MCP Observatory
47s ago Tracked 52,799 Last 47s ago 24h 2,818
github TypeScript analyzed 1c4189a

RadicalGitter/CodeConductor

github

Durable, provider-neutral orchestration and review evidence for isolated local and frontier coding agents.

maintainer
RadicalGitter
license
—
first seen
2026-08-24
last seen
2026-08-25
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 26 tools
transport stdio · http counts 26 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • apply_reconciliation_action
  • cancel_attempt
  • cancel_queued_job
  • enqueue_coding_job
  • enqueue_contract_sources
  • get_attempt
  • get_attempt_cleanup
  • get_queue_item
  • get_resource_policy
  • get_review_bundle
  • get_runtime_model_state
  • get_verification
  • list_contract_watches
  • list_queue
  • list_worker_adapters
  • plan_retention_gc
  • poll_contract_watches
  • read_attempt_artifact
  • reconcile_runtime
  • register_contract_watch
  • remove_attempt_workspace
  • retry_queued_job
  • scan_contract_sources
  • set_contract_watch
  • submit_coding_job
  • wait_for_attempt
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 1c4189a · analyzer v33 · 1w ago

skills & prompt files 1

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 112

filesystem 69

  • fs (weak) RadicalGitter-CodeConductor-1c4189a/scripts/conductor-contract-builder.ts :3 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/scripts/configure-local-kode.ts :1 import { access, mkdir, writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/scripts/gc.ts :1 import { readFile, writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/scripts/kode-parity-smoke.ts :9 } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/scripts/live-kode-canary.ts :2 import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/scripts/live-openai-canary.ts :2 import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/scripts/runtime-doctor.ts :1 import { access, readFile, statfs } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/scripts/runtime-mcp-smoke.ts :1 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/scripts/sandbox-canary.ts :1 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/contracts/provider-profile.ts :2 import { readFileSync } from "node:fs";
  • fs RadicalGitter-CodeConductor-1c4189a/src/contracts/resources.ts :2 import { readFileSync } from "node:fs";
  • fs RadicalGitter-CodeConductor-1c4189a/src/control-console/runtime.ts :1 import { readFile } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/model-service/manager.ts :2 import { mkdir, open, readFile, rename, rm, stat } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/model-service/settings-store.ts :2 import { mkdir, open, readFile, rename, rm } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/orchestrator/conductor.ts :9 } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/queue/queue-store.ts :2 import { mkdir, readFile, readdir, rename, rm, stat } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/reconcile/runtime-reconciler.ts :2 import { mkdir, readFile, rename, rm } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/retention/gc.ts :2 import { access, readFile, readdir, rm, stat } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/review/hash.ts :2 import { createReadStream } from "node:fs";
  • fs RadicalGitter-CodeConductor-1c4189a/src/review/packet.ts :1 import { readFile, readdir, stat } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/review/worker-profile.ts :1 import { stat } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/runtime/executable.ts :1 import { constants, accessSync, realpathSync, statSync } from "node:fs";
  • fs RadicalGitter-CodeConductor-1c4189a/src/runtime/process-guardian.mjs :2 import { closeSync, openSync, writeSync } from "node:fs";
  • fs RadicalGitter-CodeConductor-1c4189a/src/runtime/process-runner.ts :12 } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/src/sandbox/docker.ts :3 import { readFileSync } from "node:fs";
  • fs RadicalGitter-CodeConductor-1c4189a/src/sources/command-profiles.ts :1 import { readFileSync } from "node:fs";
  • fs RadicalGitter-CodeConductor-1c4189a/src/sources/service.ts :2 import { readFile } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/sources/watch-store.ts :1 import { mkdir, readFile, readdir, rename, rm } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/spec-builder.ts :1 import { readFile, writeFile } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/spec-intake.ts :2 import { readFile } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/storage/artifact-store.ts :10 } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/storage/transitions.ts :2 import { mkdir, readFile, readdir, rename, rm } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/verification/command-executor.ts :2 import { realpath } from "node:fs/promises";
  • fs RadicalGitter-CodeConductor-1c4189a/src/workers/kode.ts :5 import { realpathSync, statSync } from "node:fs";
  • fs RadicalGitter-CodeConductor-1c4189a/src/workers/openai-responses-runner.ts :11 } from "node:fs";
  • fs RadicalGitter-CodeConductor-1c4189a/src/workers/openai-responses.ts :1 import { readFileSync, statSync } from "node:fs";
  • fs RadicalGitter-CodeConductor-1c4189a/src/workspaces/git-workspace.ts :2 import { mkdir, readFile, realpath, rm, stat } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/adapters.test.ts :8 } from "node:fs";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/artifact-store.test.ts :2 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/cleanup-evidence.test.ts :3 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/control-console.test.ts :2 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/executable.test.ts :2 import { mkdtemp, rm, writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/fixtures/delayed-worker.ts :1 import { writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/fixtures/grandchild-canary.ts :1 import { writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/fixtures/lineage-worker.ts :1 import { readFile, writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/fixtures/mutate-protected-worker.ts :1 import { writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/fixtures/mutate-worker.ts :1 import { writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/fixtures/orphan-owner.ts :1 import { writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/fixtures/reconciliation-crash.ts :1 import { readFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/helpers.ts :3 import { mkdtemp, writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/mcp.test.ts :5 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/model-service.test.ts :2 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/openai-responses-adapter.test.ts :2 import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/openai-responses-runner.test.ts :8 } from "node:fs";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/orchestrator.test.ts :3 import { access, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/process-runner.test.ts :2 import { access, mkdtemp, readFile, rm } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/proposal-lineage.test.ts :2 import { access, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/provider-profile.test.ts :2 import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/queue.test.ts :3 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/reconcile.test.ts :12 } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/reconciliation-actions.test.ts :3 import { access, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/resource-budgets.test.ts :2 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/retention-gc.test.ts :3 import { access, appendFile, mkdtemp, readFile, rm } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/review-evidence.test.ts :2 import { copyFile, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/sandbox.test.ts :2 import { access, mkdtemp, rm, writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/source-contracts.test.ts :2 import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/spec-builder.test.ts :2 import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/transitions.test.ts :2 import { mkdtemp, readFile, rm } from "node:fs/promises";
  • fs (weak) RadicalGitter-CodeConductor-1c4189a/test/verification-integration.test.ts :2 import { access, mkdtemp, readFile, rm } from "node:fs/promises";

shell / exec 15

  • shell (weak) RadicalGitter-CodeConductor-1c4189a/scripts/kode-parity-smoke.ts :1 import { spawn } from "node:child_process";
  • shell (weak) RadicalGitter-CodeConductor-1c4189a/scripts/live-kode-canary.ts :1 import { spawn } from "node:child_process";
  • shell (weak) RadicalGitter-CodeConductor-1c4189a/scripts/live-openai-canary.ts :1 import { spawn } from "node:child_process";
  • shell RadicalGitter-CodeConductor-1c4189a/src/runtime/git.ts :1 import { spawn } from "node:child_process";
  • shell RadicalGitter-CodeConductor-1c4189a/src/runtime/process-guardian.mjs :1 import { spawn } from "node:child_process";
  • shell RadicalGitter-CodeConductor-1c4189a/src/runtime/process-runner.ts :1 import { spawn } from "node:child_process";
  • shell (weak) RadicalGitter-CodeConductor-1c4189a/src/sandbox/docker.ts :1 import { spawn } from "node:child_process";
  • shell (weak) RadicalGitter-CodeConductor-1c4189a/test/control-console.test.ts :306 const result = Bun.spawnSync({
  • shell (weak) RadicalGitter-CodeConductor-1c4189a/test/fixtures/child-tree.ts :9 Bun.spawn([process.execPath, grandchild, target], {
  • shell (weak) RadicalGitter-CodeConductor-1c4189a/test/fixtures/normal-exit-descendant.ts :1 import { spawn } from "node:child_process";
  • shell (weak) RadicalGitter-CodeConductor-1c4189a/test/helpers.ts :1 import { spawn } from "node:child_process";
  • shell (weak) RadicalGitter-CodeConductor-1c4189a/test/process-runner.test.ts :350 const owner = Bun.spawn([process.execPath, fixture, canary, identityPath], {
  • shell (weak) RadicalGitter-CodeConductor-1c4189a/test/queue.test.ts :2 import { spawn } from "node:child_process";
  • shell (weak) RadicalGitter-CodeConductor-1c4189a/test/reconcile.test.ts :527 const child = Bun.spawn(
  • shell (weak) RadicalGitter-CodeConductor-1c4189a/test/reconciliation-actions.test.ts :129 const child = Bun.spawn(

network 7

  • net (weak) RadicalGitter-CodeConductor-1c4189a/scripts/configure-local-kode.ts :19 const response = await fetch(`${endpoint}/models`, {
  • net (weak) RadicalGitter-CodeConductor-1c4189a/scripts/live-kode-canary.ts :41 const modelResponse = await fetch(`${endpoint}/models`);
  • net (weak) RadicalGitter-CodeConductor-1c4189a/scripts/runtime-doctor.ts :166 const response = await fetch(`${profile.baseURL}/models`, {
  • net RadicalGitter-CodeConductor-1c4189a/src/control-console/server.ts :7 } from "node:http";
  • net RadicalGitter-CodeConductor-1c4189a/src/control-console/ui.ts :46 async function json(url, init) { const response = await fetch(url, init); const text = await response.text(); let body; try { body = JSON.parse(text); } catch { body = { error: text || "Non-JSON respo
  • net RadicalGitter-CodeConductor-1c4189a/src/model-service/manager.ts :942 const response = await fetch(url, {
  • net (weak) RadicalGitter-CodeConductor-1c4189a/test/control-console.test.ts :107 const page = await fetch(consoleHost.queueUrl);

secrets 4

  • secrets (weak) RadicalGitter-CodeConductor-1c4189a/scripts/live-openai-canary.ts :15 const secret = process.env.OPENAI_API_KEY;
  • secrets (weak) RadicalGitter-CodeConductor-1c4189a/scripts/runtime-doctor.ts :21 process.env.CONDUCTOR_PROVIDER_PROFILES_FILE || process.env.OPENAI_API_KEY,
  • secrets RadicalGitter-CodeConductor-1c4189a/src/workers/defaults.ts :18 environment: { OPENAI_API_KEY: process.env.OPENAI_API_KEY },
  • secrets (weak) RadicalGitter-CodeConductor-1c4189a/test/openai-responses-adapter.test.ts :135 const previousKey = process.env.OPENAI_API_KEY;

tool registrations 26

  • plan_retention_gc RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :51
  • get_resource_policy RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :66
  • get_runtime_model_state RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :78
  • reconcile_runtime RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :90
  • apply_reconciliation_action RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :101
  • list_worker_adapters RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :117
  • submit_coding_job RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :128
  • enqueue_coding_job RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :144
  • scan_contract_sources RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :160
  • enqueue_contract_sources RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :172
  • register_contract_watch RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :188
  • list_contract_watches RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :204
  • set_contract_watch RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :215
  • poll_contract_watches RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :237
  • list_queue RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :255
  • get_queue_item RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :276
  • cancel_queued_job RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :287
  • retry_queued_job RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :303
  • get_attempt RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :319
  • get_verification RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :331
  • get_attempt_cleanup RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :344
  • get_review_bundle RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :357
  • read_attempt_artifact RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :373
  • wait_for_attempt RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :402
  • cancel_attempt RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :415
  • remove_attempt_workspace RadicalGitter-CodeConductor-1c4189a/src/mcp/server.ts :435

declared dependencies 5

  • @modelcontextprotocol/sdk@1.29.0
  • zod@4.4.3
  • @types/bun@1.3.14
  • prettier@3.9.4
  • typescript@6.0.3

perm:untrusted 1

  • untrusted (weak) RadicalGitter-CodeConductor-1c4189a/test/control-console.test.ts :118 const snapshot = await fetch(`${consoleHost.url}/api/v1/snapshot`).then(