Autonomous coding agent as an SDK, IDE extension, or CLI assistant.
This report summarizes scanner evidence for cline/cline, a TypeScript project with 71,087 GitHub stars. SynthScan examined 972,165 lines of code across 3904 source files, recording 2519 pattern matches distributed across 18 syntactic categories. The legacy adjusted pattern signal is 3.5 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 2312 finding(s).
Are imports declared and package/API names verified? 104 finding(s).
Are wrappers, guards, and repeated structures necessary? 2133 finding(s).
Which changes need focused human review? 2519 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 2519 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdk/examples/plugins/gitignore-read-files-guard.ts | 141 | function isWorkspaceGitignoreSource(source: string): boolean { | CODE |
| LOW | sdk/examples/plugins/gitignore-read-files-guard.ts | 184 | async function checkIgnoredByWorkspaceGitignore( | CODE |
| LOW | sdk/examples/plugins/typescript-lsp/index.ts | 95 | function getOrCreateService(tsconfigPath: string) { | CODE |
| LOW | sdk/examples/plugins/agents-squad/index.ts | 78 | function resolveGlobalAgentsDirPath(): string { | CODE |
| LOW | sdk/examples/plugins/agents-squad/index.ts | 323 | function validateHandoffRelativePath(relativePath: string): string { | CODE |
| LOW | sdk/examples/plugins/agents-squad/index.ts | 367 | function resolveSubagentBackendMode(value: string): SubagentBackendMode { | CODE |
| LOW | sdk/scripts/check-publish.ts | 112 | function containsDevelopmentExportCondition(value: unknown): boolean { | CODE |
| LOW | sdk/packages/ui/components/mermaid-diagram.ts | 258 | function stripDirectivesAndComments(body: string): string { | CODE |
| LOW | sdk/packages/ui/components/mermaid-diagram.ts | 760 | export function buildMermaidThemeVariables( | CODE |
| LOW | sdk/packages/ui/components/mermaid-diagram.ts | 841 | export function createDefaultMermaidConfig( | CODE |
| LOW | sdk/packages/ui/components/agent-image-lightbox.tsx | 15 | export function AgentImageLightboxContent({ | CODE |
| LOW | sdk/packages/ui/components/agent-composer.tsx | 312 | >(function AgentComposerSettingsGroup({ className, ...props }, ref) { | CODE |
| LOW | …k/packages/ui/components/agent-welcome-hero-pointer.ts | 89 | export function useAgentWelcomeHeroPointer( | CODE |
| LOW | sdk/packages/ui/components/mermaid-dom.ts | 141 | export function resolveThemedMermaidConfig(element?: Element): MermaidConfig { | CODE |
| LOW | sdk/packages/ui/components/agent-pull-request-bar.tsx | 53 | export function getAgentPullRequestMergeStatus( | CODE |
| LOW | sdk/packages/ui/components/agent-pull-request-bar.tsx | 77 | export function summarizeAgentPullRequestChecks( | CODE |
| LOW | …kages/ui/components/agent-chat/tool-summary/parsers.ts | 368 | export function parseEditorResultDiffCounts( | CODE |
| LOW | sdk/packages/core/scripts/runtime-build-id.ts | 14 | function collectRuntimeSourceFiles(directory: string): string[] { | CODE |
| LOW | sdk/packages/core/scripts/runtime-build-id.ts | 69 | export function resolveRepoRootFromCorePackage( | CODE |
| LOW | sdk/packages/core/src/settings/settings-service.ts | 189 | function listBundledPluginSkillNames(pluginPath: string): string[] { | CODE |
| LOW | sdk/packages/core/src/settings/settings-service.ts | 260 | function joinAgentPluginDiagnostics( | CODE |
| LOW | sdk/packages/core/src/settings/settings-service.ts | 270 | function appendAgentPluginSettings(input: { | CODE |
| LOW | sdk/packages/core/src/settings/settings-service.ts | 826 | export function createCoreSettingsService( | CODE |
| LOW | sdk/packages/core/src/artifacts/publish.ts | 101 | export function createPublishArtifactsTool({ | CODE |
| LOW | sdk/packages/core/src/tasks/task-tool.ts | 187 | export function createTasksPromptExtension(options?: { | CODE |
| LOW | sdk/packages/core/src/tasks/task-location.ts | 72 | export function normalizeAgendaTaskLocation( | CODE |
| LOW | sdk/packages/core/src/tasks/specs/task-spec-parser.ts | 466 | export function agendaTaskSpecToCreateInput( | CODE |
| LOW | sdk/packages/core/src/types/provider-settings.ts | 86 | export function emptyStoredProviderSettings(): StoredProviderSettings { | CODE |
| LOW | sdk/packages/core/src/types/common.ts | 29 | export function isNonTerminalSessionStatus( | CODE |
| LOW | sdk/packages/core/src/auth/oca.ts | 267 | async function exchangeAuthorizationCode(input: { | CODE |
| LOW | sdk/packages/core/src/auth/cline.ts | 198 | function getAuthTokenTelemetryClaims(token: string): AuthTokenTelemetryClaims { | CODE |
| LOW | sdk/packages/core/src/auth/cline.ts | 209 | function getAuthCredentialTelemetryProperties( | CODE |
| LOW | sdk/packages/core/src/auth/cline.ts | 262 | function requireClineTokenResponse( | CODE |
| LOW | sdk/packages/core/src/auth/cline.ts | 272 | async function requestWorkOSDeviceAuthorization( | CODE |
| LOW | sdk/packages/core/src/auth/cline.ts | 479 | async function exchangeAuthorizationCode( | CODE |
| LOW | sdk/packages/core/src/auth/utils.ts | 131 | export function isCredentialLikelyExpired( | CODE |
| LOW | sdk/packages/core/src/auth/utils.ts | 138 | export async function resolveAuthorizationCodeInput(input: { | CODE |
| LOW | sdk/packages/core/src/auth/client.ts | 29 | export function createOAuthClientCallbacks( | CODE |
| LOW | sdk/packages/core/src/auth/provider-auth-registry.ts | 100 | function createCredentialsFromSettings( | CODE |
| LOW | sdk/packages/core/src/auth/provider-auth-registry.ts | 295 | export function resolveProviderApiKeyFromSettings( | CODE |
| LOW | sdk/packages/core/src/auth/provider-auth-registry.ts | 308 | export async function loginAndSaveProviderOAuthCredentials( | CODE |
| LOW | sdk/packages/core/src/auth/provider-auth-registry.ts | 329 | export function getProviderOAuthCredentialsFromSettings( | CODE |
| LOW | sdk/packages/core/src/auth/provider-auth-registry.ts | 340 | export function saveProviderOAuthCredentials(input: { | CODE |
| LOW | sdk/packages/core/src/auth/provider-auth-registry.ts | 363 | export function getPersistedProviderApiKey( | CODE |
| LOW | sdk/packages/core/src/auth/provider-auth-registry.ts | 380 | export function formatProviderOAuthApiKey( | CODE |
| LOW | sdk/packages/core/src/auth/codex.ts | 88 | async function exchangeAuthorizationCode( | CODE |
| LOW | sdk/packages/core/src/auth/codex.ts | 213 | function resolveCallbackServerConfig(): { | CODE |
| LOW | sdk/packages/core/src/auth/codex.ts | 416 | export async function getValidOpenAICodexCredentials( | CODE |
| LOW | sdk/packages/core/src/runtime/process-start-token.ts | 21 | function resolveProcessStartCommand(pid: number): ProcessStartCommand { | CODE |
| LOW | sdk/packages/core/src/runtime/process-start-token.ts | 63 | function formatExternalProcessStartToken( | CODE |
| LOW | sdk/packages/core/src/runtime/process-start-token.ts | 97 | export function parseLinuxProcessStartToken( | CODE |
| LOW | sdk/packages/core/src/runtime/process-start-token.ts | 108 | function probeLinuxProcessStartToken( | CODE |
| LOW | sdk/packages/core/src/runtime/process-start-token.ts | 183 | export async function probeProcessStartTokenAsync( | CODE |
| LOW | sdk/packages/core/src/runtime/process-start-token.ts | 242 | export async function getProcessStartTokenAsync( | CODE |
| LOW | …/packages/core/src/runtime/tools/subprocess-sandbox.ts | 123 | export function resolveSubprocessRuntimeExecutable( | CODE |
| LOW | …/packages/core/src/runtime/tools/subprocess-sandbox.ts | 158 | export function buildSubprocessSandboxCommand( | CODE |
| LOW | sdk/packages/core/src/runtime/tools/tool-approval.ts | 29 | export async function requestDesktopToolApproval( | CODE |
| LOW | …core/src/runtime/tools/subprocess-sandbox-lifecycle.ts | 20 | export function installParentDisconnectGuard( | CODE |
| LOW | sdk/packages/core/src/runtime/host/history.ts | 77 | function normalizeHistoryScanLimit(limit: number): number { | CODE |
| LOW | sdk/packages/core/src/runtime/host/history.ts | 92 | function extractSessionRecencyToken(sessionId: string): number { | CODE |
| 1970 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …rc/core/storage/__tests__/syncRemoteMcpServers.test.ts | 142 | result.mcpServers.should.not.have.property("old-server") | CODE |
| CRITICAL | …rc/core/storage/__tests__/syncRemoteMcpServers.test.ts | 196 | result.mcpServers.should.not.have.property("remove-server") | CODE |
| CRITICAL | …rc/core/storage/__tests__/syncRemoteMcpServers.test.ts | 209 | result.mcpServers.should.not.have.property("server-a") | CODE |
| CRITICAL | …rc/core/storage/__tests__/syncRemoteMcpServers.test.ts | 210 | result.mcpServers.should.not.have.property("server-b") | CODE |
| CRITICAL | …rc/core/storage/__tests__/syncRemoteMcpServers.test.ts | 268 | mockMcpHub.recordSettingsFingerprint.calledOnce.should.be.true() | CODE |
| CRITICAL | apps/vscode/src/test/slash-commands.test.ts | 50 | response.commands.length.should.be.greaterThanOrEqual(BASE_SLASH_COMMANDS.length) | CODE |
| CRITICAL | apps/vscode/src/test/slash-commands.test.ts | 259 | response.commands.length.should.be.greaterThanOrEqual(BASE_SLASH_COMMANDS.length) | CODE |
| CRITICAL | apps/vscode/src/test/slash-commands.test.ts | 282 | response.commands.length.should.be.greaterThanOrEqual(BASE_SLASH_COMMANDS.length) | CODE |
| CRITICAL | apps/vscode/src/__tests__/config.test.ts | 459 | ClineEndpoint.config.environment.should.not.equal(Environment.selfHosted) | CODE |
| CRITICAL | …osts/vscode/__tests__/vscode-to-file-migration.test.ts | 523 | tombstone.sources.vscodeGlobalStorage.path.should.equal( | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 74 | cbs.stubs.deleteConnection.called.should.be.false() | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 75 | cbs.stubs.connectToServer.called.should.be.false() | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 97 | cbs.stubs.deleteConnection.called.should.be.false() | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 111 | cbs.stubs.deleteConnection.calledOnce.should.be.true() | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 112 | cbs.stubs.connectToServer.calledOnce.should.be.true() | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 116 | cbs.stubs.notifyWebviewOfServerChanges.called.should.be.true() | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 303 | cbs.stubs.delay.callCount.should.equal(2) | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 309 | cbs.stubs.connectToServer.callCount.should.equal(2) | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 384 | cbs.stubs.appendErrorMessage.calledOnce.should.be.true() | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 385 | cbs.stubs.connectToServer.called.should.be.false() | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 402 | cbs.stubs.connectToServer.callCount.should.equal(3) | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 406 | cbs.stubs.delay.callCount.should.equal(3) | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 426 | cbs.stubs.delay.calledOnce.should.be.true() | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 427 | cbs.stubs.deleteConnection.called.should.be.false() | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 428 | cbs.stubs.connectToServer.called.should.be.false() | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 440 | cbs.stubs.deleteConnection.called.should.be.false() | CODE |
| CRITICAL⚡ | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 441 | cbs.stubs.connectToServer.called.should.be.false() | CODE |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 86 | cbs.stubs.deleteConnection.called.should.be.false() | CODE |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 129 | cbs.stubs.notifyWebviewOfServerChanges.calledTwice.should.be.true() | CODE |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 144 | cbs.stubs.connectToServer.calledOnce.should.be.true() | CODE |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 145 | cbs.stubs.deleteConnection.calledOnce.should.be.true() | CODE |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 167 | cbs.stubs.connectToServer.calledOnce.should.be.true() | CODE |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 259 | cbs.stubs.connectToServer.callCount.should.equal(2) | CODE |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 274 | cbs.stubs.notifyWebviewOfServerChanges.callCount.should.equal(3) | CODE |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 287 | cbs.stubs.connectToServer.calledOnce.should.be.true() | CODE |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 344 | cbs.stubs.connectToServer.callCount.should.equal(TEST_CONFIG.maxAttempts) | CODE |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 348 | cbs.stubs.appendErrorMessage.calledOnce.should.be.true() | CODE |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 370 | cbs.stubs.notifyWebviewOfServerChanges.called.should.be.true() | CODE |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 372 | cbs.stubs.appendErrorMessage.called.should.be.false() | CODE |
| CRITICAL | …s/mcp/__tests__/StreamableHttpReconnectHandler.test.ts | 472 | cbs.stubs.appendErrorMessage.calledOnce.should.be.true() | CODE |
| CRITICAL | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 91 | client.request.calledOnce.should.be.true() | CODE |
| CRITICAL | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 102 | client.request.calledOnce.should.be.true() | CODE |
| CRITICAL | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 167 | requestOptions.timeout.should.be.a.Number() | CODE |
| CRITICAL | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 223 | client.request.calledOnce.should.be.true() | CODE |
| CRITICAL | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 350 | telemetryService.captureMcpToolCall.calledTwice.should.be.true() | CODE |
| CRITICAL | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 371 | telemetryService.captureMcpToolCall.calledTwice.should.be.true() | CODE |
| CRITICAL | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 410 | result.content.should.be.an.Array() | CODE |
| CRITICAL | …ode/src/services/mcp/__tests__/McpHub.callTool.test.ts | 421 | result.content.should.be.an.Array() | CODE |
| CRITICAL | …s/mcp/__tests__/McpHub.toggleServerDisabledRPC.test.ts | 99 | persisted.mcpServers.alpha.disabled.should.equal(true) | CODE |
| CRITICAL | …s/mcp/__tests__/McpHub.toggleServerDisabledRPC.test.ts | 116 | persisted.mcpServers.alpha.disabled.should.equal(false) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | sdk/scripts/release.ts | 24 | // ── CLI args ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/scripts/release.ts | 77 | // ── Constants ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/scripts/release.ts | 93 | // ── Helpers ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/scripts/release.ts | 392 | // ── SDK Release ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/scripts/release.ts | 485 | // ── CLI Release ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/scripts/release.ts | 541 | // ── Main ────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/packages/ui/components/button.tsx | 21 | // ─── Button ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/packages/ui/components/button.tsx | 190 | // ─── IconButton ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/packages/ui/stories/button.stories.tsx | 23 | // ─── Shared fixtures ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/packages/ui/stories/button.stories.tsx | 75 | // ─── Stories ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/packages/core/src/types/session.ts | 101 | // ── Persistence interfaces ──────────────────────────────────────────── | COMMENT |
| MEDIUM | …k/packages/core/src/runtime/host/local-runtime-host.ts | 500 | // ── Public API ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …k/packages/core/src/runtime/host/local-runtime-host.ts | 1986 | // ── Turn execution ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …k/packages/core/src/runtime/host/local-runtime-host.ts | 2435 | // ── Session lifecycle ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …k/packages/core/src/runtime/host/local-runtime-host.ts | 2780 | // ── OAuth & auth ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …k/packages/core/src/runtime/host/local-runtime-host.ts | 2829 | // ── Utility methods ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | …k/packages/core/src/runtime/host/local-runtime-host.ts | 3022 | // ── Session service invocation ────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/packages/shared/src/vcr.ts | 41 | // ── Types ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/packages/shared/src/vcr.ts | 62 | // ── Sensitive data sanitization ───────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/packages/shared/src/vcr.ts | 351 | // ── URL helpers ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/packages/shared/src/vcr.ts | 451 | // ── Config resolution ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/packages/shared/src/vcr.ts | 481 | // ── Record mode ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/packages/shared/src/vcr.ts | 661 | // ── Playback mode ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | sdk/packages/shared/src/vcr.ts | 877 | // ── Public API ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 2021 | // ── SSH remote environments ────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 2222 | // ── Chat session commands ────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 2262 | // ── Session data reading ────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 2362 | // ── Process context ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 2449 | // ── Managed hub upgrade ─────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 2488 | // ── Tool approvals (in-memory) ──────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 2560 | // ── Session discovery ───────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 2715 | // ── Session import from other coding tools ──────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 2965 | // ── Workspace file search ───────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 2971 | // ── External links ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 2989 | // ── Cline account ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 3034 | // ── Cline integrations (GitHub App) ──────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 3107 | // ── Local models (Ollama, LM Studio) ─────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 3112 | // ── Provider management ──────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 3442 | // ── Global settings ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 3490 | // ── Connector channels ───────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 3501 | // ── MCP server management ───────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 3701 | // ── Git operations ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 3944 | // ── Routine schedules ───────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 3957 | // ── Agenda task queue ───────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 3968 | // ── User instruction configs ────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/commands.ts | 4064 | // ── Native OS commands ──────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/composio.ts | 160 | // ── Persisted state ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/composio.ts | 341 | // ── Availability (entitlement) ───────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/composio.ts | 417 | // ── Status ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/composio.ts | 639 | // ── Toolkit catalog ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/composio.ts | 724 | // ── Connect / disconnect ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/examples/desktop-app/sidecar/composio.ts | 1058 | // ── Connection finalization ────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | apps/vscode/scripts/run-extension-host.sh | 33 | # ┌────────────┬────────────┬────────────┬────────────┐ | COMMENT |
| MEDIUM⚡ | apps/vscode/scripts/run-extension-host.sh | 35 | # └────────────┴────────────┴────────────┴────────────┘ | COMMENT |
| MEDIUM | apps/vscode/src/core/storage/utils/state-helpers.ts | 19 | // ─── File-backed storage readers (used by StateManager) ──────────────────── | COMMENT |
| MEDIUM | apps/vscode/src/dev/debug-harness/server.ts | 325 | // ──────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/vscode/src/dev/debug-harness/server.ts | 327 | // ──────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/vscode/src/dev/debug-harness/server.ts | 576 | // ──────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/vscode/src/dev/debug-harness/server.ts | 578 | // ──────────────────────────────────────────── | COMMENT |
| MEDIUM | apps/vscode/src/dev/debug-harness/server.ts | 747 | // ──────────────────────────────────────────── | COMMENT |
| 29 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdk/examples/plugins/weather-metrics.ts | 41 | capabilities: ["tools", "hooks"], | COMMENT |
| LOW | sdk/examples/hooks/PreToolUse_ClineignoreGuard.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | sdk/packages/ui/components/agent-chat/tool-diff.tsx | 61 | }; | COMMENT |
| LOW | sdk/packages/ui/components/agent-chat/tool-diff.tsx | 141 | // the app's root font size. The rem-based text tokens scale | COMMENT |
| LOW | sdk/packages/core/vitest.e2e.config.ts | 1 | import { defineConfig } from "vitest/config"; | COMMENT |
| LOW | …k/packages/core/src/extensions/tools/executors/bash.ts | 1041 | detachedLog?.write(err.finalChunk); | COMMENT |
| LOW | sdk/packages/core/src/extensions/context/compaction.ts | 481 | }, | COMMENT |
| LOW | …ges/core/src/extensions/plugin/plugin-module-import.ts | 741 | .map(([specifier]) => getPackageName(specifier)); | COMMENT |
| LOW | sdk/packages/core/src/extensions/mcp/client.ts | 41 | result?: unknown; | COMMENT |
| LOW | sdk/packages/core/src/extensions/mcp/client.ts | 61 | // overrides this in either direction. Dead commands still fail fast through | COMMENT |
| LOW | sdk/packages/core/src/hooks/checkpoint-hooks.ts | 501 | // deleted. Fire-and-forget: pruning failures never affect the session. | COMMENT |
| LOW | …k/packages/core/src/hub/server/hub-websocket-server.ts | 921 | // with the instance lock held. Retirement follows the same rules | COMMENT |
| LOW | sdk/packages/core/src/hub/server/browser-websocket.ts | 341 | ); | COMMENT |
| LOW | sdk/packages/agents/src/agent-runtime.ts | 2281 | // Only retry a provider-rejected overflow with a request that is | COMMENT |
| LOW | sdk/packages/shared/src/parse/json.ts | 81 | } | COMMENT |
| LOW | sdk/packages/shared/src/parse/shell.ts | 361 | executable: selectNestedExecutable(shell, nested.executable), | COMMENT |
| LOW | sdk/packages/shared/src/parse/shell.ts | 381 | // Fail-fast is a deliberate tradeoff: Stop promotes every | COMMENT |
| LOW | sdk/packages/shared/src/session/records.ts | 1 | export const SESSION_STATUS_VALUES = [ | COMMENT |
| LOW | sdk/packages/llms/src/providers/builtins.ts | 521 | // Cline's inference backend currently rejects image-output models. Keep | COMMENT |
| LOW | sdk/packages/llms/src/providers/builtins.ts | 1241 | // while the CLI's own tools stay enabled with no approval plumbing — | COMMENT |
| LOW | sdk/packages/llms/src/providers/model-facts.ts | 241 | const family = normalizeRoutingValue(options.family); | COMMENT |
| LOW | sdk/packages/llms/src/providers/model-facts.ts | 261 | // - New gpt families up to gpt-9 match without changes. The version digit | COMMENT |
| LOW | …src/providers/middleware/stream-part-classification.ts | 1 | // Single, exhaustive classification of every `LanguageModelV4StreamPart`. | COMMENT |
| LOW | …/llms/src/providers/middleware/retry-empty-response.ts | 1 | // LanguageModelV4 middleware that retries a stream when the model returns an | COMMENT |
| LOW | …/llms/src/providers/middleware/retry-empty-response.ts | 21 | // `ai-sdk.ts` (see `withEmptyResponseRetry`); vendors can opt out or tune | COMMENT |
| LOW | …/llms/src/providers/middleware/retry-empty-response.ts | 41 | // ECONNRESET`, `fetch failed: HeadersTimeoutError`. The AI SDK's own retry | COMMENT |
| LOW | …ges/llms/src/providers/middleware/split-tool-images.ts | 1 | // LanguageModelV4 middleware that recovers image bytes from | COMMENT |
| LOW | …ges/llms/src/providers/middleware/split-tool-images.ts | 21 | // tool-result then carries only text — safe for any wire format. | COMMENT |
| LOW | sdk/packages/llms/src/providers/vendors/bedrock.ts | 21 | "AWS_SESSION_TOKEN", | COMMENT |
| LOW | sdk/packages/llms/src/providers/vendors/bedrock.ts | 41 | // honored, and bare ids of models known to have no on-demand throughput are | COMMENT |
| LOW | sdk/packages/llms/src/providers/vendors/ollama.ts | 1 | // Ollama vendor backed by the native Ollama API (`/api/chat`) via the | COMMENT |
| LOW | …s/src/providers/vendors/openai-compatible.wire.test.ts | 1 | // Wire-contract tests for reasoning effort on OpenAI-compatible providers, | COMMENT |
| LOW | …ackages/llms/src/providers/vendors/ollama.wire.test.ts | 1 | // Wire-contract tests for the Ollama vendor, exercised through the *real* | COMMENT |
| LOW | sdk/packages/llms/src/providers/vendors/community.ts | 21 | // it: @jerome-benoit/sap-ai-provider bundles a second, private copy of util. | COMMENT |
| LOW | sdk/packages/llms/src/providers/vendors/community.ts | 201 | return { | COMMENT |
| LOW | …ages/llms/src/providers/vendors/sapaicore.wire.test.ts | 1 | // Wire-contract tests for SAP AI Core, exercised through the real | COMMENT |
| LOW | …ackages/llms/src/providers/vendors/google.wire.test.ts | 1 | // Wire-contract tests for Gemini reasoning and output limits, exercised | COMMENT |
| LOW | …ckages/llms/src/providers/vendors/bedrock.wire.test.ts | 1 | // Wire-contract tests for Bedrock reasoning, exercised through the *real* | COMMENT |
| LOW | …ckages/llms/src/providers/vendors/openai-compatible.ts | 281 | // image-data parts get split into a placeholder text + a synthetic | COMMENT |
| LOW | …ges/llms/src/providers/routing/anthropic-compatible.ts | 341 | // budget_tokens control is also advertised, so a numeric request | COMMENT |
| LOW | .github/workflows/ext-vscode-ab-package.yml | 121 | # The legacy branch is the npm codebase, so the bun-based reusable workflow | COMMENT |
| LOW | .github/workflows/desktop-publish.yml | 201 | # Beta releases do not weaken this: a beta publish is ALSO dispatched from | COMMENT |
| LOW | .github/workflows/desktop-publish.yml | 361 | # from APPLE_API_KEY; APPLE_API_KEY_ID alone silently skips notarization. | COMMENT |
| LOW | .github/workflows/desktop-publish.yml | 701 | uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5 # v2.3.0 | COMMENT |
| LOW | .github/workflows/repo-delete-agent-promo-comments.yml | 1 | # Some coding-agent GitHub Apps advertise themselves by auto-commenting on every | COMMENT |
| LOW | .github/workflows/ext-vscode-publish-nightly.yml | 1 | name: ext-vscode-publish-nightly | COMMENT |
| LOW | .github/workflows/ext-vscode-publish.yml | 1 | name: ext-vscode-publish | COMMENT |
| LOW | .github/workflows/ext-vscode-publish.yml | 241 | # reported artifact before widening it. | COMMENT |
| LOW | .github/workflows/ext-vscode-publish-stable.yml | 281 | run: | | COMMENT |
| LOW | apps/cli/script/publish-npm.ts | 1 | #!/usr/bin/env bun | COMMENT |
| LOW | apps/cli/src/cli.tuistory.e2e.test.ts | 1 | // --------------------------------------------------------------------------- | COMMENT |
| LOW | apps/cli/src/tui/palette.ts | 41 | addedLineNumberBg: "#ccf0d2", | COMMENT |
| LOW | apps/cli/src/tui/palette.ts | 61 | // 1. Convert the terminal's detected background to OKLAB. | COMMENT |
| LOW | apps/cli/src/tests/cli/flags-behavior.test.ts | 1 | // --------------------------------------------------------------------------- | COMMENT |
| LOW | apps/cli/src/tests/interactive/chat.test.ts | 1 | // --------------------------------------------------------------------------- | COMMENT |
| LOW | …s/cli/src/tests/headless/per-turn-metrics.live.test.ts | 1 | // --------------------------------------------------------------------------- | COMMENT |
| LOW | apps/cli/src/tests/helpers/process.ts | 1 | // --------------------------------------------------------------------------- | COMMENT |
| LOW | …examples/desktop-app/webview/hooks/use-chat-session.ts | 2101 | if (payload.stream === "chat_done") { | COMMENT |
| LOW | …examples/desktop-app/webview/hooks/use-chat-session.ts | 2321 | ) { | COMMENT |
| LOW | …mples/desktop-app/webview/hooks/use-session-history.ts | 621 | // check alone would miss them; the executions list is the authoritative | COMMENT |
| 74 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .claude/commands/hotfix-release.md | 13 | ## Step 1: Setup and Gather Information | COMMENT |
| LOW | .claude/commands/hotfix-release.md | 27 | ## Step 2: Present Commits Since Last Release | COMMENT |
| LOW | .claude/commands/hotfix-release.md | 53 | ## Step 3: Analyze Selected Commits | COMMENT |
| LOW | .claude/commands/hotfix-release.md | 62 | ## Step 4: Determine New Version Number | COMMENT |
| LOW | .claude/commands/hotfix-release.md | 76 | ## Step 5: Create Release Notes Commit on Main | COMMENT |
| LOW | .claude/commands/hotfix-release.md | 118 | ## Step 6: Build the Hotfix on the Tag | COMMENT |
| LOW | .claude/commands/hotfix-release.md | 143 | ## Step 7: Tag and Push | COMMENT |
| LOW | .claude/commands/hotfix-release.md | 155 | ## Step 8: Return to Main and Summary | COMMENT |
| LOW⚡ | sdk/scripts/release.ts | 413 | // Step 1: Tests | COMMENT |
| LOW⚡ | sdk/scripts/release.ts | 421 | // Step 2: Update versions | COMMENT |
| LOW⚡ | sdk/scripts/release.ts | 426 | // Step 3: Verify publishability | COMMENT |
| LOW⚡ | sdk/scripts/release.ts | 430 | // Step 4: Publish in dependency order | COMMENT |
| LOW⚡ | sdk/scripts/release.ts | 505 | // Step 1: Tests | COMMENT |
| LOW⚡ | sdk/scripts/release.ts | 513 | // Step 2: Build all platform binaries | COMMENT |
| LOW⚡ | sdk/scripts/release.ts | 519 | // Step 3: Publish to npm | COMMENT |
| LOW | sdk/scripts/release.ts | 446 | // Step 5: Git tag | COMMENT |
| LOW | .clinerules/workflows/git-branch-analysis.md | 6 | ## Step 1: Gather Git Information | COMMENT |
| LOW⚡ | .clinerules/workflows/git-branch-analysis.md | 18 | ## Step 2: Silent, Structured Analysis Phase | COMMENT |
| LOW⚡ | .clinerules/workflows/git-branch-analysis.md | 24 | ## Step 3: Context Gathering | COMMENT |
| LOW⚡ | .clinerules/workflows/git-branch-analysis.md | 34 | ## Step 4: Ready for User Interaction | COMMENT |
| LOW | .clinerules/workflows/hotfix-release.md | 13 | ## Step 1: Setup and Gather Information | COMMENT |
| LOW | .clinerules/workflows/hotfix-release.md | 27 | ## Step 2: Present Commits Since Last Release | COMMENT |
| LOW | .clinerules/workflows/hotfix-release.md | 53 | ## Step 3: Analyze Selected Commits | COMMENT |
| LOW | .clinerules/workflows/hotfix-release.md | 62 | ## Step 4: Determine New Version Number | COMMENT |
| LOW | .clinerules/workflows/hotfix-release.md | 76 | ## Step 5: Create Release Notes Commit on Main | COMMENT |
| LOW | .clinerules/workflows/hotfix-release.md | 118 | ## Step 6: Build the Hotfix on the Tag | COMMENT |
| LOW | .clinerules/workflows/hotfix-release.md | 143 | ## Step 7: Tag and Push | COMMENT |
| LOW | .clinerules/workflows/hotfix-release.md | 155 | ## Step 8: Return to Main and Summary | COMMENT |
| LOW | .clinerules/workflows/pr-review.md | 126 | ## Step 1: Gather PR Information | COMMENT |
| LOW | .clinerules/workflows/pr-review.md | 136 | ## Step 2: Understand the Context | COMMENT |
| LOW | .clinerules/workflows/pr-review.md | 157 | ## Step 3: Analyze the Changes | COMMENT |
| LOW | .clinerules/workflows/pr-review.md | 169 | ## Step 4: Ask for User Confirmation | COMMENT |
| LOW | .clinerules/workflows/pr-review.md | 187 | ## Step 5: Ask if User Wants a Comment Drafted | COMMENT |
| LOW | .clinerules/workflows/pr-review.md | 196 | ## Step 6: Make a Decision | COMMENT |
| LOW | .cline/skills/publish-cli/SKILL.md | 35 | ## Step 0: Release the SDK first if it changed | COMMENT |
| LOW | apps/cli/script/publish-npm.ts | 242 | // Step 1: Publish platform-specific packages (in parallel) | COMMENT |
| LOW | apps/cli/script/publish-npm.ts | 260 | // Step 2: Generate and publish the main wrapper package | COMMENT |
| LOW | apps/examples/desktop-app/sidecar/chat-test.ts | 100 | // Step 1: Start a session | COMMENT |
| LOW | apps/examples/desktop-app/sidecar/chat-test.ts | 125 | // Step 2: Send a prompt | COMMENT |
| LOW | apps/vscode/webview-ui/src/App.stories.tsx | 321 | // Step 0: User type selection should be visible | COMMENT |
| LOW | apps/vscode/webview-ui/src/App.stories.tsx | 339 | // Step 1: Model selection should be visible | COMMENT |
| LOW⚡ | …ui/src/components/chat/chat-view/utils/messageUtils.ts | 322 | // Step 1: Find the MOST RECENT api_req_started overall (search backwards) | COMMENT |
| LOW⚡ | …ui/src/components/chat/chat-view/utils/messageUtils.ts | 342 | // Step 2: Determine if most recent api_req is complete (has cost) or incomplete (no cost) | COMMENT |
| LOW⚡ | …ui/src/components/chat/chat-view/utils/messageUtils.ts | 351 | // Step 3: Determine which tools are "in current activities" | COMMENT |
| LOW⚡ | apps/vscode/scripts/run-extension-host.sh | 19 | # Step 1: Build protos (everything depends on this) | COMMENT |
| LOW⚡ | apps/vscode/scripts/run-extension-host.sh | 23 | # Step 2: Build webview once | COMMENT |
| LOW⚡ | apps/vscode/scripts/run-extension-host.sh | 27 | # Step 3: Kill existing session if one is running | COMMENT |
| LOW⚡ | apps/vscode/scripts/run-extension-host.sh | 31 | # Step 4: Create tmux session with 4 vertical panes | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 68 | // Step 1: Verify hook doesn't exist initially | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 72 | // Step 2: Create the hook | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 79 | // Step 3: Verify hook was created and is disabled (644 permissions) | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 95 | // Step 4: Enable the hook | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 103 | // Step 5: Verify hook is now enabled (executable) | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 113 | // Step 6: Disable the hook | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 121 | // Step 7: Verify hook is now disabled again | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 134 | // Step 8: Delete the hook | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 141 | // Step 9: Verify hook is gone | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 150 | // Step 10: Final refresh to confirm clean state | COMMENT |
| LOW⚡ | apps/vscode/src/standalone/cline-core.ts | 280 | // Step 1: Tell the paired host bridge to shut down | COMMENT |
| LOW⚡ | apps/vscode/src/standalone/cline-core.ts | 288 | // Step 2: Clean up lock manager entry | COMMENT |
| 5 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | sdk/scripts/release.ts | 413 | // Step 1: Tests | COMMENT |
| LOW⚡ | sdk/scripts/release.ts | 421 | // Step 2: Update versions | COMMENT |
| LOW⚡ | sdk/scripts/release.ts | 426 | // Step 3: Verify publishability | COMMENT |
| LOW⚡ | sdk/scripts/release.ts | 430 | // Step 4: Publish in dependency order | COMMENT |
| LOW⚡ | sdk/scripts/release.ts | 505 | // Step 1: Tests | COMMENT |
| LOW⚡ | sdk/scripts/release.ts | 513 | // Step 2: Build all platform binaries | COMMENT |
| LOW⚡ | sdk/scripts/release.ts | 519 | // Step 3: Publish to npm | COMMENT |
| LOW | sdk/scripts/release.ts | 446 | // Step 5: Git tag | COMMENT |
| LOW | apps/cli/script/publish-npm.ts | 242 | // Step 1: Publish platform-specific packages (in parallel) | COMMENT |
| LOW | apps/cli/script/publish-npm.ts | 260 | // Step 2: Generate and publish the main wrapper package | COMMENT |
| LOW | apps/examples/desktop-app/sidecar/chat-test.ts | 100 | // Step 1: Start a session | COMMENT |
| LOW | apps/examples/desktop-app/sidecar/chat-test.ts | 125 | // Step 2: Send a prompt | COMMENT |
| LOW | apps/vscode/webview-ui/src/App.stories.tsx | 321 | // Step 0: User type selection should be visible | COMMENT |
| LOW | apps/vscode/webview-ui/src/App.stories.tsx | 339 | // Step 1: Model selection should be visible | COMMENT |
| LOW⚡ | …ui/src/components/chat/chat-view/utils/messageUtils.ts | 322 | // Step 1: Find the MOST RECENT api_req_started overall (search backwards) | COMMENT |
| LOW⚡ | …ui/src/components/chat/chat-view/utils/messageUtils.ts | 342 | // Step 2: Determine if most recent api_req is complete (has cost) or incomplete (no cost) | COMMENT |
| LOW⚡ | …ui/src/components/chat/chat-view/utils/messageUtils.ts | 351 | // Step 3: Determine which tools are "in current activities" | COMMENT |
| LOW⚡ | apps/vscode/scripts/run-extension-host.sh | 19 | # Step 1: Build protos (everything depends on this) | COMMENT |
| LOW⚡ | apps/vscode/scripts/run-extension-host.sh | 23 | # Step 2: Build webview once | COMMENT |
| LOW⚡ | apps/vscode/scripts/run-extension-host.sh | 27 | # Step 3: Kill existing session if one is running | COMMENT |
| LOW⚡ | apps/vscode/scripts/run-extension-host.sh | 31 | # Step 4: Create tmux session with 4 vertical panes | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 68 | // Step 1: Verify hook doesn't exist initially | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 72 | // Step 2: Create the hook | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 79 | // Step 3: Verify hook was created and is disabled (644 permissions) | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 95 | // Step 4: Enable the hook | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 103 | // Step 5: Verify hook is now enabled (executable) | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 113 | // Step 6: Disable the hook | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 121 | // Step 7: Verify hook is now disabled again | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 134 | // Step 8: Delete the hook | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 141 | // Step 9: Verify hook is gone | COMMENT |
| LOW⚡ | …ps/vscode/src/test/hook-management-integration.test.ts | 150 | // Step 10: Final refresh to confirm clean state | COMMENT |
| LOW⚡ | apps/vscode/src/standalone/cline-core.ts | 280 | // Step 1: Tell the paired host bridge to shut down | COMMENT |
| LOW⚡ | apps/vscode/src/standalone/cline-core.ts | 288 | // Step 2: Clean up lock manager entry | COMMENT |
| LOW | apps/vscode/src/standalone/cline-core.ts | 304 | // Step 3: Tear down services | COMMENT |
| LOW | apps/vscode/src/standalone/cline-core.ts | 317 | // Step 4: Exit the process | COMMENT |
| LOW | …ode/src/services/auth/oca/providers/OcaAuthProvider.ts | 200 | // Step 1: Nonce validation | COMMENT |
| LOW⚡ | …ode/src/services/auth/oca/providers/OcaAuthProvider.ts | 211 | // Step 2: Get access_token (this is what you'll use for APIs) | COMMENT |
| LOW⚡ | …ode/src/services/auth/oca/providers/OcaAuthProvider.ts | 219 | // Step 3: (Optional) Extract user info from id_token for local profile, not for API | COMMENT |
| LOW⚡ | …ode/src/services/auth/oca/providers/OcaAuthProvider.ts | 222 | // Step 4: Return only the access_token for downstream use | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdk/packages/core/scripts/telemetry-smoke-host.ts | 155 | email: "user@example.com", | CODE |
| LOW | sdk/packages/core/src/auth/cline.test.ts | 33 | email: "user@example.com", | CODE |
| LOW | sdk/packages/core/src/auth/cline.test.ts | 221 | email: "user@example.com", | CODE |
| LOW | sdk/packages/core/src/auth/cline.test.ts | 365 | email: "user@example.com", | CODE |
| LOW | sdk/packages/core/src/auth/cline.test.ts | 401 | email: "user@example.com", | CODE |
| LOW | sdk/packages/core/src/account/telemetry.test.ts | 13 | email: "user@example.com", | CODE |
| LOW | sdk/packages/core/src/account/telemetry.test.ts | 41 | email: "user@example.com", | CODE |
| LOW | …ackages/core/src/account/cline-account-service.test.ts | 91 | { organizationId: "org-1", name: "Acme Corp" }, | CODE |
| LOW | …ackages/core/src/account/cline-account-service.test.ts | 117 | name: "Acme Corp", | CODE |
| LOW | …ore/src/hub/server/handlers/connector-handlers.test.ts | 93 | values: { "-k": "123456:fake-token" }, | CODE |
| LOW | …ore/src/hub/server/handlers/connector-handlers.test.ts | 103 | expect(persisted?.values["-k"]).toBe("123456:fake-token"); | CODE |
| LOW | …ore/src/hub/server/handlers/connector-handlers.test.ts | 116 | "123456:fake-token", | CODE |
| LOW | …ore/src/hub/server/handlers/connector-handlers.test.ts | 207 | values: { "-k": "123456:fake-token" }, | CODE |
| LOW | …ore/src/hub/server/handlers/connector-handlers.test.ts | 219 | values: { "-k": "123456:fake-token" }, | CODE |
| LOW | …ore/src/hub/server/handlers/connector-handlers.test.ts | 250 | "123456:fake-token", | CODE |
| LOW | …ore/src/hub/server/handlers/connector-handlers.test.ts | 255 | values: { "-k": "123456:fake-token" }, | CODE |
| LOW | …ore/src/hub/server/handlers/connector-handlers.test.ts | 266 | connectArgs: ["-k", "123456:fake-token"], | CODE |
| LOW | …ore/src/hub/server/handlers/connector-handlers.test.ts | 340 | values: { "-k": "123456:fake-token" }, | CODE |
| LOW | apps/cli/src/tui/cline-account.test.ts | 231 | email: "user@example.com", | CODE |
| LOW | apps/cli/src/tui/cline-account.test.ts | 257 | email: "user@example.com", | CODE |
| LOW | apps/cli/src/tui/cline-account.test.ts | 276 | email: "user@example.com", | CODE |
| LOW | apps/cli/src/tui/views/onboarding/auth.test.ts | 133 | email: "user@example.com", | CODE |
| LOW | apps/cli/src/tui/views/onboarding/auth.test.ts | 161 | email: "user@example.com", | CODE |
| LOW | apps/cli/src/utils/telemetry.activation.test.ts | 68 | email: "user@example.com", | CODE |
| LOW | apps/cli/src/utils/telemetry.activation.test.ts | 71 | organizationName: "Acme Corp", | CODE |
| LOW | apps/cli/src/acp/organizations.test.ts | 12 | name: "Acme Corp", | CODE |
| LOW | apps/cli/src/acp/organizations.test.ts | 38 | { value: "org-1", name: "Acme Corp" }, | CODE |
| LOW | …vscode/webview-ui/src/components/ui/dialog.stories.tsx | 181 | defaultValue="John Doe" | CODE |
| LOW | …ew-ui/src/components/settings/SapAiCoreModelPicker.tsx | 120 | <VSCodeOption key="placeholder" value=""> | CODE |
| LOW | …de/webview-ui/src/components/chat/ErrorRow.stories.tsx | 266 | clineUser: { id: "user123", email: "user@example.com" }, | CODE |
| LOW | …onents/mcp/chat-display/McpResponseDisplay.stories.tsx | 76 | "Long response content.\n\nLorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt | CODE |
| LOW | …onents/mcp/chat-display/McpResponseDisplay.stories.tsx | 76 | "Long response content.\n\nLorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt | CODE |
| LOW | …webview-ui/src/components/account/AccountView.test.tsx | 62 | const user = { uid: "user-1", email: "user@example.com", displayName: "User", appBaseUrl: "https://app.cline.bot" } | CODE |
| LOW | …de/src/services/banner/__tests__/BannerService.test.ts | 24 | let token: string | null = "fake-token" | CODE |
| LOW | …de/src/services/banner/__tests__/BannerService.test.ts | 93 | token = "fake-token" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .agents/skills/cline-sdk/SKILL.md | 133 | ### "I need multi-agent coordination" | COMMENT |
| MEDIUM | sdk/examples/plugins/agents-squad/README.md | 50 | ### Typical orchestration | COMMENT |
| MEDIUM | sdk/packages/core/src/extensions/context/compaction.ts | 490 | // deterministically: the agentic strategy's own summarizer call could | COMMENT |
| MEDIUM | …ackages/core/src/extensions/context/compaction.test.ts | 2270 | // Repro for agentic auto-compaction permanently skipping in hosts like | COMMENT |
| MEDIUM | apps/cli/DISTRIBUTION.md | 178 | publish-npm.ts # npm publish orchestration | CODE |
| MEDIUM | apps/cli/DEVELOPMENT.md | 86 | agents/ # Stateless agent loop, tool orchestration, hooks | CODE |
| MEDIUM | apps/cli/DEVELOPMENT.md | 88 | core/ # Stateful orchestration, sessions, hub, storage, config | CODE |
| MEDIUM | apps/cli/src/runtime/interactive/compaction.test.ts | 17 | // Core defaults to the agentic compaction strategy, which summarizes via a | COMMENT |
| MEDIUM | apps/cli/src/runtime/interactive/compaction.test.ts | 214 | const mockSummary = "## Goal\nMocked agentic compaction summary"; | CODE |
| MEDIUM | apps/cli/src/runtime/interactive/compaction.test.ts | 250 | // The agentic strategy folds older messages into a summary message | COMMENT |
| MEDIUM | apps/vscode/README.marketplace.md | 26 | Thanks to [Claude Sonnet's agentic coding capabilities](https://www.anthropic.com/claude/sonnet), Cline can handle compl | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .claude/hooks/claude-code-for-web-setup.sh | 24 | # Check if GITHUB_TOKEN is set and configure gh | COMMENT |
| LOW | .github/scripts/tests/coverage_check_test.py | 109 | # Check if verbose mode is enabled | COMMENT |
| LOW | .github/scripts/coverage_check/util.py | 48 | # Check if command is in allowed list | COMMENT |
| LOW | .github/scripts/coverage_check/extraction.py | 79 | # Check if file exists and get its size | COMMENT |
| LOW | .github/scripts/coverage_check/extraction.py | 85 | # Check if the directory exists | COMMENT |
| LOW | .github/scripts/coverage_check/workflow.py | 276 | # Check if the coverage files exist | COMMENT |
| LOW⚡ | .github/scripts/coverage_check/workflow.py | 306 | # Check if the webview-ui directory exists | COMMENT |
| LOW | .github/scripts/coverage_check/workflow.py | 348 | # Check if we're running in GitHub Actions | COMMENT |
| LOW⚡ | .github/scripts/coverage_check/workflow.py | 415 | # Output results for GitHub Actions | COMMENT |
| LOW | apps/vscode/src/core/hooks/templates.ts | 139 | # Return result | COMMENT |
| LOW | apps/vscode/src/core/hooks/templates.ts | 179 | # Return result | COMMENT |
| LOW | apps/vscode/src/core/hooks/templates.ts | 220 | # Return result | COMMENT |
| LOW | apps/vscode/src/core/hooks/templates.ts | 312 | # Return result | COMMENT |
| LOW | apps/vscode/src/core/hooks/templates.ts | 346 | # Return result | COMMENT |
| LOW | apps/vscode/src/core/hooks/templates.ts | 465 | # Return result | COMMENT |
| LOW | apps/vscode/src/core/hooks/templates.ts | 491 | # Return result | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdk/examples/hooks/PostToolUse.py | 10 | CODE | |
| LOW | sdk/examples/hooks/PreToolUse_InjectContext.py | 10 | CODE | |
| LOW | .github/scripts/tests/coverage_check_test.py | 16 | CODE | |
| LOW | .github/scripts/coverage_check/util.py | 12 | CODE | |
| LOW | .github/scripts/coverage_check/util.py | 12 | CODE | |
| LOW | .github/scripts/coverage_check/__init__.py | 7 | CODE | |
| LOW | .github/scripts/coverage_check/__init__.py | 10 | CODE | |
| LOW | .github/scripts/coverage_check/__init__.py | 13 | CODE | |
| LOW | .github/scripts/coverage_check/__init__.py | 13 | CODE | |
| LOW | .github/scripts/coverage_check/__init__.py | 13 | CODE | |
| LOW | .github/scripts/coverage_check/__init__.py | 13 | CODE | |
| LOW | .github/scripts/coverage_check/__init__.py | 16 | CODE | |
| LOW | .github/scripts/coverage_check/__init__.py | 16 | CODE | |
| LOW | .github/scripts/coverage_check/__init__.py | 16 | CODE | |
| LOW | .github/scripts/coverage_check/__init__.py | 19 | CODE | |
| LOW | .github/scripts/coverage_check/extraction.py | 9 | CODE | |
| LOW | .github/scripts/coverage_check/extraction.py | 10 | CODE | |
| LOW | .github/scripts/coverage_check/workflow.py | 9 | CODE | |
| LOW | .github/scripts/coverage_check/workflow.py | 12 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdk/examples/hooks/PostToolUse.py | 23 | except Exception: | CODE |
| LOW | sdk/examples/hooks/PreToolUse_InjectContext.py | 25 | except Exception: | CODE |
| LOW | sdk/examples/hooks/PreToolUse_InjectContext.py | 38 | except Exception: | CODE |
| LOW | .github/scripts/tests/coverage_check_test.py | 95 | except Exception as e: | CODE |
| LOW | .github/scripts/coverage_check/util.py | 140 | except Exception as e: | CODE |
| LOW | .github/scripts/coverage_check/util.py | 162 | except Exception as e: | CODE |
| LOW | .github/scripts/coverage_check/util.py | 198 | except Exception as e: | CODE |
| LOW | .github/scripts/coverage_check/extraction.py | 100 | except Exception as e: | CODE |
| LOW | .github/scripts/coverage_check/extraction.py | 123 | except Exception as e: | CODE |
| LOW | .github/scripts/coverage_check/extraction.py | 258 | except Exception as e: | CODE |
| LOW | .github/scripts/coverage_check/workflow.py | 292 | except Exception as e: | CODE |
| LOW⚡ | .github/scripts/coverage_check/workflow.py | 316 | except Exception as e: | CODE |
| LOW⚡ | .github/scripts/coverage_check/workflow.py | 421 | except Exception as e: | CODE |
| LOW⚡ | .github/scripts/coverage_check/workflow.py | 431 | except Exception as e2: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | apps/vscode/src/services/telemetry/TelemetryService.ts | 274 | // Tracks when users select an option from AI-generated followup questions | COMMENT |
| HIGH | apps/vscode/src/services/telemetry/TelemetryService.ts | 276 | // Tracks when users type a custom response instead of selecting an option from AI-generated followup questions | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/scripts/tests/coverage_check_test.py | 202 | # Create a temporary comment file | COMMENT |
| MEDIUM | .github/scripts/tests/coverage_check_test.py | 224 | # Create a temporary comment file | COMMENT |
| MEDIUM⚡ | .github/scripts/coverage_check/workflow.py | 333 | # Initialize all variables at the start | COMMENT |
| MEDIUM | .github/scripts/coverage_check/__main__.py | 30 | # Create main parser that inherits common arguments | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | evals/analysis/patterns/cline-failures.yaml | 36 | # Infrastructure/harness failures | COMMENT |
| MEDIUM | sdk/packages/shared/src/remote-config/schema.test.ts | 659 | "# Optional Guidelines\n\nConsider these best practices...", | CODE |
| MEDIUM | …vscode/webview-ui/src/components/chat/ChatTextArea.tsx | 891 | // NOTE: callbacks dont utilize return function to cleanup, but it's fine since this timeout immediately executes a | COMMENT |
| MEDIUM | …code/src/shared/remote-config/__tests__/schema.test.ts | 671 | contents: "# Optional Guidelines\n\nConsider these best practices...", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | .github/scripts/coverage_check/extraction.py | 194 | Run a coverage command and extract the coverage percentage. Args: command: Command to run | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/scripts/coverage_check/extraction.py | 64 | CODE | |
| LOW | .github/scripts/coverage_check/workflow.py | 264 | CODE | |
| LOW | .github/scripts/coverage_check/__main__.py | 25 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | apps/vscode/webview-ui/src/utils/getLanguageFromPath.ts | 83 | // Example usage: | COMMENT |
| LOW | apps/vscode/src/shared/multi-root/types.ts | 18 | // Example usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | apps/vscode/webview-ui/src/App.stories.tsx | 68 | **Note**: In Storybook, some features like file operations, command execution, and API calls are mocked for demonstratio | CODE |