Source control for agents. Use multiple coding agents, track their changes and query them in one place
This report summarizes scanner evidence for pacifio/atlas, a Rust project with 9,587 GitHub stars. SynthScan examined 485,217 lines of code across 1662 source files, recording 1961 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 7.0 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 1216 finding(s).
Are imports declared and package/API names verified? 11 finding(s).
Are wrappers, guards, and repeated structures necessary? 779 finding(s).
Which changes need focused human review? 1961 finding(s).
Run additional scans to build a history of the legacy pattern signal. Score changes are not a measure of AI adoption or code quality.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1961 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Cargo.toml | 183 | # ─── Vendored engine (ADR-0003 fork point `42b5f05`; renamed in ADR-0011) ────────── | COMMENT |
| MEDIUM | Cargo.toml | 671 | # ─── Previous native SDK — gone (#54) ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | Cargo.toml | 682 | # ─── The vendored engine's own git forks ───────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-terminal/src/lib.rs | 375 | // ── zsh shell integration ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-artifacts/src/client.rs | 577 | // ── The inbox, against an HTTP server on loopback ─────────────────────── | COMMENT |
| MEDIUM | crates/atlas-artifacts/src/client.rs | 770 | // ── Ids are path segments, never paths ────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-redact/tests/parity_memory_delta.rs | 26 | // ── Ported verbatim from memory_delta.rs's own tests ──────────────────────── | COMMENT |
| MEDIUM | crates/atlas-redact/tests/parity_memory_delta.rs | 51 | // ── One case per prefix in memory_delta's `looks_secret` table ────────────── | COMMENT |
| MEDIUM | crates/atlas-redact/tests/layers.rs | 30 | // ── Layer 1: Shannon entropy ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-redact/tests/layers.rs | 47 | // ── Layer 2: the vendored betterleaks corpus ──────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-redact/tests/layers.rs | 108 | // ── Layer 3: deterministic provider prefixes ──────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-redact/tests/layers.rs | 131 | // ── Layer 4: credentialed URIs ────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-redact/tests/layers.rs | 146 | // ── Layer 5: database connection strings ──────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-redact/tests/layers.rs | 162 | // ── Layer 6: bounded credential key/value ─────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-redact/tests/layers.rs | 189 | // ── The composed pass ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-theme/keys.toml | 13 | # ── An entry ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-theme/keys.toml | 53 | # ── `[[derived]]`: a colour Atlas writes but no theme may set ───────────────── | COMMENT |
| MEDIUM | crates/atlas-theme/keys.toml | 124 | # ── Borders ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-theme/keys.toml | 150 | # ── Elements and overlays ───────────────────────────────────────────────────── | STRING |
| MEDIUM | crates/atlas-theme/keys.toml | 218 | # ── Text ────────────────────────────────────────────────────────────────────── | STRING |
| MEDIUM | crates/atlas-theme/keys.toml | 253 | # ── Status ──────────────────────────────────────────────────────────────────── | STRING |
| MEDIUM | crates/atlas-theme/keys.toml | 289 | # ── Selection ───────────────────────────────────────────────────────────────── | STRING |
| MEDIUM | crates/atlas-theme/keys.toml | 302 | # ── Terminal ────────────────────────────────────────────────────────────────── | STRING |
| MEDIUM | crates/atlas-theme/keys.toml | 473 | # ── Syntax ──────────────────────────────────────────────────────────────────── | STRING |
| MEDIUM | crates/atlas-theme/keys.toml | 597 | # ── Editor ──────────────────────────────────────────────────────────────────── | STRING |
| MEDIUM | crates/atlas-theme/keys.toml | 684 | # ── Search ──────────────────────────────────────────────────────────────────── | STRING |
| MEDIUM | crates/atlas-theme/keys.toml | 714 | # ── Chrome surfaces ─────────────────────────────────────────────────────────── | STRING |
| MEDIUM | crates/atlas-theme/keys.toml | 753 | # ── Diff ────────────────────────────────────────────────────────────────────── | STRING |
| MEDIUM | crates/atlas-theme/keys.toml | 821 | # ── Agents and indicators ───────────────────────────────────────────────────── | STRING |
| MEDIUM | crates/atlas-theme/keys.toml | 851 | # ── Derived variables ───────────────────────────────────────────────────────── | STRING |
| MEDIUM | crates/atlas-theme/tests/import.rs | 91 | // ── shadcn / tweakcn ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-theme/tests/import.rs | 210 | // ── Zed ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-theme/tests/import.rs | 306 | // ── VS Code ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-theme/tests/import.rs | 453 | // ── export ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-theme/tests/import.rs | 503 | // ── failures ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/health.rs | 74 | // ── OK ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/health.rs | 115 | // ── Degraded ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/health.rs | 221 | // ── Stopped ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/health.rs | 494 | // ── Precedence and recovery ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/timeline.rs | 83 | // ── The Sessions list ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/timeline.rs | 170 | // ── The Session timeline ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/timeline.rs | 429 | // ── Reading while another store in this process holds the writer lock ─────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/timeline.rs | 669 | // ── Active time ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/linkage.rs | 168 | // ── The core rule ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/linkage.rs | 375 | // ── Cardinality ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/linkage.rs | 550 | // ── Commit shapes ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/linkage.rs | 718 | // ── Recorded facts ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/linkage.rs | 773 | // ── Backfill and cursor recovery ──────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/linkage.rs | 883 | // ── Git is optional ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/linkage.rs | 921 | // ── Scale ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/linkage.rs | 949 | // ── Consumption: work that landed stops nominating the Session ────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/linkage.rs | 1021 | // ── Time bound: commits older than the Session never link ─────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/linkage.rs | 1060 | // ── Merge side branches ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/linkage.rs | 1120 | // ── Content filters ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/linkage.rs | 1147 | // ── The empty first walk ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/linkage.rs | 1170 | // ── Imported Sessions ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/linkage.rs | 1206 | // ── Targeted evaluation for commits the cursor already passed (#31) ───────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/linkage.rs | 1206 | // ── Targeted evaluation for commits the cursor already passed (#31) ───────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/rewrites.rs | 147 | // ── Amend ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/atlas-checkpoint/tests/rewrites.rs | 187 | // ── Rebase ────────────────────────────────────────────────────────────────── | COMMENT |
| 674 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Cargo.toml | 1 | # Atlas's root cargo workspace. | COMMENT |
| LOW | Cargo.toml | 181 | ] | COMMENT |
| LOW | Cargo.toml | 201 | # Inventory's "77 crates, 63 droppable" is the closure of `atlas-engine-core`. D1 | COMMENT |
| LOW | Cargo.toml | 221 | # | COMMENT |
| LOW | Cargo.toml | 661 | # An allow, not a deny. `#[async_trait]` marks every method it generates | COMMENT |
| LOW | Cargo.toml | 681 | COMMENT | |
| LOW | Cargo.toml | 701 | # 422af792 (docs/research/build-performance.md) fat LTO's final link is a | COMMENT |
| LOW | Cargo.toml | 721 | # panicking worker is silent capture loss. | COMMENT |
| LOW | Cargo.toml | 741 | codegen-units = 256 | COMMENT |
| LOW | Cargo.toml | 761 | opt-level = 1 | COMMENT |
| LOW | Cargo.toml | 841 | # cost is a longer first clean build; the `"*"` override cannot cover these | COMMENT |
| LOW | bunfig.toml | 1 | # bun auto-installs peer dependencies (`install.peer` defaults to true), and | COMMENT |
| LOW | tsconfig.test.json | 1 | { | COMMENT |
| LOW | clippy.toml | 1 | # Upstream Atlas Agent's `atlas-engine-rs/clippy.toml`, restored. | COMMENT |
| LOW | clippy.toml | 21 | # * `await-holding-invalid-types` — the type list behind `await_holding_invalid_type`, | COMMENT |
| LOW | tsconfig.json | 21 | "resolveJsonModule": true, | COMMENT |
| LOW | rust-toolchain.toml | 1 | # The one Rust version for every machine: local checkouts, CI and the release | COMMENT |
| LOW | vite.config.ts | 41 | "node_modules/decode-named-character-reference/index.js", | COMMENT |
| LOW | vite.config.ts | 141 | // The worker is a separate ESM entry loaded via `?url`; pre-bundling it | COMMENT |
| LOW | vite.config.ts | 161 | // | COMMENT |
| LOW | crates/atlas-terminal/src/command.rs | 1 | //! One-shot command terminals — the engine behind ACP's `terminal/*` methods | COMMENT |
| LOW | crates/atlas-terminal/src/command.rs | 21 | COMMENT | |
| LOW | crates/atlas-terminal/src/command.rs | 41 | /// `None` when the process was terminated by a signal. | COMMENT |
| LOW | crates/atlas-terminal/src/command.rs | 101 | // character in half and every later read would show a replacement char | COMMENT |
| LOW | crates/atlas-terminal/src/command.rs | 301 | .lock() | COMMENT |
| LOW | crates/atlas-terminal/src/command.rs | 381 | /// command that writes and exits at once (`echo hi`) has its `write` succeed | COMMENT |
| LOW | crates/atlas-terminal/src/command.rs | 701 | fn releasing_an_unknown_terminal_reports_false_rather_than_panicking() { | COMMENT |
| LOW | crates/atlas-artifacts/src/client.rs | 1 | //! The read half of the artifacts API. | COMMENT |
| LOW | crates/atlas-artifacts/src/client.rs | 21 | /// How many board pages one refresh will walk. | COMMENT |
| LOW | crates/atlas-artifacts/src/client.rs | 41 | pub const INBOX_PAGE_MAX: u32 = 100; | COMMENT |
| LOW | crates/atlas-artifacts/src/error.rs | 1 | //! The failure taxonomy for the artifacts read surface. | COMMENT |
| LOW | crates/atlas-artifacts/src/error.rs | 21 | Unauthorized(String), | COMMENT |
| LOW | crates/atlas-artifacts/src/lib.rs | 1 | //! **Atlas artifacts** — the read half of the Organisation's timeline. | COMMENT |
| LOW | crates/atlas-artifacts/src/board.rs | 1 | //! The remote half of the board, held in memory. | COMMENT |
| LOW | crates/atlas-artifacts/src/board.rs | 21 | //! machine has never bound invisible — which is most of them, for anyone who | COMMENT |
| LOW | crates/atlas-artifacts/src/board.rs | 41 | /// Which Session, in which Project — `(workspace_id, session_id)`, both server ids. | COMMENT |
| LOW | crates/atlas-artifacts/src/board.rs | 61 | /// Project id → how to name it, for a row from a Project this machine has | COMMENT |
| LOW | crates/atlas-artifacts/src/manager.rs | 1 | //! Who is connected, to which Projects and Sessions, and what to do when one | COMMENT |
| LOW | crates/atlas-artifacts/src/manager.rs | 21 | //! # Two kinds of socket | COMMENT |
| LOW | crates/atlas-artifacts/src/manager.rs | 61 | /// Event fan-out capacity. A lagging subscriber drops rather than blocking the | COMMENT |
| LOW | crates/atlas-artifacts/src/manager.rs | 161 | /// The supervisor's identity. Monotonic per manager; a supervisor may only | COMMENT |
| LOW | crates/atlas-artifacts/src/manager.rs | 221 | } | COMMENT |
| LOW | crates/atlas-artifacts/src/socket.rs | 1 | //! One Project's realtime connection, from dial to close. | COMMENT |
| LOW | crates/atlas-artifacts/src/socket.rs | 41 | use crate::error::{Error, Result}; | COMMENT |
| LOW | crates/atlas-artifacts/src/socket.rs | 81 | #[derive(Debug, Clone, Serialize)] | COMMENT |
| LOW | crates/atlas-artifacts/src/socket.rs | 101 | Hello { | COMMENT |
| LOW | crates/atlas-artifacts/src/model.rs | 1 | //! The shapes the artifacts API answers with. | COMMENT |
| LOW | crates/atlas-artifacts/src/model.rs | 21 | use serde::{Deserialize, Serialize}; | COMMENT |
| LOW | crates/atlas-artifacts/src/model.rs | 41 | pub id: String, | COMMENT |
| LOW | crates/atlas-artifacts/src/model.rs | 81 | /// sum and the two cache figures. Both stay zero on a remote row rather | COMMENT |
| LOW | crates/atlas-artifacts/src/model.rs | 101 | #[serde(default)] | COMMENT |
| LOW | crates/atlas-artifacts/src/model.rs | 121 | pub sessions: Vec<RemoteSession>, | COMMENT |
| LOW | crates/atlas-artifacts/src/model.rs | 141 | /// Two local fields have no wire equivalent and are filled in by the host: | COMMENT |
| LOW | crates/atlas-artifacts/src/model.rs | 321 | } | COMMENT |
| LOW | crates/atlas-grepindex/examples/gen_bigram_table.rs | 1 | //! Generates `data/bigram_rank_v1.bin`, the bigram weight table `gram.rs` embeds. | COMMENT |
| LOW | crates/atlas-grepindex/src/format.rs | 1 | //! On-disk snapshot, format v1. One directory per base tree: | COMMENT |
| LOW | crates/atlas-grepindex/src/gram.rs | 1 | //! Sparse n-grams (the danlark1 / GitHub Blackbird / Cursor rule) over ASCII-folded bytes. | COMMENT |
| LOW | crates/atlas-redact/tests/parity_memory_delta.rs | 1 | //! Parity with the ad-hoc redactor this crate replaces. | COMMENT |
| LOW | crates/atlas-redact/scripts/gen_vendor_rules.py | 41 | from __future__ import annotations | COMMENT |
| LOW | crates/atlas-redact/src/vendor.rs | 1 | //! Layer 2 — the vendored betterleaks rule corpus. | COMMENT |
| 1083 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/persistent-tab-render-contract.test.ts | 66 | function parsePersistentPanelCases(source: string): string[] { | CODE |
| LOW | tests/vendor-licensing.test.ts | 129 | function computeModifiedVendoredFiles(): string[] { | CODE |
| LOW | …atures/settings/lib/notification-settings-migration.ts | 110 | export function migrateNotificationSettings( | CODE |
| LOW | src/features/artifacts/lib/team-presence.ts | 40 | export function startTeamPresenceListener(): () => void { | CODE |
| LOW | src/features/app/stores/app-store.ts | 243 | function maybeEnsureAtlasGitignore(path: string, settings: AppSettings): void { | CODE |
| LOW | …es/keybindings/lib/use-native-close-tab-accelerator.ts | 12 | export function useNativeCloseTabAccelerator(): void { | CODE |
| LOW | src/features/chat/stores/chat-store.ts | 141 | function pushPermissionModeToAgent( | CODE |
| LOW | src/features/chat/stores/chat-store.ts | 712 | function makeAssistantThinkingMessage(thinking: string): ChatMessage { | CODE |
| LOW | src/features/chat/stores/native-models-store.ts | 87 | export function useNativeModelsOrgRefresh(): void { | CODE |
| LOW | src/features/chat/stores/recent-files-store.ts | 70 | export function ensureRecentFilesListener(): void { | CODE |
| LOW | src/features/chat/components/chat-panel.tsx | 185 | function rebindDisconnectedSession(tabId: string): Promise<boolean> { | CODE |
| LOW | src/features/chat/lib/acp-config-options-cache.ts | 51 | export function loadCachedAcpConfigOptions(agentType: string): unknown[] | null { | CODE |
| LOW | src/features/chat/lib/acp-config-options-cache.ts | 76 | export function saveCachedAcpConfigOptions(agentType: string, options: unknown[]): void { | CODE |
| LOW | src/features/chat/lib/default-agent.ts | 21 | export function defaultAgentForNewSession(): SwitchableAgent { | CODE |
| LOW | src/features/chat/lib/mentions.ts | 347 | export async function listMessagesInPastSession( | CODE |
| LOW | src/features/chat/lib/mentions.ts | 632 | export function publishKnowledgeToMentionCache(): Promise<void> { | CODE |
| LOW | src/features/chat/lib/mentions.ts | 665 | export async function ensureKnowledgeMentionCache(projectPath: string): Promise<void> { | CODE |
| LOW | src/features/chat/lib/org-mentions.ts | 141 | export function resetOrgMentionSourcesForTests(): void { | CODE |
| LOW | src/features/chat/lib/exit-plan-modes.ts | 40 | export function exitPlanOptionRestartsSession(optionId: string): boolean { | CODE |
| LOW | src/features/chat/lib/agent-signin.ts | 115 | export async function authenticateAfterCliLogin( | CODE |
| LOW | src/features/projects/stores/project-git-store.ts | 115 | export function resetGitSummariesForOrgSwitch() { | CODE |
| LOW | src/features/projects/lib/org-scope.ts | 44 | export function activeOrgProjectsSnapshot(): Project[] { | CODE |
| LOW | src/features/spaces/lib/space-wire.ts | 160 | export function encodeSpaceAwarenessState(state: SpaceAwarenessState): Uint8Array { | CODE |
| LOW | src/features/spaces/lib/space-wire.ts | 171 | export function decodeSpaceAwarenessState(state: Uint8Array): SpaceAwarenessState | null { | CODE |
| LOW | src/features/comms/stores/comms-store.ts | 95 | export function resetCommsSwitchStateForTests(): void { | CODE |
| LOW | src/features/comms/stores/comms-store.ts | 978 | export function pendingConvRetriesForTests(): number { | CODE |
| LOW | src/features/comms/stores/comms-store.ts | 1063 | export function retryUnloadedConversations(): void { | CODE |
| LOW | src/features/terminal/lib/terminal-notifier-rules.ts | 100 | export function decideTerminalNotification( | CODE |
| LOW | …anisations/components/loading-organisation-overlay.tsx | 12 | export function LoadingOrganisationOverlay() { | CODE |
| LOW | src/features/theme/stores/theme-store.ts | 201 | export function startThemeCatalogListener(): void { | CODE |
| LOW | src/features/telemetry/error-handlers.ts | 10 | export function installGlobalErrorHandlers(): void { | CODE |
| LOW | src/features/notifications/lib/agent-notifier.ts | 326 | export function notifyAgentSignInRequired(tabId: string, agentType: string): void { | CODE |
| LOW | src/features/notifications/lib/notifier-api.ts | 65 | export async function notifierRequestAuthorization(): Promise<NotifierAuthorization> { | CODE |
| LOW | src/features/notifications/lib/notifier-api.ts | 94 | export function listenNotificationResponses( | CODE |
| LOW | …features/notifications/lib/permission-actions-rules.ts | 94 | export function permissionDecisionForAction( | CODE |
| LOW | src/features/notifications/lib/permission-actions.ts | 20 | export function answerPermissionFromBanner(response: SystemNotificationResponse): void { | CODE |
| LOW | src/features/git/stores/git-store.ts | 178 | function ensureGitStatusFreshListener(): void { | CODE |
| LOW | src/features/git/lib/git-pr-api.ts | 51 | export function resetGhAvailabilityForTests(): void { | CODE |
| LOW | src/features/icon-theme/stores/icon-theme-store.ts | 288 | export function startIconThemeCatalogListener(): void { | CODE |
| LOW | src/lib/native-notify.ts | 60 | export function primeNativeNotificationPermission(): Promise<PermissionState> { | CODE |
| LOW | src/lib/native-notify.ts | 100 | export function removeNativeNotificationGroup(group: string): void { | CODE |
| LOW | src/lib/safe-unlisten.test.ts | 15 | async function unhandledRejectionsDuring(run: () => void): Promise<unknown[]> { | CODE |
| LOW | src/dev/mock-backend/fake-agent.ts | 438 | export function requestPermissionLongArgs(): Promise<void> { | CODE |
| LOW | src/dev/mock-backend/fake-agent.ts | 478 | export function requestPermissionQuestion(): Promise<void> { | CODE |
| LOW | src/dev/mock-backend/fake-agent.ts | 500 | export function requestPermissionQuestionMulti(): Promise<void> { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | Cargo.toml | 773 | # terminal, the embedder and the RAG engine unoptimized. Restating the level | COMMENT |
| MEDIUM | crates/atlas-redact/scripts/gen_vendor_rules.py | 63 | # wide range is a context window (`.{0,200}` spanning lines) the same rewrite | COMMENT |
| MEDIUM | crates/atlas-memory/README.md | 1 | # atlas-memory — Atlas's RAG / memory engine | COMMENT |
| MEDIUM | crates/atlas-codeindex/Cargo.toml | 50 | # examples/eval_retrieval.rs loads a real embedding model; the library itself | COMMENT |
| MEDIUM | crates/atlas-native-agent/src/engine/catalog.rs | 29 | //! # The context window | COMMENT |
| MEDIUM | docs/archive/codex-cutover-survival-list.md | 90 | ### A4. Memory/RAG: which one is live? | COMMENT |
| MEDIUM | docs/archive/atlas-agent-codex-port-spec.md | 50 | ### Bonus, for free: the RAG stack | COMMENT |
| MEDIUM | src-tauri/Cargo.toml | 135 | # On-device RAG/memory engine (MiniLM → usearch HNSW + manifest). The Tauri | COMMENT |
| MEDIUM | src-tauri/src/state/atlas_config.rs | 633 | "# On-device embedding model, named by its directory. Normally managed\n\ | CODE |
| MEDIUM | src-tauri/src/state/atlas_config.rs | 639 | "# On-device embedding model for semantic code search, named by its\n\ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | crates/atlas-redact/tests/negatives.rs | 52 | "set API_KEY=<your-api-key> before running", | CODE |
| HIGH | crates/atlas-redact/src/placeholder.rs | 29 | "your_api_key", | CODE |
| HIGH | crates/atlas-redact/src/credential.rs | 395 | assert!(spans("API_KEY=<your-api-key>").is_empty()); | CODE |
| HIGH | crates/atlas-redact/src/credential.rs | 444 | assert!(spans(r#"{"api_key": "<your-api-key>"}"#).is_empty()); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/atlas-redact/src/vendor_rules.rs | 1225 | id: r#"harness-api-key"#, | CODE |
| MEDIUM⚡ | crates/atlas-redact/src/vendor_rules.rs | 1433 | id: r#"lighton-paradigm-api-key"#, | CODE |
| MEDIUM⚡ | crates/atlas-redact/src/vendor_rules.rs | 1434 | pattern: r#"(?i)[\w.-]{0,50}?(?:lighton|paradigm)(?:[ \t\w.-]{0,20})[\s'"]{0,3}(?:=|>|:{1,3}=|\|\||:|=>|\?=|,)[\ | CODE |
| MEDIUM⚡ | crates/atlas-redact/src/vendor_rules.rs | 1435 | keywords: &[r#"lighton"#, r#"paradigm"#], | CODE |
| MEDIUM | scripts/test-rust.sh | 51 | # own test harness, a second full-size link to run nothing. | COMMENT |
| MEDIUM | .github/workflows/ci.yml | 230 | # own test harness and ran the doctest pass — a second full-size app | COMMENT |
| LOW | src-tauri/resources/nvm.sh | 982 | # if there’s no initial path, just return the supplementary path | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/bump.sh | 4 | # Usage: | COMMENT |
| LOW | scripts/set-dmg-icon.sh | 15 | # Usage: | COMMENT |
| LOW | scripts/release-macos.sh | 37 | # Usage: | COMMENT |
| LOW | scripts/build-dmg.sh | 19 | # Usage: | COMMENT |
| LOW | scripts/debump.sh | 5 | # Usage: | COMMENT |
| LOW | scripts/layout-dmg.sh | 19 | # Usage: | COMMENT |
| LOW⚡ | scripts/package-linux.sh | 10 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/atlas-redact/src/placeholder.rs | 24 | "placeholder", | CODE |
| LOW | crates/atlas-agent-store/tests/archive.rs | 817 | tar.append_data(&mut header, "placeholder", &b""[..]) | CODE |
| LOW | src/features/organisations/stores/org-store.test.ts | 48 | useOrgStore.getState().actions.mergeServerOrgs([server("Acme Corp")]); | CODE |
| LOW | src/features/organisations/stores/org-store.test.ts | 51 | expect(org.name).toBe("Acme Corp"); | CODE |
| LOW | src/features/organisations/stores/org-store.test.ts | 86 | useOrgStore.getState().actions.mergeServerOrgs([server("Acme Corp")]); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/atlas-redact/scripts/gen_vendor_rules.py | 41 | CODE | |
| LOW | scripts/one-off/rename-engine.py | 21 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/one-off/rename-engine.py | 140 | CODE | |
| LOW | scripts/one-off/rename-engine.py | 223 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/atlas-memory/src/lib.rs | 63 | // Step 10: offline 3-agent retrieval-parity tests + an HNSW-vs-brute-force | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/atlas-memory/src/lib.rs | 63 | // Step 10: offline 3-agent retrieval-parity tests + an HNSW-vs-brute-force | COMMENT |