{"$schema":"https://json.schemastore.org/sarif-2.1.0.json","version":"2.1.0","runs":[{"tool":{"driver":{"name":"codehealth","informationUri":"https://codehealth.canine.dev","rules":[{"id":"D1","name":"Cyclomatic Complexity","shortDescription":{"text":"Cyclomatic Complexity"},"helpUri":"https://codehealth.canine.dev/dimensions/D1"},{"id":"D2","name":"Cognitive Complexity","shortDescription":{"text":"Cognitive Complexity"},"helpUri":"https://codehealth.canine.dev/dimensions/D2"},{"id":"D3","name":"God Classes","shortDescription":{"text":"God Classes"},"helpUri":"https://codehealth.canine.dev/dimensions/D3"},{"id":"D4","name":"Code Duplication","shortDescription":{"text":"Code Duplication"},"helpUri":"https://codehealth.canine.dev/dimensions/D4"},{"id":"D5","name":"Coupling","shortDescription":{"text":"Coupling"},"helpUri":"https://codehealth.canine.dev/dimensions/D5"},{"id":"D6","name":"Cohesion (LCOM4)","shortDescription":{"text":"Cohesion (LCOM4)"},"helpUri":"https://codehealth.canine.dev/dimensions/D6"},{"id":"D8","name":"Code Coverage","shortDescription":{"text":"Code Coverage"},"helpUri":"https://codehealth.canine.dev/dimensions/D8"},{"id":"D9","name":"Test Distribution","shortDescription":{"text":"Test Distribution"},"helpUri":"https://codehealth.canine.dev/dimensions/D9"},{"id":"D10","name":"Test Quality","shortDescription":{"text":"Test Quality"},"helpUri":"https://codehealth.canine.dev/dimensions/D10"},{"id":"D11","name":"Test Reliability","shortDescription":{"text":"Test Reliability"},"helpUri":"https://codehealth.canine.dev/dimensions/D11"},{"id":"D13","name":"Secret Scanning","shortDescription":{"text":"Secret Scanning"},"helpUri":"https://codehealth.canine.dev/dimensions/D13","relationships":[{"target":{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-798","CWE-259"],"owasp":"A07:2025"}},{"id":"D14","name":"License Compliance","shortDescription":{"text":"License Compliance"},"helpUri":"https://codehealth.canine.dev/dimensions/D14"},{"id":"D15","name":"Churn \u00D7 Complexity Hotspots","shortDescription":{"text":"Churn \u00D7 Complexity Hotspots"},"helpUri":"https://codehealth.canine.dev/dimensions/D15"},{"id":"D17","name":"Explicit Debt","shortDescription":{"text":"Explicit Debt"},"helpUri":"https://codehealth.canine.dev/dimensions/D17"},{"id":"D19","name":"Documentation Quality","shortDescription":{"text":"Documentation Quality"},"helpUri":"https://codehealth.canine.dev/dimensions/D19"},{"id":"D20","name":"ADR Quality","shortDescription":{"text":"ADR Quality"},"helpUri":"https://codehealth.canine.dev/dimensions/D20"},{"id":"D21","name":"Naming Consistency","shortDescription":{"text":"Naming Consistency"},"helpUri":"https://codehealth.canine.dev/dimensions/D21"},{"id":"D22","name":"Internal API Consistency","shortDescription":{"text":"Internal API Consistency"},"helpUri":"https://codehealth.canine.dev/dimensions/D22"},{"id":"D26","name":"Project Cohesion","shortDescription":{"text":"Project Cohesion"},"helpUri":"https://codehealth.canine.dev/dimensions/D26"},{"id":"D28","name":"Secrets (history)","shortDescription":{"text":"Secrets (history)"},"helpUri":"https://codehealth.canine.dev/dimensions/D28","relationships":[{"target":{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-798","CWE-259"],"owasp":"A07:2025"}},{"id":"D29","name":"Static Analysis (SAST)","shortDescription":{"text":"Static Analysis (SAST)"},"helpUri":"https://codehealth.canine.dev/dimensions/D29","relationships":[{"target":{"id":"CWE-79","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-89","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-78","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-94","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-77","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A05:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-79","CWE-89","CWE-78","CWE-94","CWE-77"],"owasp":"A05:2025"}},{"id":"D30","name":"Dependency Vulnerabilities","shortDescription":{"text":"Dependency Vulnerabilities"},"helpUri":"https://codehealth.canine.dev/dimensions/D30","relationships":[{"target":{"id":"CWE-1395","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-937","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-1395","CWE-937"],"owasp":"A03:2025"}},{"id":"D31","name":"IaC \u0026 Container Security","shortDescription":{"text":"IaC \u0026 Container Security"},"helpUri":"https://codehealth.canine.dev/dimensions/D31","relationships":[{"target":{"id":"CWE-1032","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-732","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-16","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A02:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-1032","CWE-732","CWE-16"],"owasp":"A02:2025"}},{"id":"D34","name":"Knowledge Freshness","shortDescription":{"text":"Knowledge Freshness"},"helpUri":"https://codehealth.canine.dev/dimensions/D34"},{"id":"D35","name":"Change Coupling","shortDescription":{"text":"Change Coupling"},"helpUri":"https://codehealth.canine.dev/dimensions/D35"},{"id":"D36","name":"Supply-chain Provenance \u0026 Signing","shortDescription":{"text":"Supply-chain Provenance \u0026 Signing"},"helpUri":"https://codehealth.canine.dev/dimensions/D36","relationships":[{"target":{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-494","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-1357","CWE-494"],"owasp":"A03:2025"}},{"id":"D37","name":"Vulnerability-disclosure Policy","shortDescription":{"text":"Vulnerability-disclosure Policy"},"helpUri":"https://codehealth.canine.dev/dimensions/D37","relationships":[{"target":{"id":"CWE-1059","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A02:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-1059"],"owasp":"A02:2025"}},{"id":"D43","name":"Malicious Dependencies","shortDescription":{"text":"Malicious Dependencies"},"helpUri":"https://codehealth.canine.dev/dimensions/D43","relationships":[{"target":{"id":"CWE-506","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-506"],"owasp":"A08:2025"}},{"id":"D44","name":"Platform End-of-Life","shortDescription":{"text":"Platform End-of-Life"},"helpUri":"https://codehealth.canine.dev/dimensions/D44"},{"id":"AC1","name":"Text alternatives","shortDescription":{"text":"Text alternatives"},"helpUri":"https://codehealth.canine.dev/dimensions/AC1"},{"id":"AC2","name":"Forms \u0026 labels","shortDescription":{"text":"Forms \u0026 labels"},"helpUri":"https://codehealth.canine.dev/dimensions/AC2"},{"id":"AC3","name":"Page structure","shortDescription":{"text":"Page structure"},"helpUri":"https://codehealth.canine.dev/dimensions/AC3"},{"id":"AC5","name":"ARIA correctness","shortDescription":{"text":"ARIA correctness"},"helpUri":"https://codehealth.canine.dev/dimensions/AC5"},{"id":"AC6","name":"Visual \u0026 motion safety","shortDescription":{"text":"Visual \u0026 motion safety"},"helpUri":"https://codehealth.canine.dev/dimensions/AC6"},{"id":"AC7","name":"A11y enforcement","shortDescription":{"text":"A11y enforcement"},"helpUri":"https://codehealth.canine.dev/dimensions/AC7"},{"id":"AX10","name":"Code composition","shortDescription":{"text":"Code composition"},"helpUri":"https://codehealth.canine.dev/dimensions/AX10"},{"id":"AX2","name":"Stateful singletons","shortDescription":{"text":"Stateful singletons"},"helpUri":"https://codehealth.canine.dev/dimensions/AX2"},{"id":"AX3","name":"Project dependency cycles","shortDescription":{"text":"Project dependency cycles"},"helpUri":"https://codehealth.canine.dev/dimensions/AX3"},{"id":"AX4","name":"Dependency direction","shortDescription":{"text":"Dependency direction"},"helpUri":"https://codehealth.canine.dev/dimensions/AX4"},{"id":"AX6","name":"Interface segregation","shortDescription":{"text":"Interface segregation"},"helpUri":"https://codehealth.canine.dev/dimensions/AX6"},{"id":"AXB2","name":"Runtime readiness","shortDescription":{"text":"Runtime readiness"},"helpUri":"https://codehealth.canine.dev/dimensions/AXB2"},{"id":"DM9","name":"Scattered domain decisions","shortDescription":{"text":"Scattered domain decisions"},"helpUri":"https://codehealth.canine.dev/dimensions/DM9"},{"id":"ED5","name":"Idempotency","shortDescription":{"text":"Idempotency"},"helpUri":"https://codehealth.canine.dev/dimensions/ED5"},{"id":"GD1","name":"Unfinished \u0026 placeholder code","shortDescription":{"text":"Unfinished \u0026 placeholder code"},"helpUri":"https://codehealth.canine.dev/dimensions/GD1"},{"id":"IC1","name":"Incompleteness \u0026 stubs","shortDescription":{"text":"Incompleteness \u0026 stubs"},"helpUri":"https://codehealth.canine.dev/dimensions/IC1"},{"id":"M1","name":"Documentation (README)","shortDescription":{"text":"Documentation (README)"},"helpUri":"https://codehealth.canine.dev/dimensions/M1"},{"id":"M2","name":"Architecture documentation","shortDescription":{"text":"Architecture documentation"},"helpUri":"https://codehealth.canine.dev/dimensions/M2"},{"id":"M3","name":"Folder \u0026 project structure","shortDescription":{"text":"Folder \u0026 project structure"},"helpUri":"https://codehealth.canine.dev/dimensions/M3"},{"id":"M4","name":"Documentation accuracy","shortDescription":{"text":"Documentation accuracy"},"helpUri":"https://codehealth.canine.dev/dimensions/M4"},{"id":"P1","name":"CI/CD gates","shortDescription":{"text":"CI/CD gates"},"helpUri":"https://codehealth.canine.dev/dimensions/P1"},{"id":"P10","name":"Library API \u0026 versioning","shortDescription":{"text":"Library API \u0026 versioning"},"helpUri":"https://codehealth.canine.dev/dimensions/P10"},{"id":"P12","name":"CI test-gate honesty","shortDescription":{"text":"CI test-gate honesty"},"helpUri":"https://codehealth.canine.dev/dimensions/P12"},{"id":"P2","name":"Observability","shortDescription":{"text":"Observability"},"helpUri":"https://codehealth.canine.dev/dimensions/P2"},{"id":"P3","name":"Security \u0026 performance tooling","shortDescription":{"text":"Security \u0026 performance tooling"},"helpUri":"https://codehealth.canine.dev/dimensions/P3"},{"id":"P4","name":"Deployment \u0026 Rollback","shortDescription":{"text":"Deployment \u0026 Rollback"},"helpUri":"https://codehealth.canine.dev/dimensions/P4"},{"id":"P7","name":"Outbound HTTP resilience","shortDescription":{"text":"Outbound HTTP resilience"},"helpUri":"https://codehealth.canine.dev/dimensions/P7"},{"id":"P8","name":"Schema migrations","shortDescription":{"text":"Schema migrations"},"helpUri":"https://codehealth.canine.dev/dimensions/P8"},{"id":"PF3","name":"Async \u0026 latency hygiene","shortDescription":{"text":"Async \u0026 latency hygiene"},"helpUri":"https://codehealth.canine.dev/dimensions/PF3"},{"id":"R1","name":"Type Safety","shortDescription":{"text":"Type Safety"},"helpUri":"https://codehealth.canine.dev/dimensions/R1"},{"id":"R10","name":"Code Duplication","shortDescription":{"text":"Code Duplication"},"helpUri":"https://codehealth.canine.dev/dimensions/R10"},{"id":"R11","name":"Import Boundaries","shortDescription":{"text":"Import Boundaries"},"helpUri":"https://codehealth.canine.dev/dimensions/R11"},{"id":"R2","name":"Cyclomatic Complexity","shortDescription":{"text":"Cyclomatic Complexity"},"helpUri":"https://codehealth.canine.dev/dimensions/R2"},{"id":"R3","name":"Large Files","shortDescription":{"text":"Large Files"},"helpUri":"https://codehealth.canine.dev/dimensions/R3"},{"id":"R4","name":"Test Coverage","shortDescription":{"text":"Test Coverage"},"helpUri":"https://codehealth.canine.dev/dimensions/R4"},{"id":"R5","name":"Dependency Freshness","shortDescription":{"text":"Dependency Freshness"},"helpUri":"https://codehealth.canine.dev/dimensions/R5"},{"id":"R6","name":"Tooling","shortDescription":{"text":"Tooling"},"helpUri":"https://codehealth.canine.dev/dimensions/R6"},{"id":"R7","name":"Dead Code","shortDescription":{"text":"Dead Code"},"helpUri":"https://codehealth.canine.dev/dimensions/R7"},{"id":"R8","name":"Dependency Hygiene","shortDescription":{"text":"Dependency Hygiene"},"helpUri":"https://codehealth.canine.dev/dimensions/R8"},{"id":"R9","name":"Circular Imports","shortDescription":{"text":"Circular Imports"},"helpUri":"https://codehealth.canine.dev/dimensions/R9"},{"id":"SC1","name":"Supply-chain hygiene","shortDescription":{"text":"Supply-chain hygiene"},"helpUri":"https://codehealth.canine.dev/dimensions/SC1"},{"id":"X1","name":"Async correctness","shortDescription":{"text":"Async correctness"},"helpUri":"https://codehealth.canine.dev/dimensions/X1"},{"id":"X10","name":"Duplicated predicate","shortDescription":{"text":"Duplicated predicate"},"helpUri":"https://codehealth.canine.dev/dimensions/X10"},{"id":"X12","name":"Unreachable branch","shortDescription":{"text":"Unreachable branch"},"helpUri":"https://codehealth.canine.dev/dimensions/X12"},{"id":"X13","name":"Undrained process stream","shortDescription":{"text":"Undrained process stream"},"helpUri":"https://codehealth.canine.dev/dimensions/X13"},{"id":"X14","name":"Bypassable address classification","shortDescription":{"text":"Bypassable address classification"},"helpUri":"https://codehealth.canine.dev/dimensions/X14"},{"id":"X15","name":"Unvalidated length from an untrusted reader","shortDescription":{"text":"Unvalidated length from an untrusted reader"},"helpUri":"https://codehealth.canine.dev/dimensions/X15"},{"id":"X16","name":"Unfloored truncation loop","shortDescription":{"text":"Unfloored truncation loop"},"helpUri":"https://codehealth.canine.dev/dimensions/X16"},{"id":"X17","name":"Uncapped recursion over a caller-supplied document","shortDescription":{"text":"Uncapped recursion over a caller-supplied document"},"helpUri":"https://codehealth.canine.dev/dimensions/X17"},{"id":"X18","name":"Disposal-pattern correctness","shortDescription":{"text":"Disposal-pattern correctness"},"helpUri":"https://codehealth.canine.dev/dimensions/X18"},{"id":"X19","name":"Unrestored process-global state","shortDescription":{"text":"Unrestored process-global state"},"helpUri":"https://codehealth.canine.dev/dimensions/X19"},{"id":"X2","name":"Cancellation propagation","shortDescription":{"text":"Cancellation propagation"},"helpUri":"https://codehealth.canine.dev/dimensions/X2"},{"id":"X20","name":"Mistyped argument guard","shortDescription":{"text":"Mistyped argument guard"},"helpUri":"https://codehealth.canine.dev/dimensions/X20"},{"id":"X21","name":"Side-effecting pattern guard","shortDescription":{"text":"Side-effecting pattern guard"},"helpUri":"https://codehealth.canine.dev/dimensions/X21"},{"id":"X22","name":"Contradicted release guard","shortDescription":{"text":"Contradicted release guard"},"helpUri":"https://codehealth.canine.dev/dimensions/X22"},{"id":"X23","name":"Unguarded diagnostic materialisation","shortDescription":{"text":"Unguarded diagnostic materialisation"},"helpUri":"https://codehealth.canine.dev/dimensions/X23"},{"id":"X24","name":"Document value interpolated into markup unescaped","shortDescription":{"text":"Document value interpolated into markup unescaped"},"helpUri":"https://codehealth.canine.dev/dimensions/X24"},{"id":"X25","name":"Inert configuration knob","shortDescription":{"text":"Inert configuration knob"},"helpUri":"https://codehealth.canine.dev/dimensions/X25"},{"id":"X26","name":"Unsynchronised callback handoff","shortDescription":{"text":"Unsynchronised callback handoff"},"helpUri":"https://codehealth.canine.dev/dimensions/X26"},{"id":"X27","name":"Collection changed while being enumerated","shortDescription":{"text":"Collection changed while being enumerated"},"helpUri":"https://codehealth.canine.dev/dimensions/X27"},{"id":"X28","name":"Index access outside its own emptiness guard","shortDescription":{"text":"Index access outside its own emptiness guard"},"helpUri":"https://codehealth.canine.dev/dimensions/X28"},{"id":"X29","name":"Per-element action decided by a fixed element","shortDescription":{"text":"Per-element action decided by a fixed element"},"helpUri":"https://codehealth.canine.dev/dimensions/X29"},{"id":"X3","name":"Exception handling","shortDescription":{"text":"Exception handling"},"helpUri":"https://codehealth.canine.dev/dimensions/X3"},{"id":"X30","name":"Support guard that admits what it rejects","shortDescription":{"text":"Support guard that admits what it rejects"},"helpUri":"https://codehealth.canine.dev/dimensions/X30"},{"id":"X32","name":"Type resolved by simple name across every loaded assembly","shortDescription":{"text":"Type resolved by simple name across every loaded assembly"},"helpUri":"https://codehealth.canine.dev/dimensions/X32"},{"id":"X4","name":"Structured logging","shortDescription":{"text":"Structured logging"},"helpUri":"https://codehealth.canine.dev/dimensions/X4"},{"id":"X5","name":"Nullable reference types","shortDescription":{"text":"Nullable reference types"},"helpUri":"https://codehealth.canine.dev/dimensions/X5"},{"id":"X6","name":"Hand-rolled structured-format parsing","shortDescription":{"text":"Hand-rolled structured-format parsing"},"helpUri":"https://codehealth.canine.dev/dimensions/X6"},{"id":"X7","name":"Silent fallback defaults","shortDescription":{"text":"Silent fallback defaults"},"helpUri":"https://codehealth.canine.dev/dimensions/X7"},{"id":"X9","name":"Subsumed condition operand","shortDescription":{"text":"Subsumed condition operand"},"helpUri":"https://codehealth.canine.dev/dimensions/X9"}]}},"results":[{"ruleId":"D1","level":"warning","message":{"text":"cli.run (cyclomatic 131): cli.run has cyclomatic complexity 131 (threshold 15). Of this number, 124 points are the body\u0027s own statements and 7 belong to 4 function items inside it that branch. To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/cli.ts"},"region":{"startLine":350}}}],"partialFingerprints":{"codehealthFindingId/v1":"47a0382080e141248ac9ee767b61832f133d42d7801fc9298dbb7e40486e649a"}},{"ruleId":"D1","level":"warning","message":{"text":"Schema.validate_json_schema_value (cyclomatic 54): Schema.validate_json_schema_value has cyclomatic complexity 54 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/base.py"},"region":{"startLine":56}}}],"partialFingerprints":{"codehealthFindingId/v1":"54d1abfa7ed69c85db70fab6ec0d512c55c972ff90c7a8c2146651049cb3b124"}},{"ruleId":"D1","level":"warning","message":{"text":"server.buildServer (cyclomatic 52): server.buildServer has cyclomatic complexity 52 (threshold 15). Most of this is not in the body itself: 2 of the 52 points are its own statements and the rest belongs to 13 function literals inside it that branch (lines 391, 126, 364, \u2026). The decisions are inside those literals, which nothing outside this body can call, review or test on its own, so splitting the enclosing body is not the move available here. To reduce it, lift the literals\u0027 work into a named function or method at the enclosing scope and have each literal call it, then reduce whichever part then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/api/src/server.ts"},"region":{"startLine":101}}}],"partialFingerprints":{"codehealthFindingId/v1":"6af429570ab0a03ab66564baad38a872419b63784c59de2f6c5ed5826eb05546"}},{"ruleId":"D1","level":"warning","message":{"text":"EditFileTool.execute (cyclomatic 50): EditFileTool.execute has cyclomatic complexity 50 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/filesystem.py"},"region":{"startLine":594}}}],"partialFingerprints":{"codehealthFindingId/v1":"cddfec6ae049a51a80cab277732d3a755cf17119297002ac9ff6f5ce477b9629"}},{"ruleId":"D1","level":"warning","message":{"text":"GrepTool.execute (cyclomatic 44): GrepTool.execute has cyclomatic complexity 44 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/search.py"},"region":{"startLine":524}}}],"partialFingerprints":{"codehealthFindingId/v1":"99e72671a6d8fdbd27d3e0b85ef4960f7a950d0e44d2781c04020f61ab3820dd"}},{"ruleId":"D1","level":"warning","message":{"text":"ApplyPatchTool.execute (cyclomatic 42): ApplyPatchTool.execute has cyclomatic complexity 42 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/apply_patch.py"},"region":{"startLine":96}}}],"partialFingerprints":{"codehealthFindingId/v1":"a51c34f326a18c65d7b287d44ae9f1e247ccf917c3bafef63cc48ac06c797ffb"}},{"ruleId":"D1","level":"warning","message":{"text":"AgentServer._handle (cyclomatic 41): AgentServer._handle has cyclomatic complexity 41 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/server.py"},"region":{"startLine":250}}}],"partialFingerprints":{"codehealthFindingId/v1":"3590167e851ef7a369ad3d14ebf00715cbe6551e8d0f7f5ec191e9dccbd99f6d"}},{"ruleId":"D1","level":"warning","message":{"text":"qr-connect.QrConnect (cyclomatic 37): qr-connect.QrConnect has cyclomatic complexity 37 (threshold 15). Of this number, 22 points are the body\u0027s own statements and 15 belong to 5 function items inside it that branch. To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/channels/qr-connect.tsx"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"34a32901472d3a774bb02fb842624b18c8faa74fdcc7021aa8cbad191e4748c3"}},{"ruleId":"D1","level":"warning","message":{"text":"OpenAICompatProvider._parse_chunks (cyclomatic 37): OpenAICompatProvider._parse_chunks has cyclomatic complexity 37 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/openai_compat_provider.py"},"region":{"startLine":613}}}],"partialFingerprints":{"codehealthFindingId/v1":"edef95b5cf077eadba21248c404997c6a8038a923808cbe03a6f2f315a5b930f"}},{"ruleId":"D1","level":"warning","message":{"text":"AgentRunner._run_core (cyclomatic 34): AgentRunner._run_core has cyclomatic complexity 34 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/runner.py"},"region":{"startLine":298}}}],"partialFingerprints":{"codehealthFindingId/v1":"b50c6fb71b975e695e4d07f07f35bfd6f60c8540daaeb503bb5b06137672f39c"}},{"ruleId":"D1","level":"warning","message":{"text":"FakeBotApi.#handle (cyclomatic 33): FakeBotApi.#handle has cyclomatic complexity 33 (threshold 15). Of this number, 31 points are the body\u0027s own statements and 2 belong to one function literal inside it that branches. To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/telegram/fake-bot-api.ts"},"region":{"startLine":317}}}],"partialFingerprints":{"codehealthFindingId/v1":"dd4dd58de9d4e800ccfa12123970103b0d38f962bebe624c9299a5a64dfa370e"}},{"ruleId":"D1","level":"warning","message":{"text":"Scheduler.resolveApproval (cyclomatic 30): Scheduler.resolveApproval has cyclomatic complexity 30 (threshold 15). Most of this is not in the body itself: 14 of the 30 points are its own statements and the rest belongs to one function literal inside it that branches (line 728). The decisions are inside the literal, which nothing outside this body can call, review or test on its own, so splitting the enclosing body is not the move available here. To reduce it, lift the literal\u0027s work into a named function or method at the enclosing scope and have the literal call it, then reduce whichever part then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/scheduler.ts"},"region":{"startLine":696}}}],"partialFingerprints":{"codehealthFindingId/v1":"111db01a758a775519c30f80b4da92fbc6365e36174711a4f70955e5a9532528"}},{"ruleId":"D1","level":"warning","message":{"text":"agentd.RunRelay (cyclomatic 30): agentd.RunRelay has cyclomatic complexity 30 (threshold 15). Of this number, 20 points are the body\u0027s own statements and 10 belong to 2 function literals inside it that branch. To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/dot-agentd/internal/agentd/relay.go"},"region":{"startLine":42}}}],"partialFingerprints":{"codehealthFindingId/v1":"b6b1712bf4ecdb08a7f75db3cf05c0bf042e2e509f38a46836bc2421d8a3fd67"}},{"ruleId":"D1","level":"warning","message":{"text":"NeedsYou.NeedsYou (cyclomatic 28): NeedsYou.NeedsYou has cyclomatic complexity 28 (threshold 15). Of this number, 24 points are the body\u0027s own statements and 4 belong to 3 function literals inside it that branch. To reduce it, name the conditions: bind each compound test to a well-named local or a small predicate function, so the body reads as a sequence of named decisions rather than a chain of operators."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/inbox/NeedsYou.tsx"},"region":{"startLine":127}}}],"partialFingerprints":{"codehealthFindingId/v1":"8102d457113b17165146785eace6af0e95a6eb14beca99f4cbde6ca1b219e15b"}},{"ruleId":"D1","level":"warning","message":{"text":"Tool._cast_value (cyclomatic 28): Tool._cast_value has cyclomatic complexity 28 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/base.py"},"region":{"startLine":241}}}],"partialFingerprints":{"codehealthFindingId/v1":"6516a0b39d1b888addcf62273e63c53c6be8bd8a8c19653d5fd932f8ea8cd33a"}},{"ruleId":"D1","level":"warning","message":{"text":"task-drawer.TaskDrawer (cyclomatic 27): task-drawer.TaskDrawer has cyclomatic complexity 27 (threshold 15). Of this number, 26 points are the body\u0027s own statements and 1 belongs to one function literal inside it that branches. To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/tasks/task-drawer.tsx"},"region":{"startLine":41}}}],"partialFingerprints":{"codehealthFindingId/v1":"5130de23d1e7d536a8b4b390b311bfd4f67d5888917ea4b1e426d8d7e523e0bc"}},{"ruleId":"D1","level":"warning","message":{"text":"agentd.runProcStream (cyclomatic 26): agentd.runProcStream has cyclomatic complexity 26 (threshold 15). Most of this is not in the body itself: 10 of the 26 points are its own statements and the rest belongs to 3 function literals inside it that branch (lines 183, 164, 141). The decisions are inside those literals, which nothing outside this body can call, review or test on its own, so splitting the enclosing body is not the move available here. To reduce it, lift the literals\u0027 work into a named function or method at the enclosing scope and have each literal call it, then reduce whichever part then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/dot-agentd/internal/agentd/proc.go"},"region":{"startLine":138}}}],"partialFingerprints":{"codehealthFindingId/v1":"6ef50d471fb04ee96d7213fa071cfa2af08b3a7074f23c0071c9d5e06a7fb0e0"}},{"ruleId":"D1","level":"warning","message":{"text":"dot-live.applyLiveEvent (cyclomatic 24): dot-live.applyLiveEvent has cyclomatic complexity 24 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/dot-live.ts"},"region":{"startLine":65}}}],"partialFingerprints":{"codehealthFindingId/v1":"31a4a71d0d43b5ccb2bb714d401cd62f6a2887668a78a660499ba79819c9fb2b"}},{"ruleId":"D1","level":"warning","message":{"text":"DotSettings.Editor (cyclomatic 24): DotSettings.Editor has cyclomatic complexity 24 (threshold 15). Of this number, 14 points are the body\u0027s own statements and 10 belong to 8 function items inside it that branch. To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/dot-settings/DotSettings.tsx"},"region":{"startLine":43}}}],"partialFingerprints":{"codehealthFindingId/v1":"77c1ecde6440f9bea059dc395e8334314a4492e8ae9d06c164378ab93d80b515"}},{"ruleId":"D1","level":"warning","message":{"text":"Session.get_history (cyclomatic 24): Session.get_history has cyclomatic complexity 24 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/session/manager.py"},"region":{"startLine":80}}}],"partialFingerprints":{"codehealthFindingId/v1":"5845c1f2470437b7d3cd980a99b40f56cbdf3f8b101c76411378a358821904e6"}},{"ruleId":"D1","level":"warning","message":{"text":"approval-view.approvalBody (cyclomatic 22): approval-view.approvalBody has cyclomatic complexity 22 (threshold 15). Of this number, 17 points are the body\u0027s own statements and 5 belong to one function literal inside it that branches. To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/approval-view.ts"},"region":{"startLine":212}}}],"partialFingerprints":{"codehealthFindingId/v1":"ab4dfe41ed73fa143652b9aea7328a2f17df4315fc485b5d2cd8c025f0e4462d"}},{"ruleId":"D1","level":"warning","message":{"text":"FindFilesTool.execute (cyclomatic 22): FindFilesTool.execute has cyclomatic complexity 22 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/search.py"},"region":{"startLine":299}}}],"partialFingerprints":{"codehealthFindingId/v1":"2d25a4c1b851eb7327cbbbf1118a3d56c4a1d837ad00c3d2f55765520bd740c1"}},{"ruleId":"D1","level":"warning","message":{"text":"helpers._estimate_prompt_tokens_with_source (cyclomatic 22): helpers._estimate_prompt_tokens_with_source has cyclomatic complexity 22 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/utils/helpers.py"},"region":{"startLine":434}}}],"partialFingerprints":{"codehealthFindingId/v1":"545c09d5ebc46c16d398edad1e8545b18ae115bb39d3ee9d88318ea231c03754"}},{"ruleId":"D1","level":"warning","message":{"text":"Server.handleProc (cyclomatic 22): Server.handleProc has cyclomatic complexity 22 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/dot-agentd/internal/agentd/proc.go"},"region":{"startLine":63}}}],"partialFingerprints":{"codehealthFindingId/v1":"4b7c858c72fe9e79f0ee7c5a9ef4d8895e747065e0e13064c1858d73d66c7000"}},{"ruleId":"D1","level":"warning","message":{"text":"files-tab.FilesTab (cyclomatic 21): files-tab.FilesTab has cyclomatic complexity 21 (threshold 15). Of this number, 17 points are the body\u0027s own statements and 4 belong to 2 function items inside it that branch. To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/computer/files-tab.tsx"},"region":{"startLine":41}}}],"partialFingerprints":{"codehealthFindingId/v1":"81337149b9daa911b0b651299ba36f798de2bcd79efa15b10779ae249c9c76a8"}},{"ruleId":"D1","level":"warning","message":{"text":"ReadFileTool.execute (cyclomatic 21): ReadFileTool.execute has cyclomatic complexity 21 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/filesystem.py"},"region":{"startLine":129}}}],"partialFingerprints":{"codehealthFindingId/v1":"a182e40da8180867a2efdd93a8ec7868fddb8b4e5629ef7d39724cbb00cfd811"}},{"ruleId":"D1","level":"warning","message":{"text":"ListDirTool.execute (cyclomatic 21): ListDirTool.execute has cyclomatic complexity 21 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/filesystem.py"},"region":{"startLine":847}}}],"partialFingerprints":{"codehealthFindingId/v1":"c2f49a2bcf89785353128331e98cbee5fe8f56f7fb520ae9b2c568b21256f5d5"}},{"ruleId":"D1","level":"warning","message":{"text":"LLMProvider._sanitize_empty_content (cyclomatic 21): LLMProvider._sanitize_empty_content has cyclomatic complexity 21 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/base.py"},"region":{"startLine":472}}}],"partialFingerprints":{"codehealthFindingId/v1":"874101f5b60d89182b5f0e2f06983cc64e99ae69861adb78e88f6efdc0e4c8b9"}},{"ruleId":"D1","level":"warning","message":{"text":"LLMProvider._enforce_role_alternation (cyclomatic 21): LLMProvider._enforce_role_alternation has cyclomatic complexity 21 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/base.py"},"region":{"startLine":780}}}],"partialFingerprints":{"codehealthFindingId/v1":"50caf701bfaa9c15d729362eb2e3e653482739d3b255eccfedfb3233d79d3944"}},{"ruleId":"D1","level":"warning","message":{"text":"ActivityView.ActivityView (cyclomatic 20): ActivityView.ActivityView has cyclomatic complexity 20 (threshold 15). Of this number, 18 points are the body\u0027s own statements and 2 belong to 2 function literals inside it that branch. To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/activity/ActivityView.tsx"},"region":{"startLine":24}}}],"partialFingerprints":{"codehealthFindingId/v1":"20557748c6b07168731fb44a9df24071e3a0c7dc06743fa6343b9422c57ba488"}},{"ruleId":"D1","level":"warning","message":{"text":"wide.html.scenes (cyclomatic 20): wide.html.scenes has cyclomatic complexity 20 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/hero/html/wide.html"},"region":{"startLine":192}}}],"partialFingerprints":{"codehealthFindingId/v1":"bbf47d8e95a0e644846212e0a9e420d2d32aa2a4425e21596cdc565c9ba49954"}},{"ruleId":"D1","level":"warning","message":{"text":"CronTool._add_job (cyclomatic 20): CronTool._add_job has cyclomatic complexity 20 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/cron.py"},"region":{"startLine":123}}}],"partialFingerprints":{"codehealthFindingId/v1":"fd21801ec5d6f720bff66dee7f40bef7ddfe7ea63783f53c073bc29861dfa68a"}},{"ruleId":"D1","level":"warning","message":{"text":"DotHeader.DotHeader (cyclomatic 19): DotHeader.DotHeader has cyclomatic complexity 19 (threshold 15). Of this number, 18 points are the body\u0027s own statements and 1 belongs to one function literal inside it that branches. To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/dot/DotHeader.tsx"},"region":{"startLine":27}}}],"partialFingerprints":{"codehealthFindingId/v1":"173fc25963bf7376be58180f80e2be706ad50a25fc0a50e2fff6d959d4ba9310"}},{"ruleId":"D1","level":"warning","message":{"text":"file-preview.FilePreview (cyclomatic 19): file-preview.FilePreview has cyclomatic complexity 19 (threshold 15). Of this number, 12 points are the body\u0027s own statements and 7 belong to 5 function items inside it that branch. To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/computer/file-preview.tsx"},"region":{"startLine":33}}}],"partialFingerprints":{"codehealthFindingId/v1":"8ce414c080a9cb17234cfa6402a5d5b83f39af9e62f850ffcf6444c16de59cae"}},{"ruleId":"D1","level":"warning","message":{"text":"usage-tab.UsageTab (cyclomatic 19): usage-tab.UsageTab has cyclomatic complexity 19 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/computer/usage-tab.tsx"},"region":{"startLine":84}}}],"partialFingerprints":{"codehealthFindingId/v1":"1c6ba21255fedee5202cb5a4440f2110c43e5fc57850dc3be3a7e2a5d8edd7bc"}},{"ruleId":"D1","level":"warning","message":{"text":"mobile.html.scenes (cyclomatic 19): mobile.html.scenes has cyclomatic complexity 19 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/hero/html/mobile.html"},"region":{"startLine":140}}}],"partialFingerprints":{"codehealthFindingId/v1":"b4d689843d107aa7cb8b15ca7d37be126d7fb97e8f6f5216300fa26335959a95"}},{"ruleId":"D1","level":"warning","message":{"text":"small.html.scenes (cyclomatic 19): small.html.scenes has cyclomatic complexity 19 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/hero/html/small.html"},"region":{"startLine":140}}}],"partialFingerprints":{"codehealthFindingId/v1":"707df24d1959c4f27ab1fbd47c78581814dff39e725dd77da87751c1e0a0e69f"}},{"ruleId":"D1","level":"warning","message":{"text":"process.acquirePidLock (cyclomatic 19): process.acquirePidLock has cyclomatic complexity 19 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/src/process.ts"},"region":{"startLine":118}}}],"partialFingerprints":{"codehealthFindingId/v1":"0a1501e712648365f920dcff3c63b611a114d8b64567014a14b7132135d38347"}},{"ruleId":"D1","level":"warning","message":{"text":"exec_session._escape_end (cyclomatic 19): exec_session._escape_end has cyclomatic complexity 19 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/exec_session.py"},"region":{"startLine":47}}}],"partialFingerprints":{"codehealthFindingId/v1":"3fda0f5440ba98ee32471d4fdc83b35e4ceceb19d363fb6b7a5a3625a4005a09"}},{"ruleId":"D1","level":"warning","message":{"text":"exec_session.terminal_text (cyclomatic 19): exec_session.terminal_text has cyclomatic complexity 19 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/exec_session.py"},"region":{"startLine":88}}}],"partialFingerprints":{"codehealthFindingId/v1":"339ce38287c4a6e535df035ea0b6f2834ffae99ff8602fb803bd63cdeee654d9"}},{"ruleId":"D1","level":"warning","message":{"text":"transcript_outbox._record_tool_result (cyclomatic 19): transcript_outbox._record_tool_result has cyclomatic complexity 19 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/transcript_outbox.py"},"region":{"startLine":154}}}],"partialFingerprints":{"codehealthFindingId/v1":"16c4a92e0b4159265c74d09d1b57ab7c4ef9a18f6dea18c96f67d96baafd537a"}},{"ruleId":"D1","level":"warning","message":{"text":"helpers.estimate_message_tokens (cyclomatic 19): helpers.estimate_message_tokens has cyclomatic complexity 19 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/utils/helpers.py"},"region":{"startLine":500}}}],"partialFingerprints":{"codehealthFindingId/v1":"61f52876d4904d8435c86fce828a1b747c20257e4cf866364c9305218aa70f6f"}},{"ruleId":"D1","level":"warning","message":{"text":"guest-events.applyGuestEvent (cyclomatic 18): guest-events.applyGuestEvent has cyclomatic complexity 18 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/guest-events.ts"},"region":{"startLine":92}}}],"partialFingerprints":{"codehealthFindingId/v1":"83bd92427871c6e919bbc6740305e77b1e625564b6e85760cd6ec99ca235e60e"}},{"ruleId":"D1","level":"warning","message":{"text":"mcp-servers-panel.McpServersPanel (cyclomatic 18): mcp-servers-panel.McpServersPanel has cyclomatic complexity 18 (threshold 15). Of this number, 9 points are the body\u0027s own statements and 9 belong to 3 function items inside it that branch. To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/dot-settings/mcp-servers-panel.tsx"},"region":{"startLine":155}}}],"partialFingerprints":{"codehealthFindingId/v1":"6201b07617da9d9c187db7893d9350e46f9a214817fabf96f2dc99dbb88ed2fb"}},{"ruleId":"D1","level":"warning","message":{"text":"story.Body (cyclomatic 18): story.Body has cyclomatic complexity 18 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/tasks/story.tsx"},"region":{"startLine":28}}}],"partialFingerprints":{"codehealthFindingId/v1":"17c99329cb3d4eba8466606e6a9e1a67f335d77c3be4f10c1bef2c3e183a269d"}},{"ruleId":"D1","level":"warning","message":{"text":"transcript_outbox.record_transcript_append (cyclomatic 18): transcript_outbox.record_transcript_append has cyclomatic complexity 18 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/transcript_outbox.py"},"region":{"startLine":101}}}],"partialFingerprints":{"codehealthFindingId/v1":"b69f8e32ebd2ea85dae571de888e6a0a4854daba4b42b7391c1fa05cea8b3d97"}},{"ruleId":"D1","level":"warning","message":{"text":"approval-card.ApprovalCard (cyclomatic 17): approval-card.ApprovalCard has cyclomatic complexity 17 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/elements/approval-card.tsx"},"region":{"startLine":48}}}],"partialFingerprints":{"codehealthFindingId/v1":"8e98b7c75ebb060a121782d8dfefe39db45e786f818c7f7183089d61ee6dbf8c"}},{"ruleId":"D1","level":"warning","message":{"text":"yaml.emit (cyclomatic 17): yaml.emit has cyclomatic complexity 17 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/yaml.ts"},"region":{"startLine":67}}}],"partialFingerprints":{"codehealthFindingId/v1":"f8a0d9c26e531f3058a6f79e19c9007664a1cd85381595bd71463568090243db"}},{"ruleId":"D1","level":"warning","message":{"text":"use-inbox-keys.useInboxKeys::onKeyDown (cyclomatic 17): use-inbox-keys.useInboxKeys::onKeyDown has cyclomatic complexity 17 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/inbox/use-inbox-keys.ts"},"region":{"startLine":48}}}],"partialFingerprints":{"codehealthFindingId/v1":"dd948991e74cbda160a1e577e32d47819e55eeded24f6a16bc249d782bde9922"}},{"ruleId":"D1","level":"warning","message":{"text":"NewDotPage.NewDotPage (cyclomatic 17): NewDotPage.NewDotPage has cyclomatic complexity 17 (threshold 15). Of this number, 11 points are the body\u0027s own statements and 6 belong to 5 function items inside it that branch. To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/new-dot/NewDotPage.tsx"},"region":{"startLine":24}}}],"partialFingerprints":{"codehealthFindingId/v1":"0cff93e7e95f4ad21b9a3a3731c57b27b33a4f4165598c82c7ffdb48ff45a2a4"}},{"ruleId":"D1","level":"warning","message":{"text":"main.serve (cyclomatic 17): main.serve has cyclomatic complexity 17 (threshold 15). Of this number, 15 points are the body\u0027s own statements and 2 belong to one function literal inside it that branches. To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/dot-agentd/cmd/dot-agentd/main.go"},"region":{"startLine":120}}}],"partialFingerprints":{"codehealthFindingId/v1":"55b6826c34b0d0661e663273bcdccd02f6e728f7cf59387c6e1fdecf27f758ed"}},{"ruleId":"D1","level":"warning","message":{"text":"web.startWebServer (cyclomatic 16): web.startWebServer has cyclomatic complexity 16 (threshold 15). Of this number, 11 points are the body\u0027s own statements and 5 belong to 2 function items inside it that branch. To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/web.ts"},"region":{"startLine":106}}}],"partialFingerprints":{"codehealthFindingId/v1":"5184a0ce2e3d0ebeebbabe7701d8742ba5298947c5cddf0e0993ffcee3f97223"}},{"ruleId":"D1","level":"warning","message":{"text":"Lifecycle.#readyProcedure (cyclomatic 16): Lifecycle.#readyProcedure has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/lifecycle.ts"},"region":{"startLine":399}}}],"partialFingerprints":{"codehealthFindingId/v1":"2dda40c65d7b31f46a32c4f898214e1a17120b737afa5a829bf21aadb2a034a0"}},{"ruleId":"D1","level":"warning","message":{"text":"GuestClient.sendRaw (cyclomatic 16): GuestClient.sendRaw has cyclomatic complexity 16 (threshold 15). Most of this is not in the body itself: 5 of the 16 points are its own statements and the rest belongs to 4 function literals inside it that branch (lines 206, 221, 228, \u2026). The decisions are inside those literals, which nothing outside this body can call, review or test on its own, so splitting the enclosing body is not the move available here. To reduce it, lift the literals\u0027 work into a named function or method at the enclosing scope and have each literal call it, then reduce whichever part then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/guest-client.ts"},"region":{"startLine":189}}}],"partialFingerprints":{"codehealthFindingId/v1":"9f9b99150c38e0703dd10cb86f6c10130882b27f1aa5d35f5cc9e6afb9f8faf4"}},{"ruleId":"D1","level":"warning","message":{"text":"VmManager.startLocked (cyclomatic 16): VmManager.startLocked has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/vm-manager.ts"},"region":{"startLine":525}}}],"partialFingerprints":{"codehealthFindingId/v1":"3d347cc4b71c38e36cfea980cc935bf13c330bddca5efb6a947a6d65e6949392"}},{"ruleId":"D1","level":"warning","message":{"text":"ChannelHub.#inbound (cyclomatic 16): ChannelHub.#inbound has cyclomatic complexity 16 (threshold 15). Of this number, 12 points are the body\u0027s own statements and 4 belong to one function literal inside it that branches. To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/hub.ts"},"region":{"startLine":501}}}],"partialFingerprints":{"codehealthFindingId/v1":"333b8899843e7810740bf10850c03f20e1b9da7ccb9bcf4a67397127377f6b5e"}},{"ruleId":"D1","level":"warning","message":{"text":"InvisibleDotsClient.stream (cyclomatic 16): InvisibleDotsClient.stream has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/sdk/src/client.ts"},"region":{"startLine":475}}}],"partialFingerprints":{"codehealthFindingId/v1":"71f2a772c0d9353c057e25fe6e2d60beae8a3efa0977ba7a1f1919282b364175"}},{"ruleId":"D1","level":"warning","message":{"text":"ContextGovernor.backfill_missing_tool_results (cyclomatic 16): ContextGovernor.backfill_missing_tool_results has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/context_governance.py"},"region":{"startLine":807}}}],"partialFingerprints":{"codehealthFindingId/v1":"f585ffd2358c3fa957b94234eb2359b7e0021be3efa92ce0af9ade66c310d161"}},{"ruleId":"D1","level":"warning","message":{"text":"Consolidator.summarize (cyclomatic 16): Consolidator.summarize has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/memory.py"},"region":{"startLine":164}}}],"partialFingerprints":{"codehealthFindingId/v1":"fedd316c18042e0a2cddc7be97506c24677739217684d2387515c26e37ae3e21"}},{"ruleId":"D1","level":"warning","message":{"text":"ExecSessionTool._wait (cyclomatic 16): ExecSessionTool._wait has cyclomatic complexity 16 (threshold 15). To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/exec_session.py"},"region":{"startLine":671}}}],"partialFingerprints":{"codehealthFindingId/v1":"741d3a343c8f9ae863a571c32bc056f869aa5ed8b6bb88d34f08deb2287b595d"}},{"ruleId":"D1","level":"warning","message":{"text":"service._validate_schedule_for_add (cyclomatic 16): service._validate_schedule_for_add has cyclomatic complexity 16 (threshold 15). To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/cron/service.py"},"region":{"startLine":72}}}],"partialFingerprints":{"codehealthFindingId/v1":"fd51db247e47d536d5754f7671e3fd0a5384c8a2b694fa23e963aefa006bc01a"}},{"ruleId":"D2","level":"warning","message":{"text":"cli.run (cognitive 222): cli.run has cognitive complexity 222 (threshold 15). Drivers by points: if/else 48 (112 pts), ternaries 30 (78 pts), boolean chains 12, loops 4 (11 pts), error handling 4 (6 pts), match/switch 2 (3 pts) (nesting depth added 122). Of this number, 212 points are the body\u0027s own statements and 10 belong to 4 function items inside it that branch. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/cli.ts"},"region":{"startLine":350}}}],"partialFingerprints":{"codehealthFindingId/v1":"5e6a039d792cdfec9b796c41b3fef39bfcf3b418bb8792d40d18d883ec2ea1a5"}},{"ruleId":"D2","level":"warning","message":{"text":"ApplyPatchTool.execute (cognitive 100): ApplyPatchTool.execute has cognitive complexity 100 (threshold 15). Drivers by points: if/else 28 (70 pts), error handling 7 (17 pts), loops 6 (7 pts), boolean chains 4, ternaries 1 (2 pts) (nesting depth added 54). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/apply_patch.py"},"region":{"startLine":96}}}],"partialFingerprints":{"codehealthFindingId/v1":"3a0ee1e2dc62bc5e1b6cfd754060be9a783d1070d0f9c83135764a8321566cba"}},{"ruleId":"D2","level":"warning","message":{"text":"Schema.validate_json_schema_value (cognitive 74): Schema.validate_json_schema_value has cognitive complexity 74 (threshold 15). Drivers by points: if/else 26 (42 pts), boolean chains 20, loops 3 (7 pts), ternaries 2 (5 pts) (nesting depth added 23). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/base.py"},"region":{"startLine":56}}}],"partialFingerprints":{"codehealthFindingId/v1":"9068391e101cd5d64a5da482dd0c147295afbc69ed0aaac4c0449c0f84945613"}},{"ruleId":"D2","level":"warning","message":{"text":"OpenAICompatProvider._parse_chunks (cognitive 74): OpenAICompatProvider._parse_chunks has cognitive complexity 74 (threshold 15). Drivers by points: if/else 20 (54 pts), boolean chains 11, loops 4 (7 pts), ternaries 1 (2 pts) (nesting depth added 38). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/openai_compat_provider.py"},"region":{"startLine":613}}}],"partialFingerprints":{"codehealthFindingId/v1":"98a2b9a617643eeebf381849f5fdfa06715afa2ea8bcec513419f399b6a2dd86"}},{"ruleId":"D2","level":"warning","message":{"text":"AgentServer._handle (cognitive 65): AgentServer._handle has cognitive complexity 65 (threshold 15). Drivers by points: if/else 21 (32 pts), error handling 9 (20 pts), boolean chains 7, ternaries 3 (6 pts) (nesting depth added 25). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/server.py"},"region":{"startLine":250}}}],"partialFingerprints":{"codehealthFindingId/v1":"1af8b875a311f1f307c98ef6983a8d8785f71258302493712f6b00cca5d7e15c"}},{"ruleId":"D2","level":"warning","message":{"text":"AgentRunner._run_core (cognitive 64): AgentRunner._run_core has cognitive complexity 64 (threshold 15). Drivers by points: if/else 21 (46 pts), boolean chains 13, ternaries 1 (4 pts), loops 1 (nesting depth added 28). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/runner.py"},"region":{"startLine":298}}}],"partialFingerprints":{"codehealthFindingId/v1":"4c8f35e6c09eec12b48596603afa1b794f2bed346276a8dabc1d9bad5f5b7091"}},{"ruleId":"D2","level":"warning","message":{"text":"GrepTool.execute (cognitive 64): GrepTool.execute has cognitive complexity 64 (threshold 15). Drivers by points: if/else 24 (39 pts), ternaries 7 (11 pts), boolean chains 6, error handling 4, loops 2 (4 pts) (nesting depth added 21). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/search.py"},"region":{"startLine":524}}}],"partialFingerprints":{"codehealthFindingId/v1":"3bd22ecf92bc4b4059687ac5ae9a18e3c1b59dfc3266aab535175f693007b38c"}},{"ruleId":"D2","level":"warning","message":{"text":"EditFileTool.execute (cognitive 62): EditFileTool.execute has cognitive complexity 62 (threshold 15). Drivers by points: if/else 30 (43 pts), boolean chains 12, error handling 4, ternaries 1 (2 pts), loops 1 (nesting depth added 14). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/filesystem.py"},"region":{"startLine":594}}}],"partialFingerprints":{"codehealthFindingId/v1":"b04395d1ab540864b5edd8370707cb3a9e9414e13777edc7cdcec874b4d938b5"}},{"ruleId":"D2","level":"warning","message":{"text":"server.buildServer (cognitive 56): server.buildServer has cognitive complexity 56 (threshold 15). Drivers by points: if/else 22 (24 pts), boolean chains 16, ternaries 7 (11 pts), loops 4, error handling 1 (nesting depth added 6). Most of this is not in the body itself: 1 of the 56 points is its own statement and the rest belongs to 13 function literals inside it that branch (lines 126, 391, 364, \u2026). The decisions are inside those literals, which nothing outside this body can call, review or test on its own, so splitting the enclosing body is not the move available here. To reduce it, lift the literals\u0027 work into a named function or method at the enclosing scope and have each literal call it, then reduce whichever part then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/api/src/server.ts"},"region":{"startLine":101}}}],"partialFingerprints":{"codehealthFindingId/v1":"74686863c163bdf3ccf79a963e56580567f358356b3b4f6e311d7f999dddb2ae"}},{"ruleId":"D2","level":"warning","message":{"text":"file-preview.FilePreview (cognitive 51): file-preview.FilePreview has cognitive complexity 51 (threshold 15). Drivers by points: ternaries 12 (44 pts), if/else 6, error handling 1 (nesting depth added 32). Of this number, 42 points are the body\u0027s own statements and 9 belong to 5 function items inside it that branch. To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/computer/file-preview.tsx"},"region":{"startLine":33}}}],"partialFingerprints":{"codehealthFindingId/v1":"1824dbfac0e4b416721d0acbcd48d12f8287d6e5bf8be5c2c35a2bd17e446b74"}},{"ruleId":"D2","level":"warning","message":{"text":"agentd.RunRelay (cognitive 49): agentd.RunRelay has cognitive complexity 49 (threshold 15). Drivers by points: if/else 18 (38 pts), loops 3 (4 pts), match/switch 2 (4 pts), boolean chains 3 (nesting depth added 23). Of this number, 31 points are the body\u0027s own statements and 18 belong to 2 function literals inside it that branch. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/dot-agentd/internal/agentd/relay.go"},"region":{"startLine":42}}}],"partialFingerprints":{"codehealthFindingId/v1":"cd36e6f87571c31a3b7be48f6d2a7bbf9ff4f83bd7f0789249adac9db2a19a2d"}},{"ruleId":"D2","level":"warning","message":{"text":"LLMProvider._sanitize_empty_content (cognitive 47): LLMProvider._sanitize_empty_content has cognitive complexity 47 (threshold 15). Drivers by points: if/else 11 (30 pts), ternaries 3 (8 pts), boolean chains 5, loops 2 (4 pts) (nesting depth added 26). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/base.py"},"region":{"startLine":472}}}],"partialFingerprints":{"codehealthFindingId/v1":"ad38338e97e0d3f604f57be50cdd2e0e038e83ab2402d91bd39123fb6a13b9d2"}},{"ruleId":"D2","level":"warning","message":{"text":"Session.get_history (cognitive 44): Session.get_history has cognitive complexity 44 (threshold 15). Drivers by points: if/else 17 (34 pts), loops 4 (6 pts), boolean chains 4 (nesting depth added 19). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/session/manager.py"},"region":{"startLine":80}}}],"partialFingerprints":{"codehealthFindingId/v1":"422aefcb004869f497e9749edf5072a8d685576abfe958ebcedca13623c93b39"}},{"ruleId":"D2","level":"warning","message":{"text":"qr-connect.QrConnect (cognitive 43): qr-connect.QrConnect has cognitive complexity 43 (threshold 15). Drivers by points: ternaries 13 (19 pts), boolean chains 11, if/else 8 (11 pts), error handling 1, loops 1 (nesting depth added 9). Of this number, 21 points are the body\u0027s own statements and 22 belong to 5 function items inside it that branch. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/channels/qr-connect.tsx"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"532e39ab07659939349239fbdc93e54afee49e4834214385b5de06f55eacb837"}},{"ruleId":"D2","level":"warning","message":{"text":"ContextGovernor.backfill_missing_tool_results (cognitive 43): ContextGovernor.backfill_missing_tool_results has cognitive complexity 43 (threshold 15). Drivers by points: if/else 7 (27 pts), loops 4 (7 pts), ternaries 1 (7 pts), boolean chains 2 (nesting depth added 29). To reduce it, flatten the nesting: this score is depth rather than breadth \u2014 most of its points come from checks stacked inside one another, so the work sits several levels in. Invert each enclosing check into an early exit (a return, or the language\u0027s equivalent) so the happy path stays at one level, and where a level cannot be exited early, lift the block it encloses into its own named function."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/context_governance.py"},"region":{"startLine":807}}}],"partialFingerprints":{"codehealthFindingId/v1":"5be04f8628ceab116a5b8ff8b2569473ebdb3de371dae3a73e8acdc42d50f867"}},{"ruleId":"D2","level":"warning","message":{"text":"agentd.runProcStream (cognitive 41): agentd.runProcStream has cognitive complexity 41 (threshold 15). Drivers by points: if/else 15 (32 pts), loops 3 (4 pts), match/switch 2 (3 pts), boolean chains 2 (nesting depth added 19). Most of this is not in the body itself: 10 of the 41 points are its own statements and the rest belongs to 3 function literals inside it that branch (lines 183, 164, 141). The decisions are inside those literals, which nothing outside this body can call, review or test on its own, so splitting the enclosing body is not the move available here. To reduce it, lift the literals\u0027 work into a named function or method at the enclosing scope and have each literal call it, then reduce whichever part then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/dot-agentd/internal/agentd/proc.go"},"region":{"startLine":138}}}],"partialFingerprints":{"codehealthFindingId/v1":"dd9904b2518c5680953cf08fef7355326cce92aca538471fece32f60af59e679"}},{"ruleId":"D2","level":"warning","message":{"text":"helpers._estimate_prompt_tokens_with_source (cognitive 40): helpers._estimate_prompt_tokens_with_source has cognitive complexity 40 (threshold 15). Drivers by points: if/else 7 (19 pts), ternaries 5 (10 pts), loops 3 (6 pts), boolean chains 4, error handling 1 (nesting depth added 20). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/utils/helpers.py"},"region":{"startLine":434}}}],"partialFingerprints":{"codehealthFindingId/v1":"707f9b90781b0d7554643e397b8436414fd54e9faa7354450ffe28494cbc660a"}},{"ruleId":"D2","level":"warning","message":{"text":"Lifecycle.#readyProcedure (cognitive 38): Lifecycle.#readyProcedure has cognitive complexity 38 (threshold 15). Drivers by points: if/else 12 (29 pts), error handling 3 (5 pts), ternaries 1 (3 pts), loops 1 (nesting depth added 21). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/lifecycle.ts"},"region":{"startLine":399}}}],"partialFingerprints":{"codehealthFindingId/v1":"5c21233b4bd14489303a7121a6c78afca46edd6a796f3275b564436bcb1cd720"}},{"ruleId":"D2","level":"warning","message":{"text":"FakeBotApi.#handle (cognitive 38): FakeBotApi.#handle has cognitive complexity 38 (threshold 15). Drivers by points: if/else 16 (27 pts), boolean chains 6, ternaries 1 (2 pts), error handling 1, loops 1, match/switch 1 (nesting depth added 12). Of this number, 37 points are the body\u0027s own statements and 1 belongs to one function literal inside it that branches. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/telegram/fake-bot-api.ts"},"region":{"startLine":317}}}],"partialFingerprints":{"codehealthFindingId/v1":"1b3bec1281eb034eee66ac55be681d93642783823d65a02bca4a5d624ea1bc63"}},{"ruleId":"D2","level":"warning","message":{"text":"Tool._cast_value (cognitive 38): Tool._cast_value has cognitive complexity 38 (threshold 15). Drivers by points: if/else 16 (23 pts), boolean chains 7, ternaries 3 (6 pts), error handling 1 (2 pts) (nesting depth added 11). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/base.py"},"region":{"startLine":241}}}],"partialFingerprints":{"codehealthFindingId/v1":"6e9b51e89415b2682faad6de779ea0fb233a70987b9b87297ab2b2f7a4b98639"}},{"ruleId":"D2","level":"warning","message":{"text":"ListDirTool.execute (cognitive 37): ListDirTool.execute has cognitive complexity 37 (threshold 15). Drivers by points: if/else 11 (20 pts), ternaries 2 (8 pts), loops 2 (4 pts), error handling 3, boolean chains 2 (nesting depth added 17). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/filesystem.py"},"region":{"startLine":847}}}],"partialFingerprints":{"codehealthFindingId/v1":"f5a3c2089b24aac571e147e7019cb99b264aeb91234db515ddbd75b18496f278"}},{"ruleId":"D2","level":"warning","message":{"text":"task-drawer.TaskDrawer (cognitive 36): task-drawer.TaskDrawer has cognitive complexity 36 (threshold 15). Drivers by points: ternaries 17 (30 pts), boolean chains 6 (nesting depth added 13). Of this number, 35 points are the body\u0027s own statements and 1 belongs to one function literal inside it that branches. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/tasks/task-drawer.tsx"},"region":{"startLine":41}}}],"partialFingerprints":{"codehealthFindingId/v1":"8d9d078d356766f0d6d4fcf5b514362794e54eb1239aa7c0d92b2415d2a8f524"}},{"ruleId":"D2","level":"warning","message":{"text":"exec_session._escape_end (cognitive 36): exec_session._escape_end has cognitive complexity 36 (threshold 15). Drivers by points: if/else 10 (20 pts), ternaries 3 (8 pts), loops 3 (6 pts), boolean chains 2 (nesting depth added 18). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/exec_session.py"},"region":{"startLine":47}}}],"partialFingerprints":{"codehealthFindingId/v1":"bdb6f03d550c804961883bfb1068fcf07504a3df69e5a3f6f02261043ecd10d1"}},{"ruleId":"D2","level":"warning","message":{"text":"LLMProvider._enforce_role_alternation (cognitive 35): LLMProvider._enforce_role_alternation has cognitive complexity 35 (threshold 15). Drivers by points: if/else 11 (25 pts), boolean chains 7, loops 3 (nesting depth added 14). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/base.py"},"region":{"startLine":780}}}],"partialFingerprints":{"codehealthFindingId/v1":"250afb787de3867be832c801f4b6cbe639a014e5d6c921123f7612627cdc7c91"}},{"ruleId":"D2","level":"warning","message":{"text":"ContextGovernor.drop_orphan_tool_results (cognitive 32): ContextGovernor.drop_orphan_tool_results has cognitive complexity 32 (threshold 15). Drivers by points: if/else 8 (23 pts), loops 2 (4 pts), ternaries 1 (3 pts), boolean chains 2 (nesting depth added 19). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/context_governance.py"},"region":{"startLine":769}}}],"partialFingerprints":{"codehealthFindingId/v1":"568f4b187e87f5887fcabc13c643cc543cd2dc25cf491ac4f6976bc8a1725abc"}},{"ruleId":"D2","level":"warning","message":{"text":"GuestClient.events (cognitive 31): GuestClient.events has cognitive complexity 31 (threshold 15). Drivers by points: if/else 7 (22 pts), boolean chains 4, loops 2 (3 pts), error handling 1 (2 pts) (nesting depth added 17). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/guest-client.ts"},"region":{"startLine":382}}}],"partialFingerprints":{"codehealthFindingId/v1":"2bddcd141f455c47ef72337bb5a88d4ec1645dbf68fae95faeb4aaff0b3e8894"}},{"ruleId":"D2","level":"warning","message":{"text":"Lifecycle.recover (cognitive 30): Lifecycle.recover has cognitive complexity 30 (threshold 15). Drivers by points: if/else 11 (19 pts), ternaries 2 (7 pts), error handling 1 (2 pts), boolean chains 1, loops 1 (nesting depth added 14). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/lifecycle.ts"},"region":{"startLine":807}}}],"partialFingerprints":{"codehealthFindingId/v1":"d645bfecd9c20e0f129370e52f69fb6b5c4184f7ed3533ebeba1c1d24f4fc7be"}},{"ruleId":"D2","level":"warning","message":{"text":"InvisibleDotsClient.stream (cognitive 30): InvisibleDotsClient.stream has cognitive complexity 30 (threshold 15). Drivers by points: if/else 7 (20 pts), loops 3 (6 pts), boolean chains 2, error handling 1 (2 pts) (nesting depth added 17). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/sdk/src/client.ts"},"region":{"startLine":475}}}],"partialFingerprints":{"codehealthFindingId/v1":"0eb04877e27a7351b7a1a316a0083fe3e3873232298e16fabf598742dfe5fa57"}},{"ruleId":"D2","level":"warning","message":{"text":"process.acquirePidLock (cognitive 30): process.acquirePidLock has cognitive complexity 30 (threshold 15). Drivers by points: if/else 10 (22 pts), error handling 2 (4 pts), boolean chains 3, loops 1 (nesting depth added 14). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/src/process.ts"},"region":{"startLine":118}}}],"partialFingerprints":{"codehealthFindingId/v1":"8fb26beec07f906f453e53051a60cf005afb78e503e2604f94a607432e3dd116"}},{"ruleId":"D2","level":"warning","message":{"text":"exec_session.terminal_text (cognitive 30): exec_session.terminal_text has cognitive complexity 30 (threshold 15). Drivers by points: if/else 9 (25 pts), boolean chains 4, loops 1 (nesting depth added 16). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/exec_session.py"},"region":{"startLine":88}}}],"partialFingerprints":{"codehealthFindingId/v1":"6926f2ccbdca887b5410b7f049beea69aadd8adcd13e1aeb80c4d28984dc2731"}},{"ruleId":"D2","level":"warning","message":{"text":"Scheduler.resolveApproval (cognitive 29): Scheduler.resolveApproval has cognitive complexity 29 (threshold 15). Drivers by points: if/else 11, ternaries 10, boolean chains 7, loops 1. Most of this is not in the body itself: 13 of the 29 points are its own statements and the rest belongs to one function literal inside it that branches (line 728). The decisions are inside the literal, which nothing outside this body can call, review or test on its own, so splitting the enclosing body is not the move available here. To reduce it, lift the literal\u0027s work into a named function or method at the enclosing scope and have the literal call it, then reduce whichever part then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/scheduler.ts"},"region":{"startLine":696}}}],"partialFingerprints":{"codehealthFindingId/v1":"65d6f9a86bb299e4e8eb0d3538ceee1731364d89795f2aee3240d1e1674640f8"}},{"ruleId":"D2","level":"warning","message":{"text":"yaml.emit (cognitive 29): yaml.emit has cognitive complexity 29 (threshold 15). Drivers by points: if/else 10 (17 pts), ternaries 4 (7 pts), loops 2 (4 pts), boolean chains 1 (nesting depth added 12). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/yaml.ts"},"region":{"startLine":67}}}],"partialFingerprints":{"codehealthFindingId/v1":"ff6b8918803d77cefcfb1000692f136e46654017be5bf8dab96f0ea6a71673fd"}},{"ruleId":"D2","level":"warning","message":{"text":"DotSettings.Editor (cognitive 29): DotSettings.Editor has cognitive complexity 29 (threshold 15). Drivers by points: ternaries 11 (15 pts), if/else 8 (9 pts), boolean chains 4, error handling 1 (nesting depth added 5). Of this number, 17 points are the body\u0027s own statements and 12 belong to 8 function items inside it that branch. To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/dot-settings/DotSettings.tsx"},"region":{"startLine":43}}}],"partialFingerprints":{"codehealthFindingId/v1":"0cd69bc72a9e272c6ee3865b59edccf41e17d95f2949ae58f305d8d5d64b9c63"}},{"ruleId":"D2","level":"warning","message":{"text":"CronTool._add_job (cognitive 28): CronTool._add_job has cognitive complexity 28 (threshold 15). Drivers by points: if/else 14 (23 pts), boolean chains 3, error handling 1 (2 pts) (nesting depth added 10). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/cron.py"},"region":{"startLine":123}}}],"partialFingerprints":{"codehealthFindingId/v1":"a50cfe5304b5a85fec839f71bc4111544d04d657751aeec0a9a25e3cd1099aa2"}},{"ruleId":"D2","level":"warning","message":{"text":"ExecSessionTool._wait (cognitive 28): ExecSessionTool._wait has cognitive complexity 28 (threshold 15). Drivers by points: ternaries 5 (13 pts), if/else 4 (10 pts), boolean chains 4, loops 1 (nesting depth added 14). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/exec_session.py"},"region":{"startLine":671}}}],"partialFingerprints":{"codehealthFindingId/v1":"2ab05d2196853a9bfbb9d9b4581a610d4e2fe15acbb43e66d129d257a4d8c1ca"}},{"ruleId":"D2","level":"warning","message":{"text":"FindFilesTool.execute (cognitive 28): FindFilesTool.execute has cognitive complexity 28 (threshold 15). Drivers by points: if/else 12 (17 pts), ternaries 4 (6 pts), error handling 3, boolean chains 1, loops 1 (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/search.py"},"region":{"startLine":299}}}],"partialFingerprints":{"codehealthFindingId/v1":"2e1c1491fbc4b2a58b7dd91f29b62b106a83cab8c61ce33b0d64b4b5ba041222"}},{"ruleId":"D2","level":"warning","message":{"text":"OpenAICompatProvider._sanitize_messages (cognitive 28): OpenAICompatProvider._sanitize_messages has cognitive complexity 28 (threshold 15). Drivers by points: if/else 7 (22 pts), loops 2 (4 pts), boolean chains 2 (nesting depth added 17). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/openai_compat_provider.py"},"region":{"startLine":307}}}],"partialFingerprints":{"codehealthFindingId/v1":"656cdfe01f48ea5b2848e4fd7d34d1535bd4627058ccda39509e89e4d225ac6a"}},{"ruleId":"D2","level":"warning","message":{"text":"DotHeader.DotHeader (cognitive 27): DotHeader.DotHeader has cognitive complexity 27 (threshold 15). Drivers by points: ternaries 13 (22 pts), boolean chains 4, if/else 1 (nesting depth added 9). Of this number, 26 points are the body\u0027s own statements and 1 belongs to one function literal inside it that branches. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/dot/DotHeader.tsx"},"region":{"startLine":27}}}],"partialFingerprints":{"codehealthFindingId/v1":"9ef5e7542447ba30272f9d7f40a45a3ee6c8ce197b61d86e8a4fab639b9666ee"}},{"ruleId":"D2","level":"warning","message":{"text":"ContextGovernor.strip_malformed_tool_calls (cognitive 27): ContextGovernor.strip_malformed_tool_calls has cognitive complexity 27 (threshold 15). Drivers by points: if/else 12 (25 pts), boolean chains 1, loops 1 (nesting depth added 13). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/context_governance.py"},"region":{"startLine":714}}}],"partialFingerprints":{"codehealthFindingId/v1":"91216237f4abb90db89e78967c60ea425266632e811be821cf475f38fb2a441c"}},{"ruleId":"D2","level":"warning","message":{"text":"usage-tab.UsageTab (cognitive 26): usage-tab.UsageTab has cognitive complexity 26 (threshold 15). Drivers by points: ternaries 10 (18 pts), boolean chains 8 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/computer/usage-tab.tsx"},"region":{"startLine":84}}}],"partialFingerprints":{"codehealthFindingId/v1":"69983b9132756339052e7f64059d8729309e03a2220edecaf9835766ced11cea"}},{"ruleId":"D2","level":"warning","message":{"text":"helpers.estimate_message_tokens (cognitive 26): helpers.estimate_message_tokens has cognitive complexity 26 (threshold 15). Drivers by points: if/else 9 (15 pts), boolean chains 4, loops 2 (3 pts), ternaries 1 (3 pts), error handling 1 (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/utils/helpers.py"},"region":{"startLine":500}}}],"partialFingerprints":{"codehealthFindingId/v1":"a96ba62b4b4027fafe0e6ef963c0b9ac20784abd9bbd0c529a4799d7894ccae1"}},{"ruleId":"D2","level":"warning","message":{"text":"Consolidator.summarize (cognitive 25): Consolidator.summarize has cognitive complexity 25 (threshold 15). Drivers by points: if/else 8 (12 pts), loops 3 (6 pts), ternaries 1 (3 pts), boolean chains 2, error handling 1 (2 pts) (nesting depth added 10). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/memory.py"},"region":{"startLine":164}}}],"partialFingerprints":{"codehealthFindingId/v1":"12a750c0344359ea709d5ca134c65f93c76632be618057ae6b1c2a24cc70eb4b"}},{"ruleId":"D2","level":"warning","message":{"text":"ReadFileTool.execute (cognitive 25): ReadFileTool.execute has cognitive complexity 25 (threshold 15). Drivers by points: if/else 14 (17 pts), error handling 5 (6 pts), boolean chains 2 (nesting depth added 4). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/filesystem.py"},"region":{"startLine":129}}}],"partialFingerprints":{"codehealthFindingId/v1":"75f09789433d913dc63440fd79f9a95eeac62be840c1f6de6eaaf022083f04b7"}},{"ruleId":"D2","level":"warning","message":{"text":"Server.handleProc (cognitive 25): Server.handleProc has cognitive complexity 25 (threshold 15). Drivers by points: if/else 13 (18 pts), boolean chains 5, loops 2 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/dot-agentd/internal/agentd/proc.go"},"region":{"startLine":63}}}],"partialFingerprints":{"codehealthFindingId/v1":"228ee706ba02b402cdf4fbe4f1338f1f1370a6e7358dd75eabf3ad0e1dab7799"}},{"ruleId":"D2","level":"warning","message":{"text":"ActivityView.ActivityView (cognitive 24): ActivityView.ActivityView has cognitive complexity 24 (threshold 15). Drivers by points: ternaries 16 (22 pts), boolean chains 2 (nesting depth added 6). Of this number, 22 points are the body\u0027s own statements and 2 belong to 2 function literals inside it that branch. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/activity/ActivityView.tsx"},"region":{"startLine":24}}}],"partialFingerprints":{"codehealthFindingId/v1":"59e71f102e39f1e3c765ea83f9d141cb860cf202e31dc915f5900c02b1081b56"}},{"ruleId":"D2","level":"warning","message":{"text":"EventLog.stream (cognitive 24): EventLog.stream has cognitive complexity 24 (threshold 15). Drivers by points: if/else 9 (18 pts), loops 3 (6 pts) (nesting depth added 12). Of this number, 22 points are the body\u0027s own statements and 2 belong to one function literal inside it that branches. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/events/src/event-log.ts"},"region":{"startLine":169}}}],"partialFingerprints":{"codehealthFindingId/v1":"d02623a4559a73a958fc64bcd93a78a9c1066870da2ff1f24fc39d8ed7326a56"}},{"ruleId":"D2","level":"warning","message":{"text":"writer.buildTree (cognitive 24): writer.buildTree has cognitive complexity 24 (threshold 15). Drivers by points: if/else 7 (15 pts), ternaries 2 (6 pts), loops 2 (3 pts) (nesting depth added 13). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/iso/src/writer.ts"},"region":{"startLine":236}}}],"partialFingerprints":{"codehealthFindingId/v1":"925a198ff128a4d44ddee7101d5b6190bcaeb86d76cd46a905454b065a7afb40"}},{"ruleId":"D2","level":"warning","message":{"text":"VmManager.startLocked (cognitive 23): VmManager.startLocked has cognitive complexity 23 (threshold 15). Drivers by points: if/else 7 (13 pts), error handling 2 (4 pts), boolean chains 3, ternaries 1 (2 pts), loops 1 (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/vm-manager.ts"},"region":{"startLine":525}}}],"partialFingerprints":{"codehealthFindingId/v1":"a2f0259690165cfb0100ba6f1a56f821c820af9bc667221ef6bb796c9ccc8337"}},{"ruleId":"D2","level":"warning","message":{"text":"dot-live.applyLiveEvent (cognitive 23): dot-live.applyLiveEvent has cognitive complexity 23 (threshold 15). Drivers by points: ternaries 5 (10 pts), if/else 5 (9 pts), boolean chains 3, match/switch 1 (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/dot-live.ts"},"region":{"startLine":65}}}],"partialFingerprints":{"codehealthFindingId/v1":"8548404a1d1d475fad0a7fe3f9745456d6d3ed50fa3da2ea3ffdc49185ae01eb"}},{"ruleId":"D2","level":"warning","message":{"text":"approval-view.approvalBody (cognitive 23): approval-view.approvalBody has cognitive complexity 23 (threshold 15). Drivers by points: if/else 5 (10 pts), boolean chains 6, ternaries 3 (6 pts), match/switch 1 (nesting depth added 8). Of this number, 15 points are the body\u0027s own statements and 8 belong to one function literal inside it that branches. The drivers above price the dispatch low by construction \u2014 a dispatch is charged once however many cases it lists, while each branch inside an arm is charged in full \u2014 so most of this count is what the case bodies hold, and the arms are where it can be reduced. To reduce it, keep the dispatch but shrink the arms: move each non-trivial case body into its own named function (or onto the value being matched) so the dispatch reads one line per case, and group related cases into a sub-dispatch. Keep every case explicit, and make the behaviour for cases you do not list a deliberate choice rather than an accident."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/approval-view.ts"},"region":{"startLine":212}}}],"partialFingerprints":{"codehealthFindingId/v1":"b24050c22df9eae3d26004f0cfab08db08ff0bf1ee785a9f9a82ab082ba7b3e9"}},{"ruleId":"D2","level":"warning","message":{"text":"MCPPromptWrapper.execute (cognitive 23): MCPPromptWrapper.execute has cognitive complexity 23 (threshold 15). Drivers by points: if/else 5 (10 pts), error handling 4, loops 2 (4 pts), ternaries 2 (4 pts), boolean chains 1 (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/mcp.py"},"region":{"startLine":757}}}],"partialFingerprints":{"codehealthFindingId/v1":"908f16f8283c660d4bb5b56a9968319a2c9819960d27eb1e58fdcf93de2234f4"}},{"ruleId":"D2","level":"warning","message":{"text":"conversations.render (cognitive 23): conversations.render has cognitive complexity 23 (threshold 15). Drivers by points: if/else 6 (16 pts), ternaries 1 (4 pts), boolean chains 2, loops 1 (nesting depth added 13). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/conversations.py"},"region":{"startLine":114}}}],"partialFingerprints":{"codehealthFindingId/v1":"8366f51a7b4ad72a91e2649472f09f7d89cd68e47cf012cf90f58d33bbb4881c"}},{"ruleId":"D2","level":"warning","message":{"text":"images.image_size (cognitive 23): images.image_size has cognitive complexity 23 (threshold 15). Drivers by points: if/else 7 (18 pts), boolean chains 2, loops 1 (2 pts), error handling 1 (nesting depth added 12). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/images.py"},"region":{"startLine":51}}}],"partialFingerprints":{"codehealthFindingId/v1":"0ec1df6658537b75db98758146fddf45395934b84ed30b8a62e2506cb08df2ff"}},{"ruleId":"D2","level":"warning","message":{"text":"OpenAICompatProvider._extract_text_content (cognitive 23): OpenAICompatProvider._extract_text_content has cognitive complexity 23 (threshold 15). Drivers by points: if/else 8 (20 pts), loops 1 (2 pts), boolean chains 1 (nesting depth added 13). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/openai_compat_provider.py"},"region":{"startLine":446}}}],"partialFingerprints":{"codehealthFindingId/v1":"e335b1dddd24a44e29aafc38d4ec2dec2c1fd6fdec860f990de62456d4bde008"}},{"ruleId":"D2","level":"warning","message":{"text":"files-tab.FilesTab (cognitive 22): files-tab.FilesTab has cognitive complexity 22 (threshold 15). Drivers by points: ternaries 12 (15 pts), boolean chains 6, if/else 1 (nesting depth added 3). Of this number, 18 points are the body\u0027s own statements and 4 belong to 2 function items inside it that branch. To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/computer/files-tab.tsx"},"region":{"startLine":41}}}],"partialFingerprints":{"codehealthFindingId/v1":"4bc12b6170344b7c7a574527718cad06da053fcc8e611496e49b6945992a84cd"}},{"ruleId":"D2","level":"warning","message":{"text":"mcp-servers-panel.McpServersPanel (cognitive 22): mcp-servers-panel.McpServersPanel has cognitive complexity 22 (threshold 15). Drivers by points: ternaries 12 (17 pts), if/else 4, boolean chains 1 (nesting depth added 5). Of this number, 12 points are the body\u0027s own statements and 10 belong to 3 function items inside it that branch. To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/dot-settings/mcp-servers-panel.tsx"},"region":{"startLine":155}}}],"partialFingerprints":{"codehealthFindingId/v1":"bad6a98c111f76720629b8ca95d22e0828f38b6ff0dc83963ed3c3e4aaf3bdfa"}},{"ruleId":"D2","level":"warning","message":{"text":"NeedsYou.NeedsYou (cognitive 22): NeedsYou.NeedsYou has cognitive complexity 22 (threshold 15). Drivers by points: boolean chains 11, ternaries 11. Of this number, 18 points are the body\u0027s own statements and 4 belong to 3 function literals inside it that branch. To reduce it, name the conditions: bind each compound test to a well-named local or a small predicate function, so the body reads as a sequence of named decisions rather than a chain of operators."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/inbox/NeedsYou.tsx"},"region":{"startLine":127}}}],"partialFingerprints":{"codehealthFindingId/v1":"3d7b25cf5914a7e919f544acef702617d4956245ac52af730b8bc0979a6ad0ea"}},{"ruleId":"D2","level":"warning","message":{"text":"config.dotConfigSchema (cognitive 22): config.dotConfigSchema has cognitive complexity 22 (threshold 15). Drivers by points: if/else 4 (10 pts), ternaries 2 (6 pts), loops 3 (4 pts), boolean chains 2 (nesting depth added 11). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/src/config.ts"},"region":{"startLine":340}}}],"partialFingerprints":{"codehealthFindingId/v1":"02ae26ebbfff5e06cfabf63df3e63014ec8160a1604cd59bd11157edbd6f4eae"}},{"ruleId":"D2","level":"warning","message":{"text":"SseParser.feed (cognitive 22): SseParser.feed has cognitive complexity 22 (threshold 15). Drivers by points: if/else 9 (18 pts), boolean chains 3, loops 1 (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/src/sse.ts"},"region":{"startLine":29}}}],"partialFingerprints":{"codehealthFindingId/v1":"9f138ef4b24c061042f231c02ab16a1a0a7d77e67f2fefa8e0b12faf5a16e005"}},{"ruleId":"D2","level":"warning","message":{"text":"ContextGovernor.normalize_tool_result (cognitive 22): ContextGovernor.normalize_tool_result has cognitive complexity 22 (threshold 15). Drivers by points: if/else 8 (17 pts), loops 2 (4 pts), boolean chains 1 (nesting depth added 11). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/context_governance.py"},"region":{"startLine":574}}}],"partialFingerprints":{"codehealthFindingId/v1":"c23027e37ebda3e79c817ac96ec4cf5e9d0bb939f2381a3c095eacdf440ce2ea"}},{"ruleId":"D2","level":"warning","message":{"text":"transcript_outbox.record_transcript_append (cognitive 22): transcript_outbox.record_transcript_append has cognitive complexity 22 (threshold 15). Drivers by points: if/else 10 (13 pts), ternaries 3 (5 pts), boolean chains 4 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/transcript_outbox.py"},"region":{"startLine":101}}}],"partialFingerprints":{"codehealthFindingId/v1":"e8eafcb8b45141421424925e05c792a6331b391885765fd3614e5462b0a91b49"}},{"ruleId":"D2","level":"warning","message":{"text":"approval-card.ApprovalCard (cognitive 21): approval-card.ApprovalCard has cognitive complexity 21 (threshold 15). Drivers by points: ternaries 13 (19 pts), boolean chains 2 (nesting depth added 6). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/elements/approval-card.tsx"},"region":{"startLine":48}}}],"partialFingerprints":{"codehealthFindingId/v1":"2a68aa522278f4775d0fb9724d5911ab74b43a2baab6ad4400da6e19879ec922"}},{"ruleId":"D2","level":"warning","message":{"text":"MemoryUpdater._changed (cognitive 21): MemoryUpdater._changed has cognitive complexity 21 (threshold 15). Drivers by points: if/else 5 (12 pts), loops 3 (4 pts), boolean chains 3, ternaries 1 (2 pts) (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/memory_update.py"},"region":{"startLine":250}}}],"partialFingerprints":{"codehealthFindingId/v1":"eba1e2e300ff9ccb05204ec0474f5f6ca94273ac00eeaec929631f75165ebdcd"}},{"ruleId":"D2","level":"warning","message":{"text":"setup.prepareHost (cognitive 20): setup.prepareHost has cognitive complexity 20 (threshold 15). Drivers by points: if/else 8 (10 pts), ternaries 1 (4 pts), boolean chains 3, loops 1 (2 pts), error handling 1 (nesting depth added 6). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/setup/setup.ts"},"region":{"startLine":61}}}],"partialFingerprints":{"codehealthFindingId/v1":"a6c7aa42d19fc4119dd9495413c6ea2677b9c5c7de7ca5ebf851402927ce98b1"}},{"ruleId":"D2","level":"warning","message":{"text":"pairing-panel.PairingPanel (cognitive 20): pairing-panel.PairingPanel has cognitive complexity 20 (threshold 15). Drivers by points: ternaries 9 (15 pts), boolean chains 3, if/else 2 (nesting depth added 6). Of this number, 18 points are the body\u0027s own statements and 2 belong to 2 function items inside it that branch. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/channels/pairing-panel.tsx"},"region":{"startLine":22}}}],"partialFingerprints":{"codehealthFindingId/v1":"a930667f6b1559876c39cd60fb272947666b3b567ce80ab2a236f29eb00a7c9a"}},{"ruleId":"D2","level":"warning","message":{"text":"AgentRunner._drain_injections (cognitive 20): AgentRunner._drain_injections has cognitive complexity 20 (threshold 15). Drivers by points: if/else 7 (15 pts), ternaries 1 (2 pts), boolean chains 1, error handling 1, loops 1 (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/runner.py"},"region":{"startLine":202}}}],"partialFingerprints":{"codehealthFindingId/v1":"cc648077328298ed3e8dae1502b7929eb7dcf61ad66655deb2f482c2517af557"}},{"ruleId":"D2","level":"warning","message":{"text":"mcp._normalize_nullable_schema (cognitive 20): mcp._normalize_nullable_schema has cognitive complexity 20 (threshold 15). Drivers by points: if/else 9 (14 pts), ternaries 2 (4 pts), boolean chains 1, loops 1 (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/mcp.py"},"region":{"startLine":411}}}],"partialFingerprints":{"codehealthFindingId/v1":"d3c87521c1d4175bc82aae36c50f08d897a93cd4984b5a9c81755b19ed7fc86f"}},{"ruleId":"D2","level":"warning","message":{"text":"service._validate_schedule_for_add (cognitive 20): service._validate_schedule_for_add has cognitive complexity 20 (threshold 15). Drivers by points: if/else 7 (9 pts), boolean chains 6, error handling 2 (5 pts) (nesting depth added 5). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/cron/service.py"},"region":{"startLine":72}}}],"partialFingerprints":{"codehealthFindingId/v1":"3aebce165e7a550d7621c31f95e3082c0bcb5686df1bfc8be65e7c9a6660893f"}},{"ruleId":"D2","level":"warning","message":{"text":"helpers.sanitize_surrogates_deep (cognitive 20): helpers.sanitize_surrogates_deep has cognitive complexity 20 (threshold 15). Drivers by points: if/else 6 (10 pts), ternaries 3 (6 pts), loops 2 (4 pts) (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/utils/helpers.py"},"region":{"startLine":58}}}],"partialFingerprints":{"codehealthFindingId/v1":"27ca05f0bfedd60f355ed23ef4fd6532182f3314dfcd61bf9823cd7954f4b842"}},{"ruleId":"D2","level":"warning","message":{"text":"helpers.find_legal_message_start (cognitive 20): helpers.find_legal_message_start has cognitive complexity 20 (threshold 15). Drivers by points: if/else 3 (9 pts), loops 2 (4 pts), ternaries 1 (4 pts), boolean chains 3 (nesting depth added 11). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/utils/helpers.py"},"region":{"startLine":379}}}],"partialFingerprints":{"codehealthFindingId/v1":"614fcdcfd55ba78c78c84ba88a33167af7a5dc75c79a9da54a5560f2ce67d751"}},{"ruleId":"D2","level":"warning","message":{"text":"CronService._execute_job (cognitive 19): CronService._execute_job has cognitive complexity 19 (threshold 15). Drivers by points: if/else 7 (11 pts), boolean chains 4, error handling 3, ternaries 1 (nesting depth added 4). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/cron/service.py"},"region":{"startLine":494}}}],"partialFingerprints":{"codehealthFindingId/v1":"6b9f388011c9ccf5eec8576e992ffe8a9e124058eed313a07503410d8c0420c5"}},{"ruleId":"D2","level":"warning","message":{"text":"Engine._suspend_now (cognitive 19): Engine._suspend_now has cognitive complexity 19 (threshold 15). Drivers by points: if/else 7 (11 pts), boolean chains 3, loops 2 (3 pts), error handling 1, ternaries 1 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/engine.py"},"region":{"startLine":487}}}],"partialFingerprints":{"codehealthFindingId/v1":"b95e7a240dc8fdea8f9311e6d61c1e49a13c62690deccc0c43908d28d3d1aa80"}},{"ruleId":"D2","level":"warning","message":{"text":"gate.close_open_calls (cognitive 19): gate.close_open_calls has cognitive complexity 19 (threshold 15). Drivers by points: if/else 5 (9 pts), ternaries 3 (7 pts), boolean chains 2, loops 1 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/gate.py"},"region":{"startLine":180}}}],"partialFingerprints":{"codehealthFindingId/v1":"36cbe6de517c07a5d78e7a3e16aad597249ba6fccdaaa05e83c1dfe5e43ac6c8"}},{"ruleId":"D2","level":"warning","message":{"text":"LLMProvider._run_with_retry (cognitive 19): LLMProvider._run_with_retry has cognitive complexity 19 (threshold 15). Drivers by points: if/else 5 (13 pts), ternaries 2 (3 pts), boolean chains 2, loops 1 (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/base.py"},"region":{"startLine":1050}}}],"partialFingerprints":{"codehealthFindingId/v1":"09c5544df0a453c2108baac0a862413b56229db281c08e4a6a4f219fe8c9e128"}},{"ruleId":"D2","level":"warning","message":{"text":"main.serve (cognitive 19): main.serve has cognitive complexity 19 (threshold 15). Drivers by points: if/else 10 (14 pts), boolean chains 2, loops 2, match/switch 1 (nesting depth added 4). Of this number, 16 points are the body\u0027s own statements and 3 belong to one function literal inside it that branches. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/dot-agentd/cmd/dot-agentd/main.go"},"region":{"startLine":120}}}],"partialFingerprints":{"codehealthFindingId/v1":"9c21b999a9a9779b9b8bd1d3e94e9e7d9e4a35a4e78cebbfc8c3a027d1da72f1"}},{"ruleId":"D2","level":"warning","message":{"text":"agentd.resolveLinks (cognitive 19): agentd.resolveLinks has cognitive complexity 19 (threshold 15). Drivers by points: if/else 7 (18 pts), loops 1 (nesting depth added 11). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/dot-agentd/internal/agentd/files.go"},"region":{"startLine":102}}}],"partialFingerprints":{"codehealthFindingId/v1":"0553195d28e652267ab52a8e1cd02b221a980cde0bb4e1657e68623418368329"}},{"ruleId":"D2","level":"warning","message":{"text":"FakeGuest.events (cognitive 18): FakeGuest.events has cognitive complexity 18 (threshold 15). Drivers by points: if/else 6 (14 pts), boolean chains 3, loops 1 (nesting depth added 8). Of this number, 16 points are the body\u0027s own statements and 2 belong to one function literal inside it that branches. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/testing.ts"},"region":{"startLine":634}}}],"partialFingerprints":{"codehealthFindingId/v1":"60edb8656c37176ebe2e7630d68188ebfe1c033452a24178876dfcd8a7c3fce5"}},{"ruleId":"D2","level":"warning","message":{"text":"SkillsView.Skills (cognitive 18): SkillsView.Skills has cognitive complexity 18 (threshold 15). Drivers by points: ternaries 8 (15 pts), boolean chains 2, if/else 1 (nesting depth added 7). Of this number, 11 points are the body\u0027s own statements and 7 belong to one function literal inside it that branches. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/skills/SkillsView.tsx"},"region":{"startLine":37}}}],"partialFingerprints":{"codehealthFindingId/v1":"121559436b099969e6b2317686e9500f218578e84ab03194a894214f1e958e2e"}},{"ruleId":"D2","level":"warning","message":{"text":"History.History (cognitive 18): History.History has cognitive complexity 18 (threshold 15). Drivers by points: ternaries 9 (15 pts), boolean chains 3 (nesting depth added 6). Of this number, 14 points are the body\u0027s own statements and 4 belong to one function literal inside it that branches. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/inbox/History.tsx"},"region":{"startLine":36}}}],"partialFingerprints":{"codehealthFindingId/v1":"ecee517416ef5e8152fc5e5477caf3f2bb789f6e7b5c8c249cfd1d648d41e1b7"}},{"ruleId":"D2","level":"warning","message":{"text":"NewDotPage.NewDotPage (cognitive 18): NewDotPage.NewDotPage has cognitive complexity 18 (threshold 15). Drivers by points: ternaries 12 (13 pts), if/else 3, boolean chains 2 (nesting depth added 1). Of this number, 11 points are the body\u0027s own statements and 7 belong to 5 function items inside it that branch. To reduce it, split the body: this score is breadth rather than depth \u2014 many checks laid out side by side rather than nested inside one another, so inverting conditions into early returns has nothing left to flatten. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/new-dot/NewDotPage.tsx"},"region":{"startLine":24}}}],"partialFingerprints":{"codehealthFindingId/v1":"6571fcb5a29f0c22a52c22466cbb3702c4a0c5b64e8884b2e28402c207a2a8eb"}},{"ruleId":"D2","level":"warning","message":{"text":"BindingRunner.#supervise (cognitive 18): BindingRunner.#supervise has cognitive complexity 18 (threshold 15). Drivers by points: if/else 6 (15 pts), error handling 1 (2 pts), loops 1 (nesting depth added 10). Of this number, 16 points are the body\u0027s own statements and 2 belong to one function literal inside it that branches. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/runner.ts"},"region":{"startLine":140}}}],"partialFingerprints":{"codehealthFindingId/v1":"4fa2315e38ebecc35ff477c6eb7116ca4ec07b65d050e0cebc3a8255b5cf6b9d"}},{"ruleId":"D2","level":"warning","message":{"text":"BrowserManager.launch (cognitive 18): BrowserManager.launch has cognitive complexity 18 (threshold 15). Drivers by points: if/else 5 (11 pts), boolean chains 2, error handling 1 (2 pts), ternaries 1 (2 pts), loops 1 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/browser.py"},"region":{"startLine":338}}}],"partialFingerprints":{"codehealthFindingId/v1":"66762c25249937f78a90e11f7063822eb847a2a7919fefd5fa535e5d1eb8d8fe"}},{"ruleId":"D2","level":"warning","message":{"text":"transcript_outbox._record_tool_result (cognitive 18): transcript_outbox._record_tool_result has cognitive complexity 18 (threshold 15). Drivers by points: boolean chains 7, ternaries 6, if/else 5. To reduce it, split the body: this score is breadth rather than depth \u2014 many checks laid out side by side rather than nested inside one another, so inverting conditions into early returns has nothing left to flatten. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/transcript_outbox.py"},"region":{"startLine":154}}}],"partialFingerprints":{"codehealthFindingId/v1":"bea3ef66e62717a46a1c2e91812646668510fd7cbba729c14d52d05f42ab28b5"}},{"ruleId":"D2","level":"warning","message":{"text":"LLMProvider._strip_image_content (cognitive 18): LLMProvider._strip_image_content has cognitive complexity 18 (threshold 15). Drivers by points: if/else 4 (8 pts), ternaries 2 (5 pts), loops 2 (4 pts), boolean chains 1 (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/base.py"},"region":{"startLine":855}}}],"partialFingerprints":{"codehealthFindingId/v1":"7949e8115fd4713185d340daba223d3b820da55182ccdae294e31200e2bce164"}},{"ruleId":"D2","level":"warning","message":{"text":"OpenAICompatProvider._extract_error_metadata (cognitive 18): OpenAICompatProvider._extract_error_metadata has cognitive complexity 18 (threshold 15). Drivers by points: if/else 7 (11 pts), boolean chains 3, error handling 1 (3 pts), ternaries 1 (nesting depth added 6). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/openai_compat_provider.py"},"region":{"startLine":781}}}],"partialFingerprints":{"codehealthFindingId/v1":"f1f57ca948f3340e7f1fcdc31be1b853081d287ccd55f0a22fd22cbeeff940b0"}},{"ruleId":"D2","level":"warning","message":{"text":"openai_compat_provider._extract_tc_extras (cognitive 18): openai_compat_provider._extract_tc_extras has cognitive complexity 18 (threshold 15). Drivers by points: if/else 8 (16 pts), boolean chains 2 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/openai_compat_provider.py"},"region":{"startLine":97}}}],"partialFingerprints":{"codehealthFindingId/v1":"0312ff2e66aa4194ce471575284ca302ab20dba20eb0c50c865f89f127822f42"}},{"ruleId":"D2","level":"warning","message":{"text":"web.startWebServer (cognitive 17): web.startWebServer has cognitive complexity 17 (threshold 15). Drivers by points: if/else 9 (13 pts), boolean chains 2, error handling 1, loops 1 (nesting depth added 4). Of this number, 14 points are the body\u0027s own statements and 3 belong to 2 function items inside it that branch. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/web.ts"},"region":{"startLine":106}}}],"partialFingerprints":{"codehealthFindingId/v1":"eef3affde4a243f31cb32a5d0f12447c588df89b80aca5c433a34a454dee6e67"}},{"ruleId":"D2","level":"warning","message":{"text":"Lifecycle.#pump (cognitive 17): Lifecycle.#pump has cognitive complexity 17 (threshold 15). Drivers by points: if/else 5 (12 pts), loops 2 (3 pts), error handling 1 (2 pts) (nesting depth added 9). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/lifecycle.ts"},"region":{"startLine":697}}}],"partialFingerprints":{"codehealthFindingId/v1":"d47f70601313eecd959d14dcad430eebf2075aee0a80d52f9c8dca5e28e969d8"}},{"ruleId":"D2","level":"warning","message":{"text":"story.Body (cognitive 17): story.Body has cognitive complexity 17 (threshold 15). Drivers by points: ternaries 7 (14 pts), boolean chains 2, match/switch 1 (nesting depth added 7). The drivers above price the dispatch low by construction \u2014 a dispatch is charged once however many cases it lists, while each branch inside an arm is charged in full \u2014 so most of this count is what the case bodies hold, and the arms are where it can be reduced. To reduce it, keep the dispatch but shrink the arms: move each non-trivial case body into its own named function (or onto the value being matched) so the dispatch reads one line per case, and group related cases into a sub-dispatch. Keep every case explicit, and make the behaviour for cases you do not list a deliberate choice rather than an accident."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/tasks/story.tsx"},"region":{"startLine":28}}}],"partialFingerprints":{"codehealthFindingId/v1":"811a4b6d25d69067908d6f180995f3208fe4974d9f353fe7a24dd0e89a347990"}},{"ruleId":"D2","level":"warning","message":{"text":"TasksView.Sections (cognitive 17): TasksView.Sections has cognitive complexity 17 (threshold 15). Drivers by points: ternaries 9 (14 pts), boolean chains 3 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/tasks/TasksView.tsx"},"region":{"startLine":43}}}],"partialFingerprints":{"codehealthFindingId/v1":"9f87d0b7798a3ee94a5d84ef62e2ffe603a9a38e1888946f72c39cb216b32c7f"}},{"ruleId":"D2","level":"warning","message":{"text":"ContextGovernor.strip_placeholder_assistant_messages (cognitive 17): ContextGovernor.strip_placeholder_assistant_messages has cognitive complexity 17 (threshold 15). Drivers by points: if/else 6 (13 pts), ternaries 1 (2 pts), boolean chains 1, loops 1 (nesting depth added 8). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/context_governance.py"},"region":{"startLine":676}}}],"partialFingerprints":{"codehealthFindingId/v1":"231306e45ec3cc467aa3bdb096207ec36885162863b2375506eb61754d7aa0f4"}},{"ruleId":"D2","level":"warning","message":{"text":"_ExecSession.poll (cognitive 17): _ExecSession.poll has cognitive complexity 17 (threshold 15). Drivers by points: if/else 10 (13 pts), boolean chains 3, ternaries 1 (nesting depth added 3). To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition, and where an else follows a branch that already returns, drop the trailing else and let the rest of the body continue at one level."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/exec_session.py"},"region":{"startLine":277}}}],"partialFingerprints":{"codehealthFindingId/v1":"5cabdbc9409546e933006dbd3abf490ae6444e16912c8b4d14a9dc25fe0f6c74"}},{"ruleId":"D2","level":"warning","message":{"text":"FindFilesTool._walk (cognitive 17): FindFilesTool._walk has cognitive complexity 17 (threshold 15). Drivers by points: if/else 6 (8 pts), ternaries 2 (4 pts), boolean chains 3, loops 2 (nesting depth added 4). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/search.py"},"region":{"startLine":368}}}],"partialFingerprints":{"codehealthFindingId/v1":"7bbe0b59c498e2bf7dcab5588d7d708809999bdfbe5b87851ea6fe609a14e4f1"}},{"ruleId":"D2","level":"warning","message":{"text":"memory_update._pieces (cognitive 17): memory_update._pieces has cognitive complexity 17 (threshold 15). Drivers by points: if/else 4 (6 pts), loops 3 (6 pts), ternaries 2 (4 pts), boolean chains 1 (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/memory_update.py"},"region":{"startLine":86}}}],"partialFingerprints":{"codehealthFindingId/v1":"0f48ffc0c6b2524921345b4216ba48920a695929ab74c798e06d2fd763a9ea05"}},{"ruleId":"D2","level":"warning","message":{"text":"McpSecrets.set (cognitive 17): McpSecrets.set has cognitive complexity 17 (threshold 15). Drivers by points: if/else 5 (11 pts), boolean chains 3, loops 2 (3 pts) (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/secrets.py"},"region":{"startLine":92}}}],"partialFingerprints":{"codehealthFindingId/v1":"b8d6f0fbf0612c4ab10eb7f0f8b47b20f7ac8b8f3d7b2a63acf18aeae93aa1c1"}},{"ruleId":"D2","level":"warning","message":{"text":"Scheduler.setOpenRouterKey (cognitive 16): Scheduler.setOpenRouterKey has cognitive complexity 16 (threshold 15). Drivers by points: if/else 5 (8 pts), boolean chains 3, error handling 1 (2 pts), loops 2, ternaries 1 (nesting depth added 4). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/scheduler.ts"},"region":{"startLine":855}}}],"partialFingerprints":{"codehealthFindingId/v1":"cee87a65c4cdf349261cd1b57648994824f9f6f0e799b298ece0f037eace07cb"}},{"ruleId":"D2","level":"warning","message":{"text":"approval-view.schedulePhrase (cognitive 16): approval-view.schedulePhrase has cognitive complexity 16 (threshold 15). Drivers by points: if/else 5 (8 pts), ternaries 4 (7 pts), boolean chains 1 (nesting depth added 6). Of this number, 14 points are the body\u0027s own statements and 2 belong to one function item inside it that branches. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/approval-view.ts"},"region":{"startLine":135}}}],"partialFingerprints":{"codehealthFindingId/v1":"41d492e761ba8cdb9e588b8213f3f6c43ddcf29ba18bc5914ff9744c0f704efd"}},{"ruleId":"D2","level":"warning","message":{"text":"HomePage.HomePage (cognitive 16): HomePage.HomePage has cognitive complexity 16 (threshold 15). Drivers by points: ternaries 9 (11 pts), boolean chains 5 (nesting depth added 2). Of this number, 15 points are the body\u0027s own statements and 1 belongs to one function literal inside it that branches. To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/home/HomePage.tsx"},"region":{"startLine":20}}}],"partialFingerprints":{"codehealthFindingId/v1":"4333ee69548a10703a42ce033b4e7788e077b9a17389f1ca73c7c00a6f4a7d1e"}},{"ruleId":"D2","level":"warning","message":{"text":"ChannelHub.#inbound (cognitive 16): ChannelHub.#inbound has cognitive complexity 16 (threshold 15). Drivers by points: if/else 10 (12 pts), boolean chains 2, error handling 1, ternaries 1 (nesting depth added 2). Of this number, 12 points are the body\u0027s own statements and 4 belong to one function literal inside it that branches. To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/hub.ts"},"region":{"startLine":501}}}],"partialFingerprints":{"codehealthFindingId/v1":"95389b7e5d92a5d56418ffcd121d877772c3998ec0581af637e3f7c87f31e1d2"}},{"ruleId":"D2","level":"warning","message":{"text":"MemoryUpdater._run (cognitive 16): MemoryUpdater._run has cognitive complexity 16 (threshold 15). Drivers by points: if/else 7 (12 pts), boolean chains 2, loops 1, ternaries 1 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/memory_update.py"},"region":{"startLine":174}}}],"partialFingerprints":{"codehealthFindingId/v1":"e11e750a116e5220dcf984841ec6628058e15a89ee7f6f2b2c386881bcbb55a2"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: cli.run: FunctionTooLong \u2014 run runs 331 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 231 over it, 3.31\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/cli.ts"},"region":{"startLine":350}}}],"partialFingerprints":{"codehealthFindingId/v1":"f5824bc5a99369b2599085b11ca95ac3afe8914fee90c07b3691dbb26be437e2"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: server.buildServer: FunctionTooLong \u2014 buildServer runs 256 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 156 over it, 2.56\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/api/src/server.ts"},"region":{"startLine":101}}}],"partialFingerprints":{"codehealthFindingId/v1":"b71e5b21a7cee43fa9209ed6a4c0681ef690a47fa82667b12b506f0991c34177"}},{"ruleId":"D3","level":"warning","message":{"text":"TooManyMethods: InvisibleDotsClient: TooManyMethods \u2014 56 methods. The bar is 30 methods; this is 26 over it, 1.87\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/sdk/src/client.ts"},"region":{"startLine":97}}}],"partialFingerprints":{"codehealthFindingId/v1":"9433fc2d218cf9cbb2cb0e90a528b90e7b56c82ce41f91fbb85c6599c259dcfd"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: tools/mcp.py: FileTooLong \u2014 884 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 384 over it, 1.77\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/mcp.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"a877cba6301ecc25eeda2c75b2db3df007187663685f55f4330ec5608b007011"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: providers/base.py: FileTooLong \u2014 840 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 340 over it, 1.68\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/base.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"34ca4afd71daea10518560880d0cecec4645e3d2b989e0368ced4576fbf63d8e"}},{"ruleId":"D3","level":"warning","message":{"text":"TooManyMethods: Scheduler: TooManyMethods \u2014 50 methods. The bar is 30 methods; this is 20 over it, 1.67\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/scheduler.ts"},"region":{"startLine":95}}}],"partialFingerprints":{"codehealthFindingId/v1":"67bcc040665fa532b877fa2a3137856b68c79b22944b1ddde226300ad3cf1df0"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: agent/runner.py: FileTooLong \u2014 758 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 258 over it, 1.52\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/runner.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"c33b7b090b2249216c9fc639529415b7f28061da35775678255d95f29e6e31e9"}},{"ruleId":"D3","level":"warning","message":{"text":"TooManyMethods: Lifecycle: TooManyMethods \u2014 44 methods. The bar is 30 methods; this is 14 over it, 1.47\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/lifecycle.ts"},"region":{"startLine":109}}}],"partialFingerprints":{"codehealthFindingId/v1":"21e6872c21f7e53136f696e5bcf76bd2167f14d896adec1b1f0ddaa593c2e641"}},{"ruleId":"D3","level":"warning","message":{"text":"TooManyMethods: BrowserManager: TooManyMethods \u2014 42 methods. The bar is 30 methods; this is 12 over it, 1.40\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/browser.py"},"region":{"startLine":186}}}],"partialFingerprints":{"codehealthFindingId/v1":"ac30a74c3fa4e1446e515d5596960f2e9fab385c3092f6dc15745f50c136e21c"}},{"ruleId":"D3","level":"warning","message":{"text":"TooManyMethods: FakeGuest: TooManyMethods \u2014 42 methods. The bar is 30 methods; this is 12 over it, 1.40\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/testing.ts"},"region":{"startLine":155}}}],"partialFingerprints":{"codehealthFindingId/v1":"485dd673cd9e9c98737579b24e19cc3b3079b5f2be7d516901fe20aca676b78f"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: providers/openai_compat_provider.py: FileTooLong \u2014 694 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 194 over it, 1.39\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/openai_compat_provider.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"4ff07058af47d0e747daba2fae6bf96539271b29236398fa5a1aef69b551c196"}},{"ruleId":"D3","level":"warning","message":{"text":"TooManyMethods: VmManager: TooManyMethods \u2014 41 methods. The bar is 30 methods; this is 11 over it, 1.37\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/vm-manager.ts"},"region":{"startLine":236}}}],"partialFingerprints":{"codehealthFindingId/v1":"337a21e0348b9ed5011b23e25a2c3d4451996967ec2f3a311614144ea042739e"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: tools/filesystem.py: FileTooLong \u2014 676 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 176 over it, 1.35\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/filesystem.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"fb67b71f0af6474919f51e04500481103c836e349d3c4409a2fdd8374935aace"}},{"ruleId":"D3","level":"warning","message":{"text":"TooManyMethods: Engine: TooManyMethods \u2014 40 methods. The bar is 30 methods; this is 10 over it, 1.33\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/engine.py"},"region":{"startLine":176}}}],"partialFingerprints":{"codehealthFindingId/v1":"816c0698c7edb4ee5fbc4755dc594607409f3463dd0f753e1d0d0352cdac98b8"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: agent/context_governance.py: FileTooLong \u2014 634 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 134 over it, 1.27\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/context_governance.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"6714d977b86ddcaac87a177b01770d8b11174165dea3c2a9d4bceb4264842084"}},{"ruleId":"D3","level":"warning","message":{"text":"ClassTooLong: Scheduler: ClassTooLong \u2014 502 significant lines (blank, comment-only and punctuation-only lines excluded), 50 methods. The bar is 400 significant lines; this is 102 over it, 1.26\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/scheduler.ts"},"region":{"startLine":95}}}],"partialFingerprints":{"codehealthFindingId/v1":"79483c3b321615a2d01aa6d089e85605d57b66f9a5d7512c48b53247fe46d994"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: tools/exec_session.py: FileTooLong \u2014 620 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 120 over it, 1.24\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/exec_session.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"546b30b5fc41b1830add32f11c3ebc05f37179afecfb9923b4a44be0d34e1adb"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: DotSettings.Editor: FunctionTooLong \u2014 Editor runs 123 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 23 over it, 1.23\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/dot-settings/DotSettings.tsx"},"region":{"startLine":43}}}],"partialFingerprints":{"codehealthFindingId/v1":"3e2f693d998b029bc1dce7adaf37e4432c5e93f0e4138077d1f5343f7b69bb36"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: dots/store.py: FileTooLong \u2014 590 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 90 over it, 1.18\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/store.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"2f5ecffa4550a150b3df6ec205123ec82f7e8dfbfe9f108b06998d89799fb714"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: dots/engine.py: FileTooLong \u2014 587 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 87 over it, 1.17\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/engine.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"1ec852e82a55ac19b760d66556a8584995496e0747ec1c1aceff2f4448e2df09"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: src/scheduler.ts: FileTooLong \u2014 581 significant lines (blank, comment-only and punctuation-only lines excluded), about 86% of them inside a single declaration: Scheduler (95-922). The bar is 500 significant lines; this is 81 over it, 1.16\u00D7 the bar. Moving the declarations that sit BESIDE it into sibling files will not shorten this file. Extract from INSIDE that declaration instead: lift each cohesive group of its body \u2014 the parts that share the same inputs and are named together \u2014 into its own unit in a sibling file, and have the original call them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/scheduler.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"52d9fbe704e970b35e790985be3edb7990fbcb61ff67050d0a52e038fb78f376"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: src/testing.ts: FileTooLong \u2014 576 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 76 over it, 1.15\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/testing.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"11e69cd97d2a04d3e28d884645df99bbc7fa57d4e54c7f0258245588798bbe22"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: src/cli.ts: FileTooLong \u2014 573 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 73 over it, 1.15\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/cli.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"470002d03391724d78be00926910fbd5a3e8b87512ebde3bb4f9aa7139fad092"}},{"ruleId":"D3","level":"warning","message":{"text":"ClassTooLong: Lifecycle: ClassTooLong \u2014 451 significant lines (blank, comment-only and punctuation-only lines excluded), 44 methods. The bar is 400 significant lines; this is 51 over it, 1.13\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/lifecycle.ts"},"region":{"startLine":109}}}],"partialFingerprints":{"codehealthFindingId/v1":"042d3eb4684471a4c68917b84dafe10bcbf55c56dd5dc53d7861c2893d965aac"}},{"ruleId":"D3","level":"warning","message":{"text":"TooManyMethods: GuestClient: TooManyMethods \u2014 33 methods. The bar is 30 methods; this is 3 over it, 1.10\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/guest-client.ts"},"region":{"startLine":123}}}],"partialFingerprints":{"codehealthFindingId/v1":"295e840f4f2dec778bf5601407483566881675d7aacdf263087609993784d6cc"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: chat-data.useChat: FunctionTooLong \u2014 useChat runs 107 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 7 over it, 1.07\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/chat/chat-data.tsx"},"region":{"startLine":40}}}],"partialFingerprints":{"codehealthFindingId/v1":"86154fca76ff17299721c357c8e45d87340446f1d11bdff2a1d24eabd84fe41e"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: dots/browser.py: FileTooLong \u2014 533 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 33 over it, 1.07\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/browser.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"d569493fcb6a15638005d7258b8d1f7db5cccb73802311648b2fa255913336dd"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: NeedsYou.NeedsYou: FunctionTooLong \u2014 NeedsYou runs 106 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 6 over it, 1.06\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/inbox/NeedsYou.tsx"},"region":{"startLine":127}}}],"partialFingerprints":{"codehealthFindingId/v1":"a1b3acbcf1ed97f2a504e9677e87a0488d4dafee193ec9a74f0dddf9125e04c3"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: qr-connect.QrConnect: FunctionTooLong \u2014 QrConnect runs 105 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 5 over it, 1.05\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/channels/qr-connect.tsx"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"b30da7eec9c2c22cdd6d0477571705a0c1ba78aa43cce3f750173d7ab42b2477"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: tools/search.py: FileTooLong \u2014 524 significant lines (blank, comment-only and punctuation-only lines excluded). The bar is 500 significant lines; this is 24 over it, 1.05\u00D7 the bar. To reduce it, split the file along the responsibilities already in it: move each cohesive group of declarations into its own sibling file in the same module or package, so no one file has to be read whole to change one of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/search.py"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"10d55c5c9fb252f0353a7110399201b65932232644eaf3610079eed4074df0c2"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: src/vm-manager.ts: FileTooLong \u2014 517 significant lines (blank, comment-only and punctuation-only lines excluded), about 74% of them inside a single declaration: VmManager (236-863). The bar is 500 significant lines; this is 17 over it, 1.03\u00D7 the bar. Moving the declarations that sit BESIDE it into sibling files will not shorten this file. Extract from INSIDE that declaration instead: lift each cohesive group of its body \u2014 the parts that share the same inputs and are named together \u2014 into its own unit in a sibling file, and have the original call them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/vm-manager.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"2a1304c226f07b64b2087b552eb4ec6b84243423a395c4e65790fe8acfc38cfc"}},{"ruleId":"D3","level":"warning","message":{"text":"TooManyMethods: ChannelHub: TooManyMethods \u2014 31 methods. The bar is 30 methods; this is 1 over it, 1.03\u00D7 the bar. To reduce it, group the members that share the same data into a smaller type of their own and delegate to it, so no single type carries every responsibility."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/hub.ts"},"region":{"startLine":104}}}],"partialFingerprints":{"codehealthFindingId/v1":"302276d05e122585a6422fa6dd1567dbd3322e47eee0b41e25a3c830e5ec747f"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: src/lifecycle.ts: FileTooLong \u2014 509 significant lines (blank, comment-only and punctuation-only lines excluded), about 89% of them inside a single declaration: Lifecycle (109-878). The bar is 500 significant lines; this is 9 over it, 1.02\u00D7 the bar. Moving the declarations that sit BESIDE it into sibling files will not shorten this file. Extract from INSIDE that declaration instead: lift each cohesive group of its body \u2014 the parts that share the same inputs and are named together \u2014 into its own unit in a sibling file, and have the original call them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/lifecycle.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"43979d64776997bc77214de44e5bcaa0c2d70b876634e4e94b3e6646a068bcab"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 2): invisible_engine_dots/nanobot/agent/tools/filesystem.py:382-397 | invisible_engine_dots/nanobot/agent/tools/filesystem.py:455-470 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/filesystem.py"},"region":{"startLine":382}}}],"partialFingerprints":{"codehealthFindingId/v1":"adbe0f26cdfd415dcdd40c185b084e6ec8ed95e74f4196cf12fd81323e20664a"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13\u201314 lines \u00D7 2): invisible_engine_dots/nanobot/agent/runner.py:563-575 | invisible_engine_dots/nanobot/agent/runner.py:584-597 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. Read the line range as the matched WINDOW rather than a finished unit: at \u0060invisible_engine_dots/nanobot/agent/runner.py:584\u0060 it begins part-way through the construct above it, so those exact lines cannot be lifted as they stand \u2014 widen the region to the smallest complete statement or declaration that contains it, and extract that. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/runner.py"},"region":{"startLine":563}}}],"partialFingerprints":{"codehealthFindingId/v1":"12797a50f79e46b940f888d3e79e74d777fd3ac4ea98546f8ec0cda27e6c45fd"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2): invisible_engine_dots/nanobot/agent/context.py:101-113 | invisible_engine_dots/nanobot/agent/context_governance.py:225-237 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from both call sites, so a change lands once."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/context.py"},"region":{"startLine":101}}}],"partialFingerprints":{"codehealthFindingId/v1":"f55b370698f3c3e6ac22dc9de3e521e9d9778b2c75600362e4eb48b944ec8682"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (10 lines \u00D7 2): invisible_engine_dots/nanobot/agent/tools/mcp.py:687-696 | invisible_engine_dots/nanobot/agent/tools/mcp.py:785-794 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/mcp.py"},"region":{"startLine":687}}}],"partialFingerprints":{"codehealthFindingId/v1":"258636743ed86d56793af5a03159bf38311af9e71d4ecb910d335f238ceb6550"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2): invisible_engine_dots/nanobot/dots/browser.py:542-547 | invisible_engine_dots/nanobot/dots/browser.py:551-556 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/browser.py"},"region":{"startLine":542}}}],"partialFingerprints":{"codehealthFindingId/v1":"1c4b64c8204b1a6ac41ad8da443e9fb6a0819f61d31d5f421d1a28eed9d19cd2"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2): invisible_engine_dots/nanobot/utils/helpers.py:446-450 | invisible_engine_dots/nanobot/utils/helpers.py:504-508 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/utils/helpers.py"},"region":{"startLine":446}}}],"partialFingerprints":{"codehealthFindingId/v1":"4bf531a787920097af79c7095e809a1a3208d3be0979d75f95fd8d4c6e14cfb3"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2): guest/dot-agentd/internal/agentd/exec.go:89-101 | guest/dot-agentd/internal/agentd/proc.go:102-114 \u2014 the copies sit in sibling files of one directory, so a shared home is within easy reach: extract the block into a single shared function the call sites can all reach \u2014 a file they already depend on, or a new one alongside them \u2014 and call it from both call sites, so a change lands once. The matched lines also transfer control out of the body holding them, which cannot survive a move into a called unit unchanged: have the extracted unit return that decision and let each site act on it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/dot-agentd/internal/agentd/exec.go"},"region":{"startLine":89}}}],"partialFingerprints":{"codehealthFindingId/v1":"767deacc77e45980f668f66d1df5584298f8b881bbd3d75ba694ffef5b8b56c2"}},{"ruleId":"D4","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 2): guest/dot-agentd/internal/agentd/files.go:297-307 | guest/dot-agentd/internal/agentd/files.go:334-344 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited. The matched lines also register a scope-exit action (a \u0060defer\u0060-style statement) that runs when the function holding them returns: moved into a called unit it would run when THAT unit returns instead \u2014 before the caller uses what it releases \u2014 so keep the registration at the call site and extract only the work around it, or have the extracted unit hand the resource back for the caller to register."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/dot-agentd/internal/agentd/files.go"},"region":{"startLine":297}}}],"partialFingerprints":{"codehealthFindingId/v1":"7bd3bdb762052343bf5ca894bb7ae8cb5b203d1330c5fa05932638bd2d0cbd0b"}},{"ruleId":"D5","level":"warning","message":{"text":"Unstable project @invisible-dots/api: @invisible-dots/api has instability 0.89 with 1 dependents."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"b81ab43bf5a6bd9a9a0a52eee7b30cb09d16ec7942bd71c903bd2848ce32f7ee"}},{"ruleId":"D8","level":"warning","message":{"text":"Coverage not measured \u2014 JavaScript/TypeScript suite: Coverage NOT MEASURED: the JavaScript/TypeScript half could not be measured \u2014 the repository root runs vitest but declares no coverage provider, so the suite can run and still produce no lcov \u2014 add \u0060@vitest/coverage-v8\u0060 (or \u0060@vitest/coverage-istanbul\u0060) as a devDependency. Coverage is excluded from the score rather than counted as a near-zero. The named suite step is one the repository\u0027s maintainers can perform; once it passes, the real number is measured on the next scan. Alternatively, commit the lcov/Cobertura report your CI produces and it is read without a re-run."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"62e63e619c28f057e129f2997c965d32a457366a9ce18ca019ffb6bdfba85c99"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: starts a VM that stopped by itself at once when a run is due, by the same rule as the idle sleep: This method\u0027s body runs code, and no assertion call was recognised in it. Recognised by name: Assert*, *Should*/ShouldBe*, Verify, Expect, Throws, Record, Received/DidNotReceive, MustHaveHappened/MustNotHaveHappened, EnsureSuccessStatusCode and *AndEnsure* \u2014 so verification routed through a helper of your own naming, through a base-class or callback object whose members hold the assertions, or through a harness that fails by throwing under some other name, is not visible to this check and is not counted here. Read it as \u0027no assertion this check knows how to see\u0027, and if that is right, add one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/test/scheduler.test.ts"},"region":{"startLine":712}}}],"partialFingerprints":{"codehealthFindingId/v1":"daa8eddb73e6c353fa77a8050ac498941f1fe1767ec3e84511d06af24aa4dfc8"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: a VM that powers itself off with a task in progress is started again: This method\u0027s body runs code, and no assertion call was recognised in it. Recognised by name: Assert*, *Should*/ShouldBe*, Verify, Expect, Throws, Record, Received/DidNotReceive, MustHaveHappened/MustNotHaveHappened, EnsureSuccessStatusCode and *AndEnsure* \u2014 so verification routed through a helper of your own naming, through a base-class or callback object whose members hold the assertions, or through a harness that fails by throwing under some other name, is not visible to this check and is not counted here. Read it as \u0027no assertion this check knows how to see\u0027, and if that is right, add one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/test/delivery.test.ts"},"region":{"startLine":365}}}],"partialFingerprints":{"codehealthFindingId/v1":"4b60d4f574906e525a90a2ea033c92a47b21d214bc10a110a9f3b133e5fee04e"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: are what the schemas take: a parsed event is the type the code reads: This method\u0027s body runs code, and no assertion call was recognised in it. Recognised by name: Assert*, *Should*/ShouldBe*, Verify, Expect, Throws, Record, Received/DidNotReceive, MustHaveHappened/MustNotHaveHappened, EnsureSuccessStatusCode and *AndEnsure* \u2014 so verification routed through a helper of your own naming, through a base-class or callback object whose members hold the assertions, or through a harness that fails by throwing under some other name, is not visible to this check and is not counted here. Read it as \u0027no assertion this check knows how to see\u0027, and if that is right, add one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/test/events.test.ts"},"region":{"startLine":38}}}],"partialFingerprints":{"codehealthFindingId/v1":"5eb32c0bb2df8f2c55cecde9c3e88b8d89830e2660b32347dcd4ee310db3d590"}},{"ruleId":"D10","level":"warning","message":{"text":"Fixed-sleep synchronisation: claims a task whose Dot\u0027s row another transaction held for a moment, without waiting for the timer: This test starts work it did not wait for (\u0060holder\u0060, still running when the sleep starts) and then orders itself against it with \u0060new Promise((resolve) =\u003E setTimeout(resolve, 100))\u0060 \u2014 a fixed wait, not a signal that the work is done. Whether it passes depends on how loaded the machine is, which is why a test written this way is green on a developer\u0027s box and random in CI. Wait for the event itself instead: the process\u0027s own exit or output, a completion handle, or a condition polled to a timeout."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/test/scheduler.test.ts"},"region":{"startLine":73}}}],"partialFingerprints":{"codehealthFindingId/v1":"b0c94138e0ed2a42eb9d6b90523bc0917cea09abcdda8e7b0887c5d078c88907"}},{"ruleId":"D10","level":"warning","message":{"text":"Fixed-sleep synchronisation: approve with always: a flush that runs between the commit and the push does not send the answer ahead of the config: This test starts work it did not wait for (\u0060answered\u0060, still running when the sleep starts) and then orders itself against it with \u0060new Promise((resolve) =\u003E setTimeout(resolve, 150))\u0060 \u2014 a fixed wait, not a signal that the work is done. Whether it passes depends on how loaded the machine is, which is why a test written this way is green on a developer\u0027s box and random in CI. Wait for the event itself instead: the process\u0027s own exit or output, a completion handle, or a condition polled to a timeout."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/test/scheduler.test.ts"},"region":{"startLine":356}}}],"partialFingerprints":{"codehealthFindingId/v1":"e6ff1d9b3743d4b0d5a5fbedb09be101c24fdfe2b429fe428cff98d6ad5f323a"}},{"ruleId":"D10","level":"warning","message":{"text":"Fixed-sleep synchronisation: ends when its signal aborts, even while it waits for a frame, and keeps the other watchers going: This test starts work it did not wait for (\u0060first\u0060, still running when the sleep starts) and then orders itself against it with \u0060new Promise((resolve) =\u003E setTimeout(resolve, 10))\u0060 \u2014 a fixed wait, not a signal that the work is done. Whether it passes depends on how loaded the machine is, which is why a test written this way is green on a developer\u0027s box and random in CI. Wait for the event itself instead: the process\u0027s own exit or output, a completion handle, or a condition polled to a timeout."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/test/units.test.ts"},"region":{"startLine":128}}}],"partialFingerprints":{"codehealthFindingId/v1":"39edf4a41d37ca11276002e6bf0c2eeb5df41a18579d8921d01c5475b948756b"}},{"ruleId":"D10","level":"warning","message":{"text":"Fixed-sleep synchronisation: event ids become visible in id order: an insert waits for a transaction that drew a lower id: This test starts work it did not wait for (\u0060slow\u0060, still running when the sleep starts) and then orders itself against it with \u0060new Promise((resolve) =\u003E setTimeout(resolve, 5))\u0060 \u2014 a fixed wait, not a signal that the work is done. Whether it passes depends on how loaded the machine is, which is why a test written this way is green on a developer\u0027s box and random in CI. Wait for the event itself instead: the process\u0027s own exit or output, a completion handle, or a condition polled to a timeout."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/database/test/repositories.test.ts"},"region":{"startLine":602}}}],"partialFingerprints":{"codehealthFindingId/v1":"1726f13f60d4ba6fc8a013c0db8ed6e28b5575bd2e9dca4836ac773a114974ac"}},{"ruleId":"D10","level":"warning","message":{"text":"Fixed-sleep synchronisation: pglite: transactions run one at a time, so a claim never meets a competitor: This test starts work it did not wait for (\u0060first\u0060, still running when the sleep starts) and then orders itself against it with \u0060new Promise((r) =\u003E setTimeout(r, 100))\u0060 \u2014 a fixed wait, not a signal that the work is done. Whether it passes depends on how loaded the machine is, which is why a test written this way is green on a developer\u0027s box and random in CI. Wait for the event itself instead: the process\u0027s own exit or output, a completion handle, or a condition polled to a timeout."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/database/test/adapters.test.ts"},"region":{"startLine":227}}}],"partialFingerprints":{"codehealthFindingId/v1":"3f1888ba60fb0f26658ae79c83b7d9509247874fd46e06af6e361c18447f3dd8"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/web/test/support/control-plane.ts: apps/web/test/support/control-plane.ts changed 26 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 188 in #answer at line 279. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/web/test/support/control-plane.ts\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/test/support/control-plane.ts"},"region":{"startLine":279}}}],"partialFingerprints":{"codehealthFindingId/v1":"5ff0b063d1d07add94a623e61c544a91dadd6ff37e88e836f4e0b1b26deec822"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/cli/src/cli.ts: apps/cli/src/cli.ts changed 21 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 131 in cli.run at line 350. 1 of those changes was a fix/bug commit, and the other 20 changed it for other reasons \u2014 this file is under both repair and feature pressure. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/cli/src/cli.ts\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/cli.ts"},"region":{"startLine":350}}}],"partialFingerprints":{"codehealthFindingId/v1":"c1e9bee2fe3883eb68ee81eb2f0e0bac4cea5cb05eea48eae169c6689f0f4662"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/api/src/server.ts: apps/api/src/server.ts changed 26 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 52 in server.buildServer at line 101. 1 of those changes was a fix/bug commit, and the other 25 changed it for other reasons \u2014 this file is under both repair and feature pressure. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/api/src/server.ts\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/api/src/server.ts"},"region":{"startLine":101}}}],"partialFingerprints":{"codehealthFindingId/v1":"d00468d755dccd81f0672b4591d86faaa6dbfc31e45b85d03922f9e827b103fb"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/scheduler/src/scheduler.ts: apps/scheduler/src/scheduler.ts changed 31 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 30 in Scheduler.resolveApproval at line 696. 1 of those changes was a fix/bug commit, and the other 30 changed it for other reasons \u2014 this file is under both repair and feature pressure. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/scheduler/src/scheduler.ts\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/scheduler.ts"},"region":{"startLine":696}}}],"partialFingerprints":{"codehealthFindingId/v1":"06c7519567fe6b1cf01af0dcc74e20ee4d41dbe4b96278e7de8be966873e7e9d"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: invisible_engine_dots/nanobot/dots/server.py: invisible_engine_dots/nanobot/dots/server.py changed 14 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 41 in AgentServer._handle at line 250. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- invisible_engine_dots/nanobot/dots/server.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/server.py"},"region":{"startLine":250}}}],"partialFingerprints":{"codehealthFindingId/v1":"92132b613255c315d0d09c1506d527a81c527de9e6e121e012b4c2aceaeecd37"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: packages/sdk/src/client.ts: packages/sdk/src/client.ts changed 22 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 16 in InvisibleDotsClient.stream at line 475. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- packages/sdk/src/client.ts\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/sdk/src/client.ts"},"region":{"startLine":475}}}],"partialFingerprints":{"codehealthFindingId/v1":"9684b2c68a9163eaa9d540cef9298422153f94d118b1185a39438eba4f2d78be"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: invisible_engine_dots/nanobot/agent/runner.py: invisible_engine_dots/nanobot/agent/runner.py changed 7 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 34 in AgentRunner._run_core at line 298. 1 of those changes was a fix/bug commit, and the other 6 changed it for other reasons \u2014 this file is under both repair and feature pressure. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- invisible_engine_dots/nanobot/agent/runner.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/runner.py"},"region":{"startLine":298}}}],"partialFingerprints":{"codehealthFindingId/v1":"b8a613ec29aaf91afd8bd7c54d18820a4833d4f05b70e402edd3ae57c8beed6f"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: packages/channels/src/hub.ts: packages/channels/src/hub.ts changed 14 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 16 in ChannelHub.#inbound at line 501. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- packages/channels/src/hub.ts\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/hub.ts"},"region":{"startLine":501}}}],"partialFingerprints":{"codehealthFindingId/v1":"dc0798fb24cb17af9ee96d8839391358bc9bab0574c2c0a8e5d2406793786cc1"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/scheduler/src/lifecycle.ts: apps/scheduler/src/lifecycle.ts changed 14 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 15 in Lifecycle.recover at line 807. 1 of those changes was a fix/bug commit, and the other 13 changed it for other reasons \u2014 this file is under both repair and feature pressure. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/scheduler/src/lifecycle.ts\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/lifecycle.ts"},"region":{"startLine":807}}}],"partialFingerprints":{"codehealthFindingId/v1":"69d62f2fa622db5d9ff2fe843c344471bf31a92de12adf853938eb09ac539d57"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/vm-manager/src/guest-client.ts: apps/vm-manager/src/guest-client.ts changed 13 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 16 in GuestClient.sendRaw at line 189. 1 of those changes was a fix/bug commit, and the other 12 changed it for other reasons \u2014 this file is under both repair and feature pressure. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/vm-manager/src/guest-client.ts\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/guest-client.ts"},"region":{"startLine":189}}}],"partialFingerprints":{"codehealthFindingId/v1":"4450a9f1aead2a944f13ead896f15411ff3da114bfa96fb0654dd8fe9de36cf6"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: invisible_engine_dots/nanobot/dots/engine.py: invisible_engine_dots/nanobot/dots/engine.py changed 13 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 15 in Engine._suspend_now at line 487. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- invisible_engine_dots/nanobot/dots/engine.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/engine.py"},"region":{"startLine":487}}}],"partialFingerprints":{"codehealthFindingId/v1":"e4b2f28da97f97d3565d8571a2cd604a839937183fe106cc22c14931700c4c3d"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/web/src/components/dot/DotHeader.tsx: apps/web/src/components/dot/DotHeader.tsx changed 10 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 19 in DotHeader.DotHeader at line 27. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/web/src/components/dot/DotHeader.tsx\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/dot/DotHeader.tsx"},"region":{"startLine":27}}}],"partialFingerprints":{"codehealthFindingId/v1":"e36a9278dc2f8bb2ae21ffa29e84c4c383b74f59c69608ecf44cadb0bffb5540"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: invisible_engine_dots/nanobot/dots/transcript_outbox.py: invisible_engine_dots/nanobot/dots/transcript_outbox.py changed 7 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 19 in transcript_outbox._record_tool_result at line 154. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- invisible_engine_dots/nanobot/dots/transcript_outbox.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/transcript_outbox.py"},"region":{"startLine":154}}}],"partialFingerprints":{"codehealthFindingId/v1":"d09f46eff5beb348e0fa06e8d6f45465234dbfbb327160e1a316d53120c26a85"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: invisible_engine_dots/nanobot/agent/tools/search.py: invisible_engine_dots/nanobot/agent/tools/search.py changed 3 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 44 in GrepTool.execute at line 524. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- invisible_engine_dots/nanobot/agent/tools/search.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/search.py"},"region":{"startLine":524}}}],"partialFingerprints":{"codehealthFindingId/v1":"f70dd7347610f7f1ec45bd577bee189d56c7af91ea5cd263089d2aedebc71282"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: invisible_engine_dots/nanobot/providers/openai_compat_provider.py: invisible_engine_dots/nanobot/providers/openai_compat_provider.py changed 8 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 15 in OpenAICompatProvider.model_limits at line 847. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- invisible_engine_dots/nanobot/providers/openai_compat_provider.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/openai_compat_provider.py"},"region":{"startLine":847}}}],"partialFingerprints":{"codehealthFindingId/v1":"4aad7d1097fe757c15563d8276bc0c31bb97dbd5d847fe148136cdd9660bf698"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/web/src/components/computer/usage-tab.tsx: apps/web/src/components/computer/usage-tab.tsx changed 6 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 19 in usage-tab.UsageTab at line 84. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/web/src/components/computer/usage-tab.tsx\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/computer/usage-tab.tsx"},"region":{"startLine":84}}}],"partialFingerprints":{"codehealthFindingId/v1":"89b3d5167bc3df5aef921a8de478ceb6e6311566cae7415e09bc2300f48e4d3f"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/vm-manager/src/vm-manager.ts: apps/vm-manager/src/vm-manager.ts changed 7 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 16 in VmManager.startLocked at line 525. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/vm-manager/src/vm-manager.ts\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/vm-manager.ts"},"region":{"startLine":525}}}],"partialFingerprints":{"codehealthFindingId/v1":"926d0e87919d2c58333be892a024e992a440a5829485cba042efc4bbcb80ca9c"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/web/src/components/inbox/NeedsYou.tsx: apps/web/src/components/inbox/NeedsYou.tsx changed 4 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 28 in NeedsYou.NeedsYou at line 127. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/web/src/components/inbox/NeedsYou.tsx\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/inbox/NeedsYou.tsx"},"region":{"startLine":127}}}],"partialFingerprints":{"codehealthFindingId/v1":"793d96837304d3289dac20b8fcc3be8185accf731922a56a063e2fd540163290"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/web/src/components/tasks/task-drawer.tsx: apps/web/src/components/tasks/task-drawer.tsx changed 4 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 27 in task-drawer.TaskDrawer at line 41. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/web/src/components/tasks/task-drawer.tsx\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/tasks/task-drawer.tsx"},"region":{"startLine":41}}}],"partialFingerprints":{"codehealthFindingId/v1":"ef23f4210a710c8ffcff744f2a1ae75ed97a932bf43407a0d0b4cfd02dfcca5f"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: packages/channels/src/telegram/fake-bot-api.ts: packages/channels/src/telegram/fake-bot-api.ts changed 3 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 33 in FakeBotApi.#handle at line 317. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- packages/channels/src/telegram/fake-bot-api.ts\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/telegram/fake-bot-api.ts"},"region":{"startLine":317}}}],"partialFingerprints":{"codehealthFindingId/v1":"2ca0917632f931ff055de5668e05b64129474000bf2a41d6090f0eb1bd91cbc4"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/web/src/components/dot-settings/DotSettings.tsx: apps/web/src/components/dot-settings/DotSettings.tsx changed 4 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 24 in DotSettings.Editor at line 43. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/web/src/components/dot-settings/DotSettings.tsx\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/dot-settings/DotSettings.tsx"},"region":{"startLine":43}}}],"partialFingerprints":{"codehealthFindingId/v1":"2d3fadc01adf84e43ce5f53b23f7e388b59560b2ae7791585e4329b3ea2cc68e"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/scheduler/src/guest-events.ts: apps/scheduler/src/guest-events.ts changed 5 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 18 in guest-events.applyGuestEvent at line 92. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/scheduler/src/guest-events.ts\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/guest-events.ts"},"region":{"startLine":92}}}],"partialFingerprints":{"codehealthFindingId/v1":"481881f55d9287c35edc8b3c7cf62b9aabb2bfbccf864c363b6b2660322418e7"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: invisible_engine_dots/nanobot/agent/memory.py: invisible_engine_dots/nanobot/agent/memory.py changed 5 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 16 in Consolidator.summarize at line 164. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- invisible_engine_dots/nanobot/agent/memory.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/memory.py"},"region":{"startLine":164}}}],"partialFingerprints":{"codehealthFindingId/v1":"e449abcfe22d52926d80a883cd9bbad1e8f202f2045939fbc35e09ae72e4f27a"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/web/src/components/tasks/story.tsx: apps/web/src/components/tasks/story.tsx changed 4 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 18 in story.Body at line 28. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/web/src/components/tasks/story.tsx\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/tasks/story.tsx"},"region":{"startLine":28}}}],"partialFingerprints":{"codehealthFindingId/v1":"186eecc0daadff781c9210c98a03e437304c550070ac055f9de1a1a664dcd35f"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/api/test/guest-http.ts: apps/api/test/guest-http.ts changed 2 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 34 in (anonymous) at line 48. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/api/test/guest-http.ts\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/api/test/guest-http.ts"},"region":{"startLine":48}}}],"partialFingerprints":{"codehealthFindingId/v1":"1e2982392e604cdf109e87a42a8b23f648a686c37ce6bd0a97da289f0def9b11"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: guest/dot-agentd/cmd/dot-agentd/main.go: guest/dot-agentd/cmd/dot-agentd/main.go changed 4 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 17 in main.serve at line 120. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- guest/dot-agentd/cmd/dot-agentd/main.go\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/dot-agentd/cmd/dot-agentd/main.go"},"region":{"startLine":120}}}],"partialFingerprints":{"codehealthFindingId/v1":"5f2c5886d2d77d3084b55871312c87a24aade7e47504021c5d54e2096a9b22ed"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: invisible_engine_dots/nanobot/agent/tools/exec_session.py: invisible_engine_dots/nanobot/agent/tools/exec_session.py changed 4 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 15 in _ExecSession.poll at line 277. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- invisible_engine_dots/nanobot/agent/tools/exec_session.py\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/exec_session.py"},"region":{"startLine":277}}}],"partialFingerprints":{"codehealthFindingId/v1":"f4dd8d7b5a5548754cf76487374ebd35779aebbb8aefdc4170bc680a06612209"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/web/src/components/home/HomePage.tsx: apps/web/src/components/home/HomePage.tsx changed 4 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 15 in HomePage.HomePage at line 20. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/web/src/components/home/HomePage.tsx\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/home/HomePage.tsx"},"region":{"startLine":20}}}],"partialFingerprints":{"codehealthFindingId/v1":"91dc152651f5d241ed2a7122d47fa6d05e9d98e4c71ec7c70af5071d34762d29"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/cli/src/setup/setup.ts: apps/cli/src/setup/setup.ts changed 4 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 15 in setup.prepareHost at line 61. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/cli/src/setup/setup.ts\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/setup/setup.ts"},"region":{"startLine":61}}}],"partialFingerprints":{"codehealthFindingId/v1":"98d94e234d98c523c3684c0f31420bbebf0b011656a8a28abe4e2fda3330edd0"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/web/src/components/computer/file-preview.tsx: apps/web/src/components/computer/file-preview.tsx changed 3 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 19 in file-preview.FilePreview at line 33. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/web/src/components/computer/file-preview.tsx\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/computer/file-preview.tsx"},"region":{"startLine":33}}}],"partialFingerprints":{"codehealthFindingId/v1":"db8e9e18a98d77f4e6bdb2da72718d8c67ddcbb632b2837461217f52e3c55bda"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/cli/src/web.ts: apps/cli/src/web.ts changed 3 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 16 in web.startWebServer at line 106. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/cli/src/web.ts\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/web.ts"},"region":{"startLine":106}}}],"partialFingerprints":{"codehealthFindingId/v1":"fc838b36d6967a28e9e0dd6bb66f9c3c27f1af437568f286db8d4c60e5a888f7"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/web/src/lib/dot-live.ts: apps/web/src/lib/dot-live.ts changed 2 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 24 in dot-live.applyLiveEvent at line 65. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/web/src/lib/dot-live.ts\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/dot-live.ts"},"region":{"startLine":65}}}],"partialFingerprints":{"codehealthFindingId/v1":"89abd88871e76e8016ab1d6e535a189b292e91414e42034b33d9fab43f4701a5"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/web/src/components/dot-settings/mcp-servers-panel.tsx: apps/web/src/components/dot-settings/mcp-servers-panel.tsx changed 2 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 18 in mcp-servers-panel.McpServersPanel at line 155. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/web/src/components/dot-settings/mcp-servers-panel.tsx\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/dot-settings/mcp-servers-panel.tsx"},"region":{"startLine":155}}}],"partialFingerprints":{"codehealthFindingId/v1":"9b464fba4e59780feaa6e2702303fff08fa39d29ce0be72a88452ac6952c4b7a"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: apps/web/src/components/new-dot/NewDotPage.tsx: apps/web/src/components/new-dot/NewDotPage.tsx changed 2 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 17 in NewDotPage.NewDotPage at line 24. Frequent change and high complexity in one file compound: schedule the next change to it to include carving out the part being edited, with the area under test before it moves. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 18:38:56 -07:00\u0027 --until=\u00272026-10-14 18:38:56 -07:00\u0027 --full-history --no-merges -- apps/web/src/components/new-dot/NewDotPage.tsx\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/new-dot/NewDotPage.tsx"},"region":{"startLine":24}}}],"partialFingerprints":{"codehealthFindingId/v1":"febab09b7e1fd39559ba043a07734223ae280e0316c30f661064029397063b08"}},{"ruleId":"D19","level":"note","message":{"text":"Documentation: contradicts the code: The architecture document describes QEMU 8.2 (Ubuntu 24.04\u0027s qemu-system-x86, 8.2.2) running the argv of section 3.4 as it is with KVM but the host uses Node 24 and Go 1.25\u002B. Verify that QEMU 8.2 still runs the same command line on both hosts."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/architecture.md"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"1fad52492943942904f958181d412d37d94b29ae369117827ff2b7e121a89ec2"}},{"ruleId":"D20","level":"note","message":{"text":"No ADRs found: No ADRs found. No recognised ADR directory (\u0060docs/adr/\u0060, \u0060docs/decisions/\u0060, \u0060adr/\u0060, \u0060docs/rfcs/\u0060, an \u0060ADR0001/\u0060 folder, or their siblings) exists anywhere in this tree. What was searched, so you can tell an empty log from a search that missed one: every directory under the tree (build output, dependencies and VCS metadata excepted), for a document that is either any non-index page inside a recognised ADR directory, whatever its name and however deeply nested (\u0060docs/adr/use-postgres.md\u0060, \u0060docs/adr/2024/0001-x.md\u0060); or a file anywhere whose name is ADR-shaped (\u00600001-use-postgres.md\u0060, \u0060adr-012-caching.md\u0060); or, when neither turned anything up, a document carrying the decision-record signature (an \u0022Architecture Decision Record\u0022 heading, or Status / Context / Decision / Consequences as section headings). A decision log that clears none of these \u2014 unnumbered files outside any recognised directory, without those headings \u2014 is not seen by this check and this row is then wrong. If that is your case, say so rather than renaming anything; otherwise, consider recording architectural decisions in \u0060docs/adr/\u0060."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"d2bea044ff79d7d275f5a91a6e2f548586178eaf480274c33960ad020c854631"}},{"ruleId":"D22","level":"warning","message":{"text":"Duplicate method names with identical signatures and likely identical intent. \u0027prepare_messages_for_model\u0027 and \u0027prepare_for_model\u0027 are semantically redundant.: Remove one of the methods (likely \u0027prepare_for_model\u0027 if it\u0027s the older/shorter alias, or \u0027prepare_messages_for_model\u0027 if it\u0027s the explicit one) and keep the other. (signatures: ContextGovernor.prepare_messages_for_model(self, config: ContextGovernanceConfig, messages: list[dict[str, Any]]): list[dict[str, Any]] | ContextGovernor.prepare_for_model(self, config: ContextGovernanceConfig, messages: list[dict[str, Any]]): list[dict[str, Any]])"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"98041443a4be8cc78479f8303d785f750945ea7a2e8ed7f543d1b2066f921f54"}},{"ruleId":"D22","level":"warning","message":{"text":"Inconsistent parameter naming for directory paths. ExecTool uses both \u0027working_dir\u0027 and \u0027workdir\u0027 as potential parameters (or accepts either), while ExecSessionTool does not expose directory parameters in its execute signature (likely inheriting from session context). However, within ExecTool, having both \u0027working_dir\u0027 and \u0027workdir\u0027 suggests an aliasing inconsistency or redundant parameter support.: Standardize on \u0027working_dir\u0027 and remove \u0027workdir\u0027 from the signature, or explicitly document that \u0027workdir\u0027 is a deprecated alias. (signatures: ExecTool.execute(self, command: str | list[str] | None, cmd: str | None, working_dir: str | None, workdir: str | None, ...) | ExecSessionTool.execute(self, session_id: str, input: str | None, close_stdin: bool, terminate: bool, ...))"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"4ee539f451cde309e4c0aaa62993f6336fc4d966e42fe2385fa029099fa422aa"}},{"ruleId":"D22","level":"warning","message":{"text":"While \u0027get\u0027 and \u0027has\u0027 are distinct operations (one returns the object, one returns a boolean), the presence of \u0027has\u0027 often indicates a lack of Pythonic \u0027in\u0027 operator support or redundancy if \u0027get\u0027 is used for existence checks. However, this is a minor style issue. A more significant inconsistency is found in the Tool base class vs specific tools.: Ensure ToolRegistry supports \u0027in\u0027 operator (e.g., \u0060if tool in registry\u0060) to make \u0027has\u0027 redundant, or remove \u0027has\u0027 if \u0027get\u0027 is sufficient for existence checks. (signatures: ToolRegistry.get(self, name: str): Tool | None | ToolRegistry.has(self, name: str): bool)"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"99b05e3d43cc46e6bd8afbdcbfd425c8298aa55fa573193242ab733bb8ee3087"}},{"ruleId":"D22","level":"warning","message":{"text":"Inconsistent error representation in hook contexts. AgentHookContext only stores the error as a string, while AgentRunHookContext stores both the error string and the original exception object. This creates an inconsistency in the information available to hooks depending on which context they receive.: Standardize AgentHookContext to also include the original exception object (or a unified error wrapper) to provide consistent debugging information across all hook stages. (signatures: AgentHookContext.error: str | None | AgentRunHookContext.error: str | None | AgentRunHookContext.exception: BaseException | None)"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"2178ca6ce0b925acb7ec61f0366dea26807dd32e237989cf442435bce3597304"}},{"ruleId":"D26","level":"note","message":{"text":"Split apps/web: A 12k-LoC web project with 39 namespaces is large and sprawls across unrelated components like chat/computer/tasks/ui. Suggested: "},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"044bfb30d5aa8cca8fc1771d3bda43621eb7c2ca6db21eeaa268521d091a4a11"}},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"eae6eb376a6779d105c0415c83f3248469da2cb1d1c0995815193ece54648d75"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3f1ba068a7fa9d82a3a78f0e2923302cfbd76e7c9f834ad5ee406cadcd428516"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"951cfdd64d1a80aecec5431e91e863089539e3022dcdb2831297da5f37361a2f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9335766d9da623acc31779941537bfdfcb00049963996c42890ae405a5ac2415"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"dbc5dd0a8ca440e9b393e90e16acd6fe8e30dc6f6ee09e3f997ae37893a89c4e"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5d20f7026d96dff87c0a5ec8a5880d244c1ff97e25de946511a7f44e3751b656"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"cad9b8550170bdf220c5c02faf53ec4300e16232218479ca60d5d9f1eed8dd8a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1c9a7e753aa93c7de9f62e6f98c7df0729542a00ea16ba7f2ac7a03c896e9759"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c71bc63859c427b5f68580967c02c400ab4e29e08e06757c03d03a3a6ea4ae32"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"253b0303194b87421f47d2902e5e8328d645602727e9d0233aca4757fe595e0b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"29b52813d437f1517227b445585db55709d6308d0c5c4c74395d5729b1b8f361"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7ad8b4b27b9cdef25e88be169cd8890a48c74f4785cab37700e842cd6c81958f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"483a792fde9f5bc62ea8e05395519ff168c8b36ce22a0f9c87ca5ca18db45982"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"80407eb5fb632b1d11bef4bed50102e34915a8778a2873a345147675d2b2cec4"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1c0df4c71899266cd939df462601017f7dc10dbed552bed4f9e433119525ca98"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7d83de13a339882257383a83bef81e84655333212fec266f745dc90d759b3cda"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"66e609e0afc9688703af44d52675c6848c719b5d07dc395d98ef784e1fdf85b3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5fb42601f8ae93ff55ff9ea4432a5a7863ebdbf42ec00373a0fc6d32bb416400"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6b419f87f0d2ab3a9646f9b49a807486f0fc3efb1d32f856d8b5ffdd6b031443"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d14ea15cd9f144918eb8e593366e484b9e6d8c30f58db5595875cb6282d6b34c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fd9676fc14853b5e6c8eef130b327fb7052675c5adeadd10e7b0c16dfcf80f02"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8ec3503e480386cd9c25c59019995d77307ca763530581b6eab2abeff611128c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d45e9b7e50620f8dadc26c58a729f3dedd1aa99ae4dfba1f6ea75b162fac1aa7"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"636605aaa5a9ddc70beb6bbcd2321f02b83a4d912879c2d89c71dd5c70eebee9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"30437bf4ec951a56485af00fc53f232eaca9823354f3702d3ea10136e8dc1c94"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"28357cdad7e4c8bc3945ba6a6187b4b2239d83d456a63af6b002e86b72721ee3"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ce26d077e59e6adffa7e8694ef69ce213f1a5b4c0cb15b77c3149f406ef3e333"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"34a4be1c03dd0359d6a547b8cd7f9b530e5c88d734793c2d8a90a7528e1e44b4"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d11d1954b0b7c40f2da6b2fb4970b7b9a5e5183255c3bafe21b1b5b21025627f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5180fbc97e052284a4ab85db32474efd6e3de5e3591a530cd255bb2ac5a036f2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"40bd14f79316a06cf9bd36cde9ee06a97ce6391a7df8dd0921a52abd18ef6ae7"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8af93b54d7b6d09176d9c9016e65470b9e3497c2e30cd6af0b8b0a89230292a4"},"taxa":[{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c6c2fed82517e1063d49c0feaa2c6890a05a71122c218c1b324a56ba16c6e045"},"taxa":[{"id":"CWE-22","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-73","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A01:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3e85d34371baba0e2060e4817e5df6f713ce3967d73db52617174a9c927406aa"},"taxa":[{"id":"CWE-522","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-552","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1565883df75385a1b207f5259f3dbab918cdee06070ebc6950ed5da06d6b66ca"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"432b900335a48f14d7498a017f1b1067b3ebb179868f6fc55eddc388d0b49e28"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e765b66fd87cad9347b68e0a8124a1ccf0f2233386cc0c98da445de6a197f01b"},"taxa":[{"id":"CWE-79","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A05:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b45b25e1f26f6b8ce7317976fe207119987b122fa741e3dfae2e40c27aaee241"},"taxa":[{"id":"CWE-79","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A05:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3fc4b0920225476d4ed5ac349325542873d73a5432efb13bcf32cfcd1e1ccb15"},"taxa":[{"id":"CWE-319","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A04:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5e746c795751e40f46e07b3c11e2286ec5638ea0c030757871bd5c7c329a7ff9"},"taxa":[{"id":"CWE-319","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A04:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e2b0125fa2276efa3cfcdce049b955e612a8699732829223abc6d8cf1644749e"},"taxa":[{"id":"CWE-319","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A04:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a6f14ad2208878e3b7aa7f201d8e49112975810fbe549353a63f93200e5c1cb2"},"taxa":[{"id":"CWE-319","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A04:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8bc5c1211761695322d039292b72540932813bbdd3b3e49490ae01be4a3c18b5"},"taxa":[{"id":"CWE-319","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A04:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6246cf821f2e8e55ed706381b3d7aa3ac5c38ca56f9985ef54d1d67c1e3f5292"},"taxa":[{"id":"CWE-1333","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A02:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4abdbe61050db663572131706b8f7e334e2e9694ad9c362fcfa732961e48fcf5"},"taxa":[{"id":"CWE-276","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A01:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"12a94fee5ef1834f947ca108ee5c9b4d169bcadab7d027fae4cde5ecc8fac35f"},"taxa":[{"id":"CWE-327","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A04:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"47c1024e9cc5602c66413fdab5d2826f2c523196d427c60f9d9298eee842ec82"},"taxa":[{"id":"CWE-116","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A05:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6744db26e3733a36286cf40928f2753fecb11c9f22797d279e50e79b4c4d68cc"},"taxa":[{"id":"CWE-310","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A04:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f3b707d58bcbd94c2b2e66a554091725eeb4acefcb422ecbdf1c50ed718fb2c2"},"taxa":[{"id":"CWE-242","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"24118ae460e76499fad09bc18a9f4dda494363a2c030cd1da69de2c7a6b4ba1d"},"taxa":[{"id":"CWE-242","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"37c58437b5941a21c51cd0b367e80d54b981f96a796456821d3de9b2fb9aee53"},"taxa":[{"id":"CWE-242","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3a71e296661a307bd627e6bddca9b35f1e8c604de50a0519b51743e235f6c860"},"taxa":[{"id":"CWE-242","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2f8a7524359db3f24db23df17cfc33d7cff457b364a9d855fa5ab23e538547b3"},"taxa":[{"id":"CWE-242","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2309ecae31909553a7b579dd398548086d2e5c698e4f985610e071c35bd5f3e7"},"taxa":[{"id":"CWE-242","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7fb466af9145088fbdf9a17e63c7319f790482fe85717e3e6da1d83f77365eb7"},"taxa":[{"id":"CWE-242","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"14affd71fbdac0e088a333e157f51894f5da696c41f7d17c693a72c7cc056853"},"taxa":[{"id":"CWE-242","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D30","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f158f195cc232277b8d903f6c7bde3d9523e8d5f338e8bec88937365b73ce5f7"},"properties":{"dependency":{"package":"stdlib","version":"1.26.8","advisory":"GO-2026-6599","aliases":["BIT-golang-2026-56857","BIT-golang-2026-56866","BIT-golang-2026-78659","BIT-golang-2026-78660","BIT-golang-2026-78663","BIT-golang-2026-78667","BIT-golang-2026-78669","BIT-golang-2026-94439","BIT-golang-2026-94440","BIT-golang-2026-94448","BIT-golang-2026-97030","BIT-golang-2026-97031","BIT-golang-2026-97032","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","[CVE redacted]","GO-2026-6600","GO-2026-6603","GO-2026-6604","GO-2026-6605","GO-2026-6607","GO-2026-6608","GO-2026-6609","GO-2026-6610","GO-2026-6611","GO-2026-6612","GO-2026-6613","GO-2026-6617"],"reachability":{"kind":"production","file":"guest/dot-agentd/internal/agentd/agent.go","line":41,"symbol":"http.NewRequestWithContext"}}}},{"ruleId":"D35","level":"error","message":{"text":"Boundary-crossing change coupling: scheduler.ts \u2194 client.ts: \u0060apps/scheduler/src/scheduler.ts\u0060 (context scheduler) and \u0060packages/sdk/src/client.ts\u0060 (context sdk) sit in DIFFERENT parts of the tree yet change together 86% of the time (12 of the 14 commits that touched whichever of the two files changed less often, counting a file under its earlier names as well \u2014 a repo-wide or module-wide sweep is evidence about the sweep rather than about any pair inside it and is left out of BOTH sides of this ratio, while a dependency bump, a formatter/rename sweep, or a commit whose edit to one of the two files was a tool directive such as //go:generate or whitespace only is left out of the shared count ONLY, so the two sides are not taken over identical commit sets) \u2014 the bounded-context boundary may be in the wrong place, or one context is leaking into the other. This is the behavioural boundary violation a static scan can\u0027t see. You can check this without leaving the row: of the 12 shared commits counted here, the most recent 3 are \u00605a65ada6\u0060 api, web: the shell reads the failed tasks and the channels of every \u2026; \u0060a60ee568\u0060 host: MCP secrets are set write-only, pushed with the key, and none o\u2026; \u0060b75e5e7b\u0060 vm proxy: a Dot\u0027s whole VM can go out through a SOCKS5 proxy \u2014 run \u0060git show\u0060 on any of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/scheduler.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"29a917d0acae5cdcb8e0ba2b9c650d45098f14d6f1902d7ca9db13997dde3923"}},{"ruleId":"D35","level":"warning","message":{"text":"Change coupling: scheduler.ts \u2194 testing.ts: \u0060apps/scheduler/src/scheduler.ts\u0060 and \u0060apps/scheduler/src/testing.ts\u0060 change together 50% of the time (6 of the 12 commits that touched whichever of the two files changed less often, counting a file under its earlier names as well \u2014 a repo-wide or module-wide sweep is evidence about the sweep rather than about any pair inside it and is left out of BOTH sides of this ratio, while a dependency bump, a formatter/rename sweep, or a commit whose edit to one of the two files was a tool directive such as //go:generate or whitespace only is left out of the shared count ONLY, so the two sides are not taken over identical commit sets) with no explicit dependency between them. They sit in the same directory, but in this ecosystem each file is its own module \u2014 a sibling reference still needs an import \u2014 so the missing import edge is real: the coupling runs through shared behaviour, not a declared dependency. If they duplicate structure, extract the common part into one unit; otherwise the coupling is hidden and worth breaking. You can check this without leaving the row: of the 6 shared commits counted here, the most recent 3 are \u0060a60ee568\u0060 host: MCP secrets are set write-only, pushed with the key, and none o\u2026; \u006039ac3052\u0060 shared, engine, scheduler: the identity error statuses have one owner; \u0060a4f83f49\u0060 shared, engine, host: automations and tools routes \u2014 run \u0060git show\u0060 on any of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/scheduler.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"b89f7bfebc5c9764da5c58d69ff5bd729376a8792682eb1deea5b0d57b05d682"}},{"ruleId":"D36","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1b213f6eedd4b140d0bc37bdf1496f72811a643f34064f12518b32e9e83bcfc7"},"taxa":[{"id":"CICD-SEC-9","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D36","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0e17f71490e4d120a48b2b2881ab866c93b272bef2febb673a3e8e42b2c288ab"},"taxa":[{"id":"CICD-SEC-9","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D36","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"eb00976a698a5d68999b7ee6d27206fd374e916853e7ff1ead5eed42386f043f"},"taxa":[{"id":"CICD-SEC-9","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D36","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"90f83b4fa27db32740afe9540c905f3c0499caed87f61049a8a903ecc95b41c3"},"taxa":[{"id":"CICD-SEC-8","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D36","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d657599f6f99da1927d3377533dfc0888b34c4d84aa7d5579841fd72d0e39bce"},"taxa":[{"id":"CICD-SEC-6","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D36","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ace515990e7ee0f17b5c17e44dd168a5bdecf90804a3a3dd845cf05540978013"},"taxa":[{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"AC3","level":"warning","message":{"text":"Page without a main landmark: No \u003Cmain\u003E (or role=\u0022main\u0022) means no \u0022skip to content\u0022 target and a weaker landmark map. Wrap the primary content in \u003Cmain\u003E."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/layout.tsx"},"region":{"startLine":24}}}],"partialFingerprints":{"codehealthFindingId/v1":"546916eac1d769c093ad79753c3ccdbc22816933b02c79c43edabaf5b3633333"}},{"ruleId":"AC7","level":"warning","message":{"text":"Accessibility enforcement below the top rung: No accessibility enforcement found \u2014 no a11y linter (eslint-plugin-jsx-a11y) and no axe/pa11y/Lighthouse in tests or CI. Start with the linter to catch issues at author time. What was searched, so you can tell an absence from a miss: the 124 markup file(s) this pass actually assessed, the linter configuration checked in beside them, and this repository\u0027s test and CI files \u2014 matched by name against the accessibility checkers this dimension carries. An audit run outside the repository, a hosted scanner, or a check whose name is not one of those, is not seen here."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"d46019b86eff5ddad9db289e6802ac158899e980df54c34f67722442787ead62"}},{"ruleId":"AX6","level":"note","message":{"text":"Fat interface: GuestApi (19 required operations): \u0060GuestApi\u0060 declares 19 required operations: \u0060health\u0060, \u0060system\u0060, \u0060pushSecrets\u0060, \u0060putConfig\u0060, \u0060postEvent\u0060, \u0060state\u0060, \u0060listBrowserIdentities\u0060, \u0060createBrowserIdentity\u0060, \u0060getBrowserIdentity\u0060, \u0060deleteBrowserIdentity\u0060, \u0060getBrowserIdentityFrame\u0060, \u0060closeBrowserIdentity\u0060, \u0060listTools\u0060, \u0060listSkills\u0060, \u0060prepareSleep\u0060, \u0060screenshot\u0060, \u0060readFile\u0060, \u0060listFiles\u0060, \u0060events\u0060. Counted over its REQUIRED operations \u2014 a method signature or a function-typed property with no \u0060?\u0060, once per signature; optional members and data properties are not counted, because no implementer is forced to write them. A wide interface forces every implementer and caller to depend on methods they don\u0027t use (the Interface-Segregation \u0027I\u0027 in SOLID). Split it into focused role-interfaces."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/driver.ts"},"region":{"startLine":32}}}],"partialFingerprints":{"codehealthFindingId/v1":"6cddbc408b864146628298861e51f9271b213116547721d15349ba7c5090596a"}},{"ruleId":"DM9","level":"note","message":{"text":"Rule about [data, error] decided in 3 places: apps.web.src.components.ui.Resource\u0027s [data, error] are judged in apps.web.src.components.settings.HostSettings, apps.web.src.components.shell.Rail, apps.web.src.components.shell.attention \u2014 the same decision, restated. Every copy is a chance to drift, and copies drift silently because each one looks correct on its own. Move the judgement onto the type that owns the members and let the call sites ask it."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"7211893203e3f088dd468837a578341a72b739de8df1775edbbbecb19266a6af"}},{"ruleId":"DM9","level":"note","message":{"text":"Rule about [data, id, type] decided in 2 places: packages.shared.src.events.StoredEvent\u0027s [data, id, type] are judged in tests.e2e.lib, tests.e2e.run \u2014 the same decision, restated. Every copy is a chance to drift, and copies drift silently because each one looks correct on its own. Move the judgement onto the type that owns the members and let the call sites ask it."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"f6c5a5372582959025e48702ee89703924255f77e0716eb1a77326b819a85274"}},{"ruleId":"DM9","level":"note","message":{"text":"Rule about [data, type] decided in 3 places: packages.shared.src.events.StoredEvent\u0027s [data, type] are judged in tests.e2e.lib, tests.e2e.run, tests.e2e.scale \u2014 the same decision, restated. Every copy is a chance to drift, and copies drift silently because each one looks correct on its own. Move the judgement onto the type that owns the members and let the call sites ask it."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"29f9b61ef3d790a6c441a6ba3d58ce6154508d93b1cb26a4fd424a03c80c7820"}},{"ruleId":"IC1","level":"note","message":{"text":"Empty method body: \u0060trace\u0060 has an empty body \u2014 confirm it\u0027s an intentional no-op and not an unfinished method."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/whatsapp-baileys/baileys.ts"},"region":{"startLine":51}}}],"partialFingerprints":{"codehealthFindingId/v1":"c817c44f196183d91ce4a93518640038aae71693a2ddaef250b9033164888b69"}},{"ruleId":"IC1","level":"note","message":{"text":"Empty method body: \u0060debug\u0060 has an empty body \u2014 confirm it\u0027s an intentional no-op and not an unfinished method."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/whatsapp-baileys/baileys.ts"},"region":{"startLine":52}}}],"partialFingerprints":{"codehealthFindingId/v1":"59c9f868d796dfa3f6c1248518a72772e1f050a2590ed08952aab5aff83024ea"}},{"ruleId":"IC1","level":"note","message":{"text":"Empty method body: \u0060info\u0060 has an empty body \u2014 confirm it\u0027s an intentional no-op and not an unfinished method."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/whatsapp-baileys/baileys.ts"},"region":{"startLine":53}}}],"partialFingerprints":{"codehealthFindingId/v1":"fbb7c5b09b9bf1412f83bdc7643c854501feb1cbbfa9a8f20f942bfbe3f33f9a"}},{"ruleId":"IC1","level":"note","message":{"text":"Empty method body: \u0060warn\u0060 has an empty body \u2014 confirm it\u0027s an intentional no-op and not an unfinished method."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/whatsapp-baileys/baileys.ts"},"region":{"startLine":54}}}],"partialFingerprints":{"codehealthFindingId/v1":"ce005ee985e34fdf9e62b702fc3feac03f84be7d4b176e6c9b92e78870d001ed"}},{"ruleId":"IC1","level":"note","message":{"text":"Empty method body: \u0060error\u0060 has an empty body \u2014 confirm it\u0027s an intentional no-op and not an unfinished method."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/whatsapp-baileys/baileys.ts"},"region":{"startLine":55}}}],"partialFingerprints":{"codehealthFindingId/v1":"85477b43d09aa0749665945709e7d121ee77bbf117df8cb8d5b657ac4bf41fd2"}},{"ruleId":"IC1","level":"note","message":{"text":"Empty method body: \u0060debug\u0060 has an empty body \u2014 confirm it\u0027s an intentional no-op and not an unfinished method."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/src/support.ts"},"region":{"startLine":21}}}],"partialFingerprints":{"codehealthFindingId/v1":"1dc2a5d096e06075fa4f28648f1dfd09f7dc232ee510ad7d464ec985d109829f"}},{"ruleId":"IC1","level":"note","message":{"text":"Empty method body: \u0060info\u0060 has an empty body \u2014 confirm it\u0027s an intentional no-op and not an unfinished method."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/src/support.ts"},"region":{"startLine":21}}}],"partialFingerprints":{"codehealthFindingId/v1":"be6811083e9dc24f0b43568332598750122b752c0f60c28715aeae335bbec984"}},{"ruleId":"IC1","level":"note","message":{"text":"Empty method body: \u0060warn\u0060 has an empty body \u2014 confirm it\u0027s an intentional no-op and not an unfinished method."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/src/support.ts"},"region":{"startLine":21}}}],"partialFingerprints":{"codehealthFindingId/v1":"4dfe0b73dbd74cf62e883d59c9936ee0f3841c35a530168748d3fabdd594d498"}},{"ruleId":"IC1","level":"note","message":{"text":"Empty method body: \u0060error\u0060 has an empty body \u2014 confirm it\u0027s an intentional no-op and not an unfinished method."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/src/support.ts"},"region":{"startLine":21}}}],"partialFingerprints":{"codehealthFindingId/v1":"49b6740e1ae1044d01355396c5055b8eb13e0ef5802b9e77d5de343f1ce2dcf3"}},{"ruleId":"M2","level":"note","message":{"text":"No ADRs: No Architecture Decision Records found \u2014 no conventional ADR directory, no numbered \u0060NNNN-title\u0060 documents in any markup this check reads, and nothing ADR-shaped by content. Design rationale recorded elsewhere (a design-notes tree, a mailing list, pull-request discussion) is not visible to this check and is not re-findable per decision, so a future maintainer cannot ask why one choice was made and get an answer."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"670b3d6e36a756d63097d0dfbf90afd5fc761308800b9354894a07c3f4e4aa14"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/architecture.md names \u0060MEMORY.md\u0060, but no file or folder \u0060MEMORY.md\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/architecture.md"},"region":{"startLine":893}}}],"partialFingerprints":{"codehealthFindingId/v1":"04404569efce1d0a152b103a1b0bfe500c4d4fdec056b0fc9b68df08efc194ed"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/architecture.md names \u0060.mcp.json\u0060, but no file or folder \u0060.mcp.json\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/architecture.md"},"region":{"startLine":1194}}}],"partialFingerprints":{"codehealthFindingId/v1":"c53e69eb4381982080bf94872a2793edfcfa34dcfd54f0f2c67c631523846276"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/architecture.md names \u0060tools/list\u0060, but no file or folder \u0060tools/list\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/architecture.md"},"region":{"startLine":1352}}}],"partialFingerprints":{"codehealthFindingId/v1":"2499a3f47f5605fca21f88cb08f8709aca961b500b6ad13f0d8e05414fdf7267"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/guide.md names \u0060dot.yaml\u0060, but no file or folder \u0060dot.yaml\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/guide.md"},"region":{"startLine":175}}}],"partialFingerprints":{"codehealthFindingId/v1":"1f923fe51ad558919da886acf6551c923c551fccbe70438b491870f58c47bbd4"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/wiki/agent-memory-systems-compared.md names \u0060MEMORY.md\u0060, but no file or folder \u0060MEMORY.md\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/wiki/agent-memory-systems-compared.md"},"region":{"startLine":10}}}],"partialFingerprints":{"codehealthFindingId/v1":"dbb602d9372b3a1b2a60af10da8675cd58f3281c91b97f180e8e32a0773880b7"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/wiki/how-a-dot-remembers.md names \u0060MEMORY.md\u0060, but no file or folder \u0060MEMORY.md\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/wiki/how-a-dot-remembers.md"},"region":{"startLine":17}}}],"partialFingerprints":{"codehealthFindingId/v1":"ad0a7e895b6cb10d28d1efc2f89643c99edb56c5ac5ae6c84d41a6d150e33be7"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/wiki/mcp-servers-a-person-declares.md names \u0060.mcp.json\u0060, but no file or folder \u0060.mcp.json\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/wiki/mcp-servers-a-person-declares.md"},"region":{"startLine":18}}}],"partialFingerprints":{"codehealthFindingId/v1":"5e50c8e0421dcf5bdfc38837ff601896e275e3489ac53d76f0a4f6ec4496e364"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/wiki/mcp-servers-a-person-declares.md names \u0060config.toml\u0060, but no file or folder \u0060config.toml\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/wiki/mcp-servers-a-person-declares.md"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"16987d56ac9eea9337083ae130a9ab93e38736e714960075c1a7a3810f2caa1b"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/wiki/mcp-servers-a-person-declares.md names \u0060config.yaml\u0060, but no file or folder \u0060config.yaml\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/wiki/mcp-servers-a-person-declares.md"},"region":{"startLine":38}}}],"partialFingerprints":{"codehealthFindingId/v1":"ef94c16b253c86abc4d1bcbb1c8894b382f161eb52c9353d8c02565d2d659ee1"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/wiki/the-browser-servers-own-words.md documents the environment variable \u0060PAGE_RULES\u0060, but no code, script or configuration file names it. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/wiki/the-browser-servers-own-words.md"},"region":{"startLine":98}}}],"partialFingerprints":{"codehealthFindingId/v1":"40c560cc1ef4e754fb5feeb45a9bcc559b25bbd2629a45ab2cc51565ab95ee90"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/wiki/the-browser-servers-own-words.md names \u0060packages/core/src/mcp/instructions.ts\u0060, but no file or folder \u0060packages/core/src/mcp/instructions.ts\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/wiki/the-browser-servers-own-words.md"},"region":{"startLine":99}}}],"partialFingerprints":{"codehealthFindingId/v1":"9cc40b7d32df19c4eb4d901fc237a94be43731dd88a90767611673b994eb692b"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: tests/bench/README.md names \u0060tests/grade.py\u0060, but no file or folder \u0060tests/grade.py\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/bench/README.md"},"region":{"startLine":35}}}],"partialFingerprints":{"codehealthFindingId/v1":"d92017ed9617ff2fd1ed62928ecf27d7b89a22c03f087ab0a080ee3d793a3ce1"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: tests/bench/README.md names \u0060tests/test.sh\u0060, but no file or folder \u0060tests/test.sh\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/bench/README.md"},"region":{"startLine":35}}}],"partialFingerprints":{"codehealthFindingId/v1":"52deec222198dff3c024f6043472313c3b0dfee143f95aa43239e67280d0024b"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: tests/e2e/README.md names \u0060.stealth-identity.json\u0060, but no file or folder \u0060.stealth-identity.json\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/e2e/README.md"},"region":{"startLine":49}}}],"partialFingerprints":{"codehealthFindingId/v1":"288ebe3406ac456ddc7e428e5c5b6e5474d7c14715cef604496cb4b3457af2a8"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: tests/e2e/README.md runs \u0060docker rm -f idots-e2e\u0060, but \u0060idots-e2e\u0060 does not exist. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/e2e/README.md"},"region":{"startLine":187}}}],"partialFingerprints":{"codehealthFindingId/v1":"bc7678101e0ea14c47fa9d57bcd689231e19db7f06ee94d86b28d0db021a1339"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: guest/image-builder/test/smoke/README.md names \u0060.stealth-identity.json\u0060, but no file or folder \u0060.stealth-identity.json\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/image-builder/test/smoke/README.md"},"region":{"startLine":110}}}],"partialFingerprints":{"codehealthFindingId/v1":"92458380680a959ac745c27745b413407e330f48fe95c8665246cf7d409b9004"}},{"ruleId":"P2","level":"note","message":{"text":"Logging is not universal: Only 7/9 runnable modules use logging (modules with no entry point or server are excluded \u2014 they are libraries a runnable module hosts). Silent: \u0060.\u0060, \u0060apps/web\u0060."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"91a94e21d6d4d0e6a2003f94505b0b02b157176f0b24c4820f3f82b4447a97fe"}},{"ruleId":"P3","level":"note","message":{"text":"No SAST: No static application security testing detected. For this repository\u0027s stack, add CodeQL\u0027s javascript-typescript pack, \u0060semgrep --config=p/typescript\u0060, or eslint-plugin-security as a CI step. What was searched, so you can tell an absence from a miss: the 19977 CI workflow file(s) in this repository, and the scanner and linter configuration checked in beside them. A scan that runs outside CI, one configured in your forge\u0027s web UI rather than in a committed file, or a tool whose name is none of those this check carries, is not seen \u2014 if that is your case the row is wrong, and saying so is more useful than adding a second scanner."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"6e54424179c892f03ef2fd003130ac4bd43f39bbf3b1ca0a0143e25acb80ec87"}},{"ruleId":"P4","level":"note","message":{"text":"No release approval gate: The release is automated and no gate that pauses it for a human is DECLARED IN THIS REPOSITORY\u0027S PIPELINE FILES. What was read: every file under \u0060.github/workflows/\u0060, \u0060.forgejo/workflows/\u0060, \u0060.gitea/workflows/\u0060, \u0060.azuredevops/\u0060 and \u0060.azure-pipelines/\u0060, plus \u0060.gitlab-ci*\u0060 and \u0060azure-pipelines*\u0060 \u2014 with comment text stripped, so documenting a gate is not declaring one. What would have counted: GitLab\u0027s \u0060when: manual\u0060, CircleCI\u0027s \u0060type: approval\u0060, an Azure \u0060ManualValidation@\u0060 task or an \u0060approvals:\u0060 block, a Jenkins \u0060input\u0060 step, a \u0060uses:\u0060 step naming an approval action, an \u0060environment:\u0060 paired with \u0060reviewers\u0060 / \u0060required_reviewers\u0060 / \u0060protection\u0060 / \u0060wait-timer\u0060 / \u0060deployment_branch_policy\u0060, a draft-release step, a \u0060workflow_dispatch\u0060 promotion, or a release-event gate. \u2605 What this cannot see, because none of it is a file: a GitHub environment whose required reviewers are configured in repo SETTINGS, a branch protection rule, or an organisation deployment policy \u2014 all of them real, enforced gates that live outside the repository. If yours is one of those, this row is wrong and nothing in the tree could have told us. Otherwise: whatever the release trigger points at is published to users unreviewed, so a mistagged or unverified commit ships and the only remedy is a follow-up release."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"6c11e2dbd483b4b423b95ac61bfcc7af1d55351b28a20d2b1105b31cfe38cc60"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060openSync\u0060 in \u0060spawnDetached\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/runner.ts"},"region":{"startLine":172}}}],"partialFingerprints":{"codehealthFindingId/v1":"a254da211644616854cad4b20d0bcd20887299efd8cddf2fede928f7f4511e93"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060closeSync\u0060 in \u0060spawnDetached\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/runner.ts"},"region":{"startLine":195}}}],"partialFingerprints":{"codehealthFindingId/v1":"11d01eff8bae725f64f00804535d2aca4a8e0f48caa52c91b2b0ff4c35e5798a"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060appendFileSync\u0060 in \u0060spawnDetached\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/test/fakes.ts"},"region":{"startLine":152}}}],"partialFingerprints":{"codehealthFindingId/v1":"270d45a3ab92b1bc8c956629f77cea83011742dab5ea7ab566123523ecdd5ac1"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060appendFileSync\u0060 in \u0060spawnDetached\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/test/fakes.ts"},"region":{"startLine":170}}}],"partialFingerprints":{"codehealthFindingId/v1":"cd4f8cc8ec805742b6a24b10a30038c65e28ba1945e15f93e4ca7d1e793a3885"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060writeFileSync\u0060 in \u0060spawnDetached\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/test/fakes.ts"},"region":{"startLine":171}}}],"partialFingerprints":{"codehealthFindingId/v1":"7ce136717f0c9b478f631dda6d8739ab155a1c7d49bbc948c46db035ecf0d023"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060appendFileSync\u0060 in \u0060callback to setTimeout\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/test/fakes.ts"},"region":{"startLine":175}}}],"partialFingerprints":{"codehealthFindingId/v1":"8d1552f1125edb9099a415f8c59443f663c016d179e27f8df0760b2e76968363"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplication concentrated across 10 sibling directories (11 clone groups): 11 duplicated blocks under apps/web/src/components/ have copies in at least two of the sibling directories approvals, chat, computer, dot-settings, elements, inbox (\u002B4 more sibling(s) not listed) \u2014 9 of them are reported below, and 2 are counted here but not reported individually: those copies match on shape but no longer clear R10\u0027s bar for an individually reported row \u2014 either they kept neither their own names nor their values, or what was copied is too small to stand on its own (it reports near-exact duplication only, and only of substantial extent). What this row states is the concentration, which the detector measured over all 11 and which does not depend on how exactly each block\u0027s copies still match. That concentration is one structural fact, not 11 local ones: the siblings replicate behaviour none of them owns, which is the shape of a missing shared module \u2014 a common library every sibling imports \u2014 rather than 11 separate extractions. Check first whether the siblings are deliberately standalone deliverables (scaffold templates, demo apps that must stay copy-pasteable); where they are, the duplication is the design and the per-block rows are the ones to act on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/dot-settings/panels.tsx"},"region":{"startLine":43}}}],"partialFingerprints":{"codehealthFindingId/v1":"2db004d449b09d8fcf913eb7519bee4bbf95443651708356a0cc4eaa5fb3d955"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplication concentrated across 3 sibling directories (6 clone groups): 6 duplicated blocks under the repository root have copies in at least two of the sibling directories apps, guest, packages \u2014 4 of them are reported below, and 2 are counted here but not reported individually: those copies match on shape but no longer clear R10\u0027s bar for an individually reported row \u2014 either they kept neither their own names nor their values, or what was copied is too small to stand on its own (it reports near-exact duplication only, and only of substantial extent). What this row states is the concentration, which the detector measured over all 6 and which does not depend on how exactly each block\u0027s copies still match. That concentration is one structural fact, not 6 local ones: the siblings replicate behaviour none of them owns, which is the shape of a missing shared module \u2014 a common library every sibling imports \u2014 rather than 6 separate extractions. Check first whether the siblings are deliberately standalone deliverables (scaffold templates, demo apps that must stay copy-pasteable); where they are, the duplication is the design and the per-block rows are the ones to act on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/image-builder/src/manifest.ts"},"region":{"startLine":81}}}],"partialFingerprints":{"codehealthFindingId/v1":"6b654e38da6bdfa434ae0855a47c1b79eeb1b0ae5ce5ac16f3220a7079fe5b55"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (107 matched lines \u00D7 2 locations): apps/web/src/components/ui/dialog.tsx:11 \u00B7 apps/web/src/components/ui/sheet.tsx:9 \u2014 the two spans are one implementation copied and then locally edited \u2014 475 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/ui/dialog.tsx"},"region":{"startLine":11}}}],"partialFingerprints":{"codehealthFindingId/v1":"872b3475b755951a21c441c66cef3d459837feecb4a6e0f27b55eba6e872bc37"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (38 matched lines \u00D7 2 locations): apps/web/src/components/dot-settings/panels.tsx:43 \u00B7 apps/web/src/components/new-dot/FormSections.tsx:88 \u2014 the two spans are one implementation copied and then locally edited \u2014 422 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/dot-settings/panels.tsx"},"region":{"startLine":43}}}],"partialFingerprints":{"codehealthFindingId/v1":"dcb1f6f09af09e5805283b43d29b8680fedb70d0e0816c17a318a25f14efdf8f"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (23 matched lines \u00D7 2 locations): apps/web/src/components/new-dot/Field.tsx:92 \u00B7 apps/web/src/components/new-dot/Field.tsx:140 \u2014 the two spans are one implementation copied and then locally edited \u2014 153 tokens are still identical, in the same order in both spans, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/new-dot/Field.tsx"},"region":{"startLine":92}}}],"partialFingerprints":{"codehealthFindingId/v1":"97316b31ca959af428d5f845646fabb0b8aaba768bdf739c1707d3db44de37e8"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (17 matched lines \u00D7 2 locations): packages/channels/src/hub.ts:176 \u00B7 packages/channels/src/hub.ts:265 \u2014 the two spans are one implementation copied and then locally edited \u2014 160 tokens are still identical, in the same order in both spans, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/hub.ts"},"region":{"startLine":176}}}],"partialFingerprints":{"codehealthFindingId/v1":"d90c4fa76a94c71c19d2db996d224473deb1c78badb8e5bc25156110befb5195"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 2 locations): apps/web/src/components/inbox/History.tsx:67 \u00B7 apps/web/src/components/tasks/history-table.tsx:62 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/inbox/History.tsx"},"region":{"startLine":67}}}],"partialFingerprints":{"codehealthFindingId/v1":"9afd7aec62e01c15e33a8d32e5b49594cbf23af72d076dc7840fd2d643d89830"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (12 lines \u00D7 2 locations): apps/web/src/components/inbox/NeedsYou.tsx:180 \u00B7 apps/web/src/components/inbox/NeedsYou.tsx:204 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/inbox/NeedsYou.tsx"},"region":{"startLine":180}}}],"partialFingerprints":{"codehealthFindingId/v1":"d554b6d43ab85bdea68c9c9d0eca94de78c4b7a4c5cae29f92d7ae80f9a71ca5"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (12 lines \u00D7 2 locations): apps/web/src/lib/computer-view.ts:9 \u00B7 apps/web/src/lib/inbox.ts:7 \u2014 the 2 copies are spread across 2 files, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/computer-view.ts"},"region":{"startLine":9}}}],"partialFingerprints":{"codehealthFindingId/v1":"b4ef6a635bad410384992386cea633c2ac57f5b6e4bafd0c8c21825cdd5a4ccf"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (11 matched lines \u00D7 2 locations): apps/web/src/components/chat/chat-data.tsx:81 \u00B7 apps/web/src/components/tasks/tasks-data.tsx:173 \u2014 the two spans are one implementation copied and then locally edited \u2014 92 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/chat/chat-data.tsx"},"region":{"startLine":81}}}],"partialFingerprints":{"codehealthFindingId/v1":"afbae2089145deb48a7b0c1cd32bfd2e0bdf0af168658cbf7f42d26b3e5beb23"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 3 locations): apps/web/src/components/computer/files-tab.tsx:112 \u00B7 apps/web/src/components/inbox/History.tsx:72 \u00B7 apps/web/src/components/tasks/history-table.tsx:70 \u2014 the 3 copies are spread across 3 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/computer/files-tab.tsx"},"region":{"startLine":112}}}],"partialFingerprints":{"codehealthFindingId/v1":"f10cbea359a9b3d988e81520b33440cdc9150f22b3c2d9d7cc71c1fe1e918ae6"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (11 matched lines \u00D7 2 locations): apps/web/src/components/computer/usage-tab.tsx:45 \u00B7 apps/web/src/components/inbox/NeedsYou.tsx:29 \u2014 the two spans are one implementation copied and then locally edited \u2014 55 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/computer/usage-tab.tsx"},"region":{"startLine":45}}}],"partialFingerprints":{"codehealthFindingId/v1":"224d0dda08c464ca7819b4744f9685dab60aa8337ecfddca156d6ef139d69aaa"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 2 locations): apps/web/src/components/dot-settings/mcp-servers-panel.tsx:83 \u00B7 apps/web/src/components/dot-settings/mcp-servers-panel.tsx:94 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/dot-settings/mcp-servers-panel.tsx"},"region":{"startLine":83}}}],"partialFingerprints":{"codehealthFindingId/v1":"a0ceeaa7c5d9b91ca2213db09d35c7c4c86af6fb2ece46cfb52dfda89ff543bd"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (11 matched lines \u00D7 2 locations): packages/database/src/pglite.ts:50 \u00B7 packages/database/src/postgres.ts:78 \u2014 the two spans are one implementation copied and then locally edited \u2014 97 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/database/src/pglite.ts"},"region":{"startLine":50}}}],"partialFingerprints":{"codehealthFindingId/v1":"7a163b7f52269d4ed6081081f8c34b19bb9257c9b1b2102595f62bc8cc174932"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (10 matched lines \u00D7 2 locations): apps/scheduler/src/inbound.ts:156 \u00B7 apps/scheduler/src/support.ts:50 \u2014 the two spans are one implementation copied and then locally edited \u2014 58 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/inbound.ts"},"region":{"startLine":156}}}],"partialFingerprints":{"codehealthFindingId/v1":"4ff371d11ec7b6b4f9a3d00815f043e2a3114172f92876e4d9269f47aca4d24e"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (10 matched lines \u00D7 2 locations): apps/web/src/components/approvals/approval-body.tsx:26 \u00B7 apps/web/src/components/approvals/approval-body.tsx:35 \u2014 the two spans are one implementation copied and then locally edited \u2014 60 tokens are still identical, in the same order in both spans, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/approvals/approval-body.tsx"},"region":{"startLine":26}}}],"partialFingerprints":{"codehealthFindingId/v1":"0c39861966abab049416f64f2d86bbc6416573bc160a525fcdfd8ba116f2bbce"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (10 matched lines \u00D7 2 locations): guest/image-builder/src/manifest.ts:81 \u00B7 packages/shared/src/files.ts:94 \u2014 the two spans are one implementation copied and then locally edited \u2014 75 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/image-builder/src/manifest.ts"},"region":{"startLine":81}}}],"partialFingerprints":{"codehealthFindingId/v1":"f82e20c4b01f1d1439d654fce3ad11e69fc2b7d90c02a5837dde69272442b578"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (10 matched lines \u00D7 2 locations): packages/shared/src/files.ts:93 \u00B7 packages/shared/src/process.ts:195 \u2014 the two spans are one implementation copied and then locally edited \u2014 63 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/src/files.ts"},"region":{"startLine":93}}}],"partialFingerprints":{"codehealthFindingId/v1":"15603772eb68c9a68aa0871804d42fa2d8ec4ed3cfc78cf29b8890e75544fe37"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2 locations): apps/scheduler/src/lifecycle.ts:337 \u00B7 apps/scheduler/src/lifecycle.ts:597 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/lifecycle.ts"},"region":{"startLine":337}}}],"partialFingerprints":{"codehealthFindingId/v1":"9bd504ec5ccf510fddf70f06692270598bf5ed195cad6fe302712f5193a2e6ae"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 3 locations): packages/database/src/computers.ts:58 \u00B7 packages/database/src/inbound.ts:77 \u00B7 packages/database/src/tasks.ts:120 \u2014 the 3 copies are spread across 3 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/database/src/computers.ts"},"region":{"startLine":58}}}],"partialFingerprints":{"codehealthFindingId/v1":"09a50bd4b4cf3f000941541c8ef2cceeb7730daea067a51f97a97e5437e1fc04"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2 locations): packages/sdk/src/client.ts:190 \u00B7 packages/sdk/src/client.ts:311 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/sdk/src/client.ts"},"region":{"startLine":190}}}],"partialFingerprints":{"codehealthFindingId/v1":"5298d6c1259c426d10221272d1a56a3508c8e9ed95311ffa5a66c2688b24c1c6"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2 locations): apps/scheduler/src/scheduler.ts:534 \u00B7 apps/scheduler/src/scheduler.ts:543 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/scheduler.ts"},"region":{"startLine":534}}}],"partialFingerprints":{"codehealthFindingId/v1":"1a882ca3dc8cee11eb4f422190a0352a8ede9d1da023ba9988b3fe1c6ccbeb30"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (8 matched lines \u00D7 2 locations): apps/vm-manager/src/guest-client.ts:227 \u00B7 packages/shared/src/sockets.ts:94 \u2014 the two spans are one implementation copied and then locally edited \u2014 78 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/guest-client.ts"},"region":{"startLine":227}}}],"partialFingerprints":{"codehealthFindingId/v1":"eb74834de5d40a0fe9a9d31a6db2c448b5c1797aea7c1eab30222009176687a3"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (8 matched lines \u00D7 2 locations): apps/web/src/components/approvals/TaskApprovals.tsx:15 \u00B7 apps/web/src/components/inbox/NeedsYou.tsx:128 \u2014 the two spans are one implementation copied and then locally edited \u2014 137 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/approvals/TaskApprovals.tsx"},"region":{"startLine":15}}}],"partialFingerprints":{"codehealthFindingId/v1":"a264a6978ee93c1f047578331ddc774a5df1b509f2d6ee9598c0bf9157633244"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2 locations): apps/web/src/components/approvals/approval-body.tsx:62 \u00B7 apps/web/src/components/elements/approval-card.tsx:104 \u2014 the 2 copies are spread across 2 directories, so the shared home is a decision rather than an obvious spot: check first whether one of them already owns this behaviour, and otherwise put the extracted module somewhere all of the sites already reach rather than making one of them depend on another."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/approvals/approval-body.tsx"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"79b257d97bfb055ee830cdaf49824783a1df1819248f3b54114fcc80430334d5"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2 locations): apps/web/src/components/inbox/use-history.ts:46 \u00B7 apps/web/src/components/inbox/use-history.ts:66 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/inbox/use-history.ts"},"region":{"startLine":46}}}],"partialFingerprints":{"codehealthFindingId/v1":"7168741a4687fdb6f8915bb0dbbeed7a32f65dd32e9f2189fe96262159c497c8"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (8 matched lines \u00D7 2 locations): packages/channels/src/telegram/telegram.ts:127 \u00B7 packages/channels/src/whatsapp-baileys/whatsapp.ts:120 \u2014 the two spans are one implementation copied and then locally edited \u2014 56 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/telegram/telegram.ts"},"region":{"startLine":127}}}],"partialFingerprints":{"codehealthFindingId/v1":"fb315e285123c5cfb6fd68b2f9a5c4b6b4a38a3e2efcc3f5d2fd23d5f78383bf"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (8 matched lines \u00D7 2 locations): packages/channels/src/testing.ts:47 \u00B7 packages/channels/src/whatsapp-baileys/whatsapp.ts:121 \u2014 the two spans are one implementation copied and then locally edited \u2014 56 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/testing.ts"},"region":{"startLine":47}}}],"partialFingerprints":{"codehealthFindingId/v1":"244cf5c670ac0496d5e6a91bba1f937a43581b763b83baf148bd61d9842e27a3"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2 locations): apps/api/src/vm-driver.ts:26 \u00B7 packages/database/src/migrate.ts:39 \u2014 the 2 copies are spread across 2 directories, so the shared home is a decision rather than an obvious spot: check first whether one of them already owns this behaviour, and otherwise put the extracted module somewhere all of the sites already reach rather than making one of them depend on another."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/api/src/vm-driver.ts"},"region":{"startLine":26}}}],"partialFingerprints":{"codehealthFindingId/v1":"a942058444cdce94566144ec5a6d68922587180cbcabcbbb204f6947e6b0361b"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2 locations): apps/cli/src/cli.ts:463 \u00B7 apps/cli/src/cli.ts:476 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/cli.ts"},"region":{"startLine":463}}}],"partialFingerprints":{"codehealthFindingId/v1":"b0efa3adc0339f0987e3b02df403c030cd094d495668a4e2e6748e3fc211d0db"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (7 matched lines \u00D7 2 locations): apps/web/src/components/chat/chat-data.tsx:42 \u00B7 apps/web/src/components/chat/chat-data.tsx:66 \u2014 the two spans are one implementation copied and then locally edited \u2014 53 tokens are still identical, in the same order in both spans, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/chat/chat-data.tsx"},"region":{"startLine":42}}}],"partialFingerprints":{"codehealthFindingId/v1":"1e075aef74a78401772689fc333f93826a80461e576154c775b10ca16e62c7b4"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (7 matched lines \u00D7 2 locations): packages/channels/src/telegram/telegram.ts:128 \u00B7 packages/channels/src/testing.ts:47 \u2014 the two spans are one implementation copied and then locally edited \u2014 52 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/telegram/telegram.ts"},"region":{"startLine":128}}}],"partialFingerprints":{"codehealthFindingId/v1":"8f313c939f1139e8e3116b33b20f057c75466dbea58f28dba626a94f26ca7f88"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 5 locations): packages/database/src/approvals.ts:63 \u00B7 packages/database/src/channels.ts:121 \u00B7 packages/database/src/computers.ts:60 \u00B7 packages/database/src/inbound.ts:79 \u00B7 \u002B1 more site(s) not listed \u2014 the 5 copies are spread across 5 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/database/src/approvals.ts"},"region":{"startLine":63}}}],"partialFingerprints":{"codehealthFindingId/v1":"0f85b1a311088b4f0d1e62be7cbb7afb5039a7fdd96f4e4f49b89827c85ff652"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 3 locations): packages/database/src/channels.ts:116 \u00B7 packages/database/src/channels.ts:158 \u00B7 packages/database/src/channels.ts:198 \u2014 all 3 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/database/src/channels.ts"},"region":{"startLine":116}}}],"partialFingerprints":{"codehealthFindingId/v1":"4892e6eb56bdeebdc01ff74ae7de8d3a5d8ad2926d268fb4e09daab6b6b08703"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2 locations): packages/database/src/channels.ts:157 \u00B7 packages/database/src/channels.ts:201 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/database/src/channels.ts"},"region":{"startLine":157}}}],"partialFingerprints":{"codehealthFindingId/v1":"ac4d00f45fe57f9ce8283231d47d8ee5002091fc7b20fa152fffa064ae8793c4"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2 locations): packages/sdk/src/client.ts:335 \u00B7 packages/sdk/src/client.ts:484 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/sdk/src/client.ts"},"region":{"startLine":335}}}],"partialFingerprints":{"codehealthFindingId/v1":"181380e7ed82cbf683a4b125f17adcfc4bd83746cbc927dbb239590200e6ebee"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2 locations): apps/cli/src/cli.ts:232 \u00B7 apps/web/src/lib/events/view.ts:108 \u2014 the 2 copies are spread across 2 directories, so the shared home is a decision rather than an obvious spot: check first whether one of them already owns this behaviour, and otherwise put the extracted module somewhere all of the sites already reach rather than making one of them depend on another."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/cli.ts"},"region":{"startLine":232}}}],"partialFingerprints":{"codehealthFindingId/v1":"809c23efdab8e872fad4d44e24b62fbe46458ca123963fb97ae8494477aeba00"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2 locations): apps/scheduler/src/testing.ts:741 \u00B7 apps/scheduler/src/testing.ts:761 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/testing.ts"},"region":{"startLine":741}}}],"partialFingerprints":{"codehealthFindingId/v1":"12202a8131068fd4cf854f27dd655287221ffdb4c4445773cfed0198428dad37"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 4 locations): apps/web/src/app/(app)/dots/[id]/activity/page.tsx:5 \u00B7 apps/web/src/app/(app)/dots/[id]/channels/page.tsx:5 \u00B7 apps/web/src/app/(app)/dots/[id]/chat/page.tsx:5 \u00B7 apps/web/src/app/(app)/dots/[id]/settings/page.tsx:5 \u2014 the 4 copies are spread across 4 files, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/dots/[id]/activity/page.tsx"},"region":{"startLine":5}}}],"partialFingerprints":{"codehealthFindingId/v1":"e9713be4e5fed1fe4c87c94854d31c66bba56be7f4b84652c6a58ba98423befc"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 8 locations): apps/web/src/app/(app)/dots/[id]/activity/page.tsx:2 \u00B7 apps/web/src/app/(app)/dots/[id]/channels/page.tsx:2 \u00B7 apps/web/src/app/(app)/dots/[id]/chat/page.tsx:2 \u00B7 apps/web/src/app/(app)/dots/[id]/computer/page.tsx:3 \u00B7 \u002B4 more site(s) not listed \u2014 the 8 copies are spread across 8 files, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/dots/[id]/activity/page.tsx"},"region":{"startLine":2}}}],"partialFingerprints":{"codehealthFindingId/v1":"5d13551580b7786e2f28fdfd37ceed583a366a8ca7b37ad3012d8afb2c3222ac"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2 locations): apps/web/src/app/(app)/dots/[id]/computer/page.tsx:6 \u00B7 apps/web/src/app/(app)/dots/[id]/skills/page.tsx:6 \u2014 the 2 copies are spread across 2 files, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/dots/[id]/computer/page.tsx"},"region":{"startLine":6}}}],"partialFingerprints":{"codehealthFindingId/v1":"af541c9e0a757afc0de9014f13761f0a506a021047f5ce049b5980a6f382de49"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2 locations): apps/web/src/components/computer/usage-tab.tsx:108 \u00B7 apps/web/src/components/computer/usage-tab.tsx:116 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/computer/usage-tab.tsx"},"region":{"startLine":108}}}],"partialFingerprints":{"codehealthFindingId/v1":"8eb6dc9119760ddffc37737750db0e3a6fbfe0cd519ef4a84367ec7d45dc3ca9"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2 locations): apps/web/src/lib/steps.ts:72 \u00B7 apps/web/src/lib/steps.ts:90 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/steps.ts"},"region":{"startLine":72}}}],"partialFingerprints":{"codehealthFindingId/v1":"68b477121487a50711818e370a6263b993ec9c28b7113de9c6c13596871c1c37"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (6 matched lines \u00D7 2 locations): packages/channels/src/runner.ts:288 \u00B7 packages/channels/src/runner.ts:312 \u2014 the two spans are one implementation copied and then locally edited \u2014 83 tokens are still identical, in the same order in both spans, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/runner.ts"},"region":{"startLine":288}}}],"partialFingerprints":{"codehealthFindingId/v1":"0cdcf60d50b199e8efe84e1bf474cbbe4101131eade42c203eb8302a87ba02ab"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (6 matched lines \u00D7 2 locations): packages/channels/src/whatsapp-baileys/baileys.ts:169 \u00B7 packages/channels/src/whatsapp-baileys/port.ts:57 \u2014 the two spans are one implementation copied and then locally edited \u2014 85 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/whatsapp-baileys/baileys.ts"},"region":{"startLine":169}}}],"partialFingerprints":{"codehealthFindingId/v1":"49532729c4864c4eaacca091aafd0e55ec348a02b9944bdc212a8552b7cfc352"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2 locations): packages/shared/src/events.ts:444 \u00B7 packages/shared/src/states.ts:107 \u2014 the 2 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/src/events.ts"},"region":{"startLine":444}}}],"partialFingerprints":{"codehealthFindingId/v1":"d3d0d9e3593b866801cd95849d37d7464633106ff6ff6dfee15ebbb09b7a6b35"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2 locations): packages/shared/src/protocol.ts:373 \u00B7 packages/shared/src/protocol.ts:393 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/src/protocol.ts"},"region":{"startLine":373}}}],"partialFingerprints":{"codehealthFindingId/v1":"56353c269228905c82a53d969e343d2c80ba2b5c882e4096104b8b7d304f6a1e"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2 locations): packages/shared/src/states.ts:104 \u00B7 packages/shared/src/tools.ts:24 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/src/states.ts"},"region":{"startLine":104}}}],"partialFingerprints":{"codehealthFindingId/v1":"508a76ed83b821c502714992478e655b56149509db5727022f15973ba38e9d62"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2 locations): apps/api/src/server.ts:303 \u00B7 apps/api/src/server.ts:313 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/api/src/server.ts"},"region":{"startLine":303}}}],"partialFingerprints":{"codehealthFindingId/v1":"51ba7829b4c9b4ca13442156e3e480a7b189b1f21f13e5eb803b9372e44f755a"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (5 matched lines \u00D7 2 locations): apps/api/src/vm-driver.ts:92 \u00B7 apps/scheduler/src/driver.ts:134 \u2014 the two spans are one implementation copied and then locally edited \u2014 74 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/api/src/vm-driver.ts"},"region":{"startLine":92}}}],"partialFingerprints":{"codehealthFindingId/v1":"2c99e19bd43d91c37b3c1952ce99c0973dbd1db3e4ec970ab2966309b800992c"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2 locations): apps/scheduler/src/scheduler.ts:773 \u00B7 packages/sdk/src/client.ts:403 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/scheduler.ts"},"region":{"startLine":773}}}],"partialFingerprints":{"codehealthFindingId/v1":"f66931b1b500ad61dd04843c5f7511b81bdb6cae7ec7332b2b1e08ae13c78dc5"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2 locations): apps/vm-manager/src/doctor.ts:148 \u00B7 apps/vm-manager/src/doctor.ts:169 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/doctor.ts"},"region":{"startLine":148}}}],"partialFingerprints":{"codehealthFindingId/v1":"a74e61c7a6b3fa9c7ba7ca4f412468871f2a04bafcf5baa093fe64c58599a7d4"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2 locations): apps/vm-manager/src/vm-manager.ts:431 \u00B7 apps/vm-manager/src/vm-manager.ts:455 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/vm-manager.ts"},"region":{"startLine":431}}}],"partialFingerprints":{"codehealthFindingId/v1":"37b82d59676bb2e6987b9167a68f36214ba1fdfa5d6c9bb5d9007a893c7fcee8"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (5 matched lines \u00D7 2 locations): apps/web/src/components/dot-settings/mcp-servers-panel.tsx:133 \u00B7 apps/web/src/components/setup/KeyForm.tsx:71 \u2014 the two spans are one implementation copied and then locally edited \u2014 66 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/dot-settings/mcp-servers-panel.tsx"},"region":{"startLine":133}}}],"partialFingerprints":{"codehealthFindingId/v1":"4b0af58018d8ba3fee5bba09ee13b008685d73801426fe58c4d5781b191f5fb4"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2 locations): apps/web/src/components/dot-settings/panel.tsx:15 \u00B7 apps/web/src/components/new-dot/FormSections.tsx:20 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/dot-settings/panel.tsx"},"region":{"startLine":15}}}],"partialFingerprints":{"codehealthFindingId/v1":"9e5e566d28776f19ee4f19677f7b1a5db9f526c7300cae7eba32600d519dae2e"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (5 matched lines \u00D7 2 locations): packages/channels/src/whatsapp-baileys/fake.ts:33 \u00B7 packages/channels/src/whatsapp-baileys/port.ts:59 \u2014 the two spans are one implementation copied and then locally edited \u2014 70 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/whatsapp-baileys/fake.ts"},"region":{"startLine":33}}}],"partialFingerprints":{"codehealthFindingId/v1":"365680033db29ccd5cd3fcb38188a00a631bb403b4dd77de85c42da91c963912"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2 locations): packages/database/src/channels.ts:222 \u00B7 packages/database/src/secrets.ts:45 \u2014 the 2 copies are spread across 2 files, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/database/src/channels.ts"},"region":{"startLine":222}}}],"partialFingerprints":{"codehealthFindingId/v1":"8dd4e7a9302fda12b7370d1de8a29f42e963230290704db73cf248e949806aa3"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2 locations): packages/database/src/dots.ts:67 \u00B7 packages/database/src/inbound.ts:82 \u2014 the 2 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/database/src/dots.ts"},"region":{"startLine":67}}}],"partialFingerprints":{"codehealthFindingId/v1":"b1f2658bc181080944ebcec0c999a0e3876818da09f2ce34dd371d5ce64f5fff"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2 locations): packages/sdk/src/client.ts:135 \u00B7 packages/sdk/src/client.ts:529 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/sdk/src/client.ts"},"region":{"startLine":135}}}],"partialFingerprints":{"codehealthFindingId/v1":"326a31f22de521f8bf9cc19216fe9c88dedf5b0bbcfe24eec664f7d86456d417"}},{"ruleId":"R11","level":"warning","message":{"text":"Boundary violation [package:relative-cross-package]: apps/cli/scripts/build.mjs:10 reaches into another package with a relative path (../../../packages/database/scripts/runtime-files.mjs) \u2014 import the package by name instead."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/scripts/build.mjs"},"region":{"startLine":10}}}],"partialFingerprints":{"codehealthFindingId/v1":"2ccfb65970d4457aac95149c7f35594af1624c24cb99eced01b8497baaaea40c"}},{"ruleId":"R11","level":"warning","message":{"text":"Boundary violation [package:relative-cross-package]: apps/cli/src/host.ts:41 reaches into another package with a relative path (../../../virtualization/qemu/windows.json) \u2014 import the package by name instead."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/host.ts"},"region":{"startLine":41}}}],"partialFingerprints":{"codehealthFindingId/v1":"09869c10495d995d09fc5fe230366d8f172b14f01cdd1b58ebb9921ed351d01b"}},{"ruleId":"R11","level":"warning","message":{"text":"Boundary violation [package:test-cross-package-internals]: apps/web/e2e/harness.ts:22 reaches past another workspace package\u0027s public entry into its internals with a relative path (../../cli/src/web.js) \u2014 the test is coupled to a file layout that package makes no promise about, so a refactor behind its entry point breaks the suite. Import the package by name instead."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/e2e/harness.ts"},"region":{"startLine":22}}}],"partialFingerprints":{"codehealthFindingId/v1":"9aa4d36185d34050999904d4a67add7e48ab7cafb519c5677ba6cd1e73369a19"}},{"ruleId":"R11","level":"warning","message":{"text":"Boundary violation [package:relative-cross-package]: guest/image-builder/src/pins.ts:7 reaches into another package with a relative path (../../../virtualization/images/base.json) \u2014 import the package by name instead."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/image-builder/src/pins.ts"},"region":{"startLine":7}}}],"partialFingerprints":{"codehealthFindingId/v1":"5c175f95f39b301e55c461cb5812ec9b474c125e52332fe2c0b3b70f172add1a"}},{"ruleId":"R11","level":"warning","message":{"text":"Boundary violation [package:test-cross-package-internals]: tests/repo/cli-bundle.test.ts:16 reaches past another workspace package\u0027s public entry into its internals with a relative path (../../apps/cli/scripts/bundle-options.mjs) \u2014 the test is coupled to a file layout that package makes no promise about, so a refactor behind its entry point breaks the suite. Import the package by name instead."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/repo/cli-bundle.test.ts"},"region":{"startLine":16}}}],"partialFingerprints":{"codehealthFindingId/v1":"b2e6b82c9334ec2f69790992b9b8d20cf6f53fc98df056f255fed592568e6d0b"}},{"ruleId":"R11","level":"warning","message":{"text":"Boundary violation [package:test-cross-package-internals]: tests/repo/readme.test.ts:12 reaches past another workspace package\u0027s public entry into its internals with a relative path (../../apps/scheduler/src/lifecycle.js) \u2014 the test is coupled to a file layout that package makes no promise about, so a refactor behind its entry point breaks the suite. Import the package by name instead."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/repo/readme.test.ts"},"region":{"startLine":12}}}],"partialFingerprints":{"codehealthFindingId/v1":"99d0a17b92b4b7b43700be1b400c8c852df3b76eae697db9cd46cbb1ecbd5349"}},{"ruleId":"R11","level":"warning","message":{"text":"Boundary violation [package:test-cross-package-internals]: tests/repo/readme.test.ts:13 reaches past another workspace package\u0027s public entry into its internals with a relative path (../../apps/cli/src/cli.js) \u2014 the test is coupled to a file layout that package makes no promise about, so a refactor behind its entry point breaks the suite. Import the package by name instead."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/repo/readme.test.ts"},"region":{"startLine":13}}}],"partialFingerprints":{"codehealthFindingId/v1":"7f5450fb5b675fcb4e89945bd69a7fa7c94f38a886e095d865a7f68f59a48a13"}},{"ruleId":"R11","level":"warning","message":{"text":"Boundary violation [package:test-cross-package-internals]: tests/repo/readme.test.ts:15 reaches past another workspace package\u0027s public entry into its internals with a relative path (../../apps/web/src/lib/permission-presets.js) \u2014 the test is coupled to a file layout that package makes no promise about, so a refactor behind its entry point breaks the suite. Import the package by name instead."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/repo/readme.test.ts"},"region":{"startLine":15}}}],"partialFingerprints":{"codehealthFindingId/v1":"707be4b447ceae33fc850e88ca89edbb83e31111870ee106acfd8aa14f220b6f"}},{"ruleId":"R11","level":"warning","message":{"text":"Boundary violation [package:test-cross-package-internals]: tests/repo/whatsapp-optin.test.ts:13 reaches past another workspace package\u0027s public entry into its internals with a relative path (../../packages/channels/src/whatsapp-baileys/client.js) \u2014 the test is coupled to a file layout that package makes no promise about, so a refactor behind its entry point breaks the suite. Import the package by name instead."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/repo/whatsapp-optin.test.ts"},"region":{"startLine":13}}}],"partialFingerprints":{"codehealthFindingId/v1":"5711a8240bbe0632b0fb661480e07e298e4c3ee04aaaaf8bcc97b8659cf61f70"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function #answer (cyclomatic 188, cognitive 388): #answer has cyclomatic complexity 188 and cognitive complexity 388; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/test/support/control-plane.ts"},"region":{"startLine":279}}}],"partialFingerprints":{"codehealthFindingId/v1":"9e3bd14f8579950237155328be68707e7a5b59dc76aa1d21adf001b79b0cb42c"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function run (cyclomatic 132, cognitive 225): run has cyclomatic complexity 132 and cognitive complexity 225; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/cli.ts"},"region":{"startLine":350}}}],"partialFingerprints":{"codehealthFindingId/v1":"162b4dee7eecd4d203a5e5dd30bb351652ed629c2ef783bd9e5f9c1826cca229"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function handle (cyclomatic 62, cognitive 42): handle has cyclomatic complexity 62 and cognitive complexity 42; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/test/cli.test.ts"},"region":{"startLine":106}}}],"partialFingerprints":{"codehealthFindingId/v1":"6222c578e27e9b9f8b32111a6e7caaaf4635ac17397f5a44cee8cc85a06390c1"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function (anonymous) (cyclomatic 34, cognitive 29): (anonymous) has cyclomatic complexity 34 and cognitive complexity 29; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/api/test/guest-http.ts"},"region":{"startLine":48}}}],"partialFingerprints":{"codehealthFindingId/v1":"b3dcdce7e0d20bbe0761ba0939ffd5c58a2150f3226386b5cea563df45c6a6e0"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function #handle (cyclomatic 32, cognitive 38): #handle has cyclomatic complexity 32 and cognitive complexity 38; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/telegram/fake-bot-api.ts"},"region":{"startLine":317}}}],"partialFingerprints":{"codehealthFindingId/v1":"dc1918b8633f424bc004cb5bab78d23d7dcdd4bb255b75698c7f6deec6d865c3"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function TaskDrawer (cyclomatic 27, cognitive 23): TaskDrawer has cyclomatic complexity 27 and cognitive complexity 23; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/tasks/task-drawer.tsx"},"region":{"startLine":41}}}],"partialFingerprints":{"codehealthFindingId/v1":"dc186178e2dd3df37c651f6d15909fbc23f34abedc886c310bf86bb2af6d7467"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function UsageTab (cyclomatic 25, cognitive 24): UsageTab has cyclomatic complexity 25 and cognitive complexity 24; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/computer/usage-tab.tsx"},"region":{"startLine":84}}}],"partialFingerprints":{"codehealthFindingId/v1":"463efdfe7bc60dde0bc8ca92638cd8516c5ac12ce3b4d4ac2ad2700a63afe718"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function NeedsYou (cyclomatic 25, cognitive 19): NeedsYou has cyclomatic complexity 25 and cognitive complexity 19; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/inbox/NeedsYou.tsx"},"region":{"startLine":127}}}],"partialFingerprints":{"codehealthFindingId/v1":"cfe3f1eb1964a017437eedfc4425562674ebc770deb6dc5b4827d9e48e2aa292"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function applyLiveEvent (cyclomatic 24, cognitive 23): applyLiveEvent has cyclomatic complexity 24 and cognitive complexity 23; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/dot-live.ts"},"region":{"startLine":65}}}],"partialFingerprints":{"codehealthFindingId/v1":"b672137956218e3fa8ee42af5f186d3326241fa27c39816f20e8abd8b17786a5"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function acquirePidLock (cyclomatic 23, cognitive 36): acquirePidLock has cyclomatic complexity 23 and cognitive complexity 36; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/src/process.ts"},"region":{"startLine":118}}}],"partialFingerprints":{"codehealthFindingId/v1":"6d5b7cb9073ae3d1377eeea554acbaee60fff08e469f9ab6e97e66b50ed0772c"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function QrConnect (cyclomatic 23, cognitive 20): QrConnect has cyclomatic complexity 23 and cognitive complexity 20; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/channels/qr-connect.tsx"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"5965104f8306af8aec11f7b71929bd87c82a552183558676f34b1761ead9072d"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function readDirectory (cyclomatic 22, cognitive 22): readDirectory has cyclomatic complexity 22 and cognitive complexity 22; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/iso/test/iso-reader.ts"},"region":{"startLine":110}}}],"partialFingerprints":{"codehealthFindingId/v1":"152f3b59b4eec211f08c28bf64965909d464b1e43f0995a0cb835907552a7f62"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function stream (cyclomatic 19, cognitive 37): stream has cyclomatic complexity 19 and cognitive complexity 37; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/sdk/src/client.ts"},"region":{"startLine":475}}}],"partialFingerprints":{"codehealthFindingId/v1":"53dad07f13b650b09da15fdb25be26a5580777564c5dac2e32c918b152d6810f"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function startLocked (cyclomatic 19, cognitive 30): startLocked has cyclomatic complexity 19 and cognitive complexity 30; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/vm-manager.ts"},"region":{"startLine":525}}}],"partialFingerprints":{"codehealthFindingId/v1":"72c432d8b890ac11bc1cd838e8791afaaa03083906c2e13f79d7efb8926f07a5"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function startServer (cyclomatic 19, cognitive 18): startServer has cyclomatic complexity 19 and cognitive complexity 18; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/api/src/start.ts"},"region":{"startLine":92}}}],"partialFingerprints":{"codehealthFindingId/v1":"65e72ba458aab6c0f2c1537389726c3adff3d4f4481af2a0cd01eec6a0a99239"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function (anonymous) (cyclomatic 19, cognitive 18): (anonymous) has cyclomatic complexity 19 and cognitive complexity 18; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/scheduler.ts"},"region":{"startLine":728}}}],"partialFingerprints":{"codehealthFindingId/v1":"73b3560f3c5aeb6c2cd2da9f30601ad56e4794d346fdb28c1ab8e58ec97d4628"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function DotHeader (cyclomatic 19, cognitive 18): DotHeader has cyclomatic complexity 19 and cognitive complexity 18; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/dot/DotHeader.tsx"},"region":{"startLine":27}}}],"partialFingerprints":{"codehealthFindingId/v1":"e57cdd5ebbc45ebbf1f001f3cb605aca6c2b108f0458a3e7358c6977ec1ab4aa"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function FilesTab (cyclomatic 19, cognitive 17): FilesTab has cyclomatic complexity 19 and cognitive complexity 17; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/computer/files-tab.tsx"},"region":{"startLine":41}}}],"partialFingerprints":{"codehealthFindingId/v1":"629ae9058e284b25fdd875a1881d81a4b7250ce7430174ff0aabc1dc250364c1"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function ApprovalCard (cyclomatic 19, cognitive 17): ApprovalCard has cyclomatic complexity 19 and cognitive complexity 17; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/elements/approval-card.tsx"},"region":{"startLine":48}}}],"partialFingerprints":{"codehealthFindingId/v1":"1f48b30adb76ca0a308533a481e0ba30c4a48ec0e452adb61252b5ec93e09113"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function events (cyclomatic 18, cognitive 34): events has cyclomatic complexity 18 and cognitive complexity 34; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/guest-client.ts"},"region":{"startLine":382}}}],"partialFingerprints":{"codehealthFindingId/v1":"16058e94158d8399e294ae41a3736899e1c2afc674a5f39a0383c7826f80c981"}},{"ruleId":"R3","level":"warning","message":{"text":"apps/scheduler/src/scheduler.ts: 860 lines of code: apps/scheduler/src/scheduler.ts has 860 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/scheduler.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"bf9247e2fe3b42f3005c0cd0a5b0b51e107313c0ca04c25e265a041c2c5b9e41"}},{"ruleId":"R3","level":"warning","message":{"text":"apps/scheduler/src/lifecycle.ts: 822 lines of code: apps/scheduler/src/lifecycle.ts has 822 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/lifecycle.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"df18ded573cc4b3f002d058bac950954486e90796cfc2b5d1ef8885a73830403"}},{"ruleId":"R3","level":"warning","message":{"text":"apps/scheduler/src/testing.ts: 804 lines of code: apps/scheduler/src/testing.ts has 804 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/testing.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"cefd1aaa789fea4423d5ca24aada64a66e51ed1856692cf8fc92dc5484e619b1"}},{"ruleId":"R3","level":"warning","message":{"text":"apps/vm-manager/src/vm-manager.ts: 798 lines of code: apps/vm-manager/src/vm-manager.ts has 798 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/vm-manager.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"833935634c9a20b68381a2e9dfacdfabdb053434c575707cd3290a8fc1419a16"}},{"ruleId":"R3","level":"warning","message":{"text":"apps/cli/src/cli.ts: 719 lines of code: apps/cli/src/cli.ts has 719 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/cli.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"cde00dd253df90638b18580f5aea32ff49375999eeb8c8286e85c0dd5c0e7776"}},{"ruleId":"R3","level":"warning","message":{"text":"packages/channels/src/hub.ts: 575 lines of code: packages/channels/src/hub.ts has 575 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/hub.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"22a00388aef30d7241ac4526001e6a729f8dd7a6054cf101018bc6ed7c82efba"}},{"ruleId":"R3","level":"warning","message":{"text":"packages/shared/src/protocol.ts: 499 lines of code: packages/shared/src/protocol.ts has 499 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/src/protocol.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"b1fcb623ebed821f22662f6ce431568cd5d82f74af388eb10672d7810d6f258b"}},{"ruleId":"R3","level":"warning","message":{"text":"packages/iso/src/writer.ts: 495 lines of code: packages/iso/src/writer.ts has 495 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/iso/src/writer.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"e5bf81aaf85ff5a201d62d1be185da28c941584a8a2954c6cb71baa7e1e82fbf"}},{"ruleId":"R3","level":"warning","message":{"text":"packages/sdk/src/client.ts: 476 lines of code: packages/sdk/src/client.ts has 476 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/sdk/src/client.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"36a1d7a72d3b21b29be514f980deefa34eb7fa1d910a47e0b6dd23a5c06d0d13"}},{"ruleId":"R3","level":"warning","message":{"text":"packages/shared/src/config.ts: 464 lines of code: packages/shared/src/config.ts has 464 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/src/config.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"b4a779fc25b240a38c68fbf2046edcd3c5755de4d62f0c66f5582254fefaa074"}},{"ruleId":"R3","level":"warning","message":{"text":"apps/vm-manager/src/guest-client.ts: 446 lines of code: apps/vm-manager/src/guest-client.ts has 446 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/guest-client.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ca047f3eb7ccff4060c6518bbb48bbba7e7c086db9576cb422ef9ba07df0e724"}},{"ruleId":"R3","level":"warning","message":{"text":"apps/api/src/server.ts: 441 lines of code: apps/api/src/server.ts has 441 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/api/src/server.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"3d41507f753965c2ea7f68d5f9d844a6a7ee1186936622dfe94f8a3c42653531"}},{"ruleId":"R3","level":"warning","message":{"text":"packages/shared/src/events.ts: 412 lines of code: packages/shared/src/events.ts has 412 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/shared/src/events.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"fc25a1a8b7752dc2b59f90559588931fa70b87f65614efbc77985b46500cbbd4"}},{"ruleId":"R3","level":"warning","message":{"text":"packages/channels/src/telegram/fake-bot-api.ts: 404 lines of code: packages/channels/src/telegram/fake-bot-api.ts has 404 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/telegram/fake-bot-api.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"40080d6dba1cf4a066ad19434daf556c427880727d4edf9a373a6ef714a57578"}},{"ruleId":"R4","level":"warning","message":{"text":"This test file cannot be loaded: apps/scheduler/test/upgrade.test.ts:18 imports \u0027./fixtures/upgrade/\u0027, which names no file in this repository \u2014 and no rule in its .gitignore chain could cover one, so no build writes it either. The import throws as the runner collects this file, so none of its test cases run and nothing it was written to verify is verified. Restore the missing module or delete the test. It is excluded from the reachability measured above, because a file that cannot load reaches nothing."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/test/upgrade.test.ts"},"region":{"startLine":18}}}],"partialFingerprints":{"codehealthFindingId/v1":"241175f6d03784cd225fa8c7dc679e3e4f20b90e0ff247ef329f01d79d1bca17"}},{"ruleId":"R4","level":"warning","message":{"text":"This test file cannot be loaded: apps/vm-manager/test/seed.test.ts:86 imports \u0027../../../virtualization/cloud-init/\u0027, which names no file in this repository \u2014 and no rule in its .gitignore chain could cover one, so no build writes it either. The import throws as the runner collects this file, so none of its test cases run and nothing it was written to verify is verified. Restore the missing module or delete the test. It is excluded from the reachability measured above, because a file that cannot load reaches nothing."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/test/seed.test.ts"},"region":{"startLine":86}}}],"partialFingerprints":{"codehealthFindingId/v1":"10f274a5ee64b11d9d2f4665df79764e53e24dbc2cfd525717567648bab553b7"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/iso/scripts/kernel-check.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"fb5c707ac6102ed7e9f21594329bd6ef4c2de5c77693cf1c2d7197b4dc1dacf2"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/main.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"50e0891819bfd3bd002a53e571f58c4a698708792e090cd221a12896bd72a48b"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/layout.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"de38569b440c2f97255ea74388677768bdf3714ea7e6f9fe7ed2c2f8bcfdf6d3"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/scripts/standalone.mjs"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"699366ee1cb044853bed4f325a1e2955c5ca904a7079b55b9ccbb37fd0c02f8b"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/not-found.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"94edf404fc20c7add5b09cdac0f8cc219c12afdd4116bb338d17149e0d62ece2"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/dots/[id]/layout.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"5a8bd3c9a895b2d8e52cf22c086a2d23443ddcff1a25e699394bf5e292daf7cf"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/scripts/build.mjs"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"905131e07c0c70616526bd001c297a3156c586ef41f7e9246f4a096e29f0a5ab"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/dots/[id]/computer/page.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"edbb1e5b1ee12e534933e7430711a09fbea677d59337c9633039bba0347aa2ae"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/dots/[id]/skills/page.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"6c425375e2583d9116c446ceab8c059f2ce7599eebb99347142e9e66f77e5135"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/dots/[id]/tasks/[taskId]/page.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"be81e7f39d2315d71c4aee27d4504f42269353f4e19775b07971a6e70151bb2a"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/instrumentation.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"9d90a3f06b0d0f4f9b889ca7fab0f50b8be43ea6b60a2f1876bbcf99a45cdf1e"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/dots/[id]/activity/page.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"a9047ddff8aca6439654fcc7e5682cf696da0797f89e94e898560d388ebbcf69"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/dots/[id]/channels/page.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"010827570f66028b08664f37730e6c18a19887b4db18550052c3dbd282dfce2e"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/dots/[id]/chat/page.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"967fcf9c57001a6b85968b2bb329701afcbc2a3fd2c03d280253d9f8ebcc32bc"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/dots/[id]/settings/page.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"eebf6a43414aec53847738e1182251250a69e9a1d2d3aba7547d974f83da42e0"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/dots/[id]/tasks/page.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"9f25a9c2ba59d4d7beb031b21b281db447f618d912ef6665322f25a957a35a5d"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/new/page.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ecb6fa601f5cce24bb9e3ee456ee2a044990033d8bb51c4874d8557a2061fdd9"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/page.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"8ab9a1caddbd63472b96787cfd5964ef251aeb93170912c52c33c35b02f3d93b"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/settings/page.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"bdb5cde4e7dee29fce5a1bda07498278645fa818092e6f10ab4549ead2bcf784"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/dots/[id]/timeline/page.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"6d460e8e50cdffdae629debbe3d285f281411c456476e3d9b2baa24e683c4561"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/dots/[id]/page.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"c9492893b4e9c2167b89f57d1fdc506225f8885ec9ad6954b70ece2f90be84cc"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/(app)/dots/[id]/tasks/layout.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"98897a12f43c0f5f147bd69159bbf7d5624d9ba1f1a21b357113d92b00d2ebdd"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/index.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"2343edcffe8cc73de70d40382093d782202b1b3c4d0882dfb9e270c4c53d7a4c"}},{"ruleId":"R6","level":"warning","message":{"text":"The declared test suite includes a file that cannot be loaded: This repository declares test tooling, and the \u2713 above records that declaration \u2014 but apps/scheduler/test/upgrade.test.ts and 1 other test file(s) in this workspace cannot be loaded at all: it imports a module that names no file in this repository, so the runner throws while collecting it and none of its cases execute. The wiring is present and the suite it points at does not run as written, which is why the tooling tick must not be read as a statement that the tests pass. Fix the unloadable file(s) \u2014 each one is reported with its failing import under Test Coverage \u2014 then the declared script exercises what it claims to."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/test/upgrade.test.ts"},"region":{"startLine":18}}}],"partialFingerprints":{"codehealthFindingId/v1":"8a8800801f71a8f8b5da53bebb53a56a684ba95fce4509bee096cabf91257f73"}},{"ruleId":"R7","level":"note","message":{"text":"Unused private field \u0027async\u0027: Nothing in its class reads or assigns this private field (for a constructor parameter property: it is stored and never read), and no string key or test reaches it by name. Remove it, or use it where it was meant to take effect."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/guest-client.ts"},"region":{"startLine":423}}}],"partialFingerprints":{"codehealthFindingId/v1":"547fda975a8fd6f1b23ea4dc5130f4a54ce10bfecd658d9785c15700880abb90"}},{"ruleId":"R7","level":"note","message":{"text":"Unused module-local declaration \u0027secondsAgo\u0027: This top-level declaration is not exported and its name occurs nowhere else in its module \u2014 not called, read, typed against, re-exported or named by a string. Nothing outside the module can reach a non-exported binding, so this is the whole search: remove it, or use it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/test/computer-page.test.tsx"},"region":{"startLine":56}}}],"partialFingerprints":{"codehealthFindingId/v1":"7791964cde65e059afbab6ab682e61a1fd24b2cc1f46e0887996917d72df8253"}},{"ruleId":"R8","level":"error","message":{"text":"Unlisted import \u0027pg\u0027: Imported but not declared in any reachable package.json \u2014 installs work only by hoisting accident."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/test/upgrade.test.ts"},"region":{"startLine":13}}}],"partialFingerprints":{"codehealthFindingId/v1":"bd8df42e00ba3761be8ea73730424bdf5a557484db07a533239bc887fb0361c8"}},{"ruleId":"R8","level":"warning","message":{"text":"Unlisted import \u0027baileys\u0027: Imported only as a TYPE and declared in no reachable package.json. The import is erased at compile time, so nothing is installed and no runtime resolution depends on it \u2014 but type-checking a clean clone will fail. Declare the typings it resolves through (or the package itself) in the owning package.json."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/test-optin/auth-state.test.ts"},"region":{"startLine":9}}}],"partialFingerprints":{"codehealthFindingId/v1":"8785175060ddad48ade521bffa88697996168f2e95a4ab2e82fc246b0dc83c05"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060!request.installQemu \u0026\u0026 !request.enableAccelerator\u0060 appears character-identically in 2 files \u2014 apps/cli/src/setup/install.ts, apps/cli/src/setup/setup.ts. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/setup/install.ts"},"region":{"startLine":171}}}],"partialFingerprints":{"codehealthFindingId/v1":"b7916092f31a198d6cc40c82670ea240a61df26ba003bdbcf19618cf54419bc3"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060computer.stop_reason === \u0022user\u0022 \u0026\u0026 computer.next_automation_at !== null\u0060 appears character-identically in 2 files \u2014 apps/cli/src/cli.ts, apps/web/src/lib/computer.ts. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/cli.ts"},"region":{"startLine":239}}}],"partialFingerprints":{"codehealthFindingId/v1":"e5e98395ae8ec8da38aa3f272a7326b375760c2293d7b9c6160b7e013cd1a9e0"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060error instanceof ApiError \u0026\u0026 error.code === COMPUTER_STOPPED\u0060 appears character-identically in 2 files \u2014 apps/cli/src/cli.ts, apps/web/src/lib/computer.ts. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/cli.ts"},"region":{"startLine":572}}}],"partialFingerprints":{"codehealthFindingId/v1":"b7ffac4fa7cefa975feb95aa6b736c7b7170945c6c1c79581020a4236aa3701b"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060frame.state === \u0022linked\u0022 || frame.state === \u0022failed\u0022\u0060 appears character-identically in 2 files \u2014 apps/web/src/components/channels/qr-connect.tsx, packages/channels/src/link.ts. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/channels/qr-connect.tsx"},"region":{"startLine":76}}}],"partialFingerprints":{"codehealthFindingId/v1":"fc61a914f5e810efe4a4be69668cc280397f3b990b8d899f006a2d1883c1a546"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060status === \u0022RUNNING\u0022 || status === \u0022WAITING_APPROVAL\u0022\u0060 appears character-identically in 2 files \u2014 apps/web/src/lib/computer.ts, apps/web/src/lib/task-view.ts. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/computer.ts"},"region":{"startLine":145}}}],"partialFingerprints":{"codehealthFindingId/v1":"cc8e0e56774ebed208eed26e72f4d23cd0620a13ffedba9716845731920df357"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060task.scheduled_at !== null \u0026\u0026 new Date(task.scheduled_at).getTime() \u003E now\u0060 appears character-identically in 2 files \u2014 apps/web/src/components/tasks/task-card.tsx, apps/web/src/lib/task-view.ts. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/tasks/task-card.tsx"},"region":{"startLine":96}}}],"partialFingerprints":{"codehealthFindingId/v1":"69e9eccd4919c6c5c68e1098e1c9bdcd67769cb55277203e55ae735722a67e7f"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060typeof value !== \u0022string\u0022 || value === \u0022\u0022\u0060 appears character-identically in 2 files \u2014 guest/image-builder/src/pins.ts, packages/channels/src/hub.ts. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/image-builder/src/pins.ts"},"region":{"startLine":63}}}],"partialFingerprints":{"codehealthFindingId/v1":"0bdaf167c96a294b09f396533e40398daf4c770750cd05edffce052f2d7421a8"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060typeof value === \u0022number\u0022 || typeof value === \u0022boolean\u0022\u0060 appears character-identically in 2 files \u2014 apps/web/src/lib/approval-view.ts, apps/web/src/lib/events/view.ts. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/approval-view.ts"},"region":{"startLine":187}}}],"partialFingerprints":{"codehealthFindingId/v1":"572f12b9725a7f76b88cc0240fd757818a49f09079f11e77125c8ebe230017d6"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060isinstance(left, str) and isinstance(right, str)\u0060 appears character-identically in 2 files \u2014 invisible_engine_dots/nanobot/agent/context.py, invisible_engine_dots/nanobot/agent/context_governance.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/context.py"},"region":{"startLine":94}}}],"partialFingerprints":{"codehealthFindingId/v1":"2a1cff8cbf17114ad408ec45198d1725a9ca64f585a4ca10a4e15beeef06d54a"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060isinstance(result, ToolResult) and result.is_error\u0060 appears character-identically in 2 files \u2014 invisible_engine_dots/nanobot/agent/tools/registry.py, invisible_engine_dots/nanobot/dots/browser.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/registry.py"},"region":{"startLine":13}}}],"partialFingerprints":{"codehealthFindingId/v1":"fe7df42c4619b12eb0aa18598726bcccf9b973e755ed0b3493d1dbcff206742c"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060not isinstance(name, str) or re.fullmatch(MCP_SERVER_NAME_PATTERN, name) is None\u0060 appears character-identically in 2 files \u2014 invisible_engine_dots/nanobot/dots/mcp_servers.py, invisible_engine_dots/nanobot/dots/protocol.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/mcp_servers.py"},"region":{"startLine":196}}}],"partialFingerprints":{"codehealthFindingId/v1":"4af43b388260f0c1f4f75eff9d9ca0f1d0e840abdbaa18fea7a48b2975836003"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060task is not None and task.status == \u0022running\u0022\u0060 appears character-identically in 2 files \u2014 invisible_engine_dots/nanobot/dots/engine.py, invisible_engine_dots/nanobot/dots/transcript_outbox.py. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/engine.py"},"region":{"startLine":795}}}],"partialFingerprints":{"codehealthFindingId/v1":"166984b317ed5698f5cf2103eed35720024aa6ddb17a5d1db1ab5b673e1d1d3e"}},{"ruleId":"X17","level":"warning","message":{"text":"Recursive walk over a caller-supplied document has no depth cap: \u0060toYaml\u0060 is exported, takes a document from its caller (line 107) and hands it to \u0060emit\u0060, which calls itself at line 77 (\u0060emit\u0060) with a piece of \u0060value\u0060 (and at line 90) \u2014 and nowhere in \u0060emit\u0060 is there a depth parameter, a descent counter, or any other cap. The walk therefore spends one stack frame per LEVEL of the value it is handed, so the nesting of the caller\u0027s document \u2014 not this code \u2014 decides how deep the stack goes. JavaScript sets no limit of its own on that nesting: \u0060JSON.parse\u0060 accepts any depth, so a 100,000-byte body \u2014 inside Express\u0027s default 100kb limit \u2014 parses to 50,000 levels, and a walk like this one throws \u0060RangeError: Maximum call stack size exceeded\u0060 long before it reaches the bottom. Wherever that throw lands, the work fails: a request errors, and a walk running outside any \u0060try\u0060 \u2014 an event handler, a timer, a promise nobody awaits \u2014 takes the Node process down with every other request in flight. Thread a depth argument through \u0060emit\u0060 and reject the value past a fixed maximum, or rewrite the descent with an explicit stack."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/yaml.ts"},"region":{"startLine":77}}}],"partialFingerprints":{"codehealthFindingId/v1":"ce9e007b9bada22e94b600ca95dce17f55918803a8d13a9b4e7e7c27c1ecd887"}},{"ruleId":"X17","level":"warning","message":{"text":"Recursive walk over a caller-supplied document has no depth cap: \u0060validate_json_schema_value\u0060 is public and takes \u0060val: Any\u0060 from its caller, and it calls itself at line 118 (\u0060self.validate_json_schema_value\u0060) with a piece of \u0060val\u0060 (and at line 123, line 139) \u2014 and nowhere in \u0060validate_json_schema_value\u0060 is there a depth parameter, a descent counter, or any other cap. The walk therefore spends one stack frame per LEVEL of the value it is handed, so the nesting of the caller\u0027s document \u2014 not this code \u2014 decides how deep the stack goes. Python\u0027s parsers accept far more nesting than its stack allows: \u0060json.loads\u0060 turns 3,000 bytes of brackets into 1,500 levels and \u0060xml.etree.ElementTree\u0060 parses tens of thousands, while a walk like this one raises \u0060RecursionError\u0060 once it passes the interpreter\u0027s default limit of 1,000 frames. Wherever that exception lands, the work fails: a request errors, and outside any \u0060try\u0060 the worker or the program exits with it. Raising \u0060sys.setrecursionlimit\u0060 only moves the number the document has to beat. Thread a depth argument through \u0060validate_json_schema_value\u0060 and reject the value past a fixed maximum, or rewrite the descent with an explicit stack."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/base.py"},"region":{"startLine":118}}}],"partialFingerprints":{"codehealthFindingId/v1":"d24739714a82b0020bc9cea50367fe5f88648ac96673fed5d2b72feb71a39c8c"}},{"ruleId":"X17","level":"warning","message":{"text":"Recursive walk over a caller-supplied document has no depth cap: \u0060canonical_arguments\u0060 is public, takes a document from its caller (line 970) and hands it to \u0060_whole_numbers_as_integers\u0060, which calls itself at line 986 (\u0060_whole_numbers_as_integers\u0060) with a piece of \u0060value\u0060 (and at line 988) \u2014 and nowhere in \u0060_whole_numbers_as_integers\u0060 is there a depth parameter, a descent counter, or any other cap. The walk therefore spends one stack frame per LEVEL of the value it is handed, so the nesting of the caller\u0027s document \u2014 not this code \u2014 decides how deep the stack goes. Python\u0027s parsers accept far more nesting than its stack allows: \u0060json.loads\u0060 turns 3,000 bytes of brackets into 1,500 levels and \u0060xml.etree.ElementTree\u0060 parses tens of thousands, while a walk like this one raises \u0060RecursionError\u0060 once it passes the interpreter\u0027s default limit of 1,000 frames. Wherever that exception lands, the work fails: a request errors, and outside any \u0060try\u0060 the worker or the program exits with it. Raising \u0060sys.setrecursionlimit\u0060 only moves the number the document has to beat. Thread a depth argument through \u0060_whole_numbers_as_integers\u0060 and reject the value past a fixed maximum, or rewrite the descent with an explicit stack."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/dots/store.py"},"region":{"startLine":986}}}],"partialFingerprints":{"codehealthFindingId/v1":"06139c45088559ee144a6bc8875c8c7524a41cf7bb430ead97a4a6e114437ee7"}},{"ruleId":"X17","level":"warning","message":{"text":"Recursive walk over a caller-supplied document has no depth cap: \u0060sanitize_surrogates_deep\u0060 is public and takes \u0060value: Any\u0060 from its caller, and it calls itself at line 72 (\u0060sanitize_surrogates_deep\u0060) with a piece of \u0060value\u0060 (and at line 81, line 88) \u2014 and nowhere in \u0060sanitize_surrogates_deep\u0060 is there a depth parameter, a descent counter, or any other cap. The walk therefore spends one stack frame per LEVEL of the value it is handed, so the nesting of the caller\u0027s document \u2014 not this code \u2014 decides how deep the stack goes. Python\u0027s parsers accept far more nesting than its stack allows: \u0060json.loads\u0060 turns 3,000 bytes of brackets into 1,500 levels and \u0060xml.etree.ElementTree\u0060 parses tens of thousands, while a walk like this one raises \u0060RecursionError\u0060 once it passes the interpreter\u0027s default limit of 1,000 frames. Wherever that exception lands, the work fails: a request errors, and outside any \u0060try\u0060 the worker or the program exits with it. Raising \u0060sys.setrecursionlimit\u0060 only moves the number the document has to beat. Thread a depth argument through \u0060sanitize_surrogates_deep\u0060 and reject the value past a fixed maximum, or rewrite the descent with an explicit stack."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/utils/helpers.py"},"region":{"startLine":72}}}],"partialFingerprints":{"codehealthFindingId/v1":"7ebcdf25829c6d4f2f925c6c19f048f07bed6d18102a216000e969106c6eb48d"}},{"ruleId":"X2","level":"note","message":{"text":"Not all functions that make a request accept a context.Context or an AbortSignal: Only 5/6 functions that make a cancellable request (fetch, axios, ky, ofetch; net/http, net.Dial) accept a context.Context or an AbortSignal or pass one on, so a request keeps running after whatever wanted it has given up \u2014 a page navigated away from, a cancelled request, a shutdown, an expired deadline. Take a \u0060signal\u0060 (Go: \u0060ctx context.Context\u0060) and hand it to the request; where nothing could ever cancel the call, omitting it is a deliberate choice \u2014 judge against how the function is used."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"577196fe89725f9b0e6c2faf89eceb8eb245919bd44e4439e0b0d649c1ee1c53"}},{"ruleId":"X2","level":"warning","message":{"text":"Async function without AbortSignal: dotPageTitle: \u0060dotPageTitle\u0060 awaits \u0060fetch(\u2026)\u0060 but neither accepts an AbortSignal nor passes one on, so its caller cannot stop the request once it has started. Accept \u0060{ signal }\u0060 and pass it through: \u0060fetch(url, { signal })\u0060."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/dot-title.ts"},"region":{"startLine":14}}}],"partialFingerprints":{"codehealthFindingId/v1":"dcf7bbec47d93e71ad8a6c8a45ee2982be2af9ab5d8ae648ea2b02afd24649f7"}},{"ruleId":"X24","level":"warning","message":{"text":"Untrusted text written into markup unescaped: \u0060THEME_BOOTSTRAP\u0060 is text this program did not author, and it is written into the text of an element through \u0060dangerouslySetInnerHTML\u0060 with nothing encoding it for that place. Whoever controls the value controls the markup: it can close the element or attribute it sits in and open a script of its own. Encode it for HTML at this site, render it through the framework\u0027s escaping output, or sanitise it if it must stay markup."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/app/layout.tsx"},"region":{"startLine":26}}}],"partialFingerprints":{"codehealthFindingId/v1":"c69988f346bd6dc42e1c16c0778a3ead3d7085c004f6ca568c1afa7e8e5b0c49"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/api/src/database.ts"},"region":{"startLine":30}}}],"partialFingerprints":{"codehealthFindingId/v1":"442f6344ee47f2cf0fbaeeacef6f1eea08ea05af7378c6fa9791162d6b6265d8"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/api/src/database.ts"},"region":{"startLine":41}}}],"partialFingerprints":{"codehealthFindingId/v1":"01470a785492ba7e965375ce51289c99bb2bd2624a813dbc794d12b76bd3efb2"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/cli/src/setup/qemu-pin.ts"},"region":{"startLine":59}}}],"partialFingerprints":{"codehealthFindingId/v1":"e4b2e77c28cefcf178c8d9c77a7fb2ab9b0f783c7239973193b71f2f5916645d"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/support.ts"},"region":{"startLine":15}}}],"partialFingerprints":{"codehealthFindingId/v1":"27ea4813e365eb9d257d363984b19afbd88abef916ca23cca14f94c3298d9094"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/support.ts"},"region":{"startLine":48}}}],"partialFingerprints":{"codehealthFindingId/v1":"5b459f5ee66a8eb4d81e14626fd9fab3b7a6d0849a41c4f0f1110bf848369b1e"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/scheduler.ts"},"region":{"startLine":137}}}],"partialFingerprints":{"codehealthFindingId/v1":"3bb594025e7998b52748af4c6809ba05cb4f98bfc9fd86492eb489ad5940e36b"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/scheduler.ts"},"region":{"startLine":189}}}],"partialFingerprints":{"codehealthFindingId/v1":"ecc3693c1f108e13f420dfc590ff284b0a77ca19e772ec7a1536a497a71c24a2"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/lifecycle.ts"},"region":{"startLine":257}}}],"partialFingerprints":{"codehealthFindingId/v1":"c781dfe1026792a0c57d061b6e4ff27feb6b746854fdf8ee046f58100653e49f"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/lifecycle.ts"},"region":{"startLine":342}}}],"partialFingerprints":{"codehealthFindingId/v1":"9e0c3bf6873462c1471e84d29431a0a9e455e4dc7f864d38aa6addd67a6c5822"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/scheduler/src/lifecycle.ts"},"region":{"startLine":602}}}],"partialFingerprints":{"codehealthFindingId/v1":"4ee909784274a57b2239420dd4eb1dc9141723765807f95419f6b3342aa15224"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/vm-manager.ts"},"region":{"startLine":214}}}],"partialFingerprints":{"codehealthFindingId/v1":"d7cc0901b276de5ab02d691a00979dc89f4936ffe1f4455a3aa56679a9f8b273"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/process-file.ts"},"region":{"startLine":28}}}],"partialFingerprints":{"codehealthFindingId/v1":"f60f19990b01eb9c8dd0e2a605d11bddfcf01e2d01dbd5aff90a7c9190ed0e8d"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/guest-client.ts"},"region":{"startLine":116}}}],"partialFingerprints":{"codehealthFindingId/v1":"edb20ac2b0346ede71a1ba479d3d8257cc63ed9afad1c96cb008396b20177a1c"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/guest-client.ts"},"region":{"startLine":476}}}],"partialFingerprints":{"codehealthFindingId/v1":"d543ecdde5c4dc66a6009798b2ee4797499495c78a4fd7c8b2de15c72b01b0ba"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/copy-button.tsx"},"region":{"startLine":25}}}],"partialFingerprints":{"codehealthFindingId/v1":"073bc2c8fd8588f521a175f8856749b288f9dc9e9e6415fb6626835fd5af6f4d"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/home/last-activity.tsx"},"region":{"startLine":33}}}],"partialFingerprints":{"codehealthFindingId/v1":"2895ea150ad46c2e4eff46264f3be390c601410850f4518cdd420d0dc1ad2842"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.then(\u2026, () =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/components/shell/attention.tsx"},"region":{"startLine":79}}}],"partialFingerprints":{"codehealthFindingId/v1":"a822dee6885a29c730ae5238be14c574be756bec7170586ca25ca16728df950f"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/use-visible-interval.ts"},"region":{"startLine":35}}}],"partialFingerprints":{"codehealthFindingId/v1":"f708ff1d8930fd2a2cafb721c57e0174fcce0d182e6d5e059a2e454205639b35"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/theme.ts"},"region":{"startLine":20}}}],"partialFingerprints":{"codehealthFindingId/v1":"0cb54fd4070bfd7da9e7588ef1876177090f3e560e128c5edf967e68b51329fb"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/draft.ts"},"region":{"startLine":30}}}],"partialFingerprints":{"codehealthFindingId/v1":"7facafa4d4255176bbba19354afa564cb1f1b665befdca59c495776c1c6e77b0"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/dismissed.ts"},"region":{"startLine":32}}}],"partialFingerprints":{"codehealthFindingId/v1":"02e153358a87ebea5601a1be5ce4f61e58b717a4862fcde67a0a320ab1576dd5"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060if err := fs.Parse(args); err != nil\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/dot-agentd/cmd/dot-agentd/relay.go"},"region":{"startLine":69}}}],"partialFingerprints":{"codehealthFindingId/v1":"74ad6df6e3846f36c552388e7b63e364c94db69f910c8ffd817254c71c1aec1d"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060if err != nil\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/dot-agentd/internal/agentd/proc.go"},"region":{"startLine":174}}}],"partialFingerprints":{"codehealthFindingId/v1":"eee41d38603ad81bf51ab1cf488cfb8e79ab249e0a73010c5aad0cb731680301"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060if waitErr != nil\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/dot-agentd/internal/agentd/proc.go"},"region":{"startLine":232}}}],"partialFingerprints":{"codehealthFindingId/v1":"f1a72d1ed8868214015f7e0292535d6f203e2331735118e7756417165803f97a"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060catch\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"guest/image-builder/src/serial.ts"},"region":{"startLine":84}}}],"partialFingerprints":{"codehealthFindingId/v1":"45d2d348cf3628760059cf1d7f9cf6485fe3aaaccd055b0a4744ae9229f9bbd2"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/registry.py"},"region":{"startLine":148}}}],"partialFingerprints":{"codehealthFindingId/v1":"a1ef9e8a6c42dbbe078fc0b791cdf83872edaf3a3f4ecb35bff864e5264067fa"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/mcp.py"},"region":{"startLine":307}}}],"partialFingerprints":{"codehealthFindingId/v1":"67759b0b93277713891732c3ac334b61deef9c0369a5cc41d83d35bebabf6de8"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/cron/service.py"},"region":{"startLine":66}}}],"partialFingerprints":{"codehealthFindingId/v1":"8df29b7563bad6243d5b674c712a9dccfd03f94ca15a356057edfc031d36d210"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/openai_compat_provider.py"},"region":{"startLine":794}}}],"partialFingerprints":{"codehealthFindingId/v1":"665bed023ca992b3b5cb7b4d49633d9aafbe019be2e7f68c3ef0033300858e0f"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/base.py"},"region":{"startLine":91}}}],"partialFingerprints":{"codehealthFindingId/v1":"4c9548423b9815ca70f278aa857773eb8bd1fd25a7cab6a49ab56274d40e77e9"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/base.py"},"region":{"startLine":119}}}],"partialFingerprints":{"codehealthFindingId/v1":"c7c9aee492babb090b28cf70f066f61091565c3ae6d9ef903e6e86d8648e26a3"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/base.py"},"region":{"startLine":726}}}],"partialFingerprints":{"codehealthFindingId/v1":"9292fb3290f0f7179b629bbf1cd8ff7876ffb3893d17621f4fd0fedc79ecf23e"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (caught, then discarded): \u0060except Exception\u0060 takes every exception and records none of it \u2014 the body neither logs it, rethrows it, nor even names it, so the failure is discarded as completely as by an empty catch and only the substituted value survives. Log it through whatever this codebase already uses to report problems, narrow the catch to the exception this call can actually raise, or say in a comment on the catch why the failure genuinely cannot matter."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/base.py"},"region":{"startLine":1021}}}],"partialFingerprints":{"codehealthFindingId/v1":"678327e74d90ddf6d270bbea3202d8f4b3f1fa3053e218b2d2a4155c07263162"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/utils/helpers.py"},"region":{"startLine":332}}}],"partialFingerprints":{"codehealthFindingId/v1":"919765b1dfacaaadb75e4ae6fa1689cf179d38e0687380233128e55364a138e1"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/utils/helpers.py"},"region":{"startLine":479}}}],"partialFingerprints":{"codehealthFindingId/v1":"1a2e525dc338a3bde863cce839608d17c55480a8d3a20d2bc0f340986f48e855"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/utils/helpers.py"},"region":{"startLine":536}}}],"partialFingerprints":{"codehealthFindingId/v1":"ac692477d699982bb735f1791385b02a1fa8bfdf7a9a653b89ed797d07c0a32e"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/runner.ts"},"region":{"startLine":85}}}],"partialFingerprints":{"codehealthFindingId/v1":"ba109edc83a84324e18b4f3338996367befdd5b4f247769170a99f54d3351f1b"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/runner.ts"},"region":{"startLine":91}}}],"partialFingerprints":{"codehealthFindingId/v1":"c1ed85d1dc54870d5bab1224bf168191e1c1e891ab1a75db0a16b5b435220082"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/runner.ts"},"region":{"startLine":117}}}],"partialFingerprints":{"codehealthFindingId/v1":"f40f53e73b8727e81d584909bfeaf50a635349a9ff5f269c19747cc3ac135f13"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/runner.ts"},"region":{"startLine":237}}}],"partialFingerprints":{"codehealthFindingId/v1":"a90b102fd1d39e1f453e2061907a16bde7c08fd21b96ae4f6cda23eadc41bb1e"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/telegram/telegram.ts"},"region":{"startLine":224}}}],"partialFingerprints":{"codehealthFindingId/v1":"ee3467b163832cf395fa97608ec9e45da79299f45f37d4e1cc15881ae91cb4dd"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/whatsapp-baileys/whatsapp.ts"},"region":{"startLine":94}}}],"partialFingerprints":{"codehealthFindingId/v1":"55e0863316e0ad590034e061bebb4fd415252e5c9948c42317f427bac366fa5c"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/whatsapp-baileys/whatsapp.ts"},"region":{"startLine":118}}}],"partialFingerprints":{"codehealthFindingId/v1":"a5bf7b1807ae155347ae98e2bb31dc4fd1ac47bd8064e165b366be9c5896cca1"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/whatsapp-baileys/whatsapp.ts"},"region":{"startLine":119}}}],"partialFingerprints":{"codehealthFindingId/v1":"145695c4ca4137f047c71c1220c4053e366a7909255c4a4529fc5a06691270bd"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/whatsapp-baileys/whatsapp.ts"},"region":{"startLine":152}}}],"partialFingerprints":{"codehealthFindingId/v1":"09df0ff9cb19bc03c876fdb1d432ac8da43236122f5a87dafa298baf50f678f5"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/whatsapp-baileys/whatsapp.ts"},"region":{"startLine":154}}}],"partialFingerprints":{"codehealthFindingId/v1":"68ff0cae92f371ddc5109e912a1425779fdfdf439f10ba9693f4f2a7c81eb1a4"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/channels/src/whatsapp-baileys/auth-state.ts"},"region":{"startLine":145}}}],"partialFingerprints":{"codehealthFindingId/v1":"b8c605ed16cef78cb260b18d61393990bf533df3f8c31b01ac90980a840bb561"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/sdk/src/client.ts"},"region":{"startLine":348}}}],"partialFingerprints":{"codehealthFindingId/v1":"23a21968c7d332c8c39dff3c08a7e00c8188437debe645b95aa44cfccba3ecb1"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): \u0060.catch(() =\u003E {})\u0060 handles the rejection by doing nothing \u2014 the failure is discarded with no log and no rethrow, and the chain carries on as if the work succeeded. Log it through whatever this codebase already uses to report problems, hand it to a caller that can (\u0060next(error)\u0060, a returned rejection), or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/sdk/src/client.ts"},"region":{"startLine":503}}}],"partialFingerprints":{"codehealthFindingId/v1":"4c4b1ebdb2dd8e8312fcc9cd8e61cd47ede00cc9fad9541420e05f1b6244fd9a"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"packages/sdk/src/client.ts"},"region":{"startLine":546}}}],"partialFingerprints":{"codehealthFindingId/v1":"65f5dda0d847c03cc468f5ab3130ab30d0aab4a75eb95029c5e53203bc0b24e8"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warn\u0060 at line 133 is handed a template literal with \u0060${\u2026}\u0060 substitutions as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, and every occurrence reads as a different message. Pass the values beside a constant message instead: \u0060logger.warn({ orderId, status }, \u0027order status updated\u0027)\u0060 for pino and bunyan, \u0060logger.warn(\u0027order status updated\u0027, { orderId, status })\u0060 for winston. If these calls go through a NestJS \u0060Logger\u0060 routed into pino, nestjs-pino forwards an object first argument as fields in the same way."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/api/src/start.ts"},"region":{"startLine":133}}}],"partialFingerprints":{"codehealthFindingId/v1":"102449901086232d117cbb74267ece7f7f3c5230a948be97117e1c025018848b"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060warn\u0060 at line 204 is handed a template literal with \u0060${\u2026}\u0060 substitutions as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, and every occurrence reads as a different message. Pass the values beside a constant message instead: \u0060logger.warn({ orderId, status }, \u0027order status updated\u0027)\u0060 for pino and bunyan, \u0060logger.warn(\u0027order status updated\u0027, { orderId, status })\u0060 for winston. If these calls go through a NestJS \u0060Logger\u0060 routed into pino, nestjs-pino forwards an object first argument as fields in the same way."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/api/src/start.ts"},"region":{"startLine":204}}}],"partialFingerprints":{"codehealthFindingId/v1":"7c49d0a29b1f213cca9e8ea04df5c83c0f7a8c9795b8de63fb2bbe072342f7d0"}},{"ruleId":"X4","level":"note","message":{"text":"Interpolated log message defeats structured logging: \u0060info\u0060 at line 208 is handed a template literal with \u0060${\u2026}\u0060 substitutions as its message, so the logger receives one finished string \u2014 the values in it cannot be queried, filtered or aggregated as fields, and every occurrence reads as a different message. Pass the values beside a constant message instead: \u0060logger.info({ orderId, status }, \u0027order status updated\u0027)\u0060 for pino and bunyan, \u0060logger.info(\u0027order status updated\u0027, { orderId, status })\u0060 for winston. If these calls go through a NestJS \u0060Logger\u0060 routed into pino, nestjs-pino forwards an object first argument as fields in the same way."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/api/src/start.ts"},"region":{"startLine":208}}}],"partialFingerprints":{"codehealthFindingId/v1":"db83242abb6dc35467e199d8983e9492ad85600a1992bcdf25dc78840f613a33"}},{"ruleId":"X5","level":"note","message":{"text":"Null assertions (\u0060!\u0060) reduce the strict null checking score: ~2.6 \u0060!\u0060 null assertions per 1k TypeScript source lines \u2014 96 assertion(s) across the 36899 source line(s) of the 340 TypeScript file(s) read, which is the only code the operator asserts anything in (a \u0060!\u0060 in a \u0060.js\u0060 file is not this operator and was not counted, and one in a file whose null checking is off silences nothing). Densest: apps/scheduler/src/testing.ts (11), apps/vm-manager/src/guest-client.ts (7), apps/vm-manager/src/process-file.ts (5). Each one tells the compiler to trust the author about null, suppressing the very diagnostic \u0060strictNullChecks\u0060 exists to produce."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"edb251d0f8dd1deb75ff6fa12d145c3d5c948a70b0aaf8da052107c857335979"}},{"ruleId":"X7","level":"note","message":{"text":"Silent fallback default in catch: \u0060_redact_url\u0060 swallows every exception into \u0060return \u0027\u003Credacted-url\u003E\u0027\u0060 \u2014 a data error becomes a silent behavior change with no trail. Log the failure or let it raise. If that constant is the correct answer rather than a stand-in for a value that could not be read, say so in a comment on the handler or in the docstring, and the row stops firing."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/mcp.py"},"region":{"startLine":307}}}],"partialFingerprints":{"codehealthFindingId/v1":"99cfa2fc529fc01b3d06493fb7339d63b6b3cff3583a5764b82a8e0ed972e783"}},{"ruleId":"X7","level":"note","message":{"text":"Silent fallback default on parse failure: \u0060_entry_mtime\u0060 returns \u00600.0\u0060 when \u0060ValueError\u0060 is raised, with no log or raise \u2014 a malformed value silently becomes that default. Log the input or fail validation. If that constant is the correct answer rather than a stand-in for a value that could not be read, say so in a comment on the handler or in the docstring, and the row stops firing."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/agent/tools/search.py"},"region":{"startLine":113}}}],"partialFingerprints":{"codehealthFindingId/v1":"16528633959e899e8577aced4b9e7b7314758ac6a215ae510f5c531073781ab3"}},{"ruleId":"X7","level":"note","message":{"text":"Silent fallback default in catch: \u0060tool_arguments_object_for_replay\u0060 swallows every exception into \u0060return {}\u0060 \u2014 a data error becomes a silent behavior change with no trail. Log the failure or let it raise. If that constant is the correct answer rather than a stand-in for a value that could not be read, say so in a comment on the handler or in the docstring, and the row stops firing."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"invisible_engine_dots/nanobot/providers/base.py"},"region":{"startLine":119}}}],"partialFingerprints":{"codehealthFindingId/v1":"a2997e6f81dcefaf67ce7858b3929757a16f5fa4db6b7d7cf1535fd6971e5398"}},{"ruleId":"X7","level":"note","message":{"text":"Silent fallback default in catch: \u0060readRange\u0060 swallows every exception into \u0060return \u0022\u0022\u0060 \u2014 a data error becomes a silent behavior change with no trail. Log the failure or let it raise. If that constant is the correct answer rather than a stand-in for a value that could not be read, say so in a comment on the handler or in the docstring, and the row stops firing."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/vm-manager/src/vm-manager.ts"},"region":{"startLine":677}}}],"partialFingerprints":{"codehealthFindingId/v1":"21af5f3c562c67679cd6a3844b39df93f5179a2ea4ec7856212ede92500bacdd"}},{"ruleId":"X7","level":"note","message":{"text":"Silent fallback default in catch: \u0060readDraft\u0060 swallows every exception into \u0060return \u0022\u0022\u0060 \u2014 a data error becomes a silent behavior change with no trail. Log the failure or let it raise. If that constant is the correct answer rather than a stand-in for a value that could not be read, say so in a comment on the handler or in the docstring, and the row stops firing."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/draft.ts"},"region":{"startLine":20}}}],"partialFingerprints":{"codehealthFindingId/v1":"1350743ed6125c0d0d7a253e15d33896266a0e1badc4185b641435315bc2f30a"}},{"ruleId":"X7","level":"note","message":{"text":"Silent fallback default in catch: \u0060storedPreference\u0060 swallows every exception into \u0060return \u0022system\u0022\u0060 \u2014 a data error becomes a silent behavior change with no trail. Log the failure or let it raise. If that constant is the correct answer rather than a stand-in for a value that could not be read, say so in a comment on the handler or in the docstring, and the row stops firing."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"apps/web/src/lib/theme.ts"},"region":{"startLine":34}}}],"partialFingerprints":{"codehealthFindingId/v1":"f8cf1e645600ca53ec67a452a92b73ecddd4acb98f8ab341e4e192b0c17baf91"}}],"taxonomies":[{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d","organization":"MITRE","informationUri":"https://cwe.mitre.org/","isComprehensive":false,"shortDescription":{"text":"The MITRE Common Weakness Enumeration (CWE)."},"taxa":[{"id":"CWE-1032","guid":"5f21e517-68aa-a650-9a25-5771ef024637","name":"OWASP Top Ten \u2014 Security Misconfiguration category","shortDescription":{"text":"OWASP Top Ten \u2014 Security Misconfiguration category"},"helpUri":"https://cwe.mitre.org/data/definitions/1032.html"},{"id":"CWE-1059","guid":"a2381a08-60f6-9554-a8b8-f3018cfaaca5","name":"Insufficient Technical Documentation","shortDescription":{"text":"Insufficient Technical Documentation"},"helpUri":"https://cwe.mitre.org/data/definitions/1059.html"},{"id":"CWE-116","guid":"c0134ca8-adc7-6959-bd17-5253a265d101","name":"Improper Encoding or Escaping of Output","shortDescription":{"text":"Improper Encoding or Escaping of Output"},"helpUri":"https://cwe.mitre.org/data/definitions/116.html"},{"id":"CWE-1333","guid":"11a336ce-63de-c45c-845e-29ca1e8df13d","name":"CWE-1333","shortDescription":{"text":"CWE-1333"},"helpUri":"https://cwe.mitre.org/data/definitions/1333.html"},{"id":"CWE-1357","guid":"e4d2e772-757e-0a5c-bd7d-77052949d866","name":"Reliance on Insufficiently Trustworthy Component","shortDescription":{"text":"Reliance on Insufficiently Trustworthy Component"},"helpUri":"https://cwe.mitre.org/data/definitions/1357.html"},{"id":"CWE-1395","guid":"800e09e7-c11a-8654-9fa6-86f398995fed","name":"Dependency on Vulnerable Third-Party Component","shortDescription":{"text":"Dependency on Vulnerable Third-Party Component"},"helpUri":"https://cwe.mitre.org/data/definitions/1395.html"},{"id":"CWE-16","guid":"659db3ea-affc-8453-8add-c1218fbfcb92","name":"Configuration","shortDescription":{"text":"Configuration"},"helpUri":"https://cwe.mitre.org/data/definitions/16.html"},{"id":"CWE-22","guid":"b68d9ca7-bdde-d057-a6cc-9f8b1e739552","name":"Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)","shortDescription":{"text":"Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/22.html"},{"id":"CWE-242","guid":"5c147e5c-be37-b051-9928-764ef5a8f3d3","name":"CWE-242","shortDescription":{"text":"CWE-242"},"helpUri":"https://cwe.mitre.org/data/definitions/242.html"},{"id":"CWE-259","guid":"ae9ad959-fbb6-9d5e-892d-3dca66da0b69","name":"Use of Hard-coded Password","shortDescription":{"text":"Use of Hard-coded Password"},"helpUri":"https://cwe.mitre.org/data/definitions/259.html"},{"id":"CWE-276","guid":"4e27da05-61af-1d5c-aeb5-9f56b6ede3e3","name":"Incorrect Default Permissions","shortDescription":{"text":"Incorrect Default Permissions"},"helpUri":"https://cwe.mitre.org/data/definitions/276.html"},{"id":"CWE-310","guid":"97174724-2e33-8455-b7cd-5c3258d1cb8f","name":"CWE-310","shortDescription":{"text":"CWE-310"},"helpUri":"https://cwe.mitre.org/data/definitions/310.html"},{"id":"CWE-319","guid":"7af97476-9f0d-4458-9163-3d2043918a1a","name":"Cleartext Transmission of Sensitive Information","shortDescription":{"text":"Cleartext Transmission of Sensitive Information"},"helpUri":"https://cwe.mitre.org/data/definitions/319.html"},{"id":"CWE-327","guid":"e51910ff-67b5-3c51-aa3d-92837d9eab90","name":"Use of a Broken or Risky Cryptographic Algorithm","shortDescription":{"text":"Use of a Broken or Risky Cryptographic Algorithm"},"helpUri":"https://cwe.mitre.org/data/definitions/327.html"},{"id":"CWE-353","guid":"09d7e902-d4ee-f05d-ae6c-0a1554d0c18f","name":"Missing Support for Integrity Check","shortDescription":{"text":"Missing Support for Integrity Check"},"helpUri":"https://cwe.mitre.org/data/definitions/353.html"},{"id":"CWE-494","guid":"b8a65e0d-e459-4a55-a931-fc1136482375","name":"Download of Code Without Integrity Check","shortDescription":{"text":"Download of Code Without Integrity Check"},"helpUri":"https://cwe.mitre.org/data/definitions/494.html"},{"id":"CWE-506","guid":"401d6455-56e3-0552-9a39-f77461673e3f","name":"Embedded Malicious Code","shortDescription":{"text":"Embedded Malicious Code"},"helpUri":"https://cwe.mitre.org/data/definitions/506.html"},{"id":"CWE-522","guid":"71fb233e-ce6a-ae57-9419-ef8373540b09","name":"Insufficiently Protected Credentials","shortDescription":{"text":"Insufficiently Protected Credentials"},"helpUri":"https://cwe.mitre.org/data/definitions/522.html"},{"id":"CWE-552","guid":"3492436b-eca2-9c54-9ba3-5dade427c903","name":"Files or Directories Accessible to External Parties","shortDescription":{"text":"Files or Directories Accessible to External Parties"},"helpUri":"https://cwe.mitre.org/data/definitions/552.html"},{"id":"CWE-73","guid":"43703bfd-8c43-f15f-9cba-58e5f73ea7e9","name":"External Control of File Name or Path","shortDescription":{"text":"External Control of File Name or Path"},"helpUri":"https://cwe.mitre.org/data/definitions/73.html"},{"id":"CWE-732","guid":"1da27e8f-b330-7650-ab63-bd61953eae5d","name":"Incorrect Permission Assignment for Critical Resource","shortDescription":{"text":"Incorrect Permission Assignment for Critical Resource"},"helpUri":"https://cwe.mitre.org/data/definitions/732.html"},{"id":"CWE-77","guid":"332c8ade-6612-9f56-a06b-d8d90b1a8750","name":"Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)","shortDescription":{"text":"Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/77.html"},{"id":"CWE-78","guid":"2e31ceaf-c7ae-2e5e-9661-cfb1362789cf","name":"Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)","shortDescription":{"text":"Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/78.html"},{"id":"CWE-79","guid":"fd45580b-e8c4-fc5e-8c2f-aa8fab0b4dbf","name":"Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)","shortDescription":{"text":"Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/79.html"},{"id":"CWE-798","guid":"5e8f057d-fee3-995a-a0cb-9fc5b0d174d1","name":"Use of Hard-coded Credentials","shortDescription":{"text":"Use of Hard-coded Credentials"},"helpUri":"https://cwe.mitre.org/data/definitions/798.html"},{"id":"CWE-829","guid":"13c33925-97fb-5a5e-b40c-56d328b8a4d7","name":"Inclusion of Functionality from Untrusted Control Sphere","shortDescription":{"text":"Inclusion of Functionality from Untrusted Control Sphere"},"helpUri":"https://cwe.mitre.org/data/definitions/829.html"},{"id":"CWE-89","guid":"6d08fdad-37eb-c150-bbf0-d7d946863407","name":"Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)","shortDescription":{"text":"Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/89.html"},{"id":"CWE-937","guid":"16f316ae-415c-b354-a59b-1f7905f756e9","name":"Using Components with Known Vulnerabilities","shortDescription":{"text":"Using Components with Known Vulnerabilities"},"helpUri":"https://cwe.mitre.org/data/definitions/937.html"},{"id":"CWE-94","guid":"75e7f50c-6c2f-dd52-bf40-bf6c52b861fd","name":"Improper Control of Generation of Code (\u0027Code Injection\u0027)","shortDescription":{"text":"Improper Control of Generation of Code (\u0027Code Injection\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/94.html"}]},{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61","version":"2025","organization":"OWASP Foundation","informationUri":"https://top10.owasp.org/2025/","isComprehensive":false,"shortDescription":{"text":"The OWASP Top 10:2025 web application security risks."},"taxa":[{"id":"A01:2025","guid":"df693558-c822-0452-8f7b-4d53cb6bcc59","name":"Broken Access Control","shortDescription":{"text":"Broken Access Control"},"helpUri":"https://top10.owasp.org/2025/A01_2025-Broken_Access_Control/"},{"id":"A02:2025","guid":"668dee9e-41bc-6354-97d0-fdf8f40c50c1","name":"Security Misconfiguration","shortDescription":{"text":"Security Misconfiguration"},"helpUri":"https://top10.owasp.org/2025/A02_2025-Security_Misconfiguration/"},{"id":"A03:2025","guid":"168e227c-7735-2e57-bc6e-997affe644c5","name":"Software Supply Chain Failures","shortDescription":{"text":"Software Supply Chain Failures"},"helpUri":"https://top10.owasp.org/2025/A03_2025-Software_Supply_Chain_Failures/"},{"id":"A04:2025","guid":"6a9f5bfd-1a56-6453-beec-a7eff0ba3007","name":"Cryptographic Failures","shortDescription":{"text":"Cryptographic Failures"},"helpUri":"https://top10.owasp.org/2025/A04_2025-Cryptographic_Failures/"},{"id":"A05:2025","guid":"87e86033-3231-8458-8e4a-5cb82743553a","name":"Injection","shortDescription":{"text":"Injection"},"helpUri":"https://top10.owasp.org/2025/A05_2025-Injection/"},{"id":"A06:2025","guid":"491554d7-b8e4-9652-91a9-53700dc92ece","name":"Insecure Design","shortDescription":{"text":"Insecure Design"},"helpUri":"https://top10.owasp.org/2025/A06_2025-Insecure_Design/"},{"id":"A07:2025","guid":"334ddd78-539d-d35c-83dd-253647eb7eaf","name":"Authentication Failures","shortDescription":{"text":"Authentication Failures"},"helpUri":"https://top10.owasp.org/2025/A07_2025-Authentication_Failures/"},{"id":"A08:2025","guid":"84b0c297-710e-9a5f-9335-936ecb260c36","name":"Software or Data Integrity Failures","shortDescription":{"text":"Software or Data Integrity Failures"},"helpUri":"https://top10.owasp.org/2025/A08_2025-Software_or_Data_Integrity_Failures/"}]},{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35","organization":"OWASP Foundation","informationUri":"https://owasp.org/www-project-top-10-ci-cd-security-risks/","isComprehensive":false,"shortDescription":{"text":"The OWASP Top 10 CI/CD Security Risks."},"taxa":[{"id":"CICD-SEC-3","guid":"458c83a6-ebf7-cf55-8cc3-b4d949bbf271","name":"Dependency Chain Abuse","shortDescription":{"text":"Dependency Chain Abuse"},"helpUri":"https://owasp.github.io/www-project-top-10-ci-cd-security-risks/CICD-SEC-03-Dependency-Chain-Abuse"},{"id":"CICD-SEC-6","guid":"f2ee2486-b260-2952-a41f-6b67fa713940","name":"Insufficient Credential Hygiene","shortDescription":{"text":"Insufficient Credential Hygiene"},"helpUri":"https://owasp.github.io/www-project-top-10-ci-cd-security-risks/CICD-SEC-06-Insufficient-Credential-Hygiene"},{"id":"CICD-SEC-8","guid":"b6b2dacf-a168-4957-876e-a8c73ee00eb0","name":"Ungoverned Usage of 3rd Party Services","shortDescription":{"text":"Ungoverned Usage of 3rd Party Services"},"helpUri":"https://owasp.github.io/www-project-top-10-ci-cd-security-risks/CICD-SEC-08-Ungoverned-Usage-of-3rd-Party-Services"},{"id":"CICD-SEC-9","guid":"b3d36727-0395-5b51-94c4-5e173d62eab3","name":"Improper Artifact Integrity Validation","shortDescription":{"text":"Improper Artifact Integrity Validation"},"helpUri":"https://owasp.github.io/www-project-top-10-ci-cd-security-risks/CICD-SEC-09-Improper-Artifact-Integrity-Validation"}]}],"properties":{"codehealthPublication":{"public":true,"notice":"This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings \u2014 which rule fired, in which file, on which line, and how to fix it \u2014 are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.","securityFindingsRedacted":63,"secretScannerRunsExcluded":0}},"redactionTokens":["A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."]}]}