A faster, lighter, cheaper alternative to sandboxes. Run any coding agent inside an isolated Linux VM, with agent orchestration built in.
This report presents the forensic synthetic code analysis of rivet-dev/agentos, a Rust project with 3,641 GitHub stars. SynthScan v2.0 examined 663,428 lines of code across 2263 source files, recording 1846 pattern matches distributed across 14 syntactic categories. The overall adjusted score of 3.1 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 1846 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | crates/execution/src/node_import_cache.rs | 7522 | function isTrackedProcessSignalEventName(eventName) { | CODE |
| LOW⚡ | crates/execution/src/node_import_cache.rs | 7526 | function signalEventsAffectedByProcessMethod(methodName, eventName) { | CODE |
| LOW⚡ | crates/execution/src/node_import_cache.rs | 7534 | function emitGuestProcessSignalState(eventName) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 545 | function pruneProjectedSourceFiles() { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 583 | function loadProjectedPackageSource(url, filePath, format) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 845 | function replaceBuiltinImportSpecifier(source, specifier, replacement) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 853 | function replaceBuiltinDynamicImportSpecifier(source, specifier, replacement) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 1172 | function validateModuleFormatEntry(entry) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 1199 | function validateProjectedSourceEntry(entry, filePath, format) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 1344 | function barePackageJsonCandidates(parentURL, packageName) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 1410 | function isExplicitFileLikeSpecifier(specifier) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 1505 | function translateContextParentUrl(context) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 1528 | function translateResolvedUrlToGuest(url) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 1537 | function translateResolvedUrlToHost(url) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 1681 | function guestInternalPathFromHostPath(hostPath) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 1704 | function guestVisiblePathFromHostPath(hostPath) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 1729 | function translatePathStringToGuest(value) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 1755 | function buildHostToGuestTextReplacements() { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 1817 | function translateTextTokenToGuest(token) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 1942 | function isInternalImportCachePath(filePath) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 1967 | function parseJsonArrayLikeObjects(value) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 2247 | function parseVirtualProcessNumber(value, fallback) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 2256 | function parseVirtualProcessString(value, fallback) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 2460 | function guestInternalPathFromHostPath(hostPath) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 2486 | function guestVisiblePathFromHostPath(hostPath) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 2511 | function translatePathStringToGuest(value) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 2537 | function buildHostToGuestTextReplacements() { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 2599 | function translateTextTokenToGuest(token) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 2818 | function requireSecureExecSyncRpcBridge() { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 2837 | function isPythonWarmupDebugEnabled() { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 2853 | function formatPythonWarmupFsDebugError(error) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 2909 | function createRpcBackedFsPromises(fromGuestDir = '/') { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 2986 | function resolveGuestSymlinkTarget(value, fromGuestDir = '/') { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 3251 | function normalizeFsWriteOperation(value, offsetOrPosition, lengthOrEncoding, position) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 3355 | function createFsWatchUnavailableError(methodName) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 3363 | function createRpcBackedFsCallbacks(fromGuestDir = '/') { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 3646 | function createGuestReadStreamClass(fromGuestDir = '/') { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 3758 | function createGuestWriteStreamClass(fromGuestDir = '/') { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 3956 | function createRpcBackedChildProcessModule(fromGuestDir = '/') { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 5600 | function createTransportBackedServer( | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 5692 | function parseRequestTargetFromHostOption(value, protocol) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 5727 | function parseRequestTargetFromUrl(value, defaultProtocol) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 5753 | function createRpcBackedHttpModule(httpModule, transportModule, defaultProtocol = 'http:') { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 5924 | function createRpcBackedHttpsModule(httpsModule, tlsModule) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 6237 | function createRpcBackedDgramModule(dgramModule, fromGuestDir = '/') { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 7342 | function cloneVirtualNetworkInterfaces(networkInterfaces) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 7371 | function createVirtualProcessMemoryUsageSnapshot() { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 7557 | function createBlockedProcessSignalMethod(methodName) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 7623 | function runtimeHostPathFromGuestPath(guestPath) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 7654 | function translateModuleResolutionPath(value) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 7676 | function translateModuleResolutionParent(parent) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 7705 | function translateModuleResolutionOptions(options) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 7727 | function ensureGuestVisibleModuleResolution(specifier, resolved, parent) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 7747 | function createGuestModuleCacheProxy(moduleCache) { | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 10020 | function createNotImplementedError(feature) {{\n\ | CODE |
| LOW | crates/execution/src/javascript.rs | 5421 | function createReadableAsyncIterator(stream) { | CODE |
| LOW | crates/execution/src/javascript.rs | 6236 | function isStringOneByteRepresentation(value) { | CODE |
| LOW | crates/execution/src/javascript.rs | 6246 | function setHeapSnapshotNearHeapLimit() { | CODE |
| LOW | crates/execution/src/javascript.rs | 6342 | function createVmNotImplementedError(feature) { | CODE |
| LOW | crates/execution/src/javascript.rs | 6480 | r#"function createNotImplementedError(feature) { | CODE |
| 1268 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/client/src/cron.rs | 1281 | // ── Security: AOSCLIENT-P1-cron-exec (N-007 untrusted cron CronAction::Exec) ───────────────── | COMMENT |
| MEDIUM | crates/client/src/cron.rs | 1363 | // ── Security: AOSCLIENT-P2-cron-cap (N-008 cron job-limit flooding) ────────────────────────── | COMMENT |
| MEDIUM | crates/client/src/net.rs | 321 | // ── Security: AOSCLIENT-P3-fetch (N-010 guest-server VmFetch response) ─────────────────────── | COMMENT |
| MEDIUM | crates/client/src/command_line.rs | 159 | // ── Security: AOSCLIENT-P2-cmdline (N-009 guest exec line) ─────────────────────────────────── | COMMENT |
| MEDIUM⚡ | website/.astro/data-store.json | 1 | [["Map",1,2,9,10],"meta::meta",["Map",3,4,5,6,7,8],"astro-version","5.18.2","content-config-digest","b13dc6e1e58a194d"," | CODE |
| MEDIUM⚡ | website/.astro/data-store.json | 1 | [["Map",1,2,9,10],"meta::meta",["Map",3,4,5,6,7,8],"astro-version","5.18.2","content-config-digest","b13dc6e1e58a194d"," | CODE |
| MEDIUM | examples/core/vm.ts | 13 | // ── Filesystem ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/core/vm.ts | 33 | // ── Processes ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/core/vm.ts | 60 | // ── Agent sessions ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/core/vm.ts | 88 | // ── Networking ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/core/vm.ts | 104 | // ── Cron jobs ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/claude/client.ts | 7 | // ── Quick start ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/claude/client.ts | 22 | // ── Skills ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/claude/client.ts | 48 | // ── MCP servers ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/claude/client.ts | 81 | // ── Skills + MCP together ───────────────────────────────────────── | COMMENT |
| MEDIUM | examples/codex/client.ts | 8 | // ── Quick start ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/codex/client.ts | 23 | // ── Skills ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/codex/client.ts | 47 | // ── MCP servers ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/codex/client.ts | 75 | // ── Skills + MCP together ───────────────────────────────────────── | COMMENT |
| MEDIUM | examples/browserbase/client.ts | 9 | // ── 1. Run the browse CLI yourself ────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/browserbase/client.ts | 27 | // ── 2. Let an agent use the browse CLI ────────────────────────────────────── | COMMENT |
| MEDIUM | examples/quickstart/pi-extensions/index.ts | 35 | // ── Extension source code ────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/quickstart/pi-extensions/index.ts | 54 | // ── Create VM and write extension ────────────────────────────────── | COMMENT |
| MEDIUM | examples/quickstart/pi-extensions/index.ts | 93 | // ── Create session and prompt ────────────────────────────────────── | COMMENT |
| MEDIUM | examples/quickstart/pi-extensions/index.ts | 113 | // ── Verify ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/pi/client.ts | 7 | // ── Quick start ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/pi/client.ts | 22 | // ── Skills ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/pi/client.ts | 46 | // ── MCP servers ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/pi/client.ts | 80 | // ── Skills + MCP together ───────────────────────────────────────── | COMMENT |
| MEDIUM | examples/pi/client.ts | 119 | // ── Extensions ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | examples/sessions/client.ts | 7 | // ── Create a session ────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | examples/sessions/client.ts | 16 | // ── createSession options: env ──────────────────────────────────── | COMMENT |
| MEDIUM⚡ | examples/sessions/client.ts | 24 | // ── createSession options: cwd ──────────────────────────────────── | COMMENT |
| MEDIUM⚡ | examples/sessions/client.ts | 33 | // ── createSession options: additionalInstructions ───────────────── | COMMENT |
| MEDIUM⚡ | examples/sessions/client.ts | 42 | // ── createSession options: skipOsInstructions ───────────────────── | COMMENT |
| MEDIUM⚡ | examples/sessions/client.ts | 51 | // ── createSession options: system prompt customization ──────────── | COMMENT |
| MEDIUM | examples/sessions/client.ts | 65 | // ── Send a prompt ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/sessions/client.ts | 77 | // ── Stream responses ────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/sessions/client.ts | 92 | // ── Client events ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/sessions/client.ts | 109 | // ── Client events: subscribe before triggering ──────────────────── | COMMENT |
| MEDIUM | examples/sessions/client.ts | 125 | // ── Cancel a prompt ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/sessions/client.ts | 146 | // ── Close a session ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/sessions/client.ts | 157 | // ── Replay events ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/sessions/client.ts | 169 | // ── Persisted session history ───────────────────────────────────── | COMMENT |
| MEDIUM | examples/sessions/client.ts | 184 | // ── Multiple sessions ───────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/opencode/client.ts | 7 | // ── Quick start ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/opencode/client.ts | 22 | // ── Skills ──────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/opencode/client.ts | 48 | // ── MCP servers ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | examples/opencode/client.ts | 87 | // ── Skills + MCP together ───────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/benchmarks/bench-utils.ts | 25 | // ── Shared bench sidecar + cold-run snapshot ─────────────────────── | COMMENT |
| MEDIUM | scripts/benchmarks/bench-utils.ts | 81 | // ── Shared mock LLM server ───────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/benchmarks/bench-utils.ts | 119 | // ── Workload abstraction ──────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/benchmarks/bench-utils.ts | 332 | // ── VM creation helpers ───────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/benchmarks/bench-utils.ts | 346 | // ── Stats and formatting ──────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/benchmarks/session.bench.ts | 245 | // ── args ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/benchmarks/session.bench.ts | 277 | // ── shared llmock ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/benchmarks/session.bench.ts | 292 | // ── workload resolution (robust to repo layout) ────────────────────── | COMMENT |
| MEDIUM | scripts/benchmarks/session.bench.ts | 485 | // ── lanes ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/benchmarks/session.bench.ts | 586 | // ── main ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/benchmarks/session.bench.ts | 587 | // ── trace mode ─────────────────────────────────────────────────────── | COMMENT |
| 69 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/vm-config/src/lib.rs | 1 | use std::collections::BTreeMap; | COMMENT |
| LOW | crates/vm-config/src/lib.rs | 21 | #[serde(default, rename = "rootFilesystem")] | COMMENT |
| LOW | crates/vm-config/src/lib.rs | 101 | pub struct JsRuntimeConfig { | COMMENT |
| LOW | crates/vm-config/src/lib.rs | 161 | /// Universal primitives only (console, timers, queueMicrotask) — no web | COMMENT |
| LOW | crates/vm-config/src/lib.rs | 321 | #[serde(default, skip_serializing_if = "Option::is_none")] | COMMENT |
| LOW | crates/vm-config/src/lib.rs | 481 | COMMENT | |
| LOW | crates/vm-config/src/lib.rs | 521 | #[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize, TS)] | COMMENT |
| LOW | crates/vfs/src/posix/mount_table.rs | 841 | COMMENT | |
| LOW | crates/vfs/src/posix/tar_fs.rs | 21 | const MAX_TAR_SYMLINKS: usize = 40; | COMMENT |
| LOW | crates/vfs/src/package_format/pack.rs | 1 | //! Canonical `.aospkg` packer: source `package.tar` → `header + vbare manifest | COMMENT |
| LOW | crates/vfs/src/package_format/generated.rs | 1 | // Generated package container surface produced by `vbare_compiler`. | COMMENT |
| LOW | crates/v8-runtime/src/timeout.rs | 1 | // Execution budget enforcement via dedicated watchdog threads. | COMMENT |
| LOW | crates/v8-runtime/src/timeout.rs | 41 | /// The POSIX per-thread CPU clock id is derived from the thread's `pthread_t` | COMMENT |
| LOW | crates/v8-runtime/src/bridge.rs | 1141 | /// path does. Without a teardown sweep, slots reserved by one execution survive | COMMENT |
| LOW | crates/v8-runtime/src/bridge.rs | 2041 | COMMENT | |
| LOW | crates/v8-runtime/src/bridge.rs | 2581 | assert!( | COMMENT |
| LOW | crates/v8-runtime/src/session.rs | 461 | COMMENT | |
| LOW | crates/v8-runtime/src/session.rs | 481 | struct SessionEntry { | COMMENT |
| LOW | crates/v8-runtime/src/session.rs | 521 | COMMENT | |
| LOW | crates/v8-runtime/src/session.rs | 1661 | send_event_with_generation( | COMMENT |
| LOW | crates/v8-runtime/src/session.rs | 2161 | .iter() | COMMENT |
| LOW | crates/v8-runtime/src/session.rs | 2181 | // Swap in an empty registry and drop the populated one in place. Dropping a | COMMENT |
| LOW | crates/v8-runtime/src/stream.rs | 1 | // Async event dispatch for child process and HTTP server streams | COMMENT |
| LOW | crates/v8-runtime/src/ipc_binary.rs | 1 | // Binary header IPC framing — custom wire format for all message types. | COMMENT |
| LOW | crates/v8-runtime/src/execution.rs | 801 | } | COMMENT |
| LOW | crates/v8-runtime/src/execution.rs | 841 | struct ModuleResolveState { | COMMENT |
| LOW | crates/v8-runtime/src/snapshot.rs | 81 | const SNAPSHOT_USERLAND_PREP: &str = r#" | COMMENT |
| LOW | crates/v8-runtime/src/snapshot.rs | 201 | /// context — with all bridge infrastructure set up — is snapshotted. | COMMENT |
| LOW | crates/v8-runtime/src/snapshot.rs | 1961 | COMMENT | |
| LOW | crates/v8-runtime/src/host_call.rs | 281 | /// Shared call_id counter type. Sessions sharing a CallIdRouter must use the same | COMMENT |
| LOW | crates/v8-runtime/src/isolate.rs | 121 | /// Default per-isolate heap cap applied when the caller passes no explicit limit. | COMMENT |
| LOW | crates/v8-runtime/src/isolate.rs | 161 | /// Register the near-heap-limit OOM guard on an isolate that was created with a | COMMENT |
| LOW | crates/agentos-actor-plugin/src/config.rs | 1 | //! Plugin-side `config_json` deserializer — ported from the deleted r6 | COMMENT |
| LOW | crates/agentos-actor-plugin/src/config.rs | 21 | /// Keep this struct in sync with | COMMENT |
| LOW | crates/agentos-actor-plugin/src/lib.rs | 1 | //! Agent OS actor plugin (`cdylib`) — the **plugin side** of | COMMENT |
| LOW | crates/agentos-actor-plugin/src/lib.rs | 221 | config: Arc<config::AgentOsConfigJson>, | COMMENT |
| LOW | crates/agentos-actor-plugin/src/host_ctx.rs | 1 | //! Plugin-side host bridge — the inverse of the RivetKit host vtable impl. | COMMENT |
| LOW | crates/agentos-actor-plugin/src/http.rs | 1 | //! HTTP preview proxy — plugin-side port of `rivetkit-agent-os::run::proxy_preview`. | COMMENT |
| LOW | crates/agentos-actor-plugin/src/actions/session.rs | 641 | .and_then(|raw| serde_json::from_str::<JsonValue>(raw).ok()) | COMMENT |
| LOW | crates/agentos-actor-plugin/src/actions/session.rs | 661 | vars: &mut Vars, | COMMENT |
| LOW | crates/agentos-actor-plugin/src/actions/filesystem.rs | 61 | Self { | COMMENT |
| LOW | crates/agentos-actor-plugin/src/actions/mod.rs | 1 | //! Action dispatcher — the plugin-side port of `rivetkit-agent-os::actions`. | COMMENT |
| LOW | crates/agentos-actor-plugin/src/actions/mod.rs | 81 | self.live_sessions.clear(); | COMMENT |
| LOW | crates/agentos-actor-plugin/src/actions/mod.rs | 661 | start_time: 1.0, | COMMENT |
| LOW | crates/sidecar-protocol/src/generated_protocol.rs | 1 | // Generated protocol surface produced by `vbare_compiler` (see `build.rs`). | COMMENT |
| LOW | crates/bridge/src/queue_tracker.rs | 1 | //! Centralized bounded-queue usage tracker. | COMMENT |
| LOW | crates/execution/build.rs | 1 | use std::env; | COMMENT |
| LOW | …tes/execution/tests/wasi_path_open_read_not_blocked.rs | 1 | //! Regression test for issue #1: | COMMENT |
| LOW | crates/execution/tests/javascript_v8.rs | 4381 | // The guest synchronously logs far more lines than the event channel holds. The | COMMENT |
| LOW | crates/execution/tests/javascript_v8.rs | 4481 | // byte and emitted `readable`/`data` for the whole HTTP response inside a single | COMMENT |
| LOW | crates/execution/tests/javascript_v8.rs | 5461 | (unexpected hang)" | COMMENT |
| LOW | crates/execution/tests/javascript_v8.rs | 5741 | "no-limit guest never produced a result within the bounded test window \ | COMMENT |
| LOW | crates/execution/tests/javascript_v8.rs | 5901 | ); | COMMENT |
| LOW | crates/execution/tests/javascript_v8.rs | 5921 | javascript_execution_process_kill_rejects_invalid_pid_in_guest_js(); | COMMENT |
| LOW | crates/execution/tests/javascript_v8.rs | 6001 | // letting V8 fatal-abort the process. Runs before the CPU case; both are fenced | COMMENT |
| LOW | crates/execution/tests/wasm.rs | 2741 | // keep the WASM runtime coverage in one top-level suite until that boundary is fixed. | COMMENT |
| LOW | crates/execution/src/v8_ipc.rs | 1 | //! Binary IPC framing for communication with the secure-exec-v8 runtime process. | COMMENT |
| LOW | crates/execution/src/javascript.rs | 441 | /// Sync-RPC blocking-wait ceiling in ms. `None` keeps the engine default. | COMMENT |
| LOW | crates/execution/src/javascript.rs | 481 | pub os_hostname: Option<String>, | COMMENT |
| LOW | crates/execution/src/javascript.rs | 601 | exists_results: HashMap<String, bool>, | COMMENT |
| 237 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/vfs/src/posix/mount_table.rs | 858 | // Behavioral check (robust through the ReadOnly/MountedVirtual wrappers the | COMMENT |
| MEDIUM | crates/execution/tests/javascript_v8.rs | 1116 | #[allow(dead_code)] // quarantined: see the live-stdin/tty harness note above | COMMENT |
| MEDIUM | crates/execution/tests/javascript_v8.rs | 1162 | #[allow(dead_code)] // quarantined: see the live-stdin/tty harness note above | COMMENT |
| MEDIUM | crates/execution/tests/javascript_v8.rs | 1209 | #[allow(dead_code)] // quarantined: see the live-stdin/tty harness note above | COMMENT |
| MEDIUM | crates/execution/tests/javascript_v8.rs | 1377 | #[allow(dead_code)] // quarantined: see the live-stdin/tty harness note above | COMMENT |
| MEDIUM | crates/execution/tests/javascript_v8.rs | 3788 | #[allow(dead_code)] // quarantined: see the live-stdin/tty harness note above | COMMENT |
| MEDIUM | crates/native-baseline/Cargo.toml | 8 | # Native floor for the differential perf harness. std-only on purpose: this is the | COMMENT |
| MEDIUM | crates/native-sidecar/tests/fetch_via_undici.rs | 58 | // common case, but robust to a fresh socket per request) and serve keep-alive | COMMENT |
| MEDIUM⚡ | website/.astro/data-store.json | 1 | [["Map",1,2,9,10],"meta::meta",["Map",3,4,5,6,7,8],"astro-version","5.18.2","content-config-digest","b13dc6e1e58a194d"," | CODE |
| MEDIUM | …/components/marketing/diagrams/HarnessArchitecture.tsx | 175 | markerEnd='url(#harness-arrow)' | CODE |
| MEDIUM | …/components/marketing/diagrams/HarnessArchitecture.tsx | 191 | markerEnd='url(#harness-arrow)' | CODE |
| MEDIUM | …ite/src/components/marketing/solutions/AgentOSPage.tsx | 1097 | // Continuous drift with a seamless wrap: the card list is doubled, so | COMMENT |
| MEDIUM | scripts/benchmarks/session.bench.ts | 292 | // ── workload resolution (robust to repo layout) ────────────────────── | COMMENT |
| MEDIUM | packages/playground/frontend/runtime-harness.ts | 106 | const statusElement = document.querySelector<HTMLElement>("#harness-status"); | CODE |
| MEDIUM⚡ | packages/playground/frontend/runtime-harness.html | 40 | #harness-status { | COMMENT |
| MEDIUM⚡ | packages/playground/frontend/runtime-harness.html | 46 | #harness-status[data-state="ready"] { | COMMENT |
| MEDIUM⚡ | packages/playground/frontend/runtime-harness.html | 50 | #harness-status[data-state="error"] { | COMMENT |
| MEDIUM | …untime-benchmarks/src/focused/wasi-ls-scaling.bench.ts | 220 | // Keep benchmark collection robust if a debug line is malformed. | COMMENT |
| MEDIUM | …untime-browser/tests/browser/converged-runtime.spec.ts | 12 | await expect(page.locator("#harness-status")).toHaveText("ready"); | CODE |
| MEDIUM | …untime-browser/tests/browser/converged-runtime.spec.ts | 31 | await expect(page.locator("#harness-status")).toHaveText("ready"); | CODE |
| MEDIUM | …untime-browser/tests/browser/converged-runtime.spec.ts | 50 | await expect(page.locator("#harness-status")).toHaveText("ready"); | CODE |
| MEDIUM | …untime-browser/tests/browser/converged-runtime.spec.ts | 69 | await expect(page.locator("#harness-status")).toHaveText("ready"); | CODE |
| MEDIUM | …untime-browser/tests/browser/converged-sidecar.spec.ts | 12 | await expect(page.locator("#harness-status")).toHaveText("ready"); | CODE |
| MEDIUM | …untime-browser/tests/browser/converged-sidecar.spec.ts | 36 | await expect(page.locator("#harness-status")).toHaveText("ready"); | CODE |
| MEDIUM | …untime-browser/tests/browser/converged-sidecar.spec.ts | 54 | await expect(page.locator("#harness-status")).toHaveText("ready"); | CODE |
| MEDIUM | …untime-browser/tests/browser/converged-sidecar.spec.ts | 71 | await expect(page.locator("#harness-status")).toHaveText("ready"); | CODE |
| MEDIUM | …untime-browser/tests/browser/converged-sidecar.spec.ts | 89 | await expect(page.locator("#harness-status")).toHaveText("ready"); | CODE |
| MEDIUM | …untime-browser/tests/browser/converged-sidecar.spec.ts | 106 | await expect(page.locator("#harness-status")).toHaveText("ready"); | CODE |
| MEDIUM | …untime-browser/tests/browser/converged-sidecar.spec.ts | 124 | await expect(page.locator("#harness-status")).toHaveText("ready"); | CODE |
| MEDIUM | packages/runtime-browser/tests/browser/harness.ts | 120 | await expect(page.locator("#harness-status")).toHaveText("ready"); | CODE |
| MEDIUM | …me-browser/tests/browser/converged-conformance.spec.ts | 17 | await expect(page.locator("#harness-status")).toHaveText("ready"); | CODE |
| MEDIUM | …me-browser/tests/browser/converged-conformance.spec.ts | 45 | await expect(page.locator("#harness-status")).toHaveText("ready"); | CODE |
| MEDIUM | …me-browser/tests/browser/converged-conformance.spec.ts | 70 | await expect(page.locator("#harness-status")).toHaveText("ready"); | CODE |
| MEDIUM | …me-browser/tests/browser/converged-conformance.spec.ts | 99 | await expect(page.locator("#harness-status")).toHaveText("ready"); | CODE |
| MEDIUM | …stry/native/patches/codex-source/build-codex-wasip1.sh | 6 | # This is the DIAGNOSTIC harness (builds codex IN its own workspace to find the | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/AGENTS.md | 123 | - **If a shared `src/` module carries helper code that only those included test harnesses use, gate the helper types/fun | CODE |
| MEDIUM | crates/CLAUDE.md | 123 | - **If a shared `src/` module carries helper code that only those included test harnesses use, gate the helper types/fun | CODE |
| MEDIUM | crates/native-sidecar-browser/src/lib.rs | 3 | //! Browser-side sidecar scaffold for the secure-exec runtime migration. | COMMENT |
| MEDIUM | crates/execution/src/lib.rs | 3 | //! Native execution plane scaffold for the secure-exec runtime migration. | COMMENT |
| MEDIUM | crates/client/tests/scaffold.rs | 1 | //! Integration test scaffold for `agentos-client`. | COMMENT |
| MEDIUM | crates/native-sidecar/src/vm.rs | 106 | // filesystem snapshot); scaffold it here so it exists even when the | COMMENT |
| MEDIUM | crates/native-sidecar/src/lib.rs | 3 | //! Native sidecar scaffold that composes the kernel and execution crates. | COMMENT |
| MEDIUM⚡ | website/.astro/data-store.json | 1 | [["Map",1,2,9,10],"meta::meta",["Map",3,4,5,6,7,8],"astro-version","5.18.2","content-config-digest","b13dc6e1e58a194d"," | CODE |
| MEDIUM⚡ | website/.astro/data-store.json | 1 | [["Map",1,2,9,10],"meta::meta",["Map",3,4,5,6,7,8],"astro-version","5.18.2","content-config-digest","b13dc6e1e58a194d"," | CODE |
| MEDIUM⚡ | website/.astro/data-store.json | 1 | [["Map",1,2,9,10],"meta::meta",["Map",3,4,5,6,7,8],"astro-version","5.18.2","content-config-digest","b13dc6e1e58a194d"," | CODE |
| MEDIUM | website/src/components/marketing/agentPrompt.ts | 2 | // agent at agentOS so it can scaffold a server + client and verify them end to | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/native-sidecar/tests/projection_bench.rs | 404 | // Step 1: read the .aospkg header + chunk1 manifest (commands included). | COMMENT |
| LOW⚡ | crates/native-sidecar/tests/projection_bench.rs | 418 | // Step 2: build the granular leaf mounts (+ collision check). | COMMENT |
| LOW⚡ | crates/native-sidecar/tests/projection_bench.rs | 424 | // Step 3: open the tar mount — decode the precomputed chunk2 index and | COMMENT |
| LOW⚡ | examples/workflows/server.ts | 33 | // Step 1: Clone the repo. Each step is an isolated, retryable unit of | COMMENT |
| LOW⚡ | examples/workflows/server.ts | 39 | // Step 2: An agent fixes the bug. The session is created and closed | COMMENT |
| LOW⚡ | examples/workflows/server.ts | 44 | // Step 3: Run the tests. The exit code feeds into the next step. | COMMENT |
| LOW⚡ | examples/workflows/server.ts | 115 | // Step 1: An agent reviews the code and writes findings to a file. | COMMENT |
| LOW⚡ | examples/workflows/server.ts | 118 | // Step 2: Read the review back from the VM filesystem. Its text is the | COMMENT |
| LOW⚡ | examples/workflows/server.ts | 124 | // Step 3: A second session applies fixes based on the review. | COMMENT |
| LOW | registry/agent/pi/src/adapter.ts | 871 | // Step 3: when no workspace extensions were discovered (the common case), | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/native-sidecar/tests/projection_bench.rs | 404 | // Step 1: read the .aospkg header + chunk1 manifest (commands included). | COMMENT |
| LOW⚡ | crates/native-sidecar/tests/projection_bench.rs | 418 | // Step 2: build the granular leaf mounts (+ collision check). | COMMENT |
| LOW⚡ | crates/native-sidecar/tests/projection_bench.rs | 424 | // Step 3: open the tar mount — decode the precomputed chunk2 index and | COMMENT |
| LOW⚡ | examples/workflows/server.ts | 33 | // Step 1: Clone the repo. Each step is an isolated, retryable unit of | COMMENT |
| LOW⚡ | examples/workflows/server.ts | 39 | // Step 2: An agent fixes the bug. The session is created and closed | COMMENT |
| LOW⚡ | examples/workflows/server.ts | 44 | // Step 3: Run the tests. The exit code feeds into the next step. | COMMENT |
| LOW⚡ | examples/workflows/server.ts | 115 | // Step 1: An agent reviews the code and writes findings to a file. | COMMENT |
| LOW⚡ | examples/workflows/server.ts | 118 | // Step 2: Read the review back from the VM filesystem. Its text is the | COMMENT |
| LOW⚡ | examples/workflows/server.ts | 124 | // Step 3: A second session applies fixes based on the review. | COMMENT |
| LOW | registry/agent/pi/src/adapter.ts | 871 | // Step 3: when no workspace extensions were discovered (the common case), | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/execution/src/node_import_cache.rs | 10544 | def capture(action): | CODE |
| LOW | crates/execution/src/node_import_cache.rs | 10548 | except Exception as error: | CODE |
| LOW | crates/native-sidecar/tests/python.rs | 1102 | except Exception as error: | CODE |
| LOW | crates/native-sidecar/tests/python.rs | 2012 | except Exception as error: | CODE |
| LOW | crates/native-sidecar/tests/python.rs | 3080 | except Exception as error: | CODE |
| LOW | crates/native-sidecar/tests/python.rs | 3215 | except Exception as error: | CODE |
| MEDIUM | crates/native-sidecar/tests/python.rs | 1098 | def capture(action): | CODE |
| LOW | crates/native-sidecar/src/plugins/sandbox_agent.rs | 1319 | except Exception as exc: | CODE |
| LOW | crates/native-sidecar/src/plugins/sandbox_agent.rs | 1343 | except Exception as exc: | CODE |
| LOW | crates/native-sidecar/src/plugins/sandbox_agent.rs | 1366 | except Exception as exc: | CODE |
| LOW | crates/native-sidecar/src/plugins/sandbox_agent.rs | 1390 | except Exception as exc: | CODE |
| LOW | crates/native-sidecar/src/plugins/sandbox_agent.rs | 1414 | except Exception as exc: | CODE |
| LOW | crates/native-sidecar/src/plugins/sandbox_agent.rs | 1438 | except Exception as exc: | CODE |
| LOW | crates/native-sidecar/src/plugins/sandbox_agent.rs | 1462 | except Exception as exc: | CODE |
| LOW | crates/native-sidecar/src/plugins/sandbox_agent.rs | 1486 | except Exception as exc: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | website/.astro/data-store.json | 1 | [["Map",1,2,9,10],"meta::meta",["Map",3,4,5,6,7,8],"astro-version","5.18.2","content-config-digest","b13dc6e1e58a194d"," | CODE |
| HIGH⚡ | website/.astro/data-store.json | 1 | [["Map",1,2,9,10],"meta::meta",["Map",3,4,5,6,7,8],"astro-version","5.18.2","content-config-digest","b13dc6e1e58a194d"," | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/ralph/ralph-docker.sh | 7 | # Usage: | COMMENT |
| LOW | registry/native/scripts/patch-std.sh | 8 | # Usage: | COMMENT |
| LOW | registry/native/scripts/test-gnu.sh | 9 | # Usage: | COMMENT |
| LOW | registry/native/scripts/patch-vendor.sh | 8 | # Usage: | COMMENT |
| LOW | registry/native/scripts/patch-wasi-libc.sh | 8 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …src/components/marketing/diagrams/AgentSessionDemo.tsx | 83 | print(report)`; | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | website/.astro/data-store.json | 1 | [["Map",1,2,9,10],"meta::meta",["Map",3,4,5,6,7,8],"astro-version","5.18.2","content-config-digest","b13dc6e1e58a194d"," | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | website/.astro/data-store.json | 1 | [["Map",1,2,9,10],"meta::meta",["Map",3,4,5,6,7,8],"astro-version","5.18.2","content-config-digest","b13dc6e1e58a194d"," | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/native-sidecar/tests/service.rs | 9758 | write_fixture(&command_root.join(command), b"placeholder"); | CODE |