Native web workspace for Hermes Agent — chat, terminal, memory, skills, inspector.
This report summarizes scanner evidence for outsourc-e/hermes-workspace, a JavaScript project with 6,780 GitHub stars. SynthScan examined 243,326 lines of code across 1006 source files, recording 523 pattern matches distributed across 14 syntactic categories. The legacy adjusted pattern signal is 3.9 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 333 finding(s).
Are imports declared and package/API names verified? 15 finding(s).
Are wrappers, guards, and repeated structures necessary? 459 finding(s).
Which changes need focused human review? 523 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 523 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | install.sh | 23 | # ─── helpers ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | install.sh | 100 | # ─── preflight ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | install.sh | 131 | # ─── install hermes-agent (delegate to Nous upstream installer) ────────── | COMMENT |
| MEDIUM | install.sh | 163 | # ─── clone workspace ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | install.sh | 179 | # ─── env + install ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | install.sh | 219 | # ─── seed Hermes skills (Conductor needs workspace-dispatch) ───────────── | COMMENT |
| MEDIUM | install.sh | 236 | # ─── macOS LaunchAgent (plist) ─────────────────────────────────────────── | COMMENT |
| MEDIUM | install.sh | 277 | # ─── done ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | playground-ws-worker/src/worker.ts | 144 | // ───── Persistence helpers ───── | COMMENT |
| MEDIUM | playground-ws-worker/src/worker.ts | 256 | // ───── Alarm-driven prune ───── | COMMENT |
| MEDIUM | playground-ws-worker/src/worker.ts | 287 | // ───── Hibernation-safe socket helpers ───── | COMMENT |
| MEDIUM | playground-ws-worker/src/worker.ts | 386 | // ───── Fetch handler ───── | COMMENT |
| MEDIUM | playground-ws-worker/src/worker.ts | 420 | // ───── HTTP polling endpoints (reliable fallback for WebSockets) ───── | COMMENT |
| MEDIUM | playground-ws-worker/src/worker.ts | 588 | // ───── Hibernation event handlers ───── | COMMENT |
| MEDIUM | src/server/swarm-lifecycle.ts | 145 | // ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | src/server/swarm-lifecycle.ts | 149 | // ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | src/server/claude-api.ts | 33 | // ── Types ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/claude-api.ts | 72 | // ── Helpers ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/claude-api.ts | 120 | // ── Health ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/claude-api.ts | 126 | // ── Sessions ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/claude-api.ts | 239 | // ── Conversion helpers (Claude → Chat format) ───────────────── | COMMENT |
| MEDIUM | src/server/claude-api.ts | 360 | // ── Chat (streaming) ───────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/claude-api.ts | 487 | // ── Memory ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/claude-api.ts | 493 | // ── Skills ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/claude-api.ts | 507 | // ── Config ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/claude-api.ts | 539 | // ── Models ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/claude-api.ts | 548 | // ── Connection check ───────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/knowledge-browser.ts | 120 | // ─── Legacy env-var fallback ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/knowledge-browser.ts | 132 | // ─── GitHub Knowledge Provider ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/knowledge-browser.ts | 229 | // ─── Config-aware root resolution ────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/knowledge-browser.ts | 294 | // ─── Path helpers ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/knowledge-browser.ts | 322 | // ─── Page parsing ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/chat-event-bus.ts | 10 | // ─── Singleton state (survives Vite HMR via globalThis) ───────────────── | COMMENT |
| MEDIUM | src/server/gateway-capabilities.ts | 160 | // ── Types ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/gateway-capabilities.ts | 231 | // ── State ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/gateway-capabilities.ts | 406 | // ── Probing ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/gateway-capabilities.ts | 926 | // ── Accessors ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/provider-usage.ts | 16 | // ── Types ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/provider-usage.ts | 52 | // ── Helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/provider-usage.ts | 67 | // ── Claude OAuth ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/provider-usage.ts | 429 | // ── Codex (OpenAI ChatGPT/Codex CLI OAuth) ────────────────────────────────── | COMMENT |
| MEDIUM | src/server/provider-usage.ts | 768 | // ── OpenAI (API Key) ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/provider-usage.ts | 888 | // ── OpenRouter ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/provider-usage.ts | 981 | // ── Gemini (Google AI Studio) ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/provider-usage.ts | 1059 | // ── Aggregate ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/gateway.ts | 56 | // ── Device Identity (Ed25519) ───────────────────────────────────── | COMMENT |
| MEDIUM | src/server/gateway.ts | 102 | // ── Constants ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/server/gateway.ts | 110 | // ── Circuit breaker ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/screens/chat/components/chat-sidebar.tsx | 139 | // ── Reusable nav item ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/screens/chat/components/chat-sidebar.tsx | 333 | // ── Last-visited route tracking ───────────────────────────────────────── | COMMENT |
| MEDIUM | src/screens/chat/components/chat-sidebar.tsx | 359 | // ── Section header ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/screens/chat/components/chat-sidebar.tsx | 443 | // ── Collapsible section wrapper ───────────────────────────────────────── | COMMENT |
| MEDIUM | src/screens/chat/components/chat-sidebar.tsx | 644 | // ── Persist helper ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/screens/chat/components/chat-sidebar.tsx | 673 | // ── Main component ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/screens/chat/components/chat-sidebar.tsx | 937 | // ── Nav definitions ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | …screens/playground/hooks/use-playground-multiplayer.ts | 368 | // ───── HTTP polling transport (reliable fallback) ───── | COMMENT |
| MEDIUM | src/screens/agora/hooks/use-agora-room.ts | 56 | // ── Movement (WASD / arrows) ─────────────────────────────── | COMMENT |
| MEDIUM | src/screens/agora/hooks/use-agora-room.ts | 118 | // ── Ambient drift for fake users ────────────────────────── | COMMENT |
| MEDIUM | src/screens/agora/hooks/use-agora-room.ts | 132 | // ── Tap-to-walk (mobile) ─────────────────────────────────── | COMMENT |
| MEDIUM | src/screens/agora/hooks/use-agora-room.ts | 157 | // ── Chat ────────────────────────────────────────────────── | COMMENT |
| 107 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/stores/chat-store.ts | 396 | function stripFinalTagsFromMessage(msg: ChatMessage): ChatMessage { | CODE |
| LOW | src/stores/chat-store.ts | 482 | function getMessageRealtimeSequence( | CODE |
| LOW | src/stores/chat-store.ts | 551 | function sortMessagesChronologically( | CODE |
| LOW | src/stores/chat-store.ts | 564 | function isExternalInboundUserSource(source: unknown): boolean { | CODE |
| LOW | src/stores/chat-store.ts | 587 | function isOptimisticUserCandidate( | CODE |
| LOW | src/stores/chat-store.ts | 598 | function messageMultipartSignature( | CODE |
| LOW | src/stores/chat-store.ts | 1371 | function ensureAssistantTextContent(msg: ChatMessage): ChatMessage { | CODE |
| LOW | src/stores/chat-store.ts | 1384 | function mergeRealtimeAssistantMetadata( | CODE |
| LOW | src/stores/mission-store.ts | 660 | export function saveMissionStoreBeforeUnload(): void { | CODE |
| LOW | src/server/swarm-runtime-reset.ts | 12 | export function listResettableSwarmWorkerIds(): Array<string> { | CODE |
| LOW | src/server/swarm-runtime-reset.ts | 16 | export function resolveResetTargetWorkerIds(workerIds?: Array<string> | null): { | CODE |
| LOW | src/server/swarm-profile-config.ts | 144 | export function renderSwarmWorkerIdentity(worker: SwarmWorkerIdentity): string { | CODE |
| LOW | src/server/swarm-lifecycle.ts | 326 | function readRuntimeMissionContext(workerId: string): { missionId: string | null; assignmentId: string | null } { | CODE |
| LOW | src/server/external-memory-browser.ts | 118 | export function listExternalMemoryProviders(): { | CODE |
| LOW | src/server/external-memory-browser.ts | 295 | export function listExternalMemoryCandidates(options: { | CODE |
| LOW | src/server/external-memory-browser.ts | 320 | export function searchExternalMemoryCandidates(options: { | CODE |
| LOW | src/server/external-memory-browser.ts | 356 | export function editExternalMemoryCandidate(options: { | CODE |
| LOW | src/server/external-memory-browser.ts | 371 | export function approveExternalMemoryCandidate(options: { | CODE |
| LOW | src/server/external-memory-browser.ts | 382 | export function rejectExternalMemoryCandidate(options: { | CODE |
| LOW | src/server/external-memory-browser.ts | 395 | export function deleteExternalMemoryCandidate(options: { | CODE |
| LOW | src/server/swarm-missions.ts | 222 | export function markMissionAssignmentDispatched(input: { | CODE |
| LOW | src/server/swarm-missions.ts | 307 | export function recordMissionAssignmentBlocked(input: { | CODE |
| LOW | src/server/swarm-missions.ts | 364 | export function appendMissionContinuation(input: { | CODE |
| LOW | src/server/swarm-missions.ts | 473 | export function markMissionAssignmentReviewed(input: { missionId?: string | null; assignmentId: string; reviewerId?: str | CODE |
| LOW | src/server/swarm-missions.ts | 490 | export function markMissionAssignmentsReviewedByWorker(input: { | CODE |
| LOW | src/server/knowledge-browser.ts | 74 | function normalizeFrontmatterValue(input: unknown): string | undefined { | CODE |
| LOW | src/server/knowledge-browser.ts | 296 | function normalizeRelativeKnowledgePath(input: string): string { | CODE |
| LOW | src/server/profiles-browser.ts | 71 | function stickyActiveProfileEnabled(): boolean { | CODE |
| LOW | src/server/profiles-browser.ts | 90 | function validateProfileIdentifier(name: string): string { | CODE |
| LOW | src/server/auth-middleware.ts | 157 | export function isPasswordProtectionEnabled(): boolean { | CODE |
| LOW | src/server/auth-middleware.ts | 189 | export function getSessionTokenFromCookie( | CODE |
| LOW | src/server/session-utils.ts | 63 | export function shouldBindMainToPortableSession({ | CODE |
| LOW | src/server/portable-history.ts | 6 | export function shouldReplayPortableHistory(options?: { | CODE |
| LOW | src/server/portable-history.ts | 22 | export function selectPortableConversationHistory( | CODE |
| LOW | src/server/openai-compat-api.ts | 156 | function parseClaudeToolProgressChunk(payload: string): StreamChunkType | null { | CODE |
| LOW | src/server/hermes-cron-profiles.ts | 205 | function validateProfileAndMaybeJob(profile: string, jobId?: string): void { | CODE |
| LOW | src/server/hermes-config-store.ts | 234 | function applyRemoveCustomProvider( | CODE |
| LOW | src/server/claude-tasks-backend.ts | 51 | function mapKanbanStatusToTaskColumn(status: string): TaskColumn { | CODE |
| LOW | src/server/claude-tasks-backend.ts | 69 | function mapTaskColumnToKanbanStatus(column: TaskColumn): 'backlog' | 'ready' | 'running' | 'review' | 'blocked' | 'done | CODE |
| LOW | src/server/claude-tasks-backend.ts | 113 | export function getClaudeTasksBackendMeta(): KanbanBackendMeta { | CODE |
| LOW | src/server/aioncore-companion.ts | 101 | export function normalizeExternalAgentRuntime( | CODE |
| LOW | src/server/aioncore-companion.ts | 180 | export async function getAionCoreCompanionSnapshot(): Promise<AionCoreCompanionSnapshot> { | CODE |
| LOW | src/server/aioncore-companion.ts | 210 | export async function healthCheckExternalAgentRuntime( | CODE |
| LOW | src/server/swarm-roster.ts | 158 | export function resolveSwarmWorkerDisplayName(workerId: string, worker?: Pick<SwarmRosterWorker, 'name'> | null): string | CODE |
| LOW | src/server/swarm-mode.ts | 45 | export function applySwarmModeToLoopFlags(input: { | CODE |
| LOW | src/server/tool-artifacts-store.ts | 130 | export function createOrUpdateToolArtifact(input: CreateArtifactInput): ToolArtifact { | CODE |
| LOW | src/server/context-usage.ts | 67 | function stringifyStructuredContent(content: unknown): string { | CODE |
| LOW | src/server/context-usage.ts | 93 | export function estimateContextTokensFromMessages( | CODE |
| LOW | src/server/context-usage.ts | 121 | export function estimateContextTokensFromCacheRead( | CODE |
| LOW | src/server/context-usage.ts | 129 | export function estimateContextTokensFromSessionUsage( | CODE |
| LOW | src/server/context-usage.ts | 185 | function readConfiguredContextLength(payload: Record<string, unknown>): number { | CODE |
| LOW | src/server/context-usage.ts | 207 | async function readConfiguredModelContext(): Promise<ResolvedModelContext | null> { | CODE |
| LOW | src/server/context-usage.ts | 232 | async function readGatewayRuntimeSnapshot( | CODE |
| LOW | src/server/context-usage.ts | 313 | function extractComparableLocalTurns( | CODE |
| LOW | src/server/context-usage.ts | 328 | async function resolveMirroredRuntimeSessionId( | CODE |
| LOW | src/server/update-system.ts | 77 | function persistPendingReleaseNotes(sections: Array<ReleaseNoteSection>): void { | CODE |
| LOW | src/server/update-system.ts | 234 | export function updateAvailableFromDivergence( | CODE |
| LOW | src/server/update-system.ts | 283 | export function readWorkspaceUpdateStatus( | CODE |
| LOW | src/server/conductor-mission-sanitize.ts | 44 | export function sanitizeConductorMissionGoal( | CODE |
| LOW | src/server/gateway-capabilities.ts | 689 | export function getCapabilityWarningMessage( | CODE |
| 224 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | src/server/swarm-lifecycle.ts | 54 | print(json.dumps(result)); raise SystemExit | CODE |
| HIGH | src/server/swarm-lifecycle.ts | 78 | print(json.dumps(result)) | CODE |
| HIGH | src/server/external-memory-browser.ts | 222 | elif mode in ("edit", "approve", "reject", "delete"): | CODE |
| HIGH | src/server/external-memory-browser.ts | 246 | elif mode == "approve": | CODE |
| HIGH | src/server/external-memory-browser.ts | 273 | print(json.dumps(result)) | CODE |
| HIGH⚡ | src/server/swarm-chat-reader.ts | 95 | elif btype == "tool_use": | CODE |
| HIGH⚡ | src/server/swarm-chat-reader.ts | 97 | elif btype == "tool_result": | CODE |
| HIGH⚡ | src/server/swarm-chat-reader.ts | 107 | elif isinstance(parsed, dict): | CODE |
| HIGH | src/server/swarm-chat-reader.ts | 122 | elif isinstance(raw_ts, str): | CODE |
| HIGH | src/server/swarm-chat-reader.ts | 135 | print(json.dumps({ | CODE |
| HIGH | src/routes/api/crew-status.ts | 164 | print(json.dumps(out)) | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | README.md | 183 | #### Step 1: Start your backend | COMMENT |
| LOW | README.md | 203 | ### Step 2: Install & Run Hermes Workspace | COMMENT |
| LOW | README.md | 434 | ### Step 1: Configure Environment | COMMENT |
| LOW | README.md | 455 | ### Step 2: Start the Services | COMMENT |
| LOW | README.md | 470 | ### Step 3: Access the Workspace | COMMENT |
| LOW | src/components/onboarding/tour-steps.tsx | 4 | // Step 1: Welcome | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 31 | // Step 2: Sidebar | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 39 | // Step 3: New Session | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 47 | // Step 4: Dashboard | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 55 | // Step 5: Agent Hub | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 63 | // Step 7: Skills | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 71 | // Step 8: Terminal | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 79 | // Step 9: Usage Meter (in header) | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 87 | // Step 10: Settings | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 95 | // Step 11: Finish | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/components/onboarding/tour-steps.tsx | 4 | // Step 1: Welcome | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 31 | // Step 2: Sidebar | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 39 | // Step 3: New Session | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 47 | // Step 4: Dashboard | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 55 | // Step 5: Agent Hub | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 63 | // Step 7: Skills | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 71 | // Step 8: Terminal | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 79 | // Step 9: Usage Meter (in header) | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 87 | // Step 10: Settings | COMMENT |
| LOW⚡ | src/components/onboarding/tour-steps.tsx | 95 | // Step 11: Finish | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | src/server/pty-helper.py | 104 | except (IOError, OSError): | CODE |
| HIGH | src/server/pty-helper.py | 78 | except: | CODE |
| HIGH | src/server/pty-helper.py | 111 | except: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | install.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | docker-compose.dev.yml | 1 | # Hermes Workspace — Development Overlay | COMMENT |
| LOW | docker-compose.yml | 1 | # Hermes Workspace + Agent — Docker Compose Setup | COMMENT |
| LOW | docker-compose.yml | 21 | # docker compose -f docker-compose.yml -f docker-compose.dev.yml up | COMMENT |
| LOW | docker-compose.yml | 101 | # Internal Docker network URL (not localhost!) | COMMENT |
| LOW | vite.config.ts | 481 | }, | COMMENT |
| LOW | vite.config.ts | 501 | // 3. default 3000 (matches README/docs/docker-compose expectations) | COMMENT |
| LOW | vite.config.ts | 601 | }) | COMMENT |
| LOW | scripts/swarm-lifecycle-sweep.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | src/server/mcp-hub/sources/generic-json.ts | 321 | // setCache with an expired entry is not straightforward; instead we use the | COMMENT |
| LOW | src/screens/chat/local-model-override.ts | 1 | // Module-level local model override — set by composer when user picks a local model. | COMMENT |
| LOW | src/screens/chat/hooks/use-realtime-chat-history.ts | 221 | // | COMMENT |
| LOW | …screens/mcp/-marketplace-install-confirmation.test.tsx | 341 | // Click Install — starts the in-flight fetch | COMMENT |
| LOW | src/components/terminal/terminal-workspace.tsx | 461 | } | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | OVERNIGHT-PR-SHAKEDOWN.md | 47 | - 2026-06-05 17:25 EDT: CYCLE 17 — INTEGRATED ECHO STUDIO LABS GATING + FIXED STALE REMOTE REF. On start, local was 3 co | CODE |
| MEDIUM | OVERNIGHT-PR-SHAKEDOWN.md | 58 | - 2026-06-05 04:42 EDT: CYCLE 2b complete. Integrated 2 more additive feature PRs: #450 (external memory provider browse | CODE |
| MEDIUM | …y/goals/2026-05-05-hermesworld-viral-sprint/handoff.md | 107 | ### 9. Character/graphics pipeline scaffolding started in code | COMMENT |
| MEDIUM | docs/swarm2-agent-ide-spec.md | 422 | ### Phase 3 — Autopilot orchestration | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/server/swarm-lifecycle.ts | 61 | except Exception: | CODE |
| LOW | src/server/swarm-lifecycle.ts | 76 | except Exception as e: | CODE |
| LOW | src/server/external-memory-browser.ts | 195 | except Exception: | CODE |
| MEDIUM | src/server/external-memory-browser.ts | 190 | def row_to_candidate(row): | CODE |
| LOW⚡ | src/server/swarm-chat-reader.ts | 111 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | install.sh | 4 | # Usage: | COMMENT |
| LOW | docker-compose.dev.yml | 15 | # Usage: | COMMENT |
| LOW | scripts/ascii-trailer.sh | 6 | # Usage: | COMMENT |
| LOW | scripts/swarm-lifecycle-sweep.sh | 11 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | scripts/build-hermesworld-static.py | 120 | <script>(function(){if(window.matchMedia&&window.matchMedia("(prefers-reduced-motion: reduce)").matches){return;}var c=d | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/workflows/security.yml | 57 | | grep -v "placeholder" \ | CODE |
| LOW | src/screens/agora/hooks/use-agora-room.ts | 179 | // Random fake-user chatter for demo flavor (~every 12-25s) | COMMENT |
| LOW | …creens/mcp/-marketplace-placeholder-detection.test.tsx | 98 | id: 'placeholder', | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/server/pty-helper.py | 67 | # Set stdout to binary/unbuffered | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/server/pty-helper.py | 14 | CODE |