3.1

Adjusted Signal

3.1

Raw Pattern Score

100%

Time Factor

2026-10-26

Last Push

6.0K

Stars

TypeScript

Language

132.4K

Lines of Code

532

Files

197

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 7.4/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 151 finding(s).

Hallucinated Dependency & Supply Chain Risk 2.3/100 · LOW

Are imports declared and package/API names verified? 8 finding(s).

Agent Over-Engineering Ratio 8.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 132 finding(s).

PR Review Velocity Impact 11.9/100 · LOW

Which changes need focused human review? 197 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 6HIGH 0MEDIUM 43LOW 148

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 197 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators38 hits · 144 pts

Severity	File	Line	Snippet	Context
MEDIUM	src/agent/oauth/auth/providers/windsurf.ts	16	// ───────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/agent/oauth/auth/providers/windsurf.ts	18	// ───────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/agent/oauth/auth/providers/xiaomi-mimo.ts	13	// ───────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/agent/oauth/auth/providers/xiaomi-mimo.ts	16	// ───────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/agent/oauth/auth/providers/trae.ts	17	// ───────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/agent/oauth/auth/providers/trae.ts	19	// ───────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/agent/oauth/protocols/providers/capabilities.ts	29	// ── HOW TO ADD / UPDATE A MODEL ──────────────────────────────────────	COMMENT
MEDIUM	src/agent/oauth/protocols/providers/capabilities.ts	292	// ── Claude (4.6+ = adaptive thinking; older/haiku = budget) ──────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/providers/capabilities.ts	323	// ── OpenAI GPT-6.x (vision + thinking + web search) ──────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/providers/capabilities.ts	325	// ── OpenAI GPT-5.x (vision + thinking + web search) ──────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/providers/capabilities.ts	335	// ── OpenAI o-series (reasoning, vision) ──────────────────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/providers/capabilities.ts	340	// ── Grok (vision + Live Search) ──────────────────────────────────	COMMENT
MEDIUM	src/agent/oauth/protocols/providers/capabilities.ts	364	// ── Kimi (enabled→reasoning_effort; K2.7-code cannot disable) ─────	COMMENT
MEDIUM	src/agent/oauth/protocols/providers/capabilities.ts	389	// ── MiniMax (M3 = adaptive; M2.x cannot disable) ─────────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/providers/capabilities.ts	400	// ── Llama (4 = vision/1M; 3.x = text-only/128K) ──────────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/providers/capabilities.ts	403	// ── Mistral (Large 3 = vision/256K; codestral text) ──────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/providers/capabilities.ts	407	// ── Cohere (Command A Vision = vision; others text) ──────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/providers/capabilities.ts	410	// ── Perplexity (web search native) ───────────────────────────────	COMMENT
MEDIUM	src/agent/oauth/protocols/providers/capabilities.ts	422	// ── Others ───────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/executors/windsurf.ts	36	// ─── Model alias map (catalog name → Windsurf wire name) ─────────────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/executors/windsurf.ts	38	// ── Cognition SWE ───────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/executors/windsurf.ts	43	// ── Claude Opus 4.7 — effort-tiered ─────────────────────────────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/executors/windsurf.ts	50	// ── Claude Opus/Sonnet 4.6 ──────────────────────────────────────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/executors/windsurf.ts	57	// ── Claude 4.5 ──────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/executors/windsurf.ts	63	// ── GPT-5.5 ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/agent/oauth/protocols/executors/windsurf.ts	76	// ── GPT-5.4 ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/executors/windsurf.ts	92	// ── GPT-5.3-Codex ───────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/executors/windsurf.ts	102	// ── GPT-5.2 ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/executors/windsurf.ts	109	// ── GPT-5 ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/executors/windsurf.ts	111	// ── GPT-4.1 / 4o ────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/executors/windsurf.ts	115	// ── Gemini ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM⚡	src/agent/oauth/protocols/executors/windsurf.ts	125	// ── Others ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/agent/oauth/protocols/executors/windsurf.ts	136	// ─── Minimal protobuf encoder ────────────────────────────────────────────────	COMMENT
MEDIUM	src/agent/oauth/protocols/executors/windsurf.ts	178	// ─── Protobuf message builders ───────────────────────────────────────────────	COMMENT
MEDIUM	src/agent/oauth/protocols/executors/windsurf.ts	220	// ─── gRPC-web framing ────────────────────────────────────────────────────────	COMMENT
MEDIUM	src/agent/oauth/protocols/executors/windsurf.ts	231	// ─── Protobuf response decoder ───────────────────────────────────────────────	COMMENT
MEDIUM	src/agent/oauth/protocols/executors/windsurf.ts	365	// ─── OpenAI messages → Windsurf wire ─────────────────────────────────────────	COMMENT
MEDIUM	src/agent/oauth/protocols/executors/windsurf.ts	386	// ─── WindsurfExecutor ────────────────────────────────────────────────────────	COMMENT

Hyper-Verbose Identifiers94 hits · 94 pts

Severity	File	Line	Snippet	Context
LOW	webview-ui/shared/motionPreference.ts	58	export function initializeMotionPreference(): () => void {	CODE
LOW	src/ui/sidebar/storage.ts	15	export function workspaceStorageDirectory(context: vscode.ExtensionContext): string \| undefined {	CODE
LOW	src/context/scopedInstructions.ts	94	export async function resolveScopedInstructions(root: string, matchFiles: string[] = []): Promise<ScopedInstruction[]> {	CODE
LOW	src/context/workspaceContext.ts	119	export async function scopedInstructionsForPaths(matchFiles: string[] = []) {	CODE
LOW	src/stores/fileMutations.ts	23	export async function configureFileMutationStorage(directory: string): Promise<void> {	CODE
LOW	src/agent/oauth.ts	931	function antigravityCatalogIdentity(account: OAuthAccount): string {	CODE
LOW	src/agent/oauth.persistence.test.ts	53	function delayRotatedCredentialWrite() {	CODE
LOW	src/agent/messages.ts	46	function materializeMissingContext(steps: Step[]): Step[] {	CODE
LOW	src/agent/providerLimits.ts	14	export function defaultAnthropicMaxTokens(model: string, effort?: string): number {	CODE
LOW	src/agent/teams.ts	1157	export function withoutBuiltinTeamSubagents(subagents: SubagentDef[]): SubagentDef[] {	CODE
LOW	src/agent/execution.ts	22	export function configuredExecutionProfile(): ExecutionProfile {	CODE
LOW	src/agent/tools/browser.ts	119	export async function disposeAllBrowserSessions(): Promise<void> {	CODE
LOW	src/agent/oauth/antigravity.ts	440	export async function resolveAntigravityProject(token: string, options: {	CODE
LOW	src/agent/oauth/providerTransport.ts	303	export async function listProviderAdapterModels(providerId: string, credentials: ProviderCredentials, options: { baseUrl	CODE
LOW	src/agent/oauth/claude.ts	93	export function buildClaudeAuthorizationUrl(options: {	CODE
LOW	src/agent/oauth/claude.ts	137	export function buildClaudeMessagesRequest(accessToken: string, options: ClaudeMessagesOptions): {	CODE
LOW	src/agent/oauth/auth/kiroExternalIdp.ts	24	export function validateMicrosoftTokenEndpoint(rawEndpoint: unknown) {	CODE
LOW	src/agent/oauth/auth/kiroExternalIdp.ts	87	export function normalizeKiroExternalIdpAuth(rawAuth: AuthPayload \| string) {	CODE
LOW	src/agent/oauth/auth/kiroExternalIdp.ts	140	export function buildExternalIdpRefreshParams(refreshToken: string, providerSpecificData: AuthPayload = {}) {	CODE
LOW	src/agent/oauth/auth/providerHelpers.ts	58	function extractEmailFromAccessToken(accessToken: string) {	CODE
LOW	src/agent/oauth/auth/refresh/providers.ts	253	export function classifyOAuthRefreshError(errorText: string = "", status: number = 0) {	CODE
LOW	src/agent/oauth/auth/refresh/providers.ts	333	async function resolveKiroProfileArnPatch(providerSpecificData: AuthPayload, accessToken: string, refreshedArn: string \|	CODE
LOW	src/agent/oauth/auth/refresh/providers.ts	583	export async function refreshCodebuddyIntlToken(refreshToken: string, log?: AuthLogger) {	CODE
LOW	src/agent/oauth/auth/providers/windsurf.ts	62	async function fetchWindsurfRegisterUser(firebaseIdToken: string) {	CODE
LOW	src/agent/oauth/protocols/config/grokCli.ts	19	export function supportsGrokCliReasoningEffort(model: string) {	CODE
LOW	src/agent/oauth/protocols/config/kiroConstants.ts	75	export function normalizeKiroUpstreamModelId(model: string): string {	CODE
LOW	src/agent/oauth/protocols/config/kiroConstants.ts	129	export function applyKiroThinkingOverride(body: ProtocolRecord, override: ProtocolValue) {	CODE
LOW	src/agent/oauth/protocols/config/kiroConstants.ts	210	export function resolveKiroThinkingBudget(body: ProtocolRecord, headers: ProtocolValue, model: string) {	CODE
LOW	src/agent/oauth/protocols/config/kiroConstants.ts	270	function extractKiroGptEffortLevel(body: ProtocolRecord) {	CODE
LOW	src/agent/oauth/protocols/config/kiroConstants.ts	285	export function buildKiroAdditionalModelRequestFields(body: ProtocolRecord, effortPath = "output_config", model?: string	CODE
LOW	src/agent/oauth/protocols/config/kiroConstants.ts	322	export function supportsKiroAdditionalModelRequestFields(model: string) {	CODE
LOW	src/agent/oauth/protocols/config/kiroConstants.ts	329	export function buildKiroAdditionalModelRequestFieldsForModel(body: ProtocolRecord, model: string) {	CODE
LOW	src/agent/oauth/protocols/config/kiroConstants.ts	431	export function buildThinkingSystemPrefix(budget: number = KIRO_THINKING_BUDGET_DEFAULT) {	CODE
LOW	src/agent/oauth/protocols/config/providers.ts	22	export function resolveXiaomiTokenplanBaseUrl(credentials: ProtocolCredentials) {	CODE
LOW	src/agent/oauth/protocols/providers/capabilities.ts	83	export function capabilitiesFromServiceKind(kind: ProtocolValue) {	CODE
LOW	src/agent/oauth/protocols/providers/capabilities.ts	443	export function aggregateComboCapabilities(comboModels: ProtocolValue, comboLookup: ProtocolValue = null, _depth = 0) {	CODE
LOW	src/agent/oauth/protocols/utils/kiroSessionReplay.ts	119	export function clearKiroSessionReplayStore() {	CODE
LOW	src/agent/oauth/protocols/utils/cursorModels.ts	212	export function parseCursorAvailableModels(payload: ProtocolValue): ProtocolRecord[] {	CODE
LOW	src/agent/oauth/protocols/utils/cursorModels.ts	242	export function resolveAutoModelSelection(models: ProtocolValue): { modelId: string; matchedBy: string } \| null {	CODE
LOW	src/agent/oauth/protocols/utils/cursorProtobuf.ts	823	export function encodeMcpResultToolNotFound(name: ProtocolValue) {	CODE
LOW	src/agent/oauth/protocols/utils/sessionManager.ts	133	function extractAntigravitySession(body: ProtocolRecord) {	CODE
LOW	src/agent/oauth/protocols/shared/zedAuth.ts	58	export function encodeZedPrivateKeyVerifier(privateKeyPem: ProtocolValue) {	CODE
LOW	src/agent/oauth/protocols/shared/zedAuth.ts	61	export function decodeZedPrivateKeyVerifier(verifier: ProtocolValue) {	CODE
LOW	src/agent/oauth/protocols/shared/zedAuth.ts	199	export async function fetchZedAuthenticatedUser(credentials: ProtocolCredentials, options: ProtocolRecord = {}) {	CODE
LOW	src/agent/oauth/protocols/shared/mimoAccount.ts	79	async function readDesktopAccountCookies(): Promise<Record<string, string> \| null> {	CODE
LOW	src/agent/oauth/protocols/shared/mimoAccount.ts	278	export function invalidateMimoAccountCookieCache() {	CODE
LOW	src/agent/oauth/protocols/shared/clineAuth.ts	29	export function getClineAuthorizationHeader(token: ProtocolValue) {	CODE
LOW	src/agent/oauth/protocols/shared/qoder/contextTier.ts	86	export function estimateQoderPromptTokens({ system, messages, tools }: ProtocolValue = {}) {	CODE
LOW	src/agent/oauth/protocols/shared/qoder/attachments.ts	69	function extractUrlFromUploadResponse(json: ProtocolValue) {	CODE
LOW	src/agent/oauth/protocols/shared/qoder/attachments.ts	296	export async function rewriteQoderMessageAttachments(messages: ProtocolValue, { credentials, log, proxyOptions = null, s	CODE
LOW	src/agent/oauth/protocols/shared/qoder/constants.ts	221	export function getQoderStaticModelConfig(key: string): ProtocolRecord \| null {	CODE
LOW	src/agent/oauth/protocols/translator/formats/gemini.ts	54	export function convertOpenAIContentToParts(content: ProtocolValue) {	CODE
LOW	src/agent/oauth/protocols/translator/formats/gemini.ts	144	function removeUnsupportedKeywords(obj: ProtocolValue, keywords: ProtocolValue) {	CODE
LOW	src/agent/oauth/protocols/translator/formats/gemini.ts	179	function convertEnumValuesToStrings(obj: ProtocolValue) {	CODE
LOW	src/agent/oauth/protocols/translator/formats/gemini.ts	338	export function cleanJSONSchemaForAntigravity(schema: ProtocolValue) {	CODE
LOW	…ent/oauth/protocols/translator/formats/responsesApi.ts	95	export function convertResponsesApiFormat(body: ProtocolRecord) {	CODE
LOW	…auth/protocols/translator/response/openai-responses.ts	54	export function openaiToOpenAIResponsesResponse(chunk: ProtocolValue, state: TranslatorState) {	CODE
LOW	…auth/protocols/translator/response/openai-responses.ts	434	export function openaiResponsesToOpenAIResponse(chunk: ProtocolValue, state: TranslatorState) {	CODE
LOW	…protocols/translator/response/commandcode-to-openai.ts	54	export function commandCodeToOpenAIResponse(chunk: ProtocolValue, state: TranslatorState) {	CODE
LOW	…oauth/protocols/translator/request/openai-responses.ts	25	export function openaiResponsesToOpenAIRequest(model: string, body: ProtocolRecord, stream: boolean, credentials: Protoc	CODE
34 more matches not shown…

Hallucination Indicators6 hits · 60 pts

Severity	File	Line	Snippet	Context
CRITICAL	src/ui/sidebarProvider.test.ts	87	const next = host.featureStore.set.mock.calls.at(-1)[0].approvalPolicy as ApprovalPolicy;	CODE
CRITICAL	src/ui/sidebarProvider.test.ts	558	const states = host._view.webview.postMessage.mock.calls.map(([message]: any[]) => message).filter((message: any) =>	CODE
CRITICAL	src/ui/sidebarProvider.test.ts	576	const states = host._view.webview.postMessage.mock.calls.map(([message]: any[]) => message).filter((message: any) =>	CODE
CRITICAL	src/ui/sidebarProvider.test.ts	587	const started = host._view.webview.postMessage.mock.calls.map(([message]: any[]) => message).find((message: any)	CODE
CRITICAL	src/ui/sidebarProvider.test.ts	769	const visible = host._view.webview.postMessage.mock.calls.map(([message]: any[]) => message).filter((message: any) =	CODE
CRITICAL	src/ui/sidebarProvider.test.ts	778	const delivered = host._view.webview.postMessage.mock.calls.map(([message]: any[]) => message).filter((message: any)	CODE

Verbosity Indicators19 hits · 40 pts

Severity	File	Line	Snippet	Context
LOW	src/agent/tools/todo-freeze-regression.test.ts	239	// Step 1: Create 5 todos with explicit ids (realistic for structured input)	COMMENT
LOW⚡	src/agent/tools/todo-freeze-regression.test.ts	254	// Step 2: Mark A completed (merge by id)	COMMENT
LOW⚡	src/agent/tools/todo-freeze-regression.test.ts	264	// Step 3: Mark B completed	COMMENT
LOW⚡	src/agent/tools/todo-freeze-regression.test.ts	273	// Step 4: Mark C completed	COMMENT
LOW⚡	src/agent/tools/todo-freeze-regression.test.ts	282	// Step 5: Mark D completed	COMMENT
LOW⚡	src/agent/tools/todo-freeze-regression.test.ts	291	// Step 6: Mark E completed — all done	COMMENT
LOW⚡	src/agent/tools/todo-freeze-regression.test.ts	314	// Step 1: Create todos	COMMENT
LOW⚡	src/agent/tools/todo-freeze-regression.test.ts	322	// Step 2: Mark one in progress	COMMENT
LOW⚡	src/agent/tools/todo-freeze-regression.test.ts	330	// Step 3: Model produces text without calling TodoWrite	COMMENT
LOW	src/agent/tools/todo-mimo-proof.test.ts	146	// Step 1: Create 3 todos (no id)	COMMENT
LOW⚡	src/agent/tools/todo-mimo-proof.test.ts	157	// Step 2: Mark task 1 in_progress (no id)	COMMENT
LOW⚡	src/agent/tools/todo-mimo-proof.test.ts	165	// Step 3: Mark task 1 completed (no id)	COMMENT
LOW⚡	src/agent/tools/todo-mimo-proof.test.ts	174	// Step 4: Check remaining open items	COMMENT
LOW⚡	src/agent/tools/todo-integration.test.ts	207	// Step 1: Create 3 todos (deepseek style — strings)	COMMENT
LOW⚡	src/agent/tools/todo-integration.test.ts	212	// Step 2: Mark first as in_progress (merge)	COMMENT
LOW⚡	src/agent/tools/todo-integration.test.ts	218	// Step 3: Mark first as completed (merge)	COMMENT
LOW⚡	src/agent/tools/todo-integration.test.ts	225	// Step 4: All done	COMMENT
LOW	src/agent/oauth/auth/providers/kiro.ts	29	// Step 1: Register client with AWS SSO OIDC	COMMENT
LOW	src/agent/oauth/auth/providers/kiro.ts	52	// Step 2: Request device authorization	COMMENT

Structural Annotation Overuse19 hits · 40 pts

Severity	File	Line	Snippet	Context
LOW	src/agent/tools/todo-freeze-regression.test.ts	239	// Step 1: Create 5 todos with explicit ids (realistic for structured input)	COMMENT
LOW⚡	src/agent/tools/todo-freeze-regression.test.ts	254	// Step 2: Mark A completed (merge by id)	COMMENT
LOW⚡	src/agent/tools/todo-freeze-regression.test.ts	264	// Step 3: Mark B completed	COMMENT
LOW⚡	src/agent/tools/todo-freeze-regression.test.ts	273	// Step 4: Mark C completed	COMMENT
LOW⚡	src/agent/tools/todo-freeze-regression.test.ts	282	// Step 5: Mark D completed	COMMENT
LOW⚡	src/agent/tools/todo-freeze-regression.test.ts	291	// Step 6: Mark E completed — all done	COMMENT
LOW⚡	src/agent/tools/todo-freeze-regression.test.ts	314	// Step 1: Create todos	COMMENT
LOW⚡	src/agent/tools/todo-freeze-regression.test.ts	322	// Step 2: Mark one in progress	COMMENT
LOW⚡	src/agent/tools/todo-freeze-regression.test.ts	330	// Step 3: Model produces text without calling TodoWrite	COMMENT
LOW	src/agent/tools/todo-mimo-proof.test.ts	146	// Step 1: Create 3 todos (no id)	COMMENT
LOW⚡	src/agent/tools/todo-mimo-proof.test.ts	157	// Step 2: Mark task 1 in_progress (no id)	COMMENT
LOW⚡	src/agent/tools/todo-mimo-proof.test.ts	165	// Step 3: Mark task 1 completed (no id)	COMMENT
LOW⚡	src/agent/tools/todo-mimo-proof.test.ts	174	// Step 4: Check remaining open items	COMMENT
LOW⚡	src/agent/tools/todo-integration.test.ts	207	// Step 1: Create 3 todos (deepseek style — strings)	COMMENT
LOW⚡	src/agent/tools/todo-integration.test.ts	212	// Step 2: Mark first as in_progress (merge)	COMMENT
LOW⚡	src/agent/tools/todo-integration.test.ts	218	// Step 3: Mark first as completed (merge)	COMMENT
LOW⚡	src/agent/tools/todo-integration.test.ts	225	// Step 4: All done	COMMENT
LOW	src/agent/oauth/auth/providers/kiro.ts	29	// Step 1: Register client with AWS SSO OIDC	COMMENT
LOW	src/agent/oauth/auth/providers/kiro.ts	52	// Step 2: Request device authorization	COMMENT

Over-Commented Block14 hits · 14 pts

Severity	File	Line	Snippet	Context
LOW	src/ui/sidebarProvider.ts	1601	// Saved choices include explicitly enabled models. Newly shipped catalog	COMMENT
LOW	src/agent/semanticIndex.ts	1	/*	COMMENT
LOW	src/agent/oauth/auth/constants/oauth.ts	141	// 1) POST GetLoginGuidance {loginTraceID} → {Result.LoginHost}	COMMENT
LOW	src/agent/oauth/protocols/providers/capabilities.ts	21	// • the synced catalog — modalities keyed by model, limits keyed by provider	COMMENT
LOW	src/agent/oauth/protocols/providers/capabilities.ts	141	"glm-5.2": { reasoning: true, thinkingFormat: "zai", thinkingCanDisable: false, contextWindow: 1000000, maxOutput: 1	COMMENT
LOW	src/agent/oauth/protocols/providers/capabilities.ts	261	// deepseek-v4.1-flash replaces v4-flash (dropped from the server list;	COMMENT
LOW	src/agent/oauth/protocols/utils/streamHelpers.ts	121	if (sourceFormat === FORMATS.CLAUDE && data && data.type) {	COMMENT
LOW	src/agent/oauth/protocols/utils/usageTracking.ts	161	if (!usage \|\| typeof usage !== "object" \|\| Array.isArray(usage))	COMMENT
LOW	…auth/protocols/translator/response/openai-responses.ts	141	for (const i in state.msgItemAdded)	COMMENT
LOW	…t/oauth/protocols/translator/request/openai-to-kiro.ts	301	const thinkingBudget = resolveKiroThinkingBudget(thinkingBody, credentials?.rawHeaders, modelIntent.model);	COMMENT
LOW	…nt/oauth/protocols/translator/concerns/paramSupport.ts	21	// GitHub Copilot Claude (except opus/sonnet 4.6): thinking + reasoning_effort rejected. #713	COMMENT
LOW	src/agent/oauth/protocols/executors/github.ts	261		COMMENT
LOW	src/agent/oauth/protocols/executors/codebuddy-cn.ts	61	// CodeBuddy only surfaces model reasoning when the request carries the CLI's	COMMENT
LOW	src/agent/oauth/protocols/executors/qoder.ts	881	};	COMMENT

Modern AI Meta-Vocabulary3 hits · 9 pts

Severity	File	Line	Snippet	Context
MEDIUM	src/agent/loop.ts	1358	// MCP tools may mutate; only allow in agentic modes. Multitask is a	COMMENT
MEDIUM	src/agent/tools/files.ts	468	// Read (or scaffold) the notebook JSON.	COMMENT
MEDIUM	src/agent/oauth/protocols/providers/models/schema.ts	15	// touched, so word/suffix hyphens stay intact ("-thinking", "-agentic", "qwen3-coder-next").	COMMENT

Self-Referential Comments2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	pnpm-workspace.yaml	3	# This file is part of OpenCursor — AI coding agent chat inside VS Code.	COMMENT
MEDIUM	.github/workflows/ci.yml	3	# This file is part of OpenCursor — AI coding agent chat inside VS Code.	COMMENT

Fake / Example Data2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	src/agent/tools/todo-stress.test.ts	70	content: `Task ${i}: ${"Lorem ipsum dolor sit amet ".repeat(20)}`,	CODE
LOW	src/agent/tools/todo-stress.test.ts	70	content: `Task ${i}: ${"Lorem ipsum dolor sit amet ".repeat(20)}`,	CODE

PawanOsman/OpenCursor

Open-Source Code Quality, Security and Technical Debt Review