Skip to content

feat: migrate from Python Claude Agent SDK to Vercel AI SDK v6 (TypeScript) #1891

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
AndyMik90 merged 96 commits into from
Mar 11, 2026

fix: resolve remaining TOCTOU alerts in roadmap, test, and bump-version

5c61a29
Select commit
Loading
Failed to load commit list.
Merged

feat: migrate from Python Claude Agent SDK to Vercel AI SDK v6 (TypeScript) #1891

fix: resolve remaining TOCTOU alerts in roadmap, test, and bump-version
5c61a29
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL completed Mar 11, 2026 in 5s

1 configuration not found

Warning: Code scanning may not have found all the alerts introduced by this pull request, because 1 configuration present on refs/heads/develop was not found:

Actions workflow (quality-security.yml)

  • ❓  /language:python

New alerts in code changed by this pull request

Security Alerts:

  • 37 medium

Other Alerts:

  • 8 warnings
  • 50 notes

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 99 in scripts/bump-version.js

See this annotation in the file changed.

Code scanning / CodeQL

Indirect uncontrolled command line Medium

This command depends on an unsanitized
command-line argument
Loading
.

Check warning on line 460 in apps/desktop/src/main/ipc-handlers/gitlab/spec-utils.ts

See this annotation in the file changed.

Code scanning / CodeQL

Network data written to file Medium

Write to file system depends on
Untrusted data
Loading
.

Check warning on line 441 in apps/desktop/src/main/ipc-handlers/gitlab/spec-utils.ts

See this annotation in the file changed.

Code scanning / CodeQL

Network data written to file Medium

Write to file system depends on
Untrusted data
Loading
.

Check warning on line 272 in apps/desktop/src/main/ipc-handlers/github/utils.ts

See this annotation in the file changed.

Code scanning / CodeQL

File data in outbound network request Medium

Outbound network request depends on
file data
Loading
.

Check warning on line 265 in apps/desktop/src/main/ipc-handlers/github/utils.ts

See this annotation in the file changed.

Code scanning / CodeQL

File data in outbound network request Medium

Outbound network request depends on
file data
Loading
.
Outbound network request depends on
file data
Loading
.
Outbound network request depends on
file data
Loading
.

Check warning on line 175 in apps/desktop/src/main/ipc-handlers/github/spec-utils.ts

See this annotation in the file changed.

Code scanning / CodeQL

Network data written to file Medium

Write to file system depends on
Untrusted data
Loading
.

Check warning on line 155 in apps/desktop/src/main/ipc-handlers/github/spec-utils.ts

See this annotation in the file changed.

Code scanning / CodeQL

Network data written to file Medium

Write to file system depends on
Untrusted data
Loading
.

Check warning on line 143 in apps/desktop/src/main/ipc-handlers/github/spec-utils.ts

See this annotation in the file changed.

Code scanning / CodeQL

Network data written to file Medium

Write to file system depends on
Untrusted data
Loading
.

Check warning on line 2421 in apps/desktop/src/main/ipc-handlers/github/pr-handlers.ts

See this annotation in the file changed.

Code scanning / CodeQL

Network data written to file Medium

Write to file system depends on
Untrusted data
Loading
.

Check warning on line 1650 in apps/desktop/src/main/ipc-handlers/github/pr-handlers.ts

See this annotation in the file changed.

Code scanning / CodeQL

Network data written to file Medium

Write to file system depends on
Untrusted data
Loading
.

Check warning on line 134 in apps/desktop/src/main/ipc-handlers/github/pr-handlers.ts

See this annotation in the file changed.

Code scanning / CodeQL

File data in outbound network request Medium

Outbound network request depends on
file data
Loading
.

Check warning on line 133 in apps/desktop/src/main/ipc-handlers/github/pr-handlers.ts

See this annotation in the file changed.

Code scanning / CodeQL

File data in outbound network request Medium

Outbound network request depends on
file data
Loading
.

Check warning on line 394 in apps/desktop/src/main/ipc-handlers/github/autofix-handlers.ts

See this annotation in the file changed.

Code scanning / CodeQL

Network data written to file Medium

Write to file system depends on
Untrusted data
Loading
.

Check warning on line 2192 in apps/desktop/src/main/claude-profile/usage-monitor.ts

See this annotation in the file changed.

Code scanning / CodeQL

File data in outbound network request Medium

Outbound network request depends on
file data
Loading
.
Outbound network request depends on
file data
Loading
.
Outbound network request depends on
file data
Loading
.
Outbound network request depends on
file data
Loading
.
Outbound network request depends on
file data
Loading
.

Check warning on line 1110 in apps/desktop/src/main/claude-profile/usage-monitor.ts

See this annotation in the file changed.

Code scanning / CodeQL

File data in outbound network request Medium

Outbound network request depends on
file data
Loading
.

Check warning on line 2097 in apps/desktop/src/main/claude-profile/credential-utils.ts

See this annotation in the file changed.

Code scanning / CodeQL

Network data written to file Medium

Write to file system depends on
Untrusted data
Loading
.

Check warning on line 1834 in apps/desktop/src/main/claude-profile/credential-utils.ts

See this annotation in the file changed.

Code scanning / CodeQL

Network data written to file Medium

Write to file system depends on
Untrusted data
Loading
.

Check warning on line 130 in apps/desktop/src/__tests__/setup.ts

See this annotation in the file changed.

Code scanning / CodeQL

Log injection Medium test

Log entry depends on a
user-provided value
Loading
.
Log entry depends on a
user-provided value
Loading
.

Check warning on line 99 in scripts/bump-version.js

See this annotation in the file changed.

Code scanning / CodeQL

Shell command built from environment values Medium

This shell command depends on an uncontrolled
absolute path
Loading
.

Check warning on line 341 in apps/desktop/src/renderer/components/github-prs/components/__tests__/PRDetail.cleanReview.test.ts

See this annotation in the file changed.

Code scanning / CodeQL

Useless comparison test Warning test

The condition 'selectedCount === 0' is always false.

Check warning on line 203 in apps/desktop/src/renderer/components/github-prs/components/__tests__/PRDetail.cleanReview.test.ts

See this annotation in the file changed.

Code scanning / CodeQL

Useless comparison test Warning test

The condition 'selectedCount === 0' is always false.

Check warning on line 281 in apps/desktop/src/renderer/components/ScreenshotCapture.tsx

See this annotation in the file changed.

Code scanning / CodeQL

Useless conditional Warning

This use of variable 'isLoading' always evaluates to false.

Check warning on line 243 in apps/desktop/src/main/terminal/pty-daemon.ts

See this annotation in the file changed.

Code scanning / CodeQL

Log injection Medium

Log entry depends on a
user-provided value
Loading
.

Check warning on line 173 in apps/desktop/src/main/terminal/pty-daemon.ts

See this annotation in the file changed.

Code scanning / CodeQL

Log injection Medium

Log entry depends on a
user-provided value
Loading
.

Check warning on line 360 in apps/desktop/src/main/task-state-manager.ts

See this annotation in the file changed.

Code scanning / CodeQL

Useless assignment to local variable Warning

The initial value of stateValue is unused, since it is always overwritten.