System of record for how agents build software: Built-in rust harness & 20+ CLIs.
This report summarizes scanner evidence for org2AI/ORG2, a TypeScript project with 2,613 GitHub stars. SynthScan examined 2,509,627 lines of code across 13392 source files, recording 6098 pattern matches distributed across 17 syntactic categories. The legacy adjusted pattern signal is 3.3 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 5015 finding(s).
Are imports declared and package/API names verified? 225 finding(s).
Are wrappers, guards, and repeated structures necessary? 3802 finding(s).
Which changes need focused human review? 6098 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 6098 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .archive/src/config/routeViewModeConfig.ts | 171 | export function shouldSaveToPreviousRoute(pathname: string): boolean { | CODE |
| LOW | .archive/src/config/appearance/primaryColorSchemas.ts | 44 | function buildBackgroundColorSchemas(): Record< | CODE |
| LOW | .archive/src/config/appearance/primaryColorSchemas.ts | 64 | export function getPrimarySchemaForBackgroundColorId( | CODE |
| LOW | .archive/src/config/mainAppPaths/routeCache.ts | 20 | export function classifySettingsRouteRoot(pathname: string): SettingsRouteRoot { | CODE |
| LOW | …es/CodeMirror/Editor/extensions/linter/customLinter.ts | 23 | export function createCustomLinterExtension( | CODE |
| LOW | …irror/Editor/extensions/linter/diagnosticsConverter.ts | 51 | export function convertAndSortDiagnostics( | CODE |
| LOW | …ures/BenchmarkPanel/hooks/useBenchmarkAgentBatchRun.ts | 43 | export function useBenchmarkAgentBatchRun() { | CODE |
| LOW | …ngines/TerminalCore/hooks/useTerminalContextAdapter.ts | 16 | export function useTerminalContextAdapter(): UseTerminalStateReturn { | CODE |
| LOW | …ngines/Simulator/components/ListPanelSidebar/index.tsx | 408 | >(function VirtuosoListPanelSidebarList(props, ref) { | CODE |
| LOW | …ator/components/GridCell/subagentCellHeaderIconKind.ts | 16 | export function resolveSubagentHeaderIconKind( | CODE |
| LOW | …s/ChatPanel/panels/useBenchmarkSessionCreatorSlots.tsx | 47 | export function useBenchmarkSessionCreatorSlots({ | CODE |
| LOW | …ngines/ChatPanel/navigation/chatPanelSurfaceReducer.ts | 45 | export function reduceChatPanelSurfaceCommand( | CODE |
| LOW | …rchive/src/hooks/session/useAgentFileChangeListener.ts | 29 | export function useAgentFileChangeListener( | CODE |
| LOW | …chive/src/hooks/session/useOrgtrackSessionArtifacts.ts | 35 | export function useOrgtrackSessionArtifacts({ | CODE |
| LOW | .archive/src/api/tauri/orgtrackHistory/index.ts | 5 | export async function getOrgtrackCursorSessions( | CODE |
| LOW | .archive/src/api/realtime/websocket/types.ts | 392 | export function isApprovalResponsePayload( | CODE |
| LOW | .archive/src/api/http/session/hostedKey.ts | 128 | export async function storeHostedKeyActivityBatch( | CODE |
| LOW | …stationSidebarConnector/useWorkstationSidebarReveal.ts | 30 | export function useWorkstationSidebarReveal({ | CODE |
| LOW | …rBottomPanel/content/ProblemsContent/problemsUtils.tsx | 87 | export function formatDiagnosticLocationSuffix(diagnostic: Diagnostic): string { | CODE |
| LOW | …/EditorPrimarySidebar/content/TestingContent/index.tsx | 52 | function collectAllExpandablePaths( | CODE |
| LOW | …FilePreviewContent/SpreadsheetEditor/clipboardUtils.ts | 20 | function parseDelimitedClipboardText( | CODE |
| LOW | …kStation/CodeEditor/SessionReplay/orgtrackArtifacts.ts | 59 | export function finalDiffsToFileOperations( | CODE |
| LOW | …deEditor/hooks/output/useFileWatchOutputIntegration.ts | 31 | export function useFileWatchOutputIntegration( | CODE |
| LOW | …s/WorkStation/shared/StatusBar/utils/statusBarUtils.ts | 49 | export function countActiveLanguageServiceSources( | CODE |
| LOW | …s/WorkStation/shared/StatusBar/utils/statusBarUtils.ts | 68 | export function diagnosticSourceStatusLabel( | CODE |
| LOW | …ion/shared/StatusBar/utils/languageServicePanelRows.ts | 16 | export function buildLanguageServicePanelRows( | CODE |
| LOW | …s/WorkStation/shared/StatusBar/utils/useLspDropdown.ts | 28 | export function computeLspDropdownPosition( | CODE |
| LOW | …s/WorkStation/DatabaseManager/DatabaseLayout/config.ts | 30 | export function createDatabaseQuickActions( | CODE |
| LOW | …lays/AddConnectionModal/ConnectionTestStatusBanner.tsx | 15 | function ConnectionTestStatusBanner({ | CODE |
| LOW | …r/WorkItems/components/WorkItemDetail/promptBuilder.ts | 8 | function formatAgentExecModeSection(mode: AgentExecMode): string { | CODE |
| LOW | …r/WorkItems/components/WorkItemDetail/promptBuilder.ts | 33 | function formatPreviousReviewFeedback( | CODE |
| LOW | …r/WorkItems/components/WorkItemDetail/promptBuilder.ts | 64 | function formatReviewFeedbackForSde( | CODE |
| LOW | …outs/GenericBottomPanel/useGenericBottomPanelResize.ts | 19 | export function useGenericBottomPanelResize({ | CODE |
| LOW | …ive/src/modules/MainApp/Settings/settingsRouteModel.ts | 44 | function resolveCanonicalSettingsPath(pathname: string): string | null { | CODE |
| LOW | …es/MainApp/Settings/hooks/useSettingsMonitorToolbar.ts | 15 | export function useSettingsMonitorToolbar( | CODE |
| LOW | .archive/src/modules/MainApp/Inbox/hooks/converters.ts | 27 | export function gitOperationToInboxMessage( | CODE |
| LOW | …s/KeyVault/Models/Table/buildConsolidatedModelOrder.ts | 30 | export function buildConsolidatedModelRowsSnapshot( | CODE |
| LOW | …s/KeyVault/Models/Table/buildConsolidatedModelOrder.ts | 113 | export function consolidatedRowToAvailableModelRow( | CODE |
| LOW | .archive/src/services/lsp/workspaceScan.ts | 51 | export function workspaceDiagnosticToAppDiagnostic( | CODE |
| LOW | .archive/src/services/lsp/types.ts | 47 | export function lspDiagnosticToAppDiagnostic( | CODE |
| LOW | .archive/src/services/lsp/eslint.ts | 109 | export function eslintDiagnosticToAppDiagnostic( | CODE |
| LOW | tests/blackboard-poc/test_dry_run.py | 35 | async def test_blackboard_pubsub_with_ids() -> None: | CODE |
| LOW | tests/blackboard-poc/test_dry_run.py | 132 | async def test_blackboard_compaction() -> None: | CODE |
| LOW | tests/blackboard-poc/test_dry_run.py | 247 | async def test_git_worktree_lifecycle() -> None: | CODE |
| LOW | tests/blackboard-poc/test_dry_run.py | 311 | async def test_git_conflict_detection_and_resolution() -> None: | CODE |
| LOW | tests/blackboard-poc/test_dry_run.py | 401 | async def test_blackboard_persistence() -> None: | CODE |
| LOW | tests/blackboard-poc/test_dry_run.py | 436 | async def test_reset_for_new_work_item() -> None: | CODE |
| LOW | tests/blackboard-poc/blackboard.py | 380 | def notify_work_item_complete(self) -> None: | CODE |
| LOW | tests/blackboard-poc/tools.py | 347 | async def handle_blackboard_post_message( | CODE |
| LOW | tests/blackboard-poc/tools.py | 363 | async def handle_blackboard_post_artifact( | CODE |
| LOW | tests/blackboard-poc/tools.py | 392 | async def handle_blackboard_post_task( | CODE |
| LOW | tests/blackboard-poc/tools.py | 406 | async def handle_blackboard_update_task( | CODE |
| LOW | tests/blackboard-poc/tools.py | 430 | async def handle_blackboard_post_decision( | CODE |
| LOW | tests/blackboard-poc/tools.py | 447 | async def handle_blackboard_post_issue( | CODE |
| LOW | tests/blackboard-poc/orchestrator.py | 323 | async def _wait_for_completion_with_budget(self) -> None: | CODE |
| LOW | tests/blackboard-poc/agent.py | 177 | def _has_pending_deferred_tasks(self) -> bool: | CODE |
| LOW | tests/blackboard-poc/agent.py | 454 | async def _handle_conflict_resolution(self, conflict_result: MergeResult) -> bool: | CODE |
| LOW | scripts/dev/tauri.js | 414 | function createNodePackageCliCommand(packageName, binName, fallbackBinName) { | CODE |
| LOW | scripts/dev/clean-cache-if-large.js | 381 | function pruneStaleIncrementalDirs(targetPath, label) { | CODE |
| LOW⚡ | …ializer/claude_history_handoff/offline_process.test.py | 26 | def test_combines_output_and_preserves_zero_or_nonzero_exit(self): | CODE |
| 2884 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …WorkStation/Chat/Communication/MessagesSidebarRows.tsx | 20 | // ── AggregateMessagesRow ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …WorkStation/Chat/Communication/MessagesSidebarRows.tsx | 64 | // ── AggregateTodoRow ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …WorkStation/Chat/Communication/MessagesSidebarRows.tsx | 108 | // ── AggregateInteractionsRow ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | …les/WorkStation/Chat/Communication/MessagesSidebar.tsx | 24 | // ── Props ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …les/WorkStation/Chat/Communication/MessagesSidebar.tsx | 34 | // ── Component ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …les/WorkStation/Chat/Communication/MessagesSidebar.tsx | 47 | // ── Section content builders ────────────────────────────────────────── | COMMENT |
| MEDIUM | …les/WorkStation/Chat/Communication/MessagesSidebar.tsx | 98 | // ── Tab configuration ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/run.py | 79 | # ── Final Summary ──────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tests/blackboard-poc/config.py | 14 | # ── API ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tests/blackboard-poc/config.py | 22 | # ── Budget ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tests/blackboard-poc/config.py | 28 | # ── Session Strategy ───────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | tests/blackboard-poc/config.py | 37 | # ── Paths ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/config.py | 49 | # ── Agent Definitions ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/memory.py | 95 | # ── Auto-capture (called by tool handlers) ────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/memory.py | 117 | # ── Agent-initiated annotation ────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/memory.py | 138 | # ── Recall ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/memory.py | 193 | # ── Internal ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/blackboard.py | 107 | # ── Token tracking ───────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/blackboard.py | 115 | # ── Event emission ───────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/blackboard.py | 148 | # ── Write operations ─────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/blackboard.py | 393 | # ── Read operations ──────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/blackboard.py | 483 | # ── Dependency Check ──────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/blackboard.py | 512 | # ── Stats ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/tools.py | 24 | # ── Tool Schemas (Anthropic format) ──────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/tools.py | 336 | # ── Tool Handlers ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/orchestrator.py | 57 | # ── Boot ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/orchestrator.py | 130 | # ── Work Item Execution ────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/orchestrator.py | 202 | # ── Aggregate metrics ──────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/orchestrator.py | 288 | # ── Print summary ──────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/orchestrator.py | 388 | # ── Handoff Context ─────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/orchestrator.py | 445 | # ── Shutdown ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/agent.py | 137 | # ── Lifecycle ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/agent.py | 175 | # ── Relevance Check ─────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/agent.py | 252 | # ── Cooldown Check ──────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/agent.py | 266 | # ── Session Strategy ────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/agent.py | 309 | # ── Revive Check ──────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/agent.py | 346 | # ── Main Event Loop ─────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/agent.py | 427 | # ── Worktree (real git operations) ────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/agent.py | 526 | # ── LLM Interaction ─────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/agent.py | 812 | # ── Reflection ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/agent.py | 852 | # ── Sub-agent support ───────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/worktree.py | 50 | # ── Repository Setup ───────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/worktree.py | 71 | # ── Worktree Lifecycle ─────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/worktree.py | 123 | # ── Git Operations ─────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/worktree.py | 250 | # ── Conflict Detection ─────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/worktree.py | 281 | # ── Helpers ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/blackboard-poc/worktree.py | 297 | # ── Low-level git execution ────────────────────────────────── | COMMENT |
| MEDIUM | .cargo/config.toml | 3 | # ── THIS FILE MUST LIVE AT THE REPOSITORY ROOT ─────────────────────────────── | COMMENT |
| MEDIUM⚡ | .cargo/config.toml | 17 | # ───────────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | .cargo/config.toml | 19 | # ── FFmpeg / OpenSSL environment ────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | .cargo/config.toml | 24 | # ── Build performance ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .cargo/config.toml | 80 | # ── macOS / Apple Silicon target ───────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/dev/tauri.js | 35 | // ─── Terminal status bar ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/dev/tauri.js | 220 | // ─── Line routing ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/dev/tauri.js | 340 | // ─── Cleanup ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/dev/tauri.js | 354 | // ─── Start Tauri dev ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/dev/tauri.js | 701 | // ─── Main ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/nightly-full-checks.yml | 38 | # ── Frontend ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/nightly-full-checks.yml | 85 | # ── Production bundle budget ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | .github/workflows/nightly-full-checks.yml | 124 | # ── Dependency audit ──────────────────────────────────────────────────────── | COMMENT |
| 775 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tsconfig.json | 81 | // ============================================ | COMMENT |
| LOW | .archive/src-tauri/crates/ui-indexer/src/types.rs | 1 | //! Types for Component Index | COMMENT |
| LOW | .archive/src-tauri/crates/ui-indexer/src/lib.rs | 1 | //! UI Indexer | COMMENT |
| LOW | .archive/src-tauri/crates/ui-indexer/src/parser/jsx.rs | 1 | //! JSX/TSX Parser using tree-sitter | COMMENT |
| LOW | .archive/src-tauri/crates/ui-indexer/src/parser/vue.rs | 1 | //! Vue SFC Parser | COMMENT |
| LOW | …chive/src-tauri/crates/ui-indexer/src/parser/svelte.rs | 1 | //! Svelte Parser | COMMENT |
| LOW | .archive/src-tauri/crates/lsp/src/broadcast.rs | 1 | //! WebSocket broadcast inversion-of-control point. | COMMENT |
| LOW | .archive/src-tauri/crates/test-runner/src/lib.rs | 1 | //! Test runner — discovery, execution, and result streaming for multiple frameworks | COMMENT |
| LOW | .archive/src-tauri/src/benchmark/mod.rs | 1 | //! Benchmark harness surface (SWE-bench Pro and Terminal-Bench). | COMMENT |
| LOW | .archive/src-tauri/src/benchmark/retention.rs | 1 | //! Bounded retention for the in-memory benchmark registries. | COMMENT |
| LOW | .archive/src/config/routeTabMapping.ts | 61 | COMMENT | |
| LOW | …essionCore/hooks/hostedKey/useHostedKeyActivitySync.ts | 481 | // ============================================ | COMMENT |
| LOW | config/rspack.config.js | 1 | // Rspack dev-server config — the default dev bundler on macOS and Linux; | COMMENT |
| LOW | config/rspack.config.js | 41 | process.env.ORGII_DEV_EAGER_APP === "true" || | COMMENT |
| LOW | config/webpack.config.js | 21 | const isMobileRemoteNativeBuild = | COMMENT |
| LOW | config/webpack.config.js | 61 | (process.env.ORGII_DEV_EAGER_APP === "true" || | COMMENT |
| LOW | config/webpack.config.js | 121 | type: "filesystem", | COMMENT |
| LOW | config/webpack.config.js | 541 | // Split the initial vendor bundle PER ENTRY. `main` | COMMENT |
| LOW | config/webpack.config.js | 841 | // "eager"` (see src/index.tsx). With eval-cheap-module-source-map that | COMMENT |
| LOW | config/vitest.config.ts | 1 | import path from "path"; | COMMENT |
| LOW | config/vitest.config.ts | 41 | // threads, 4 workers -> 219 s, 1.06 GB peak, 3 processes | COMMENT |
| LOW | docs/frontend-ui-audit-2026-06-11/README.md | 61 | # 3. After D1-D4, cross-reference against the existing sweep reports (D2/D3) before | COMMENT |
| LOW | .cargo/config.toml | 1 | # Cargo build configuration | COMMENT |
| LOW | .cargo/config.toml | 21 | # Linux/CI builds must use system pkg-config defaults; macOS developers can set | COMMENT |
| LOW | .cargo/config.toml | 41 | # Symptom it eliminates: | COMMENT |
| LOW | .cargo/config.toml | 61 | # hashes, which is what most edit-rebuild cycles actually hit. | COMMENT |
| LOW | .cargo/config.toml | 81 | [target.aarch64-apple-darwin] | COMMENT |
| LOW | public/index.html | 81 | // The splash paints no plate of its own — it shows the same background | COMMENT |
| LOW | public/index.html | 181 | <script nonce="orgii-codemirror-style"> | COMMENT |
| LOW | scripts/dev/cpu-monitor.sh | 1 | #!/bin/bash | COMMENT |
| LOW | .github/dependabot.yml | 1 | # Dependabot — security updates only. | COMMENT |
| LOW | .github/workflows/nightly-full-checks.yml | 1 | # Nightly whole-tree checks on develop. | COMMENT |
| LOW | .github/workflows/warm-rust-cache.yml | 1 | # Warm the shared Rust cache on every push to develop. | COMMENT |
| LOW | .github/workflows/warm-rust-cache.yml | 21 | name: "Warm Rust cache" | COMMENT |
| LOW | .github/workflows/warm-frontend-cache.yml | 1 | # Warm the frontend dependency caches on develop pushes that change the | COMMENT |
| LOW | .github/workflows/release.yaml | 1 | # Build, sign, notarize, and release ORGII for macOS (Apple Silicon), Windows (x64), and Linux (x64). | COMMENT |
| LOW | .github/workflows/release.yaml | 21 | # .app. They are downloaded at first launch into ~/.orgii/bin/ by the app itself | COMMENT |
| LOW | .github/workflows/unit-tests-develop.yml | 1 | # Whole unit suite on every push to develop. | COMMENT |
| LOW | .github/workflows/ci.yml | 1 | # CI — runs on every pull request, whatever its base branch. | COMMENT |
| LOW | .github/workflows/ci.yml | 281 | COMMENT | |
| LOW | src-tauri/Cargo.toml | 41 | "crates/terminal", | COMMENT |
| LOW | src-tauri/Cargo.toml | 221 | COMMENT | |
| LOW | src-tauri/Cargo.toml | 241 | browser = { path = "crates/browser" } | COMMENT |
| LOW | src-tauri/Cargo.toml | 261 | # event_pipeline_bridge, db_bridge, session_bridge}`; the wire crate fills | COMMENT |
| LOW | src-tauri/Cargo.toml | 281 | # above, NOR the `work_station::db_browser` module that opens local | COMMENT |
| LOW | src-tauri/Cargo.toml | 301 | # machine. Keeps its `#[tauri::command]` macros in-crate (key-vault / git | COMMENT |
| LOW | src-tauri/Cargo.toml | 321 | # workspace cache. The `app` crate re-registers its Tauri commands in | COMMENT |
| LOW | src-tauri/Cargo.toml | 341 | # side depends on the other. | COMMENT |
| LOW | src-tauri/Cargo.toml | 361 | # `commands/handler_list.inc` via bare `file_ops::…` paths. | COMMENT |
| LOW | src-tauri/Cargo.toml | 381 | # `system_services::…` paths. Distinct from the lower-level | COMMENT |
| LOW | src-tauri/Cargo.toml | 401 | # Pure leaf — depends only on the underlying `search` engine crate. | COMMENT |
| LOW | src-tauri/Cargo.toml | 441 | # C build) were used only by the direct-AWS-SDK Kiro Pro SSO login in | COMMENT |
| LOW | src-tauri/Cargo.toml | 461 | COMMENT | |
| LOW | src-tauri/Cargo.toml | 481 | # unify on a single crypto provider across all rustls versions instead | COMMENT |
| LOW | src-tauri/Cargo.toml | 501 | # =========================================== | COMMENT |
| LOW | src-tauri/Cargo.toml | 561 | insta = { version = "1", features = ["yaml", "redactions"] } | COMMENT |
| LOW | src-tauri/Cargo.toml | 581 | # still get the schema-prime side effect that the in-tree `prime_schema()` | COMMENT |
| LOW | src-tauri/Cargo.toml | 601 | # only way to dedupe further is to fork / downgrade tauri-utils, which | COMMENT |
| LOW | src-tauri/Cargo.toml | 621 | # meant every one of the ~900 transitive deps got -O2 on a clean build. That | COMMENT |
| LOW | src-tauri/crates/git-api/src/types.rs | 181 | // ============================================ | COMMENT |
| 1882 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …crates/project-management/src/sync/connection_store.rs | 180 | assert_eq!(created.account_email.as_deref(), Some("user@example.com")); | CODE |
| LOW | …rates/browser/src/scripts/js/inspector-element-info.js | 22 | "placeholder", | CODE |
| LOW | …ri/crates/browser/src/scripts/page_agent/page_agent.js | 125 | "placeholder", | CODE |
| LOW | …i/crates/agent-core/src/specialization/mcp/commands.rs | 550 | mcp_servers: HashMap::from([("docs".to_string(), server_with_secret("placeholder"))]), | CODE |
| LOW | src-tauri/src/market_connection/native_compatibility.rs | 445 | let bundle = fixture(root.path(), "Client.app", "placeholder"); | CODE |
| LOW | src/components/Dropdown/DropdownSearch.tsx | 39 | | "placeholder" | CODE |
| LOW | …ents/ComposerInput/__tests__/serializePillNode.test.ts | 117 | fileName: "Jane Doe", | CODE |
| LOW | src/engines/Simulator/apps/canvas/CanvasApp.test.ts | 187 | createElement("div", { "data-testid": "placeholder" }, title), | CODE |
| LOW | src/engines/Simulator/apps/canvas/CanvasApp.test.ts | 342 | container.querySelector("[data-testid='placeholder']") | CODE |
| LOW | …istory/hooks/__tests__/agentOrgExecutionGroups.test.ts | 158 | const placeholder = entry("placeholder", "old"); | CODE |
| LOW | …scaffold/ActionSystem/actions/guiControlActions.zod.ts | 163 | element.getAttribute("placeholder"), | CODE |
| LOW | src/i18n/locales/zh-Hant/sessions.json | 722 | "placeholder": "輸入消息 — 將發送到 Cursor 探針實例。", | CODE |
| LOW | src/i18n/locales/zh-Hant/settings.json | 462 | "placeholder": "選擇模型" | CODE |
| LOW⚡ | src/i18n/locales/zh-Hant/common.json | 1953 | "placeholder": "搜索文件…" | CODE |
| LOW⚡ | src/i18n/locales/zh-Hant/common.json | 1959 | "placeholder": "搜尋命令...", | CODE |
| LOW⚡ | src/i18n/locales/zh-Hant/common.json | 1965 | "placeholder": "輸入行號…", | CODE |
| LOW | src/i18n/locales/zh-Hant/common.json | 1976 | "placeholder": "搜索符號…", | CODE |
| LOW | src/i18n/locales/zh-Hant/common.json | 1993 | "placeholder": "搜索或輸入命令…", | CODE |
| LOW | src/i18n/locales/zh-Hant/common.json | 2022 | "placeholder": "搜尋 Agent 會話..." | CODE |
| LOW | src/i18n/locales/zh-Hant/common.json | 2027 | "placeholder": "Search across all sessions..." | CODE |
| LOW | src/i18n/locales/zh-Hant/integrations.json | 294 | "placeholder": "例如 claude-sonnet-4-5, gpt-4o...", | CODE |
| LOW | src/i18n/locales/zh-Hant/integrations.json | 1318 | "placeholder": "搜尋 Skills...", | CODE |
| LOW | src/i18n/locales/zh-Hant/projects.json | 458 | "placeholder": "檢視", | CODE |
| LOW | src/i18n/locales/pl/sessions.json | 722 | "placeholder": "Wpisz prompt — zostanie wysłany do instancji próbnej Cursor.", | CODE |
| LOW | src/i18n/locales/pl/settings.json | 462 | "placeholder": "Wybierz model" | CODE |
| LOW⚡ | src/i18n/locales/pl/common.json | 1953 | "placeholder": "Szukaj pliku..." | CODE |
| LOW⚡ | src/i18n/locales/pl/common.json | 1959 | "placeholder": "Szukaj poleceń...", | CODE |
| LOW⚡ | src/i18n/locales/pl/common.json | 1965 | "placeholder": "Wprowadź numer linii...", | CODE |
| LOW | src/i18n/locales/pl/common.json | 1976 | "placeholder": "Szukaj symboli...", | CODE |
| LOW | src/i18n/locales/pl/common.json | 1993 | "placeholder": "Szukaj lub wpisz polecenie...", | CODE |
| LOW | src/i18n/locales/pl/common.json | 2022 | "placeholder": "Szukaj sesji Agent..." | CODE |
| LOW | src/i18n/locales/pl/common.json | 2027 | "placeholder": "Search across all sessions..." | CODE |
| LOW | src/i18n/locales/pl/integrations.json | 293 | "placeholder": "np. claude-sonnet-4-5, gpt-4o...", | CODE |
| LOW | src/i18n/locales/pl/integrations.json | 1282 | "placeholder": "Szukaj Skills...", | CODE |
| LOW | src/i18n/locales/pl/projects.json | 458 | "placeholder": "Widoki", | CODE |
| LOW | src/i18n/locales/vi/sessions.json | 722 | "placeholder": "Nhập lời nhắc — sẽ gửi đến phiên bản probe Cursor.", | CODE |
| LOW | src/i18n/locales/vi/settings.json | 462 | "placeholder": "Chọn mô hình" | CODE |
| LOW⚡ | src/i18n/locales/vi/common.json | 1953 | "placeholder": "Tìm tệp…" | CODE |
| LOW⚡ | src/i18n/locales/vi/common.json | 1959 | "placeholder": "Tìm lệnh...", | CODE |
| LOW⚡ | src/i18n/locales/vi/common.json | 1965 | "placeholder": "Nhập số dòng…", | CODE |
| LOW | src/i18n/locales/vi/common.json | 1976 | "placeholder": "Tìm ký hiệu…", | CODE |
| LOW | src/i18n/locales/vi/common.json | 1993 | "placeholder": "Tìm kiếm hoặc nhập lệnh…", | CODE |
| LOW | src/i18n/locales/vi/common.json | 2022 | "placeholder": "Tìm kiếm phiên Agent..." | CODE |
| LOW | src/i18n/locales/vi/common.json | 2027 | "placeholder": "Search across all sessions..." | CODE |
| LOW | src/i18n/locales/vi/integrations.json | 294 | "placeholder": "ví dụ: claude-sonnet-4-5, gpt-4o...", | CODE |
| LOW | src/i18n/locales/vi/integrations.json | 1289 | "placeholder": "Tìm kiếm Skills...", | CODE |
| LOW | src/i18n/locales/vi/projects.json | 458 | "placeholder": "Chế độ xem", | CODE |
| LOW | src/i18n/locales/ja/sessions.json | 722 | "placeholder": "プロンプトを入力 — Cursor プローブインスタンスに送信されます。", | CODE |
| LOW | src/i18n/locales/ja/settings.json | 462 | "placeholder": "モデルを選択" | CODE |
| LOW⚡ | src/i18n/locales/ja/common.json | 1953 | "placeholder": "ファイルを検索…" | CODE |
| LOW⚡ | src/i18n/locales/ja/common.json | 1959 | "placeholder": "コマンドを検索...", | CODE |
| LOW⚡ | src/i18n/locales/ja/common.json | 1965 | "placeholder": "行番号を入力…", | CODE |
| LOW | src/i18n/locales/ja/common.json | 1976 | "placeholder": "シンボルを検索…", | CODE |
| LOW | src/i18n/locales/ja/common.json | 1993 | "placeholder": "検索するかコマンドを入力…", | CODE |
| LOW | src/i18n/locales/ja/common.json | 2022 | "placeholder": "Agent セッションを検索..." | CODE |
| LOW | src/i18n/locales/ja/common.json | 2027 | "placeholder": "Search across all sessions..." | CODE |
| LOW | src/i18n/locales/ja/integrations.json | 294 | "placeholder": "例: claude-sonnet-4-5, gpt-4o...", | CODE |
| LOW | src/i18n/locales/ja/integrations.json | 1289 | "placeholder": "Skillsを検索...", | CODE |
| LOW | src/i18n/locales/ja/projects.json | 458 | "placeholder": "ビュー", | CODE |
| LOW | src/i18n/locales/ru/sessions.json | 722 | "placeholder": "Введите сообщение — отправится в проб-экземпляр Cursor.", | CODE |
| 140 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .orgii/skills/e2e-testing/SKILL.md | 177 | ## Result-driven orchestration regressions | COMMENT |
| MEDIUM | docs/cloud-architecture-and-scalability.md | 163 | ### Client discipline: strictly event-driven | COMMENT |
| MEDIUM⚡ | docs/frontend-ui-audit-2026-09-13/GLOBAL.md | 295 | | [src/scaffold/GlobalSpotlight/forms/CloneRepo/CloneRepoForm.tsx:120](../../src/scaffold/GlobalSpotlight/forms/CloneRep | CODE |
| MEDIUM⚡ | docs/frontend-ui-audit-2026-09-13/GLOBAL.md | 299 | | [src/scaffold/GlobalSpotlight/palettes/BranchPalette/BranchPullRequestPicker.tsx:429](../../src/scaffold/GlobalSpotlig | CODE |
| MEDIUM⚡ | docs/frontend-ui-audit-2026-09-13/GLOBAL.md | 301 | | [src/scaffold/GlobalSpotlight/palettes/DispatchCategoryPalette/CliAgentListFilterSwitch.tsx:22](../../src/scaffold/Glo | CODE |
| MEDIUM⚡ | docs/frontend-ui-audit-2026-09-13/GLOBAL.md | 307 | | [src/scaffold/GlobalSpotlight/palettes/WorkingDirectoryPalette/useWorkingDirectoryPaletteWorkspaces.tsx:370](../../src | CODE |
| MEDIUM⚡ | docs/frontend-ui-audit-2026-09-13/GLOBAL.md | 308 | | [src/scaffold/GlobalSpotlight/palettes/WorkingDirectoryPalette/WorkingDirectoryDropdown.tsx:130](../../src/scaffold/Gl | CODE |
| MEDIUM⚡ | docs/frontend-ui-audit-2026-09-13/GLOBAL.md | 310 | | [src/scaffold/GlobalSpotlight/views/SpotlightConfirmationView.tsx:73](../../src/scaffold/GlobalSpotlight/views/Spotlig | CODE |
| MEDIUM⚡ | docs/frontend-ui-audit-2026-09-13/GLOBAL.md | 311 | | [src/scaffold/NavigationSidebar/blocks/SidebarBottomBar.tsx:208](../../src/scaffold/NavigationSidebar/blocks/SidebarBo | CODE |
| MEDIUM⚡ | docs/frontend-ui-audit-2026-09-13/GLOBAL.md | 312 | | [src/scaffold/NavigationSidebar/blocks/SidebarSettingsMenuButton.tsx:352](../../src/scaffold/NavigationSidebar/blocks/ | CODE |
| MEDIUM⚡ | docs/frontend-ui-audit-2026-09-13/GLOBAL.md | 314 | | [src/scaffold/NavigationSidebar/connectors/SidebarOrgSelector.tsx:83](../../src/scaffold/NavigationSidebar/connectors/ | CODE |
| MEDIUM | …ntend-ui-audit-2026-09-13/RemainingControlsFollowup.md | 32 | | [NavigationMenuRow:123](../../src/scaffold/NavigationSidebar/components/NavigationMenu/NavigationMenu/NavigationMenuRo | CODE |
| MEDIUM | …ntend-ui-audit-2026-09-13/RemainingControlsFollowup.md | 33 | | [NavigationSidebar:309](../../src/scaffold/NavigationSidebar/variants/NavigationSidebar.tsx#L309), [388](../../src/sca | CODE |
| MEDIUM | docs/contributing/wiki/Architecture-Overview.md | 53 | ### `src/scaffold/` — App shell | COMMENT |
| MEDIUM | …cture-audit-2026-06-17/chatpanel-architecture-audit.md | 199 | ### 🟢 Low risk: documentation / guardrails | COMMENT |
| MEDIUM | src-tauri/crates/orgtrack-core/src/sources/qoder/mod.rs | 1 | //! Qoder (Alibaba's agentic IDE, VS Code family) imported history reader. | COMMENT |
| MEDIUM | …/orgtrack-core/src/sources/cursor_cli/history_tests.rs | 77 | r#"{"role":"system","content":"You are a powerful agentic AI coding assistant."}"#, | CODE |
| MEDIUM | …/orgtrack-core/src/sources/cursor_cli/history_tests.rs | 224 | // scaffold are stripped, and the loop re-injection is collapsed. | COMMENT |
| MEDIUM | …/orgtrack-core/src/sources/cursor_cli/history_tests.rs | 282 | // Element-picker form: request extracted, injected scaffold dropped. | COMMENT |
| MEDIUM | …es/orgtrack-core/src/sources/cursor_cli/history/mod.rs | 32 | //! `USER REQUEST:` / `--- Model: …` / element-picker scaffold, sometimes | COMMENT |
| MEDIUM⚡ | src-tauri/crates/agent-core/Cargo.toml | 43 | # Sibling subsystems that agent_core orchestrates over. Each is a leaf | COMMENT |
| MEDIUM | …ates/agent-core/src/core/turn_executor/repeat_guard.rs | 1 | //! Progress-aware repeated-tool-call guard for the agentic loop. | COMMENT |
| MEDIUM | …ri/crates/agent-core/src/core/turn_executor/execute.rs | 1 | //! State-machine coordinator for one agentic turn. | COMMENT |
| MEDIUM | …ri/crates/agent-core/src/core/turn_executor/execute.rs | 30 | /// This is the generic agentic loop shared by all agent sessions. The public | COMMENT |
| MEDIUM | …-tauri/crates/agent-core/src/core/turn_executor/mod.rs | 1 | //! Reusable agentic turn processor. | COMMENT |
| MEDIUM | …ates/agent-core/src/core/model_context/microcompact.rs | 11 | //! gets sent. Within a fast agentic loop (gap < threshold) we skip MC | COMMENT |
| MEDIUM | …ates/agent-core/src/core/model_context/microcompact.rs | 121 | /// message exceeds `config.gap_threshold_secs`. Within a fast agentic | COMMENT |
| MEDIUM | …ates/agent-core/src/core/model_context/microcompact.rs | 235 | /// (~100–500 KB base64), and a long agentic loop easily produces 20+. | COMMENT |
| MEDIUM | …ates/agent-core/src/core/model_context/microcompact.rs | 256 | /// agentic loop doing 30 clicks in 5 minutes. | COMMENT |
| MEDIUM | …t-core/src/core/providers/anthropic_native/messages.rs | 277 | // 3-breakpoint Anthropic agentic-loop pattern. Without BP3 the entire | COMMENT |
| MEDIUM | …re/src/core/session/prompt/section_builders/channel.rs | 22 | // a normal agentic loop. Aligning the rounding to the cache TTL | COMMENT |
| MEDIUM⚡ | src/App.tsx | 5 | // registers it into the scaffold action system (see | COMMENT |
| MEDIUM⚡ | src/App.tsx | 6 | // `scaffold/ActionSystem/coreActionProvider`). Imported for that side effect at | COMMENT |
| MEDIUM⚡ | src/App.tsx | 8 | // `ActionSystemProvider` mounts — the scaffold must not import it itself. | COMMENT |
| MEDIUM | src/util/core/storage/cleanup.retention.test.ts | 461 | // -> src/scaffold/NavigationSidebar/connectors/ | COMMENT |
| MEDIUM | src/components/ModelIcon/modelNameIcons.ts | 199 | // Qoder IDE (Alibaba's agentic IDE) | COMMENT |
| MEDIUM | …ystem/schema/__tests__/actionRegistryBootstrap.test.ts | 57 | // Called exactly as `ActionSystemProvider` calls it — from the scaffold, | COMMENT |
| MEDIUM | …dules/MainApp/Settings/sections/DevelopmentSection.tsx | 15 | // `@src/scaffold/ModalSystem/variants/DevMockScenarios`. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src-tauri/crates/git-api/src/commands/ai.rs | 212 | // Step 1: Direct API key providers (cheapest first) | COMMENT |
| LOW | src-tauri/crates/git-api/src/commands/ai.rs | 237 | // Step 2: CLI agent fallback — use stored api_key via standard provider APIs | COMMENT |
| LOW | src-tauri/crates/git-api/src/commands/ai.rs | 318 | // Step 3: Cursor session token → Connect RPC to Cursor's StreamChat API | COMMENT |
| LOW⚡ | src-tauri/crates/e2e-test/src/sync_webhook.rs | 327 | // Step 1: deliver a signed delivery so the freshness | COMMENT |
| LOW⚡ | src-tauri/crates/e2e-test/src/sync_webhook.rs | 335 | // Step 2: simulate "10 minutes elapsed without another | COMMENT |
| LOW⚡ | …rates/agent-core/src/foundation/security/policy/mod.rs | 302 | // Step 1: Check blocklist first — blocked commands are always denied | COMMENT |
| LOW⚡ | …rates/agent-core/src/foundation/security/policy/mod.rs | 307 | // Step 2: Check explicit confirmation patterns. | COMMENT |
| LOW⚡ | …rates/agent-core/src/foundation/security/policy/mod.rs | 315 | // Step 3: Classify risk for command-policy checks. | COMMENT |
| LOW | …gent_sessions/event_pipeline/ingestion/consolidator.rs | 20 | // Step 0: filter empty/invalid | COMMENT |
| LOW | src-tauri/src/api/agent/test/sync.rs | 820 | // Step 1: write the work item itself. The Frontmatter `id` | COMMENT |
| LOW | src-tauri/src/api/agent/test/sync.rs | 863 | // Step 2: stamp the per-field watermark to (`local`, `local_mtime`) | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 141 | // Step 1: file-history TTL (30d) — drops entire session dirs + DB rows. | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 147 | // Step 2: per-session manifest cap on everything that survived TTL. | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 158 | // Step 3: log files older than LOG_TTL_DAYS. | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 164 | // Step 4: orphan per-session dirs whose owning session is no longer in | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 225 | // Step 5: screenshots TTL — diagnostic-only files, aged aggressively. | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 231 | // Step 6: oversized tool-result spill TTL (recursive per-session dirs). | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 237 | // Step 7: Plan-mode plan markdown TTL (recursive — nested per-agent dirs). | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 243 | // Step 8: Merkle snapshot TTL — pruned snapshots auto-rebuild on next access. | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 249 | // Step 9: session-image orphan eviction — aged files whose filename no | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 256 | // Step 10: session-cache TTL — drops `sessions`/`events` rows older | COMMENT |
| LOW | …ht/palettes/UnifiedModelPalette/TwoColumnModelBody.tsx | 185 | // Step 1 / Step 2 titles already label the two columns. | COMMENT |
| LOW⚡ | …rimarySidebar/content/GitHistoryContent/graphLayout.ts | 142 | // Step 1: Find which lane this commit belongs to | COMMENT |
| LOW⚡ | …rimarySidebar/content/GitHistoryContent/graphLayout.ts | 152 | // Step 2: Draw incoming line from above (skip for first row) | COMMENT |
| LOW⚡ | …rimarySidebar/content/GitHistoryContent/graphLayout.ts | 162 | // Step 3: Draw pass-through lines for other active lanes | COMMENT |
| LOW | …rimarySidebar/content/GitHistoryContent/graphLayout.ts | 180 | // Step 4: Process parents | COMMENT |
| LOW | …rimarySidebar/content/GitHistoryContent/graphLayout.ts | 234 | // Step 5: Compact lanes | COMMENT |
| LOW⚡ | src/store/session/__tests__/planApprovalAtom.test.ts | 274 | // Step 1: live WS push sets R2 | COMMENT |
| LOW⚡ | src/store/session/__tests__/planApprovalAtom.test.ts | 278 | // Step 2: stale cold-start RPC resolves with R1 — must be ignored | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src-tauri/crates/git-api/src/commands/ai.rs | 212 | // Step 1: Direct API key providers (cheapest first) | COMMENT |
| LOW | src-tauri/crates/git-api/src/commands/ai.rs | 237 | // Step 2: CLI agent fallback — use stored api_key via standard provider APIs | COMMENT |
| LOW | src-tauri/crates/git-api/src/commands/ai.rs | 318 | // Step 3: Cursor session token → Connect RPC to Cursor's StreamChat API | COMMENT |
| LOW⚡ | src-tauri/crates/e2e-test/src/sync_webhook.rs | 327 | // Step 1: deliver a signed delivery so the freshness | COMMENT |
| LOW⚡ | src-tauri/crates/e2e-test/src/sync_webhook.rs | 335 | // Step 2: simulate "10 minutes elapsed without another | COMMENT |
| LOW⚡ | …rates/agent-core/src/foundation/security/policy/mod.rs | 302 | // Step 1: Check blocklist first — blocked commands are always denied | COMMENT |
| LOW⚡ | …rates/agent-core/src/foundation/security/policy/mod.rs | 307 | // Step 2: Check explicit confirmation patterns. | COMMENT |
| LOW⚡ | …rates/agent-core/src/foundation/security/policy/mod.rs | 315 | // Step 3: Classify risk for command-policy checks. | COMMENT |
| LOW | …gent_sessions/event_pipeline/ingestion/consolidator.rs | 20 | // Step 0: filter empty/invalid | COMMENT |
| LOW | src-tauri/src/api/agent/test/sync.rs | 820 | // Step 1: write the work item itself. The Frontmatter `id` | COMMENT |
| LOW | src-tauri/src/api/agent/test/sync.rs | 863 | // Step 2: stamp the per-field watermark to (`local`, `local_mtime`) | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 141 | // Step 1: file-history TTL (30d) — drops entire session dirs + DB rows. | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 147 | // Step 2: per-session manifest cap on everything that survived TTL. | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 158 | // Step 3: log files older than LOG_TTL_DAYS. | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 164 | // Step 4: orphan per-session dirs whose owning session is no longer in | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 225 | // Step 5: screenshots TTL — diagnostic-only files, aged aggressively. | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 231 | // Step 6: oversized tool-result spill TTL (recursive per-session dirs). | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 237 | // Step 7: Plan-mode plan markdown TTL (recursive — nested per-agent dirs). | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 243 | // Step 8: Merkle snapshot TTL — pruned snapshots auto-rebuild on next access. | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 249 | // Step 9: session-image orphan eviction — aged files whose filename no | COMMENT |
| LOW⚡ | src-tauri/src/infrastructure/housekeeping.rs | 256 | // Step 10: session-cache TTL — drops `sessions`/`events` rows older | COMMENT |
| LOW⚡ | …rimarySidebar/content/GitHistoryContent/graphLayout.ts | 142 | // Step 1: Find which lane this commit belongs to | COMMENT |
| LOW⚡ | …rimarySidebar/content/GitHistoryContent/graphLayout.ts | 152 | // Step 2: Draw incoming line from above (skip for first row) | COMMENT |
| LOW⚡ | …rimarySidebar/content/GitHistoryContent/graphLayout.ts | 162 | // Step 3: Draw pass-through lines for other active lanes | COMMENT |
| LOW | …rimarySidebar/content/GitHistoryContent/graphLayout.ts | 180 | // Step 4: Process parents | COMMENT |
| LOW | …rimarySidebar/content/GitHistoryContent/graphLayout.ts | 234 | // Step 5: Compact lanes | COMMENT |
| LOW⚡ | src/store/session/__tests__/planApprovalAtom.test.ts | 274 | // Step 1: live WS push sets R2 | COMMENT |
| LOW⚡ | src/store/session/__tests__/planApprovalAtom.test.ts | 278 | // Step 2: stale cold-start RPC resolves with R1 — must be ignored | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …tecture-audit-2026-09-20/native_codex_refresh_probe.py | 145 | except asyncio.CancelledError:pass | CODE |
| HIGH | …tecture-audit-2026-09-20/native_codex_refresh_probe.py | 45 | except (BrokenPipeError,ConnectionResetError):pass | CODE |
| HIGH | …rates/agent-cli/examples/codex_history_native_probe.py | 120 | except ProcessLookupError:pass | CODE |
| HIGH | …rates/agent-cli/examples/codex_history_native_probe.py | 567 | except ProcessLookupError:pass | CODE |
| HIGH | …rates/agent-cli/examples/codex_history_native_probe.py | 573 | except ProcessLookupError:pass | CODE |
| HIGH | …rates/agent-cli/examples/codex_history_native_probe.py | 576 | except Exception:pass | CODE |
| HIGH | …rates/agent-cli/examples/codex_history_native_probe.py | 88 | except ValueError: pass | CODE |
| HIGH | …materializer/claude_history_handoff/offline_process.py | 20 | except ProcessLookupError: | CODE |
| HIGH | …materializer/claude_history_handoff/offline_process.py | 34 | except ProcessLookupError: | CODE |
| HIGH | …ializer/claude_history_handoff/offline_process.test.py | 128 | except ProcessLookupError: | CODE |
| HIGH | …ializer/claude_history_handoff/offline_process.test.py | 89 | except ProcessLookupError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …s/agent-core/src/core/session/turn/processor/prompt.rs | 428 | if !self.runtime.resolved.skills.source_dirs.is_empty() { | CODE |
| CRITICAL | …agent-core/src/core/session/turn/processor/prefetch.rs | 340 | let disabled_skills = self.runtime.resolved.skills.disabled.clone(); | CODE |
| CRITICAL | …agent-core/src/core/session/turn/processor/prefetch.rs | 341 | let source_dirs = self.runtime.resolved.skills.source_dirs.clone(); | CODE |
| CRITICAL | …alInteractive/__tests__/terminalPty.connection.test.ts | 156 | shared.terminalRef.current.write.mock.calls.flat().join("") | CODE |
| CRITICAL | …alInteractive/__tests__/terminalPty.connection.test.ts | 221 | connection.terminalRef.current.write.mock.calls.flat().join("") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/blackboard-poc/run.py | 12 | CODE | |
| LOW | tests/blackboard-poc/test_dry_run.py | 18 | CODE | |
| LOW | tests/blackboard-poc/test_dry_run.py | 22 | CODE | |
| LOW | tests/blackboard-poc/run_tests.py | 17 | CODE | |
| LOW | tests/blackboard-poc/memory.py | 12 | CODE | |
| LOW | tests/blackboard-poc/blackboard.py | 16 | CODE | |
| LOW | tests/blackboard-poc/tools.py | 13 | CODE | |
| LOW | tests/blackboard-poc/trajectory.py | 6 | CODE | |
| LOW | tests/blackboard-poc/orchestrator.py | 15 | CODE | |
| LOW | tests/blackboard-poc/orchestrator.py | 22 | CODE | |
| LOW | tests/blackboard-poc/agent.py | 12 | CODE | |
| LOW | tests/blackboard-poc/worktree.py | 15 | CODE | |
| LOW | tests/blackboard-poc/worktree.py | 19 | CODE | |
| LOW | …itecture-audit-2026-09-20/native_kiro_history_probe.py | 9 | CODE | |
| LOW | …tecture-audit-2026-09-20/native_codex_history_probe.py | 9 | CODE | |
| LOW | scripts/tools/download_sidecars.py | 9 | CODE | |
| LOW | src-tauri/resources/download_models.py | 8 | CODE | |
| LOW | …lizer/claude_history_handoff/offline_resume_fixture.py | 1 | CODE | |
| LOW | …lizer/claude_history_handoff/offline_resume_fixture.py | 1 | CODE | |
| LOW | …materializer/claude_history_handoff/offline_process.py | 2 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/blackboard-poc/blackboard.py | 198 | CODE | |
| LOW | tests/blackboard-poc/blackboard.py | 485 | CODE | |
| LOW | tests/blackboard-poc/blackboard.py | 499 | CODE | |
| LOW | tests/blackboard-poc/tools.py | 406 | CODE | |
| LOW | tests/blackboard-poc/trajectory.py | 46 | CODE | |
| LOW | tests/blackboard-poc/orchestrator.py | 323 | CODE | |
| LOW | tests/blackboard-poc/agent.py | 187 | CODE | |
| LOW | tests/blackboard-poc/agent.py | 268 | CODE | |
| LOW | tests/blackboard-poc/agent.py | 348 | CODE | |
| LOW | tests/blackboard-poc/agent.py | 633 | CODE | |
| LOW | tests/blackboard-poc/agent.py | 735 | CODE | |
| LOW | tests/blackboard-poc/agent.py | 854 | CODE | |
| LOW | scripts/appearance/emitCodexSkins.py | 79 | CODE | |
| LOW | scripts/appearance/deriveCodexSeeds.py | 130 | CODE | |
| LOW | scripts/appearance/deriveCodexSeeds.py | 239 | CODE | |
| LOW | scripts/verification/harness-connection-cli.py | 17 | CODE | |
| LOW | …rates/agent-cli/examples/codex_history_native_probe.py | 137 | CODE | |
| LOW | …lizer/claude_history_handoff/offline_resume_fixture.py | 6 | CODE | |
| LOW | …materializer/claude_history_handoff/offline_process.py | 42 | CODE | |
| LOW | …ializer/claude_history_handoff/offline_process.test.py | 57 | CODE | |
| LOW | …ializer/claude_history_handoff/offline_process.test.py | 92 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src-tauri/crates/bin-provider-key-check/Cargo.toml | 7 | # Headless provider API key validation harness. Reuses `key_vault`'s | COMMENT |
| MEDIUM | …uri/crates/orgtrack-core/src/sources/codex/app/meta.rs | 64 | // Session totals are accumulated from per-round deltas (robust to codex's | COMMENT |
| MEDIUM | src-tauri/src/agent_sessions/cli/parsers/opencode.rs | 51 | || value.starts_with("# comprehensive `") | CODE |
| MEDIUM | src-tauri/src/agent_sessions/cli/parsers/opencode.rs | 52 | || value.starts_with("# comprehensive .rs") | CODE |
| MEDIUM | …t_sessions/event_pipeline/ingestion/prompt_backfill.rs | 21 | || value.starts_with("# comprehensive `") | CODE |
| MEDIUM | …t_sessions/event_pipeline/ingestion/prompt_backfill.rs | 22 | || value.starts_with("# comprehensive .rs") | CODE |
| MEDIUM | …Panel/events/interactive_events/ask-question/index.tsx | 84 | // anchors, which is robust against answer text containing `", "`, commas, | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/blackboard-poc/run_tests.py | 212 | print(f"Error: {exc}") | CODE |
| LOW | tests/blackboard-poc/agent.py | 649 | except Exception as exc: | CODE |
| LOW | tests/blackboard-poc/agent.py | 712 | except Exception as exc: | CODE |
| LOW | tests/blackboard-poc/agent.py | 875 | except Exception as exc: | CODE |
| LOW | tests/blackboard-poc/agent.py | 903 | except Exception as exc: | CODE |
| LOW | .github/workflows/ios-testflight.yml | 180 | except Exception as error: | CODE |
| LOW | …rates/agent-cli/examples/codex_history_native_probe.py | 555 | except Exception as error: | STRING |
| LOW | …rates/agent-cli/examples/codex_history_native_probe.py | 576 | except Exception:pass | STRING |
| LOW | …rates/agent-cli/examples/codex_history_native_probe.py | 585 | except Exception as error: RESULT['schemaEvidence'][app.label]={'inspectionError':type(error).__name__} | STRING |
| LOW | src-tauri/resources/download_models.py | 32 | except Exception as e: | CODE |
| LOW | src-tauri/resources/download_models.py | 149 | except Exception as e: | CODE |
| LOW | …izer/claude_history_handoff/offline_fixture_capture.py | 117 | except Exception as error: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …track-core/src/sources/claude_code/history/metadata.rs | 281 | // wins, then the AI-generated title, then the derived/summary title, | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/tools/download.py | 93 | # Check if the node binary already exists in the current folder | COMMENT |
| LOW | …re/src/core/tools/impls/coding/render_inline_canvas.rs | 17 | //! ## Return value | COMMENT |
| LOW | src-tauri/resources/download_models.py | 113 | # Check if already installed | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …pty_commands/integration_scripts/shellIntegration.bash | 4 | # This file is used as --init-file. It sources the user's login/rc | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/dev/cpu-monitor.sh | 10 | # Usage: | COMMENT |