dsh-command-code-review
/code-review slash command for DeepSeek Harness — five parallel review lenses, per-finding confidence scoring, for both pull requests and local code.
/code-review slash command for DeepSeek Harness (dsh) — a self-contained plugin bundle that runs a full code review, either on a pull request or on local code.
English | 中文
What it does
Registers one global slash command with two modes:
/code-review <pr number|url> — pull-request review (eligibility check → 5 parallel review lenses → per-finding confidence scoring → posts the result back to the PR with gh).
/code-review [request] (or empty) — local review of the requested scope (with no input it first probes the current branch for an open pull request and reviews that if one exists, otherwise the current uncommitted changes); reports findings directly in chat (no gh needed).
Both modes share the same core: collect relevant dsh.md guidance, launch 5 parallel review subagents (dsh.md adherence, shallow bug scan, git-history, prior-change comments, code-comment compliance), confidence-score each finding with a parallel subagent, and drop anything below the configured threshold (default 80).
Requirements
- A dsh profile built on
@deepseek-ai/dsh-base (every shipped profile), which provides the commands service and the subagent/bash/todo tools the workflow uses.
- The GitHub CLI (
gh) on PATH, authenticated — required only for pull-request review. Local review needs no gh.
Install
From the npm registry:
dsh plugin --profile web add dsh-command-code-review
From a local checkout or tarball:
dsh plugin --profile web add /path/to/dsh-command-code-review
dsh plugin --profile web add /path/to/dsh-command-code-review-<version>.tgz
The dsh plugin add command installs the package into the profile and, because its package.json declares dsh.bundle, appends it to dsh.profile.bundles automatically. Restart or re-boot the profile to pick it up.
Usage
Type /code-review in the web composer:
/code-review 123 # review a pull request by number
/code-review https://github.com/owner/repo/pull/123
/code-review review src/auth # local review of a named scope
/code-review # local review of the current uncommitted changes
How it works
The package is a standard dsh bundle:
package.json declares "dsh": { "bundle": { "patch": "./cordis.patch.yml" } }.
cordis.patch.yml inserts one plugin row (id: command-code-review) into the profile layer stack.
lib/index.js is a Cordis plugin that injects commands and registers the code-review command. The handler routes PR numbers/URLs to the pull-request workflow and everything else (including empty input) to the local-review workflow, then delivers it via agent.followup. The confidence threshold is configurable per profile (see Configuration), and the workflows tell the agent to await subagent completion notices rather than polling.
Users can disable or override the command from their own profile cordis.patch.yml:
- disable: command-code-review
Configuration
-
Confidence threshold: the workflow drops findings scored below a threshold (default 80). Override it in your profile cordis.patch.yml:
- id: command-code-review
config:
threshold: 90
-
Review lenses: the 5 parallel review lenses (dsh.md compliance, bug scan, git-history, prior-change comments, code-comment compliance) live in lib/index.js; add or remove lenses to fit your needs.
Troubleshooting
- No review comment posted: the PR is closed, draft, trivial, or already reviewed; or no finding scored 80 or above.
gh not found: install and authenticate the GitHub CLI (gh auth login); only pull-request review needs it.
- Code links do not render: use the full commit SHA and the
#L[start]-L[end] line range.
License
MIT