Autonomous coding agent as an SDK, IDE extension, or CLI assistant.
1371 matches across 17 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | sdk/examples/plugins/gitignore-read-files-guard.ts | 141 | function isWorkspaceGitignoreSource(source: string): boolean { |
| LOW | sdk/examples/plugins/gitignore-read-files-guard.ts | 184 | async function checkIgnoredByWorkspaceGitignore( |
| LOW | sdk/examples/plugins/typescript-lsp/index.ts | 95 | function getOrCreateService(tsconfigPath: string) { |
| LOW | sdk/examples/plugins/agents-squad/index.ts | 76 | function resolveGlobalAgentsDirPath(): string { |
| LOW | sdk/examples/plugins/agents-squad/index.ts | 329 | function resolveSubagentBackendMode(value: string): SubagentBackendMode { |
| LOW | sdk/scripts/check-publish.ts | 112 | function containsDevelopmentExportCondition(value: unknown): boolean { |
| LOW | sdk/packages/core/src/settings/settings-service.ts | 310 | export function createCoreSettingsService(): CoreSettingsService { |
| LOW | sdk/packages/core/src/types/provider-settings.ts | 51 | export function emptyStoredProviderSettings(): StoredProviderSettings { |
| LOW | sdk/packages/core/src/types/common.ts | 29 | export function isNonTerminalSessionStatus( |
| LOW | sdk/packages/core/src/auth/oca.ts | 269 | async function exchangeAuthorizationCode(input: { |
| LOW | sdk/packages/core/src/auth/cline.ts | 206 | function requireClineTokenResponse( |
| LOW | sdk/packages/core/src/auth/cline.ts | 216 | async function requestWorkOSDeviceAuthorization( |
| LOW | sdk/packages/core/src/auth/cline.ts | 397 | async function exchangeAuthorizationCode( |
| LOW | sdk/packages/core/src/auth/utils.ts | 184 | export function isCredentialLikelyExpired( |
| LOW | sdk/packages/core/src/auth/utils.ts | 191 | export async function resolveAuthorizationCodeInput(input: { |
| LOW | sdk/packages/core/src/auth/client.ts | 29 | export function createOAuthClientCallbacks( |
| LOW | sdk/packages/core/src/auth/codex.ts | 93 | async function exchangeAuthorizationCode( |
| LOW | sdk/packages/core/src/auth/codex.ts | 218 | function resolveCallbackServerConfig(): { |
| LOW | sdk/packages/core/src/auth/codex.ts | 403 | export async function getValidOpenAICodexCredentials( |
| LOW | sdk/packages/core/src/auth/codex.ts | 446 | export function isOpenAICodexTokenExpired( |
| LOW | sdk/packages/core/src/auth/codex.ts | 453 | export function normalizeOpenAICodexCredentials( |
| LOW | …/packages/core/src/runtime/tools/subprocess-sandbox.ts | 73 | export function resolveSubprocessRuntimeExecutable( |
| LOW | …/packages/core/src/runtime/tools/subprocess-sandbox.ts | 106 | export function buildSubprocessSandboxCommand( |
| LOW | sdk/packages/core/src/runtime/tools/tool-approval.ts | 29 | export async function requestDesktopToolApproval( |
| LOW | sdk/packages/core/src/runtime/host/history.ts | 75 | function normalizeHistoryScanLimit(limit: number): number { |
| LOW | sdk/packages/core/src/runtime/host/history.ts | 90 | function extractSessionRecencyToken(sessionId: string): number { |
| LOW | sdk/packages/core/src/runtime/host/history.ts | 263 | function summarizeCostFromMessages(messages: LlmsProviders.Message[]): number { |
| LOW | sdk/packages/core/src/runtime/host/history.ts | 271 | function inferProviderAndModelFromMessages(messages: LlmsProviders.Message[]): { |
| LOW | sdk/packages/core/src/runtime/host/history.ts | 373 | function shouldProjectLegacyRunningSessionAsIdle( |
| LOW | sdk/packages/core/src/runtime/host/history.ts | 386 | async function projectLegacyRunningRowsAsIdle( |
| LOW | sdk/packages/core/src/runtime/host/history.ts | 492 | export async function listSessionHistoryFromBackend( |
| LOW | sdk/packages/core/src/runtime/host/host.ts | 17 | function resolveConfiguredBackendMode( |
| LOW | sdk/packages/core/src/runtime/host/host.ts | 55 | async function reconcileDeadSessionsIfSupported( |
| LOW | …packages/core/src/runtime/host/runtime-host-support.ts | 47 | export async function readPersistedMessagesFile( |
| LOW | …kages/core/src/runtime/host/local-runtime-host.test.ts | 4839 | function createTaskCompletedAdapter() { |
| LOW | …kages/core/src/runtime/host/local-runtime-host.test.ts | 4853 | function createSubmitAndExitToolCall(): NonNullable< |
| LOW | …kages/core/src/runtime/host/local-runtime-host.test.ts | 4886 | function countTaskCompletedEmissions( |
| LOW | …runtime/capabilities/normalize-runtime-capabilities.ts | 3 | export function normalizeRuntimeCapabilities( |
| LOW | …ackages/core/src/runtime/config/agent-message-codec.ts | 85 | export function agentMessageToMessageWithMetadata( |
| LOW | …ackages/core/src/runtime/config/agent-message-codec.ts | 102 | export function agentMessagesToMessagesWithMetadata( |
| LOW | …ackages/core/src/runtime/config/agent-message-codec.ts | 181 | function toolResultContentToAgentPart( |
| LOW | sdk/packages/core/src/runtime/safety/rules.ts | 10 | export function formatRulesForSystemPrompt( |
| LOW | sdk/packages/core/src/runtime/safety/rules.ts | 23 | export function mergeRulesForSystemPrompt( |
| LOW | sdk/packages/core/src/runtime/safety/rules.ts | 35 | export function listEnabledRulesFromWatcher( |
| LOW | sdk/packages/core/src/runtime/safety/rules.ts | 45 | export function loadRulesForSystemPromptFromWatcher( |
| LOW | sdk/packages/core/src/runtime/safety/mistake-tracker.ts | 157 | export function buildMistakeLimitStopMessage(input: { |
| LOW | sdk/packages/core/src/runtime/safety/mistake-tracker.ts | 190 | async function resolveConsecutiveMistakeDecision( |
| LOW | …ore/src/runtime/orchestration/runtime-event-adapter.ts | 109 | function statusToLegacyFinishReason( |
| LOW | …s/core/src/runtime/orchestration/user-input-builder.ts | 118 | async function buildUserFileContentBlock( |
| LOW | …/core/src/runtime/orchestration/runtime-parity.test.ts | 31 | function legacyBuildRuntimeEnvironment( |
| LOW | …ages/core/src/runtime/orchestration/runtime-builder.ts | 125 | function isSkillsToolEnabledForSession(input: { |
| LOW | …ages/core/src/runtime/orchestration/runtime-builder.ts | 224 | function isRuntimeLifecycleShutdownReason(reason: string | undefined): boolean { |
| LOW | …ime/orchestration/session-runtime-orchestrator.test.ts | 1340 | function makeRecordingRuntimeFactory( |
| LOW | …ime/orchestration/session-runtime-orchestrator.test.ts | 1626 | function failedStructuredToolTurnEvents(): AgentRuntimeEvent[] { |
| LOW | sdk/packages/core/src/remote-config/integration.ts | 59 | export function createRemoteConfigSessionMessagesArtifactUploader(): SessionMessagesArtifactUploader { |
| LOW | sdk/packages/core/src/remote-config/integration.ts | 68 | export async function prepareRemoteConfigCoreIntegration( |
| LOW | sdk/packages/core/src/extensions/tools/helpers.ts | 52 | export function normalizeReadFileRequests(input: unknown): ReadFileRequest[] { |
| LOW | sdk/packages/core/src/extensions/tools/helpers.ts | 108 | export function normalizeRunCommandsInput( |
| LOW | sdk/packages/core/src/extensions/tools/runtime.ts | 206 | export function getCoreBuiltinToolCatalog( |
| LOW | sdk/packages/core/src/extensions/tools/runtime.ts | 212 | export function getCoreDefaultEnabledToolIds( |
| 1023 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| CRITICAL | …rc/core/storage/__tests__/syncRemoteMcpServers.test.ts | 126 | result.mcpServers.should.not.have.property("old-server") |
| CRITICAL | …rc/core/storage/__tests__/syncRemoteMcpServers.test.ts | 161 | result.mcpServers.should.not.have.property("remove-server") |
| CRITICAL | …rc/core/storage/__tests__/syncRemoteMcpServers.test.ts | 174 | result.mcpServers.should.not.have.property("server-a") |
| CRITICAL | …rc/core/storage/__tests__/syncRemoteMcpServers.test.ts | 175 | result.mcpServers.should.not.have.property("server-b") |
| CRITICAL | …/core/task/tools/utils/__tests__/ToolHookUtils.test.ts | 41 | config.taskState.userMessageContent.should.have.length(0) |
| CRITICAL | …/core/task/tools/utils/__tests__/ToolHookUtils.test.ts | 92 | config.taskState.userMessageContent.should.have.length(0) |
| CRITICAL | …scode/src/core/api/providers/__tests__/bedrock.test.ts | 1141 | input.toolConfig.tools.should.have.length(1) |
| CRITICAL | …vscode/src/core/api/providers/__tests__/gemini.test.ts | 120 | requestArgs.config.should.not.have.property("maxOutputTokens") |
| CRITICAL | …scode/src/core/api/adapters/__tests__/adapters.test.ts | 435 | input.diff.should.be.a.String() |
| CRITICAL | …scode/src/core/api/adapters/__tests__/adapters.test.ts | 436 | input.diff.should.not.be.empty() |
| CRITICAL | …c/core/api/transform/__tests__/thinking-traces.test.ts | 47 | assistantMsg.reasoning_details.should.be.an.Array() |
| CRITICAL | …c/core/api/transform/__tests__/thinking-traces.test.ts | 111 | assistantMsg.reasoning_details.should.be.an.Array() |
| CRITICAL | apps/vscode/src/test/slash-commands.test.ts | 50 | response.commands.length.should.be.greaterThanOrEqual(BASE_SLASH_COMMANDS.length) |
| CRITICAL | apps/vscode/src/test/slash-commands.test.ts | 259 | response.commands.length.should.be.greaterThanOrEqual(BASE_SLASH_COMMANDS.length) |
| CRITICAL | apps/vscode/src/test/slash-commands.test.ts | 282 | response.commands.length.should.be.greaterThanOrEqual(BASE_SLASH_COMMANDS.length) |
| CRITICAL | apps/vscode/src/__tests__/config.test.ts | 448 | ClineEndpoint.config.environment.should.not.equal(Environment.selfHosted) |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 75 | cbs.stubs.deleteConnection.called.should.be.false() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 76 | cbs.stubs.connectToServer.called.should.be.false() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 98 | cbs.stubs.deleteConnection.called.should.be.false() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 112 | cbs.stubs.deleteConnection.calledOnce.should.be.true() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 113 | cbs.stubs.connectToServer.calledOnce.should.be.true() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 117 | cbs.stubs.notifyWebviewOfServerChanges.called.should.be.true() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 132 | cbs.stubs.delay.callCount.should.equal(2) |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 138 | cbs.stubs.connectToServer.callCount.should.equal(2) |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 211 | cbs.stubs.appendErrorMessage.calledOnce.should.be.true() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 212 | cbs.stubs.connectToServer.called.should.be.false() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 229 | cbs.stubs.connectToServer.callCount.should.equal(3) |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 233 | cbs.stubs.delay.callCount.should.equal(3) |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 253 | cbs.stubs.delay.calledOnce.should.be.true() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 254 | cbs.stubs.deleteConnection.called.should.be.false() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 255 | cbs.stubs.connectToServer.called.should.be.false() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 267 | cbs.stubs.deleteConnection.called.should.be.false() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 268 | cbs.stubs.connectToServer.called.should.be.false() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 87 | cbs.stubs.deleteConnection.called.should.be.false() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 169 | cbs.stubs.connectToServer.callCount.should.equal(TEST_CONFIG.maxAttempts) |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 174 | cbs.stubs.appendErrorMessage.calledOnce.should.be.true() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 196 | cbs.stubs.notifyWebviewOfServerChanges.called.should.be.true() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 198 | cbs.stubs.appendErrorMessage.called.should.be.false() |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 299 | cbs.stubs.appendErrorMessage.calledOnce.should.be.true() |
| CRITICAL | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 90 | client.request.calledOnce.should.be.true() |
| CRITICAL | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 101 | client.request.calledOnce.should.be.true() |
| CRITICAL | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 166 | requestOptions.timeout.should.be.a.Number() |
| CRITICAL | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 213 | telemetryService.captureMcpToolCall.calledTwice.should.be.true() |
| CRITICAL | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 234 | telemetryService.captureMcpToolCall.calledTwice.should.be.true() |
| CRITICAL | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 273 | result.content.should.be.an.Array() |
| CRITICAL | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 284 | result.content.should.be.an.Array() |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | sdk/scripts/release.ts | 24 | // ── CLI args ────────────────────────────────────────────────────────────────── |
| MEDIUM | sdk/scripts/release.ts | 75 | // ── Constants ───────────────────────────────────────────────────────────────── |
| MEDIUM | sdk/scripts/release.ts | 83 | // ── Helpers ─────────────────────────────────────────────────────────────────── |
| MEDIUM | sdk/scripts/release.ts | 378 | // ── SDK Release ─────────────────────────────────────────────────────────────── |
| MEDIUM | sdk/scripts/release.ts | 471 | // ── CLI Release ─────────────────────────────────────────────────────────────── |
| MEDIUM | sdk/scripts/release.ts | 527 | // ── Main ────────────────────────────────────────────────────────────────────── |
| MEDIUM | sdk/packages/core/src/types/session.ts | 84 | // ── Persistence interfaces ──────────────────────────────────────────── |
| MEDIUM | …k/packages/core/src/runtime/host/local-runtime-host.ts | 270 | // ── Public API ────────────────────────────────────────────────────── |
| MEDIUM | …k/packages/core/src/runtime/host/local-runtime-host.ts | 944 | // ── Turn execution ────────────────────────────────────────────────── |
| MEDIUM | …k/packages/core/src/runtime/host/local-runtime-host.ts | 1251 | // ── Session lifecycle ─────────────────────────────────────────────── |
| MEDIUM | …k/packages/core/src/runtime/host/local-runtime-host.ts | 1525 | // ── OAuth & auth ──────────────────────────────────────────────────── |
| MEDIUM | …k/packages/core/src/runtime/host/local-runtime-host.ts | 1571 | // ── Utility methods ───────────────────────────────────────────────── |
| MEDIUM | …k/packages/core/src/runtime/host/local-runtime-host.ts | 1738 | // ── Session service invocation ────────────────────────────────────── |
| MEDIUM | sdk/packages/shared/src/vcr.ts | 41 | // ── Types ─────────────────────────────────────────────────────────────── |
| MEDIUM | sdk/packages/shared/src/vcr.ts | 62 | // ── Sensitive data sanitization ───────────────────────────────────────── |
| MEDIUM | sdk/packages/shared/src/vcr.ts | 351 | // ── URL helpers ───────────────────────────────────────────────────────── |
| MEDIUM | sdk/packages/shared/src/vcr.ts | 451 | // ── Config resolution ─────────────────────────────────────────────────── |
| MEDIUM | sdk/packages/shared/src/vcr.ts | 481 | // ── Record mode ───────────────────────────────────────────────────────── |
| MEDIUM | sdk/packages/shared/src/vcr.ts | 661 | // ── Playback mode ─────────────────────────────────────────────────────── |
| MEDIUM | sdk/packages/shared/src/vcr.ts | 877 | // ── Public API ────────────────────────────────────────────────────────── |
| MEDIUM | sdk/apps/examples/desktop-app/sidecar/commands.ts | 719 | // ── Chat session commands ────────────────────────────────────────── |
| MEDIUM | sdk/apps/examples/desktop-app/sidecar/commands.ts | 729 | // ── Session data reading ────────────────────────────────────────── |
| MEDIUM | sdk/apps/examples/desktop-app/sidecar/commands.ts | 744 | // ── Process context ─────────────────────────────────────────────── |
| MEDIUM | sdk/apps/examples/desktop-app/sidecar/commands.ts | 752 | // ── Tool approvals (in-memory) ──────────────────────────────────── |
| MEDIUM | sdk/apps/examples/desktop-app/sidecar/commands.ts | 798 | // ── Session discovery ───────────────────────────────────────────── |
| MEDIUM | sdk/apps/examples/desktop-app/sidecar/commands.ts | 929 | // ── Workspace file search ───────────────────────────────────────── |
| MEDIUM | sdk/apps/examples/desktop-app/sidecar/commands.ts | 934 | // ── Cline account ────────────────────────────────────────────────── |
| MEDIUM | sdk/apps/examples/desktop-app/sidecar/commands.ts | 951 | // ── Provider management ──────────────────────────────────────────── |
| MEDIUM | sdk/apps/examples/desktop-app/sidecar/commands.ts | 1048 | // ── MCP server management ───────────────────────────────────────── |
| MEDIUM | sdk/apps/examples/desktop-app/sidecar/commands.ts | 1125 | // ── Git operations ───────────────────────────────────────────────── |
| MEDIUM | sdk/apps/examples/desktop-app/sidecar/commands.ts | 1151 | // ── Routine schedules ───────────────────────────────────────────── |
| MEDIUM | sdk/apps/examples/desktop-app/sidecar/commands.ts | 1163 | // ── User instruction configs ────────────────────────────────────── |
| MEDIUM | sdk/apps/examples/desktop-app/sidecar/commands.ts | 1195 | // ── Native OS commands ──────────────────────────────────────────── |
| MEDIUM | apps/vscode/scripts/run-extension-host.sh | 33 | # ┌────────────┬────────────┬────────────┬────────────┐ |
| MEDIUM | apps/vscode/scripts/run-extension-host.sh | 35 | # └────────────┴────────────┴────────────┴────────────┘ |
| MEDIUM | apps/vscode/src/core/storage/utils/state-helpers.ts | 20 | // ─── File-backed storage readers (used by StateManager) ──────────────────── |
| MEDIUM | …lers/__tests__/PathToolHandlers.gracefulErrors.test.ts | 117 | // ─── ListCodeDefinitionNamesToolHandler ───────────────────────────────────── |
| MEDIUM | …lers/__tests__/PathToolHandlers.gracefulErrors.test.ts | 266 | // ─── ListFilesToolHandler ─────────────────────────────────────────────────── |
| MEDIUM | …lers/__tests__/PathToolHandlers.gracefulErrors.test.ts | 404 | // ─── SearchFilesToolHandler ───────────────────────────────────────────────── |
| MEDIUM | …ps/vscode/src/hosts/vscode/vscode-to-file-migration.ts | 109 | // ─── 1. Migrate global state + secrets (if needed) ───────────── |
| MEDIUM | …ps/vscode/src/hosts/vscode/vscode-to-file-migration.ts | 165 | // ─── 2. Migrate workspace state (if needed) ──────────────────── |
| MEDIUM | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 57 | // ── basics ────────────────────────────────────────────────────────── |
| MEDIUM | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 66 | // ── no-op cases ───────────────────────────────────────────────────── |
| MEDIUM | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 102 | // ── successful reconnect ──────────────────────────────────────────── |
| MEDIUM | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 141 | // ── exhausted retries ─────────────────────────────────────────────── |
| MEDIUM | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 215 | // ── connectToServer failure retries automatically ─────────────────── |
| MEDIUM | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 239 | // ── connection replaced mid-reconnect ─────────────────────────────── |
| MEDIUM | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 271 | // ── resetAttempts ─────────────────────────────────────────────────── |
| MEDIUM | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 287 | // ── error message formatting ──────────────────────────────────────── |
| MEDIUM | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 82 | // ── Core fix: undefined arguments → empty object ──────────────────── |
| MEDIUM | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 138 | // ── Request structure validation ──────────────────────────────────── |
| MEDIUM | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 171 | // ── Error handling ────────────────────────────────────────────────── |
| MEDIUM | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 226 | // ── Telemetry ─────────────────────────────────────────────────────── |
| MEDIUM | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 262 | // ── Response handling ─────────────────────────────────────────────── |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | sdk/scripts/release.ts | 399 | // Step 1: Tests |
| LOW | sdk/scripts/release.ts | 407 | // Step 2: Update versions |
| LOW | sdk/scripts/release.ts | 412 | // Step 3: Verify publishability |
| LOW | sdk/scripts/release.ts | 416 | // Step 4: Publish in dependency order |
| LOW | sdk/scripts/release.ts | 432 | // Step 5: Git tag |
| LOW | sdk/scripts/release.ts | 491 | // Step 1: Tests |
| LOW | sdk/scripts/release.ts | 499 | // Step 2: Build all platform binaries |
| LOW | sdk/scripts/release.ts | 505 | // Step 3: Publish to npm |
| LOW | sdk/apps/cli/script/publish-npm.ts | 242 | // Step 1: Publish platform-specific packages (in parallel) |
| LOW | sdk/apps/cli/script/publish-npm.ts | 260 | // Step 2: Generate and publish the main wrapper package |
| LOW | sdk/apps/examples/desktop-app/sidecar/chat-test.ts | 100 | // Step 1: Start a session |
| LOW | sdk/apps/examples/desktop-app/sidecar/chat-test.ts | 127 | // Step 2: Send a prompt |
| LOW | apps/vscode/webview-ui/src/App.stories.tsx | 308 | // Step 0: User type selection should be visible |
| LOW | apps/vscode/webview-ui/src/App.stories.tsx | 326 | // Step 1: Model selection should be visible |
| LOW | …ui/src/components/chat/chat-view/utils/messageUtils.ts | 422 | // Step 1: Find the MOST RECENT api_req_started overall (search backwards) |
| LOW | …ui/src/components/chat/chat-view/utils/messageUtils.ts | 437 | // Step 2: Determine if most recent api_req is complete (has cost) or incomplete (no cost) |
| LOW | …ui/src/components/chat/chat-view/utils/messageUtils.ts | 457 | // Step 3: Determine if tool group is in-flight |
| LOW | …ui/src/components/chat/chat-view/utils/messageUtils.ts | 510 | // Step 1: Find the MOST RECENT api_req_started overall (search backwards) |
| LOW | …ui/src/components/chat/chat-view/utils/messageUtils.ts | 530 | // Step 2: Determine if most recent api_req is complete (has cost) or incomplete (no cost) |
| LOW | …ui/src/components/chat/chat-view/utils/messageUtils.ts | 539 | // Step 3: Determine which tools are "in current activities" |
| LOW | apps/vscode/scripts/run-extension-host.sh | 19 | # Step 1: Build protos (everything depends on this) |
| LOW | apps/vscode/scripts/run-extension-host.sh | 23 | # Step 2: Build webview once |
| LOW | apps/vscode/scripts/run-extension-host.sh | 27 | # Step 3: Kill existing session if one is running |
| LOW | apps/vscode/scripts/run-extension-host.sh | 31 | # Step 4: Create tmux session with 4 vertical panes |
| LOW | apps/vscode/src/core/task/index.ts | 1201 | // since we don't use api_req_finished anymore, we need to check if the last api_req_started has a cost value, if it d |
| LOW | …ps/vscode/src/test/hook-management-integration.test.ts | 88 | // Step 1: Verify hook doesn't exist initially |
| LOW | …ps/vscode/src/test/hook-management-integration.test.ts | 92 | // Step 2: Create the hook |
| LOW | …ps/vscode/src/test/hook-management-integration.test.ts | 99 | // Step 3: Verify hook was created and is disabled (644 permissions) |
| LOW | …ps/vscode/src/test/hook-management-integration.test.ts | 115 | // Step 4: Enable the hook |
| LOW | …ps/vscode/src/test/hook-management-integration.test.ts | 123 | // Step 5: Verify hook is now enabled (executable) |
| LOW | …ps/vscode/src/test/hook-management-integration.test.ts | 133 | // Step 6: Disable the hook |
| LOW | …ps/vscode/src/test/hook-management-integration.test.ts | 141 | // Step 7: Verify hook is now disabled again |
| LOW | …ps/vscode/src/test/hook-management-integration.test.ts | 154 | // Step 8: Delete the hook |
| LOW | …ps/vscode/src/test/hook-management-integration.test.ts | 161 | // Step 9: Verify hook is gone |
| LOW | …ps/vscode/src/test/hook-management-integration.test.ts | 170 | // Step 10: Final refresh to confirm clean state |
| LOW | apps/vscode/src/standalone/cline-core.ts | 237 | // Step 1: Tell the paired host bridge to shut down |
| LOW | apps/vscode/src/standalone/cline-core.ts | 245 | // Step 2: Clean up lock manager entry |
| LOW | apps/vscode/src/standalone/cline-core.ts | 261 | // Step 3: Tear down services |
| LOW | apps/vscode/src/standalone/cline-core.ts | 274 | // Step 4: Exit the process |
| LOW | …ode/src/services/auth/oca/providers/OcaAuthProvider.ts | 200 | // Step 1: Nonce validation |
| LOW | …ode/src/services/auth/oca/providers/OcaAuthProvider.ts | 211 | // Step 2: Get access_token (this is what you'll use for APIs) |
| LOW | …ode/src/services/auth/oca/providers/OcaAuthProvider.ts | 219 | // Step 3: (Optional) Extract user info from id_token for local profile, not for API |
| LOW | …ode/src/services/auth/oca/providers/OcaAuthProvider.ts | 222 | // Step 4: Return only the access_token for downstream use |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | sdk/examples/plugins/weather-metrics.ts | 41 | // process.cwd() or import.meta.url, so it is correct even when --cwd was |
| LOW | …ges/core/src/extensions/plugin/plugin-module-import.ts | 641 | throw new Error("Unable to load jiti"); |
| LOW | …ges/llms/src/providers/middleware/split-tool-images.ts | 1 | // LanguageModelV3 middleware that recovers image bytes from |
| LOW | …ges/llms/src/providers/middleware/split-tool-images.ts | 21 | // tool-result then carries only text — safe for any wire format. |
| LOW | …ckages/llms/src/providers/vendors/openai-compatible.ts | 21 | const provider = createOpenAICompatible({ |
| LOW | sdk/apps/cli/script/publish-npm.ts | 1 | #!/usr/bin/env bun |
| LOW | sdk/apps/cli/src/tui/palette.ts | 61 | // background across every theme: pure black, dark grays, tinted themes like |
| LOW | sdk/apps/cli/src/tests/cli/flags-behavior.test.ts | 1 | // --------------------------------------------------------------------------- |
| LOW | sdk/apps/cli/src/tests/interactive/chat.test.ts | 1 | // --------------------------------------------------------------------------- |
| LOW | …s/cli/src/tests/headless/per-turn-metrics.live.test.ts | 1 | // --------------------------------------------------------------------------- |
| LOW | sdk/apps/cli/src/tests/helpers/process.ts | 1 | // --------------------------------------------------------------------------- |
| LOW | …s/vscode/src/core/ignore/ClineIgnoreController.test.ts | 101 | |
| LOW | …s/vscode/src/core/ignore/ClineIgnoreController.test.ts | 121 | // const results = [ |
| LOW | apps/vscode/src/core/workspace/setup.ts | 61 | // telemetryService.captureWorkspaceInitialized( |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 1 | // import { constructNewFileContent as cnfc } from "./diff" |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 21 | // expect(err).to.be.an("error") |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 41 | // expect(err).to.be.an("error") |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 61 | // it("should handle incomplete block structure", async () => { |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 81 | // +++++++ REPLACE` |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 101 | // it("should handle special characters in search", async () => { |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 121 | |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 141 | // ------- SEARCH |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 161 | // replaced |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 181 | // const diff = `--- SEARCH |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 201 | // $^.* |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 221 | // ======= |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 241 | // +++++++ REPLACE |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 261 | // Section 3: sed do eiusmod tempor |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 281 | // +++++++ REPLACE` |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 301 | |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 321 | // // expected2 shows the results when processing with original content |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 341 | // }) |
| LOW | apps/vscode/src/core/hooks/templates.ts | 41 | cancel = $false |
| LOW | apps/vscode/src/core/hooks/templates.ts | 61 | # } |
| LOW | apps/vscode/src/core/hooks/templates.ts | 101 | } |
| LOW | apps/vscode/src/core/hooks/templates.ts | 141 | ` |
| LOW | apps/vscode/src/core/hooks/templates.ts | 181 | ` |
| LOW | apps/vscode/src/core/hooks/templates.ts | 221 | echo '{"cancel":false,"contextModification":"","errorMessage":""}' |
| LOW | apps/vscode/src/core/hooks/templates.ts | 261 | |
| LOW | apps/vscode/src/core/hooks/templates.ts | 281 | # executionTimeMs: number |
| LOW | apps/vscode/src/core/hooks/templates.ts | 321 | # |
| LOW | apps/vscode/src/core/hooks/templates.ts | 361 | # event: string, |
| LOW | apps/vscode/src/core/hooks/templates.ts | 421 | # Input: { |
| LOW | apps/vscode/src/core/slash-commands/index.ts | 81 | // - ([a-zA-Z0-9_.:@-]+) : The command name (letters, numbers, underscore, dot, hyphen, colon, @) |
| LOW | …de/src/core/prompts/system-prompt/tools/apply_patch.ts | 1 | import { ModelFamily } from "@/shared/prompts" |
| LOW | apps/vscode/src/core/api/transform/o1-format.ts | 201 | // const lastAssistantIndex = findLastIndex(toolsReplaced, (message) => message.role === "assistant") |
| LOW | apps/vscode/src/core/api/transform/o1-format.ts | 421 | |
| LOW | apps/vscode/src/shared/multi-root/types.ts | 21 | // path: "/Users/dev/frontend", |
| LOW | apps/vscode/src/services/tree-sitter/index.ts | 41 | if (definitions) { |
| LOW | apps/vscode/src/services/mcp/McpOAuthManager.ts | 141 | // when it changes and force re-registration (see clientInformation()) |
| LOW | apps/vscode/src/services/mcp/McpOAuthManager.ts | 201 | |
| LOW | …/vscode/src/services/glob/__tests__/list-files.test.ts | 41 | describe("listFiles gitignore handling", () => { |
| LOW | …/vscode/src/services/glob/__tests__/list-files.test.ts | 81 | // The .gitignore parser handles two kinds of patterns differently: |
| LOW | …/vscode/src/services/glob/__tests__/list-files.test.ts | 161 | // NOTE: We intentionally use "third-party/" instead of "vendor/" here because |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | .claude/hooks/claude-code-for-web-setup.sh | 24 | # Check if GITHUB_TOKEN is set and configure gh |
| LOW | .github/scripts/tests/coverage_check_test.py | 109 | # Check if verbose mode is enabled |
| LOW | .github/scripts/coverage_check/util.py | 48 | # Check if command is in allowed list |
| LOW | .github/scripts/coverage_check/extraction.py | 79 | # Check if file exists and get its size |
| LOW | .github/scripts/coverage_check/extraction.py | 85 | # Check if the directory exists |
| LOW | .github/scripts/coverage_check/workflow.py | 276 | # Check if the coverage files exist |
| LOW | .github/scripts/coverage_check/workflow.py | 306 | # Check if the webview-ui directory exists |
| LOW | .github/scripts/coverage_check/workflow.py | 348 | # Check if we're running in GitHub Actions |
| LOW | .github/scripts/coverage_check/workflow.py | 415 | # Output results for GitHub Actions |
| LOW | apps/vscode/src/core/hooks/templates.ts | 139 | # Return result |
| LOW | apps/vscode/src/core/hooks/templates.ts | 179 | # Return result |
| LOW | apps/vscode/src/core/hooks/templates.ts | 220 | # Return result |
| LOW | apps/vscode/src/core/hooks/templates.ts | 312 | # Return result |
| LOW | apps/vscode/src/core/hooks/templates.ts | 346 | # Return result |
| LOW | apps/vscode/src/core/hooks/templates.ts | 465 | # Return result |
| LOW | apps/vscode/src/core/hooks/templates.ts | 491 | # Return result |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | apps/vscode/src/core/task/index.ts | 3123 | // "When providing thinking blocks, the entire sequence of consecutive thinking blocks must match the outputs gener |
| HIGH | apps/vscode/src/services/telemetry/TelemetryService.ts | 241 | // Tracks when users select an option from AI-generated followup questions |
| HIGH | apps/vscode/src/services/telemetry/TelemetryService.ts | 243 | // Tracks when users type a custom response instead of selecting an option from AI-generated followup questions |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | sdk/packages/core/scripts/telemetry-smoke-host.ts | 155 | email: "user@example.com", |
| LOW | sdk/packages/core/src/auth/cline.test.ts | 35 | email: "user@example.com", |
| LOW | sdk/packages/core/src/auth/cline.test.ts | 189 | email: "user@example.com", |
| LOW | sdk/packages/core/src/auth/cline.test.ts | 219 | email: "user@example.com", |
| LOW | …ackages/core/src/account/cline-account-service.test.ts | 91 | { organizationId: "org-1", name: "Acme Corp" }, |
| LOW | …ackages/core/src/account/cline-account-service.test.ts | 117 | name: "Acme Corp", |
| LOW | sdk/apps/cli/src/utils/telemetry.activation.test.ts | 68 | email: "user@example.com", |
| LOW | sdk/apps/cli/src/utils/telemetry.activation.test.ts | 71 | organizationName: "Acme Corp", |
| LOW | …vscode/webview-ui/src/components/ui/dialog.stories.tsx | 181 | defaultValue="John Doe" |
| LOW | …de/webview-ui/src/components/chat/ErrorRow.stories.tsx | 249 | clineUser: { id: "user123", email: "user@example.com" }, |
| LOW | …onents/mcp/chat-display/McpResponseDisplay.stories.tsx | 76 | "Long response content.\n\nLorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt |
| LOW | …onents/mcp/chat-display/McpResponseDisplay.stories.tsx | 76 | "Long response content.\n\nLorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 259 | // Section 1: Lorem ipsum dolor sit amet |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 259 | // Section 1: Lorem ipsum dolor sit amet |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 266 | // Section 1: Lorem ipsum dolor sit amet |
| LOW | …de/src/core/assistant-message/diff_edge_cases2.test.ts | 266 | // Section 1: Lorem ipsum dolor sit amet |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | sdk/examples/hooks/PostToolUse.py | 10 | |
| LOW | sdk/examples/hooks/PreToolUse_InjectContext.py | 10 | |
| LOW | .github/scripts/tests/coverage_check_test.py | 16 | |
| LOW | .github/scripts/coverage_check/util.py | 12 | |
| LOW | .github/scripts/coverage_check/util.py | 12 | |
| LOW | .github/scripts/coverage_check/__init__.py | 7 | |
| LOW | .github/scripts/coverage_check/__init__.py | 10 | |
| LOW | .github/scripts/coverage_check/__init__.py | 13 | |
| LOW | .github/scripts/coverage_check/__init__.py | 13 | |
| LOW | .github/scripts/coverage_check/__init__.py | 13 | |
| LOW | .github/scripts/coverage_check/__init__.py | 13 | |
| LOW | .github/scripts/coverage_check/__init__.py | 16 | |
| LOW | .github/scripts/coverage_check/__init__.py | 16 | |
| LOW | .github/scripts/coverage_check/__init__.py | 16 | |
| LOW | .github/scripts/coverage_check/__init__.py | 19 | |
| LOW | .github/scripts/coverage_check/extraction.py | 9 | |
| LOW | .github/scripts/coverage_check/extraction.py | 10 | |
| LOW | .github/scripts/coverage_check/workflow.py | 9 | |
| LOW | .github/scripts/coverage_check/workflow.py | 12 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | sdk/examples/hooks/PostToolUse.py | 23 | except Exception: |
| LOW | sdk/examples/hooks/PreToolUse_InjectContext.py | 25 | except Exception: |
| LOW | sdk/examples/hooks/PreToolUse_InjectContext.py | 38 | except Exception: |
| LOW | .github/scripts/tests/coverage_check_test.py | 95 | except Exception as e: |
| LOW | .github/scripts/coverage_check/util.py | 140 | except Exception as e: |
| LOW | .github/scripts/coverage_check/util.py | 162 | except Exception as e: |
| LOW | .github/scripts/coverage_check/util.py | 198 | except Exception as e: |
| LOW | .github/scripts/coverage_check/extraction.py | 100 | except Exception as e: |
| LOW | .github/scripts/coverage_check/extraction.py | 123 | except Exception as e: |
| LOW | .github/scripts/coverage_check/extraction.py | 258 | except Exception as e: |
| LOW | .github/scripts/coverage_check/workflow.py | 292 | except Exception as e: |
| LOW | .github/scripts/coverage_check/workflow.py | 316 | except Exception as e: |
| LOW | .github/scripts/coverage_check/workflow.py | 421 | except Exception as e: |
| LOW | .github/scripts/coverage_check/workflow.py | 431 | except Exception as e2: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | .github/scripts/tests/coverage_check_test.py | 202 | # Create a temporary comment file |
| MEDIUM | .github/scripts/tests/coverage_check_test.py | 224 | # Create a temporary comment file |
| MEDIUM | .github/scripts/coverage_check/workflow.py | 333 | # Initialize all variables at the start |
| MEDIUM | .github/scripts/coverage_check/__main__.py | 30 | # Create main parser that inherits common arguments |
| MEDIUM | apps/vscode/src/core/prompts/loadMcpDocumentation.ts | 4 | return `## Creating an MCP Server |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | evals/analysis/patterns/cline-failures.yaml | 36 | # Infrastructure/harness failures |
| MEDIUM | sdk/packages/shared/src/remote-config/schema.test.ts | 660 | "# Optional Guidelines\n\nConsider these best practices...", |
| MEDIUM | apps/vscode/webview-ui/package-lock.json | 12684 | "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.2.tgz", |
| MEDIUM | …vscode/webview-ui/src/components/chat/ChatTextArea.tsx | 869 | // NOTE: callbacks dont utilize return function to cleanup, but it's fine since this timeout immediately executes a |
| MEDIUM | apps/vscode/src/core/prompts/commands.ts | 180 | ## Coding best practices |
| MEDIUM | …code/src/shared/remote-config/__tests__/schema.test.ts | 672 | contents: "# Optional Guidelines\n\nConsider these best practices...", |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | apps/vscode/webview-ui/src/utils/getLanguageFromPath.ts | 83 | // Example usage: |
| LOW | apps/vscode/src/core/api/transform/o1-format.ts | 349 | // Example usage: |
| LOW | apps/vscode/src/core/api/transform/o1-format.ts | 422 | // Example usage: |
| LOW | apps/vscode/src/shared/multi-root/types.ts | 18 | // Example usage: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | apps/vscode/webview-ui/src/App.stories.tsx | 68 | **Note**: In Storybook, some features like file operations, command execution, and API calls are mocked for demonstratio |
| LOW | apps/vscode/src/core/webview/WebviewProvider.ts | 87 | // don't forget to add font-src ${webview.cspSource}; |
| MEDIUM | apps/vscode/src/core/prompts/loadMcpDocumentation.ts | 14 | The following example demonstrates how to build an MCP server that provides weather data functionality. While this examp |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | .github/scripts/coverage_check/extraction.py | 194 | Run a coverage command and extract the coverage percentage. Args: command: Command to run |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | .github/scripts/coverage_check/extraction.py | 64 | |
| LOW | .github/scripts/coverage_check/workflow.py | 264 | |
| LOW | .github/scripts/coverage_check/__main__.py | 25 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | apps/vscode/src/services/ripgrep/index.ts | 32 | │function processData(data: any) { |