App for Codex / Claude Code / Pi / OpenCode / Kimi Code / Grok Build, vibe coding anytime, anywhere
This report summarizes scanner evidence for tiann/hapi, a TypeScript project with 5,213 GitHub stars. SynthScan examined 526,125 lines of code across 2650 source files, recording 1488 pattern matches distributed across 13 syntactic categories. The legacy adjusted pattern signal is 4.2 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 1387 finding(s).
Are imports declared and package/API names verified? 51 finding(s).
Are wrappers, guards, and repeated structures necessary? 1034 finding(s).
Which changes need focused human review? 1488 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1488 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/e2e-fixtures/file-md-preview-fixture.tsx | 33 | function FileMarkdownPreviewFixture() { | CODE |
| LOW | web/src/test/setup.ts | 9 | function installMemoryLocalStorage(): void { | CODE |
| LOW | web/src/chat/reconcile.ts | 165 | function areAgentReasoningBlocksEqual(left: AgentReasoningBlock, right: AgentReasoningBlock): boolean { | CODE |
| LOW | web/src/chat/reconcile.ts | 182 | function areGeneratedImageBlocksEqual(left: GeneratedImageBlock, right: GeneratedImageBlock): boolean { | CODE |
| LOW | web/src/chat/reconcile.ts | 193 | function areCodexReviewBlocksEqual(left: CodexReviewBlock, right: CodexReviewBlock): boolean { | CODE |
| LOW | web/src/chat/modelConfig.ts | 25 | function parseCursorWireContextWindow(model: string): number | null { | CODE |
| LOW | web/src/chat/reducerTools.ts | 182 | export function collectToolIdsFromMessages(messages: NormalizedMessage[]): Set<string> { | CODE |
| LOW | web/src/chat/reducerTools.ts | 201 | export function extractTitleFromChangeTitleInput(input: unknown): string | null { | CODE |
| LOW | web/src/chat/reducerTimeline.ts | 67 | function mapAgentRunStatusToToolState(status: string | null): ToolCallBlock['tool']['state'] { | CODE |
| LOW | web/src/chat/reducerTimeline.ts | 81 | function attachCodexRoundSummaryToLatestGroup(blocks: ChatBlock[], summary: RoundSummary): void { | CODE |
| LOW | web/src/chat/reducerTimeline.ts | 105 | function isNonTerminalAgentRunState(state: ToolCallBlock['tool']['state']): boolean { | CODE |
| LOW | web/src/chat/reducerTimeline.ts | 109 | function shouldIgnoreAgentRunNonTerminalUpdateAfterTerminal( | CODE |
| LOW | web/src/chat/reducerTimeline.ts | 121 | function isCloseAgentCleanupUpdate(event: Record<string, unknown>): boolean { | CODE |
| LOW | web/src/chat/reducerTimeline.ts | 133 | function shouldIgnoreAgentRunCloseCleanupAfterTerminal( | CODE |
| LOW | web/src/chat/outline.ts | 53 | export function getConversationMessageAnchorId(messageId: string): string { | CODE |
| LOW | web/src/chat/presentation.ts | 79 | export function formatMessageTimestampTitle(date: Date): string { | CODE |
| LOW | web/src/chat/normalizeAgent.ts | 7 | function normalizeToolResultPermissions(value: unknown): ToolResultPermission | undefined { | CODE |
| LOW | web/src/chat/normalizeAgent.ts | 219 | function normalizeCodexReviewFinding(value: unknown): CodexReviewFinding | null { | CODE |
| LOW | web/src/chat/reducer.ts | 28 | function isUsageVisibleInParentContext(msg: NormalizedMessage): boolean { | CODE |
| LOW | web/src/chat/reducer.ts | 78 | function isRedundantGoalStatusMessage(event: AgentEvent): boolean { | CODE |
| LOW | web/src/chat/normalize.ts | 8 | export function normalizeDecryptedMessage(message: DecryptedMessage): NormalizedMessage | null { | CODE |
| LOW | web/src/chat/sessionStatus.ts | 76 | function backgroundTaskCompletions(messages: readonly NormalizedMessage[]): { | CODE |
| LOW | web/src/chat/inlineMediaSource.ts | 11 | export function inlineMediaSourceFromWire(value: unknown): InlineMediaSource | undefined { | CODE |
| LOW | web/src/chat/inlineMediaSource.ts | 31 | export function areInlineMediaSourcesEqual(left?: InlineMediaSource, right?: InlineMediaSource): boolean { | CODE |
| LOW | web/src/chat/toolGroups.ts | 225 | export function isEligibleForToolGrouping(block: ToolCallBlock): boolean { | CODE |
| LOW | web/src/utils/terminalSupport.ts | 7 | export function isRemoteTerminalSupported(metadata: SessionMetadataSummary | null | undefined): boolean { | CODE |
| LOW | web/src/realtime/RealtimeSession.ts | 62 | export function resetRealtimeSessionState() { | CODE |
| LOW | web/src/realtime/RealtimeSession.ts | 82 | export function getCurrentRealtimeSessionId(): string | null { | CODE |
| LOW | web/src/realtime/gemini/toolAdapter.ts | 68 | export async function handleGeminiFunctionCalls( | CODE |
| LOW | web/src/realtime/hooks/voiceContextPlan.ts | 74 | export function buildSessionVoiceContextPlan( | CODE |
| LOW | web/src/realtime/hooks/contextFormatters.ts | 151 | function extractSpeakableFromContent(content: unknown): string | null { | CODE |
| LOW | web/src/realtime/hooks/contextFormatters.ts | 184 | function isNonSpeakableAgentPayload(content: unknown): boolean { | CODE |
| LOW | web/src/realtime/hooks/contextFormatters.ts | 200 | export function extractLastAssistantSpeakable(messages: DecryptedMessage[]): string | null { | CODE |
| LOW | web/src/components/PwaUpdateBanner.tsx | 59 | export function PwaUpdateBannerWithStatusOffset({ | CODE |
| LOW | web/src/components/SessionRowSummary.tsx | 65 | function formatCodexImportedRelativeTime( | CODE |
| LOW | web/src/components/SessionExportDialog.tsx | 39 | function parseSessionExportTooLarge(error: unknown): HapiSessionExportTooLarge | null { | CODE |
| LOW | web/src/components/SessionList.tsx | 139 | function isPinnedInProgressSession(session: SessionSummary): boolean { | CODE |
| LOW | web/src/components/SessionList.tsx | 247 | export function deduplicateSessionsByAgentId(sessions: SessionSummary[], selectedSessionId?: string | null): SessionSumm | CODE |
| LOW | web/src/components/SessionList.tsx | 283 | export function isSidebarEmptySessionStub(session: SessionSummary): boolean { | CODE |
| LOW | web/src/components/SessionList.tsx | 292 | export function shouldShowSessionInSidebar(session: SessionSummary, selectedSessionId?: string | null): boolean { | CODE |
| LOW | web/src/components/SessionList.tsx | 325 | export function getNextSessionVisibleCount(current: number, step: number, total: number): number { | CODE |
| LOW | web/src/components/SessionList.tsx | 329 | export function getPreviousSessionVisibleCount(current: number, step: number): number { | CODE |
| LOW | web/src/components/SessionList.tsx | 391 | export function expandSelectedSessionCollapseOverrides( | CODE |
| LOW | web/src/components/SessionList.tsx | 1191 | export function getPullRefreshIndicatorRotation(state: PullToRefreshState): number { | CODE |
| LOW | web/src/components/SessionHeader.tsx | 33 | export function resolveSessionHeaderMachineLabel( | CODE |
| LOW | web/src/components/SessionAttentionIndicator.tsx | 21 | export function SessionAttentionIndicator(props: { | CODE |
| LOW | web/src/components/MarkdownRenderer.tsx | 61 | function StandaloneMarkdownContent(props: MarkdownRendererProps) { | CODE |
| LOW | web/src/components/LazyRainbowText.tsx | 96 | function processChildrenForRainbow(children: React.ReactNode): React.ReactNode { | CODE |
| LOW | web/src/components/SessionChat.tsx | 136 | export function opencodeEffortOptionsInvalidationKey( | CODE |
| LOW | web/src/components/SessionChat.tsx | 146 | export function isRewindForkFallbackError(error: unknown): boolean { | CODE |
| LOW | web/src/components/SessionChat.tsx | 170 | export function buildAgyComposerModelOptions( | CODE |
| LOW | web/src/components/SessionChat.tsx | 183 | export async function applyModelChangeWithReasoningRollback(args: { | CODE |
| LOW | web/src/components/SessionChat.tsx | 208 | export function shouldClearReasoningEffortForModelChange(args: { | CODE |
| LOW | web/src/components/SessionChat.tsx | 237 | export function shouldAutoClearPendingSchedule(pending: PendingSchedule | null): boolean { | CODE |
| LOW | web/src/components/SessionChat.tsx | 249 | export function isScratchlistToggleHotkey(e: { | CODE |
| LOW | web/src/components/SessionChat.tsx | 284 | export function isScratchlistHotkeyBlockedTarget(target: EventTarget | null): boolean { | CODE |
| LOW | web/src/components/SessionChat.tsx | 386 | export function mergeStagedAttachmentsInOrder( | CODE |
| LOW | web/src/components/SessionChat.tsx | 394 | function isUninvokedScheduledMessage(message: DecryptedMessage): boolean { | CODE |
| LOW | web/src/components/SessionChat.tsx | 534 | export function resolveLatestCompletedBoundaryIdForView( | CODE |
| LOW | web/src/components/Fue.tsx | 51 | export function computeFueCalloutPlacement(params: { | CODE |
| 924 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | cli/src/agent/__tests__/runAgentPty.test.ts | 638 | expect(harness.m.resize.mock.calls.at(-1)).toEqual([120, 40]) | CODE |
| CRITICAL | cli/src/agent/__tests__/runAgentPty.test.ts | 841 | const crWrites = harness.m.write.mock.calls.filter((c) => c[0] === '\r').length | CODE |
| CRITICAL | cli/src/agent/__tests__/runAgentPty.test.ts | 874 | const textWrites = harness.m.write.mock.calls.filter((c) => c[0] === 'hi').length | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 288 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as ( | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 343 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as ( | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 391 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as (message: { | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 417 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as (message: any, localId: string) => | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 418 | const cancelQueued = harness.session.onCancelQueuedMessage.mock.calls.at(-1)![0] as (localId: string) => boolean | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 438 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as (message: ReturnType<typeof userMes | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 463 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as (message: ReturnType<typeof userMes | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 516 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as (message: ReturnType<typeof userMes | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 574 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as (message: ReturnType<typeof userMes | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 619 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as (message: ReturnType<typeof userMes | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 667 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as (message: { | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 740 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as (message: ReturnType<typeof userMes | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 780 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as (message: ReturnType<typeof userMes | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 839 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as (message: ReturnType<typeof userMes | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 892 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as (message: { | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 948 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as (message: { | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 1118 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as ( | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 1149 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as ( | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 1171 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as ( | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 1202 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as ( | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 1237 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as ( | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 1248 | const onCancelQueuedMessage = harness.session.onCancelQueuedMessage.mock.calls.at(-1)![0] as (localId: string) = | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 1307 | const onUserMessage = harness.session.onUserMessage.mock.calls.at(-1)![0] as (message: { | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 1762 | const onCancelQueuedMessage = harness.session.onCancelQueuedMessage.mock.calls.at(-1)![0] as (localId: string) = | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 1810 | const metadataUpdater = harness.session.updateMetadata.mock.calls.at(-1)![0] as (meta: Record<string, unknown>) | CODE |
| CRITICAL | cli/src/pi/runPi.test.ts | 1903 | const onCancelQueuedMessage = harness.session.onCancelQueuedMessage.mock.calls.at(-1)![0] as (localId: string) = | CODE |
| CRITICAL | cli/src/opencode/runOpencode.test.ts | 718 | const messages = harness.session.sendAgentMessage.mock.calls.map((call) => (call[0] as { message: string }).mess | CODE |
| CRITICAL | cli/src/opencode/runOpencode.test.ts | 754 | const messages = harness.session.sendAgentMessage.mock.calls.map((call) => (call[0] as { message: string }).mess | CODE |
| CRITICAL | …/main/kotlin/app/hapi/protocol/window/WindowMessage.kt | 143 | app.hapi.protocol.wire.HapiJson.encodeToJsonElement( | CODE |
| CRITICAL | …n/app/hapi/companion/feature/chat/ChatViewModelTest.kt | 704 | app.hapi.companion.feature.chat.blocks.planProposalMarkdown(it.tool) != null | CODE |
| CRITICAL | …n/app/hapi/companion/feature/chat/ChatViewModelTest.kt | 732 | app.hapi.companion.feature.chat.blocks.planProposalMarkdown(block.tool)?.let { plan -> | CODE |
| CRITICAL | …ompanion/feature/newsession/NewSessionViewModelTest.kt | 408 | assertEquals(listOf("default", "read-only", "yolo"), app.hapi.protocol.catalog.PermissionModes.forLaunch("codex" | CODE |
| CRITICAL | …/app/hapi/companion/feature/settings/SettingsScreen.kt | 161 | app.hapi.companion.ui.components.PrivacyPolicyLink() | CODE |
| CRITICAL | …in/app/hapi/companion/feature/pairing/PairingScreen.kt | 109 | app.hapi.companion.ui.components.PrivacyPolicyLink() | CODE |
| CRITICAL | …tlin/app/hapi/companion/feature/chat/ChatTranscript.kt | 244 | app.hapi.companion.ui.theme.ReadingColumn(modifier = rowModifier) { | CODE |
| CRITICAL | …pi/companion/feature/chat/blocks/ToolGroupBlockView.kt | 37 | app.hapi.companion.feature.chat.ToolCardPresentation("🔧", title, summary.takeIf { it.isNotEmpty() }), | CODE |
| CRITICAL | …api/companion/feature/chat/blocks/ToolCallBlockView.kt | 52 | app.hapi.companion.feature.chat.toolSummaryPresentation(tool, basePath, resources) | CODE |
| CRITICAL | …api/companion/feature/chat/blocks/ToolCallBlockView.kt | 55 | val steps = processSteps ?: block.children.size.takeIf { app.hapi.companion.feature.chat.opensToolProcess(block) } | CODE |
| CRITICAL | …p/hapi/companion/feature/chat/composer/ChatComposer.kt | 155 | textStyle = app.hapi.companion.ui.theme.HapiTypography.body.copy( | CODE |
| CRITICAL | …pp/hapi/companion/feature/newsession/NewSessionForm.kt | 287 | copilotAgentMode = app.hapi.protocol.catalog.CopilotAgentMode.normalize(base.copilotAgentMode).wireId, | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | web/src/chat/tracer.ts | 91 | // robust even when the SDK never emits a prompt-holding sidechain root | COMMENT |
| MEDIUM | cli/src/codex/shared/queue.ts | 247 | // Definitely rejected; restoring a removed queued item is safe. Never restore an unknown dispatch. | COMMENT |
| MEDIUM | cli/src/modules/common/agyModels.ts | 191 | // Build the env for the one-shot `agy models` probe. Auth must be as robust as | COMMENT |
| MEDIUM⚡ | …iClientTests/Chat/ChatInteractorScratchlistTests.swift | 134 | #expect(harness.interactor.composerText == "note text") | COMMENT |
| MEDIUM⚡ | …iClientTests/Chat/ChatInteractorScratchlistTests.swift | 143 | #expect(harness.interactor.composerText == "draft\nnote") | COMMENT |
| MEDIUM⚡ | …iClientTests/Chat/ChatInteractorScratchlistTests.swift | 152 | #expect(harness.interactor.composerText == "draft") | COMMENT |
| MEDIUM⚡ | …iClientTests/Chat/ChatInteractorScratchlistTests.swift | 167 | #expect(harness.scratchlist.createCalls.count == 1) | COMMENT |
| MEDIUM⚡ | …iClientTests/Chat/ChatInteractorScratchlistTests.swift | 168 | #expect(harness.scratchlist.createCalls[0].sessionId == "sess-1") | COMMENT |
| MEDIUM⚡ | …iClientTests/Chat/ChatInteractorScratchlistTests.swift | 169 | #expect(harness.scratchlist.createCalls[0].text == "park me") | COMMENT |
| MEDIUM⚡ | …iClientTests/Chat/ChatInteractorScratchlistTests.swift | 170 | #expect(harness.scratchlist.createCalls[0].attachments.isEmpty) | COMMENT |
| MEDIUM⚡ | …iClientTests/Chat/ChatInteractorScratchlistTests.swift | 171 | #expect(harness.notices == ["Draft parked to scratchlist"]) | COMMENT |
| MEDIUM | …iClientTests/Chat/ChatInteractorScratchlistTests.swift | 188 | #expect(harness.interactor.composerText == "draft more") | COMMENT |
| MEDIUM | …iClientTests/Chat/ChatInteractorScratchlistTests.swift | 199 | #expect(harness.interactor.composerText == "keep me") | COMMENT |
| MEDIUM⚡ | …iClientTests/Chat/ChatInteractorScratchlistTests.swift | 212 | #expect(harness.interactor.composerText == "keep me too") | COMMENT |
| MEDIUM⚡ | …iClientTests/Chat/ChatInteractorScratchlistTests.swift | 222 | #expect(harness.scratchlist.createCalls.isEmpty) | COMMENT |
| MEDIUM⚡ | …iClientTests/Chat/ChatInteractorScratchlistTests.swift | 223 | #expect(harness.interactor.composerText == " ") | COMMENT |
| MEDIUM⚡ | …iClientTests/Chat/ChatInteractorScratchlistTests.swift | 233 | #expect(harness.interactor.composerText == "stranded draft") | COMMENT |
| MEDIUM⚡ | …iClientTests/Chat/ChatInteractorScratchlistTests.swift | 234 | #expect(harness.events.isEmpty) | COMMENT |
| MEDIUM | …iClientTests/Chat/ChatInteractorScratchlistTests.swift | 248 | #expect(harness.interactor.scratchlistCount == 2) | COMMENT |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 367 | #expect(await harness.row(localId: "local-1")?.id == "local-1") | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 368 | #expect(harness.interactor.composerText.isEmpty) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 369 | #expect(harness.drafts.storage[chatSessionID] == nil) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 501 | let row = try #require(await harness.row(localId: "local-1")) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 510 | #expect(harness.interactor.attachments.items.isEmpty) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 517 | #expect(await eventually { harness.interactor.attachments.allReady }) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 549 | #expect(harness.interactor.composerText == "hold on") | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 550 | #expect(harness.interactor.attachments.items.count == 1) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 554 | #expect(await eventually { harness.interactor.attachments.allReady }) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 595 | #expect(await eventually { harness.interactor.attachments.allReady }) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 601 | #expect(harness.interactor.attachments.items.isEmpty) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 605 | #expect(await eventually { harness.interactor.attachments.allReady }) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 610 | #expect(harness.interactor.attachments.items.isEmpty) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 695 | #expect(await eventually { await harness.performer.count("POST", pathSuffix: "/approve") == 1 }) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 697 | #expect(await eventually { await harness.performer.count("POST", pathSuffix: "/approve") == 2 }) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 699 | #expect(await eventually { await harness.performer.count("POST", pathSuffix: "/approve") == 3 }) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 701 | #expect(await eventually { await harness.performer.count("POST", pathSuffix: "/deny") == 1 }) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 730 | #expect(await eventually { await harness.performer.count("POST", pathSuffix: "/approve") == 1 }) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 732 | #expect(await eventually { await harness.performer.count("POST", pathSuffix: "/approve") == 2 }) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 734 | #expect(await eventually { await harness.performer.count("POST", pathSuffix: "/deny") == 1 }) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 800 | #expect(await eventually { await harness.performer.count("POST", pathSuffix: "/approve") == 1 }) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 802 | #expect(harness.interactor.permissionOverrides["r-live"] == .resolving) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 807 | #expect(harness.interactor.permissionOverrides.isEmpty) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 818 | #expect(await harness.performer.count("POST", pathSuffix: "/collaboration-mode") == 0) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 827 | #expect(await eventually { await harness.performer.count("POST", pathSuffix: "/collaboration-mode") == 1 }) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 828 | #expect(await harness.performer.count("POST", pathSuffix: "/model") == 0) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 834 | #expect(await harness.performer.bodies("POST", pathSuffix: "/collaboration-mode") == [#"{"mode":"plan"}"#, #"{"m | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 839 | #expect(await harness.performer.count("POST", pathSuffix: "/collaboration-mode") == 2) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 859 | #expect(await harness.performer.count("POST", pathSuffix: "/collaboration-mode") == 0) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 866 | #expect(await harness.performer.count("POST", pathSuffix: "/collaboration-mode") == 1) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 875 | #expect(harness.interactor.config.collaborationMode == .plan) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 876 | #expect(await eventually { !harness.interactor.configOpPending }) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 877 | #expect(harness.interactor.config.collaborationMode == nil) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 878 | #expect(harness.events.contains { if case .notice = $0 { return true }; return false }) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 998 | #expect(await harness.performer.count("POST", pathSuffix: "/codex/plan/implement") == 0) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 1005 | #expect(harness.interactor.composerFocusRequest == 1) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 1006 | #expect(harness.interactor.composerText == "Please refine step two") | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 1007 | #expect(harness.store.detail(for: chatSessionID)?.collaborationMode == .plan) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 1008 | #expect(await harness.performer.exchanges.filter { $0.method == "POST" }.isEmpty) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 1009 | #expect(!harness.interactor.codexPlanActions(planId: "plan-1").isVisible) | STRING |
| MEDIUM⚡ | …t/Tests/HapiClientTests/Chat/ChatInteractorTests.swift | 1012 | #expect(harness.interactor.composerFocusRequest == 1) | STRING |
| 84 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | web/e2e-fixtures/history-load-fixture.tsx | 81 | // - ?shortPages=1 — `before` pages return 2 messages regardless of limit, so | COMMENT |
| LOW | web/src/chat/normalizeAgent.ts | 541 | COMMENT | |
| LOW | web/src/components/SessionChat.tsx | 1781 | intent: ComposerSendIntent = 'default', | COMMENT |
| LOW | web/src/components/CodeBlock.tsx | 61 | const scrollHeight = props.maxHeight ?? DEFAULT_SCROLL_HEIGHT | COMMENT |
| LOW | web/src/components/assistant-ui/markdown-text.tsx | 41 | // remarkRepairTables must run immediately after remarkGfm — it reads file.value | COMMENT |
| LOW | web/src/components/assistant-ui/markdown-text.tsx | 241 | // <a href> is preserved for the onClick layer to handle. | COMMENT |
| LOW | web/src/components/assistant-ui/markdown-text.tsx | 261 | } | COMMENT |
| LOW | web/src/hooks/useSSE.ts | 81 | COMMENT | |
| LOW | web/src/hooks/mutations/useSendMessage.ts | 241 | options?.onSuccess?.(input.sessionId) | COMMENT |
| LOW | web/src/lib/use-hub-scratchlist.ts | 221 | setMigrationStatus('idle') | COMMENT |
| LOW | web/src/lib/use-hub-scratchlist.ts | 261 | migrationAttemptedRef.current = true | COMMENT |
| LOW | web/src/lib/use-hub-scratchlist.ts | 521 | }) | COMMENT |
| LOW | cli/src/runner/runner.integration.test.ts | 101 | beforeEach(async () => { | COMMENT |
| LOW | cli/src/runner/runner.integration.test.ts | 141 | // exhaust the hook budget before the marker sweep runs. Bound it: if the | COMMENT |
| LOW | cli/src/runner/run.ts | 201 | logger.debug(`[RUNNER RUN] Process about to exit with code: ${code}`); | COMMENT |
| LOW | cli/src/runner/run.ts | 501 | awaiter(existingSession); | COMMENT |
| LOW | cli/src/runner/run.ts | 1561 | // Snapshot original CLI argv via the project's canonical normalizer so the | COMMENT |
| LOW | cli/src/runner/run.ts | 1701 | } | COMMENT |
| LOW | cli/src/runner/run.ts | 1781 | if (typeof installedCliMtimeMs === 'number' && | COMMENT |
| LOW | cli/src/runner/run.ts | 1801 | // 3. Only clear the heartbeat + exit when handoff is confirmed; if it | COMMENT |
| LOW | cli/src/claude/claudeRemoteLauncher.ts | 341 | this.abortFuture = new Future<void>(); | COMMENT |
| LOW | cli/src/claude/claudeRemoteLauncher.ts | 361 | // following onReady(). If claudeRemote() throws while a | COMMENT |
| LOW | cli/src/claude/claudeRemoteLauncher.ts | 401 | // turn. Without this, scheduleProcessing()'s setTimeout(fn,0) fires | COMMENT |
| LOW | cli/src/claude/claudeRemoteLauncher.ts | 441 | if ((modeHash && msg.hash !== modeHash) || msg.isolate) { | COMMENT |
| LOW | cli/src/claude/claudeRemoteLauncher.ts | 541 | } | COMMENT |
| LOW | cli/src/claude/claudeRemoteLauncher.ts | 561 | // that case would clear the streak every other attempt | COMMENT |
| LOW | …/src/claude/claudeRemoteLauncher.launchFailure.test.ts | 321 | // call 2 = reaches onReady, then throws -> streak resets to 0 (NOT | COMMENT |
| LOW | …/src/claude/claudeRemoteLauncher.launchFailure.test.ts | 381 | const { claudeRemoteLauncher } = await import('./claudeRemoteLauncher'); | COMMENT |
| LOW | cli/src/claude/utils/sdkToLogConverter.ts | 301 | COMMENT | |
| LOW | cli/src/claude/utils/sdkToLogConverter.ts | 361 | // Best-effort 1M-vs-200k seed for turn 1, before any authoritative | COMMENT |
| LOW | cli/src/claude/utils/sessionHookForwarder.ts | 281 | return; | COMMENT |
| LOW | cli/src/claude/utils/sessionHookForwarder.ts | 301 | // SessionStart hook). The stdin format is agy's camelCase schema | COMMENT |
| LOW | cli/src/codex/utils/permissionHandler.ts | 121 | } | COMMENT |
| LOW | cli/src/agent/bracketedPaste.ts | 1 | // Bracketed-paste (DECSET 2004) framing for PTY input. | COMMENT |
| LOW | cli/src/agent/runnerLifecycle.ts | 21 | cleanupConfirmed: (options?: { timeoutMs?: number }) => Promise<void> | COMMENT |
| LOW | cli/src/agent/backends/acp/AcpMessageHandler.ts | 601 | COMMENT | |
| LOW | cli/src/pi/runPi.ts | 401 | }; | COMMENT |
| LOW | cli/src/pi/runPi.ts | 541 | if (!dequeued) return; | COMMENT |
| LOW | cli/src/pi/runPi.ts | 1461 | // starts. Sending new_session here races get_state and discards a resumed session. | COMMENT |
| LOW | cli/src/agy/utils/agyTranscriptTypes.ts | 21 | // Raw agy tool arguments. Values are usually strings (CommandLine, | COMMENT |
| LOW | cli/src/agy/headless/agyHeadlessDriver.ts | 521 | // can parse buffered records. | COMMENT |
| LOW | cli/src/agy/headless/agyHeadlessDriver.ts | 701 | // established by that record. | COMMENT |
| LOW | cli/src/agy/headless/agyHeadlessDriver.ts | 821 | // already removed it from the queue and the hub delivery stays | COMMENT |
| LOW | cli/src/api/apiSession.ts | 1061 | COMMENT | |
| LOW | cli/src/modules/common/piModels.ts | 141 | // The probe child has no further use once the response (or a | COMMENT |
| LOW | cli/src/opencode/loop.ts | 61 | session.onSessionFound(opts.resumeSessionId); | COMMENT |
| LOW | cli/src/opencode/opencodeRemoteLauncher.test.ts | 21 | stderrHandler: null as null | ((error: { type: string; message: string; raw: string }) => void), | COMMENT |
| LOW | cli/src/opencode/opencodeRemoteLauncher.test.ts | 661 | expect(compactHarness.calls.length).toBe(1); | COMMENT |
| LOW | cli/src/opencode/opencodeRemoteLauncher.test.ts | 981 | COMMENT | |
| LOW | cli/src/opencode/opencodeRemoteLauncher.test.ts | 1061 | // reproduce this specific window. | COMMENT |
| LOW | cli/src/opencode/opencodeRemoteLauncher.test.ts | 1201 | const messages = sessionEvents.filter((event) => event.type === 'message').map((event) => event.message); | COMMENT |
| LOW | cli/src/opencode/opencodeRemoteLauncher.test.ts | 1281 | }); | COMMENT |
| LOW | cli/src/opencode/opencodeRemoteLauncher.test.ts | 1301 | // (handleAbort()'s existing session.queue.reset() call clears any | COMMENT |
| LOW | cli/src/opencode/opencodeRemoteLauncher.test.ts | 1461 | await Promise.race([ | COMMENT |
| LOW | cli/src/opencode/runOpencode.test.ts | 381 | await new Promise((resolve) => setTimeout(resolve, 0)); | COMMENT |
| LOW | cli/src/opencode/runOpencode.test.ts | 661 | it('queues /compact like a prompt while a remote-mode session is still initializing (ACP backend not ready yet), ins | COMMENT |
| LOW | cli/src/opencode/runOpencode.test.ts | 721 | const messageQueue = harness.opencodeLoopArgs[0]?.messageQueue as { queue: unknown[] }; | COMMENT |
| LOW | cli/src/opencode/runOpencode.test.ts | 761 | it('resumes queuing /compact once a torn-down session re-enters remote mode (compactTeardownInProgress resets on the | COMMENT |
| LOW | cli/src/opencode/runOpencode.ts | 81 | const messageQueue = new MessageQueue2<OpencodeMode>((mode) => hashObject({ | COMMENT |
| LOW | cli/src/opencode/runOpencode.ts | 101 | // comment on RemoteLauncherBase for exactly when that fires). While | COMMENT |
| 172 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | web/src/components/assistant-ui/markdown-text.tsx | 39 | // ── Plugin array ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/components/assistant-ui/markdown-text.tsx | 126 | // ── URI scheme policy (inlined from url-scheme-policy.ts) ─────────────────── | COMMENT |
| MEDIUM | web/src/components/assistant-ui/markdown-text.tsx | 238 | // ── URL sanitize transform (deny-only) ────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/components/assistant-ui/markdown-text.tsx | 265 | // ── Allowed-schemes state (inlined from useAllowedSchemes.ts) ─────────────── | COMMENT |
| MEDIUM | web/src/components/assistant-ui/markdown-text.tsx | 359 | // ── UriConfirmContext — one dialog per markdown root ──────────────────────── | COMMENT |
| MEDIUM | web/src/components/assistant-ui/markdown-text.tsx | 433 | // ── Components ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/components/assistant-ui/markdown-a.test.tsx | 77 | // ── classifyScheme ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/components/assistant-ui/markdown-a.test.tsx | 142 | // ── denyOnlyTransform ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/components/assistant-ui/markdown-a.test.tsx | 162 | // ── useAllowedSchemes (inlined hook, tested via A component) ────────────────── | COMMENT |
| MEDIUM | web/src/components/assistant-ui/markdown-a.test.tsx | 213 | // ── <A> component — click handler ──────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/components/assistant-ui/markdown-a.test.tsx | 251 | // ── relative / no-scheme hrefs — fail-closed (#1452) ───────────────────────── | COMMENT |
| MEDIUM | web/src/components/assistant-ui/markdown-a.test.tsx | 251 | // ── relative / no-scheme hrefs — fail-closed (#1452) ───────────────────────── | COMMENT |
| MEDIUM | web/src/components/assistant-ui/markdown-a.test.tsx | 471 | // ── intra-tab cross-provider sync (schemeListeners emitter) ────────────────── | COMMENT |
| MEDIUM | web/src/hooks/useReasoningCollapse.ts | 46 | // ── Module-level singleton store ──────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/lib/remark-non-https-autolink.test.ts | 24 | // ── Basic autolink ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/lib/remark-non-https-autolink.test.ts | 52 | // ── http/https NOT converted (GFM handles those) ───────────────────── | COMMENT |
| MEDIUM | web/src/lib/remark-non-https-autolink.test.ts | 64 | // ── Existing link nodes not touched ────────────────────────────────── | COMMENT |
| MEDIUM | web/src/lib/remark-non-https-autolink.test.ts | 76 | // ── Code blocks / inline code not touched ──────────────────────────── | COMMENT |
| MEDIUM | web/src/lib/remark-non-https-autolink.test.ts | 91 | // ── Trailing punctuation handling ──────────────────────────────────── | COMMENT |
| MEDIUM | web/src/lib/remark-non-https-autolink.test.ts | 142 | // ── Multiple URIs in one text node ─────────────────────────────────── | COMMENT |
| MEDIUM | web/src/lib/remark-non-https-autolink.test.ts | 155 | // ── Scheme-only / edge cases ───────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/lib/remark-file-path-links.test.ts | 96 | // ── inlineCode autolinking (prong 2) ───────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/lib/remark-file-path-links.test.ts | 157 | // ── explicit markdown link rewriting (prong 3) ─────────────────────────────── | COMMENT |
| MEDIUM | web/src/lib/remark-file-path-links.test.ts | 228 | // ── standalone gate: rewriteExplicitLinks:false (file-preview surface) ──────── | COMMENT |
| MEDIUM | web/src/lib/remark-repair-tables.test.ts | 29 | // ── String-level function ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/lib/remark-repair-tables.test.ts | 158 | // ── Plugin (parse + transform + stringify) ──────────────────────────────────── | COMMENT |
| MEDIUM | web/src/lib/remark-repair-tables.ts | 18 | // ── Helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/lib/remark-repair-tables.ts | 81 | // ── String-level preprocessor ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | web/src/lib/remark-repair-tables.ts | 144 | // ── Plugin ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | cli/src/agent/backends/acp/AcpMessageHandler.test.ts | 2080 | // ── tool_call: at least one must have been emitted ──────────────── | COMMENT |
| MEDIUM | cli/src/agent/backends/acp/AcpMessageHandler.test.ts | 2089 | // a typed object from the human-readable title. ─────────────── | COMMENT |
| MEDIUM | cli/src/agent/backends/acp/AcpMessageHandler.test.ts | 2114 | // ── reasoning: at least one prose thought must have surfaced ─────── | COMMENT |
| MEDIUM | cli/src/agent/backends/acp/AcpMessageHandler.test.ts | 2128 | // ── text messages: none should be a raw JSON blob ───────────────── | COMMENT |
| MEDIUM | cli/src/agent/backends/acp/AcpMessageHandler.test.ts | 2139 | // ── optional: assert text messages exist for complete captures ───── | COMMENT |
| MEDIUM | cli/src/modules/pingPeer/pingPeer.ts | 545 | // ── inspect_peer (read twin; no resume) ───────────────────────────────────── | COMMENT |
| MEDIUM | …kotlin/app/hapi/protocol/markdown/FilePathLinksTest.kt | 10 | // ── detectFilePathLinks ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …kotlin/app/hapi/protocol/markdown/FilePathLinksTest.kt | 102 | // ── matchWholeFilePath (inline code spans) ─────────────────────────────── | COMMENT |
| MEDIUM | …kotlin/app/hapi/protocol/markdown/FilePathLinksTest.kt | 128 | // ── rewriteExplicitLinkTarget ──────────────────────────────────────────── | COMMENT |
| MEDIUM | …n/app/hapi/protocol/markdown/MarkdownTransformsTest.kt | 20 | // ── repairTables (remark-repair-tables parity) ─────────────────────────── | COMMENT |
| MEDIUM | …n/app/hapi/protocol/markdown/MarkdownTransformsTest.kt | 100 | // ── Parser configuration (disableIndentedCode + extensions) ────────────── | COMMENT |
| MEDIUM | …n/app/hapi/protocol/markdown/MarkdownTransformsTest.kt | 153 | // ── stripCjkAutolinkArtifacts ──────────────────────────────────────────── | COMMENT |
| MEDIUM | …otlin/app/hapi/protocol/markdown/MarkdownTransforms.kt | 32 | // ── Table repair (remark-repair-tables port) ───────────────────────────── | COMMENT |
| MEDIUM | …otlin/app/hapi/protocol/markdown/MarkdownTransforms.kt | 163 | // ── Indented-code disable + parser factory ─────────────────────────────── | COMMENT |
| MEDIUM | …otlin/app/hapi/protocol/markdown/MarkdownTransforms.kt | 205 | // ── CJK autolink artifact strip (remark-strip-cjk-autolink port) ───────── | COMMENT |
| MEDIUM | …otlin/app/hapi/protocol/markdown/MarkdownTransforms.kt | 230 | // ── File path link detection (remark-file-path-links port) ─────────────── | COMMENT |
| MEDIUM | …main/kotlin/app/hapi/companion/ui/markdown/Markdown.kt | 86 | // ── Link handling ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …main/kotlin/app/hapi/companion/ui/markdown/Markdown.kt | 112 | // ── Entry point ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …main/kotlin/app/hapi/companion/ui/markdown/Markdown.kt | 179 | // ── Block rendering ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …main/kotlin/app/hapi/companion/ui/markdown/Markdown.kt | 301 | // ── Table rendering ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …main/kotlin/app/hapi/companion/ui/markdown/Markdown.kt | 441 | // ── Inline rendering ───────────────────────────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/guide/notifications.md | 85 | export ELEVENLABS_API_KEY="your-api-key" | CODE |
| HIGH | docs/guide/voice-assistant.md | 71 | export ELEVENLABS_API_KEY="your-api-key" | CODE |
| HIGH | docs/guide/voice-assistant.md | 92 | export GEMINI_API_KEY="your-api-key" # or GOOGLE_API_KEY | CODE |
| HIGH | docs/guide/voice-assistant.md | 99 | export DASHSCOPE_API_KEY="your-api-key" # or QWEN_API_KEY | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | cli/scripts/release-all.ts | 119 | // Step 1: Update all release versions before building or publishing. | COMMENT |
| LOW⚡ | cli/scripts/release-all.ts | 124 | // Step 2: Build all platform binaries (with embedded web assets) | COMMENT |
| LOW⚡ | cli/scripts/release-all.ts | 132 | // Step 3: Prepare and publish platform packages | COMMENT |
| LOW⚡ | cli/scripts/release-all.ts | 141 | // Step 4: Verify all platform packages are live on npm before publishing the main package. | COMMENT |
| LOW⚡ | cli/scripts/release-all.ts | 151 | // Step 5: Publish main package | COMMENT |
| LOW⚡ | cli/scripts/release-all.ts | 162 | // Step 6: bun install to get complete lockfile | COMMENT |
| LOW⚡ | cli/scripts/release-all.ts | 166 | // Step 7: Git commit + tag + push | COMMENT |
| LOW | hub/src/cursor/cursorLegacyMigrator.ts | 303 | // Step 1: canonical-path fast path. Skip readdir entirely if we hit. | COMMENT |
| LOW | hub/src/cursor/cursorLegacyMigrator.ts | 323 | // Step 2: scan every <wsh>/<cursorSessionId>/store.db. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | cli/scripts/release-all.ts | 119 | // Step 1: Update all release versions before building or publishing. | COMMENT |
| LOW⚡ | cli/scripts/release-all.ts | 124 | // Step 2: Build all platform binaries (with embedded web assets) | COMMENT |
| LOW⚡ | cli/scripts/release-all.ts | 132 | // Step 3: Prepare and publish platform packages | COMMENT |
| LOW⚡ | cli/scripts/release-all.ts | 141 | // Step 4: Verify all platform packages are live on npm before publishing the main package. | COMMENT |
| LOW⚡ | cli/scripts/release-all.ts | 151 | // Step 5: Publish main package | COMMENT |
| LOW⚡ | cli/scripts/release-all.ts | 162 | // Step 6: bun install to get complete lockfile | COMMENT |
| LOW⚡ | cli/scripts/release-all.ts | 166 | // Step 7: Git commit + tag + push | COMMENT |
| LOW | hub/src/cursor/cursorLegacyMigrator.ts | 303 | // Step 1: canonical-path fast path. Skip readdir entirely if we hit. | COMMENT |
| LOW | hub/src/cursor/cursorLegacyMigrator.ts | 323 | // Step 2: scan every <wsh>/<cursorSessionId>/store.db. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | cli/src/claude/claudeLocalLauncher.ts | 16 | // Preserve the AI-generated title emitted by Claude Code's native | COMMENT |
| HIGH | …acp/__fixtures__/gemini-3-flash-preview-edit-file.json | 26 | "text": "## 📂 Topic: **Updating demo-write.txt**\n\n**Summary:**\nThe user requested to replace the first li | CODE |
| HIGH | …acp/__fixtures__/gemini-3-flash-preview-read-file.json | 26 | "text": "## 📂 Topic: **Initial Project Overview**\n\n**Summary:**\nI will start by reading the README.md fil | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | shared/src/voicePromptLayers.ts | 151 | export const VOICE_PROVIDER_GUARDRAILS = `# Provider guardrails | CODE |
| MEDIUM | …ges/HapiKit/Sources/HapiClient/HapiClientVersion.swift | 10 | /// Version of the HapiKit client scaffold. | COMMENT |
| MEDIUM | android/gradle/libs.versions.toml | 2 | # All versions verified to exist on Google Maven / Maven Central at scaffold time. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …rc/components/ToolCard/RequestUserInputFooter.test.tsx | 137 | expect(textarea).toHaveAttribute('placeholder', 'Describe the change') | CODE |
| LOW | cli/src/cursor/utils/cursorLegacyEventConverter.test.ts | 200 | 'Lorem ipsum ... Questions skipped by the user, continue with the information you alread | CODE |
| LOW | …HapiKit/Sources/HapiClient/Chat/PermissionInputs.swift | 205 | placeholder: object["placeholder"]?.stringValue, | CODE |
| LOW | …companion/feature/chat/permissions/PermissionInputs.kt | 162 | placeholder = obj["placeholder"].stringOrNull, | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ios/scripts/pbxproj-audit.py | 28 | CODE | |
| LOW | ios/scripts/localizations.py | 70 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ios/scripts/linux-test.sh | 8 | # Usage: | COMMENT |