The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.
This report presents the forensic synthetic code analysis of hexclave/hexclave, a TypeScript project with 6,843 GitHub stars. SynthScan v2.0 examined 621,091 lines of code across 3149 source files, recording 2180 pattern matches distributed across 15 syntactic categories. The overall adjusted score of 4.8 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 2180 distinct pattern matches across 15 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | examples/demo/src/app/turnstile-signup/page-client.tsx | 222 | function isMagicLinkChallengeRequired(result: MagicLinkSendResult): boolean { | CODE |
| LOW | examples/demo/src/app/turnstile-signup/page-client.tsx | 287 | export default function TurnstileSignupPageClient() { | CODE |
| LOW | examples/demo/src/app/turnstile-signup/page-client.tsx | 328 | function getOAuthCallbackUrlForTurnstileLab() { | CODE |
| LOW | examples/demo/src/app/turnstile-signup/page-client.tsx | 419 | async function handleMagicLinkVisibleDrill(): Promise<FlowResult> { | CODE |
| LOW | examples/demo/src/app/cli-auth-demo/page.tsx | 63 | function parseAccessTokenUserSnapshot(accessToken: string): { userId: string | null; isAnonymous: boolean } { | CODE |
| LOW | examples/demo/src/app/connected-accounts/page.tsx | 264 | function LegacyGetConnectedAccountDemo() { | CODE |
| LOW | examples/tanstack-start-demo/src/hexclave.ts | 7 | function replaceHexclavePortPrefix(value: string): string { | CODE |
| LOW | …s/lovable-react-18-example/src/components/ui/chart.tsx | 278 | function getPayloadConfigFromPayload(config: ChartConfig, payload: unknown, key: string) { | CODE |
| LOW | examples/convex/app/user-info.ts | 7 | export async function getUserInfoConvexHttpClient() { | CODE |
| LOW | configs/tsdown/js-library.ts | 146 | export default function createJsLibraryTsupConfig(_options: { barrelFiles?: string[] | undefined, onSuccess?: string | ( | CODE |
| LOW | …board-ui-components/src/components/chart-container.tsx | 119 | export function getPayloadConfigFromPayload( | CODE |
| LOW | …-ui-components/src/components/analytics-chart/state.ts | 101 | export function isAnalyticsChartDataLayer(l: AnalyticsChartLayer): l is AnalyticsChartDataLayer { | CODE |
| LOW | …-ui-components/src/components/analytics-chart/state.ts | 155 | export function computeLocalInProgressIdx( | CODE |
| LOW | …i-components/src/components/analytics-chart/strings.ts | 67 | export function resolveAnalyticsChartStrings( | CODE |
| LOW | …ts/analytics-chart/default-analytics-chart-tooltip.tsx | 107 | export function DefaultAnalyticsChartTooltip({ ctx }: DefaultAnalyticsChartTooltipProps) { | CODE |
| LOW | …i-components/src/components/analytics-chart/palette.ts | 24 | export function resolveAnalyticsChartPalette( | CODE |
| LOW | …hboard-ui-components/src/components/data-grid/state.ts | 22 | export function createDefaultDataGridState( | CODE |
| LOW | …components/src/components/data-grid/data-grid.test.tsx | 225 | function InteractiveDataGridHarness(props: { | CODE |
| LOW | …components/src/components/data-grid/data-grid.test.tsx | 368 | function InfiniteScrollLoadMoreHarness({ onFetch }: { onFetch: () => void }) { | CODE |
| LOW | …d-ui-components/src/components/data-grid/data-grid.tsx | 80 | export function isDataGridInteractiveRowClickTarget(target: EventTarget | null): boolean { | CODE |
| LOW | packages/template/scripts/generate-env.ts | 72 | function generateEnvVarsConstSnippet() { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 198 | function parseProjectAvailabilityResponse(body: unknown): boolean { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 229 | async function isLocalDashboardProjectAvailable(app: StackClientApp<true>): Promise<boolean> { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 632 | function hasPersistentTokenStoreForDevTool(app: StackClientApp<boolean>): boolean { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 657 | function isBestEffortOverviewError(error: unknown) { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 1251 | function appendBlockWithInlineMarkdown(tag: "p" | "li" | "h1" | "h2" | "h3", className: string, text: string) { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 1365 | function getCurrentAssistantMessage(): AssistantMessage { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 2146 | function animateNextPanelGeometryChange() { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 2220 | function getOrCreatePane(tabId: TabId): HTMLElement { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 2363 | function closePanelAndPersistClosed() { | CODE |
| LOW | …ges/template/src/dev-tool/dev-tool-trigger-position.ts | 91 | export function getSnappedTriggerPlacement( | CODE |
| LOW | …ages/template/src/pushed-config-error-overlay/index.ts | 64 | export function mountPushedConfigErrorOverlay(app: StackClientApp<true>): () => void { | CODE |
| LOW | …ages/template/src/components-page/cli-auth-confirm.tsx | 26 | async function completeCliAuthWithRefreshToken(app: StackClientApp, loginCode: string, refreshToken: string) { | CODE |
| LOW | …mplate/src/components-page/hexclave-handler-client.tsx | 404 | function toAbsoluteOrRelativeRedirectTarget(url: URL): string { | CODE |
| LOW | …mplate/src/components-page/hexclave-handler-client.tsx | 408 | function useClientOriginAfterHydration(): string | undefined { | CODE |
| LOW | …ages/template/src/components-page/account-settings.tsx | 284 | function EmailsAndAuthPageSkeleton() { | CODE |
| LOW | …ages/template/src/components-page/account-settings.tsx | 293 | function ActiveSessionsPageSkeleton() { | CODE |
| LOW | …ages/template/src/components-page/account-settings.tsx | 333 | function NotificationsPageSkeleton() { | CODE |
| LOW | …ents-page/account-settings/payments/payments-panel.tsx | 112 | function SetDefaultPaymentMethodForm(props: { | CODE |
| LOW | …ount-settings/teams/team-member-invitation-section.tsx | 15 | export function TeamMemberInvitationSection(props: { team: Team }) { | CODE |
| LOW | …ount-settings/teams/team-member-invitation-section.tsx | 26 | function MemberInvitationsSectionInvitationsList(props: { team: Team }) { | CODE |
| LOW | …ount-settings/teams/team-member-invitation-section.tsx | 69 | function MemberInvitationSectionInner(props: { team: Team }) { | CODE |
| LOW | packages/template/src/providers/hexclave-provider.tsx | 35 | function TanStackStartStackProvider({ | CODE |
| LOW | …template/src/providers/translation-provider-client.tsx | 17 | export function TranslationProviderClient(props: { | CODE |
| LOW | packages/template/src/utils/monkey-patch.tsx | 5 | export function isNoSuspenseBoundaryError(value: unknown): boolean { | CODE |
| LOW | packages/template/src/utils/react.tsx | 8 | export function shouldRethrowRenderingError(error: unknown): boolean { | CODE |
| LOW | packages/template/src/lib/cookie.ts | 74 | function getTanStackStartServerContext() { | CODE |
| LOW | packages/template/src/lib/cookie.ts | 116 | export async function createPlaceholderCookieHelper(): Promise<CookieHelper> { | CODE |
| LOW | packages/template/src/lib/cookie.ts | 179 | function determineSecureFromTanStackStartContext(api: ReturnType<typeof getTanStackStartServerContext>): boolean { | CODE |
| LOW | packages/template/src/lib/cookie.ts | 186 | function refreshTanStackStartIsHttpsCookie(api: ReturnType<typeof getTanStackStartServerContext>) { | CODE |
| LOW | packages/template/src/lib/cookie.ts | 198 | function createTanStackStartCookieHelper(api: ReturnType<typeof getTanStackStartServerContext>): CookieHelper { | CODE |
| LOW | packages/template/src/lib/cookie.ts | 237 | export function createBrowserCookieHelper(): CookieHelper { | CODE |
| LOW | packages/template/src/lib/cookie.ts | 374 | function determineSecureFromClientContext(): boolean { | CODE |
| LOW | packages/template/src/lib/cookie.ts | 378 | function determineSecureFromServerContext( | CODE |
| LOW | packages/template/src/lib/cookie.ts | 392 | function shouldSetPartitionedClient() { | CODE |
| LOW⚡ | packages/template/src/lib/cookie.ts | 454 | function deleteCookieClientInternal(name: string, options: DeleteCookieOptions) { | CODE |
| LOW⚡ | packages/template/src/lib/cookie.ts | 464 | export function setOrDeleteCookieClient(name: string, value: string | null, options: SetCookieOptions & DeleteCookieOpti | CODE |
| LOW⚡ | packages/template/src/lib/cookie.ts | 473 | export async function setOrDeleteCookie(name: string, value: string | null, options: SetCookieOptions & DeleteCookieOpti | CODE |
| LOW | packages/template/src/lib/cookie.ts | 513 | export function consumeVerifierAndStateCookie(state: string) { | CODE |
| LOW | packages/template/src/lib/auth.ts | 8 | export async function getNewOAuthProviderOrScopeUrl( | CODE |
| 1356 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ckages/dashboard-ui-components/src/components/card.tsx | 7 | // ─── Card nesting context ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ckages/dashboard-ui-components/src/components/card.tsx | 54 | // ─── Discriminated props ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/state.ts | 46 | // ─── Column value resolution ───────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/state.ts | 87 | // ─── Pagination ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/state.ts | 97 | // ─── Quick search ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/state.ts | 128 | // ─── Date helpers ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/state.ts | 195 | // ─── CSV Export ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 83 | // ── Feature flags ────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 90 | // ── Display ────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 97 | // ── Cell overflow ────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 105 | // ── Overrides ────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 113 | // ── Date / dateTime ───────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 122 | // ── Cell-level callbacks ────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 134 | // ─── Sorting ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 141 | // ─── Selection ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 150 | // ─── Column visibility / pinning ───────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 158 | // ─── Pagination ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 295 | // ── Infinite scroll ──────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 303 | // ── State (fully controlled) ─────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 307 | // ── Modes ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 317 | // ── Layout ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 3 | // ─── Row identity ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 8 | // ─── Column definition ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 72 | // ── Sizing ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 170 | // ─── Combined grid state ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 192 | // ─── Data source ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 224 | // ─── Export ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 258 | // ─── Callbacks ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 277 | // ─── Main props ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 282 | // ── Data (pre-resolved by the consumer) ──────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 356 | // ── Callbacks ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 358 | // ── Customisation ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 387 | // ─── Toolbar / footer context ──────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 409 | // ─── Strings ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ponents/src/components/data-grid/data-grid-toolbar.tsx | 20 | // ─── Popover primitive ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ponents/src/components/data-grid/data-grid-toolbar.tsx | 74 | // ─── Quick search ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ponents/src/components/data-grid/data-grid-toolbar.tsx | 115 | // ─── Toolbar button ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ponents/src/components/data-grid/data-grid-toolbar.tsx | 149 | // ─── Column manager ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ponents/src/components/data-grid/data-grid-toolbar.tsx | 268 | // ─── Main toolbar ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i-components/src/components/data-grid/use-url-state.ts | 13 | // ─── URL <-> state encoding ────────────────────────────────────────── | COMMENT |
| MEDIUM | …i-components/src/components/data-grid/use-url-state.ts | 26 | // ── widths ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i-components/src/components/data-grid/use-url-state.ts | 73 | // ── hidden columns ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i-components/src/components/data-grid/use-url-state.ts | 100 | // ── sort model ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i-components/src/components/data-grid/use-url-state.ts | 142 | // ── quick search ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i-components/src/components/data-grid/use-url-state.ts | 148 | // ─── Hook ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 72 | // ─── Row click target ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 99 | // ─── State translators (DataGridState ⇄ TanStack) ──────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 119 | // ─── Flex column width distribution ────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 142 | // ─── Selection logic (with shift-range anchor) ─────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 195 | // ─── Header cell ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 283 | // ─── Data cell ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 377 | // ─── Skeleton row ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 489 | // ─── Selection checkbox ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 528 | // ─── Infinite scroll sentinel ──────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 579 | // ─── Footer ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 661 | // ─── Main DataGrid ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 749 | // ── Build TanStack column defs from our column defs ────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 855 | // ── TanStack Table instance ────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 892 | // ── Row IDs (stable across this render) ────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 925 | // ── Column width CSS variables (TanStack pattern) ──────────── | COMMENT |
| 230 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker/server/entrypoint.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …plementations/swift/Sources/StackAuth/TokenStore.swift | 21 | COMMENT | |
| LOW | …plementations/swift/Sources/StackAuth/TokenStore.swift | 41 | case explicit(accessToken: String, refreshToken: String) | COMMENT |
| LOW | …/skills/pr-visual-writeup/scripts/detect_dev_server.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | examples/docs-examples/src/app/signin/page.tsx | 1 | 'use client'; | COMMENT |
| LOW | examples/docs-examples/src/app/signin/page.tsx | 21 | // // this will redirect to the OAuth provider's login page | COMMENT |
| LOW | examples/docs-examples/src/app/signin/page.tsx | 41 | // if (!password) { | COMMENT |
| LOW | scripts/utils.ts | 61 | // Each element in skipStack can be either: | COMMENT |
| LOW | scripts/wait-for-dev-package-imports.ts | 1 | /// <reference types="node" /> | COMMENT |
| LOW | scripts/wait-for-dev-package-imports.ts | 21 | // We keep this wait scoped to the eager generator rather than putting it in | COMMENT |
| LOW | scripts/reseed-bulldozer.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | packages/sc/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | packages/sc/src/next-static-analysis-workaround.ts | 1 | // Next statically analyzes the imports and ensures that the `next/headers` module is never imported on a client bundle. | COMMENT |
| LOW | packages/template/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | packages/template/src/config.ts | 1 | // Retained only for backwards compatibility with config files that still import | COMMENT |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 201 | } | COMMENT |
| LOW | …ages/template/src/components-page/hexclave-handler.tsx | 41 | // Default export preserved for backwards compatibility (legacy `as`-rename re-exports). | COMMENT |
| LOW | packages/template/src/lib/cookie.ts | 1 | import { cookies as rscCookies, headers as rscHeaders } from '@hexclave/sc/force-react-server'; // THIS_LINE_PLATFORM ne | COMMENT |
| LOW | packages/template/src/lib/cookie.ts | 21 | // - SameSite is set to `Lax` by default, which is already true in Chromium-based browsers, so this creates | COMMENT |
| LOW | packages/template/src/lib/cookie.ts | 41 | // which are fundamentally unsafe. Therefore, we need to take extra care that we only ever set Partitioned cookies | COMMENT |
| LOW | …lib/hexclave-app/apps/implementations/event-tracker.ts | 41 | // Dead-click detection (PostHog-style). Whether an element has a click handler | COMMENT |
| LOW | …b/hexclave-app/apps/implementations/client-app-impl.ts | 401 | if (session.isKnownToBeInvalid()) { | COMMENT |
| LOW | …b/hexclave-app/apps/implementations/client-app-impl.ts | 1881 | // If these tokens resolve to a session we already have (eg. the RDE dashboard re-installing a freshly minted | COMMENT |
| LOW | packages/template/src/in-page-ui/logo.ts | 1 | // Hexclave mark — hexagon outline with three radial bars, monochrome via currentColor so it inherits the surrounding | COMMENT |
| LOW | packages/template/src/clickmap/clickmap-core.ts | 501 | // Attribute clicks to the logical control, not the fragment the browser | COMMENT |
| LOW | packages/shared/src/deployments.ts | 1 | // Shared shapes for the Deploy app. Service definitions used to live in | COMMENT |
| LOW | packages/shared/src/deployments.ts | 21 | // one upload, one build. Its id comes from the deploy file's own | COMMENT |
| LOW | packages/shared/src/deployments.ts | 181 | // can show where those services came from without a special case. | COMMENT |
| LOW | packages/shared/src/deployments.ts | 201 | * doesn't exist (the `hexclave` context object replaces it), but the id stays | COMMENT |
| LOW | packages/shared/src/deployments.ts | 281 | // - absent (plain): a literal `value`. | COMMENT |
| LOW | packages/shared/src/deployments.ts | 301 | // with its memory intact and without a cold start; with min_instances 1 | COMMENT |
| LOW | packages/shared/src/deployments.ts | 321 | // lives where the truth does. (An earlier revision of this branch had the flag | COMMENT |
| LOW | packages/shared/src/deployments.ts | 341 | // certificates work on the standard ports. | COMMENT |
| LOW | packages/shared/src/deployments.ts | 361 | // pre-flight, this schema and the remote builder all resolve it against one | COMMENT |
| LOW | packages/shared/src/deployments.ts | 381 | // into the machine config as written, and the platform resolves a tag when it | COMMENT |
| LOW | packages/shared/src/deployments.ts | 401 | // env var is available to it. That is what makes `image` + `build_command` | COMMENT |
| LOW | packages/shared/src/deployments.ts | 421 | // every shape: a Railpack-built service keeps its auto-detected build and just | COMMENT |
| LOW | packages/shared/src/deployments.ts | 441 | } | COMMENT |
| LOW | packages/shared/src/deployments.ts | 461 | // There is deliberately no `public` here — it is a property of the SERVICE (see | COMMENT |
| LOW | packages/shared/src/deployments.ts | 521 | } | COMMENT |
| LOW | packages/shared/src/deployments.ts | 621 | // container listening on more than this is far likelier to be a config mistake | COMMENT |
| LOW | packages/shared/src/deployments.ts | 641 | export const MAX_PERSISTENT_VOLUMES_PER_SERVICE = 1; | COMMENT |
| LOW | packages/shared/src/deployments.ts | 681 | // `dockerfile_path`) or names an ALREADY-BUILT image (`image`) — unless it also | COMMENT |
| LOW | packages/shared/src/deployments.ts | 861 | // be persisted: they travel with the deploy request instead (see | COMMENT |
| LOW | packages/shared/src/deployments.ts | 881 | ); | COMMENT |
| LOW | packages/shared/src/deployments.ts | 921 | protocol: yupString().oneOf(["http", "tcp"]).defined(), | COMMENT |
| LOW | packages/shared/src/deployments.ts | 1021 | )), | COMMENT |
| LOW | packages/shared/src/deployments.ts | 1061 | }), | COMMENT |
| LOW | packages/shared/src/project-secrets.ts | 1 | // Project secrets: per-project, write-only credential values, envelope-encrypted | COMMENT |
| LOW | packages/shared/src/schema-fields.ts | 61 | // | COMMENT |
| LOW | packages/shared/src/schema-fields.ts | 381 | COMMENT | |
| LOW | packages/shared/src/schema-fields.ts | 401 | // reading "this cannot be null" with nothing identifying the entry. | COMMENT |
| LOW | packages/shared/src/config-authoring.ts | 41 | // ============================ deployments ============================ | COMMENT |
| LOW | packages/shared/src/interface/admin-interface.ts | 41 | // One line of a service's RUNTIME output — what the container printed while | COMMENT |
| LOW | packages/shared/src/interface/admin-interface.ts | 61 | // "skipped" = the deploy never got to it, because something it depends on | COMMENT |
| LOW | packages/shared/src/interface/admin-interface.ts | 101 | status: "queued" | "building" | "deploying" | "deployed" | "failed" | "canceled", | COMMENT |
| LOW | packages/shared/src/interface/admin-interface.ts | 121 | COMMENT | |
| LOW | packages/shared/src/interface/admin-interface.ts | 141 | root_directory: string | null, | COMMENT |
| LOW | packages/shared/src/config/schema.ts | 501 | COMMENT | |
| LOW | packages/shared/src/config/schema.ts | 621 | // `apps.installed` key and as its top-level config section, so the alpha stage is | COMMENT |
| 163 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/implementations/swift/README.md | 31 | try await stack.signInWithCredential(email: "user@example.com", password: "password") | CODE |
| LOW | …kages/template/src/components-page/onboarding.test.tsx | 61 | primaryEmail: "user@example.com", | CODE |
| LOW | …ts-page/account-settings/profile-page/profile-page.tsx | 19 | displayName: props.mockUser.displayName || 'John Doe', | CODE |
| LOW | packages/template/src/clickmap/clickmap-core.ts | 645 | const otherStableAttrs = ['aria-label', 'role', 'placeholder', 'title', 'type']; | CODE |
| LOW | packages/shared/src/schema-fields.ts | 909 | export const userDisplayNameSchema = yupString().nullable().max(256).meta({ openapiField: { description: _displayNameDes | CODE |
| LOW | packages/shared/src/schema-fields.ts | 1010 | export const teamMemberDisplayNameSchema = yupString().meta({ openapiField: { description: _displayNameDescription('team | CODE |
| LOW⚡ | packages/shared/src/interface/client-interface.test.ts | 87 | await iface.sendMagicLinkEmail("user@example.com", "https://app.example.com/callback"); | CODE |
| LOW⚡ | packages/shared/src/interface/client-interface.test.ts | 90 | email: "user@example.com", | CODE |
| LOW⚡ | packages/shared/src/interface/client-interface.test.ts | 100 | await iface.sendMagicLinkEmail("user@example.com", "https://app.example.com/callback", { | CODE |
| LOW⚡ | packages/shared/src/interface/client-interface.test.ts | 106 | email: "user@example.com", | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 118 | await iface.sendMagicLinkEmail("user@example.com", "https://app.example.com/callback", { | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 123 | email: "user@example.com", | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 134 | await iface.sendMagicLinkEmail("user@example.com", "https://app.example.com/callback", { | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 139 | email: "user@example.com", | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 152 | const result = await iface.sendMagicLinkEmail("user@example.com", "https://app.example.com/callback", { | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 172 | "user@example.com", | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 180 | email: "user@example.com", | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 193 | "user@example.com", | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 335 | "user@example.com", | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 345 | email: "user@example.com", | CODE |
| LOW | packages/shared/src/utils/elements-chain.tsx | 42 | "placeholder", | CODE |
| LOW | apps/backend/prisma/seed.ts | 7 | import { seedDummyProject } from '@/lib/seed-dummy-data'; | CODE |
| LOW | apps/backend/prisma/seed.ts | 310 | // We create the subscription with raw Prisma (matching seed-dummy-data.ts) | COMMENT |
| LOW | apps/backend/prisma/seed.ts | 332 | // (mirrors the pattern used in seed-dummy-data.ts). | COMMENT |
| LOW | apps/backend/src/sentry-scrubbing.test.ts | 19 | email: "user@example.com", | CODE |
| LOW | apps/backend/src/sentry-scrubbing.test.ts | 43 | "db.statement": "SELECT * FROM users WHERE email = 'user@example.com'", | CODE |
| LOW | apps/backend/src/sentry-scrubbing.test.ts | 57 | "db.statement": "SELECT * FROM users WHERE email = 'user@example.com'", | CODE |
| LOW | apps/backend/src/sentry-scrubbing.test.ts | 61 | "stack.smart-request.user.primary-email": "user@example.com", | CODE |
| LOW | apps/backend/src/sentry-scrubbing.test.ts | 120 | expect(JSON.stringify(result)).not.toContain("user@example.com"); | CODE |
| LOW | …p/api/latest/internal/preview/create-project/route.tsx | 3 | import { seedDummyProject } from "@/lib/seed-dummy-data"; | CODE |
| LOW | apps/backend/src/lib/cel-evaluator.ts | 155 | expect(ctx('user@example.com', 'us', 'password', null, 3, 4)).toEqual({ | CODE |
| LOW | apps/backend/src/lib/cel-evaluator.ts | 156 | email: 'user@example.com', emailDomain: 'example.com', countryCode: 'US', | CODE |
| LOW⚡ | apps/backend/src/lib/email-rendering.test.tsx | 134 | user: { displayName: 'John Doe' }, | CODE |
| LOW⚡ | apps/backend/src/lib/email-rendering.test.tsx | 143 | expect(result.data[0].html).toContain('John Doe'); | CODE |
| LOW⚡ | apps/backend/src/lib/email-rendering.test.tsx | 151 | user: { displayName: 'Jane Doe' }, | CODE |
| LOW⚡ | apps/backend/src/lib/email-rendering.test.tsx | 161 | expect(result.data[0].html).toContain('Jane Doe'); | CODE |
| LOW | apps/backend/src/lib/email-rendering.test.tsx | 543 | expect(result.data.html).toContain('John Doe'); | CODE |
| LOW | apps/backend/src/lib/email-rendering.tsx | 140 | const user = (previewMode && !options.user) ? { displayName: "John Doe" } : options.user; | CODE |
| LOW | apps/backend/src/lib/emailable.tsx | 158 | "user@example.com", | CODE |
| LOW | apps/backend/src/lib/emailable.tsx | 168 | "user@example.com", | CODE |
| LOW | apps/backend/src/lib/seed-dummy-data.test.ts | 3 | import { buildDummyPaymentsSetup } from "./seed-dummy-data"; | CODE |
| LOW | apps/backend/src/lib/emails.tsx | 234 | expect(normalizeEmail('user@example.com')).toBe('user@example.com'); | CODE |
| LOW | apps/backend/src/lib/growth/sql-privacy.test.ts | 22 | { id: "u_1", primary_email: "jane@acme.com", display_name: "Jane Doe" }, | CODE |
| LOW | …)/projects/[projectId]/design-language/page-client.tsx | 818 | { name: "placeholder", type: "string", description: "Placeholder text for empty states." }, | CODE |
| LOW | …)/projects/[projectId]/design-language/page-client.tsx | 861 | { name: "John Doe", email: "john@example.com", time: "Active 2h ago", color: "cyan" }, | CODE |
| LOW | …)/projects/[projectId]/design-language/page-client.tsx | 1052 | { name: "placeholder", type: "string", default: "'Select'", description: "Placeholder label when no option | CODE |
| LOW | …rotected)/(outside-dashboard)/projects/page-client.tsx | 760 | placeholder="admin@example.com" | CODE |
| LOW | apps/dashboard/src/components/email-preview.tsx | 773 | senderName = "Acme Inc", | CODE |
| LOW | …shboard-account-settings/profile-page/profile-page.tsx | 19 | displayName: props.mockUser.displayName || 'John Doe', | CODE |
| LOW | …ts/src/hosted-components/auth/team-invitation-page.tsx | 140 | setDetails({ teamDisplayName: "Acme Corp" }); | CODE |
| LOW | …ponents/src/hosted-components/auth/onboarding-page.tsx | 68 | primaryEmail: demoEmail || "user@example.com", | CODE |
| LOW | …ponents/src/hosted-components/auth/onboarding-page.tsx | 77 | primaryEmail: "user@example.com", | CODE |
| LOW | …ponents/src/hosted-components/auth/onboarding-page.tsx | 88 | primaryEmail: "user@example.com", | CODE |
| LOW | …ponents/src/hosted-components/auth/onboarding-page.tsx | 97 | primaryEmail: "user@example.com", | CODE |
| LOW | …ponents/account-settings/profile-page/profile-page.tsx | 18 | displayName: props.mockUser.displayName || 'John Doe', | CODE |
| LOW | apps/e2e/tests/general/cli.test.ts | 154 | fs.writeFileSync(configFilePath, JSON.stringify({ STACK_CLI_REFRESH_TOKEN: "fake-token" }), { mode: 0o600 }); | CODE |
| LOW | apps/e2e/tests/general/cli.test.ts | 161 | expect(content).not.toContain("fake-token"); | CODE |
| LOW | apps/e2e/tests/js/convex.test.ts | 38 | email: "test@test.com", | CODE |
| LOW | apps/e2e/tests/js/convex.test.ts | 43 | email: "test@test.com", | CODE |
| LOW | apps/e2e/tests/js/app.test.ts | 15 | email: "test@test.com", | CODE |
| 102 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ied-prompts/skill-site-prompt-parts/ai-setup-prompt.ts | 260 | print("User cancelled the login process. Exiting") | CODE |
| HIGH | …ied-prompts/skill-site-prompt-parts/ai-setup-prompt.ts | 298 | print("The user is logged in as", user["display_name"] or user["primary_email"]) | CODE |
| HIGH | …ied-prompts/skill-site-prompt-parts/ai-setup-prompt.ts | 338 | return None | CODE |
| HIGH | …ied-prompts/skill-site-prompt-parts/ai-setup-prompt.ts | 350 | return None | CODE |
| HIGH | …ied-prompts/skill-site-prompt-parts/ai-setup-prompt.ts | 371 | return None | CODE |
| HIGH | …ied-prompts/skill-site-prompt-parts/ai-setup-prompt.ts | 387 | return None | CODE |
| HIGH | apps/marshal/src/builds.ts | 395 | elif [ -n "$DOCKERFILE_PATH" ]; then | CODE |
| HIGH⚡ | …page-client-parts/link-existing-onboarding-workflow.ts | 102 | elif [ -f yarn.lock ]; then | CODE |
| HIGH⚡ | …page-client-parts/link-existing-onboarding-workflow.ts | 105 | elif [ -f bun.lockb ] || [ -f bun.lock ]; then | CODE |
| HIGH⚡ | …page-client-parts/link-existing-onboarding-workflow.ts | 108 | elif [ -f package-lock.json ] || [ -f npm-shrinkwrap.json ]; then | CODE |
| HIGH⚡ | …page-client-parts/link-existing-onboarding-workflow.ts | 110 | elif [ -f package.json ]; then | CODE |
| HIGH⚡ | docs-mintlify/snippets/home-prompt-island.jsx | 3 | export const generatedSetupPromptText = "# Setting up Hexclave\n\nThis prompt explains how to set up Hexclave in your pr | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | examples/lovable-react-18-example/README.md | 26 | # Step 1: Clone the repository using the project's Git URL. | COMMENT |
| LOW⚡ | examples/lovable-react-18-example/README.md | 29 | # Step 2: Navigate to the project directory. | COMMENT |
| LOW⚡ | examples/lovable-react-18-example/README.md | 32 | # Step 3: Install the necessary dependencies. | COMMENT |
| LOW⚡ | examples/lovable-react-18-example/README.md | 35 | # Step 4: Start the development server with auto-reloading and an instant preview. | COMMENT |
| LOW | …b/hexclave-app/apps/implementations/client-app-impl.ts | 4087 | // Step 1: Initiate the CLI auth process | COMMENT |
| LOW | …b/hexclave-app/apps/implementations/client-app-impl.ts | 4111 | // Step 2: Open the browser for the user to authenticate and display the verification code | COMMENT |
| LOW | …b/hexclave-app/apps/implementations/client-app-impl.ts | 4124 | // Step 3: Poll for the token | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 42 | // Step 1: Collect catalogId -> customerType mappings from products | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 46 | // Step 2: Find all catalog IDs that exist | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 50 | // Step 3: Add customerType keys for catalogs that need them | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 63 | // Step 4: Rename catalogs -> productLines | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 66 | // Step 5: Rename catalogId -> productLineId in products | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 406 | // Step 2: Reject non-stackable products with quantity > 1 | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 411 | // Step 3: Fetch owned products once for all subsequent checks | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 414 | // Step 4: Check the customer doesn't already own this product | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 419 | // Step 5: Verify add-on prerequisites (customer must own the base product) | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 427 | // Step 6: Block purchase if customer already owns a product in the same product line. | COMMENT |
| LOW | apps/backend/src/lib/payments.tsx | 394 | // Step 1: Resolve the selected price from the product config | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 526 | // Step 1: Create a new team permission definition | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 550 | // Step 2: Update project to set team creator default permissions to include the new permission | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 574 | // Step 3: Verify the permission is in the team creator default permissions | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 590 | // Step 4: Delete the permission definition | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 606 | // Step 5: Verify the deleted permission is no longer in team creator default permissions | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …s/commands/create-dashboard/dashboard-sandbox-host.tsx | 370 | // Navigation API for AI-generated code | COMMENT |
| HIGH | …s/commands/create-dashboard/dashboard-sandbox-host.tsx | 466 | // Expose under both names. AI-generated dashboards (post-PR2 prompt) | COMMENT |
| HIGH | …s/commands/create-dashboard/dashboard-sandbox-host.tsx | 536 | // Execute AI-generated code with DashboardUI and Recharts in scope. | COMMENT |
| HIGH | …s/dashboard/src/components/vibe-coding/code-editor.tsx | 93 | // Same declaration emitted for both module names: AI-generated templates | COMMENT |
| HIGH | apps/dashboard/src/lib/ai-dashboard/contracts.ts | 3 | // Schema for AI-generated dashboard code | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …b/hexclave-app/apps/implementations/client-app-impl.ts | 4087 | // Step 1: Initiate the CLI auth process | COMMENT |
| LOW | …b/hexclave-app/apps/implementations/client-app-impl.ts | 4111 | // Step 2: Open the browser for the user to authenticate and display the verification code | COMMENT |
| LOW | …b/hexclave-app/apps/implementations/client-app-impl.ts | 4124 | // Step 3: Poll for the token | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 42 | // Step 1: Collect catalogId -> customerType mappings from products | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 46 | // Step 2: Find all catalog IDs that exist | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 50 | // Step 3: Add customerType keys for catalogs that need them | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 63 | // Step 4: Rename catalogs -> productLines | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 66 | // Step 5: Rename catalogId -> productLineId in products | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 406 | // Step 2: Reject non-stackable products with quantity > 1 | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 411 | // Step 3: Fetch owned products once for all subsequent checks | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 414 | // Step 4: Check the customer doesn't already own this product | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 419 | // Step 5: Verify add-on prerequisites (customer must own the base product) | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 427 | // Step 6: Block purchase if customer already owns a product in the same product line. | COMMENT |
| LOW | apps/backend/src/lib/payments.tsx | 394 | // Step 1: Resolve the selected price from the product config | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 526 | // Step 1: Create a new team permission definition | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 550 | // Step 2: Update project to set team creator default permissions to include the new permission | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 574 | // Step 3: Verify the permission is in the team creator default permissions | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 590 | // Step 4: Delete the permission definition | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 606 | // Step 5: Verify the deleted permission is no longer in team creator default permissions | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/workflows/bulldozer-serialization-compat.yaml | 22 | # - the tree harness proves a single AugmentedTreeMap round-trips across code versions | COMMENT |
| MEDIUM | .github/workflows/bulldozer-serialization-compat.yaml | 23 | # - the db harness proves an *entire* Bulldozer database (all derived tables) round-trips | COMMENT |
| MEDIUM | .github/workflows/bulldozer-serialization-compat.yaml | 59 | # bulldozer whole-database fixtures (schema/read-model harness) could affect what is persisted. | COMMENT |
| MEDIUM | .github/workflows/bulldozer-serialization-compat.yaml | 90 | # The harness + its utils are new, so the base checkout doesn't have them. Overlay the current | COMMENT |
| MEDIUM | .github/workflows/bulldozer-serialization-compat.yaml | 91 | # branch's copy onto the base tree; the harness only uses the long-stable AugmentedTreeMap / | COMMENT |
| MEDIUM | apps/marshal/src/builds.ts | 382 | # Marshal decides which by what it injected into $GEN_DIR, so the harness never | COMMENT |
| MEDIUM | apps/marshal/src/builds.ts | 437 | # buildkit), it executes directly in this harness, and it has no business seeing them. | COMMENT |
| MEDIUM | apps/backend/src/lib/config/repo-agent.ts | 212 | // orchestrator polls (robust across the sandbox boundary; no stdout/encoding deps). | COMMENT |
| MEDIUM | …rojects/[projectId]/email-settings/domain-settings.tsx | 257 | // is the DNS zone apex — robust to multi-label public suffixes (`.co.uk`, `.com.au`, …). | COMMENT |
| LOW⚡ | docs-mintlify/snippets/home-prompt-island.jsx | 3 | export const generatedSetupPromptText = "# Setting up Hexclave\n\nThis prompt explains how to set up Hexclave in your pr | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …i/latest/migration-tests/smart-route-handler/route.tsx | 24 | Welcome to the migration test route for SmartRouteHandler! This route only exists for demonstration purposes and | CODE |
| MEDIUM | …2e/tests/backend/endpoints/api/migration-tests.test.ts | 41 | Welcome to the migration test route for SmartRouteHandler! This route only exists for demonstration purposes | CODE |
| MEDIUM | …2e/tests/backend/endpoints/api/migration-tests.test.ts | 68 | Welcome to the migration test route for SmartRouteHandler! This route only exists for demonstration purposes | CODE |
| MEDIUM | …2e/tests/backend/endpoints/api/migration-tests.test.ts | 119 | Welcome to the migration test route for SmartRouteHandler! This route only exists for demonstration purposes | CODE |
| MEDIUM | …2e/tests/backend/endpoints/api/migration-tests.test.ts | 196 | Welcome to the migration test route for SmartRouteHandler! This route only exists for demonstration purposes | CODE |
| MEDIUM | …2e/tests/backend/endpoints/api/migration-tests.test.ts | 273 | Welcome to the migration test route for SmartRouteHandler! This route only exists for demonstration purposes | CODE |
| MEDIUM | …2e/tests/backend/endpoints/api/migration-tests.test.ts | 296 | Welcome to the migration test route for SmartRouteHandler! This route only exists for demonstration purposes | CODE |
| MEDIUM⚡ | docs-mintlify/snippets/home-prompt-island.jsx | 3 | export const generatedSetupPromptText = "# Setting up Hexclave\n\nThis prompt explains how to set up Hexclave in your pr | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .cursor/hooks/stop-check.sh | 8 | # Check if this is a repeated stop hook call (loop_count > 0) | COMMENT |
| LOW⚡ | .github/workflows/docker-server-build-run.yaml | 75 | # Check if curl failed completely | COMMENT |
| LOW⚡ | .github/workflows/docker-server-build-run.yaml | 81 | # Check if response code is empty | COMMENT |
| LOW⚡ | .github/workflows/docker-server-build-run.yaml | 87 | # Check if response code is 200 | COMMENT |
| LOW | .github/workflows/swift-sdk-publish.yaml | 80 | # Check if there are changes to commit | COMMENT |
| LOW | …ub/workflows/db-migration-backwards-compatibility.yaml | 45 | # Check if there are any changes in the migrations folder | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | apps/growth-agent/evals/data-analyst-smoke.eval.ts | 39 | && event.data.event.data.actions.some((action) => action.kind === "tool-call" && action.toolName === "sql-query" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docker/server/entrypoint.sh | 155 | # Create a working directory for our processed files. | COMMENT |
| MEDIUM | .agents/skills/pr-visual-writeup/scripts/upload_gist.sh | 2 | # Create a public gist, push every file under one or more dirs into it, print raw URLs. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/template/src/lib/hexclave-app/common.ts | 162 | * function handleRequest(req: Request) { | COMMENT |
| LOW | packages/template/src/lib/hexclave-app/common.ts | 202 | * function handleRequest(data) { | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | apps/e2e/tests/js/data-vault.test.ts | 36 | // TODO: implement this | COMMENT |