The Open Framework for Building Agents
This report presents the forensic synthetic code analysis of vercel/eve, a TypeScript project with 4,860 GitHub stars. SynthScan v2.0 examined 534,047 lines of code across 3190 source files, recording 2947 pattern matches distributed across 11 syntactic categories. The overall adjusted score of 7.9 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 2947 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | research/programmatic-agent-sources.md | 173 | function defineProgrammaticAgentSource(input: ProgrammaticAgentSource): ProgrammaticAgentSource; | CODE |
| LOW | research/programmatic-agent-sources.md | 195 | function createAgentSourceRegistry( | CODE |
| LOW | research/programmatic-agent-sources.md | 326 | function instantiateProgrammaticTemplate(input: { | CODE |
| LOW | research/channel-audience-content-policy.md | 97 | declare function composeSpanExportPolicies( | CODE |
| LOW | docs/memory.md | 283 | async function createToolsForYourService(_ctx: MemoryToolsContext): Promise<MemoryToolSet | null> { | CODE |
| LOW | packages/eve/test/runtime-tool-registry.test.ts | 87 | function createResolvedToolDefinition(input: { | CODE |
| LOW | packages/eve/test/dev-send-message.test.ts | 28 | function createControlledStreamResponse(): { | CODE |
| LOW | packages/eve/test/dev-send-message.test.ts | 57 | function createStartedMessageResponse(sessionId: string, location: string): Response { | CODE |
| LOW | packages/eve/test/dev-send-message.test.ts | 68 | function createResumedMessageResponse(): Response { | CODE |
| LOW | packages/eve/test/runtime-subagent-registry.test.ts | 96 | function createResolvedRuntimeSubagentNode(input: { | CODE |
| LOW | packages/eve/test/build-profile-report.test.ts | 53 | async function loadBuildProfileReportModule(): Promise<BuildProfileReportModule> { | CODE |
| LOW | packages/eve/test/client.test.ts | 28 | function createControlledStreamResponse(): { | CODE |
| LOW⚡ | packages/eve/test/client.test.ts | 57 | function createStartedMessageResponse(sessionId: string): Response { | CODE |
| LOW⚡ | packages/eve/test/client.test.ts | 67 | function createResumedMessageResponse(): Response { | CODE |
| LOW⚡ | packages/eve/test/client.test.ts | 74 | function createEagerStreamResponse(events: readonly unknown[]): Response { | CODE |
| LOW | packages/eve/test/vercel/session-reset.vercel.test.ts | 126 | function collectDeploymentEnvironment(names: readonly string[]): Record<string, string> { | CODE |
| LOW | packages/eve/test/vercel/session-reset.vercel.test.ts | 143 | function readOptionalEnvironmentVariable(name: string): string | undefined { | CODE |
| LOW | packages/eve/test/vercel/session-reset.vercel.test.ts | 148 | function readRequiredEnvironmentVariable(name: string): string { | CODE |
| LOW | …eve/test/vercel/vercel-verbose-bundling.vercel.test.ts | 74 | async function sendToolMessageAndCollectResult(input: { | CODE |
| LOW | …eve/test/vercel/vercel-verbose-bundling.vercel.test.ts | 143 | function collectDeploymentEnvironment(names: readonly string[]): Record<string, string> { | CODE |
| LOW | …eve/test/vercel/vercel-verbose-bundling.vercel.test.ts | 161 | function readOptionalEnvironmentVariable(name: string): string | undefined { | CODE |
| LOW | …eve/test/vercel/vercel-verbose-bundling.vercel.test.ts | 171 | function readRequiredEnvironmentVariable(name: string): string { | CODE |
| LOW | packages/eve/test/vercel/next-eve-proxy.vercel.test.ts | 56 | function readOptionalEnvironmentVariable(name: string): string | undefined { | CODE |
| LOW | packages/eve/test/vercel/next-eve-proxy.vercel.test.ts | 62 | function readRequiredEnvironmentVariable(name: string): string { | CODE |
| LOW | …eve/test/vercel/vercel-sandbox-bundling.vercel.test.ts | 71 | function expectAtLeastOneAssistantTextEvent(events: readonly MessageStreamEvent[]): void { | CODE |
| LOW | …eve/test/vercel/vercel-sandbox-bundling.vercel.test.ts | 90 | function collectDeploymentEnvironment(names: readonly string[]): Record<string, string> { | CODE |
| LOW | …eve/test/vercel/vercel-sandbox-bundling.vercel.test.ts | 108 | function readOptionalEnvironmentVariable(name: string): string | undefined { | CODE |
| LOW | …eve/test/vercel/vercel-sandbox-bundling.vercel.test.ts | 118 | function readRequiredEnvironmentVariable(name: string): string { | CODE |
| LOW | packages/eve/test/tui-client/target/create-target.ts | 31 | function freezeTestTargetCapabilities( | CODE |
| LOW | …ckages/eve/test/tui-client/target/local-environment.ts | 47 | export function createLocalTestEnvironment( | CODE |
| LOW | …ckages/eve/test/tui-client/target/local-environment.ts | 280 | async function resolveOwnedWorkflowDataDir(input: { | CODE |
| LOW | …ckages/eve/test/tui-client/target/local-environment.ts | 380 | function localTargetKindToServerMode(kind: LocalTestTargetRequest["kind"]): AgentServerMode { | CODE |
| LOW | packages/eve/test/tui-client/lib/server.ts | 116 | export function createAgentServerCommandPlan(input: { | CODE |
| LOW | packages/eve/test/tui-client/lib/server.ts | 252 | export function getAgentNameFromInfoPayload(payload: unknown): string | undefined { | CODE |
| LOW | packages/eve/test/setup/mock-ai-gateway.ts | 42 | function createGatewayModelCatalogResponse(modelIds: ReadonlySet<string>): Response { | CODE |
| LOW | packages/eve/test/setup/mock-ai-gateway.ts | 84 | function collectGatewayModelIdsFromDirectory(directoryPath: string, ids: Set<string>): void { | CODE |
| LOW | packages/eve/test/setup/mock-ai-gateway.ts | 108 | function collectGatewayModelIdsFromSource(source: string, ids: Set<string>): void { | CODE |
| LOW | packages/eve/test/dev-client-harness/url.ts | 1 | function createDevelopmentServerBaseUrl(serverUrl: string): URL { | CODE |
| LOW | packages/eve/test/dev-client-harness/url.ts | 19 | export function resolveDevelopmentServerRouteUrl(input: { | CODE |
| LOW | packages/eve/test/dev-client-harness/url.ts | 36 | export function resolveDevelopmentServerResourceUrl(input: { | CODE |
| LOW | packages/eve/test/dev-client-harness/stream.ts | 34 | export function countCurrentTurnBoundaryEvents(events: readonly MessageStreamEvent[]): number { | CODE |
| LOW | packages/eve/test/dev-client-harness/stream.ts | 44 | export function extractCurrentTurnBoundaryEvent( | CODE |
| LOW | packages/eve/test/dev-client-harness/live-stream.ts | 4 | function isDevelopmentMessageStreamDisconnectError(error: unknown): boolean { | CODE |
| LOW | packages/eve/test/dev-client-harness/live-stream.ts | 231 | export function openDevelopmentMessageStream(input: { | CODE |
| LOW | packages/eve/test/dev-client-harness/session.ts | 26 | export function createDevelopmentSessionState( | CODE |
| LOW | packages/eve/test/dev-client-harness/session.ts | 44 | export function createDevelopmentMessageRequest(input: { | CODE |
| LOW | packages/eve/test/dev-client-harness/session.ts | 57 | export function updateDevelopmentSessionState(input: { | CODE |
| LOW | packages/eve/test/dev-client-harness/send-message.ts | 25 | async function fetchDevelopmentSessionStreamResponse(input: { | CODE |
| LOW | packages/eve/test/dev-client-harness/send-message.ts | 64 | async function openDevelopmentSessionStream(input: { | CODE |
| LOW | packages/eve/test/dev-client-harness/send-message.ts | 79 | async function readDevelopmentTurnEvents(input: { | CODE |
| LOW | packages/eve/test/dev-client-harness/send-message.ts | 251 | function createMessageRouteHeaders(headers?: DevelopmentRequestHeaders): DevelopmentRequestHeaders { | CODE |
| LOW | packages/eve/test/dev-client-harness/send-message.ts | 257 | function copyDevelopmentRequestHeaders( | CODE |
| LOW | packages/eve/test/dev-client-harness/request-headers.ts | 25 | export async function createDevelopmentRequestHeadersAsync(input: { | CODE |
| LOW | …e/test/scenarios/vercel-build-prewarm.scenario.test.ts | 169 | async function createTemplateFreeScenarioAppRoot(): Promise<string> { | CODE |
| LOW | …e/test/scenarios/vercel-build-prewarm.scenario.test.ts | 331 | function createFailingBootstrapDispatch() { | CODE |
| LOW | …test/scenarios/dev-server-connections.scenario.test.ts | 95 | function createBlockedInstrumentationSource(): string { | CODE |
| LOW | …test/scenarios/compiled-vendor-assets.scenario.test.ts | 49 | function rewriteDeclarationImports( | CODE |
| LOW | …es/eve/test/scenarios/dev-environment.scenario.test.ts | 47 | function clearDevelopmentEnvironment(): void { | CODE |
| LOW | …st/scenarios/eval-command-environment.scenario.test.ts | 89 | function clearDevelopmentEnvironment(): void { | CODE |
| LOW | …st/scenarios/bundle-module-evaluation.scenario.test.ts | 36 | async function bundleEveDistAsSingleChunk(input: RolldownInputOptions): Promise<string> { | CODE |
| 2074 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ges/eve/src/tracing/install-instrumentation-runtime.ts | 7 | } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | …ges/eve/src/tracing/install-instrumentation-runtime.ts | 11 | } from "#harness/instrumentation/runtime.js"; | CODE |
| MEDIUM | packages/eve/src/tracing/agent-trace-state.ts | 8 | } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | packages/eve/src/tracing/agent-tool-instrumentation.ts | 15 | } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | packages/eve/src/tracing/agent-tool-instrumentation.ts | 16 | import { actionIdempotencyKey } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | packages/eve/src/tracing/agent-otel-usage.ts | 3 | import type { InstrumentationUsage } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | …ages/eve/src/tracing/agent-approval-instrumentation.ts | 15 | } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | packages/eve/src/tracing/agent-otel-session-context.ts | 9 | } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | …/src/tracing/agent-channel-delivery-instrumentation.ts | 17 | } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | …/src/tracing/agent-channel-delivery-instrumentation.ts | 18 | import { sessionIdempotencyKey } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | …ve/src/tracing/install-instrumentation-runtime.test.ts | 4 | import { turnIdempotencyKey } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | packages/eve/src/tracing/agent-otel-provider.test.ts | 17 | import { createAiSdkHookBridge } from "#harness/ai-sdk-hook-bridge.js"; | CODE |
| MEDIUM | packages/eve/src/tracing/agent-otel-provider.test.ts | 38 | } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | packages/eve/src/tracing/agent-otel-provider.test.ts | 48 | } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM⚡ | …tracing/local-instrumentation-runtime.scenario.test.ts | 16 | import { createAiSdkHookBridge } from "#harness/ai-sdk-hook-bridge.js"; | CODE |
| MEDIUM⚡ | …tracing/local-instrumentation-runtime.scenario.test.ts | 18 | import type { InstrumentationAttemptScope } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM⚡ | …tracing/local-instrumentation-runtime.scenario.test.ts | 24 | } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | …kages/eve/src/tracing/local-instrumentation-runtime.ts | 4 | } from "#harness/instrumentation/runtime.js"; | CODE |
| MEDIUM | …ckages/eve/src/tracing/agent-action-instrumentation.ts | 16 | } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | …ckages/eve/src/tracing/agent-action-instrumentation.ts | 17 | import { actionIdempotencyKey, attemptIdempotencyKey } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | packages/eve/src/tracing/agent-otel-provider.ts | 14 | import { withoutInstrumentationContent } from "#harness/instrumentation/content.js"; | CODE |
| MEDIUM | packages/eve/src/tracing/agent-otel-provider.ts | 15 | import { instrumentationEventForTraceDecision } from "#harness/instrumentation/content-policy.js"; | CODE |
| MEDIUM | packages/eve/src/tracing/agent-otel-provider.ts | 54 | } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | packages/eve/src/tracing/agent-otel-provider.ts | 55 | import { attemptIdempotencyKey } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | packages/eve/src/evals/mock-model.ts | 4 | import { AGENTS_SNIPPET_LABEL } from "#harness/handles/prompt.js"; | CODE |
| MEDIUM | packages/eve/src/evals/mock-model.ts | 5 | import { isPendingApprovalsSnippet } from "#harness/hitl/approval-prompt.js"; | CODE |
| MEDIUM | packages/eve/src/tasks/types.test.ts | 3 | import type { AgentAddress, AgentIdentity } from "#harness/handles/store.js"; | CODE |
| MEDIUM | packages/eve/src/tasks/task-id.ts | 3 | import { deriveAgentOperationId } from "#harness/handles/operation-id.js"; | CODE |
| MEDIUM | packages/eve/src/tasks/session-index.ts | 3 | import type { HarnessSession, SessionStateMap } from "#harness/types.js"; | CODE |
| MEDIUM | packages/eve/src/tasks/types.ts | 1 | import type { AgentAddress, AgentIdentity } from "#harness/handles/store.js"; | CODE |
| MEDIUM | packages/eve/src/tasks/delivery-context.test.ts | 3 | import type { SessionStateMap } from "#harness/types.js"; | CODE |
| MEDIUM | packages/eve/src/tasks/session-index.test.ts | 3 | import type { HarnessSession } from "#harness/types.js"; | CODE |
| MEDIUM | packages/eve/src/tasks/delivery-context.ts | 1 | import type { SessionStateMap } from "#harness/types.js"; | CODE |
| MEDIUM | packages/eve/src/tools/task.ts | 2 | import type { BackgroundToolCall } from "#harness/background-tools.js"; | CODE |
| MEDIUM | packages/eve/src/tools/task.ts | 3 | import type { HarnessSession } from "#harness/types.js"; | CODE |
| MEDIUM | packages/eve/src/tools/provided/sleep.test.ts | 4 | import { readTurnSleepDurationMs } from "#harness/turn-sleep.js"; | CODE |
| MEDIUM | packages/eve/src/context/dynamic-tool-lifecycle.ts | 14 | import type { HarnessToolDefinition } from "#harness/execute-tool.js"; | CODE |
| MEDIUM | …rc/context/build-base-tool-context.integration.test.ts | 4 | import { createTestRuntime } from "#internal/testing/app-harness.js"; | CODE |
| MEDIUM | packages/eve/src/context/keys.ts | 24 | import type { InstrumentationChannelDeliveryRef } from "#harness/instrumentation/lifecycle.js"; | CODE |
| MEDIUM | packages/eve/src/context/keys.ts | 25 | import type { HandleEventFn } from "#harness/types.js"; | CODE |
| MEDIUM | packages/eve/src/context/provider.ts | 1 | import type { HarnessSession, StepResult } from "#harness/types.js"; | CODE |
| MEDIUM | packages/eve/src/context/run-step.ts | 1 | import type { HarnessSession, StepResult } from "#harness/types.js"; | CODE |
| MEDIUM | packages/eve/src/context/accessors.integration.test.ts | 4 | import { createTestRuntime } from "#internal/testing/app-harness.js"; | CODE |
| MEDIUM | packages/eve/src/context/build-dynamic-tools.ts | 1 | import type { HarnessToolDefinition } from "#harness/execute-tool.js"; | CODE |
| MEDIUM | packages/eve/src/context/build-dynamic-tools.ts | 2 | import type { HarnessToolMap } from "#harness/types.js"; | CODE |
| MEDIUM | packages/eve/src/context/dynamic-subagent-lifecycle.ts | 17 | import type { HarnessToolDefinition } from "#harness/execute-tool.js"; | CODE |
| MEDIUM | packages/eve/src/context/providers/sandbox.test.ts | 4 | import type { HarnessSession } from "#harness/types.js"; | CODE |
| MEDIUM | packages/eve/src/context/providers/sandbox.ts | 2 | import type { HarnessSession } from "#harness/types.js"; | CODE |
| MEDIUM | packages/eve/src/context/providers/session.ts | 10 | import { getHarnessEmissionState } from "#harness/emission.js"; | CODE |
| MEDIUM | packages/eve/src/runtime/agent/mock-model-adapter.ts | 34 | import { FINAL_OUTPUT_TOOL_NAME } from "#harness/final-output.js"; | CODE |
| MEDIUM | packages/eve/src/runtime/agent/bootstrap-model-utils.ts | 3 | import { AGENTS_SNIPPET_LABEL } from "#harness/handles/prompt.js"; | CODE |
| MEDIUM | …es/eve/src/runtime/connections/scoped-authorization.ts | 20 | } from "#harness/authorization.js"; | CODE |
| MEDIUM | packages/eve/src/internal/instrumentation.ts | 3 | * builder (`#channel/instrumentation.ts`) and the harness telemetry | COMMENT |
| MEDIUM | packages/eve/src/internal/instrumentation.ts | 4 | * builder (`#harness/instrumentation/runtime-context.ts`). | COMMENT |
| MEDIUM | …/eve/src/internal/testing/task-model-retry-workflow.ts | 16 | import { createToolLoopHarness } from "#harness/tool-loop.js"; | CODE |
| MEDIUM | …/eve/src/internal/testing/task-model-retry-workflow.ts | 17 | import type { HarnessSession } from "#harness/types.js"; | CODE |
| MEDIUM | …s/eve/src/internal/testing/durable-session-workflow.ts | 15 | import type { HarnessSession } from "#harness/types.js"; | CODE |
| MEDIUM | …e/src/internal/testing/app-harness.integration.test.ts | 7 | import { createTestRuntime } from "#internal/testing/app-harness.js"; | CODE |
| MEDIUM | …ternal/nitro/routes/channel-request-instrumentation.ts | 11 | import { getInstrumentationRuntime } from "#harness/instrumentation/runtime.js"; | CODE |
| MEDIUM | …eve/src/internal/nitro/routes/channel-dispatch.test.ts | 27 | } from "#harness/instrumentation/config.js"; | CODE |
| 620 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docs/concepts/built-in-tools.md | 178 | ### What a workflow can orchestrate | COMMENT |
| MEDIUM | packages/eve/README.md | 156 | - [Getting Started](https://eve.dev/docs/getting-started) — install, scaffold, and run locally | CODE |
| MEDIUM | …ckages/eve/test/tui-client/tui-packed-install-model.ts | 79 | // `--min-release-age=0` matches eve's own scaffold install (the packed | COMMENT |
| MEDIUM | packages/eve/test/scenarios/eve-init.scenario.test.ts | 182 | // through the environment instead of any scaffold-owned bypass. | COMMENT |
| MEDIUM⚡ | packages/eve/src/setup/state.ts | 1 | import type { ChannelKind, ConnectionInput, ConnectionProtocol } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM⚡ | packages/eve/src/setup/state.ts | 4 | // Re-exported from the scaffold's project module, the single owner of the "." sentinel. | COMMENT |
| MEDIUM⚡ | packages/eve/src/setup/state.ts | 5 | export { CURRENT_DIRECTORY_PROJECT_NAME } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM | packages/eve/src/setup/slack-connect-lifecycle.ts | 1 | import { SLACK_CHANNEL_DEFAULT_ROUTE } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM | packages/eve/src/setup/slackbot.ts | 6 | import { SLACK_CHANNEL_DEFAULT_ROUTE } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM | packages/eve/src/setup/slackbot.ts | 15 | import { updateSlackChannelConnectorUid } from "#setup/scaffold/update/update-slack-channel.js"; | CODE |
| MEDIUM | packages/eve/src/setup/channel-add-conflicts.ts | 3 | import { isNextJsProject, type ChannelKind } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM | packages/eve/src/setup/slackbot.test.ts | 5 | import { updateSlackChannelConnectorUid } from "#setup/scaffold/update/update-slack-channel.js"; | CODE |
| MEDIUM | packages/eve/src/setup/slackbot.test.ts | 22 | vi.mock("#setup/scaffold/update/update-slack-channel.js", () => ({ | CODE |
| MEDIUM⚡ | packages/eve/src/setup/build.ts | 2 | // `apps/docs/registry/channel/web` source item, applies the declared scaffold transforms, | COMMENT |
| MEDIUM⚡ | packages/eve/src/setup/build.ts | 3 | // and writes `scaffold/create/web-template.ts`. Not part of the shipped package: it is | COMMENT |
| MEDIUM⚡ | packages/eve/src/setup/build.ts | 8 | // walks the whole dist and stamps the scaffold's __*_VERSION__ tokens for free. | COMMENT |
| MEDIUM | packages/eve/src/setup/primitives/run-vercel.test.ts | 331 | // The project parent does not exist until scaffold; account lookups must not | COMMENT |
| MEDIUM | packages/eve/src/setup/integrations/discord/setup.ts | 5 | import { deriveSlackConnectorSlug } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM | packages/eve/src/setup/integrations/discord/setup.ts | 6 | import { writeTextFile } from "#setup/scaffold/files.js"; | CODE |
| MEDIUM | packages/eve/src/setup/integrations/web/setup.ts | 3 | import { ensureChannel, type EnsureChannelOptions } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM | packages/eve/src/setup/integrations/linear/setup.ts | 5 | import { deriveSlackConnectorSlug, normalizeSlackConnectorSlug } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM | packages/eve/src/setup/integrations/linear/setup.ts | 6 | import { writeTextFile } from "#setup/scaffold/files.js"; | CODE |
| MEDIUM | packages/eve/src/setup/integrations/shopify/setup.ts | 5 | import { writeTextFile } from "#setup/scaffold/files.js"; | CODE |
| MEDIUM | packages/eve/src/setup/integrations/linq/setup.ts | 6 | import { deriveSlackConnectorSlug } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM | packages/eve/src/setup/integrations/linq/setup.ts | 7 | import { writeTextFile } from "#setup/scaffold/files.js"; | CODE |
| MEDIUM | packages/eve/src/setup/integrations/linq/setup.test.ts | 6 | vi.mock("#setup/scaffold/index.js", () => ({ | CODE |
| MEDIUM | packages/eve/src/setup/integrations/github/setup.ts | 5 | import { deriveSlackConnectorSlug } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM | packages/eve/src/setup/integrations/github/setup.ts | 6 | import { writeTextFile } from "#setup/scaffold/files.js"; | CODE |
| MEDIUM | packages/eve/src/setup/integrations/slack/setup.ts | 7 | } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM | packages/eve/src/setup/integrations/slack/setup.test.ts | 4 | import type { SlackConnectorSlug } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM | …kages/eve/src/setup/scaffold/index.integration.test.ts | 283 | // .vercel/output/config.json at build time, so the scaffold only writes a | COMMENT |
| MEDIUM | …kages/eve/src/setup/scaffold/index.integration.test.ts | 558 | // withEve() owns eve service generation, so the scaffold leaves an existing | COMMENT |
| MEDIUM | …kages/eve/src/setup/scaffold/index.integration.test.ts | 1065 | // Every scaffold ships @types/node plus tsconfig `types: ["node"]` so agent | COMMENT |
| MEDIUM | packages/eve/src/setup/scaffold/version-tokens.ts | 47 | // The published name; rule 28 keeps the scaffold layer free of `#internal/*` | COMMENT |
| MEDIUM | packages/eve/src/setup/scaffold/version-tokens.ts | 130 | // the fallback must never turn a loud failure into a corrupt scaffold. | COMMENT |
| MEDIUM | packages/eve/src/setup/scaffold/create/project.ts | 167 | // scaffold ships (see `packageJsonTemplate`). | COMMENT |
| MEDIUM | packages/eve/src/setup/scaffold/create/extension.ts | 89 | // Same trailing engines block the agent scaffold appends for non-workspace roots. | COMMENT |
| MEDIUM | packages/eve/src/setup/boxes/resolve-provisioning.ts | 3 | import { byokProviderEnvVar } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM | packages/eve/src/setup/boxes/resolve-provisioning.ts | 406 | // "Use my own provider API key": no managed credential. The scaffold writes | COMMENT |
| MEDIUM | packages/eve/src/cli/dev/tui/mcp-connection-status.ts | 1 | import { CONNECTION_CATALOG } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM | packages/eve/src/cli/commands/integration-connect.ts | 18 | import { updateConnectionConnectorUid } from "#setup/scaffold/update/update-connection-connector.js"; | CODE |
| MEDIUM⚡ | packages/eve/src/cli/commands/init.ts | 30 | import { addAgentToProject } from "#setup/scaffold/create/add-to-project.js"; | CODE |
| MEDIUM⚡ | packages/eve/src/cli/commands/init.ts | 31 | import { ensureChannel, scaffoldBaseProject } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM⚡ | packages/eve/src/cli/commands/init.ts | 37 | } from "#setup/scaffold/workspace-root.js"; | CODE |
| MEDIUM⚡ | packages/eve/src/cli/commands/init.ts | 41 | } from "#setup/scaffold/create/project.js"; | CODE |
| MEDIUM | packages/eve/src/cli/commands/channels.ts | 2 | import { listAuthoredChannels } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM | packages/eve/src/cli/commands/agent-instructions.ts | 15 | // caller; `{{workingDirectory}}` is post-scaffold only and lives in the handoff | COMMENT |
| MEDIUM | packages/eve/src/cli/commands/integration-setup.test.ts | 25 | vi.mock("#setup/scaffold/index.js", async (importOriginal) => ({ | CODE |
| MEDIUM | packages/eve/src/cli/commands/integration-setup.test.ts | 26 | ...(await importOriginal<typeof import("#setup/scaffold/index.js")>()), | CODE |
| MEDIUM⚡ | packages/eve/src/cli/commands/extension-init.ts | 26 | import { blockingCreateInPlaceEntries } from "#setup/scaffold/create-in-place.js"; | CODE |
| MEDIUM⚡ | packages/eve/src/cli/commands/extension-init.ts | 30 | } from "#setup/scaffold/create/project.js"; | CODE |
| MEDIUM⚡ | packages/eve/src/cli/commands/extension-init.ts | 31 | import { scaffoldExtensionProject } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM⚡ | packages/eve/src/cli/commands/extension-init.ts | 32 | import type { WorkspaceRootMutation } from "#setup/scaffold/workspace-root.js"; | CODE |
| MEDIUM | packages/eve/src/cli/commands/logs-events.ts | 58 | // No local store yet; do not let createWorld scaffold one as a side | COMMENT |
| MEDIUM | …ckages/eve/src/cli/commands/agent-instructions.test.ts | 32 | // pre-scaffold guide renders the universal `npx eve dev` through the shared | COMMENT |
| MEDIUM | …ckages/eve/src/cli/commands/agent-instructions.test.ts | 42 | // The shared renderer resolves every placeholder, even in the pre-scaffold guide. | COMMENT |
| MEDIUM | packages/eve/src/cli/commands/channel-add-conflicts.ts | 3 | import type { ChannelKind } from "#setup/scaffold/index.js"; | CODE |
| MEDIUM | packages/eve/src/cli/commands/registry-project.ts | 11 | import { WEB_APP_TEMPLATE_FILES } from "#setup/scaffold/create/web-template.js"; | CODE |
| MEDIUM | packages/eve/src/cli/commands/registry.test.ts | 47 | vi.mock("#setup/scaffold/index.js", () => ({ isEveProject })); | CODE |
| MEDIUM | packages/eve/src/cli/commands/registry.test.ts | 48 | vi.mock("#setup/scaffold/workspace-root.js", () => ({ applyPackageManagerWorkspaceConfiguration })); | CODE |
| 13 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | packages/eve/src/execution/sandbox/write-file.ts | 55 | // ── Read current file ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/eve/src/execution/sandbox/write-file.ts | 77 | // ── File exists — enforce read-before-write ───────────────────────── | COMMENT |
| MEDIUM | packages/eve/src/execution/sandbox/write-file.ts | 87 | // ── Stale-read detection ──────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/eve/src/execution/sandbox/write-file.ts | 103 | // ── Write and refresh stamp ───────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/eve/src/execution/sandbox/read-file.ts | 64 | // ── Validate offset / limit ───────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/eve/src/execution/sandbox/read-file.ts | 72 | // ── Read full file for fingerprinting ─────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/eve/src/execution/sandbox/read-file.ts | 81 | // ── Reject non-text (NUL bytes) ───────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/eve/src/execution/sandbox/read-file.ts | 89 | // ── Split into lines ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/eve/src/execution/sandbox/read-file.ts | 101 | // ── Validate offset against file length ───────────────────────────── | COMMENT |
| MEDIUM | packages/eve/src/execution/sandbox/read-file.ts | 113 | // ── Persist full-file stamp ───────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/eve/src/execution/sandbox/read-file.ts | 125 | // ── Handle empty file ─────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/eve/src/execution/sandbox/read-file.ts | 135 | // ── Apply offset and limit ────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | packages/eve/src/execution/sandbox/read-file.ts | 140 | // ── Number and truncate lines, cap at MAX_OUTPUT_BYTES ────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ages/eve/test/tui-client/tui-connection-auth-states.ts | 301 | // and the input event is silently dropped. The bottom-bar status | COMMENT |
| LOW | packages/eve/src/setup/ask.ts | 1 | // The single ask channel of the setup contract. A box owns data acquisition | COMMENT |
| LOW | …e/src/internal/workflow-bundle/workflow-transformer.ts | 421 | declarations.push(source.slice(node.start, node.end).trim()); | COMMENT |
| LOW | packages/eve/src/cli/dev/tui/terminal-renderer.ts | 481 | #partingLinePrinted = false; | COMMENT |
| LOW | packages/eve/src/cli/dev/tui/terminal-renderer.ts | 501 | #onResize?: () => void; | COMMENT |
| LOW | packages/eve/src/cli/dev/tui/terminal-renderer.ts | 4521 | if (content.trim().length === 0) return; | COMMENT |
| LOW | packages/eve/src/cli/dev/tui/tool-block-groups.ts | 341 | body: summary === undefined ? "Done" : `Done. ${summary}`, | COMMENT |
| LOW | packages/eve/src/cli/commands/agent-instructions.ts | 1 | import { readFileSync } from "node:fs"; | COMMENT |
| LOW | packages/eve/src/harness/tool-loop.ts | 2001 | // | COMMENT |
| LOW | packages/eve/src/execution/workflow-entry.ts | 101 | interface CrashCleanupState { | COMMENT |
| LOW | packages/eve/src/execution/sandbox/glob-tool.ts | 181 | COMMENT | |
| LOW | packages/eve/src/client/eve-agent-store.ts | 141 | #activeTurn: ActiveTurn | undefined; | COMMENT |
| LOW | apps/docs/wgsl-env.d.ts | 1 | /// <reference types="@vgpu/wgsl/wgsl-types" /> | COMMENT |
| LOW | apps/docs/app/(nights)/nights/nights-galaxy.tsx | 201 | // initial values; the scene effect overwrites them once it knows canvas | COMMENT |
| LOW | apps/docs/app/(nights)/nights/nights-galaxy.tsx | 221 | const fieldStrength = uniform(0.58); | COMMENT |
| LOW | apps/docs/app/(nights)/nights/nights-galaxy.tsx | 261 | // loop computes `target * easedProgress` and assigns to the uniform each | COMMENT |
| LOW | apps/docs/app/(nights)/nights/nights-galaxy.tsx | 401 | // Created up-front so the star material can sample `densityRT.texture` | COMMENT |
| LOW | apps/docs/app/(nights)/nights/nights-galaxy.tsx | 541 | // The product gives a non-periodic envelope (no two stars share a | COMMENT |
| LOW | apps/docs/app/(nights)/nights/nights-galaxy.tsx | 801 | COMMENT | |
| LOW | apps/docs/scripts/render-eve-5.ts | 1 | // This script uses @vgpu/adapter-node, which requires native Vulkan support and a | COMMENT |
| LOW | apps/docs/scripts/render-eve-5.ts | 21 | // Set EVE_LOGO_RENDER_THEME=light|dark and EVE_LOGO_RENDER_WIDTH/HEIGHT when | COMMENT |
| LOW | apps/docs/registry/connections/notion.ts | 1 | import { connect } from "@vercel/connect/eve"; | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | packages/eve/src/harness/tool-loop.test.ts | 8728 | // Step 1: the follow-up message runs immediately; the approval stays open. | COMMENT |
| LOW⚡ | packages/eve/src/harness/tool-loop.test.ts | 8737 | // Step 2: the late denial restores the withheld batch behind the | COMMENT |
| LOW | packages/eve/src/harness/tool-loop.test.ts | 8611 | // Step 1: pending approval + user sends a follow-up message. The message | COMMENT |
| LOW | packages/eve/src/harness/tool-loop.test.ts | 9865 | // Step 1: tool call → harness continues (next === runStep). | COMMENT |
| LOW | packages/eve/src/harness/tool-loop.test.ts | 9891 | // Step 2: continuation — model responds with text, turn ends. | COMMENT |
| LOW | packages/eve/src/harness/tool-loop.test.ts | 9909 | // Step 3: new turn with compaction. The mock simulates the | COMMENT |
| LOW | packages/eve/src/harness/tool-loop.test.ts | 10937 | // Step 1: tool call → continues | COMMENT |
| LOW | packages/eve/src/harness/tool-loop.test.ts | 10971 | // Step 2: simulate step boundary by creating a NEW harness (as durableRunStep does). | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …c/internal/nitro/host/start-development-server.test.ts | 556 | const call = mocks.devServer.setControlHandler.mock.calls.at(-1); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | apps/docs/lib/integrations/connection-setup.test.ts | 19 | expect(buildConnectionConfigure(integration)).toContain("BROWSER_USE_API_KEY=your_api_key"); | CODE |
| HIGH | apps/docs/lib/integrations/connection-setup.ts | 165 | `${spec.apiKey.env}=your_api_key`, | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | packages/eve/src/harness/tool-loop.test.ts | 8728 | // Step 1: the follow-up message runs immediately; the approval stays open. | COMMENT |
| LOW⚡ | packages/eve/src/harness/tool-loop.test.ts | 8737 | // Step 2: the late denial restores the withheld batch behind the | COMMENT |
| LOW | packages/eve/src/harness/tool-loop.test.ts | 8611 | // Step 1: pending approval + user sends a follow-up message. The message | COMMENT |
| LOW | packages/eve/src/harness/tool-loop.test.ts | 9865 | // Step 1: tool call → harness continues (next === runStep). | COMMENT |
| LOW | packages/eve/src/harness/tool-loop.test.ts | 9891 | // Step 2: continuation — model responds with text, turn ends. | COMMENT |
| LOW | packages/eve/src/harness/tool-loop.test.ts | 9909 | // Step 3: new turn with compaction. The mock simulates the | COMMENT |
| LOW | packages/eve/src/harness/tool-loop.test.ts | 10937 | // Step 1: tool call → continues | COMMENT |
| LOW | packages/eve/src/harness/tool-loop.test.ts | 10971 | // Step 2: simulate step boundary by creating a NEW harness (as durableRunStep does). | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …s/eve/src/setup/integrations/photon/management.test.ts | 148 | phoneNumber: "555-1234", | CODE |
| LOW | packages/eve/src/cli/dev/tui/blocks.test.ts | 299 | const long = "lorem ipsum ".repeat(40).trim(); | CODE |
| LOW | packages/eve/src/harness/provider-safety.test.ts | 8 | attributes: { email: "user@example.com" }, | CODE |
| LOW | …ages/eve/src/public/models/openai/chatgpt/auth.test.ts | 20 | extractCodexAccountLabelFromToken(createUnsignedJwt({ email: "user@example.com" })), | CODE |
| LOW | …ages/eve/src/public/models/openai/chatgpt/auth.test.ts | 21 | ).toBe("user@example.com"); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/eve/test/tui-client/lib/mcp-stub-server.ts | 128 | async function handleRequest( | CODE |