0.9

Adjusted Signal

0.9

Raw Pattern Score

100%

Time Factor

2026-11-01

Last Push

9.9K

Stars

TypeScript

Language

530.2K

Lines of Code

3.8K

Files

353

Pattern Hits

2026-10-31

Scan Date

0.00

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 308 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.2/100 · LOW

Are imports declared and package/API names verified? 14 finding(s).

Agent Over-Engineering Ratio 1.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 136 finding(s).

PR Review Velocity Impact 4.3/100 · LOW

Which changes need focused human review? 353 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 4MEDIUM 46LOW 303

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 353 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block175 hits · 168 pts

Severity	File	Line	Snippet	Context
LOW	pnpm-workspace.yaml	21		COMMENT
LOW	pnpm-workspace.yaml	61	# New at 0.1.7-alpha.1: the emitted lib/index.js imports	COMMENT
LOW	…ure/2026-08-26-aggregate-harness-row-patches.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	…hen-request-surface-catalog-and-eval-tooling.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	…026-09-16-liangshen-v41-flash-native-rebuild.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	…d/feature/2026-09-23-usage-sidebar-foot-card.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	…ature/2026-08-24-anonymous-install-telemetry.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	…x/2026-09-04-pet-route-per-request-constants.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	…026-09-04-pet-sprite-sequence-timeline-hoist.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	…6-09-04-pet-client-session-watch-unsubscribe.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	…9-01-doctor-boot-self-heal-plugin-quarantine.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	…26-09-04-pet-asset-runtime-etag-revalidation.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	…2026-09-04-pet-store-skip-unchanged-snapshot.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	…ion/2026-09-18-usage-sidebar-surface-removed.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	shared/tsdown.client.ts	181	// must carry the TS/TSX mapping consumed by browser profiling tools.	COMMENT
LOW	shared/tsdown.client.ts	201	// tsdown auto-externalizes package dependencies; anything NOT in the	COMMENT
LOW	team-hub/go/internal/hub/members.go	141	func placeholderGithubIdentity(accountUserID string) (int64, string) {	COMMENT
LOW	scripts/e2e-mount.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/e2e-mount.sh	21	# tarball——窗口期不再必红。改写为 file: 的家族 tarball 会被递归打补丁：它	COMMENT
LOW	scripts/rollout-verify.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/git-pre-push-guard.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/git-pre-push-gitlinks.sh	1	#!/usr/bin/env bash	COMMENT
LOW	scripts/plugin-template/README.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	packages/dsh-agents/cordis.patch.yml	1	# Bundle patch for the dsh-agents plugin: one host-half row that owns the agent	COMMENT
LOW	packages/dsh-agents/README.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	packages/dsh-plugin-manager/cordis.patch.yml	1	# bundle patch for the dsh-plugin-manager plugin: inserts its plugin row into the web	COMMENT
LOW	packages/dsh-plugin-manager/cordis.patch.yml	21		COMMENT
LOW	packages/dsh-plugin-manager/README.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	packages/dsh-plugin-manager/src/host/gateway.ts	1721	// exception: pnpm prints it after the profile has been written, so the	COMMENT
LOW	packages/dsh-remote-web-ui/cordis.patch.yml	1	# One package: the dual-face remote-control plugin. Install it into a dsh	COMMENT
LOW	packages/dsh-remote-web-ui/README.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	packages/dsh-remote-web-ui/tests/foot-row-css.spec.ts	61	// seat a tall column as soon as a third party registered a tall block, which	COMMENT
LOW	packages/dsh-remote-web-ui/src/remote-channel-boot.ts	41	const json = JSON.stringify(rules)	COMMENT
LOW	packages/dsh-remote-web-ui/src/remote-channel-boot.ts	161	'if(d===undefined\|\|d.configurable===false\|\|d.set===undefined)return;' +	COMMENT
LOW	packages/dsh-remote-web-ui/src/index.ts	621	// mutation is needed here (a distributable plugin must not change the	COMMENT
LOW	packages/dsh-remote-web-ui/src/index.ts	841	})	COMMENT
LOW	packages/dsh-remote-web-ui/src/index.ts	861		COMMENT
LOW	packages/dsh-remote-web-ui/src/index.ts	1441	// Issue #987: the browser-half channel patch installs at this plugin's	COMMENT
LOW	packages/dsh-remote-web-ui/src/client/mobile-adapt.ts	141	// details track is always 0 (computeColumns drops it when there is no	COMMENT
LOW	packages/dsh-remote-web-ui/src/client/mobile-adapt.ts	161	// v51/v52: smaller collapse toggle in the expanded sidebar (the toggle	COMMENT
LOW	packages/dsh-remote-web-ui/src/client/mobile-adapt.ts	181	// The attach button is the only file-picker entry on the portrait composer,	COMMENT
LOW	packages/dsh-remote-web-ui/src/client/mobile-adapt.ts	201	//	COMMENT
LOW	packages/dsh-remote-web-ui/src/client/mobile-adapt.ts	221	'[class$="_composerSeat"] [class$="_primary"]{position:absolute;right:8px;top:50%;transform:translateY(-50%)}',	COMMENT
LOW	packages/dsh-remote-web-ui/src/client/mobile-adapt.ts	241	// single-line ellipsis); v60 drops the official 32px right padding.	COMMENT
LOW	packages/dsh-remote-web-ui/src/client/mobile-adapt.ts	261	// v67: header actions (agent-preset mode label + background-task badge)	COMMENT
LOW	packages/dsh-remote-web-ui/src/client/mobile-adapt.ts	301	// The official workbench (Files / source control) mounts into a	COMMENT
LOW	packages/dsh-remote-web-ui/src/client/mobile-adapt.ts	401	// First statement of the activation, before any lookup: nothing observed the	COMMENT
LOW	packages/dsh-remote-web-ui/src/client/mobile-adapt.ts	841	if (!active) return	COMMENT
LOW	packages/dsh-remote-bridge/cordis.patch.yml	1	# dsh-remote-bridge bundle patch: inserts its plugin row into the web plugin	COMMENT
LOW	packages/dsh-remote-bridge/README.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
LOW	packages/dsh-remote-bridge/src/index.ts	1341	// 工具调用，与它从哪台设备回来无关。	COMMENT
LOW	packages/dsh-remote-bridge/src/index.ts	1361	const apns = apnsConfigFromEnv()	COMMENT
LOW	packages/dsh-remote-bridge/src/index.ts	1461	sessions: watchedSessions,	COMMENT
LOW	packages/dsh-remote-bridge/src/core/connection.ts	941	// channel: without the capability it is an unknown method, which is exactly	COMMENT
LOW	packages/dsh-remote-bridge/src/core/connection.ts	961	if ((frame.m === METHOD_PRESETS_LIST \|\| frame.m === METHOD_SESSION_CREATE) && !this.declares(CAP_AGENTS)) {	COMMENT
LOW	packages/dsh-remote-bridge/src/core/connection.ts	1001	// Registering an APNs token is its own capability: without `push.v1` the	COMMENT
LOW	packages/dsh-remote-bridge/src/core/connection.ts	1261	// A row that survives therefore always carries `archived: false`: the key stays	COMMENT
LOW	packages/dsh-remote-bridge/src/core/hub.ts	441	// handed the question and how long it has together, rather than a card that a	COMMENT
LOW	packages/dsh-remote-bridge/src/host/websocket.ts	181	#fragmentBytes = 0	COMMENT
LOW	packages/dsh-browser-view/README.i18n.yaml	1	# Bilingual-pair consistency record (docs/i18n.md): the git blob hash of each	COMMENT
115 more matches not shown…

Hyper-Verbose Identifiers105 hits · 105 pts

Severity	File	Line	Snippet	Context
LOW	shared/host/loopback.ts	108	export function isForwardedLoopbackRequest(request: IncomingMessage): boolean {	CODE
LOW	shared/host/pair-access.ts	37	export function isPairedOrLoopbackAllowed(ctx: LookupCtx, request: IncomingMessage): boolean {	CODE
LOW	shared/client/body-mutations.ts	59	export function subscribeBodyInvalidations(subscriber: () => void): () => void {	CODE
LOW	packages/dsh-agents/src/protocol.ts	440	export function parseTeamDeleteRequestBody(value: unknown): TeamDeleteRequestBody \| undefined {	CODE
LOW	packages/dsh-agents/src/protocol.ts	458	export function parseMemberDeleteRequestBody(value: unknown): MemberDeleteRequestBody \| undefined {	CODE
LOW	packages/dsh-agents/src/index.ts	242	export function profileMountsOfficialTeams(ctx: Context): boolean {	CODE
LOW	packages/dsh-agents/src/index.ts	306	export function registerSquadPromptContext(	CODE
LOW	packages/dsh-agents/src/host/routes.ts	69	export function hasBrowserSameOriginMarker(req: IncomingMessage): boolean {	CODE
LOW	packages/dsh-plugin-manager/tests/gateway-jobs.spec.ts	107	function installPackageWithoutBundle(profileDir: string, name: string, dep: { patch?: string; version?: string; bundle?:	CODE
LOW	packages/dsh-plugin-manager/tests/set-enabled.spec.ts	69	function makeInactiveAggregateProfile(): { facts: ProfileFacts; dir: string } {	CODE
LOW	packages/dsh-plugin-manager/src/host/loopback.ts	109	export function isForwardedLoopbackRequest(request: IncomingMessage): boolean {	CODE
LOW	packages/dsh-plugin-manager/src/host/profile.ts	146	export function desktopProfileDirFromArgv(argv: readonly string[]): string \| undefined {	CODE
LOW	packages/dsh-plugin-manager/src/host/gateway.ts	798	export function nativeManagerRestartRequired(outcome: unknown): boolean {	CODE
LOW	…ckages/dsh-plugin-manager/src/client/body-mutations.ts	60	export function subscribeBodyInvalidations(subscriber: () => void): () => void {	CODE
LOW	packages/dsh-remote-web-ui/src/routes.ts	137	export function isTopLevelDocumentNavigation(request: IncomingMessage): boolean {	CODE
LOW	packages/dsh-remote-web-ui/src/remote-api.ts	232	export function makeRemoteApiUpgradeRoutes(deps: RemoteApiDeps): WebUpgradeRoute[] {	CODE
LOW	packages/dsh-remote-web-ui/src/remote-channel-boot.ts	40	export function buildRemoteChannelBootScript(rules: RemoteChannelRules = REMOTE_CHANNEL_RULES): string {	CODE
LOW	packages/dsh-remote-web-ui/src/relay-connector.ts	32	export function namedTunnelChildRecordFile(home: string = dshHome()): string {	CODE
LOW	packages/dsh-remote-web-ui/src/relay-connector.ts	83	export function createNamedRelayConnector(options: { manager?: TunnelManager } = {}): NamedRelayConnector {	CODE
LOW	packages/dsh-remote-web-ui/src/lan.ts	84	export function isUnadvertisableInterface(name: string): boolean {	CODE
LOW	packages/dsh-remote-web-ui/src/loopback.ts	109	export function isForwardedLoopbackRequest(request: IncomingMessage): boolean {	CODE
LOW	packages/dsh-remote-web-ui/src/firewall.ts	212	export function invalidateFirewallSummary(): void {	CODE
LOW	packages/dsh-remote-bridge/src/core/liveactivity.ts	236	export function buildLiveActivityNotification(input: LiveActivityStateInput): LiveActivityNotification {	CODE
LOW	packages/dsh-remote-bridge/src/host/relay-registry.ts	111	export function readExistingRelayIdentity(profile: string, home: string = dshHome()): RelayIdentity \| undefined {	CODE
LOW	packages/dsh-remote-bridge/src/host/relay-connector.ts	32	export function namedTunnelChildRecordFile(home: string = dshHome()): string {	CODE
LOW	packages/dsh-remote-bridge/src/host/relay-connector.ts	92	export function createNamedRelayConnector(options: { manager?: TunnelManager } = {}): NamedRelayConnector {	CODE
LOW	packages/dsh-remote-bridge/src/host/lan.ts	85	export function isUnadvertisableInterface(name: string): boolean {	CODE
LOW	packages/dsh-remote-bridge/src/host/firewall.ts	212	export function invalidateFirewallSummary(): void {	CODE
LOW	packages/dsh-browser-view/src/host/loopback.ts	109	export function isForwardedLoopbackRequest(request: IncomingMessage): boolean {	CODE
LOW	packages/dsh-browser-view/src/host/cdp-endpoint.ts	83	export function realBrowserConnectionError(endpoint: CdpEndpoint, error: unknown): Error {	CODE
LOW	…sh-browser-view/src/client/BrowserViewSettingsCard.tsx	35	export function bindBrowserViewSettingsForm(ctx: ClientContext): ConfigForm<BrowserViewSettings> {	CODE
LOW	packages/dsh-web-settings/src/allowlist.ts	105	function resolveDirectNamespaceEntries(entry: string): string[] {	CODE
LOW	packages/dsh-web-settings/src/allowlist.ts	179	export function extractWebSettingsNamespaces(text: string): string[] {	CODE
LOW	packages/dsh-web-settings/src/bridge.ts	122	function isTrustedBridgeRequestResolved(request: IncomingMessage, access: ResolvedBridgeAccess): boolean {	CODE
LOW	packages/dsh-web-settings/src/index.ts	102	export function settingsYamlCandidatePaths(hostDocumentPath?: string, env: NodeJS.ProcessEnv = process.env, home: string	CODE
LOW	packages/dsh-skill-explorer/src/loopback.ts	109	export function isForwardedLoopbackRequest(request: IncomingMessage): boolean {	CODE
LOW	packages/dsh-skill-explorer/src/provider-toggles.ts	114	export function deserializeProviderToggles(raw: string): ProviderToggleDocument {	CODE
LOW	packages/dsh-skill-explorer/src/pair-access.ts	38	export function isPairedOrLoopbackAllowed(ctx: LookupCtx, request: IncomingMessage): boolean {	CODE
LOW	packages/dsh-skill-explorer/src/collect.ts	275	export function customSkillDirsFromLoader(entries: Iterable<LoaderEntryLike> \| undefined): string[] {	CODE
LOW	packages/dsh-skill-explorer/src/import.ts	133	function findEndOfCentralDirectory(archive: Buffer): number {	CODE
LOW	packages/dsh-skill-explorer/src/client/native-panel.tsx	100	export function registerSkillExplorerPanel(ctx: ClientContext, controller: PanelController, api: SkillApi): () => void {	CODE
LOW	packages/dsh-update/src/loopback.ts	109	export function isForwardedLoopbackRequest(request: IncomingMessage): boolean {	CODE
LOW	packages/dsh-update/src/update.ts	391	export async function fetchLatestDshRequirement(	CODE
LOW	packages/dsh-update/src/client/page-target.ts	35	export function isApplicationDeliveredPage(protocol: string): boolean {	CODE
LOW	packages/dsh-ssh/src/loopback.ts	109	export function isForwardedLoopbackRequest(request: IncomingMessage): boolean {	CODE
LOW	packages/dsh-ssh/src/client/panel/helpers.ts	72	export function resolveTerminalFontFamily(override?: string): string {	CODE
LOW	packages/dsh-session-archive/tests/fixtures.ts	173	export function writeProjcacheSessionFile(home: string, id: string, entry: { title?: string; createdAt?: number; cwd?: s	CODE
LOW	packages/dsh-session-archive/src/host/loopback.ts	109	export function isForwardedLoopbackRequest(request: IncomingMessage): boolean {	CODE
LOW	packages/dsh-task-board/src/host-routes.ts	227	export function isTrustedTaskBoardRequest(req: IncomingMessage, access: ResolvedRouteAccess): boolean {	CODE
LOW	packages/dsh-task-board/src/loopback.ts	109	export function isForwardedLoopbackRequest(request: IncomingMessage): boolean {	CODE
LOW	packages/dsh-task-board/src/index.ts	488	export function resolveHostDefaultPermission(ctx: Context): TaskPermission \| undefined {	CODE
LOW	packages/dsh-task-board/src/host-runner.ts	201	function escapeProvenanceDelimiter(value: string): string {	CODE
LOW	packages/dsh-task-board/src/core/verification-budget.ts	81	export function normalizeVerificationCallTimeoutSeconds(seconds: number \| undefined): number {	CODE
LOW	packages/dsh-task-board/src/core/verification-budget.ts	95	export function verificationCallTimeoutMs(seconds: number \| undefined): number {	CODE
LOW	packages/dsh-task-board/src/core/verification-budget.ts	104	export function normalizeVerificationBudgetSeconds(seconds: number \| undefined): number {	CODE
LOW	packages/dsh-task-board/src/core/execution-summary.ts	89	export function normalizeExecutionSummary(value: unknown): ExecutionSummary \| undefined {	CODE
LOW	packages/dsh-task-board/src/core/extension.ts	97	export function isTaskBoardExtensionPayload(value: unknown): value is TaskBoardExtensionPayload {	CODE
LOW	packages/dsh-task-board/src/core/extension.ts	125	export function normalizeTaskIntegrations(value: unknown): Record<string, TaskBoardExtensionPayload> \| undefined {	CODE
LOW	packages/dsh-task-board/src/core/extension.ts	489	export function resolveTaskBoardClientFace(ctx: TaskBoardClientContextSeat): TaskBoardClientFace \| undefined {	CODE
LOW	packages/dsh-task-board/src/core/subtask.ts	241	export function hasOutstandingDescendants(	CODE
45 more matches not shown…

Decorative Section Separators26 hits · 74 pts

Severity	File	Line	Snippet	Context
MEDIUM	scripts/e2e-mount.sh	2	# =============================================================================	COMMENT
MEDIUM	scripts/e2e-mount.sh	40	# =============================================================================	COMMENT
MEDIUM	scripts/rollout-verify.sh	2	# =============================================================================	COMMENT
MEDIUM	scripts/rollout-verify.sh	18	# =============================================================================	COMMENT
MEDIUM	packages/dsh-remote-web-ui/src/index.ts	617	// ── auto tunnel ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/dsh-remote-web-ui/src/index.ts	823	// ── update-only ingress sync (issue #1948) ────────────────────────────────	COMMENT
MEDIUM	packages/dsh-remote-web-ui/src/index.ts	823	// ── update-only ingress sync (issue #1948) ────────────────────────────────	COMMENT
MEDIUM	packages/dsh-remote-web-ui/src/index.ts	998	// ── posture probe ─────────────────────────────────────────────────────────	COMMENT
MEDIUM	packages/dsh-remote-web-ui/src/index.ts	1076	// ── the LAN edge (issue #1917) ──────────────────────────────────────────	COMMENT
MEDIUM	packages/dsh-remote-web-ui/src/index.ts	1076	// ── the LAN edge (issue #1917) ──────────────────────────────────────────	COMMENT
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	69	# ── identity ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	188	# ── the wire ────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	251	# ── shell ───────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	263	# ── filesystem ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	274	# ── standard filesystem tools ───────────────────────────────────────────────	COMMENT
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	286	# ── background jobs ────────────────────────────────────────────────────────	COMMENT
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	296	# ── skills ──────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	310	# ── goals ───────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	327	# ── plan mode ───────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	356	# ── compaction ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	387	# ── delegation and workflows ────────────────────────────────────────────────	COMMENT
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	510	# ── remaining model-facing rows ─────────────────────────────────────────────	COMMENT
MEDIUM	market/shell/scripts/assemble.ts	649	'# ── the model routes this build registers ───────────────────────────────────',	CODE
MEDIUM	market/shell/src/host/browser.patch.yml	13	# ── rows whose plugin the browser replaces ──────────────────────────────────	COMMENT
MEDIUM	market/shell/src/host/browser.patch.yml	95	# ── rows kept, with browser-appropriate values ──────────────────────────────	COMMENT
MEDIUM	market/shell/src/host/browser.patch.yml	157	# ── rows whose backing capability does not exist in a page ──────────────────	COMMENT

AI Slop Vocabulary11 hits · 42 pts

Severity	File	Line	Snippet	Context
MEDIUM	packages/dsh-plugin-manager/tests/body-contract.spec.ts	59	// (#1759), so this body-contract harness must not reach the network.	COMMENT
MEDIUM⚡	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	115	# the harness itself produces — the prompt stays the bare persona and the	COMMENT
MEDIUM⚡	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	117	# the harness's baseline chain ($DSH_HOME/AGENTS.md, then the project root's	COMMENT
MEDIUM⚡	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	120	# request so file edits propagate, dropping the harness's own injections (they	COMMENT
MEDIUM⚡	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	124	# non-default modes trade the harness's own channel for a preset-owned one; the	COMMENT
MEDIUM⚡	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	225	# The child-route guard. The harness records a Session's authorized child	COMMENT
MEDIUM⚡	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	234	# answer keeps the harness's own delegation behavior.	COMMENT
MEDIUM⚡	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	238	# The harness's workspace-instruction loader. Under the default	COMMENT
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	75	# harness, web-surface, and tool-guidance sections never reach the model.	COMMENT
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	431	# (0.2.1-rc.3) still ships only that key, while the harness checkout this	COMMENT
MEDIUM	.github/workflows/nightly.yml	3	# Tier 2 of the test strategy: the comprehensive lane that is deliberately too	COMMENT

Modern AI Meta-Vocabulary7 hits · 16 pts

Severity	File	Line	Snippet	Context
MEDIUM	…g-fix/2026-10-16-subagent-orchestration-cost-survey.md	1	# Agent Note: Subagent-orchestration cost survey and the unbounded cascade fan-out	COMMENT
MEDIUM	…ion/2026-10-11-explicit-mount-smoke-artifact-intent.md	17	This eliminates a publication-state-dependent selection policy, network probes and a second package-creation path. [CI](	CODE
MEDIUM	docs/multi-agent-resources.md	1	# 多代理并行开发资源纪律（multi-agent-resources）	COMMENT
MEDIUM	docs/archive/liangshen-v41-community-feedback-update.md	27	\| V4.1+DSH 真实工作「基本没法用」级抱怨 \| DSH Discussions #6855（一天实测后集中爆发的问题清单）；r/DeepSeek「coding 质量配不上速度」 \| 官方基准（TB2.1 90.6）与真实体感	CODE
MEDIUM	docs/archive/liangshen-v41-community-feedback-update.md	150	- 官方：[V4.1-Flash 发布公告](https://www.deepseek.com/en/news/deepseek-v4-1-flash/) · [模型卡（HuggingFace）](https://huggingface.c	CODE
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	141	# not a measured win: the official scaffold comparison ranks this presentation	COMMENT
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	497	# model-authored orchestration surface beside `run_code`: this is the one	COMMENT

Cross-Language Confusion (JS/TS)3 hits · 15 pts

Severity	File	Line	Snippet	Context
HIGH	market/shell/src/python/container-python.ts	332	elif kind == 'module':	CODE
HIGH	market/shell/src/python/container-python.ts	351	print(code, file=sys.stderr)	CODE
HIGH	market/shell/src/python/container-python.ts	354	print('KeyboardInterrupt', file=sys.stderr)	CODE

Fake / Example Data8 hits · 8 pts

Severity	File	Line	Snippet	Context
LOW	…fix/2026-09-07-maid-composer-lexical-input-color.zh.md	15	- 确保占位符规则覆盖 `[class*="placeholder"]` 与 `[data-placeholder]`，保持 `#b6c2e0`。	CODE
LOW	…ug-fix/2026-09-07-maid-composer-lexical-input-color.md	15	- Ensure placeholder rules cover `[class*="placeholder"]` and `[data-placeholder]` with `#b6c2e0`.	CODE
LOW	team-hub/README.md	62	-d '{"team_name": "DSH Team", "team_slug": "team-dsh", "email": "admin@example.com"}'	CODE
LOW	team-hub/PROTOCOL.md	164	"email": "admin@example.com"	CODE
LOW	team-hub/contract/bootstrap.json	16	"email": "admin@example.com"	CODE
LOW	…ckages/dsh-agents/tests/client-member-pickers.spec.tsx	135	expect([...form.querySelectorAll('input')].map(input => input.getAttribute('placeholder')))	CODE
LOW	packages/dsh-remote-web-ui/tests/remote-entry.spec.tsx	364	expect(input.getAttribute('placeholder')).toBe('Android · Chrome')	CODE
LOW	packages/dsh-browser-view/tests/client/panel.spec.tsx	84	expect(emptyField.getAttribute('placeholder')).toBe(zh['panel.url.empty'])	CODE

Self-Referential Comments2 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	…kages/dsh-liangshen/presets/liangshen/agent.cordis.yml	52	# This file is an AGENT-PLANE composition. The roster mounts it ONCE under a	COMMENT
MEDIUM	packages/dsh-web-all/cordis.patch.yml	2	# This file is derived from the aggregate.yml manifest in this package;	COMMENT

Synthetic Comment Markers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	…ved/process/2026-09-18-pr-maintenance-eleventh-pass.md	15	- #1608 (island-life, submitted by wertyq111) merged as 84331b4f9. Pure asset directory paying homage to Animal Crossing	CODE

Excessive Try-Catch Wrapping5 hits · 5 pts

Severity	File	Line	Snippet	Context
LOW	…hive/liangshen-maxtokens-ab-20260815/scripts/final2.py	25	except Exception: continue	CODE
LOW	…ve/liangshen-maxtokens-ab-20260815/scripts/final-ab.py	28	except Exception: continue	CODE
LOW	…hive/liangshen-maxtokens-ab-20260815/scripts/final3.py	26	except Exception: continue	CODE
LOW	…/liangshen-maxtokens-ab-20260815/scripts/analyze-ab.py	25	except Exception:	CODE
LOW	…hive/liangshen-maxtokens-ab-20260815/scripts/final4.py	25	except Exception: continue	CODE

Deep Nesting5 hits · 5 pts

Severity	File	Line	Context
LOW	…s/archive/blue-throated-bee-eater-pet/gen-pet-pixel.py	291	CODE
LOW	…s/archive/blue-throated-bee-eater-pet/gen-pet-pixel.py	301	CODE
LOW	…s/archive/blue-throated-bee-eater-pet/gen-pet-pixel.py	330	CODE
LOW	…s/archive/blue-throated-bee-eater-pet/gen-pet-pixel.py	410	CODE
LOW	docs/archive/blue-throated-bee-eater-pet/gen-pet.py	72	CODE

Unused Imports3 hits · 3 pts

Severity	File	Line	Context
LOW	…/liangshen-maxtokens-ab-20260815/scripts/analyze-ab.py	1	CODE
LOW	…/liangshen-maxtokens-ab-20260815/scripts/analyze-ab.py	1	CODE
LOW	docs/archive/blue-throated-bee-eater-pet/gen-pet.py	36	CODE

Verbosity Indicators1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	packages/dsh-ssh/src/engine/connection-pool.ts	232	// Step 1: Automatic PAM password fallback: if a password is configured and all prompts ask for password	COMMENT

Structural Annotation Overuse1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	packages/dsh-ssh/src/engine/connection-pool.ts	232	// Step 1: Automatic PAM password fallback: if a password is configured and all prompts ask for password	COMMENT

zhu1090093659/dsh-web-ui

Open-Source Code Quality, Security and Technical Debt Review