%s' {shlex.quote(cfg_body)} > ~/.databrickscfg", | CODE |
| HIGH | omnigent/onboarding/sandboxes/openshell.py | 438 | f"kill $(cat {shlex.quote(pidfile)}) 2>/dev/null || true", | CODE |
| HIGH | omnigent/onboarding/sandboxes/base.py | 72 | "cd /tmp && rm -rf oa-wheels && mkdir oa-wheels && " | CODE |
| HIGH | omnigent/entities/conversation.py | 761 | # omitted (not null) for agent/tool/system messages so the | COMMENT |
| HIGH | sdks/ui/omnigent_ui_sdk/terminal/_host.py | 3151 | # Adopt only a REAL (non-null) task status. The live SSE | COMMENT |
| HIGH | tests/test_pi_native_interrupt_replay_e2e.py | 78 | if (idle !== undefined) ctx.isIdle = () => idle; | CODE |
| HIGH | tests/test_pi_native_interrupt_replay_e2e.py | 133 | !toolResult || toolResult.block !== true, | CODE |
| HIGH | tests/test_pi_native_interrupt_replay_e2e.py | 137 | const turnCtx = makeCtx(undefined); | CODE |
| HIGH | tests/test_pi_native_interrupt_replay_e2e.py | 152 | toolResult && toolResult.block === true, | CODE |
| HIGH | tests/test_pi_native_interrupt_replay_e2e.py | 171 | toolResult && toolResult.block === true, | CODE |
| HIGH | tests/test_antigravity_native_reader.py | 770 | Models a chained ``a && b`` command where each segment is permission-gated: the | STRING |
| HIGH | tests/test_antigravity_native_reader.py | 881 | """An ALREADY-ALLOWED segment in a chain (e.g. ``rm a && echo hi && rm b`` with | STRING |
| HIGH⚡ | tests/test_pi_native_extension.py | 1603 | .map((event) => event.data && event.data.status); | CODE |
| HIGH⚡ | tests/test_pi_native_extension.py | 1606 | console.error(error && error.stack ? error.stack : error); | CODE |
| HIGH⚡ | tests/test_pi_native_extension.py | 2148 | assert.ok(!verdict || verdict.block !== true, JSON.stringify(verdict)); | CODE |
| HIGH⚡ | tests/test_pi_native_extension.py | 2155 | console.error(error && error.stack ? error.stack : error); | CODE |
| HIGH⚡ | tests/test_pi_native_extension.py | 2194 | assert.ok(!verdict || verdict.block !== true, JSON.stringify(verdict)); | CODE |
| HIGH⚡ | tests/test_pi_native_extension.py | 2203 | console.error(error && error.stack ? error.stack : error); | CODE |
| HIGH⚡ | tests/test_pi_native_extension.py | 2260 | assert.ok(!verdict || verdict.block !== true, JSON.stringify(verdict)); | CODE |
| HIGH⚡ | tests/test_pi_native_extension.py | 2267 | console.error(error && error.stack ? error.stack : error); | CODE |
| HIGH⚡ | tests/test_pi_native_extension.py | 2306 | !verdict || verdict.block !== true, | CODE |
| HIGH⚡ | tests/test_pi_native_extension.py | 2315 | console.error(error && error.stack ? error.stack : error); | CODE |
| HIGH⚡ | tests/test_pi_native_extension.py | 2329 | null, matching omnigent.policies.types.FAIL_CLOSED_PHASES and the Python | CODE |
| HIGH⚡ | tests/test_pi_native_extension.py | 2339 | assert.equal(verdict && verdict.block, true, JSON.stringify(verdict)); | CODE |
| HIGH⚡ | tests/test_pi_native_extension.py | 2345 | console.error(error && error.stack ? error.stack : error); | CODE |
| HIGH⚡ | tests/test_pi_native_extension.py | 2386 | assert.equal(verdict && verdict.block, true, JSON.stringify(verdict)); | CODE |
| 144 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | omnigent/hermes_native_permissions.py | 210 | except Exception: | CODE |
| LOW | omnigent/opencode_native_provider.py | 236 | except Exception as exc: # noqa: BLE001 - SDK absent / bad profile / auth failure. | CODE |
| LOW | omnigent/opencode_native_provider.py | 276 | except Exception as exc: # noqa: BLE001 - SDK absent / auth failure / bad profile. | CODE |
| LOW | omnigent/cursor_native_forwarder.py | 849 | except Exception: # noqa: BLE001 | CODE |
| LOW | omnigent/cursor_native_forwarder.py | 1042 | except Exception: # noqa: BLE001 | CODE |
| LOW | omnigent/cursor_native_forwarder.py | 1183 | except Exception: | CODE |
| LOW | omnigent/cursor_native_forwarder.py | 1257 | except Exception as exc: # noqa: BLE001 — supervisor restarts on any Exception | CODE |
| LOW | omnigent/qwen_native_permissions.py | 308 | except Exception: | CODE |
| LOW | omnigent/hermes_native_bridge.py | 292 | except Exception: # noqa: BLE001 | CODE |
| LOW | omnigent/cursor_native_permissions.py | 758 | except Exception: | CODE |
| LOW | omnigent/claude_native_hook.py | 215 | except Exception as exc: # noqa: BLE001 - hook must not break Claude Code. | CODE |
| LOW | omnigent/pi_native_credentials.py | 212 | except Exception: # noqa: BLE001 — credential/network failure must not break launch | CODE |
| LOW | omnigent/pi_native_credentials.py | 292 | except Exception: # noqa: BLE001 — any subprocess failure should just return None | CODE |
| LOW | omnigent/pi_native_credentials.py | 329 | except Exception: # noqa: BLE001 — HTTP/network failure → empty | CODE |
| LOW | omnigent/pi_native_credentials.py | 524 | except Exception: # noqa: BLE001 — no .databrickscfg → skip listing | CODE |
| LOW | omnigent/pi_native_credentials.py | 705 | except Exception: # noqa: BLE001 — any resolution failure must not break launch | CODE |
| LOW | omnigent/native_policy_hook.py | 159 | except Exception as exc: # noqa: BLE001 — best-effort; fail closed if unavailable | CODE |
| LOW | omnigent/native_policy_hook.py | 171 | except Exception as exc: # noqa: BLE001 — transient mint failure; fail closed | CODE |
| LOW | omnigent/claude_native_bridge.py | 3554 | except Exception as exc: # noqa: BLE001 - relay converts callback failures to MCP errors. | CODE |
| LOW | omnigent/claude_native_bridge.py | 3659 | except Exception as exc: # noqa: BLE001 - top-level loop guard keeps the server alive. | CODE |
| LOW | omnigent/opencode_native_forwarder.py | 195 | except Exception: # noqa: BLE001 - seeding is best effort. | CODE |
| LOW | omnigent/opencode_native_forwarder.py | 230 | except Exception: # noqa: BLE001 - usage re-post is best effort. | CODE |
| LOW | omnigent/opencode_native_forwarder.py | 251 | except Exception: # noqa: BLE001 - reconnect on any transient SSE failure. | CODE |
| LOW | omnigent/opencode_native_forwarder.py | 741 | except Exception: # noqa: BLE001 - context window is best effort. | CODE |
| LOW | omnigent/opencode_native_forwarder.py | 842 | except Exception: # noqa: BLE001 - reply is best effort; log and move on. | CODE |
| LOW | omnigent/opencode_native_forwarder.py | 867 | except Exception: # noqa: BLE001 - policy errors fail closed. | CODE |
| LOW | omnigent/kimi_native_forwarder.py | 410 | except Exception: | CODE |
| LOW | omnigent/codex_native.py | 228 | except Exception: # noqa: BLE001 - readiness must never raise; fail onto auth.json. | CODE |
| LOW | omnigent/codex_native.py | 1149 | except Exception: | CODE |
| LOW | omnigent/codex_native.py | 1230 | except Exception: | CODE |
| LOW | omnigent/claude_launcher.py | 115 | except Exception: | CODE |
| LOW | omnigent/claude_launcher.py | 133 | except Exception: | CODE |
| LOW | omnigent/claude_launcher.py | 149 | except Exception: | CODE |
| LOW | omnigent/antigravity_native_rpc.py | 486 | except Exception: # deliberate fail-open: ssl.SSLError etc. outside httpx hierarchy | CODE |
| LOW | omnigent/antigravity_native_interactions.py | 424 | except Exception as tui_exc: | CODE |
| LOW | omnigent/cursor_native_usage.py | 144 | except Exception: # noqa: BLE001 — never let usage/idle capture break the turn | CODE |
| LOW | omnigent/cursor_native_usage.py | 336 | except Exception: | CODE |
| LOW | omnigent/cursor_native_usage.py | 377 | except Exception as exc: # noqa: BLE001 — supervisor restarts on any Exception | CODE |
| LOW | omnigent/native_server_harness.py | 146 | except Exception as exc: # noqa: BLE001 - converted to a harness error event. | CODE |
| LOW | omnigent/native_server_harness.py | 167 | except Exception: # noqa: BLE001 - interruption is best effort. | CODE |
| LOW | omnigent/native_server_harness.py | 193 | except Exception: # noqa: BLE001 - enqueue is best effort. | CODE |
| LOW | omnigent/harness_plugins.py | 788 | except Exception as exc: # noqa: BLE001 - broken plugins must not break core startup. | CODE |
| LOW | omnigent/harness_plugins.py | 933 | except Exception: # noqa: BLE001 — a malformed acp: block must never break the catalog | CODE |
| MEDIUM | omnigent/chat.py | 2301 | print(f"Error: {error_text}", file=sys.stderr) | CODE |
| MEDIUM | omnigent/chat.py | 2313 | print(f"Error: {exc}", file=sys.stderr) | CODE |
| LOW | omnigent/chat.py | 2955 | except Exception: | CODE |
| LOW | omnigent/chat.py | 3795 | except Exception: # noqa: BLE001 — best-effort startup-header hint: a spec parse must never break `run` | CODE |
| LOW | omnigent/chat.py | 3988 | except Exception as exc: | CODE |
| LOW | omnigent/model_catalog.py | 322 | except Exception as exc: # noqa: BLE001 — total-function boundary: config/spec failures → "none" | CODE |
| LOW | omnigent/model_catalog.py | 642 | except Exception as exc: # noqa: BLE001 — per-worker isolation: fail informative, never crash the tool | CODE |
| LOW | omnigent/cli.py | 1504 | except Exception as exc: | CODE |
| LOW | omnigent/cli.py | 8477 | except Exception: | CODE |
| LOW | omnigent/goose_native_permissions.py | 205 | except Exception: | CODE |
| LOW | omnigent/pi_native.py | 141 | except Exception: # noqa: BLE001 | CODE |
| LOW | omnigent/antigravity_native_reader.py | 2143 | except Exception: | CODE |
| LOW | omnigent/qwen_native_forwarder.py | 339 | except Exception: | CODE |
| LOW | omnigent/qwen_native_forwarder.py | 400 | except Exception as exc: # noqa: BLE001 — supervisor restarts on any Exception | CODE |
| LOW | omnigent/qwen_native_forwarder.py | 532 | except Exception: | CODE |
| LOW | omnigent/codex_native_forwarder.py | 1165 | except Exception: # noqa: BLE001 - preserve the long-lived forwarder. | CODE |
| LOW | omnigent/codex_native_forwarder.py | 1473 | except Exception: # noqa: BLE001 - keep the long-lived forwarder alive. | CODE |
| 625 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | pyproject.toml | 509 | # setup.py — build-time scaffolding that imports the (untyped) setuptools | COMMENT |
| MEDIUM | omnigent/cursor_native_forwarder.py | 701 | return None # system or other scaffolding | CODE |
| MEDIUM | omnigent/hermes_native_bridge.py | 77 | # new ``messages`` row (Hermes flushes a row per agentic step), so a new row | COMMENT |
| MEDIUM⚡ | omnigent/claude_native_bridge.py | 4328 | # CLI scaffolding, not user-typed content — rendering any of them as | COMMENT |
| MEDIUM⚡ | omnigent/claude_native_bridge.py | 4330 | # Today: drop isMeta + every CLI-scaffolding-prefixed record; for | COMMENT |
| MEDIUM⚡ | omnigent/claude_native_bridge.py | 4333 | # hid Skills; we keep the broad scaffolding filter and just | COMMENT |
| MEDIUM⚡ | omnigent/claude_native_bridge.py | 4343 | # Code's CLI scaffolding (not user-typed content). ``<command- | COMMENT |
| MEDIUM | omnigent/claude_native_bridge.py | 4583 | # ``isMeta=true`` carries CLI scaffolding like | COMMENT |
| MEDIUM | omnigent/claude_native_bridge.py | 4646 | # Other CLI-scaffolding records (stdout/stderr from /effort, etc.) | COMMENT |
| MEDIUM | omnigent/claude_native_bridge.py | 4679 | # CLI-scaffolding markers ever arriving in list-form | COMMENT |
| MEDIUM | omnigent/opencode_native_forwarder.py | 59 | # Transient chain-of-thought delta — the reasoning analogue of the text delta | COMMENT |
| MEDIUM | omnigent/opencode_native_forwarder.py | 741 | except Exception: # noqa: BLE001 - context window is best effort. | CODE |
| MEDIUM | omnigent/_wrapper_labels.py | 26 | # for the ``omnigent.*`` namespace; never reused for guardrails / | COMMENT |
| MEDIUM | omnigent/codex_native_forwarder.py | 102 | # Transient reasoning (chain-of-thought) delta — the reasoning analogue of | COMMENT |
| MEDIUM | omnigent/codex_native_forwarder.py | 2797 | # Codex finished compacting the thread's context window. | COMMENT |
| MEDIUM | omnigent/goose_native_forwarder.py | 42 | #: Seconds between store polls. Goose flushes a ``messages`` row per agentic | COMMENT |
| MEDIUM | omnigent/goose_native_forwarder.py | 266 | return None # tool / system / other scaffolding | CODE |
| MEDIUM | omnigent/claude_native_forwarder.py | 3102 | # — Claude Code knows the real context window for the active | COMMENT |
| MEDIUM | omnigent/hermes_native_forwarder.py | 75 | #: Seconds between store polls. Hermes flushes a ``messages`` row per agentic step | COMMENT |
| MEDIUM | omnigent/hermes_native_forwarder.py | 1193 | # with no tool_calls (the agentic loop's terminal step); | COMMENT |
| MEDIUM | omnigent/host/connect.py | 364 | # Testing knob: override the context window size for compaction | COMMENT |
| MEDIUM | omnigent/inner/os_env.py | 147 | # (e.g. ``cat`` on a multi-MB log file) saturate the context window and cause | COMMENT |
| MEDIUM | omnigent/inner/os_env.py | 154 | # context window, causing the next LLM call to fail with a context-length | COMMENT |
| MEDIUM | omnigent/inner/copilot_executor.py | 102 | # too short for an agentic turn (sub-agent dispatches, long tool calls), so we | COMMENT |
| MEDIUM | omnigent/inner/copilot_executor.py | 685 | # The Copilot SDK auto-compacted the session's context window. | COMMENT |
| MEDIUM | omnigent/inner/antigravity_executor.py | 372 | # The SDK runs its own agentic loop and executes its own tools, so the | COMMENT |
| MEDIUM | omnigent/inner/antigravity_executor.py | 573 | # Stamp the resolved model onto the usage dict so the scaffold can | COMMENT |
| MEDIUM | omnigent/inner/claude_sdk_executor.py | 1881 | # the scaffold's ``dispatch_tool`` path, giving the runner | COMMENT |
| MEDIUM⚡ | omnigent/inner/pi_executor.py | 507 | // escape all guardrails. Bridged tools ARE evaluated server-side at /mcp, | COMMENT |
| MEDIUM | omnigent/inner/pi_executor.py | 1838 | # scaffold's executor adapter; absent on single-process / pre-turn | COMMENT |
| MEDIUM | omnigent/inner/pi_executor.py | 1947 | # otherwise escape all guardrails, so the generated extension's | COMMENT |
| MEDIUM | omnigent/inner/openai_agents_sdk_executor.py | 1794 | # output) — the best proxy for how full the context window | COMMENT |
| MEDIUM | omnigent/runner/tool_dispatch.py | 6385 | # orchestration surface (tools.agents). This teaches the LLM how to | COMMENT |
| MEDIUM⚡ | omnigent/runner/app.py | 15512 | # but the harness scaffold's ``ApprovalEvent`` wants the fields at the | COMMENT |
| MEDIUM | omnigent/runner/app.py | 9608 | # parent's transcript), as are the spec-less test scaffold and | COMMENT |
| MEDIUM | omnigent/runner/app.py | 14984 | # in its tool loop (via the scaffold's injection | COMMENT |
| MEDIUM | omnigent/runner/app.py | 15133 | # InterruptEvent 404s at the scaffold (the instant turn already | COMMENT |
| MEDIUM | omnigent/runtime/inflight_text.py | 638 | # scaffold harnesses, which emit response.created | COMMENT |
| MEDIUM | omnigent/runtime/compaction.py | 614 | # Budget = fraction of context window minus system/tool tokens. | COMMENT |
| MEDIUM | omnigent/runtime/harnesses/_scaffold.py | 409 | # scaffold's ``message`` /events handler pushes here when | COMMENT |
| MEDIUM | omnigent/runtime/harnesses/_executor_adapter.py | 354 | # Watcher for mid-turn steering injections. The scaffold | COMMENT |
| MEDIUM | omnigent/runtime/harnesses/_executor_adapter.py | 358 | # scaffold). The watcher converts each injection into an | COMMENT |
| MEDIUM | omnigent/runtime/harnesses/_executor_adapter.py | 580 | # protocol changed or the scaffold pushed a | COMMENT |
| MEDIUM | omnigent/runtime/harnesses/_executor_adapter.py | 796 | # ALLOW here silently bypasses guardrails: for a PHASE_TOOL_CALL this | COMMENT |
| MEDIUM | omnigent/runtime/harnesses/_executor_adapter.py | 856 | # runs inline or behind the harness scaffold. | COMMENT |
| MEDIUM | omnigent/runtime/harnesses/_executor_adapter.py | 955 | # ``_dispatched_call_ids``) — the scaffold is their single | COMMENT |
| MEDIUM | omnigent/runtime/harnesses/_executor_adapter.py | 1038 | # scaffold can build a response.failed terminal event). | COMMENT |
| MEDIUM⚡ | omnigent/runtime/harnesses/process_manager.py | 68 | # request; the harness scaffold's auth middleware compares against it. This is | COMMENT |
| MEDIUM⚡ | omnigent/runtime/harnesses/process_manager.py | 561 | # ``resp_<uuid>`` are different identifiers; the harness scaffold's | COMMENT |
| MEDIUM⚡ | omnigent/runtime/harnesses/process_manager.py | 1042 | # scaffold's auth gate inert. The token is delivered via the harness's | COMMENT |
| MEDIUM⚡ | omnigent/runtime/harnesses/process_manager.py | 1093 | # so the harness scaffold accepts this client and rejects any | COMMENT |
| MEDIUM | omnigent/runtime/harnesses/_runner.py | 162 | # (``OMNIGENT_HARNESS_AUTH_TOKEN``); the scaffold's auth check compares | COMMENT |
| MEDIUM | omnigent/runtime/policies/builder.py | 316 | # the root conversation's policies so that guardrails set on the | COMMENT |
| MEDIUM | omnigent/runtime/policies/builder.py | 336 | # no other guardrails are declared (the noop-engine path below | COMMENT |
| MEDIUM | omnigent/repl/_repl.py | 7451 | # the overlay can render guardrails label state — the legacy | COMMENT |
| MEDIUM⚡ | omnigent/spec/omnigent.py | 203 | # ``guardrails.policies`` is intentionally NOT rejected here. | COMMENT |
| MEDIUM⚡ | omnigent/spec/omnigent.py | 210 | # pass-through (drop guardrails from the forward | COMMENT |
| MEDIUM⚡ | omnigent/spec/omnigent.py | 1102 | # Translate the guardrails block if the caller handed us the | COMMENT |
| MEDIUM⚡ | omnigent/spec/omnigent.py | 1104 | # top-level YAML fields into Omnigent' ``guardrails:`` | COMMENT |
| MEDIUM | omnigent/spec/omnigent.py | 629 | # Build the omnigent-shaped guardrails dict, then hand it to | COMMENT |
| 97 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | omnigent/hermes_native_permissions.py | 149 | CODE | |
| LOW | omnigent/opencode_native_provider.py | 136 | CODE | |
| LOW | omnigent/opencode_native_provider.py | 306 | CODE | |
| LOW | omnigent/opencode_native_provider.py | 365 | CODE | |
| LOW | omnigent/cursor_native_forwarder.py | 801 | CODE | |
| LOW | omnigent/cursor_native_forwarder.py | 868 | CODE | |
| LOW | omnigent/qwen_native_permissions.py | 216 | CODE | |
| LOW | omnigent/cursor_native_permissions.py | 342 | CODE | |
| LOW | omnigent/cursor_native_permissions.py | 423 | CODE | |
| LOW | omnigent/cursor_native_permissions.py | 574 | CODE | |
| LOW | omnigent/cursor_native_permissions.py | 624 | CODE | |
| LOW | omnigent/claude_native_hook.py | 618 | CODE | |
| LOW | omnigent/pi_native_credentials.py | 620 | CODE | |
| LOW | omnigent/native_policy_hook.py | 476 | CODE | |
| LOW | omnigent/claude_native_bridge.py | 1754 | CODE | |
| LOW | omnigent/claude_native_bridge.py | 2189 | CODE | |
| LOW | omnigent/claude_native_bridge.py | 2243 | CODE | |
| LOW | omnigent/claude_native_bridge.py | 2377 | CODE | |
| LOW | omnigent/claude_native_bridge.py | 3595 | CODE | |
| LOW | omnigent/opencode_native_forwarder.py | 185 | CODE | |
| LOW | omnigent/opencode_native_forwarder.py | 464 | CODE | |
| LOW | omnigent/update_check.py | 200 | CODE | |
| LOW | omnigent/update_check.py | 385 | CODE | |
| LOW | omnigent/update_check.py | 422 | CODE | |
| LOW | omnigent/update_check.py | 549 | CODE | |
| LOW | omnigent/update_check.py | 1018 | CODE | |
| LOW | omnigent/kimi_native_forwarder.py | 319 | CODE | |
| LOW | omnigent/codex_native.py | 1177 | CODE | |
| LOW | omnigent/codex_native.py | 1574 | CODE | |
| LOW | omnigent/codex_native.py | 1875 | CODE | |
| LOW | omnigent/antigravity_native_rpc.py | 1185 | CODE | |
| LOW | omnigent/process_logging.py | 346 | CODE | |
| LOW | omnigent/antigravity_native_interactions.py | 304 | CODE | |
| LOW | omnigent/cursor_native_usage.py | 272 | CODE | |
| LOW | omnigent/antigravity_native.py | 1014 | CODE | |
| LOW | omnigent/chat.py | 605 | CODE | |
| LOW | omnigent/chat.py | 2532 | CODE | |
| LOW | omnigent/chat.py | 3639 | CODE | |
| LOW | omnigent/cli.py | 1266 | CODE | |
| LOW | omnigent/cli.py | 3973 | CODE | |
| LOW | omnigent/cli.py | 4030 | CODE | |
| LOW | omnigent/cli.py | 5758 | CODE | |
| LOW | omnigent/cli.py | 6049 | CODE | |
| LOW | omnigent/cli.py | 6090 | CODE | |
| LOW | omnigent/cli.py | 6249 | CODE | |
| LOW | omnigent/cli.py | 8804 | CODE | |
| LOW | omnigent/cli.py | 9746 | CODE | |
| LOW | omnigent/cli.py | 9918 | CODE | |
| LOW | omnigent/cli.py | 10541 | CODE | |
| LOW | omnigent/cli.py | 10676 | CODE | |
| LOW | omnigent/cli.py | 11201 | CODE | |
| LOW | omnigent/cli.py | 11302 | CODE | |
| LOW | omnigent/qwen_native_bridge.py | 203 | CODE | |
| LOW | omnigent/qwen_native_bridge.py | 631 | CODE | |
| LOW | omnigent/goose_native_permissions.py | 145 | CODE | |
| LOW | omnigent/antigravity_native_reader.py | 832 | CODE | |
| LOW | omnigent/codex_native_forwarder.py | 1582 | CODE | |
| LOW | omnigent/codex_native_forwarder.py | 1929 | CODE | |
| LOW | omnigent/codex_native_forwarder.py | 2254 | CODE | |
| LOW | omnigent/codex_native_forwarder.py | 2712 | CODE | |
| 420 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | omnigent/hermes_native_bridge.py | 602 | def _settle_pane(socket_path: str, tmux_target: str, *, timeout_s: float) -> None: | CODE |
| LOW | omnigent/goose_native_bridge.py | 238 | def _settle_pane(socket_path: str, tmux_target: str, *, timeout_s: float) -> None: | CODE |
| LOW | omnigent/config.py | 48 | __all__ = [ | CODE |
| LOW | omnigent/opencode_native_bridge.py | 662 | def update_last_event_id(bridge_dir: Path, last_event_id: str) -> None: | STRING |
| LOW | omnigent/codex_native_bridge.py | 606 | def update_active_turn_id(bridge_dir: Path, active_turn_id: str | None) -> None: | CODE |
| LOW | omnigent/codex_native_bridge.py | 630 | def update_thread_id(bridge_dir: Path, thread_id: str, active_turn_id: str | None = None) -> None: | CODE |
| LOW | omnigent/__init__.py | 99 | __all__ = [ | CODE |
| LOW | omnigent/kimi_native_bridge.py | 278 | def _settle_pane(socket_path: str, tmux_target: str, *, timeout_s: float) -> None: | CODE |
| LOW | omnigent/chat.py | 83 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/cli.py | 1977 | def _update_daemon_resolved_server_url(target: str, server_url: str) -> None: | CODE |
| LOW | omnigent/cursor_native_bridge.py | 613 | def _settle_pane(socket_path: str, tmux_target: str, *, timeout_s: float) -> None: | CODE |
| LOW | omnigent/opencode_http_transport.py | 44 | __all__ = ["ClientFactory", "OpenCodeHttpTransport", "build_prompt_payload"] | CODE |
| LOW | omnigent/_runner_startup.py | 207 | def _update_rich(msg: str) -> None: | CODE |
| LOW | omnigent/_runner_startup.py | 240 | def _update_plain(msg: str) -> None: | CODE |
| LOW | omnigent/kiro_native_session_forwarder.py | 674 | __all__ = [ | CODE |
| LOW | omnigent/cli_diagnostics.py | 573 | def _update_latest_symlink(log_dir: Path, log_path: Path) -> None: | CODE |
| LOW | omnigent/kiro_native_permissions.py | 347 | __all__ = [ | CODE |
| LOW | omnigent/tools/__init__.py | 81 | __all__ = [ | CODE |
| LOW | omnigent/tools/mcp.py | 833 | def _update_cache(self, tools: list[McpToolDef]) -> None: | CODE |
| LOW | omnigent/tools/client_specified/__init__.py | 184 | __all__ = [ | CODE |
| LOW | omnigent/tools/builtins/__init__.py | 66 | __all__ = [ | CODE |
| LOW | omnigent/terminals/registry.py | 49 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/terminals/__init__.py | 14 | __all__ = [ | CODE |
| LOW | omnigent/terminals/control_bridge.py | 82 | __all__ = [ | CODE |
| LOW | omnigent/inner/hermes_native_executor.py | 32 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/qwen_native_executor.py | 41 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/tracing.py | 52 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/copilot_executor.py | 89 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/acp_executor.py | 77 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/cursor_native_executor.py | 37 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/credential_proxy.py | 212 | __all__ = [ | CODE |
| LOW | omnigent/inner/terminal.py | 54 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/terminal.py | 1008 | async def set_conversation_link(self, conversation_link: str | None) -> None: | CODE |
| LOW | omnigent/inner/bwrap_sandbox.py | 634 | def _set_no_new_privs() -> None: | CODE |
| LOW | omnigent/inner/antigravity_executor.py | 74 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | omnigent/inner/claude_sdk_executor.py | 80 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/claude_sdk_executor.py | 230 | async def set_model(self, model: str | None) -> None: ... | CODE |
| LOW | omnigent/inner/kimi_native_executor.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/qwen_executor.py | 49 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/pi_executor.py | 75 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/cursor_executor.py | 75 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/openai_agents_sdk_executor.py | 55 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/_acp_omnigent_mcp.py | 32 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/sandbox.py | 23 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/sandbox.py | 631 | def set_temp_env(env: MutableMapping[str, str], tmpdir: Path) -> None: | CODE |
| LOW | omnigent/inner/goose_executor.py | 56 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/open_responses_sdk.py | 48 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/_subprocess_lifecycle.py | 40 | __all__ = [ | CODE |
| LOW | omnigent/inner/_proc.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/hermes_executor.py | 272 | def _setup_hermes_home(self) -> None: | STRING |
| LOW | omnigent/inner/goose_native_executor.py | 31 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/claude_gateway_shim.py | 42 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | omnigent/inner/codex_executor.py | 54 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/databricks_executor.py | 45 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/egress/controller.py | 303 | __all__ = ["EgressProxyHandle", "apply_egress_env", "start_egress_proxy"] | CODE |
| LOW | omnigent/inner/egress/proxy.py | 53 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/egress/certs.py | 23 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/egress/__init__.py | 38 | __all__ = [ | CODE |
| LOW | omnigent/inner/egress/relay.py | 54 | logger = logging.getLogger(__name__) | CODE |
| LOW | omnigent/inner/egress/ca.py | 22 | logger = logging.getLogger(__name__) | CODE |
| 119 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | omnigent/inner/terminal.py | 1890 | # Create the instance's private directory. | COMMENT |
| MEDIUM | omnigent/inner/terminal.py | 1916 | # Create an os_env pointing at the fork for mount support. | COMMENT |
| MEDIUM | omnigent/runner/tool_dispatch.py | 5068 | # Create a child session bound to the same agent. | COMMENT |
| MEDIUM | omnigent/runtime/harnesses/_executor_adapter.py | 331 | # Create a TracingContext per turn when tracing is enabled. | COMMENT |
| MEDIUM⚡ | tests/test_opencode_native_bridge.py | 255 | # Create the file and verify the path is as expected. | COMMENT |
| MEDIUM | tests/e2e_ui/conftest.py | 1071 | # Create a session with the hello_world bundle inline. The server | COMMENT |
| MEDIUM | tests/e2e_ui/conftest.py | 1435 | # Create a session with the terminal agent bundle inline. | STRING |
| MEDIUM | tests/e2e_ui/collaboration/_multi_user_server.py | 194 | # Create an admin-owned hello_world session (authenticated, so it's | COMMENT |
| MEDIUM | tests/e2e_ui/sessions/test_session_updates_stream.py | 200 | # Create a brand-new session "elsewhere" — over the API, the way a CLI or | COMMENT |
| MEDIUM | tests/e2e_ui/start_session/test_start_session.py | 1881 | # Create a new folder under /home/e2e/projects. | COMMENT |
| MEDIUM | tests/inner/test_claude_sdk_executor.py | 1256 | # Create a gateway executor that uses a Databricks profile path. | COMMENT |
| MEDIUM | tests/runner/test_app_sessions_native.py | 4389 | # Create the session first. | COMMENT |
| MEDIUM | tests/runner/test_environment_filesystem.py | 107 | # Create a symlink that points to a non-existent target. | COMMENT |
| MEDIUM⚡ | tests/runner/transports/test_uds_unit.py | 65 | # Create a socket file then close it without listening. | COMMENT |
| MEDIUM⚡ | tests/repl/test_event_tape.py | 764 | # Create a payload that would produce many lines. | COMMENT |
| MEDIUM | tests/spec/test_policy_validator.py | 207 | # Create a local tool file that would be discovered under the | COMMENT |
| MEDIUM⚡ | tests/stores/test_artifact_store.py | 142 | # Create a symlink inside root that points outside | COMMENT |
| MEDIUM | tests/server/integration/test_policy_crud_e2e.py | 372 | # Create a default (server-wide) policy. | COMMENT |
| MEDIUM | tests/server/integration/test_policy_crud_e2e.py | 399 | # Create a session-scoped policy. | COMMENT |
| MEDIUM | tests/server/integration/test_policy_crud_e2e.py | 427 | # Create a policy in session A. | COMMENT |
| MEDIUM | tests/server/integration/test_default_policy_routes.py | 476 | # Create a policy as admin. | COMMENT |
| MEDIUM | tests/server/integration/test_accounts_auth_e2e.py | 432 | # Create a non-admin user first. | COMMENT |
| MEDIUM⚡ | tests/server/integration/test_oidc_auth_e2e.py | 187 | # Create a ticket first. | COMMENT |
| MEDIUM | tests/e2e/test_host_claude_native_e2e.py | 361 | # Create the claude-native session bound to the host. The | COMMENT |
| MEDIUM | tests/e2e/test_comment_tools_claude_native.py | 250 | # Create a private tmux session (detached, no user terminal needed). | COMMENT |
| MEDIUM | tests/e2e/test_non_git_changed_files_e2e.py | 515 | # Create the session to learn its id before seeding the file. | COMMENT |
| MEDIUM | tests/e2e/test_files_to_subagent_e2e.py | 193 | # Create the parent session and upload the file BEFORE dispatch so the | COMMENT |
| MEDIUM | tests/e2e/test_chat_e2e.py | 359 | # Create a session so _pick_agent can discover the agent name | COMMENT |
| MEDIUM | .github/workflows/github-release.yml | 1 | # Create a GitHub Release entry (the `…/releases` page) when a version tag is | COMMENT |
| MEDIUM | .github/workflows/security-triage.yml | 468 | # Create a single PRIVATE draft advisory summarising the serious | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | omnigent/cli.py | 12916 | # Step 2: Open the browser. | COMMENT |
| LOW⚡ | omnigent/cli.py | 12921 | # Step 3: Poll until the ticket is fulfilled or expired. | COMMENT |
| LOW | omnigent/cli.py | 12902 | # Step 1: Request a CLI login ticket. | COMMENT |
| LOW | omnigent/tools/manager.py | 169 | # Step 10: register sys_timer_set / sys_timer_cancel when | COMMENT |
| LOW⚡ | omnigent/server/routes/_workspace_validation.py | 225 | # Step 0: host must be online. | COMMENT |
| LOW⚡ | omnigent/server/routes/_workspace_validation.py | 232 | # Step 4: stat the workspace. Done before the boundary check so | COMMENT |
| LOW | …nigent/onboarding/agent/skills/build-omnigent/SKILL.md | 18 | ## Step 1: Choose a directory name | COMMENT |
| LOW | …nigent/onboarding/agent/skills/build-omnigent/SKILL.md | 22 | ## Step 2: Generate config.yaml | COMMENT |
| LOW | …nigent/onboarding/agent/skills/build-omnigent/SKILL.md | 64 | ## Step 3: Generate AGENTS.md | COMMENT |
| LOW | …nigent/onboarding/agent/skills/build-omnigent/SKILL.md | 74 | ## Step 4: Generate skills (optional) | COMMENT |
| LOW⚡ | tests/runtime/policies/test_combined_integration.py | 234 | # Step 1: clean write allowed. | COMMENT |
| LOW⚡ | tests/runtime/policies/test_combined_integration.py | 241 | # Step 2: web_search taints. | COMMENT |
| LOW⚡ | tests/runtime/policies/test_combined_integration.py | 246 | # Step 3: confidential read elevates sensitivity. | COMMENT |
| LOW⚡ | tests/runtime/policies/test_combined_integration.py | 254 | # Step 4: tainted + confidential write DENIES. | COMMENT |
| LOW⚡ | tests/server/integration/test_sessions_permissions.py | 420 | # Step 1: bryan creates session -> auto-gets manage | COMMENT |
| LOW⚡ | tests/server/integration/test_sessions_permissions.py | 429 | # Step 2: bryan grants corey edit (level 2) | COMMENT |
| LOW⚡ | tests/server/integration/test_sessions_permissions.py | 470 | # Step 5: bryan revokes corey entirely | COMMENT |
| LOW⚡ | tests/server/integration/test_sessions_permissions.py | 480 | # Step 6: bryan tries to revoke own manage -> 403 | COMMENT |
| LOW⚡ | tests/server/integration/test_sessions_permissions.py | 512 | # Step 8: rice lists sessions -> sees S1 | COMMENT |
| LOW⚡ | tests/server/integration/test_sessions_permissions.py | 521 | # Step 9: corey lists sessions -> sees nothing | COMMENT |
| LOW⚡ | tests/server/integration/test_sessions_permissions.py | 529 | # Step 10: bryan lists sessions -> sees S1 | COMMENT |
| LOW | tests/server/integration/test_sessions_permissions.py | 443 | # Step 3: bryan downgrades corey to read (level 1) via upsert | COMMENT |
| LOW | tests/server/integration/test_sessions_permissions.py | 458 | # Step 4: bryan grants rice edit (level 2) | COMMENT |
| LOW | tests/server/integration/test_sessions_permissions.py | 495 | # Step 7: verify DB state via list_permissions | COMMENT |
| LOW⚡ | tests/e2e/test_polly_subagent_model_e2e.py | 450 | # Step 1: call sys_list_models. | COMMENT |
| LOW⚡ | tests/e2e/test_polly_subagent_model_e2e.py | 460 | # Step 2: after receiving the catalog, dispatch pi on a Claude model. | COMMENT |
| LOW⚡ | tests/e2e/test_polly_subagent_model_e2e.py | 480 | # Step 3: end the turn after dispatch. | COMMENT |
| LOW⚡ | tests/e2e/test_polly_subagent_model_e2e.py | 482 | # Step 4: synthesis after pi completes (or fails fast on mock). | COMMENT |
| LOW | tests/e2e/test_agent_update.py | 235 | # Step 1: Upload compaction-test (v1) and bind the runner. | COMMENT |
| LOW⚡ | tests/e2e/test_agent_update.py | 248 | # Step 2: Start a turn whose mock response blocks on the gate. | COMMENT |
| LOW⚡ | tests/e2e/test_agent_update.py | 258 | # Step 3: Update agent to v2 with marker in instructions. | COMMENT |
| LOW | tests/e2e/test_agent_update.py | 275 | # Step 4: New session on v2. | COMMENT |
| LOW | tests/e2e/test_agent_update.py | 287 | # Step 5: Poll both to terminal state. | COMMENT |
| LOW⚡ | tests/e2e/test_agent_update.py | 302 | # Step 6: V1 response should NOT contain the marker. | COMMENT |
| LOW⚡ | tests/e2e/test_agent_update.py | 309 | # Step 7: V2 response MUST contain the marker. | COMMENT |
| LOW⚡ | tests/e2e/test_agent_update.py | 315 | # Step 8: Agent metadata reflects the update. | COMMENT |
| LOW⚡ | tests/e2e/test_cancel_history.py | 235 | # Step 1: open session, send a message that triggers the blocking response. | COMMENT |
| LOW⚡ | tests/e2e/test_cancel_history.py | 245 | # Step 2: wait for the mock LLM to be blocked on the gate, then interrupt. | COMMENT |
| LOW⚡ | tests/e2e/test_cancel_history.py | 254 | # Step 3: verify the conversation has the cancellation marker. | COMMENT |
| LOW⚡ | tests/e2e/test_cancel_history.py | 263 | # Step 4: send a follow-up in the same session. | COMMENT |
| LOW⚡ | tests/e2e/test_cancel_history.py | 270 | # Step 5: wait for the follow-up to complete. | COMMENT |
| LOW⚡ | tests/e2e/test_cancel_history.py | 404 | # Step 2: wait for running (tools should be executing), cancel. | COMMENT |
| LOW⚡ | tests/e2e/test_cancel_history.py | 413 | # Step 3: follow-up in the same session — would fail with 400 before the fix. | COMMENT |
| LOW | tests/e2e/test_cancel_history.py | 390 | # Step 1: open session; ask archer to use tools (web_search triggers tool calls). | COMMENT |
| LOW | tests/e2e/omnigent/test_run_omnigent_resumption.py | 426 | # Step 1: plant the nonce via -p. | COMMENT |
| LOW | tests/e2e/omnigent/test_run_omnigent_resumption.py | 452 | # Step 2: recover via interactive REPL --continue. Pipe | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | omnigent/cli.py | 12916 | # Step 2: Open the browser. | COMMENT |
| LOW⚡ | omnigent/cli.py | 12921 | # Step 3: Poll until the ticket is fulfilled or expired. | COMMENT |
| LOW | omnigent/cli.py | 12902 | # Step 1: Request a CLI login ticket. | COMMENT |
| LOW | omnigent/tools/manager.py | 169 | # Step 10: register sys_timer_set / sys_timer_cancel when | COMMENT |
| LOW | omnigent/spec/parser.py | 2546 | # Step 7: ``sandbox: <bool>`` was an AP-only no-op that | COMMENT |
| LOW⚡ | omnigent/server/routes/_workspace_validation.py | 225 | # Step 0: host must be online. | COMMENT |
| LOW⚡ | omnigent/server/routes/_workspace_validation.py | 232 | # Step 4: stat the workspace. Done before the boundary check so | COMMENT |
| LOW | omnigent/server/routes/_workspace_validation.py | 283 | # Step 6: ``cwd: ./subdir`` requires the named subdir under the | COMMENT |
| LOW⚡ | tests/runtime/policies/test_combined_integration.py | 234 | # Step 1: clean write allowed. | COMMENT |
| LOW⚡ | tests/runtime/policies/test_combined_integration.py | 241 | # Step 2: web_search taints. | COMMENT |
| LOW⚡ | tests/runtime/policies/test_combined_integration.py | 246 | # Step 3: confidential read elevates sensitivity. | COMMENT |
| LOW⚡ | tests/runtime/policies/test_combined_integration.py | 254 | # Step 4: tainted + confidential write DENIES. | COMMENT |
| LOW⚡ | tests/server/integration/test_sessions_permissions.py | 420 | # Step 1: bryan creates session -> auto-gets manage | COMMENT |
| LOW⚡ | tests/server/integration/test_sessions_permissions.py | 429 | # Step 2: bryan grants corey edit (level 2) | COMMENT |
| LOW⚡ | tests/server/integration/test_sessions_permissions.py | 470 | # Step 5: bryan revokes corey entirely | COMMENT |
| LOW⚡ | tests/server/integration/test_sessions_permissions.py | 480 | # Step 6: bryan tries to revoke own manage -> 403 | COMMENT |
| LOW⚡ | tests/server/integration/test_sessions_permissions.py | 512 | # Step 8: rice lists sessions -> sees S1 | COMMENT |
| LOW⚡ | tests/server/integration/test_sessions_permissions.py | 521 | # Step 9: corey lists sessions -> sees nothing | COMMENT |
| LOW⚡ | tests/server/integration/test_sessions_permissions.py | 529 | # Step 10: bryan lists sessions -> sees S1 | COMMENT |
| LOW | tests/server/integration/test_sessions_permissions.py | 443 | # Step 3: bryan downgrades corey to read (level 1) via upsert | COMMENT |
| LOW | tests/server/integration/test_sessions_permissions.py | 458 | # Step 4: bryan grants rice edit (level 2) | COMMENT |
| LOW | tests/server/integration/test_sessions_permissions.py | 495 | # Step 7: verify DB state via list_permissions | COMMENT |
| LOW⚡ | tests/e2e/test_polly_subagent_model_e2e.py | 450 | # Step 1: call sys_list_models. | COMMENT |
| LOW⚡ | tests/e2e/test_polly_subagent_model_e2e.py | 460 | # Step 2: after receiving the catalog, dispatch pi on a Claude model. | COMMENT |
| LOW⚡ | tests/e2e/test_polly_subagent_model_e2e.py | 480 | # Step 3: end the turn after dispatch. | COMMENT |
| LOW⚡ | tests/e2e/test_polly_subagent_model_e2e.py | 482 | # Step 4: synthesis after pi completes (or fails fast on mock). | COMMENT |
| LOW | tests/e2e/test_agent_update.py | 235 | # Step 1: Upload compaction-test (v1) and bind the runner. | COMMENT |
| LOW⚡ | tests/e2e/test_agent_update.py | 248 | # Step 2: Start a turn whose mock response blocks on the gate. | COMMENT |
| LOW⚡ | tests/e2e/test_agent_update.py | 258 | # Step 3: Update agent to v2 with marker in instructions. | COMMENT |
| LOW | tests/e2e/test_agent_update.py | 275 | # Step 4: New session on v2. | COMMENT |
| LOW | tests/e2e/test_agent_update.py | 287 | # Step 5: Poll both to terminal state. | COMMENT |
| LOW⚡ | tests/e2e/test_agent_update.py | 302 | # Step 6: V1 response should NOT contain the marker. | COMMENT |
| LOW⚡ | tests/e2e/test_agent_update.py | 309 | # Step 7: V2 response MUST contain the marker. | COMMENT |
| LOW⚡ | tests/e2e/test_agent_update.py | 315 | # Step 8: Agent metadata reflects the update. | COMMENT |
| LOW⚡ | tests/e2e/test_cancel_history.py | 235 | # Step 1: open session, send a message that triggers the blocking response. | COMMENT |
| LOW⚡ | tests/e2e/test_cancel_history.py | 245 | # Step 2: wait for the mock LLM to be blocked on the gate, then interrupt. | COMMENT |
| LOW⚡ | tests/e2e/test_cancel_history.py | 254 | # Step 3: verify the conversation has the cancellation marker. | COMMENT |
| LOW⚡ | tests/e2e/test_cancel_history.py | 263 | # Step 4: send a follow-up in the same session. | COMMENT |
| LOW⚡ | tests/e2e/test_cancel_history.py | 270 | # Step 5: wait for the follow-up to complete. | COMMENT |
| LOW⚡ | tests/e2e/test_cancel_history.py | 404 | # Step 2: wait for running (tools should be executing), cancel. | COMMENT |
| LOW⚡ | tests/e2e/test_cancel_history.py | 413 | # Step 3: follow-up in the same session — would fail with 400 before the fix. | COMMENT |
| LOW | tests/e2e/test_cancel_history.py | 390 | # Step 1: open session; ask archer to use tools (web_search triggers tool calls). | COMMENT |
| LOW | tests/e2e/omnigent/test_run_omnigent_resumption.py | 426 | # Step 1: plant the nonce via -p. | COMMENT |
| LOW | tests/e2e/omnigent/test_run_omnigent_resumption.py | 452 | # Step 2: recover via interactive REPL --continue. Pipe | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/src/shell/ForkSessionDialog.test.tsx | 178 | expect(input).toHaveAttribute("placeholder", "Fork of My session"); | CODE |
| LOW | web/src/shell/ForkSessionDialog.test.tsx | 186 | expect(input).toHaveAttribute("placeholder", "Name the cloned session"); | CODE |
| LOW | web/src/shell/AppShell.test.tsx | 2749 | expect(nameInput).toHaveAttribute("placeholder", "Fork of Auth refactor"); | CODE |
| LOW | web/src/hooks/useBrowserAgentRelay.ts | 119 | const ph = el.getAttribute('placeholder'); | CODE |
| LOW | web/src/pages/SharingPage.test.tsx | 62 | vi.mocked(identity.resolveIdentity).mockResolvedValue("admin@example.com"); | CODE |
| LOW | tests/test_claude_native_bridge.py | 4624 | "oauthAccount": {"emailAddress": "user@example.com"}, | CODE |
| LOW | tests/test_claude_native_bridge.py | 4641 | assert data["oauthAccount"] == {"emailAddress": "user@example.com"} | CODE |
| LOW | tests/e2e_ui/sessions/test_host_asleep_composer.py | 142 | expect(composer).to_have_attribute("placeholder", _ASLEEP_PLACEHOLDER, timeout=15_000) | CODE |
| LOW⚡ | tests/inner/test_databricks_executor.py | 1704 | return _StubSdkConfig(host="https://example.databricks.com", token="dapi-fake-token") | CODE |
| LOW⚡ | tests/inner/test_databricks_executor.py | 1714 | assert auth.current_token() == "dapi-fake-token" | CODE |
| LOW | tests/inner/test_databricks_executor.py | 1691 | "[my-ws]\nhost = https://example.databricks.com\ntoken = dapi-fake-token\n" | CODE |
| LOW⚡ | tests/frontends/sdk/test_file_completer.py | 217 | ["git", "config", "user.email", "test@test.com"], | CODE |
| LOW | tests/spec/test_omnigent_adapter.py | 1287 | prompt="placeholder", | CODE |
| LOW | tests/stores/test_host_store.py | 275 | owner="admin@example.com", | CODE |
| LOW | tests/stores/test_host_store.py | 298 | assert host_store.list_hosts(owner="admin@example.com") == [] | CODE |
| LOW⚡ | tests/stores/test_session_policy_store.py | 437 | created_by="admin@example.com", | CODE |
| LOW⚡ | tests/stores/test_session_policy_store.py | 439 | assert policy.created_by == "admin@example.com" | CODE |
| LOW | tests/server/test_oidc_admin_users.py | 67 | perm_store.ensure_user("admin@example.com", is_admin=True) | CODE |
| LOW⚡ | tests/server/test_oidc_admin_users.py | 80 | user_id="admin@example.com", | CODE |
| LOW⚡ | tests/server/test_oidc_admin_users.py | 98 | assert set(users) == {"admin@example.com", "member@example.com"} | CODE |
| LOW⚡ | tests/server/test_oidc_admin_users.py | 99 | assert users["admin@example.com"]["is_admin"] is True | CODE |
| LOW | tests/server/test_oidc_invites.py | 109 | created_by="admin@example.com", | CODE |
| LOW⚡ | tests/server/test_oidc_invites.py | 165 | assert store.is_email_invited("admin@example.com") is False | CODE |
| LOW | tests/server/test_oidc_invites.py | 216 | perm_store.ensure_user("admin@example.com", is_admin=True) | CODE |
| LOW | tests/server/test_oidc_invites.py | 227 | user_id="admin@example.com", | CODE |
| LOW | tests/server/test_oidc_invites.py | 287 | user_id="admin@example.com", | CODE |
| LOW⚡ | tests/server/test_permissions.py | 652 | perm_store.add_admin("admin@example.com") | CODE |
| LOW⚡ | tests/server/test_permissions.py | 656 | user_id="admin@example.com", | CODE |
| LOW | tests/server/test_permissions.py | 190 | perm_store.add_admin("admin@example.com") | CODE |
| LOW | tests/server/test_permissions.py | 197 | user_id="admin@example.com", | CODE |
| LOW | tests/server/integration/test_comments_routes.py | 221 | admin = "admin@example.com" | CODE |
| LOW⚡ | tests/server/integration/test_policy_crud_e2e.py | 42 | def _admin_headers(email: str = "admin@example.com") -> dict[str, str]: | CODE |
| LOW⚡ | tests/server/integration/test_policy_crud_e2e.py | 51 | def _make_admin(db_uri: str, email: str = "admin@example.com") -> None: | CODE |
| LOW⚡ | tests/server/integration/test_policy_crud_e2e.py | 61 | def _seed_session(db_uri: str, user_email: str = "admin@example.com") -> str: | CODE |
| LOW | tests/server/integration/test_oidc_default_policies.py | 42 | _ADMIN = "admin@example.com" | CODE |
| LOW⚡ | tests/server/integration/test_default_policy_routes.py | 94 | def _admin_headers(email: str = "admin@example.com") -> dict[str, str]: | CODE |
| LOW⚡ | tests/server/integration/test_default_policy_routes.py | 103 | def _make_admin(db_uri: str, email: str = "admin@example.com") -> None: | CODE |
| LOW⚡ | tests/server/integration/test_default_policy_routes.py | 113 | def _make_user(db_uri: str, email: str = "user@example.com") -> None: | CODE |
| LOW | tests/server/integration/test_default_policy_routes.py | 150 | assert body["created_by"] == "admin@example.com" | CODE |
| LOW | tests/server/integration/test_default_policy_routes.py | 408 | headers=_admin_headers("user@example.com"), | CODE |
| LOW | tests/server/integration/test_default_policy_routes.py | 436 | headers=_admin_headers("user@example.com"), | CODE |
| LOW | tests/server/integration/test_default_policy_routes.py | 463 | headers=_admin_headers("user@example.com"), | CODE |
| LOW | tests/server/integration/test_default_policy_routes.py | 490 | headers=_admin_headers("user@example.com"), | CODE |
| LOW | tests/server/integration/test_default_policy_routes.py | 517 | headers=_admin_headers("user@example.com"), | CODE |
| LOW⚡ | tests/server/integration/test_default_policy_routes.py | 97 | :param email: The user email to present, e.g. ``"admin@example.com"``. | STRING |
| LOW⚡ | tests/server/integration/test_default_policy_routes.py | 107 | :param email: Admin email to create, e.g. ``"admin@example.com"``. | STRING |
| LOW⚡ | tests/server/integration/test_default_policy_routes.py | 117 | :param email: User email to create, e.g. ``"user@example.com"``. | STRING |
| LOW⚡ | tests/db/test_db_models.py | 291 | created_by="admin@example.com", | CODE |
| LOW | tests/db/test_db_models.py | 251 | id="admin@example.com", | CODE |
| LOW | tests/db/test_db_models.py | 260 | loaded = session.get(SqlUser, (0, "admin@example.com")) | CODE |
| LOW | tests/db/test_migration_host_name_varchar64.py | 62 | "VALUES (0, 'user@example.com', 'my-laptop', 'host_abc123', 1, " | CODE |
| LOW | tests/db/test_migration_host_name_varchar64.py | 89 | sa.text("SELECT name FROM hosts WHERE owner = 'user@example.com'") | CODE |
| LOW⚡ | tests/e2e/test_journey_collaboration.py | 158 | "anchor_content": "placeholder", | CODE |
| LOW⚡ | tests/e2e/test_journey_collaboration.py | 211 | "anchor_content": "placeholder", | CODE |
| LOW⚡ | tests/entities/test_account.py | 75 | created_by="admin@example.com", | CODE |
| LOW⚡ | tests/entities/test_account.py | 82 | assert token.created_by == "admin@example.com" | CODE |
| LOW | tests/entities/test_policy.py | 42 | created_by="admin@example.com", | CODE |
| LOW | tests/entities/test_policy.py | 49 | assert pol.created_by == "admin@example.com" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | omnigent/server/schemas.py | 3914 | # Usage: | COMMENT |
| LOW | deploy/docker/bootstrap.sh | 7 | # Usage: | COMMENT |
| LOW | deploy/docker/docker-compose.https.yaml | 6 | # Usage: | COMMENT |
| LOW | tests/e2e_ui/visual/update_baseline_from_pr.sh | 10 | # Usage: | COMMENT |
| LOW | tests/e2e_ui/visual/regen_baseline_docker.sh | 18 | # Usage: | COMMENT |
| LOW | tests/resources/agents/inbox_test/inbox_test.yaml | 10 | # Usage: | COMMENT |
| LOW | …with_subagent_session/agent_with_subagent_session.yaml | 3 | # Usage: | COMMENT |
| LOW | …upervisor_with_forks/coding_supervisor_with_forks.yaml | 9 | # Usage: | COMMENT |
| LOW | …nts/agent_with_os_env_fork/agent_with_os_env_fork.yaml | 19 | # Usage: | COMMENT |
| LOW | tests/resources/examples/terminal_workers.yaml | 12 | # Usage: | COMMENT |
| LOW⚡ | tests/resources/examples/swe_org.yaml | 11 | # Usage: | COMMENT |
| LOW | tests/resources/examples/agent_with_uc_tools.yaml | 6 | # Usage: | COMMENT |
| LOW | tests/resources/examples/coding_supervisor.yaml | 3 | # Usage: | COMMENT |
| LOW | tests/resources/examples/agent_with_os_env.yaml | 3 | # Usage: | COMMENT |
| LOW | tests/resources/examples/risk_score_agent.yaml | 19 | # Usage: | COMMENT |
| LOW | tests/resources/examples/agent_with_tools.yaml | 3 | # Usage: | COMMENT |
| LOW | tests/resources/examples/info_flow_agent.yaml | 24 | # Usage: | COMMENT |
| LOW | tests/resources/examples/agent_with_os_env_bwrap.yaml | 49 | # Usage: | COMMENT |
| LOW | tests/resources/examples/claude_code_agent.yaml | 14 | # Usage: | COMMENT |
| LOW | …sts/resources/examples/agent_with_os_env_seatbelt.yaml | 72 | # Usage: | COMMENT |
| LOW | …ts/resources/examples/server_config_with_policies.yaml | 3 | # Usage: | COMMENT |
| LOW | tests/resources/examples/agent_with_policies.yaml | 3 | # Usage: | COMMENT |
| LOW | examples/sentinel/config.yaml | 9 | # Usage: | COMMENT |
| LOW | examples/scribe/config.yaml | 10 | # Usage: | COMMENT |
| LOW | examples/debby/config.yaml | 12 | # Usage: | COMMENT |
| LOW | examples/remy/config.yaml | 14 | # Usage: | COMMENT |
| LOW | scripts/backend-smoke.sh | 15 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | omnigent/chat.py | 260 | CODE | |
| LOW | omnigent/chat.py | 856 | CODE | |
| LOW | omnigent/chat.py | 1728 | CODE | |
| LOW | omnigent/chat.py | 2048 | CODE | |
| LOW | omnigent/chat.py | 3820 | CODE | |
| LOW | omnigent/cli.py | 2707 | CODE | |
| LOW | omnigent/cli.py | 6249 | CODE | |
| LOW | omnigent/inner/claude_sdk_executor.py | 1085 | CODE | |
| LOW | omnigent/inner/pi_executor.py | 1511 | CODE | |
| LOW | omnigent/inner/cursor_executor.py | 464 | CODE | |
| LOW | omnigent/inner/openai_agents_sdk_executor.py | 1001 | CODE | |
| LOW | omnigent/inner/codex_executor.py | 2031 | CODE | |
| LOW | omnigent/runner/tool_dispatch.py | 4389 | CODE | |
| LOW | omnigent/runner/tool_dispatch.py | 4690 | CODE | |
| LOW | omnigent/runner/app.py | 7834 | CODE | |
| LOW | omnigent/runtime/policies/engine.py | 105 | CODE | |
| LOW | omnigent/repl/_repl.py | 2940 | CODE | |
| LOW | omnigent/repl/_repl.py | 1255 | CODE | |
| LOW | omnigent/stores/conversation_store/__init__.py | 229 | CODE | |
| LOW | omnigent/stores/conversation_store/__init__.py | 475 | CODE | |
| LOW | omnigent/stores/conversation_store/__init__.py | 624 | CODE | |
| LOW | omnigent/stores/conversation_store/__init__.py | 1199 | CODE | |
| LOW | omnigent/stores/conversation_store/sqlalchemy_store.py | 793 | CODE | |
| LOW | omnigent/stores/conversation_store/sqlalchemy_store.py | 1933 | CODE | |
| LOW | omnigent/stores/conversation_store/sqlalchemy_store.py | 2305 | CODE | |
| LOW | omnigent/stores/conversation_store/sqlalchemy_store.py | 2842 | CODE | |
| LOW | omnigent/server/app.py | 1063 | CODE | |
| LOW | omnigent/server/routes/sessions.py | 2504 | CODE | |
| LOW | omnigent/server/routes/sessions.py | 14179 | CODE | |
| LOW | omnigent/server/routes/sessions.py | 21490 | CODE | |
| LOW | omnigent/server/routes/sessions.py | 14829 | CODE | |
| LOW | omnigent/policies/builtins/google.py | 719 | CODE | |
| LOW | omnigent/policies/builtins/risk_score.py | 330 | CODE | |
| LOW | omnigent/onboarding/sandboxes/islo.py | 309 | CODE | |
| LOW | omnigent/onboarding/sandboxes/kubernetes.py | 756 | CODE | |
| LOW | sdks/ui/omnigent_ui_sdk/terminal/_formatter.py | 318 | CODE | |
| LOW | sdks/ui/omnigent_ui_sdk/terminal/_host.py | 881 | CODE | |
| LOW | sdks/python-client/omnigent_client/_sessions.py | 394 | CODE | |
| LOW | tests/test_antigravity_native_reader.py | 2215 | CODE | |
| LOW | tests/tools/test_local.py | 413 | CODE | |
| LOW | tests/inner/test_openai_agents_sdk_harness.py | 83 | CODE | |
| LOW | tests/inner/test_antigravity_executor.py | 112 | CODE | |
| LOW | tests/inner/test_antigravity_executor.py | 217 | CODE | |
| LOW | tests/inner/sandbox/conftest.py | 124 | CODE | |
| LOW | tests/runner/test_file_tool_dispatch.py | 228 | CODE | |
| LOW | tests/server/helpers.py | 408 | CODE | |
| LOW | tests/server/helpers.py | 513 | CODE | |
| LOW | tests/server/routes/test_sessions_fork.py | 123 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | omnigent/inner/claude_sdk_executor.py | 2652 | # Check if the latest user message is multimodal — if so, | COMMENT |
| LOW | omnigent/server/identity_migration.py | 249 | # Check if the new owner already has a host with the same name | COMMENT |
| LOW | omnigent/server/routes/auth.py | 347 | # Check if this callback fulfills a CLI login ticket. | COMMENT |
| LOW | omnigent/server/routes/runner_tunnel.py | 715 | # Check if any frame arrived recently (not just pongs). | COMMENT |
| LOW | omnigent/policies/registry.py | 243 | # Check if all required params have defaults. | COMMENT |
| LOW | tests/e2e_ui/start_session/test_start_session.py | 1762 | # Open the file browser and navigate into the "projects" folder. | COMMENT |
| LOW | tests/host/test_connect.py | 1166 | # Set permissions to 0 — even the owner cannot stat children. | COMMENT |
| LOW | tests/inner/test_seatbelt_sandbox.py | 995 | # Read the file off disk for the content sanity-checks. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | designs/issue-triage-proposal.md | 104 | **Why:** LangChain's Dosu bot received significant community backlash ([discussion #25153](https://github.com/langchain- | CODE |
| HIGH | designs/issue-triage-proposal.md | 104 | **Why:** LangChain's Dosu bot received significant community backlash ([discussion #25153](https://github.com/langchain- | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | sdks/python-client/omnigent_client/tools/_docstring.py | 66 | Parse a Google-style docstring into description and per-param docs. Recognizes ``Args:`` / ``Arguments:`` / `` | STRING |
| HIGH | tests/llms/test_client.py | 95 | Async mock of ``BaseAdapter.chat_completions()``. :param args: Positional arguments (ignored). | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | web/src/shell/Sidebar.delete.test.tsx | 286 | const call = mocks.del.mutate.mock.calls.at(-1); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | omnigent/inner/executor.py | 539 | CODE | |
| MEDIUM | tests/test_antigravity_native_reader.py | 295 | CODE | |
| MEDIUM | tests/inner/test_codex_native_executor.py | 116 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | tests/resources/examples/swe_org.yaml | 369 | # Optional ideas you can add later | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | omnigent/runtime/subagent_block_notifier.py | 231 | async def handle_request( | CODE |
| LOW | tests/test_pi_native_credentials.py | 951 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | tests/test_pi_native_credentials.py | 990 | def handle_request(self, request: httpx.Request) -> httpx.Response: | CODE |
| LOW | tests/e2e/test_comments_e2e.py | 848 | anchor_content="def handle_request(req):", | CODE |
| LOW | tests/e2e/test_comments_e2e.py | 859 | assert "def handle_request(req):" in formatted, ( | CODE |