The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.
This report summarizes scanner evidence for hexclave/hexclave, a TypeScript project with 6,861 GitHub stars. SynthScan examined 649,899 lines of code across 3140 source files, recording 2499 pattern matches distributed across 20 syntactic categories. The legacy adjusted pattern signal is 5.0 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 2028 finding(s).
Are imports declared and package/API names verified? 205 finding(s).
Are wrappers, guards, and repeated structures necessary? 1923 finding(s).
Which changes need focused human review? 2499 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 2499 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | examples/demo/src/app/turnstile-signup/page-client.tsx | 222 | function isMagicLinkChallengeRequired(result: MagicLinkSendResult): boolean { | CODE |
| LOW | examples/demo/src/app/turnstile-signup/page-client.tsx | 287 | export default function TurnstileSignupPageClient() { | CODE |
| LOW | examples/demo/src/app/turnstile-signup/page-client.tsx | 328 | function getOAuthCallbackUrlForTurnstileLab() { | CODE |
| LOW | examples/demo/src/app/turnstile-signup/page-client.tsx | 419 | async function handleMagicLinkVisibleDrill(): Promise<FlowResult> { | CODE |
| LOW | examples/demo/src/app/cli-auth-demo/page.tsx | 63 | function parseAccessTokenUserSnapshot(accessToken: string): { userId: string | null; isAnonymous: boolean } { | CODE |
| LOW | examples/demo/src/app/connected-accounts/page.tsx | 264 | function LegacyGetConnectedAccountDemo() { | CODE |
| LOW | examples/tanstack-start-demo/src/hexclave.ts | 7 | function replaceHexclavePortPrefix(value: string): string { | CODE |
| LOW | …s/lovable-react-18-example/src/components/ui/chart.tsx | 278 | function getPayloadConfigFromPayload(config: ChartConfig, payload: unknown, key: string) { | CODE |
| LOW | examples/convex/app/user-info.ts | 7 | export async function getUserInfoConvexHttpClient() { | CODE |
| LOW | configs/tsdown/js-library.ts | 146 | export default function createJsLibraryTsupConfig(_options: { barrelFiles?: string[] | undefined, onSuccess?: string | ( | CODE |
| LOW | …board-ui-components/src/components/chart-container.tsx | 119 | export function getPayloadConfigFromPayload( | CODE |
| LOW | …-ui-components/src/components/analytics-chart/state.ts | 101 | export function isAnalyticsChartDataLayer(l: AnalyticsChartLayer): l is AnalyticsChartDataLayer { | CODE |
| LOW | …-ui-components/src/components/analytics-chart/state.ts | 155 | export function computeLocalInProgressIdx( | CODE |
| LOW | …i-components/src/components/analytics-chart/strings.ts | 67 | export function resolveAnalyticsChartStrings( | CODE |
| LOW | …ts/analytics-chart/default-analytics-chart-tooltip.tsx | 107 | export function DefaultAnalyticsChartTooltip({ ctx }: DefaultAnalyticsChartTooltipProps) { | CODE |
| LOW | …i-components/src/components/analytics-chart/palette.ts | 24 | export function resolveAnalyticsChartPalette( | CODE |
| LOW | …hboard-ui-components/src/components/data-grid/state.ts | 22 | export function createDefaultDataGridState( | CODE |
| LOW | …components/src/components/data-grid/data-grid.test.tsx | 225 | function InteractiveDataGridHarness(props: { | CODE |
| LOW | …components/src/components/data-grid/data-grid.test.tsx | 368 | function InfiniteScrollLoadMoreHarness({ onFetch }: { onFetch: () => void }) { | CODE |
| LOW | …d-ui-components/src/components/data-grid/data-grid.tsx | 80 | export function isDataGridInteractiveRowClickTarget(target: EventTarget | null): boolean { | CODE |
| LOW | packages/template/scripts/generate-env.ts | 72 | function generateEnvVarsConstSnippet() { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 198 | function parseProjectAvailabilityResponse(body: unknown): boolean { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 229 | async function isLocalDashboardProjectAvailable(app: StackClientApp<true>): Promise<boolean> { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 632 | function hasPersistentTokenStoreForDevTool(app: StackClientApp<boolean>): boolean { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 657 | function isBestEffortOverviewError(error: unknown) { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 1251 | function appendBlockWithInlineMarkdown(tag: "p" | "li" | "h1" | "h2" | "h3", className: string, text: string) { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 1365 | function getCurrentAssistantMessage(): AssistantMessage { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 2146 | function animateNextPanelGeometryChange() { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 2220 | function getOrCreatePane(tabId: TabId): HTMLElement { | CODE |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 2363 | function closePanelAndPersistClosed() { | CODE |
| LOW | …ges/template/src/dev-tool/dev-tool-trigger-position.ts | 91 | export function getSnappedTriggerPlacement( | CODE |
| LOW | …ages/template/src/pushed-config-error-overlay/index.ts | 64 | export function mountPushedConfigErrorOverlay(app: StackClientApp<true>): () => void { | CODE |
| LOW | …ages/template/src/components-page/cli-auth-confirm.tsx | 26 | async function completeCliAuthWithRefreshToken(app: StackClientApp, loginCode: string, refreshToken: string) { | CODE |
| LOW | …mplate/src/components-page/hexclave-handler-client.tsx | 404 | function toAbsoluteOrRelativeRedirectTarget(url: URL): string { | CODE |
| LOW | …mplate/src/components-page/hexclave-handler-client.tsx | 408 | function useClientOriginAfterHydration(): string | undefined { | CODE |
| LOW | …ages/template/src/components-page/account-settings.tsx | 284 | function EmailsAndAuthPageSkeleton() { | CODE |
| LOW | …ages/template/src/components-page/account-settings.tsx | 293 | function ActiveSessionsPageSkeleton() { | CODE |
| LOW | …ages/template/src/components-page/account-settings.tsx | 333 | function NotificationsPageSkeleton() { | CODE |
| LOW | …ents-page/account-settings/payments/payments-panel.tsx | 112 | function SetDefaultPaymentMethodForm(props: { | CODE |
| LOW | …ount-settings/teams/team-member-invitation-section.tsx | 15 | export function TeamMemberInvitationSection(props: { team: Team }) { | CODE |
| LOW | …ount-settings/teams/team-member-invitation-section.tsx | 26 | function MemberInvitationsSectionInvitationsList(props: { team: Team }) { | CODE |
| LOW | …ount-settings/teams/team-member-invitation-section.tsx | 69 | function MemberInvitationSectionInner(props: { team: Team }) { | CODE |
| LOW | packages/template/src/providers/hexclave-provider.tsx | 35 | function TanStackStartStackProvider({ | CODE |
| LOW | …template/src/providers/translation-provider-client.tsx | 17 | export function TranslationProviderClient(props: { | CODE |
| LOW | packages/template/src/utils/monkey-patch.tsx | 5 | export function isNoSuspenseBoundaryError(value: unknown): boolean { | CODE |
| LOW | packages/template/src/utils/react.tsx | 8 | export function shouldRethrowRenderingError(error: unknown): boolean { | CODE |
| LOW | packages/template/src/lib/cookie.ts | 74 | function getTanStackStartServerContext() { | CODE |
| LOW | packages/template/src/lib/cookie.ts | 121 | export async function createPlaceholderCookieHelper(): Promise<CookieHelper> { | CODE |
| LOW | packages/template/src/lib/cookie.ts | 186 | function determineSecureFromTanStackStartContext(api: ReturnType<typeof getTanStackStartServerContext>): boolean { | CODE |
| LOW | packages/template/src/lib/cookie.ts | 193 | function refreshTanStackStartIsHttpsCookie(api: ReturnType<typeof getTanStackStartServerContext>) { | CODE |
| LOW | packages/template/src/lib/cookie.ts | 205 | function createTanStackStartCookieHelper(api: ReturnType<typeof getTanStackStartServerContext>): CookieHelper { | CODE |
| LOW | packages/template/src/lib/cookie.ts | 246 | export function createBrowserCookieHelper(): CookieHelper { | CODE |
| LOW | packages/template/src/lib/cookie.ts | 385 | function determineSecureFromClientContext(): boolean { | CODE |
| LOW | packages/template/src/lib/cookie.ts | 389 | function determineSecureFromServerContext( | CODE |
| LOW | packages/template/src/lib/cookie.ts | 403 | function shouldSetPartitionedClient() { | CODE |
| LOW⚡ | packages/template/src/lib/cookie.ts | 465 | function deleteCookieClientInternal(name: string, options: DeleteCookieOptions) { | CODE |
| LOW⚡ | packages/template/src/lib/cookie.ts | 475 | export function setOrDeleteCookieClient(name: string, value: string | null, options: SetCookieOptions & DeleteCookieOpti | CODE |
| LOW⚡ | packages/template/src/lib/cookie.ts | 484 | export async function setOrDeleteCookie(name: string, value: string | null, options: SetCookieOptions & DeleteCookieOpti | CODE |
| LOW | packages/template/src/lib/cookie.ts | 524 | export function consumeVerifierAndStateCookie(state: string) { | CODE |
| LOW | packages/template/src/lib/auth.ts | 8 | export async function getNewOAuthProviderOrScopeUrl( | CODE |
| 1596 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ckages/dashboard-ui-components/src/components/card.tsx | 7 | // ─── Card nesting context ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ckages/dashboard-ui-components/src/components/card.tsx | 54 | // ─── Discriminated props ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/state.ts | 46 | // ─── Column value resolution ───────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/state.ts | 87 | // ─── Pagination ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/state.ts | 97 | // ─── Quick search ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/state.ts | 128 | // ─── Date helpers ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/state.ts | 195 | // ─── CSV Export ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 83 | // ── Feature flags ────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 90 | // ── Display ────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 97 | // ── Cell overflow ────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 105 | // ── Overrides ────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 113 | // ── Date / dateTime ───────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 122 | // ── Cell-level callbacks ────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 134 | // ─── Sorting ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 141 | // ─── Selection ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 150 | // ─── Column visibility / pinning ───────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 158 | // ─── Pagination ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 295 | // ── Infinite scroll ──────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 303 | // ── State (fully controlled) ─────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 307 | // ── Modes ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …hboard-ui-components/src/components/data-grid/types.ts | 317 | // ── Layout ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 3 | // ─── Row identity ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 8 | // ─── Column definition ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 72 | // ── Sizing ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 170 | // ─── Combined grid state ───────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 192 | // ─── Data source ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 224 | // ─── Export ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 258 | // ─── Callbacks ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 277 | // ─── Main props ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 282 | // ── Data (pre-resolved by the consumer) ──────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 356 | // ── Callbacks ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 358 | // ── Customisation ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 387 | // ─── Toolbar / footer context ──────────────────────────────────────── | COMMENT |
| MEDIUM | …hboard-ui-components/src/components/data-grid/types.ts | 409 | // ─── Strings ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ponents/src/components/data-grid/data-grid-toolbar.tsx | 20 | // ─── Popover primitive ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ponents/src/components/data-grid/data-grid-toolbar.tsx | 74 | // ─── Quick search ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ponents/src/components/data-grid/data-grid-toolbar.tsx | 115 | // ─── Toolbar button ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ponents/src/components/data-grid/data-grid-toolbar.tsx | 149 | // ─── Column manager ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …ponents/src/components/data-grid/data-grid-toolbar.tsx | 268 | // ─── Main toolbar ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i-components/src/components/data-grid/use-url-state.ts | 13 | // ─── URL <-> state encoding ────────────────────────────────────────── | COMMENT |
| MEDIUM | …i-components/src/components/data-grid/use-url-state.ts | 26 | // ── widths ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i-components/src/components/data-grid/use-url-state.ts | 73 | // ── hidden columns ───────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i-components/src/components/data-grid/use-url-state.ts | 100 | // ── sort model ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i-components/src/components/data-grid/use-url-state.ts | 142 | // ── quick search ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …i-components/src/components/data-grid/use-url-state.ts | 148 | // ─── Hook ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 72 | // ─── Row click target ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 99 | // ─── State translators (DataGridState ⇄ TanStack) ──────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 119 | // ─── Flex column width distribution ────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 142 | // ─── Selection logic (with shift-range anchor) ─────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 195 | // ─── Header cell ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 283 | // ─── Data cell ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 377 | // ─── Skeleton row ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 489 | // ─── Selection checkbox ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 528 | // ─── Infinite scroll sentinel ──────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 579 | // ─── Footer ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 661 | // ─── Main DataGrid ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 749 | // ── Build TanStack column defs from our column defs ────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 855 | // ── TanStack Table instance ────────────────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 892 | // ── Row IDs (stable across this render) ────────────────────── | COMMENT |
| MEDIUM | …d-ui-components/src/components/data-grid/data-grid.tsx | 925 | // ── Column width CSS variables (TanStack pattern) ──────────── | COMMENT |
| 198 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docker/server/entrypoint.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …plementations/swift/Sources/StackAuth/TokenStore.swift | 21 | COMMENT | |
| LOW | …plementations/swift/Sources/StackAuth/TokenStore.swift | 41 | case explicit(accessToken: String, refreshToken: String) | COMMENT |
| LOW | …/skills/pr-visual-writeup/scripts/detect_dev_server.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | examples/docs-examples/src/app/signin/page.tsx | 1 | 'use client'; | COMMENT |
| LOW | examples/docs-examples/src/app/signin/page.tsx | 21 | // // this will redirect to the OAuth provider's login page | COMMENT |
| LOW | examples/docs-examples/src/app/signin/page.tsx | 41 | // if (!password) { | COMMENT |
| LOW | scripts/utils.ts | 61 | // Each element in skipStack can be either: | COMMENT |
| LOW | scripts/wait-for-dev-package-imports.ts | 1 | /// <reference types="node" /> | COMMENT |
| LOW | scripts/wait-for-dev-package-imports.ts | 21 | // We keep this wait scoped to the eager generator rather than putting it in | COMMENT |
| LOW | scripts/reseed-bulldozer.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | packages/sc/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | packages/sc/src/next-static-analysis-workaround.ts | 1 | // Next statically analyzes the imports and ensures that the `next/headers` module is never imported on a client bundle. | COMMENT |
| LOW | packages/template/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | packages/template/src/config.ts | 1 | // Retained only for backwards compatibility with config files that still import | COMMENT |
| LOW | packages/template/src/dev-tool/dev-tool-core.ts | 201 | } | COMMENT |
| LOW | …ages/template/src/components-page/hexclave-handler.tsx | 41 | // Default export preserved for backwards compatibility (legacy `as`-rename re-exports). | COMMENT |
| LOW | packages/template/src/lib/cookie.ts | 1 | import { cookies as rscCookies, headers as rscHeaders } from '@hexclave/sc/force-react-server'; // THIS_LINE_PLATFORM ne | COMMENT |
| LOW | packages/template/src/lib/cookie.ts | 21 | // - SameSite is set to `Lax` by default, which is already true in Chromium-based browsers, so this creates | COMMENT |
| LOW | packages/template/src/lib/cookie.ts | 41 | // which are fundamentally unsafe. Therefore, we need to take extra care that we only ever set Partitioned cookies | COMMENT |
| LOW | …lib/hexclave-app/apps/implementations/event-tracker.ts | 41 | // Dead-click detection (PostHog-style). Whether an element has a click handler | COMMENT |
| LOW | …b/hexclave-app/apps/implementations/client-app-impl.ts | 421 | COMMENT | |
| LOW | …b/hexclave-app/apps/implementations/client-app-impl.ts | 1961 | const tokenStore = this._getOrCreateTokenStore(await this._createCookieHelper()); | COMMENT |
| LOW | packages/template/src/in-page-ui/logo.ts | 1 | // Hexclave mark — hexagon outline with three radial bars, monochrome via currentColor so it inherits the surrounding | COMMENT |
| LOW | packages/template/src/clickmap/clickmap-core.ts | 501 | // Attribute clicks to the logical control, not the fragment the browser | COMMENT |
| LOW | packages/shared/src/deployments.ts | 1 | // Shared shapes for the Deploy app. Service definitions used to live in | COMMENT |
| LOW | packages/shared/src/deployments.ts | 21 | // one upload, one build. Its id comes from the deploy file's own | COMMENT |
| LOW | packages/shared/src/deployments.ts | 41 | // "fly" is the default and what every project runs on unless it says otherwise; | COMMENT |
| LOW | packages/shared/src/deployments.ts | 261 | // The outputs each service kind exposes. The backend's resolvers and the CLI's | COMMENT |
| LOW | packages/shared/src/deployments.ts | 381 | // single Compute Engine VM. There is no request-triggered suspend, so | COMMENT |
| LOW | packages/shared/src/deployments.ts | 401 | // "public 3000, private 5432" but the runtime would publish both, so the flag | COMMENT |
| LOW | packages/shared/src/deployments.ts | 421 | // holder is additionally served on 80/443 so `url` and custom domain | COMMENT |
| LOW | packages/shared/src/deployments.ts | 441 | // Changing it re-rolls the service: for a "serverless" that is an ordinary | COMMENT |
| LOW | packages/shared/src/deployments.ts | 461 | // — unless a `build_command` is set, which selects the generated-Dockerfile | COMMENT |
| LOW | packages/shared/src/deployments.ts | 481 | image?: string | undefined, | COMMENT |
| LOW | packages/shared/src/deployments.ts | 501 | // The one exception is `dockerfile_path`, which already describes a complete | COMMENT |
| LOW | packages/shared/src/deployments.ts | 521 | // REQUIRED when the service builds on the Hexclave base image (no `image`, no | COMMENT |
| LOW | packages/shared/src/deployments.ts | 541 | // the uploaded source onto a base image, rather than Railpack auto-detection or | COMMENT |
| LOW | packages/shared/src/deployments.ts | 561 | // | COMMENT |
| LOW | packages/shared/src/deployments.ts | 621 | // | COMMENT |
| LOW | packages/shared/src/deployments.ts | 721 | COMMENT | |
| LOW | packages/shared/src/deployments.ts | 741 | // hold in total, and how large each of them may be. | COMMENT |
| LOW | packages/shared/src/deployments.ts | 761 | export const DEPLOYMENT_VOLUME_ID_REGEX = /^[a-z][a-z0-9_]*$/; | COMMENT |
| LOW | packages/shared/src/deployments.ts | 781 | // than free choice (past 4GB it must have more than one CPU). Free-form | COMMENT |
| LOW | packages/shared/src/deployments.ts | 801 | "4GB": 4096, | COMMENT |
| LOW | packages/shared/src/deployments.ts | 821 | export const GCP_SERVER_MEMORY_SIZES = ["1GB", "2GB", "4GB", "8GB"] as const satisfies readonly DeploymentMemorySize[]; | COMMENT |
| LOW | packages/shared/src/deployments.ts | 981 | } | COMMENT |
| LOW | packages/shared/src/deployments.ts | 1001 | // Unqualified repositories on Docker Hub are "official images" and live under | COMMENT |
| LOW | packages/shared/src/deployments.ts | 1161 | } | COMMENT |
| LOW | packages/shared/src/deployments.ts | 1181 | // author-side convenience. Keyed by ENV VAR key (not secret key) because | COMMENT |
| LOW | packages/shared/src/deployments.ts | 1221 | // travels to the runtime and onto the builder machine, which is bytes. | COMMENT |
| LOW | packages/shared/src/deployments.ts | 1261 | ports: yupRecord( | COMMENT |
| LOW | packages/shared/src/deployments.ts | 1281 | // | COMMENT |
| LOW | packages/shared/src/deployments.ts | 1381 | )), | COMMENT |
| LOW | packages/shared/src/deployments.ts | 1421 | }), | COMMENT |
| LOW | packages/shared/src/project-secrets.ts | 1 | // Project secrets: per-project, write-only credential values, envelope-encrypted | COMMENT |
| LOW | packages/shared/src/schema-fields.ts | 61 | // | COMMENT |
| LOW | packages/shared/src/schema-fields.ts | 381 | COMMENT | |
| LOW | packages/shared/src/schema-fields.ts | 401 | // reading "this cannot be null" with nothing identifying the entry. | COMMENT |
| LOW | packages/shared/src/config-authoring.ts | 41 | // ============================ deployments ============================ | COMMENT |
| 201 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sdks/implementations/swift/README.md | 31 | try await stack.signInWithCredential(email: "user@example.com", password: "password") | CODE |
| LOW | …kages/template/src/components-page/onboarding.test.tsx | 62 | primaryEmail: "user@example.com", | CODE |
| LOW | …ts-page/account-settings/profile-page/profile-page.tsx | 19 | displayName: props.mockUser.displayName || 'John Doe', | CODE |
| LOW | packages/template/src/components/user-button.test.tsx | 69 | primaryEmail: "user@example.com", | CODE |
| LOW | packages/template/src/clickmap/clickmap-core.ts | 645 | const otherStableAttrs = ['aria-label', 'role', 'placeholder', 'title', 'type']; | CODE |
| LOW | packages/shared/src/schema-fields.ts | 909 | export const userDisplayNameSchema = yupString().nullable().max(256).meta({ openapiField: { description: _displayNameDes | CODE |
| LOW | packages/shared/src/schema-fields.ts | 1010 | export const teamMemberDisplayNameSchema = yupString().meta({ openapiField: { description: _displayNameDescription('team | CODE |
| LOW⚡ | packages/shared/src/interface/client-interface.test.ts | 111 | await iface.sendMagicLinkEmail("user@example.com", "https://app.example.com/callback"); | CODE |
| LOW⚡ | packages/shared/src/interface/client-interface.test.ts | 114 | email: "user@example.com", | CODE |
| LOW⚡ | packages/shared/src/interface/client-interface.test.ts | 124 | await iface.sendMagicLinkEmail("user@example.com", "https://app.example.com/callback", { | CODE |
| LOW⚡ | packages/shared/src/interface/client-interface.test.ts | 130 | email: "user@example.com", | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 142 | await iface.sendMagicLinkEmail("user@example.com", "https://app.example.com/callback", { | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 147 | email: "user@example.com", | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 158 | await iface.sendMagicLinkEmail("user@example.com", "https://app.example.com/callback", { | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 163 | email: "user@example.com", | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 176 | const result = await iface.sendMagicLinkEmail("user@example.com", "https://app.example.com/callback", { | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 196 | "user@example.com", | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 204 | email: "user@example.com", | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 217 | "user@example.com", | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 359 | "user@example.com", | CODE |
| LOW | packages/shared/src/interface/client-interface.test.ts | 369 | email: "user@example.com", | CODE |
| LOW | packages/shared/src/utils/elements-chain.tsx | 42 | "placeholder", | CODE |
| LOW | apps/backend/prisma/seed.ts | 7 | import { seedDummyProject } from '@/lib/seed-dummy-data'; | CODE |
| LOW | apps/backend/prisma/seed.ts | 310 | // We create the subscription with raw Prisma (matching seed-dummy-data.ts) | COMMENT |
| LOW | apps/backend/prisma/seed.ts | 332 | // (mirrors the pattern used in seed-dummy-data.ts). | COMMENT |
| LOW | apps/backend/src/sentry-scrubbing.test.ts | 19 | email: "user@example.com", | CODE |
| LOW | apps/backend/src/sentry-scrubbing.test.ts | 45 | "db.statement": "SELECT * FROM users WHERE email = 'user@example.com'", | CODE |
| LOW | apps/backend/src/sentry-scrubbing.test.ts | 59 | "db.statement": "SELECT * FROM users WHERE email = 'user@example.com'", | CODE |
| LOW | apps/backend/src/sentry-scrubbing.test.ts | 64 | "stack.smart-request.user.primary-email": "user@example.com", | CODE |
| LOW | apps/backend/src/sentry-scrubbing.test.ts | 127 | expect(JSON.stringify(result)).not.toContain("user@example.com"); | CODE |
| LOW | …p/api/latest/internal/preview/create-project/route.tsx | 3 | import { seedDummyProject } from "@/lib/seed-dummy-data"; | CODE |
| LOW | apps/backend/src/lib/cel-evaluator.ts | 155 | expect(ctx('user@example.com', 'us', 'password', null, 3, 4)).toEqual({ | CODE |
| LOW | apps/backend/src/lib/cel-evaluator.ts | 156 | email: 'user@example.com', emailDomain: 'example.com', countryCode: 'US', | CODE |
| LOW⚡ | apps/backend/src/lib/email-rendering.test.tsx | 134 | user: { displayName: 'John Doe' }, | CODE |
| LOW⚡ | apps/backend/src/lib/email-rendering.test.tsx | 143 | expect(result.data[0].html).toContain('John Doe'); | CODE |
| LOW⚡ | apps/backend/src/lib/email-rendering.test.tsx | 151 | user: { displayName: 'Jane Doe' }, | CODE |
| LOW⚡ | apps/backend/src/lib/email-rendering.test.tsx | 161 | expect(result.data[0].html).toContain('Jane Doe'); | CODE |
| LOW | apps/backend/src/lib/email-rendering.test.tsx | 543 | expect(result.data.html).toContain('John Doe'); | CODE |
| LOW | apps/backend/src/lib/email-rendering.tsx | 140 | const user = (previewMode && !options.user) ? { displayName: "John Doe" } : options.user; | CODE |
| LOW | apps/backend/src/lib/emailable.tsx | 158 | "user@example.com", | CODE |
| LOW | apps/backend/src/lib/emailable.tsx | 168 | "user@example.com", | CODE |
| LOW | apps/backend/src/lib/seed-dummy-data.test.ts | 3 | import { buildDummyPaymentsSetup } from "./seed-dummy-data"; | CODE |
| LOW | apps/backend/src/lib/emails.tsx | 234 | expect(normalizeEmail('user@example.com')).toBe('user@example.com'); | CODE |
| LOW | …)/projects/[projectId]/design-language/page-client.tsx | 818 | { name: "placeholder", type: "string", description: "Placeholder text for empty states." }, | CODE |
| LOW | …)/projects/[projectId]/design-language/page-client.tsx | 861 | { name: "John Doe", email: "john@example.com", time: "Active 2h ago", color: "cyan" }, | CODE |
| LOW | …)/projects/[projectId]/design-language/page-client.tsx | 1052 | { name: "placeholder", type: "string", default: "'Select'", description: "Placeholder label when no option | CODE |
| LOW | …ojects/[projectId]/tv-mode/display-management.test.tsx | 85 | expect(nameInput.getAttribute("placeholder")).toBe("Office Display"); | CODE |
| LOW | …ojects/[projectId]/tv-mode/display-management.test.tsx | 87 | expect(codeInput.getAttribute("placeholder")).toBe("ABCD-EFGH"); | CODE |
| LOW | …ojects/[projectId]/tv-mode/display-management.test.tsx | 129 | expect(nameInput.getAttribute("placeholder")).toBe("Office Display"); | CODE |
| LOW | …rotected)/(outside-dashboard)/projects/page-client.tsx | 895 | placeholder="admin@example.com" | CODE |
| LOW | apps/dashboard/src/components/email-preview.tsx | 773 | senderName = "Acme Inc", | CODE |
| LOW | …shboard-account-settings/profile-page/profile-page.tsx | 19 | displayName: props.mockUser.displayName || 'John Doe', | CODE |
| LOW | …ts/src/hosted-components/auth/team-invitation-page.tsx | 140 | setDetails({ teamDisplayName: "Acme Corp" }); | CODE |
| LOW | …ponents/src/hosted-components/auth/onboarding-page.tsx | 68 | primaryEmail: demoEmail || "user@example.com", | CODE |
| LOW | …ponents/src/hosted-components/auth/onboarding-page.tsx | 77 | primaryEmail: "user@example.com", | CODE |
| LOW | …ponents/src/hosted-components/auth/onboarding-page.tsx | 88 | primaryEmail: "user@example.com", | CODE |
| LOW | …ponents/src/hosted-components/auth/onboarding-page.tsx | 97 | primaryEmail: "user@example.com", | CODE |
| LOW | …ponents/account-settings/profile-page/profile-page.tsx | 18 | displayName: props.mockUser.displayName || 'John Doe', | CODE |
| LOW | apps/e2e/tests/general/cli.test.ts | 154 | fs.writeFileSync(configFilePath, JSON.stringify({ STACK_CLI_REFRESH_TOKEN: "fake-token" }), { mode: 0o600 }); | CODE |
| LOW | apps/e2e/tests/general/cli.test.ts | 161 | expect(content).not.toContain("fake-token"); | CODE |
| 105 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ied-prompts/skill-site-prompt-parts/ai-setup-prompt.ts | 260 | print("User cancelled the login process. Exiting") | CODE |
| HIGH | …ied-prompts/skill-site-prompt-parts/ai-setup-prompt.ts | 298 | print("The user is logged in as", user["display_name"] or user["primary_email"]) | CODE |
| HIGH | …ied-prompts/skill-site-prompt-parts/ai-setup-prompt.ts | 338 | return None | CODE |
| HIGH | …ied-prompts/skill-site-prompt-parts/ai-setup-prompt.ts | 350 | return None | CODE |
| HIGH | …ied-prompts/skill-site-prompt-parts/ai-setup-prompt.ts | 371 | return None | CODE |
| HIGH | …ied-prompts/skill-site-prompt-parts/ai-setup-prompt.ts | 387 | return None | CODE |
| HIGH | apps/marshal/src/builds.ts | 405 | elif [ -n "$DOCKERFILE_PATH" ]; then | CODE |
| HIGH⚡ | …page-client-parts/link-existing-onboarding-workflow.ts | 102 | elif [ -f yarn.lock ]; then | CODE |
| HIGH⚡ | …page-client-parts/link-existing-onboarding-workflow.ts | 105 | elif [ -f bun.lockb ] || [ -f bun.lock ]; then | CODE |
| HIGH⚡ | …page-client-parts/link-existing-onboarding-workflow.ts | 108 | elif [ -f package-lock.json ] || [ -f npm-shrinkwrap.json ]; then | CODE |
| HIGH⚡ | …page-client-parts/link-existing-onboarding-workflow.ts | 110 | elif [ -f package.json ]; then | CODE |
| HIGH⚡ | docs-mintlify/snippets/home-prompt-island.jsx | 3 | export const generatedSetupPromptText = "# Setting up Hexclave\n\nThis prompt explains how to set up Hexclave in your pr | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | examples/lovable-react-18-example/README.md | 26 | # Step 1: Clone the repository using the project's Git URL. | COMMENT |
| LOW⚡ | examples/lovable-react-18-example/README.md | 29 | # Step 2: Navigate to the project directory. | COMMENT |
| LOW⚡ | examples/lovable-react-18-example/README.md | 32 | # Step 3: Install the necessary dependencies. | COMMENT |
| LOW⚡ | examples/lovable-react-18-example/README.md | 35 | # Step 4: Start the development server with auto-reloading and an instant preview. | COMMENT |
| LOW | …b/hexclave-app/apps/implementations/client-app-impl.ts | 4182 | // Step 1: Initiate the CLI auth process | COMMENT |
| LOW | …b/hexclave-app/apps/implementations/client-app-impl.ts | 4206 | // Step 2: Open the browser for the user to authenticate and display the verification code | COMMENT |
| LOW | …b/hexclave-app/apps/implementations/client-app-impl.ts | 4219 | // Step 3: Poll for the token | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 42 | // Step 1: Collect catalogId -> customerType mappings from products | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 46 | // Step 2: Find all catalog IDs that exist | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 50 | // Step 3: Add customerType keys for catalogs that need them | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 63 | // Step 4: Rename catalogs -> productLines | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 66 | // Step 5: Rename catalogId -> productLineId in products | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 406 | // Step 2: Reject non-stackable products with quantity > 1 | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 411 | // Step 3: Fetch owned products once for all subsequent checks | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 414 | // Step 4: Check the customer doesn't already own this product | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 419 | // Step 5: Verify add-on prerequisites (customer must own the base product) | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 427 | // Step 6: Block purchase if customer already owns a product in the same product line. | COMMENT |
| LOW | apps/backend/src/lib/payments.tsx | 394 | // Step 1: Resolve the selected price from the product config | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 526 | // Step 1: Create a new team permission definition | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 550 | // Step 2: Update project to set team creator default permissions to include the new permission | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 574 | // Step 3: Verify the permission is in the team creator default permissions | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 590 | // Step 4: Delete the permission definition | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 606 | // Step 5: Verify the deleted permission is no longer in team creator default permissions | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …s/commands/create-dashboard/dashboard-sandbox-host.tsx | 370 | // Navigation API for AI-generated code | COMMENT |
| HIGH | …s/commands/create-dashboard/dashboard-sandbox-host.tsx | 466 | // Expose under both names. AI-generated dashboards (post-PR2 prompt) | COMMENT |
| HIGH | …s/commands/create-dashboard/dashboard-sandbox-host.tsx | 536 | // Execute AI-generated code with DashboardUI and Recharts in scope. | COMMENT |
| HIGH | …s/dashboard/src/components/vibe-coding/code-editor.tsx | 93 | // Same declaration emitted for both module names: AI-generated templates | COMMENT |
| HIGH | apps/dashboard/src/lib/ai-dashboard/contracts.ts | 3 | // Schema for AI-generated dashboard code | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …b/hexclave-app/apps/implementations/client-app-impl.ts | 4182 | // Step 1: Initiate the CLI auth process | COMMENT |
| LOW | …b/hexclave-app/apps/implementations/client-app-impl.ts | 4206 | // Step 2: Open the browser for the user to authenticate and display the verification code | COMMENT |
| LOW | …b/hexclave-app/apps/implementations/client-app-impl.ts | 4219 | // Step 3: Poll for the token | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 42 | // Step 1: Collect catalogId -> customerType mappings from products | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 46 | // Step 2: Find all catalog IDs that exist | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 50 | // Step 3: Add customerType keys for catalogs that need them | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 63 | // Step 4: Rename catalogs -> productLines | COMMENT |
| LOW⚡ | …shared/src/config/migrate-catalogs-to-product-lines.ts | 66 | // Step 5: Rename catalogId -> productLineId in products | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 406 | // Step 2: Reject non-stackable products with quantity > 1 | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 411 | // Step 3: Fetch owned products once for all subsequent checks | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 414 | // Step 4: Check the customer doesn't already own this product | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 419 | // Step 5: Verify add-on prerequisites (customer must own the base product) | COMMENT |
| LOW⚡ | apps/backend/src/lib/payments.tsx | 427 | // Step 6: Block purchase if customer already owns a product in the same product line. | COMMENT |
| LOW | apps/backend/src/lib/payments.tsx | 394 | // Step 1: Resolve the selected price from the product config | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 526 | // Step 1: Create a new team permission definition | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 550 | // Step 2: Update project to set team creator default permissions to include the new permission | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 574 | // Step 3: Verify the permission is in the team creator default permissions | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 590 | // Step 4: Delete the permission definition | COMMENT |
| LOW | …d/endpoints/api/v1/team-permission-definitions.test.ts | 606 | // Step 5: Verify the deleted permission is no longer in team creator default permissions | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | devices/tv-box/tests/test_kiosk_supervisor.py | 484 | except StopIteration: | CODE |
| HIGH | devices/tv-box/tests/test_network_agent.py | 179 | except (BrokenPipeError, ConnectionResetError): | CODE |
| HIGH | devices/tv-box/src/hexclave_tv_box/support.py | 166 | except ValueError: | CODE |
| HIGH | devices/tv-box/src/hexclave_tv_box/firstboot.py | 93 | except FileExistsError: | CODE |
| HIGH | devices/tv-box/src/hexclave_tv_box/kiosk_supervisor.py | 269 | except ProcessLookupError: | CODE |
| HIGH | devices/tv-box/src/hexclave_tv_box/kiosk_supervisor.py | 316 | except ChildProcessError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/workflows/bulldozer-serialization-compat.yaml | 22 | # - the tree harness proves a single AugmentedTreeMap round-trips across code versions | COMMENT |
| MEDIUM | .github/workflows/bulldozer-serialization-compat.yaml | 23 | # - the db harness proves an *entire* Bulldozer database (all derived tables) round-trips | COMMENT |
| MEDIUM | .github/workflows/bulldozer-serialization-compat.yaml | 59 | # bulldozer whole-database fixtures (schema/read-model harness) could affect what is persisted. | COMMENT |
| MEDIUM | .github/workflows/bulldozer-serialization-compat.yaml | 90 | # The harness + its utils are new, so the base checkout doesn't have them. Overlay the current | COMMENT |
| MEDIUM | .github/workflows/bulldozer-serialization-compat.yaml | 91 | # branch's copy onto the base tree; the harness only uses the long-stable AugmentedTreeMap / | COMMENT |
| MEDIUM | apps/marshal/src/builds.ts | 392 | # Marshal decides which by what it injected into $GEN_DIR, so the harness never | COMMENT |
| MEDIUM | apps/marshal/src/builds.ts | 447 | # buildkit), it executes directly in this harness, and it has no business seeing them. | COMMENT |
| MEDIUM | apps/backend/src/lib/config/repo-agent.ts | 212 | // orchestrator polls (robust across the sandbox boundary; no stdout/encoding deps). | COMMENT |
| MEDIUM | …rojects/[projectId]/email-settings/domain-settings.tsx | 257 | // is the DNS zone apex — robust to multi-label public suffixes (`.co.uk`, `.com.au`, …). | COMMENT |
| LOW⚡ | docs-mintlify/snippets/home-prompt-island.jsx | 3 | export const generatedSetupPromptText = "# Setting up Hexclave\n\nThis prompt explains how to set up Hexclave in your pr | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | devices/tv-box/tests/test_image_source.py | 42 | CODE | |
| LOW | devices/tv-box/tests/test_image_source.py | 118 | CODE | |
| LOW | devices/tv-box/tests/test_relay.py | 340 | CODE | |
| LOW | devices/tv-box/tests/test_relay.py | 354 | CODE | |
| LOW | devices/tv-box/tests/test_relay.py | 385 | CODE | |
| LOW | devices/tv-box/tests/test_image_verification.py | 302 | CODE | |
| LOW | devices/tv-box/tests/test_image_preflight.py | 131 | CODE | |
| LOW | devices/tv-box/tests/test_image_preflight.py | 150 | CODE | |
| LOW | devices/tv-box/tests/test_ssh_paths.py | 98 | CODE | |
| LOW | devices/tv-box/tests/test_ssh_paths.py | 171 | CODE | |
| LOW | devices/tv-box/tests/test_firstboot_and_state.py | 226 | CODE | |
| LOW | devices/tv-box/tests/test_firstboot_and_state.py | 238 | CODE | |
| LOW | devices/tv-box/tests/test_firstboot_and_state.py | 425 | CODE | |
| LOW | devices/tv-box/tests/test_firstboot_and_state.py | 476 | CODE | |
| LOW | devices/tv-box/tests/test_network_agent.py | 120 | CODE | |
| LOW | devices/tv-box/tests/test_network_agent.py | 308 | CODE | |
| LOW | devices/tv-box/tests/test_network_agent.py | 1294 | CODE | |
| LOW | devices/tv-box/scripts/image_verification.py | 30 | CODE | |
| LOW | devices/tv-box/scripts/image_verification.py | 329 | CODE | |
| LOW | devices/tv-box/scripts/image_verification.py | 465 | CODE | |
| LOW | devices/tv-box/scripts/image_verification.py | 294 | CODE | |
| LOW | devices/tv-box/scripts/image_source.py | 35 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/relay_metrics.py | 40 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/firstboot.py | 152 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/network_agent.py | 162 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/network_agent.py | 906 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/network_agent.py | 377 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/network_agent.py | 583 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/setup_portal.py | 117 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/kiosk_supervisor.py | 340 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/kiosk_supervisor.py | 139 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/kiosk_supervisor.py | 297 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | devices/tv-box/tests/test_image_source.py | 1 | CODE | |
| LOW | devices/tv-box/tests/test_relay.py | 1 | CODE | |
| LOW | devices/tv-box/tests/test_image_verification.py | 1 | CODE | |
| LOW | devices/tv-box/tests/test_portal_and_support.py | 1 | CODE | |
| LOW | devices/tv-box/tests/test_kiosk_supervisor.py | 1 | CODE | |
| LOW | devices/tv-box/tests/test_image_preflight.py | 1 | CODE | |
| LOW | devices/tv-box/tests/test_image_contract.py | 1 | CODE | |
| LOW | devices/tv-box/tests/test_ssh_paths.py | 1 | CODE | |
| LOW | devices/tv-box/tests/test_relay_metrics.py | 1 | CODE | |
| LOW | devices/tv-box/tests/test_firstboot_and_state.py | 1 | CODE | |
| LOW | devices/tv-box/tests/test_setup_display.py | 1 | CODE | |
| LOW | devices/tv-box/tests/test_cursor_asset.py | 1 | CODE | |
| LOW | devices/tv-box/tests/test_policy.py | 1 | CODE | |
| LOW | devices/tv-box/tests/test_network_agent.py | 1 | CODE | |
| LOW | devices/tv-box/scripts/cursor_asset.py | 4 | CODE | |
| LOW | devices/tv-box/scripts/image_preflight.py | 3 | CODE | |
| LOW | devices/tv-box/scripts/image_verification.py | 3 | CODE | |
| LOW | devices/tv-box/scripts/image_source.py | 3 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/support.py | 3 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/policy.py | 3 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/setup_display.py | 3 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/relay_metrics.py | 3 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/relay.py | 3 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/firstboot.py | 3 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/network_agent.py | 3 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/setup_portal.py | 3 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/kiosk_supervisor.py | 3 | CODE | |
| LOW | devices/tv-box/src/hexclave_tv_box/state.py | 3 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …i/latest/migration-tests/smart-route-handler/route.tsx | 24 | Welcome to the migration test route for SmartRouteHandler! This route only exists for demonstration purposes and | CODE |
| MEDIUM | …2e/tests/backend/endpoints/api/migration-tests.test.ts | 41 | Welcome to the migration test route for SmartRouteHandler! This route only exists for demonstration purposes | CODE |
| MEDIUM | …2e/tests/backend/endpoints/api/migration-tests.test.ts | 68 | Welcome to the migration test route for SmartRouteHandler! This route only exists for demonstration purposes | CODE |
| MEDIUM | …2e/tests/backend/endpoints/api/migration-tests.test.ts | 119 | Welcome to the migration test route for SmartRouteHandler! This route only exists for demonstration purposes | CODE |
| MEDIUM | …2e/tests/backend/endpoints/api/migration-tests.test.ts | 196 | Welcome to the migration test route for SmartRouteHandler! This route only exists for demonstration purposes | CODE |
| MEDIUM | …2e/tests/backend/endpoints/api/migration-tests.test.ts | 273 | Welcome to the migration test route for SmartRouteHandler! This route only exists for demonstration purposes | CODE |
| MEDIUM | …2e/tests/backend/endpoints/api/migration-tests.test.ts | 296 | Welcome to the migration test route for SmartRouteHandler! This route only exists for demonstration purposes | CODE |
| MEDIUM⚡ | docs-mintlify/snippets/home-prompt-island.jsx | 3 | export const generatedSetupPromptText = "# Setting up Hexclave\n\nThis prompt explains how to set up Hexclave in your pr | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .cursor/hooks/stop-check.sh | 8 | # Check if this is a repeated stop hook call (loop_count > 0) | COMMENT |
| LOW⚡ | .github/workflows/docker-server-build-run.yaml | 75 | # Check if curl failed completely | COMMENT |
| LOW⚡ | .github/workflows/docker-server-build-run.yaml | 81 | # Check if response code is empty | COMMENT |
| LOW⚡ | .github/workflows/docker-server-build-run.yaml | 87 | # Check if response code is 200 | COMMENT |
| LOW | .github/workflows/swift-sdk-publish.yaml | 80 | # Check if there are changes to commit | COMMENT |
| LOW | …ub/workflows/db-migration-backwards-compatibility.yaml | 45 | # Check if there are any changes in the migrations folder | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docker/server/entrypoint.sh | 155 | # Create a working directory for our processed files. | COMMENT |
| MEDIUM | .agents/skills/pr-visual-writeup/scripts/upload_gist.sh | 2 | # Create a public gist, push every file under one or more dirs into it, print raw URLs. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/template/src/lib/hexclave-app/common.ts | 195 | * function handleRequest(req: Request) { | COMMENT |
| LOW | packages/template/src/lib/hexclave-app/common.ts | 235 | * function handleRequest(data) { | COMMENT |
| LOW | devices/tv-box/src/hexclave_tv_box/network_agent.py | 719 | def handle_request(self, request: dict[str, Any], *, privileged: bool = False) -> dict[str, Any]: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | devices/tv-box/scripts/verify-image.sh | 144 | # scaffolding, not initialized device state. Keep the allowlist exact so image | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | devices/tv-box/src/hexclave_tv_box/firstboot.py | 132 | def _update_existing_regular_file(path: Path, transform: Callable[[str], str]) -> None: | CODE |
| LOW | devices/tv-box/src/hexclave_tv_box/network_agent.py | 535 | def _set_kiosk_url(self, url: str) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | apps/e2e/tests/js/data-vault.test.ts | 36 | // TODO: implement this | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | devices/tv-box/src/hexclave_tv_box/kiosk_supervisor.py | 340 | CODE |