DeepSeek Harness: Everything is a Plugin.
This report summarizes scanner evidence for deepseek-ai/deepseek-harness, a TypeScript project with 267,675 GitHub stars. SynthScan examined 2,258,649 lines of code across 18542 source files, recording 2756 pattern matches distributed across 18 syntactic categories. The legacy adjusted pattern signal is 2.0 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 2389 finding(s).
Are imports declared and package/API names verified? 308 finding(s).
Are wrappers, guards, and repeated structures necessary? 1166 finding(s).
Which changes need focused human review? 2756 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 2756 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …experimental/client-ui-forge/tests/states.host.spec.ts | 126 | expect(f.sources.watch.mock.calls.map(([target]) => target.number)).toEqual([7, 8]) | CODE |
| CRITICAL | …experimental/client-ui-forge/tests/states.host.spec.ts | 139 | expect(f.sources.watch.mock.calls.map(([target]) => target.number)).toEqual([7, 8]) | CODE |
| CRITICAL | …ntal/client-ui-forge/tests/changes-tab.client.spec.tsx | 421 | expect(m.faces.localDiff.mock.calls.map(([scope]) => scope.kind)).toEqual(['branch', 'staged', 'unstaged', 'uncommit | CODE |
| CRITICAL | …imental/liveshare/tests/owner-share-operations.spec.ts | 362 | expect(h.tunnel.send.mock.calls.map(call => call[0].type)).toEqual(['remove-share', 'add-share']) | CODE |
| CRITICAL | …imental/liveshare/tests/owner-share-operations.spec.ts | 399 | expect(h.tunnel.send.mock.calls.map(call => call[0].type)).toEqual(['remove-share', 'add-share']) | CODE |
| CRITICAL | packages/experimental/cua/tests/api.spec.ts | 63 | const emitted = f.sink.text.mock.calls.map(([text]): unknown => JSON.parse(text)) | CODE |
| CRITICAL | packages/experimental/cua/tests/api.spec.ts | 249 | expect(f.sink.text.mock.calls.map(([text]) => text)).toEqual(['Tree 1', 'Tree 2', 'Tree 3']) | CODE |
| CRITICAL | …tal/cua-macos/native/tests/blender_keyboard_fixture.py | 97 | keymap = bpy.context.window_manager.keyconfigs.active.keymaps.get("Text") | CODE |
| CRITICAL | …/core/agent-loop/tests/system-prompt-admission.spec.ts | 138 | const seq = h.agent.session.surface.nodes.find(seq => h.agent.session.eventAt(seq)?.type === 'user/message')! | CODE |
| CRITICAL | …/core/agent-loop/tests/system-prompt-admission.spec.ts | 272 | const seq = h.agent.session.surface.nodes.findLast(node => h.agent.session.eventAt(node)?.type === 'user/message')! | CODE |
| CRITICAL | packages/core/agent-loop/src/agent.ts | 588 | const maxParallelToolCalls = this.loopCtx.agentLoop.config.maxParallelToolCalls.get() | CODE |
| CRITICAL | …sions/cordis-host-runner/tests/sandbox-context.spec.ts | 74 | // `ctx.systemPrompt.ctx.root.tools.register(…)` would escape the façade; service-return | COMMENT |
| CRITICAL | …sions/cordis-host-runner/tests/sandbox-context.spec.ts | 84 | ctx.systemPrompt.ctx.root.tools.register({ | CODE |
| CRITICAL | …es/api/session-controller/tests/manager.client.spec.ts | 871 | expect(remote.subagents.prompt.mock.calls.map(([request]) => request)).toEqual([ | CODE |
| CRITICAL⚡ | …es/api/session-controller/tests/manager.client.spec.ts | 882 | expect(remote.session.prompt.mock.calls.map(([request]) => request)).toEqual([]) | CODE |
| CRITICAL⚡ | …es/api/session-controller/tests/manager.client.spec.ts | 883 | const listCalls = remote.session.projections.mock.calls.map(([request]) => request).length | CODE |
| CRITICAL⚡ | …es/api/session-controller/tests/manager.client.spec.ts | 888 | expect(remote.session.projections.mock.calls.map(([request]) => request)).toHaveLength(listCalls) | CODE |
| CRITICAL | …es/api/session-controller/tests/manager.client.spec.ts | 934 | expect(remote.session.projections.mock.calls.map(([request]) => request)).toEqual([]) | CODE |
| CRITICAL | …es/api/session-controller/tests/manager.client.spec.ts | 1017 | expect(remote.session.projections.mock.calls.map(([request]) => request)).toHaveLength(1) | CODE |
| CRITICAL | …es/api/session-controller/tests/manager.client.spec.ts | 1049 | expect(remote.session.projections.mock.calls.map(([request]) => request)).toHaveLength(1) | CODE |
| CRITICAL | …es/api/session-controller/tests/manager.client.spec.ts | 1097 | expect(remote.session.projections.mock.calls.map(([request]) => request)).toHaveLength(1) | CODE |
| CRITICAL | …es/api/session-controller/tests/manager.client.spec.ts | 1114 | expect(remote.session.projections.mock.calls.map(([request]) => request)).toHaveLength(1) | CODE |
| CRITICAL | …es/api/session-controller/tests/manager.client.spec.ts | 1155 | expect(remote.session.projections.mock.calls.map(([request]) => request)).toHaveLength(1) | CODE |
| CRITICAL | …es/api/session-controller/tests/manager.client.spec.ts | 1508 | const reads = remote.session.projections.mock.calls.map(([request]) => request).length | CODE |
| CRITICAL | …es/api/session-controller/tests/manager.client.spec.ts | 1517 | expect(remote.session.projections.mock.calls.map(([request]) => request)).toHaveLength(reads + 1) | CODE |
| CRITICAL | …es/api/session-controller/tests/manager.client.spec.ts | 1532 | expect(remote.session.projections.mock.calls.map(([request]) => request)).toHaveLength(2) | CODE |
| CRITICAL | …es/api/session-controller/tests/manager.client.spec.ts | 1540 | expect(remote.session.projections.mock.calls.map(([request]) => request)).toHaveLength(2) | CODE |
| CRITICAL | …es/api/session-controller/tests/manager.client.spec.ts | 1587 | expect(remote.session.list.mock.calls.map(([request]) => request)).toHaveLength(1) | CODE |
| CRITICAL | …es/api/session-controller/tests/manager.client.spec.ts | 1590 | expect(remote.session.projections.mock.calls.map(([request]) => request)).toEqual([ | CODE |
| CRITICAL⚡ | …ssion-controller/tests/sessions-service.client.spec.ts | 1016 | b.mock.remote.session.fork.mockResolvedValue(ok({ sessionId: sid('child') })) | CODE |
| CRITICAL⚡ | …ssion-controller/tests/sessions-service.client.spec.ts | 1026 | b.mock.remote.session.fork.mockResolvedValue(ok({ sessionId: sid('child') })) | CODE |
| CRITICAL⚡ | …ssion-controller/tests/sessions-service.client.spec.ts | 1030 | b.mock.remote.session.fork.mockResolvedValue(ok({ sessionId: sid('child-2') })) | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 66 | b.mock.remote.session.list.mockResolvedValue(ok({ | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 88 | b.mock.remote.session.list.mockResolvedValue(ok({ items: [historical] })) | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 95 | b.mock.remote.session.list.mockReturnValueOnce(pending.promise) | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 154 | b.mock.remote.session.search.mockResolvedValue(ok({ | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 583 | b.mock.remote.session.follow.mockImplementation((request, signal) => { | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 653 | b.mock.remote.session.follow.mockImplementation((request, signal) => { | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 758 | b.mock.remote.session.projections.mockResolvedValue(ok({ | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 789 | b.mock.remote.session.projections.mockResolvedValue(ok({ | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 806 | b.mock.remote.session.projections.mockImplementation((payload) => { | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 845 | b.mock.remote.session.projections.mockImplementation((payload) => { | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 887 | b.mock.remote.session.create.mockResolvedValue(ok({ sessionId: sid('fresh') })) | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 890 | b.mock.remote.session.create.mockResolvedValue(err(new RemoteError('gateway/internal', '爆了', {}))) | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 901 | b.mock.remote.session.create.mockResolvedValue(ok({ sessionId: sid('born') })) | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 916 | b.mock.remote.session.create.mockResolvedValue(err(new RemoteError( | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 938 | b.mock.remote.session.fork.mockResolvedValueOnce(ok({ sessionId: sid('child') })) | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 954 | b.mock.remote.session.fork.mockResolvedValueOnce(err(error)) | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 971 | b.mock.remote.session.fork.mockResolvedValue(err(error)) | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 990 | b.mock.remote.session.fork.mockResolvedValue(ok({ sessionId: sid('child') })) | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 991 | b.mock.remote.session.rename.mockImplementation((payload) => { | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 1041 | b.mock.remote.session.fork.mockResolvedValue(ok({ sessionId: sid('child') })) | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 1042 | b.mock.remote.session.rename.mockResolvedValue(err(new RemoteError('session/title-invalid', 'rejected', { sessionId: | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 1098 | b.mock.remote.session.prompt.mockReturnValue(gate.promise) | CODE |
| CRITICAL | …ssion-controller/tests/sessions-service.client.spec.ts | 1116 | b.mock.remote.session.prompt.mockResolvedValue(err(new RemoteError('gateway/internal', 'agent busy', {}))) | CODE |
| CRITICAL | …-open-in-app/tests/context-menu-actions.client.spec.ts | 203 | expect((await h.fileActions.save.mock.calls.at(-1)![0].read!(new AbortController().signal)).type).toBe('') | CODE |
| CRITICAL | …ttings-account/tests/quota-notice-hold.client.spec.tsx | 230 | expect(b.platform.open.mock.calls.map(([page]) => page)).toEqual(['usage', 'top-up']) | CODE |
| CRITICAL | …ttings-account/tests/quota-notice-hold.client.spec.tsx | 271 | expect(b.platform.open.mock.calls.map(([page]) => page)).toEqual(['top-up']) | CODE |
| CRITICAL | …ttings-account/tests/quota-notice-hold.client.spec.tsx | 304 | expect(b.platform.open.mock.calls.map(([page]) => page)).toEqual(['top-up', 'top-up']) | CODE |
| CRITICAL⚡ | …/client/ui-settings-account/tests/apply.client.spec.ts | 269 | c.mock.remote.account.getProfile.mockResolvedValue(ok(profile)) | CODE |
| 101 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | python/sdk/tests/test_smoke_model.py | 727 | def test_persisted_session_requires_current_writer(version: int) -> None: | CODE |
| LOW⚡ | python/sdk/tests/test_smoke_model.py | 737 | def test_snapshot_generation_filename_must_match_header(tmp_path: Path) -> None: | CODE |
| LOW⚡ | python/sdk/tests/test_smoke_model.py | 747 | def test_profile_plugin_failure_reports_native_exit_status(monkeypatch: pytest.MonkeyPatch, returncode: int) -> None: | CODE |
| LOW⚡ | python/sdk/tests/test_smoke_model.py | 761 | def test_live_turn_accepts_explanation_before_acknowledgement(prefix: str) -> None: | CODE |
| LOW⚡ | python/sdk/tests/test_smoke_model.py | 766 | def test_live_turn_rejects_missing_standalone_acknowledgement(answer: str) -> None: | CODE |
| LOW⚡ | python/sdk/tests/test_smoke_model.py | 771 | def test_job_snapshot_normalization_preserves_pairing_and_uncertainty(): | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 106 | def test_live_smoke_requires_fresh_external_content(live_smoke: SimpleNamespace) -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 115 | def test_live_smoke_accepts_file_details_after_acknowledgement( | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 139 | def test_live_smoke_rejects_invalid_turn_before_continuing( | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 153 | def test_live_smoke_rejects_bad_create_before_host_overwrite( | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 171 | def test_live_smoke_rejects_unrelated_tool_without_exact_receipt( | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 189 | def test_child_prompt_precedes_runtime_context(prompt_name: str, expected: str) -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 205 | def test_mcp_smoke_requests_the_discovered_tool() -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 221 | def test_mcp_smoke_accepts_the_external_server_result() -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 243 | def test_mock_model_serves_native_messages_events() -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 263 | def test_minimal_snapshot_pins_quoted_working_directory(directory: str) -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 278 | def test_advanced_snapshot_normalizes_catalog_child_creation_time() -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 299 | def test_snapshot_comparison_preserves_opaque_generation_qualifiers() -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 335 | def test_snapshot_value_scrubs_system_nodes_without_erasing_header_fields() -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 348 | def test_snapshot_value_preserves_deterministic_tool_repair_ids() -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 376 | def test_snapshot_value_normalizes_embedded_assistant_stream_timing() -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 399 | def test_snapshot_comparison_expands_embedded_assistant_streams() -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 445 | def test_snapshot_stream_expands_reasoning_and_tool_call_records() -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 461 | def test_snapshot_file_builder_order_is_checked_outside_update_mode(tmp_path: Path) -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 468 | def test_snapshot_comparison_expands_sdk_wrapped_attempts() -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 499 | def test_snapshot_generation_names_select_highest_role_without_double_counting( | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 561 | def test_native_writer_comparison_requires_opt_in_and_preserves_written_generations(tmp_path: Path) -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 579 | def test_native_writer_comparison_rejects_stale_current_delivery(tmp_path: Path, surface: str) -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 598 | def test_native_writer_comparison_preserves_captured_and_nested_delivery_values() -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 622 | def test_default_comparison_keeps_a_migrated_delivery_generation_exact() -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 632 | def test_native_writer_comparison_rejects_mixed_expected_role_generations(tmp_path: Path) -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 647 | def test_committed_python_native_goldens_compare_current_output_without_rewriting(scenario: str) -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 689 | def test_snapshot_builder_checks_role_order_and_count_across_generations( | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 697 | def test_snapshot_generation_comparison_rejects_changed_payload(tmp_path: Path) -> None: | CODE |
| LOW | python/sdk/tests/test_smoke_model.py | 712 | def test_snapshot_comparison_rejects_noncurrent_writer( | CODE |
| LOW⚡ | python/sdk/tests/test_runtime_resolution.py | 113 | def test_unknown_env_mode_fails_loud(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW⚡ | python/sdk/tests/test_runtime_resolution.py | 119 | def test_explicit_mode_wins_over_env_mode(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW⚡ | python/sdk/tests/test_runtime_resolution.py | 128 | def test_runtime_requires_spawn_helper_only_on_macos( | CODE |
| LOW | python/sdk/tests/test_runtime_resolution.py | 66 | def test_unknown_explicit_mode_fails_loud() -> None: | CODE |
| LOW | python/sdk/tests/test_runtime_resolution.py | 73 | def test_authoring_resources_validate_installed_and_wheel_payloads(tmp_path: Path, target: str, invalid: str | None) -> | CODE |
| LOW | python/sdk/tests/test_runtime_resolution.py | 149 | def test_windows_runtime_uses_exe_payload_and_exe_sidecar( | CODE |
| LOW | python/sdk/tests/test_runtime_resolution.py | 181 | def test_runtime_requires_ripgrep_sidecar( | CODE |
| LOW | python/sdk/tests/test_runtime_resolution.py | 194 | def test_runtime_requires_complete_resource_sidecars( | CODE |
| LOW | python/sdk/tests/test_runtime_resolution.py | 214 | def test_node_mode_runs_the_deployed_dsh_cli( | CODE |
| LOW | python/sdk/tests/test_runtime_resolution.py | 226 | def test_python_dsh_command_requires_explicit_home( | CODE |
| LOW | python/sdk/tests/test_runtime_resolution.py | 238 | def test_python_dsh_command_executes_the_bundled_cli( | CODE |
| LOW | python/sdk/tests/test_runtime_resolution.py | 261 | def test_windows_console_waits_and_forwards_runtime_status(monkeypatch: pytest.MonkeyPatch, returncode: int) -> None: | CODE |
| LOW | python/sdk/tests/test_runtime_resolution.py | 283 | def test_windows_console_branch_preserves_real_child_io_and_completion(tmp_path: Path, returncode: int) -> None: | CODE |
| LOW | python/sdk/tests/test_runtime_resolution.py | 313 | def test_runtime_starts_independently_of_office_engine( | CODE |
| LOW | python/sdk/tests/test_runtime_resolution.py | 339 | def test_explicit_download_uses_runtime_without_a_harness_home( | CODE |
| LOW | python/sdk/tests/test_runtime_resolution.py | 376 | def test_primary_download_rejects_an_incomplete_payload(tmp_path: Path, monkeypatch: pytest.MonkeyPatch, missing: str) - | CODE |
| LOW | python/sdk/tests/test_runtime_resolution.py | 386 | def test_office_resolution_requires_explicit_download(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | python/sdk/tests/test_runtime_resolution.py | 415 | def test_download_manifest_rejects_invalid_wheel_resources(tmp_path: Path, invalid: str) -> None: | CODE |
| LOW | python/sdk/tests/test_command_attachments_runtime.py | 61 | def test_plan_image_reaches_the_model_and_persists_as_a_reference( | CODE |
| LOW | python/sdk/tests/test_command_attachments_runtime.py | 91 | def test_plan_off_compact_and_permission_reject_images_without_applying_the_command(tmp_path: Path) -> None: | CODE |
| LOW | python/sdk/tests/test_command_attachments_runtime.py | 119 | def test_goal_create_and_edit_images_reach_following_requests_as_durable_references(tmp_path: Path) -> None: | CODE |
| LOW | python/sdk/tests/test_command_attachments_runtime.py | 157 | def test_cleared_goal_waits_for_its_image_input_queued_during_compaction(tmp_path: Path) -> None: | CODE |
| LOW | python/sdk/tests/test_command_attachments_runtime.py | 186 | def test_goal_controls_with_images_leave_the_active_request_and_goal_unchanged(tmp_path: Path) -> None: | CODE |
| LOW | python/sdk/tests/test_command_attachments_runtime.py | 214 | def test_prompt_images_queue_during_an_active_turn(tmp_path: Path, image_first: bool) -> None: | CODE |
| LOW | python/sdk/tests/test_command_attachments_runtime.py | 249 | def test_top_level_run_accepts_an_image_without_text(tmp_path: Path) -> None: | CODE |
| 1046 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | vitest.config.ts | 81 | COMMENT | |
| LOW | vitest.config.ts | 101 | const windowsRunnerCoverageExclusions = process.platform === 'win32' | COMMENT |
| LOW | pnpm-workspace.yaml | 41 | node-addon-require-builtin: false | COMMENT |
| LOW | native/system/packages/entry/src/main.c | 61 | COMMENT | |
| LOW | …/2026-07-25-scriptable-llm-wire-fault-server.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …6-08-18-session-snapshot-envelope-projection.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ting/2026-07-22-cross-platform-test-fixtures.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ting/2026-09-06-python-runtime-install-retry.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …-08-29-windows-lane-hook-and-lefthook-budget.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …/2026-09-06-standard-hosted-benchmark-runner.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ing/2026-09-07-pwsh-ci-observable-completion.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …026-07-26-execa-for-test-subprocess-plumbing.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ting/2026-07-30-web-browser-snapshot-ci-gate.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …/2026-09-07-publint-test-subprocess-lifetime.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …g/2026-06-22-fork-child-replay-seed-boundary.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …7-web-lane-assertions-name-their-input-state.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ng/2026-09-06-pr-ci-runner-temporary-storage.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …026-09-26-web-conversation-clock-fixture-day.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …chived/testing/2026-06-19-acp-snapshot-tests.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …d/testing/2026-06-22-fork-snapshot-scenarios.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ing/2026-09-10-hosted-image-test-assumptions.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …26-09-27-plugin-install-interceptor-lifetime.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …8-12-required-python-runtime-pull-request-ci.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …testing/2026-08-28-ci-test-reliability-skill.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ng/2026-09-07-subagent-teardown-test-budgets.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …6-09-28-detail-close-waits-on-observed-state.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ting/2026-07-18-tui-terminal-state-snapshots.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ived/testing/2026-07-04-hook-snapshot-matrix.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …2026-07-30-vitest-jsdom-webstorage-ownership.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ting/2026-09-09-user-patch-hmr-test-delivery.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …emove-redundant-snapshot-log-expected-output.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …/2026-08-27-translation-pairing-merge-budget.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …-08-13-python-minimal-model-visible-snapshot.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …026-09-27-oxlint-contract-spawn-case-budgets.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …sting/2026-07-08-shared-acp-snapshot-package.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …nection-and-compaction-fixture-preconditions.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …sting/2026-09-08-ci-readiness-and-completion.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …/testing/2026-06-22-subagent-snapshot-replay.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ed/testing/2026-06-11-property-based-testing.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …g/2026-07-04-single-source-acp-replay-config.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …esting/2026-09-08-ci-completion-observations.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …testing/2026-09-06-client-assembly-test-line.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …6-pin-request-header-content-in-one-scenario.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …2026-06-21-mandatory-app-attribution-headers.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …rchitecture/2026-09-02-durable-image-offload.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ved/architecture/2026-07-30-web-config-plane.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ture/2026-09-21-live-config-inspect-provider.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …architecture/2026-07-23-toolview-dissolution.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ecture/2026-07-27-dispose-ladder-to-consumer.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …6-07-29-request-level-llm-config-credentials.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ure/2026-08-13-session-content-search-opt-in.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …hitecture/2026-09-15-platform-office-engines.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …/2026-08-23-webworker-vfs-watch-and-landlock.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …-adapter-owned-reasoning-effort-capabilities.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …re/2026-07-20-canonical-tool-output-contract.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ed/architecture/2026-08-11-cmdline-seam-trim.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …08-31-viewport-activated-syntax-highlighting.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …04-declaring-a-provider-from-the-models-page.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …08-31-session-sequence-and-log-offset-brands.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| LOW | …ture/2026-09-16-desktop-cos-upload-transport.i18n.yaml | 1 | # Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each | COMMENT |
| 1073 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | snapshots/acp/image-compaction/cordis.snapshot.yml | 49 | # context window turns that visual pressure into an automatic | COMMENT |
| MEDIUM | …nted/testing/2026-07-24-web-gui-browser-e2e-lane.zh.md | 15 | ### Scaffold:`apps/web/tests/scaffold.ts` | COMMENT |
| MEDIUM | …emented/testing/2026-07-24-web-gui-browser-e2e-lane.md | 15 | ### Scaffold: `apps/web/tests/scaffold.ts` | COMMENT |
| MEDIUM | …notes/archived/feature/2026-07-05-dynamic-workflows.md | 1 | # Agent Note: Dynamic workflows — a script-driven multi-agent orchestration seam | COMMENT |
| MEDIUM | …notes/archived/feature/2026-07-05-dynamic-workflows.md | 1 | # Agent Note: Dynamic workflows — a script-driven multi-agent orchestration seam | COMMENT |
| MEDIUM | .agents/skills/dsh-doc/SKILL.md | 97 | `pnpm run verify-doc-budgets` compares standing documents against ceilings in [scripts/doc-budgets.manifest.json](../../ | CODE |
| MEDIUM | docs/defensive-patterns/remote-and-api.md | 83 | ## `packages/api` carries generic orchestration only | COMMENT |
| MEDIUM | docs/i18n/translation-prompt.md | 3 | 本文件是自动翻译流水线的 prompt 模板;从 `# Translation Prompt` 开始的正文会逐字进入模型请求,因此本文件不参与双语配对(见 [README.md](README.md) 排除清单)。模板正文与内嵌 few-s | CODE |
| MEDIUM⚡ | …s/translation-prompt-v4/request-response.expected.json | 7 | "content": "# Translation Prompt\n\nYou are a senior technical translator specializing in LLM and agent developm | CODE |
| MEDIUM | packages/experimental/tool-ralph/README.md | 130 | The generated [`ralph` schema](../../../docs/tool-catalog.md#deepseek-aidsh-tool-ralph) exposes one required `objective` | CODE |
| MEDIUM | apps/web/tsconfig.json | 21 | // The web e2e lane (scaffold + replay specs) boots the host spine and reads | COMMENT |
| MEDIUM | apps/web/tests/preview-boot.e2e.ts | 676 | // the same patch batch without racing the declaration service; the ordinary Web scaffold covers | COMMENT |
| MEDIUM | apps/web/tests/pin-browse-picker.overlay.yml | 6 | # apps/web/tests/scaffold.ts. | COMMENT |
| MEDIUM | apps/web/tests/navigation-panes.e2e.ts | 373 | const snapshot = await captureStableAria(page, '#trajectory-detail-panel', scaffold.workspaceCwd) | CODE |
| MEDIUM | apps/web/tests/navigation-panes.e2e.ts | 721 | LIVE_RESULT_EXPECTED, await captureStableAria(page, '#trajectory-detail-panel', scaffold.workspaceCwd), MODE, | CODE |
| MEDIUM | apps/web/tests/navigation-panes.e2e.ts | 780 | EVICTED_RESULT_EXPECTED, await captureStableAria(page, '#trajectory-detail-panel', scaffold.workspaceCwd), MODE, | CODE |
| MEDIUM | apps/web/tests/navigation-panes.e2e.ts | 809 | RUNNING_RESULT_EXPECTED, await captureStableAria(page, '#trajectory-detail-panel', scaffold.workspaceCwd), MODE, | CODE |
| MEDIUM | apps/web/tests/seeded-history.e2e.ts | 255 | // Composer recording uses a child workspace; seedSession owns the scaffold root. | COMMENT |
| MEDIUM | apps/web/tests/seeded-history.e2e.ts | 431 | // This scenario issues zero model calls — the scaffold's route-only | COMMENT |
| MEDIUM | apps/web/tests/jobs-menu-layering.e2e.ts | 23 | // The private scaffold cwd owns the barrier; the loop bounds an orphan's lifetime. | COMMENT |
| MEDIUM | apps/web/tests/scaffold.ts | 1 | // Shared scaffold for the keyless browser e2e lane (Agent Note: | COMMENT |
| MEDIUM | apps/web/tests/scaffold.ts | 536 | // whole scaffold lifetime, not just the boot, since presets mount when a | COMMENT |
| MEDIUM | apps/web/tests/scaffold.ts | 539 | // the resolved harness home so a scaffold sharing another's home — the | COMMENT |
| MEDIUM | apps/web/tests/scaffold.ts | 588 | // The scaffold's own overrides, above every bundle layer like `--patch` overlays. | COMMENT |
| MEDIUM | apps/web/tests/scaffold.ts | 609 | // First-use initialization must create directories only inside this scaffold's temporary world. | COMMENT |
| MEDIUM | apps/web/tests/scaffold.ts | 657 | // URL line are disabled because this scaffold owns its Playwright browser. | COMMENT |
| MEDIUM | apps/web/tests/scaffold.ts | 818 | // the values this scaffold composed above. An exit request can only come | COMMENT |
| MEDIUM | apps/web/tests/scaffold.ts | 918 | // Chromium resolves *.localhost itself; Node may not. Both scaffold | COMMENT |
| MEDIUM | apps/web/tests/sidebar-right.e2e.ts | 303 | // scaffold's Agent and Session carry different ids, that mismatch is the | COMMENT |
| MEDIUM | apps/web/tests/sidebar-right.e2e.ts | 317 | // It goes in the SESSION's cwd, not the scaffold's: the endpoint resolves | COMMENT |
| MEDIUM | apps/web/tests/sidebar-right.e2e.ts | 362 | // both work in this scaffold; nothing rendered means the wire is the fault. | COMMENT |
| MEDIUM | apps/web/tests/sidebar-right.e2e.ts | 763 | // as a console error, which the scaffold tripwire does not watch, so this | COMMENT |
| MEDIUM | apps/web/tests/skill-menu-plugin-change.e2e.ts | 28 | // The scaffold pins the skill-filesystem harness home inside its temporary world. | COMMENT |
| MEDIUM | apps/web/tests/settings-import.e2e.ts | 2 | // scaffold profile at start, through the shipped entries, and the imported values reach the page. | COMMENT |
| MEDIUM | apps/web/tests/onboarding-deepseek-config.e2e.ts | 284 | // trigger — on the page; the scaffold boots without one. | COMMENT |
| MEDIUM | apps/web/tests/default-model.e2e.ts | 10 | // fixture-less scaffold registers no adapter at all, so the routes the | COMMENT |
| MEDIUM | apps/web/tests/plan-review.e2e.ts | 196 | await compareOrRefreshGolden(TEMPORARY_EXPECTED, await captureStableAria(page, '[data-plan-preview^="dsh-resource: | CODE |
| MEDIUM | apps/web/tests/plugin-manager.e2e.ts | 2 | // managed scaffold profile: installed bundles, their rows, and bundle enablement. Zero | COMMENT |
| MEDIUM | apps/web/tests/plugin-manager.e2e.ts | 104 | // A dedicated scaffold keeps the measured header deterministic: an install | COMMENT |
| MEDIUM | apps/web/tests/plugin-manager.e2e.ts | 1447 | // A dedicated scaffold keeps this profile patch away from the shared fixture profile above. | COMMENT |
| MEDIUM | apps/web/tests/live-interactions.e2e.ts | 72 | // scaffold.close() failures MUST fail the scenario: assertConsumed() is | COMMENT |
| MEDIUM | apps/web/tests/live-interactions.e2e.ts | 97 | // scaffold boots — installLlmReplay resolves the script at install. | COMMENT |
| MEDIUM | apps/web/tests/agent-preset-selection.e2e.ts | 420 | // The seeded session's cwd is the scaffold root rather than the connected | COMMENT |
| MEDIUM | apps/web/tests/default-model.overlay.yml | 1 | # The fixture-less web scaffold registers no adapter, so the shipped | COMMENT |
| MEDIUM | apps/web/tests/account-login.e2e.ts | 2 | // scaffold boots the shipped Web Loader tree, so the real account provider drives | COMMENT |
| MEDIUM | apps/web/tests/code-language.snapshot.ts | 68 | snapshots.push(`## Read ${file.name}\n\n${await captureStableAria(page, readSelector, scaffold.workspaceCwd)}`) | CODE |
| MEDIUM | apps/web/tests/code-language.snapshot.ts | 82 | snapshots.push(`## Preview ${file.name}\n\n${await captureStableAria(page, '[data-code-preview]', scaffold.workspa | CODE |
| MEDIUM | apps/web/tests/declared-reasoning.overlay.yml | 1 | # The fixture-less web scaffold registers no adapter, so the shipped | COMMENT |
| MEDIUM | apps/web/tests/bonus-notice.e2e.ts | 1 | // Real-composition acceptance for the user-side bonus notice. The scaffold boots the | COMMENT |
| MEDIUM | apps/web/tests/settings-chrome.e2e.ts | 962 | // and the unavailable notice a scaffold without a profile runtime shows. | COMMENT |
| MEDIUM | apps/web/tests/workspace-management.e2e.ts | 247 | // Register the scaffold's existing project directory through the real UI. | COMMENT |
| MEDIUM | apps/web/tests/workspace-management.e2e.ts | 439 | // A staged subtree under the scaffold cwd keeps the listing deterministic | COMMENT |
| MEDIUM | apps/web/tests/workspace-management.e2e.ts | 447 | // at the scaffold cwd so the golden's ancestry collapses everywhere. | COMMENT |
| MEDIUM | apps/web/tests/file-upload-round.e2e.ts | 3 | // bytes below the scaffold's isolated DSH_HOME, the prompt cites the staged | COMMENT |
| MEDIUM | apps/web/tests/present-svg.e2e.ts | 171 | // The scaffold workspace is not a git repository; the write call supplies its single changed file. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | pnpm-workspace.yaml | 4 | # The Landlock launcher is developed with its harness consumers but keeps | COMMENT |
| MEDIUM | snapshots/sdk/background-wait-steer/snapshot.yml | 12 | # tool text yet (shared harness defect tracked in #6710), so replay is the | COMMENT |
| MEDIUM | snapshots/acp/image-compaction/cordis.yml | 5 | # snapshot harness scopes per run, so the patch itself carries no attachment | COMMENT |
| MEDIUM | snapshots/session/agent-instructions-budget/cordis.yml | 1 | # Workspace-context snapshot patch: the harness exports DSH_HOME=<cwd>/.dsh and | COMMENT |
| MEDIUM | snapshots/session/multimodal-spill-ends/cordis.yml | 3 | # snapshot harness scopes per run, so the patch itself carries no attachment | COMMENT |
| MEDIUM | snapshots/session/agent-instructions/cordis.yml | 1 | # Workspace-context snapshot patch: the harness exports DSH_HOME=<cwd>/.dsh and | COMMENT |
| MEDIUM | …ts/session/agent-instructions-group-failure/cordis.yml | 1 | # The snapshot harness supplies scenario-local .dsh and .agents roots. | COMMENT |
| MEDIUM | snapshots/session/read-image/cordis.yml | 3 | # snapshot harness scopes per run, so the patch itself carries no attachment | COMMENT |
| MEDIUM | website/tests/raw-markdown.spec.ts | 23 | const { res, next } = request('/deepseek-harness/en/reference/index.md?dsh-raw=1#section', destination, 'GET', '/dee | CODE |
| MEDIUM | …ture/2026-07-24-single-harness-home-resolver.i18n.yaml | 1 | # Bilingual-pair consistency record for 2026-07-24-single-harness-home-resolver.md (docs/i18n/README.md): per heading | COMMENT |
| MEDIUM | …ture/2026-07-24-single-harness-home-resolver.i18n.yaml | 4 | # pnpm run verify-translation-pairing --write .agents/notes/implemented/architecture/2026-07-24-single-harness-home-re | COMMENT |
| MEDIUM | …chived/feature/2026-07-16-harness-level-loop.i18n.yaml | 4 | # pnpm run verify-translation-pairing --write .agents/notes/archived/feature/2026-07-16-harness-level-loop.md | COMMENT |
| MEDIUM | docs/cordis-tutorial/07-into-the-harness.i18n.yaml | 1 | # Bilingual-pair consistency record for 07-into-the-harness.md (docs/i18n/README.md): per heading | COMMENT |
| MEDIUM | docs/cordis-tutorial/07-into-the-harness.i18n.yaml | 4 | # pnpm run verify-translation-pairing --write docs/cordis-tutorial/07-into-the-harness.md | COMMENT |
| MEDIUM | scripts/gen-doc-graphs.ts | 1602 | '## Non-harness or undeclared event strings seen in package source', | CODE |
| MEDIUM | scripts/translation-pairing.spec.ts | 148 | const canonicalMarkdown = '# README\n\nEnglish | [中文](https://github.com/deepseek-ai/deepseek-harness/blob/master/py | CODE |
| MEDIUM | scripts/translation-pairing.spec.ts | 150 | const wrongMarkdown = '# README\n\nEnglish | [中文](https://github.com/deepseek-ai/deepseek-harness/blob/master/other/ | CODE |
| MEDIUM⚡ | …s/translation-prompt-v4/request-response.expected.json | 7 | "content": "# Translation Prompt\n\nYou are a senior technical translator specializing in LLM and agent developm | CODE |
| MEDIUM⚡ | …s/translation-prompt-v4/request-response.expected.json | 11 | "content": "# Acme Agent\n\nEnglish | [中文](product.zh.md)\n\nAcme Agent is an open-source agent harness that aut | CODE |
| MEDIUM⚡ | …s/translation-prompt-v4/request-response.expected.json | 15 | "content": "# Acme Agent\n\n[English](product.md) | 中文\n\nAcme Agent 是一款开源 agent harness(智能体框架),用于自动化仓库日常事务。\n\n | CODE |
| MEDIUM | …es/experimental/cua-macos/native/tests/electron_e2e.py | 38 | # The fixture receives only launch essentials, not the harness environment. | COMMENT |
| MEDIUM | packages/context/harness-dev-context/README.i18n.yaml | 4 | # pnpm run verify-translation-pairing --write packages/context/harness-dev-context/README.md | COMMENT |
| MEDIUM | packages/boot/app-boot/src/index.ts | 898 | // Definitely assigned: the timeout promise's executor runs synchronously | COMMENT |
| MEDIUM | packages/bundle/web-app/cordis.patch.yml | 202 | # Model context for an agent that inspects or extends the harness serving | COMMENT |
| MEDIUM | packages/bundle/base/cordis.patch.yml | 210 | # a row). Exports carry the harness home's anonymous user id ($DSH_HOME/.anonymous-user-id, | COMMENT |
| MEDIUM | packages/workflow/workflow-ptc/src/guest-source.ts | 4 | export const WORKFLOW_GUEST_SOURCE = "import * as vm from \"node:vm\";\n//#region packages/workflow/workflow-ptc/src/rea | CODE |
| MEDIUM | …client/connection/tests/api-request-trust.host.spec.ts | 130 | for (const entry of ['harness.internal/path', 'harness.internal/', 'user@harness.internal', 'harness.internal?x', 'h | CODE |
| MEDIUM | .github/workflows/release.yml | 166 | # The harness packages declare the vendored framework as a peer, and this | COMMENT |
| MEDIUM | .github/workflows/sandbox.yml | 118 | # native architecture, then install the local native and harness tarballs | COMMENT |
| MEDIUM | .github/workflows/node-addon-system-release.yml | 2 | # harness source of record. Rehearsal and publication consume the same packed | COMMENT |
| MEDIUM | .github/workflows/release-publish.yml | 136 | # The harness packages declare the vendored framework as a peer, and this | COMMENT |
| MEDIUM | .github/workflows/node-addon-system.yml | 3 | # the harness Node matrix. Each platform job builds once and tests those bytes | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 1243 | // The child always sends a value now (return None → JSON null), so a done | COMMENT |
| HIGH | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 1234 | const explicit = await runtime.run(runtime.resolve({ program: 'return None', bindings: [] })) | CODE |
| HIGH | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 1266 | program: ['print("a", "b")', 'print("c")', 'return None'].join('\n'), | CODE |
| HIGH | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 1276 | program: ['print("partial", end="")', 'return None'].join('\n'), | CODE |
| HIGH | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 1293 | program: ['import os', `os.write(1, b"A" * ${size})`, 'return None'].join('\n'), | CODE |
| HIGH | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 1305 | program: ['import os', 'os.write(1, b"one\\ntwo\\nthree")', 'return None'].join('\n'), | CODE |
| HIGH | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 1321 | 'return None', | CODE |
| HIGH | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 1339 | program: ['import os', 'os.write(1, b"A" * 2_000_000)', 'return None'].join('\n'), | CODE |
| HIGH | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 1365 | 'return None', | CODE |
| HIGH | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 1384 | program: ['import os', 'os.write(1, b"\\x00" * 4000)', 'return None'].join('\n'), | CODE |
| HIGH | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 1456 | 'return None', | CODE |
| HIGH | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 1476 | program: ['import os', 'os.write(1, b"A" * 100 + b"\\nSECOND\\n")', 'return None'].join('\n'), | CODE |
| HIGH | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 1498 | 'return None', | CODE |
| HIGH | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 1516 | program: ['import os', String.raw`os.write(1, "\ta\"b\\c\x01é\n".encode("utf-8"))`, 'return None'].join('\n'), | CODE |
| HIGH | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 4310 | ' def __gt__(self, other): return False', | CODE |
| HIGH | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 4311 | ' def __lt__(self, other): return False', | CODE |
| HIGH | …ckages/skill/skill-office/tests/xlsx-validation.e2e.ts | 39 | print('content' if any(low != high for low, high in visible.getextrema()) else 'blank') | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …/experimental/liveshare/src/endpoint-classification.ts | 40 | // ── reader-global-read ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …/experimental/liveshare/src/endpoint-classification.ts | 46 | // ── reader-session-read ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …/experimental/liveshare/src/endpoint-classification.ts | 65 | // ── reader-workspace-read ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …/experimental/liveshare/src/endpoint-classification.ts | 68 | // ── reader-session-input ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …/experimental/liveshare/src/endpoint-classification.ts | 72 | // ── reader-fork ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …/experimental/liveshare/src/endpoint-classification.ts | 75 | // ── reader-child-rename ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …/experimental/liveshare/src/endpoint-classification.ts | 78 | // ── always-allowed ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …/experimental/liveshare/src/endpoint-classification.ts | 81 | // ── owner-only ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 485 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 487 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 87 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 89 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 809 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 811 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 955 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 957 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | packages/bundle/web-app/cordis.patch.yml | 15 | # ── surface-specific values the base deliberately omits ───────────────────── | COMMENT |
| MEDIUM | packages/bundle/web-app/cordis.patch.yml | 32 | # ── web-only host rows, the transport layer, and the browser roster ───────── | COMMENT |
| MEDIUM | packages/bundle/web-app/cordis.patch.yml | 167 | # ── layer 2: transport/service ────────────────────────────────────────────── | COMMENT |
| MEDIUM | packages/bundle/web-app/cordis.patch.yml | 467 | # ── the agent plane moves behind agent presets ───────────────────────────── | COMMENT |
| MEDIUM | packages/bundle/base/cordis.patch.yml | 494 | # ── rows every mode mounts, whose values each overlay may state ────────────── | COMMENT |
| MEDIUM | …kages/client/ui-slots/tests/type-chain.client.spec.tsx | 152 | // ── positive chain ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …kages/client/ui-slots/tests/type-chain.client.spec.tsx | 234 | // ── negatives ────────────────────────────────────────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | python/sdk/tests/test_plan_input.py | 209 | except ProcessLookupError as error: | CODE |
| HIGH | python/sdk/tests/test_office_interrupts.py | 62 | except ProcessLookupError as error: | CODE |
| HIGH | python/sdk/examples/plan.py | 70 | except ProcessLookupError as error: | CODE |
| HIGH | python/sdk/src/deepseek_harness/client.py | 127 | except subprocess.TimeoutExpired: | CODE |
| HIGH | python/sdk/src/deepseek_harness/client.py | 132 | except ProcessLookupError: | CODE |
| HIGH | …sdk-runtime/src/deepseek_harness_runtime/_resources.py | 116 | except ProcessLookupError as error: | CODE |
| HIGH | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 1720 | except UnicodeEncodeError: | CODE |
| HIGH | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 1437 | except _BaseException: # noqa: BLE001 -- swallow ONLY the log tail; `done` must reach the host; `_BaseException` is a p | CODE |
| HIGH | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 2155 | except caught as _error: | CODE |
| HIGH | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 2479 | except _BaseException: # noqa: BLE001 -- a throw here would cost the done frame | CODE |
| HIGH | …ges/experimental/cua-macos/native/tests/startup_e2e.py | 38 | except ProcessLookupError: | CODE |
| HIGH | …ges/experimental/cua-macos/native/tests/startup_e2e.py | 82 | except ProcessLookupError: | CODE |
| HIGH | …rimental/cua-macos/native/tests/native_test_support.py | 89 | except ProcessLookupError: | CODE |
| HIGH | …perimental/cua-macos/native/tests/shared_helper_e2e.py | 92 | except BlockingIOError: | CODE |
| HIGH | …xperimental/cua-macos/native/tests/capabilities_e2e.py | 27 | except (FileNotFoundError, json.JSONDecodeError): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | python/sdk/tests/test_smoke_model.py | 1 | CODE | |
| LOW | python/sdk/tests/test_runtime_resolution.py | 3 | CODE | |
| LOW | python/sdk/tests/test_runtime_resolution.py | 18 | CODE | |
| LOW | python/sdk/tests/test_command_attachments_runtime.py | 3 | CODE | |
| LOW | python/sdk/tests/test_plan_runtime.py | 3 | CODE | |
| LOW | python/sdk/tests/test_plan_runtime.py | 12 | CODE | |
| LOW | python/sdk/tests/test_bundled_runtime.py | 7 | CODE | |
| LOW | python/sdk/tests/test_macos_deployment_target.py | 3 | CODE | |
| LOW | python/sdk/tests/test_working_directory.py | 1 | CODE | |
| LOW | python/sdk/tests/test_run.py | 2 | CODE | |
| LOW | python/sdk/tests/test_goal_runtime.py | 3 | CODE | |
| LOW | python/sdk/tests/test_goal_runtime.py | 7 | CODE | |
| LOW | python/sdk/tests/test_goal_runtime.py | 15 | CODE | |
| LOW | python/sdk/tests/test_goal_runtime.py | 15 | CODE | |
| LOW | python/sdk/tests/test_goal_runtime.py | 15 | CODE | |
| LOW | python/sdk/tests/test_cot_translation_projection.py | 2 | CODE | |
| LOW | python/sdk/tests/run_installed_commands.py | 3 | CODE | |
| LOW | python/sdk/tests/test_plan_input.py | 3 | CODE | |
| LOW | python/sdk/tests/test_office_render.py | 3 | CODE | |
| LOW | python/sdk/tests/test_account_provider_snapshot.py | 2 | CODE | |
| LOW | python/sdk/tests/test_office.py | 3 | CODE | |
| LOW | python/sdk/tests/test_goal_example.py | 3 | CODE | |
| LOW | python/sdk/tests/test_resume.py | 1 | CODE | |
| LOW | python/sdk/tests/test_client.py | 1 | CODE | |
| LOW | python/sdk/tests/test_plan_example.py | 3 | CODE | |
| LOW | python/sdk/tests/test_office_interrupts.py | 2 | CODE | |
| LOW | python/sdk/tests/test_approval_runtime.py | 2 | CODE | |
| LOW | python/sdk/tests/test_user_questions.py | 1 | CODE | |
| LOW | python/sdk/tests/manual_sdk_agent_smoke.py | 7 | CODE | |
| LOW | python/sdk/tests/test_commands_runtime.py | 8 | CODE | |
| LOW | python/sdk/tests/test_release_version.py | 3 | CODE | |
| LOW | python/sdk/tests/test_approval.py | 2 | CODE | |
| LOW | python/sdk/examples/plan.py | 4 | CODE | |
| LOW | python/sdk/examples/permission.py | 4 | CODE | |
| LOW | python/sdk/examples/manage_plugins.py | 3 | CODE | |
| LOW | python/sdk/examples/compact.py | 4 | CODE | |
| LOW | python/sdk/examples/minimal.py | 4 | CODE | |
| LOW | python/sdk/examples/goal.py | 4 | CODE | |
| LOW | python/sdk/src/deepseek_harness/office.py | 10 | CODE | |
| LOW | python/sdk/src/deepseek_harness/models.py | 1 | CODE | |
| LOW | python/sdk/src/deepseek_harness/client.py | 1 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 1 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 1 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 1 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 1 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 2 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 2 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 2 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 3 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 4 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 4 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 4 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 4 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 4 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 4 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 4 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 4 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 4 | CODE | |
| LOW | python/sdk/src/deepseek_harness/__init__.py | 4 | CODE | |
| LOW | python/sdk/src/deepseek_harness/api.py | 1 | CODE | |
| 12 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/user/guide/plugin-market.zh.md | 55 | "author": "Jane Doe", | CODE |
| LOW | docs/user/guide/plugin-market.md | 55 | "author": "Jane Doe", | CODE |
| LOW | scripts/verify-client-ui-i18n.ts | 29 | 'placeholder', | CODE |
| LOW | …ntal/liveshare/tests/share-relay-field.client.spec.tsx | 104 | expect(field.getAttribute('placeholder')).toBe('No address set') | CODE |
| LOW | …es/experimental/forge-session/tests/projection.spec.ts | 93 | shellTurn(session, [{ callId: 'create', command: 'gh pr create --fill', output: 'placeholder' }]) | CODE |
| LOW | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 1178 | const error = new Error('placeholder') | CODE |
| LOW | …/experimental/ptc-runtime-python/tests/runtime.spec.ts | 1208 | const error = new Error('placeholder') | CODE |
| LOW | packages/llm/llm-pi-ai/tests/dynamic-config.spec.ts | 88 | await writeFile(join(dir, '.credentials.yaml'), 'version: 1\nrefs:\n PI_DYNAMIC_KEY: fake-key\n', { mode: 0o600 }) | CODE |
| LOW | packages/skill/skill/tests/skill.spec.ts | 198 | ...memorySkill('bad-candidate', 'placeholder', 1), | CODE |
| LOW | …/plugin-market-index/tests/plugin-market-index.spec.ts | 57 | author: 'Jane Doe', | CODE |
| LOW | …/plugin-market-index/tests/plugin-market-index.spec.ts | 93 | author: 'Jane Doe', | CODE |
| LOW | …les/workspace-changes/tests/loader-composition.spec.ts | 65 | await writeFile(join(root, 'placeholder'), '') | CODE |
| LOW | packages/sdk/client/tests/sdk-client.spec.ts | 75 | expect(await harness.client.prompt('literal', blocks)).toMatch(/^fake-user-/) | CODE |
| LOW | packages/sdk/client/tests/fake-runtime.ts | 337 | const messageId = `fake-user-${seq}` | CODE |
| LOW | …/api/session-controller/src/client/sessions/manager.ts | 81 | | { kind: 'upsert' | 'placeholder'; summary: SessionSummary } | CODE |
| LOW | …/api/session-controller/src/client/sessions/manager.ts | 530 | this.recordMutation({ kind: 'placeholder', summary: { agentAvailable: true, | CODE |
| LOW | …/api/session-controller/src/client/sessions/manager.ts | 540 | this.recordMutation({ kind: 'placeholder', summary: { agentAvailable: true, | CODE |
| LOW | …/api/session-controller/src/client/sessions/manager.ts | 574 | this.recordMutation({ kind: 'placeholder', summary: { agentAvailable: true, | CODE |
| LOW | …/api/session-controller/src/client/sessions/manager.ts | 835 | case 'placeholder': { | CODE |
| LOW | …nt/ui-primitives/tests/settings-fields.client.spec.tsx | 74 | expect(input).toHaveProperty('placeholder', 'https://api.deepseek.com') | CODE |
| LOW | …client/ui-secret-mask/tests/secret-rule.client.spec.ts | 69 | expect(found('https://example.com:8443?email=alice@example.org https://example.com:8443#alice@example.org')).toEqual | CODE |
| LOW | …nt/ui-schedule/tests/task-manager-page.client.spec.tsx | 537 | expect(input.getAttribute('placeholder')).toBe(en['search.placeholder']) | CODE |
| LOW | …es/client/ui-commands/tests/popup-view.client.spec.tsx | 111 | expect(search.getAttribute('placeholder')).toBe(labels.placeholder) | CODE |
| LOW | …es/client/ui-commands/tests/popup-view.client.spec.tsx | 126 | expect(search.getAttribute('placeholder')).toBe(zh['search.placeholder']) | CODE |
| LOW | …message-feedback/tests/feedback-dialog.client.spec.tsx | 67 | expect(ui.getByLabelText(zh['dialog.detail']).getAttribute('placeholder')).toBe(zh['dialog.hint']) | CODE |
| LOW | …ubagent-claude-code/tests/subagent-claude-code.spec.ts | 313 | env: { ANTHROPIC_API_KEY: 'fake-key' }, | CODE |
| LOW | …ubagent-claude-code/tests/subagent-claude-code.spec.ts | 651 | ANTHROPIC_API_KEY: 'provider-fake-key', | CODE |
| LOW | …ubagent-claude-code/tests/subagent-claude-code.spec.ts | 704 | ANTHROPIC_API_KEY: 'provider-fake-key', | CODE |
| LOW | …ubagent-claude-code/tests/subagent-claude-code.spec.ts | 849 | ANTHROPIC_API_KEY: 'explicit-fake-key', | CODE |
| LOW | …ubagent-claude-code/tests/subagent-claude-code.spec.ts | 877 | ANTHROPIC_API_KEY: 'explicit-fake-key', | CODE |
| LOW | …ession/session-format-v2-to-v3/tests/migration.spec.ts | 114 | const priorInbox = event('agent/inbox/spliced', { target: 'next-turn', start: 0, inserted: [user('placeholder')] }) | CODE |
| LOW | apps/plugin-market-generator/tests/generate.spec.ts | 108 | manifest: { ...BUNDLE, author: { name: 'Jane Doe', email: 'jane@example.com' } }, | CODE |
| LOW | apps/plugin-market-generator/tests/generate.spec.ts | 110 | 'package.json': bundleManifest('dsh-a', '2.0.0-rc.1', { author: { name: 'Jane Doe' }, icon: 'icon.png', homepa | CODE |
| LOW | apps/plugin-market-generator/tests/generate.spec.ts | 140 | name: 'dsh-a', title: { en: 'Alpha', zh: '甲' }, icon: expect.stringMatching(/^icons\/[0-9a-f]{16}\.png$/u) as stri | CODE |
| LOW | apps/plugin-market-generator/src/sources.ts | 33 | check('placeholder', { type: 'git', url, commit: '0'.repeat(40) }) | CODE |
| LOW | apps/plugin-market-generator/src/generate.ts | 113 | const minimal = { ...display, name: 'placeholder', versions: [{ version: '0.0.0', publishTimestamp: 0, source: { typ | CODE |
| LOW | apps/web/tests/deepseek-messages-settings.e2e.ts | 94 | expect(await messages.getByLabel('API 地址', { exact: true }).getAttribute('placeholder')) | CODE |
| LOW | apps/web/tests/message-feedback.e2e.ts | 87 | await expect.poll(() => dialog.getByRole('textbox', { name: 'Feedback details' }).getAttribute('placeholder')) | CODE |
| LOW | apps/web/tests/models-settings.e2e.ts | 312 | expect(await custom.getByLabel('上下文窗口 1').getAttribute('placeholder')).toBe('1M') | CODE |
| LOW | apps/web/tests/models-settings.e2e.ts | 313 | expect(await custom.getByLabel('最大输出 token 数 1').getAttribute('placeholder')).toBe('128K') | CODE |
| LOW | apps/web/tests/onboarding-deepseek-config.e2e.ts | 116 | () => configuredInput.getAttribute('placeholder'), | CODE |
| LOW | apps/web/tests/onboarding-deepseek-config.e2e.ts | 258 | () => settings.getByLabel('API 密钥', { exact: true }).getAttribute('placeholder'), | CODE |
| LOW | apps/web/tests/default-model.e2e.ts | 172 | expect(await search.getAttribute('placeholder')).toBe('搜索模型…') | CODE |
| LOW | apps/web/tests/default-model.e2e.ts | 375 | expect(await commandSearch.getAttribute('placeholder')).toBe('搜索模型…') | CODE |
| LOW | apps/web/tests/official-subagent-bundle.e2e.ts | 82 | server = await startMockLlmServer({ sequence: ['success'], successText: RESPONSE, apiKey: 'snapshot-fake-key' }) | CODE |
| LOW | apps/web/tests/official-subagent-bundle.e2e.ts | 89 | ANTHROPIC_API_KEY: 'snapshot-fake-key', ANTHROPIC_BASE_URL: nativeEndpoint.baseURL, | CODE |
| LOW | apps/web/tests/official-subagent-bundle.e2e.ts | 164 | expect(server.requests[0]?.headers['x-api-key']).toBe('snapshot-fake-key') | CODE |
| LOW | apps/desktop/tests/desktop-package-environment.spec.ts | 296 | validateDesktopPackageEnvironment({ ...RELEASE, ...MAC_IDENTITY, APPLE_ID: 'user@example.com', APPLE_APP_SPECIFIC_ | CODE |
| LOW | apps/cli/tests/lazy-search-startup.compat.spec.ts | 51 | DEEPSEEK_API_KEY: 'dsh-cli-smoke-dummy-key', | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | python/sdk/tests/test_smoke_model.py | 36 | CODE | |
| LOW | python/sdk/tests/test_smoke_model.py | 64 | CODE | |
| LOW | python/sdk/tests/test_runtime_resolution.py | 73 | CODE | |
| LOW | python/sdk/tests/test_plan_input.py | 163 | CODE | |
| LOW | python/sdk/tests/test_office_render.py | 40 | CODE | |
| LOW | python/sdk/tests/test_goal_example.py | 21 | CODE | |
| LOW | python/sdk/tests/test_user_questions.py | 115 | CODE | |
| LOW | python/sdk/examples/plan.py | 136 | CODE | |
| LOW | python/sdk/examples/plan.py | 104 | CODE | |
| LOW | python/sdk/examples/manage_plugins.py | 14 | CODE | |
| LOW | python/sdk/examples/goal.py | 32 | CODE | |
| LOW | python/sdk/src/deepseek_harness/office.py | 108 | CODE | |
| LOW | python/sdk/src/deepseek_harness/client.py | 332 | CODE | |
| LOW | python/sdk/src/deepseek_harness/client.py | 447 | CODE | |
| LOW | python/sdk/src/deepseek_harness/client.py | 513 | CODE | |
| LOW | python/sdk/src/deepseek_harness/client.py | 526 | CODE | |
| LOW | python/sdk/src/deepseek_harness/api.py | 214 | CODE | |
| LOW | …sdk-runtime/src/deepseek_harness_runtime/_resources.py | 89 | CODE | |
| LOW | scripts/smoke-python-runtime.py | 340 | CODE | |
| LOW | scripts/smoke-python-runtime.py | 958 | CODE | |
| LOW | scripts/smoke-python-runtime.py | 1036 | CODE | |
| LOW | scripts/smoke-python-runtime.py | 1264 | CODE | |
| LOW | scripts/smoke-python-runtime.py | 1417 | CODE | |
| LOW | scripts/smoke-python-runtime.py | 2636 | CODE | |
| LOW | scripts/smoke-python-runtime.py | 2865 | CODE | |
| LOW | scripts/build-python-release.py | 232 | CODE | |
| LOW | scripts/check-macos-deployment-target.py | 37 | CODE | |
| LOW | scripts/cua-helper/test_smoke.py | 44 | CODE | |
| LOW | scripts/cua-helper/smoke.py | 51 | CODE | |
| LOW | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 507 | CODE | |
| LOW | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 960 | CODE | |
| LOW | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 1814 | CODE | |
| LOW | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 2004 | CODE | |
| LOW | packages/experimental/cua-macos/native/build_app.py | 30 | CODE | |
| LOW | …ges/experimental/cua-macos/native/tests/startup_e2e.py | 61 | CODE | |
| LOW | …imental/cua-macos/native/tests/text_input_benchmark.py | 111 | CODE | |
| LOW | …imental/cua-macos/native/tests/text_input_benchmark.py | 240 | CODE | |
| LOW | …ages/experimental/cua-macos/native/tests/axless_e2e.py | 22 | CODE | |
| LOW | …perimental/cua-macos/native/tests/shared_helper_e2e.py | 82 | CODE | |
| LOW | …perimental/cua-macos/native/tests/shared_helper_e2e.py | 98 | CODE | |
| LOW | …es/experimental/cua-macos/native/tests/electron_e2e.py | 19 | CODE | |
| LOW | …xperimental/cua-macos/native/tests/capabilities_e2e.py | 49 | CODE | |
| LOW | …xperimental/cua-macos/native/tests/capabilities_e2e.py | 121 | CODE | |
| LOW | packages/experimental/cua-macos/native/tests/e2e.py | 89 | CODE | |
| LOW | …imental/cua-macos/native/tests/blender_keyboard_e2e.py | 88 | CODE | |
| LOW | …mental/cua-macos/native/tests/observation_benchmark.py | 259 | CODE | |
| LOW | …mental/cua-macos/native/tests/observation_benchmark.py | 345 | CODE | |
| LOW | …es/experimental/cua-macos/native/tests/protocol_e2e.py | 104 | CODE | |
| LOW | …es/experimental/cua-macos/native/tests/protocol_e2e.py | 140 | CODE | |
| LOW | …ntal/cua-macos/native/tests/application_consent_e2e.py | 20 | CODE | |
| LOW | …ient/ui-sidebar-documentpreview/tests/fuzz/generate.py | 58 | CODE | |
| LOW | …ient/ui-sidebar-documentpreview/tests/fuzz/generate.py | 85 | CODE | |
| LOW | …ient/ui-sidebar-documentpreview/tests/fuzz/generate.py | 230 | CODE | |
| LOW | …ient/ui-sidebar-documentpreview/tests/fuzz/generate.py | 273 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | scripts/smoke-python-runtime.py | 2195 | child.stdio[5].on('data', chunk => { stdout += chunk.toString() }) | STRING |
| HIGH⚡ | scripts/smoke-python-runtime.py | 2196 | child.stdio[6].on('data', chunk => { stderr += chunk.toString() }) | STRING |
| HIGH⚡ | scripts/smoke-python-runtime.py | 2197 | child.on('message', message => { messages.push(message) }) | STRING |
| HIGH⚡ | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 482 | self._logs.push(line, open=True) | CODE |
| HIGH | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 324 | self._logs.push(line) | CODE |
| HIGH | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 345 | self._logs.push(text[pos:pos + self._logs.remaining + 4]) | CODE |
| HIGH | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 347 | self._logs.push(text[pos:newline]) | CODE |
| HIGH | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 379 | self._logs.push(text[pos:pos + self._logs.remaining + 4]) | CODE |
| HIGH | …ckages/experimental/ptc-runtime-python/py/bootstrap.py | 446 | self._logs.push("".join(parts)) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | python/sdk/src/deepseek_harness/client.py | 117 | except Exception as exc: | CODE |
| LOW | python/sdk/src/deepseek_harness/client.py | 122 | except Exception as exc: | CODE |
| LOW | python/sdk/src/deepseek_harness/client.py | 411 | except Exception as exc: | CODE |
| LOW | python/sdk/src/deepseek_harness/client.py | 535 | except Exception as exc: | CODE |
| MEDIUM | python/sdk/src/deepseek_harness/client.py | 526 | def answer() -> None: | CODE |
| LOW | scripts/smoke-python-runtime.py | 1740 | except Exception as error: | CODE |
| LOW | …perimental/cua-macos/native/tests/shared_helper_e2e.py | 270 | except Exception as error: | CODE |
| LOW | …perimental/cua-macos/native/tests/shared_helper_e2e.py | 278 | except Exception as error: | CODE |
| LOW | …es/experimental/cua-macos/native/tests/electron_e2e.py | 164 | except Exception: | CODE |
| LOW | …tal/cua-macos/native/tests/blender_keyboard_fixture.py | 118 | except Exception as error: | CODE |
| LOW | …tal/cua-macos/native/tests/blender_keyboard_fixture.py | 150 | except Exception as error: | CODE |
| LOW | …imental/cua-macos/native/tests/blender_keyboard_e2e.py | 254 | except Exception as error: | CODE |
| LOW | …imental/cua-macos/native/tests/blender_keyboard_e2e.py | 292 | except Exception as error: | CODE |
| LOW | …es/experimental/cua-macos/native/tests/protocol_e2e.py | 121 | except Exception as error: | CODE |
| LOW | …es/experimental/cua-macos/native/tests/protocol_e2e.py | 126 | except Exception as error: | CODE |
| LOW | …ient/ui-sidebar-documentpreview/tests/fuzz/generate.py | 312 | except Exception as error: | CODE |
| LOW | …ient/ui-sidebar-documentpreview/tests/fuzz/generate.py | 314 | except Exception as error: | CODE |
| LOW | …ient/ui-sidebar-documentpreview/tests/fuzz/generate.py | 327 | except Exception as error: | CODE |
| LOW | …ient/ui-sidebar-documentpreview/tests/fuzz/generate.py | 342 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/bundle/web-app/presets/cordis.patch.yml | 33 | # Set true to add the apply_patch tool beside edit. | COMMENT |
| LOW | packages/bundle/web-app/presets/ptc.patch.yml | 30 | # Set true to add the apply_patch tool beside edit. | COMMENT |
| LOW | packages/bundle/web-app/presets/standard.patch.yml | 30 | # Set true to add the apply_patch tool beside edit. | COMMENT |
| LOW | packages/bundle/base/cordis.patch.yml | 298 | # Set true to add the apply_patch tool beside edit. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/user/develop/practice/index.md | 60 | ### Step 1: write the Service Definition | COMMENT |
| LOW | docs/user/develop/practice/index.md | 90 | ### Step 2: write a Service Provider | COMMENT |
| LOW | docs/user/develop/practice/index.md | 111 | ### Step 3: write a consumer | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | python/sdk/src/deepseek_harness/__init__.py | 9 | __all__ = [ | CODE |
| LOW | …n/sdk-runtime/src/deepseek_harness_runtime/__init__.py | 212 | __all__ = [ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …es/experimental/cua-macos/native/tests/test_cleanup.py | 26 | def helper(): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | python/sdk/src/deepseek_harness/office.py | 155 | CODE |