Macro is a unified workspace for teams: email, chat, docs, tasks, agents, calls, and CRM — @-linked together with shared AI memory.
This report summarizes scanner evidence for macro-inc/macro, a Rust project with 6,036 GitHub stars. SynthScan examined 4,385,593 lines of code across 25314 source files, recording 5992 pattern matches distributed across 23 syntactic categories. The legacy adjusted pattern signal is 1.7 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 5433 finding(s).
Are imports declared and package/API names verified? 298 finding(s).
Are wrappers, guards, and repeated structures necessary? 2331 finding(s).
Which changes need focused human review? 5992 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 5992 distinct pattern matches across 23 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | deny.toml | 1 | # This template contains all of the possible sections and their default values | COMMENT |
| LOW | deny.toml | 21 | # `target_family = "unix"` configuration, that only having windows targets in | COMMENT |
| LOW | deny.toml | 41 | #exclude = [] | COMMENT |
| LOW | deny.toml | 101 | { id = "RUSTSEC-2026-0381", reason = "webpki-roots 0.26.11 contains no certificates and re-exports patched 1.0.10; ban | COMMENT |
| LOW | deny.toml | 141 | # Allow 1 or more licenses on a per-crate basis, so that particular licenses | COMMENT |
| LOW | deny.toml | 161 | expression = "MIT AND ISC AND OpenSSL" | COMMENT |
| LOW | deny.toml | 181 | registries = [ | COMMENT |
| LOW | deny.toml | 261 | "workspace-hack", # cargo-hakari generated crate | COMMENT |
| LOW | deny.toml | 361 | # dependencies starting at the specified crate, up to a certain depth, which is | COMMENT |
| LOW | sgconfig.yml | 1 | # ast-grep configuration — custom structural rules for repo conventions. | COMMENT |
| LOW | rust-toolchain.toml | 1 | [toolchain] | COMMENT |
| LOW | .config/hakari.toml | 1 | # This file contains settings for `cargo hakari`. | COMMENT |
| LOW | .config/hakari.toml | 21 | # cargo-zigbuild's plain-triple passthrough, the lambdas); aarch64-apple-darwin | COMMENT |
| LOW | .config/hakari.toml | 61 | "sync_service", | COMMENT |
| LOW | .config/hakari.toml | 101 | "models_databases", | COMMENT |
| LOW | .config/hakari.toml | 121 | # does not pull workspace-hack into wasm dependency traversal. | COMMENT |
| LOW | tooling/ai_billing_cli/src/main.rs | 21 | struct Cli { | COMMENT |
| LOW | tooling/seed_cli/src/entity/channel.rs | 81 | /// Arguments for creating a single channel. | COMMENT |
| LOW | tooling/seed_cli/src/entity/document.rs | 41 | pub struct CreateArgs { | COMMENT |
| LOW | tooling/seed_cli/src/entity/document.rs | 61 | /// Whether to skip adding document to history | COMMENT |
| LOW | tooling/seed_cli/src/entity/scenario.rs | 201 | COMMENT | |
| LOW | tooling/seed_cli/src/entity/scenario.rs | 221 | #[arg(long)] | COMMENT |
| LOW | tooling/seed_cli/src/entity/email.rs | 81 | COMMENT | |
| LOW | tooling/seed_cli/src/entity/gmail.rs | 1 | //! Seed REAL Gmail test mailboxes (`@macro-test.com`) through the Gmail API. | COMMENT |
| LOW | tooling/seed_cli/src/entity/gmail.rs | 61 | COMMENT | |
| LOW | tooling/seed_cli/src/entity/gmail.rs | 101 | #[arg(long, default_value_t = 6)] | COMMENT |
| LOW | tooling/seed_cli/src/entity/scenario/spec.rs | 61 | COMMENT | |
| LOW | tooling/seed_cli/src/entity/scenario/spec.rs | 141 | pub struct UserSpec { | COMMENT |
| LOW | tooling/seed_cli/src/entity/scenario/spec.rs | 161 | /// A team in the scenario. | COMMENT |
| LOW | tooling/seed_cli/src/entity/scenario/spec.rs | 181 | pub struct ChannelSpec { | COMMENT |
| LOW | tooling/seed_cli/src/entity/scenario/spec.rs | 201 | COMMENT | |
| LOW | tooling/seed_cli/src/entity/scenario/spec.rs | 221 | #[serde(default)] | COMMENT |
| LOW | tooling/seed_cli/src/entity/scenario/spec.rs | 241 | /// with `file`. | COMMENT |
| LOW | tooling/seed_cli/src/entity/scenario/spec.rs | 261 | #[serde(deny_unknown_fields)] | COMMENT |
| LOW | tooling/seed_cli/src/entity/scenario/spec.rs | 281 | /// Grant the owner's team edit access, like the app's | COMMENT |
| LOW | tooling/seed_cli/src/entity/scenario/spec.rs | 321 | #[derive(Debug, Clone, Deserialize)] | COMMENT |
| LOW | tooling/seed_cli/src/entity/scenario/spec.rs | 361 | pub from: Option<String>, | COMMENT |
| LOW | tooling/seed_cli/src/entity/scenario/spec.rs | 381 | COMMENT | |
| LOW | tooling/seed_cli/src/entity/scenario/spec.rs | 401 | #[serde(deny_unknown_fields)] | COMMENT |
| LOW | tooling/seed_cli/src/entity/scenario/spec.rs | 421 | /// derived ids. | COMMENT |
| LOW | tooling/seed_cli/src/entity/scenario/spec.rs | 441 | /// Tasks keyed by a short name. | COMMENT |
| LOW | tooling/seed_cli/src/entity/scenario/reset.rs | 1 | //! Reset: delete every row a scenario seeded, keyed by the id marker prefix. | COMMENT |
| LOW | tooling/scripts/build-local.sh | 1 | #!/bin/bash | COMMENT |
| LOW | tooling/xtask/crates/xtask_paths/src/lib.rs | 1 | #![deny(missing_docs)] | COMMENT |
| LOW | tooling/xtask/crates/xtask_graph/src/lib.rs | 1 | #![deny(missing_docs)] | COMMENT |
| LOW | tooling/xtask/crates/xtask_cache_wasm/src/main.rs | 1 | //! `cargo x cache-wasm [--force]` | COMMENT |
| LOW | tooling/xtask/crates/xtask_nextest_filter/src/main.rs | 1 | //! `cargo x nextest-filter <changed-files-path> <base-revision>` | COMMENT |
| LOW | tooling/xtask/crates/xtask_deps/src/closures.rs | 1 | //! Generates .github/workspace-dep-closures.json: for every workspace | COMMENT |
| LOW | tooling/xtask/crates/xtask_deps/src/main.rs | 1 | //! `cargo x deps [--check]` regenerates (or, with `--check`, verifies) the two | COMMENT |
| LOW | …sk_workflows/src/workflows/code_check_cloud_storage.rs | 1 | //! `cloud storage code check` — cargo fmt/clippy/test for the cloud-storage | COMMENT |
| LOW | …xtask_workflows/src/workflows/android_release_drift.rs | 1 | //! `Android Release Drift` — runs on every push to a PR that carries the | COMMENT |
| LOW | …sk_workflows/src/workflows/deploy_ai_editing_worker.rs | 1 | //! `Deploy AI Editing Worker` — deploys the `ai-editing-worker` Cloudflare | COMMENT |
| LOW | …xtask_workflows/src/workflows/ios_app_store_publish.rs | 1 | //! `iOS App Store Publish` — releases the committed iOS version on the App | COMMENT |
| LOW | …crates/xtask_workflows/src/workflows/deploy_preview.rs | 1 | //! `Deploy Preview` — frontend feature-branch preview deployments. | COMMENT |
| LOW | …crates/xtask_workflows/src/workflows/deploy_on_push.rs | 1 | //! `Deploy on Push` — the single push-to-main dev deploy pipeline. Mirrors the | COMMENT |
| LOW | …crates/xtask_workflows/src/workflows/deploy_on_push.rs | 21 | //! Replaces the separate `deploy_cloud_storage_on_push` and | COMMENT |
| LOW | …crates/xtask_workflows/src/workflows/deploy_on_push.rs | 41 | # | COMMENT |
| LOW | …lows/src/workflows/cargo_workspace_dependency_check.rs | 1 | //! `cargo workspace dependency check` — polices duplicate third-party deps in | COMMENT |
| LOW | …tes/xtask_workflows/src/workflows/ios_release_watch.rs | 1 | //! `iOS Release Watch` — half-hourly cron closing the loop of the `iOS | COMMENT |
| LOW | …ling/xtask/crates/xtask_workflows/src/workflows/cla.rs | 1 | //! `CLA` — enforces the Contributor License Agreement on PRs. | COMMENT |
| 3093 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tooling/pii/test_scan.py | 22 | def test_flags_customer_email_and_allows_reserved_domains(self): | CODE |
| LOW⚡ | tooling/pii/test_scan.py | 32 | def test_allows_macro_and_test_tlds(self): | CODE |
| LOW⚡ | tooling/pii/test_scan.py | 37 | def test_flags_phone_and_address_not_iso_dates(self): | CODE |
| LOW⚡ | tooling/pii/test_scan.py | 45 | def test_flags_private_key_and_github_token(self): | CODE |
| LOW⚡ | tooling/pii/test_scan.py | 53 | def test_exceptions_cover_value_path_and_domain(self): | CODE |
| LOW | tooling/pii/test_scan.py | 82 | def test_only_added_lines_in_a_hunk_are_scanned(self): | CODE |
| LOW | tooling/pii/test_scan.py | 96 | def test_skips_deleted_files_and_lockfiles(self): | STRING |
| LOW | tooling/pii/test_scan.py | 111 | def test_text_mode_flags_pr_body_pii(self): | STRING |
| LOW | tooling/pii/test_scan.py | 120 | def test_added_content_cannot_be_parsed_as_a_file_header(self): | STRING |
| LOW | tooling/pii/test_scan.py | 131 | def test_reports_do_not_expose_matched_values(self): | STRING |
| LOW | tooling/pii/test_scan.py | 137 | def test_staged_rename_is_scanned_without_a_remote_base(self): | STRING |
| LOW | tooling/pii/test_scan.py | 158 | def test_git_errors_fail_the_scan(self): | STRING |
| LOW | tooling/scripts/test_consolidate_agent_config.py | 13 | def test_missing_signer_reference_aborts_without_uploading(self): | CODE |
| LOW | tooling/scripts/test_consolidate_agent_config.py | 37 | def test_existing_empty_values_are_preserved_and_missing_values_are_copied(self): | CODE |
| LOW | infra/stacks/opensearch/helpers/utils/remove_field.ts | 32 | async function verifyDocumentsHaveReplacementData( | CODE |
| LOW | …rch/helpers/scripts/create_timestamp_seconds_fields.ts | 46 | async function addDateFieldWithEpochSecondFormat( | CODE |
| LOW | …cks/opensearch/helpers/scripts/set_refresh_interval.ts | 22 | async function updateIndexRefreshInterval( | CODE |
| LOW | …cks/opensearch/helpers/scripts/set_refresh_interval.ts | 157 | async function getCurrentRefreshIntervals(): Promise<void> { | CODE |
| LOW | …observability/nixos/goalert/test_macro_alerts_relay.py | 78 | def test_status_update_is_one_line(self): | CODE |
| LOW | …observability/nixos/goalert/test_macro_alerts_relay.py | 89 | def test_long_description_is_cut_at_a_sentence(self): | CODE |
| LOW | infra/stacks/cloud-storage-service/docx-unzip-bucket.ts | 5 | export function attachPolicyToDocxUnzipBucket({ | CODE |
| LOW | infra/packages/resources/src/resources/frecency.ts | 10 | export function createFrecencyTablePolicy( | CODE |
| LOW | infra/packages/resources/src/resources/frecency.ts | 61 | export function attachFrecencyTablePolicy( | CODE |
| LOW | infra/packages/resources/src/resources/grafana.ts | 14 | export function grafanaTelemetryContainers( | CODE |
| LOW | infra/packages/resources/src/resources/role.ts | 5 | export function createShaCleanupWorkerRole( | CODE |
| LOW | infra/packages/shared/src/ai_tools.ts | 136 | export function getAiToolsServiceRoleArns(): pulumi.Output<string>[] { | CODE |
| LOW | crates/pptx_engine/scripts/generate_corpus.py | 1073 | def deck_fills_pattern_picture() -> Deck: | CODE |
| LOW⚡ | crates/universal_input/eval/test_compare.py | 13 | def test_aliases_resolve_without_requiring_real_accounts(self): | CODE |
| LOW⚡ | crates/universal_input/eval/test_compare.py | 20 | def test_invitee_order_and_case_do_not_change_the_result(self): | CODE |
| LOW⚡ | crates/universal_input/eval/test_compare.py | 27 | def test_email_cc_does_not_count_as_a_to_recipient(self): | CODE |
| LOW⚡ | crates/universal_input/eval/test_compare.py | 35 | def test_named_channels_match_without_accepting_a_partial_name(self): | CODE |
| LOW⚡ | crates/universal_input/eval/test_compare.py | 42 | def test_null_queries_are_empty_but_filter_wording_is_a_mismatch(self): | CODE |
| LOW⚡ | crates/universal_input/eval/test_compare.py | 50 | def test_note_markers_and_lost_sentences_are_not_hidden_by_the_comparison(self): | CODE |
| LOW⚡ | crates/universal_input/eval/test_compare.py | 57 | def test_dates_are_checked_as_local_wall_clock_times(self): | CODE |
| LOW⚡ | crates/universal_input/eval/test_compare.py | 65 | def test_priority_comes_from_the_extracted_task_property(self): | CODE |
| LOW⚡ | crates/universal_input/eval/test_compare.py | 72 | def test_titles_allow_concise_forms_but_not_the_description(self): | CODE |
| LOW⚡ | crates/universal_input/eval/test_compare.py | 79 | def test_reports_identify_new_failures_and_fixes(self): | CODE |
| LOW⚡ | crates/universal_input/eval/test_compare.py | 87 | def test_wrong_classifications_are_not_corrected_by_forcing_the_expected_intent(self, request): | CODE |
| LOW⚡ | crates/universal_input/eval/test_compare.py | 95 | def test_requests_use_the_frozen_clock_and_task_catalog(self, request): | CODE |
| LOW | nix/appimage/test_apprun.py | 17 | def test_preserves_size_source_and_surrounding_bytes(self): | CODE |
| LOW | nix/appimage/test_apprun.py | 39 | def test_rejects_missing_or_ambiguous_entries(self): | CODE |
| LOW | nix/appimage/test_apprun.py | 51 | def test_rejects_non_elf_input(self): | CODE |
| LOW⚡ | nix/appimage/test_packaging.py | 79 | def test_ldd_includes_transitive_dependencies_and_keeps_aliases(self): | CODE |
| LOW⚡ | nix/appimage/test_packaging.py | 84 | def test_ldd_rejects_missing_transitive_dependency(self): | CODE |
| LOW⚡ | nix/appimage/test_packaging.py | 93 | def test_ldd_reuses_first_loaded_soname(self): | CODE |
| LOW⚡ | nix/appimage/test_packaging.py | 102 | def test_relocation_restores_sonames_and_origin_paths(self): | CODE |
| LOW⚡ | nix/appimage/test_packaging.py | 116 | def test_relocation_rewrites_absolute_needed(self): | CODE |
| LOW⚡ | nix/appimage/test_packaging.py | 124 | def test_relocation_rejects_unbundled_absolute_needed(self): | CODE |
| LOW⚡ | nix/appimage/test_packaging.py | 131 | def test_relocation_rewrites_interpreter_and_shebang(self): | CODE |
| LOW | nix/appimage/test_packaging.py | 145 | def test_relocation_handles_read_only_nix_copies(self): | CODE |
| LOW | nix/appimage/test_packaging.py | 158 | def test_relocation_rewrites_release_webkit_helper_directory(self): | CODE |
| LOW | nix/appimage/test_packaging.py | 176 | def test_relocation_rejects_nix_only_proxy_schema_paths(self): | CODE |
| LOW | nix/appimage/test_packaging.py | 191 | def test_relocation_rejects_conflicting_sonames(self): | CODE |
| LOW | …tion/src/websocket/core/websocket-heartbeat-options.ts | 33 | export function isRequiredHeartbeatOptions( | CODE |
| LOW | packages/collaboration/src/collab/telemetry.ts | 32 | function setDocumentSpanAttributes(documentId: string, span: Span): void { | CODE |
| LOW | packages/email-renderer/src/core/colors.ts | 77 | export function findClosestContrastingColor(fg: OKLCH, bgL: number): OKLCH { | CODE |
| LOW | packages/email-renderer/src/core/css.ts | 141 | export function stripColorSchemeMediaQueries(css: string): string { | CODE |
| LOW | packages/email-renderer/src/browser/colors.ts | 150 | function hasOpaqueAncestorBackground(el: HTMLElement, root: Node): boolean { | CODE |
| LOW | …/email-renderer/src/browser/colors.adversarial.test.ts | 161 | function hasOpaqueAncestorBackground(el: HTMLElement, root: Node): boolean { | CODE |
| LOW | packages/spreadsheet/src/conditional-formatting.ts | 269 | export function readConditionalAppearance( | CODE |
| 1999 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tooling/seed_cli/src/entity/channel_message/test.rs | 16 | // ── Parsing tests (seed) ────────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/channel_message/test.rs | 33 | // ── Parsing tests ────────────────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/channel_message/test.rs | 158 | // ── Helpers ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/channel_message/test.rs | 176 | // ── Integration tests (single create) ───────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/channel_message/test.rs | 259 | // ── Seed JSON tests ──────────────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/channel_message/test.rs | 401 | // ── Mention flow tests ──────────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/document/test.rs | 17 | // ── Parsing tests ────────────────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/document/test.rs | 132 | // ── Parsing tests (seed) ────────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/document/test.rs | 162 | // ── Helpers ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/document/test.rs | 227 | // ── Execution tests ─────────────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/document/test.rs | 323 | // ── Seed JSON tests ──────────────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/channel/test.rs | 14 | // ── Parsing tests ────────────────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/channel/test.rs | 191 | // ── Helpers ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/channel/test.rs | 209 | // ── Integration tests (single create) ───────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/channel/test.rs | 281 | // ── Seed JSON tests ──────────────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/email/test.rs | 14 | // ── Parsing tests ────────────────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/email/test.rs | 154 | // ── Helpers ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/email/test.rs | 209 | // ── Integration tests (seed) ────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/email/test.rs | 402 | // ── build_thread unit tests ─────────────────────────────── | COMMENT |
| MEDIUM | tooling/seed_cli/src/entity/email/test.rs | 489 | // ── Test helpers ────────────────────────────────────────── | COMMENT |
| MEDIUM | …ask_workflows/src/workflows/scripts/pr_merge_commit.sh | 30 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …ows/src/workflows/scripts/merge_result_native_check.sh | 70 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …ask_workflows/src/workflows/scripts/ios_native_tree.sh | 65 | # ---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …k_workflows/src/workflows/scripts/android_git_fetch.sh | 14 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | infra/stacks/github-runners/user-data.sh | 8 | # ─── System packages & updates ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | infra/stacks/github-runners/user-data.sh | 42 | # ─── Docker ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | infra/stacks/github-runners/user-data.sh | 58 | # ─── Runner user ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | infra/stacks/github-runners/user-data.sh | 65 | # ─── Rust ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | infra/stacks/github-runners/user-data.sh | 72 | # ─── Just ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | infra/stacks/github-runners/user-data.sh | 75 | # ─── AWS CLI v2 ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | infra/stacks/github-runners/user-data.sh | 82 | # ─── Pulumi CLI ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | infra/stacks/github-runners/user-data.sh | 85 | # ─── SOPS ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | infra/stacks/github-runners/user-data.sh | 91 | # ─── Node.js LTS (needed by many GH Actions) ───────────────────────────────── | COMMENT |
| MEDIUM⚡ | infra/stacks/github-runners/user-data.sh | 96 | # ─── GitHub Actions Runner ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | infra/stacks/github-runners/user-data.sh | 117 | # ─── Configure & start the runner ───────────────────────────────────────────── | COMMENT |
| MEDIUM | infra/stacks/github-runners/runner.ts | 43 | // ── AMI ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | infra/stacks/github-runners/runner.ts | 58 | // ── Security Group ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | infra/stacks/github-runners/runner.ts | 94 | // ── IAM ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | infra/stacks/github-runners/runner.ts | 133 | // ── User Data ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | infra/stacks/github-runners/runner.ts | 151 | // ── EC2 Instance ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | infra/stacks/agent-harness-service/index.ts | 26 | // ── Secrets ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | infra/stacks/agent-harness-service/index.ts | 52 | // ── Session changes bucket ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | infra/stacks/agent-harness-service/index.ts | 76 | // ── AI tools infra ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | infra/stacks/agent-harness-service/index.ts | 80 | // ── Stack references ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | infra/stacks/agent-harness-service/index.ts | 109 | // ── Service ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | infra/stacks/cloud-storage-service/index.ts | 239 | // ── GitHub pull request patches ────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/email_formatting/preview_digest.py | 22 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | crates/email_formatting/preview_digest.py | 24 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | crates/email_formatting/preview_digest.py | 58 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | crates/email_formatting/preview_digest.py | 60 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | crates/email_formatting/preview_digest.py | 90 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | crates/email_formatting/preview_digest.py | 92 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | crates/notification/src/domain/service/voip/test.rs | 16 | // ─── Helpers ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/notification/src/domain/service/voip/test.rs | 37 | // ─── Mock: NotificationRepository ──────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/notification/src/domain/service/voip/test.rs | 269 | // ─── Mock: MobilePushOps ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/notification/src/domain/service/voip/test.rs | 327 | // ─── Tests ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/notification/src/domain/service/device/test.rs | 16 | // ─── Mocks ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/notification/src/domain/service/device/test.rs | 428 | // ─── Register Tests ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/notification/src/domain/service/device/test.rs | 583 | // ─── Unregister Tests ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | crates/ai_engine/src/font/glyphlist/glyphlist.txt | 1 | # ----------------------------------------------------------- | COMMENT |
| 185 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | crates/webhook/src/inbound/axum_router.rs | 104 | .append(&self.authorization.authorization.user.macro_user_id.as_ref()) | CODE |
| CRITICAL | crates/models_soup/src/item.rs | 81 | EntityType::Channel.with_entity_string(channel.channel.channel.id.0.to_string()) | CODE |
| CRITICAL | crates/referral/src/inbound/axum_router/send_invite.rs | 83 | .append(&self.0.authorization.user.macro_user_id.as_ref()) | CODE |
| CRITICAL | crates/forms/src/inbound/axum_router.rs | 151 | user_id: signed_in.user.authorization.user.macro_user_id.clone(), | CODE |
| CRITICAL | …ication/src/domain/models/email_notification_digest.rs | 267 | .last_online_checker(self.prev.prev.inner.owner_id.copied()) | CODE |
| CRITICAL | …s/notification/src/domain/models/queue_message/test.rs | 93 | deserialized.request.req.notification.tag.as_ref(), | CODE |
| CRITICAL | crates/contacts/src/inbound/http.rs | 123 | .append(&self.0.authorization.user.macro_user_id.as_ref()) | CODE |
| CRITICAL | …src/inbound/toolset/pipelines/find_pipeline_entries.rs | 255 | let name = found.pipeline.pipeline.pipeline.name.clone(); | CODE |
| CRITICAL | crates/frecency/src/domain/models.rs | 112 | user_id: MacroUserIdStr::parse_from_str(r.event_record.event.entity.user_id.as_ref())?, | CODE |
| CRITICAL | crates/frecency/src/domain/models.rs | 113 | entity: r.event_record.event.entity.entity.copied(), | CODE |
| CRITICAL | crates/docx_engine/src/bin/docx_corpus/lines.rs | 212 | style: l.para.format.props.style.clone(), | CODE |
| CRITICAL | …ates/import/src/domain/service/slack_discovery/test.rs | 271 | let calls = service.slack_source.0.0.member_calls.lock().unwrap(); | CODE |
| CRITICAL | …ates/import/src/domain/service/slack_discovery/test.rs | 334 | let calls = service.slack_source.0.0.member_calls.lock().unwrap(); | CODE |
| CRITICAL | …ates/import/src/domain/service/slack_discovery/test.rs | 434 | service.slack_source.0.0.member_calls.lock().unwrap().len(), | CODE |
| CRITICAL | crates/graphql_soup/src/objects.rs | 560 | .with_entity_string(item.channel.channel.id.0.to_string()), | CODE |
| CRITICAL | crates/graphql_soup/src/objects.rs | 1902 | ID(self.0.channel.channel.id.0.to_string()) | CODE |
| CRITICAL⚡ | crates/graphql_soup/src/objects.rs | 1917 | self.0.channel.channel.name.clone() | CODE |
| CRITICAL⚡ | crates/graphql_soup/src/objects.rs | 1923 | owner_id: Some(self.0.channel.channel.owner_id.as_ref().to_owned()), | CODE |
| CRITICAL⚡ | crates/graphql_soup/src/objects.rs | 1931 | created_at: Some(self.0.channel.channel.created_at.to_rfc3339()), | CODE |
| CRITICAL⚡ | crates/graphql_soup/src/objects.rs | 1932 | updated_at: Some(self.0.channel.channel.updated_at.to_rfc3339()), | CODE |
| CRITICAL⚡ | crates/graphql_soup/src/objects.rs | 1940 | self.0.channel.channel.name.as_deref() | CODE |
| CRITICAL⚡ | crates/graphql_soup/src/objects.rs | 1950 | self.0.channel.channel.owner_id.as_ref().to_owned() | CODE |
| CRITICAL⚡ | crates/graphql_soup/src/objects.rs | 1965 | self.0.channel.channel.team_id.map(|id| ID(id.to_string())) | CODE |
| CRITICAL⚡ | crates/graphql_soup/src/objects.rs | 1970 | self.0.channel.channel.created_at.to_rfc3339() | CODE |
| CRITICAL⚡ | crates/graphql_soup/src/objects.rs | 1975 | self.0.channel.channel.updated_at.to_rfc3339() | CODE |
| CRITICAL | …next-soup/soup-view/views/inbox/inbox-card-layouts.tsx | 839 | const reply = props.item.entity.thread.preview.find( | CODE |
| CRITICAL | …ures/slack-import/primitives/import-controller.test.ts | 159 | sources.commands.register.mock.calls.every((call) => | CODE |
| CRITICAL | …ures/slack-import/primitives/import-controller.test.ts | 307 | sources.commands.register.mock.calls.filter( | CODE |
| CRITICAL | …ures/slack-import/primitives/import-controller.test.ts | 316 | const registrations = sources.commands.register.mock.calls.filter( | CODE |
| CRITICAL | …ures/slack-import/primitives/import-controller.test.ts | 338 | sources.commands.complete.mock.calls.filter( | CODE |
| CRITICAL | …ures/slack-import/primitives/import-controller.test.ts | 378 | const requests = sources.commands.create.mock.calls.map((call) => call[1]); | CODE |
| CRITICAL | …features/external-chat/primitives/conversation.test.ts | 106 | const keys = state.fake.capabilities.send.mock.calls.map((call) => call[1]); | CODE |
| CRITICAL | …features/external-chat/primitives/conversation.test.ts | 130 | const keys = state.fake.capabilities.send.mock.calls.map((call) => call[1]); | CODE |
| CRITICAL | …features/external-chat/primitives/conversation.test.ts | 208 | state.fake.capabilities.send.mock.calls.map((call) => call[0]) | CODE |
| CRITICAL | …/src/features/block-form/queries/form-collaboration.ts | 264 | putFormLayoutBody.shape.sections.element.options.find(isGateSchema); | CODE |
| CRITICAL | apps/web/src/lib/split-router/tests/navigation.test.ts | 296 | context.to.location.route.matches.at(-1)?.id === 'block' && | CODE |
| CRITICAL | …ib/queries/calendar/graphql/tests/invalidation.test.ts | 126 | calendarKeys.visibleCalendars._ctx.graphql.queryKey.slice(0, 2) | CODE |
| CRITICAL | …/queries/storage/documentLoad/offline-context-cache.ts | 12 | getDocumentVersionResponse.shape.data.shape.documentMetadata.omit({ | CODE |
| CRITICAL | …/src/lib/queries/soup/graphql/grouped-page-evidence.ts | 105 | page.data.user.groupSoup.bins.flatMap((bin) => | CODE |
| CRITICAL | …vice-clients/service-storage/agent-session-mentions.ts | 17 | return result.data.user.soup.items.flatMap((item) => | CODE |
| CRITICAL | …/web/src/lib/service-clients/service-storage/client.ts | 2107 | saveDocumentHandlerResponse.shape.data.shape.documentMetadata.safeParse( | CODE |
| CRITICAL | …/web/src/lib/service-clients/service-storage/client.ts | 2137 | saveDocumentHandlerResponse.shape.data.shape.documentMetadata.safeParse( | CODE |
| CRITICAL | …/web/src/lib/service-clients/service-storage/client.ts | 2378 | saveDocumentHandlerResponse.shape.data.shape.documentMetadata.safeParse( | CODE |
| CRITICAL | …web/src/lib/service-clients/service-storage/service.ts | 581 | schemas.getDocumentVersionResponse.shape.data.shape.userAccessLevel.describe( | CODE |
| CRITICAL | …web/src/lib/service-clients/service-storage/service.ts | 612 | schemas.getDocumentVersionResponse.shape.data.shape.userAccessLevel.describe( | CODE |
| CRITICAL | …e_service/src/api/documents/initialize_starter_docs.rs | 361 | user_id: Some(user_context.authorization.user.user_context.user_id.clone()), | CODE |
| CRITICAL | …ent_storage_service/src/api/items/validate_item_ids.rs | 17 | let user_id = user.authorization.user.user_context.user_id.clone(); | CODE |
| CRITICAL | …document_storage_service/src/api/items/get_item_ids.rs | 27 | let user_id = user.authorization.user.user_context.user_id.clone(); | CODE |
| CRITICAL | services/connection_gateway/src/service/tracker.rs | 62 | data.entity.extra.extra.entity_id.to_string(), | CODE |
| CRITICAL | services/connection_gateway/src/service/tracker.rs | 89 | data.entity.extra.extra.entity_id.to_string(), | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tooling/notification_sandbox/src/main.rs | 304 | sender: Some(MacroUserIdStr::try_from_email("fake-user@example.com").unwrap()), | CODE |
| LOW⚡ | crates/item_filters/src/lib.rs | 223 | /// Email sender addresses to filter by. Examples: ['user@example.com']. Empty to search all senders. | COMMENT |
| LOW⚡ | crates/item_filters/src/lib.rs | 226 | /// Email CC addresses to filter by. Examples: ['user@example.com']. Empty if not filtering by CC. | COMMENT |
| LOW⚡ | crates/item_filters/src/lib.rs | 229 | /// Email BCC addresses to filter by. Examples: ['user@example.com']. Empty if not filtering by BCC. | COMMENT |
| LOW⚡ | crates/item_filters/src/lib.rs | 232 | /// Email Recipient addresses to filter by. Examples: ['user@example.com']. Empty if not filtering by Recipient. | COMMENT |
| LOW | crates/webhook/src/domain/service/test.rs | 369 | MacroUserIdStr::try_from_email("user@example.com").unwrap() | CODE |
| LOW | crates/complete_graph/src/schema/test/calendar.rs | 103 | email_address: "user@example.com".to_owned(), | CODE |
| LOW | crates/graphql_channel/src/test.rs | 85 | let user = MacroUserIdStr::try_from_email("user@example.com").unwrap(); | CODE |
| LOW | crates/slack_integration/src/inbound/worker/test.rs | 82 | requested_by: MacroUserIdStr::try_from_email("admin@example.com").unwrap(), | CODE |
| LOW | crates/slack_integration/src/domain/importer/test.rs | 100 | {"id":"U0","name":"importer","profile":{"email":"admin@example.com","display_name":"Importer Admin"}}, | CODE |
| LOW | crates/slack_integration/src/domain/importer/test.rs | 135 | requested_by: user("admin@example.com"), | CODE |
| LOW | crates/slack_integration/src/domain/importer/test.rs | 1001 | assert_eq!(announcement.joined, user("admin@example.com")); | CODE |
| LOW | crates/slack_integration/src/domain/importer/test.rs | 1006 | user("admin@example.com"), | CODE |
| LOW | crates/slack_integration/src/domain/importer/test.rs | 1108 | user("admin@example.com"), | CODE |
| LOW | crates/gmail_client/src/error/test.rs | 101 | assert!(!sanitized.contains("user@example.com")); | CODE |
| LOW | crates/macro_db_client/src/blocked_email.rs | 82 | VALUES ('test@test.com') | CODE |
| LOW | crates/macro_db_client/src/blocked_email.rs | 94 | assert_eq!(blocked_emails[0], "test@test.com"); | CODE |
| LOW | crates/macro_db_client/src/blocked_email.rs | 105 | VALUES ('test@test.com') | CODE |
| LOW | crates/macro_db_client/src/blocked_email.rs | 122 | VALUES ('test@test.com') | CODE |
| LOW | crates/macro_db_client/src/blocked_email.rs | 132 | assert_eq!(blocked_emails[0], "test@test.com"); | CODE |
| LOW | …s/notification/src/domain/models/queue_message/test.rs | 70 | macro_user_id::user_id::MacroUserIdStr::try_from_email("user@example.com").unwrap(); | CODE |
| LOW | crates/notification/src/domain/service/test.rs | 961 | let recipient = test_user_id("user@example.com"); | CODE |
| LOW | crates/notification/src/domain/service/test.rs | 1087 | let recipient = test_user_id("user@example.com"); | CODE |
| LOW | crates/notification/src/domain/service/test.rs | 1148 | let recipient = test_user_id("user@example.com"); | CODE |
| LOW | crates/notification/src/domain/service/test.rs | 1577 | let recipient = test_user_id("user@example.com"); | CODE |
| LOW | crates/notification/src/domain/service/test.rs | 1605 | let recipient = test_user_id("user@example.com"); | CODE |
| LOW | crates/notification/src/domain/service/test.rs | 1626 | let recipient = test_user_id("user@example.com"); | CODE |
| LOW | crates/notification/src/domain/service/test.rs | 2737 | let recipient = test_user_id("user@example.com"); | CODE |
| LOW | crates/notification/src/domain/service/test.rs | 2777 | let recipient = test_user_id("user@example.com"); | CODE |
| LOW | crates/notification/src/domain/service/test.rs | 2960 | let recipient = test_user_id("user@example.com"); | CODE |
| LOW | crates/notification/src/domain/service/test.rs | 2988 | let recipient = test_user_id("user@example.com"); | CODE |
| LOW | crates/macro_user_id/src/email/tests.rs | 87 | ("test@test.com", "test@test.com"), | CODE |
| LOW | crates/macro_user_id/src/email/tests.rs | 97 | ("test@test.com", "test@test.com"), | CODE |
| LOW | crates/macro_user_id/src/email/tests.rs | 119 | ("test@test.com", "test@test.com"), | CODE |
| LOW | crates/macro_user_id/src/email/tests.rs | 129 | ("test@test.com", "test@test.com"), | CODE |
| LOW | crates/macro_user_id/src/email/tests.rs | 147 | ("test@test.com", true), | CODE |
| LOW | …es/macro_authorization/src/outbound/macro_auth/test.rs | 34 | email: "user@example.com".to_string(), | CODE |
| LOW | crates/crm/src/outbound/search_repo/test.rs | 303 | insert_directory(pool, "acme.com", Some("Acme Corp"), None).await?; | CODE |
| LOW⚡ | …m/src/outbound/companies_repo/test/set_contact_name.rs | 22 | repo.set_contact_name(&team_id, &contact_id, "Jane Doe", false) | CODE |
| LOW⚡ | …m/src/outbound/companies_repo/test/set_contact_name.rs | 27 | Some(Some("Jane Doe".to_string())) | CODE |
| LOW⚡ | …m/src/outbound/companies_repo/test/set_contact_name.rs | 34 | assert_eq!(record.name.as_deref(), Some("Jane Doe")); | CODE |
| LOW | crates/graphql_notification/src/mutations/test.rs | 147 | let user = MacroUserIdStr::try_from_email("user@example.com").unwrap(); | CODE |
| LOW | crates/models_email/src/gmail/inbox_sync.rs | 117 | assert_eq!(payload.message.data.email_address, "user@example.com"); | CODE |
| LOW | crates/ai_engine/src/text/test.rs | 33 | let t = text("lorem ipsum dolor sit amet", Some(80.0), TextAlign::Left); | CODE |
| LOW | crates/ai_engine/src/text/test.rs | 33 | let t = text("lorem ipsum dolor sit amet", Some(80.0), TextAlign::Left); | CODE |
| LOW | crates/agent_harness/src/inbound/kafka/test.rs | 380 | name: "user@example.com".to_owned(), | CODE |
| LOW | crates/agent_harness/src/inbound/kafka/test.rs | 381 | email: Some("user@example.com".to_owned()), | CODE |
| LOW | crates/agent_harness/src/inbound/kafka/test.rs | 425 | name: "user@example.com".to_owned(), | CODE |
| LOW | crates/agent_harness/src/inbound/kafka/test.rs | 426 | email: Some("user@example.com".to_owned()), | CODE |
| LOW | …s/agent_harness/src/outbound/channel_announcer/test.rs | 29 | triggered_by: MacroUserIdStr::try_from_email("user@example.com").unwrap(), | CODE |
| LOW | …s/agent_harness/src/outbound/channel_announcer/test.rs | 383 | MacroUserIdStr::try_from_email("user@example.com").unwrap(), | CODE |
| LOW | …s/agent_harness/src/outbound/channel_announcer/test.rs | 425 | triggered_by: MacroUserIdStr::try_from_email("user@example.com").unwrap(), | CODE |
| LOW | …s/agent_harness/src/outbound/channel_announcer/test.rs | 499 | MacroUserIdStr::try_from_email("user@example.com").unwrap(), | CODE |
| LOW | …s/agent_harness/src/outbound/channel_announcer/test.rs | 525 | triggered_by: MacroUserIdStr::try_from_email("user@example.com").unwrap(), | CODE |
| LOW | crates/email_db_client/src/contacts/get/test.rs | 296 | "dave@example.org" | CODE |
| LOW | crates/github/src/domain/service/link_test.rs | 817 | MacroUserIdStr::try_from_email("user@example.com") | CODE |
| LOW | …ates/calendar_events/src/domain/mutations/test/copy.rs | 218 | requester_email: "user@example.com".to_string(), | CODE |
| LOW | …ates/calendar_events/src/domain/mutations/test/copy.rs | 256 | requester_email: "user@example.com".to_string(), | CODE |
| LOW | crates/calendar_events/src/domain/service/test.rs | 1941 | organizer_email: Some("organizer@example.org".to_string()), | CODE |
| LOW | crates/calendar_events/src/domain/service/test.rs | 2046 | email: "organizer@example.org".to_string(), | CODE |
| 168 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tooling/seed_cli/src/entity/email/README.md | 11 | ## Step 1: Bulk Generate | COMMENT |
| LOW | tooling/seed_cli/src/entity/email/README.md | 52 | ## Step 2: Seed | COMMENT |
| LOW | …tabases/src/outbound/pg_databases_repo/test/journal.rs | 174 | /// Step 1: Wolf inserts Maria (RSVP Yes, Plus Ones 1) and Omar (RSVP No). | COMMENT |
| LOW | …tabases/src/outbound/pg_databases_repo/test/journal.rs | 227 | /// Step 2: Julia sets Maria's RSVP to Maybe. | COMMENT |
| LOW | …tabases/src/outbound/pg_databases_repo/test/journal.rs | 253 | /// Step 3: Julia deletes Omar. | COMMENT |
| LOW | …tabases/src/outbound/pg_databases_repo/test/journal.rs | 269 | /// Step 4: Wolf deletes the Plus Ones column. | COMMENT |
| LOW | crates/notification/src/outbound/digest_batcher.rs | 117 | // Step 1: Atomically pop one user from the pending set | COMMENT |
| LOW | crates/notification/src/outbound/digest_batcher.rs | 154 | // Step 2: Atomically snapshot the list via RENAME | COMMENT |
| LOW | crates/notification/src/outbound/digest_batcher.rs | 165 | // Step 3: Read from the snapshot and clean up | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 734 | // Step 1: Check if allowed | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 740 | // Step 2: Check user existence | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 749 | // Step 3: Check push notifications | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 769 | // Step 1: Check if allowed | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 775 | // Step 2: Check user existence | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 784 | // Step 3: Check push notifications - disabled | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 793 | // Step 4: Check last online time - recently online | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 814 | // Step 1: Check if allowed | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 820 | // Step 2: Check user existence | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 829 | // Step 3: Check push notifications - disabled | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 838 | // Step 4: Check last online time - offline for a while | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 859 | // Step 1: Check if allowed | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 865 | // Step 2: Check user existence - does not exist → DontSend (no account = no email) | COMMENT |
| LOW | crates/email_db_client/src/contacts/upsert_message.rs | 112 | // Step 1: Fetch existing (fast, no locks) | COMMENT |
| LOW⚡ | crates/email_db_client/src/contacts/upsert_message.rs | 136 | // Step 2: Filter to contacts we don't have yet | COMMENT |
| LOW⚡ | crates/email_db_client/src/contacts/upsert_message.rs | 146 | // Step 3: Try to insert new contacts | COMMENT |
| LOW | crates/email_db_client/src/contacts/upsert_message.rs | 158 | // Step 4: Any still missing? Fetch them (handles race condition) | COMMENT |
| LOW⚡ | crates/properties/src/outbound/test.rs | 600 | // Step 1: Set task-standalone as parent of task-orphan | COMMENT |
| LOW⚡ | crates/properties/src/outbound/test.rs | 605 | // Step 2: Now try to add task-standalone as a subtask of task-orphan | COMMENT |
| LOW⚡ | crates/properties/src/outbound/test.rs | 630 | // Step 1: Add task-standalone as a subtask of task-orphan | COMMENT |
| LOW⚡ | crates/properties/src/outbound/test.rs | 635 | // Step 2: Now try to set task-standalone as parent of task-orphan | COMMENT |
| LOW⚡ | crates/properties/src/outbound/test.rs | 662 | // Step 1: Set task-standalone as parent of task-orphan | COMMENT |
| LOW⚡ | crates/properties/src/outbound/test.rs | 667 | // Step 2: Now try to set task-orphan as parent of task-standalone | COMMENT |
| LOW⚡ | crates/properties/src/outbound/test.rs | 694 | // Step 1: Add task-standalone as subtask of task-orphan | COMMENT |
| LOW⚡ | crates/properties/src/outbound/test.rs | 699 | // Step 2: Now try to add task-orphan as subtask of task-standalone | COMMENT |
| LOW | crates/system_properties/src/outbound/pgpool.rs | 161 | // Step 1: Fetch all properties from source task. A copy doesn't join | COMMENT |
| LOW | crates/system_properties/src/outbound/pgpool.rs | 177 | // Step 2: Copy all properties to destination task (with v7 UUIDs) | COMMENT |
| LOW | crates/system_properties/src/outbound/pgpool.rs | 222 | // Step 3: Ensure all system task properties exist (insert with null if missing) | COMMENT |
| LOW | crates/email/src/outbound/email_pg_repo/contact.rs | 53 | // Step 1: Fetch existing contacts | COMMENT |
| LOW | crates/email/src/outbound/email_pg_repo/contact.rs | 71 | // Step 2: Update names for existing contacts that don't have one yet | COMMENT |
| LOW | crates/email/src/outbound/email_pg_repo/contact.rs | 100 | // Step 3: Insert new contacts | COMMENT |
| LOW | crates/email/src/outbound/email_pg_repo/contact.rs | 138 | // Step 4: Handle race conditions - fetch any still-missing contacts | COMMENT |
| LOW | .agents/skills/create-ai-tool/SKILL.md | 12 | ## Step 1: Write the tool | COMMENT |
| LOW⚡ | .agents/skills/create-ai-tool/SKILL.md | 26 | ## Step 2: Create the tool context | COMMENT |
| LOW⚡ | .agents/skills/create-ai-tool/SKILL.md | 34 | ## Step 3: Add the toolset to `all_tools` in the ai_tools crate | COMMENT |
| LOW⚡ | .agents/skills/create-ai-tool/SKILL.md | 40 | ## Step 4: Add the context to ToolServiceContext | COMMENT |
| LOW⚡ | .agents/skills/create-ai-tool/SKILL.md | 47 | ## Step 5: Wire up env vars and service construction | COMMENT |
| LOW⚡ | .agents/skills/create-ai-tool/SKILL.md | 54 | ## Step 6: Update infra (if new env vars or AWS resources are needed) | COMMENT |
| LOW⚡ | .agents/skills/create-ai-tool/SKILL.md | 61 | ## Step 7: Rust checks | COMMENT |
| LOW⚡ | .agents/skills/create-ai-tool/SKILL.md | 72 | ## Step 8: Generate frontend types | COMMENT |
| LOW⚡ | .agents/skills/create-ai-tool/SKILL.md | 81 | ## Step 9: Check what frontend UI is needed | COMMENT |
| LOW⚡ | .agents/skills/create-ai-tool/SKILL.md | 90 | ## Step 10: Read existing tool UI for patterns | COMMENT |
| LOW | .agents/skills/create-ai-tool/SKILL.md | 103 | ## Step 11: Write the tool UI | COMMENT |
| LOW | .agents/skills/create-ai-tool/SKILL.md | 122 | ## Step 12: Frontend checks | COMMENT |
| LOW | .agents/skills/dependabot/SKILL.md | 9 | ## Step 1: Fetch all open alerts | COMMENT |
| LOW | .agents/skills/dependabot/SKILL.md | 26 | ## Step 2: Group alerts by manifest/lockfile | COMMENT |
| LOW | .agents/skills/dependabot/SKILL.md | 30 | ## Step 3: Determine override strategy per manifest | COMMENT |
| LOW | .agents/skills/dependabot/SKILL.md | 44 | ## Step 4: Present the plan | COMMENT |
| LOW | .agents/skills/dependabot/SKILL.md | 56 | ## Step 5: Apply fixes | COMMENT |
| LOW | .agents/skills/dependabot/SKILL.md | 70 | ## Step 6: Verify | COMMENT |
| LOW | …ail_service/src/util/process_pre_insert/sync_labels.rs | 14 | // Step 1: Fetch the persisted labels | COMMENT |
| 4 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | crates/models_soup/src/call_record.rs | 55 | /// User-supplied or AI-generated display name for the call. | COMMENT |
| HIGH | crates/models_soup/src/call_record.rs | 57 | /// AI-generated summary of the call. Only set on archived | COMMENT |
| HIGH | crates/ai_projections/src/lib.rs | 4 | //! An AI projection is a materialized, cached AI-generated view of a user's | COMMENT |
| HIGH | crates/call/src/inbound/toolset/read_call_record.rs | 56 | /// The AI generated summary of the call if one was generated. Use this before you read through the transcript. | COMMENT |
| HIGH | crates/call/src/domain/events.rs | 102 | /// Whether an AI-generated display name was persisted with the summary. | COMMENT |
| HIGH | crates/call/src/domain/ports.rs | 261 | /// candidate speaker set for AI-generated archived transcript attribution. | COMMENT |
| HIGH | crates/call/src/domain/ports.rs | 539 | /// Persist the AI-generated summary text on the archived call record. | COMMENT |
| HIGH | crates/call/src/domain/models.rs | 332 | /// AI-generated speaker attribution for one archived transcript row. | COMMENT |
| HIGH | crates/call/src/domain/models.rs | 512 | /// User-supplied or AI-generated display name for the call. Only set on | COMMENT |
| HIGH | crates/call/src/domain/models.rs | 515 | /// AI-generated summary of the call. Only set on archived `call_records` | COMMENT |
| HIGH | crates/call/src/domain/models.rs | 609 | /// User-supplied or AI-generated display name for the call. Only set on | COMMENT |
| HIGH | crates/agent_code_mode/src/domain/documentation.rs | 239 | /// The symbol as requested. | COMMENT |
| HIGH | crates/documents/src/domain/models.rs | 329 | /// The pull request's `owner/repo/pull/number` key, as requested. | COMMENT |
| HIGH | apps/web/src/lib/queries/preview/fetchers.ts | 174 | // prefer the user-supplied / AI-generated `customName`, fall back to | COMMENT |
| HIGH | services/sync-service/bebop-schema/src/generated.rs | 2 | // This code was generated by a tool. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tooling/scripts/consolidate-agent-config.py | 26 | # Existing harness settings win, including rollout gates and credentials. | COMMENT |
| MEDIUM | tooling/scripts/consolidate-agent-config.py | 41 | # environments. An old, unused harness PEM under the same name must not | COMMENT |
| MEDIUM | tooling/scripts/claude-local-mcp.sh | 32 | # The cognition host is the harness listener plus a /cognition prefix; the | COMMENT |
| MEDIUM | …authorization/src/outbound/pg_harness_authorization.rs | 38 | #[error("harness authorization database operation failed")] | COMMENT |
| MEDIUM | …authorization/src/outbound/pg_harness_authorization.rs | 41 | #[error("invalid persisted harness ownership data")] | COMMENT |
| MEDIUM | crates/agent_harness/Cargo.toml | 16 | # The session-token claim shape and its signing, so the harness and the proxy | COMMENT |
| MEDIUM | …tes/agent_harness/container/sidecar/src/server/test.rs | 24 | std::fs::write(&path, format!("#!/bin/sh\n{body}\n")).expect("write fake harness"); | CODE |
| MEDIUM | crates/agent_harness/src/domain/capability_discovery.rs | 73 | #[error("the requested harness is disconnected")] | COMMENT |
| MEDIUM | crates/agent_harness/src/domain/capability_discovery.rs | 90 | #[error("the requested harness is disconnected")] | COMMENT |
| MEDIUM | crates/agent_harness/src/domain/model_load.rs | 93 | #[error("the requested harness is disconnected")] | COMMENT |
| MEDIUM | crates/agent_harness/src/domain/model_load.rs | 110 | #[error("the requested harness is disconnected")] | COMMENT |
| MEDIUM | crates/agent_harness/src/domain/service/warm.rs | 55 | #[tracing::instrument(skip_all, err, fields(agent.session.id = tracing::field::Empty, agent.harness = tracing::field | COMMENT |
| MEDIUM | crates/harness_id/src/lib.rs | 71 | #[error("invalid harness id: {value}")] | COMMENT |
| MEDIUM⚡ | crates/coding_agent_worker/config.example.toml | 1 | # Everything an agent harness daemon needs to serve one harness's sessions. | COMMENT |
| MEDIUM⚡ | crates/coding_agent_worker/config.example.toml | 8 | # Base URL of the agent-harness service. Its ws(s) twin hosts the runtime | COMMENT |
| MEDIUM⚡ | crates/coding_agent_worker/config.example.toml | 11 | # Base URL of the storage service (harness pairing + live event stream). | COMMENT |
| MEDIUM⚡ | crates/coding_agent_worker/config.example.toml | 18 | # Optional: the harness name pairing requests; the approving user may rename | COMMENT |
| MEDIUM | crates/coding_agent_worker/config.example.toml | 32 | # Optional: environment added to the harness and to every model probe. The | COMMENT |
| MEDIUM | crates/coding_agent_worker/config.example.toml | 47 | # storage_path = "/path/to/agents" # Omit for ~/.macrod/herdr/<harness-id>. | COMMENT |
| MEDIUM | crates/coding_agent_worker/src/harness.rs | 43 | #[error("the service connection closed before the harness was announced")] | COMMENT |
| MEDIUM | crates/coding_agent_worker/src/harness.rs | 46 | #[error("the harness process ended in failure: {0}")] | COMMENT |
| MEDIUM | crates/coding_agent_worker/src/tui/config_form/test.rs | 156 | "# keep me\n[macro]\napi_url = \"https://custom-api\"\nstorage_url = \"https://custom-storage\"\nweb_url = \ | CODE |
| MEDIUM | …istry/entity_registry/src/domain/creation_principal.rs | 58 | #[error("a harness cannot create entities")] | COMMENT |
| MEDIUM | crates/pptx_engine/scripts/corpus_media.py | 878 | """Small seamless tile for picture-tile fills and tiled backgrounds.""" | STRING |
| MEDIUM | crates/ai_usage/src/lib.rs | 3 | //! AI cost logging — a robust log of AI usage with a flexible admin query API. | COMMENT |
| MEDIUM | crates/fusionauth/src/identity_provider/login.rs | 38 | /// This API allows you to complete a OpenID Connect login after authenticating a user using the OpenID Connect API. If | COMMENT |
| MEDIUM | crates/import/src/outbound/pg_import_repo/test.rs | 1007 | r#"INSERT INTO agent_session (id, owner_id, bot_id, harness, model, workspace, for_warming) VALUES ($1, $2, '000 | CODE |
| MEDIUM | …/import/src/outbound/pg_import_repo/notion_run/test.rs | 367 | r#"INSERT INTO agent_session (id, owner_id, bot_id, harness, model, workspace, for_warming) VALUES ($1, $2, '000 | CODE |
| MEDIUM | crates/import/src/domain/service/workspace/run/test.rs | 408 | r#"INSERT INTO agent_session (id, owner_id, bot_id, harness, model, workspace, for_warming) VALUES ($1, $2, '000 | CODE |
| LOW | …0b0aef3fb0f59d392b5780cc548f331263a581d1b011eb970.json | 3 | "query": "\n SELECT \n -- Use trim() to remove the leading/trailing angle brackets\n trim(jso | CODE |
| MEDIUM | apps/web/src/features/channel/Call/CallContext.tsx | 770 | // for a seamless transition without destroying and recreating. | COMMENT |
| MEDIUM | …ding-agent-worker/container/sidecar/src/server/test.rs | 24 | std::fs::write(&path, format!("#!/bin/sh\n{body}\n")).expect("write fake harness"); | CODE |
| MEDIUM | services/agent_harness_service/src/config.rs | 160 | #[macro_config_default(String::from("macro-agent-harness"))] | COMMENT |
| MEDIUM | services/agent_harness_service/src/config.rs | 181 | #[macro_config_default(String::from("macro-agent-harness:latest"))] | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …tabases/src/outbound/pg_databases_repo/test/journal.rs | 174 | /// Step 1: Wolf inserts Maria (RSVP Yes, Plus Ones 1) and Omar (RSVP No). | COMMENT |
| LOW | …tabases/src/outbound/pg_databases_repo/test/journal.rs | 227 | /// Step 2: Julia sets Maria's RSVP to Maybe. | COMMENT |
| LOW | …tabases/src/outbound/pg_databases_repo/test/journal.rs | 253 | /// Step 3: Julia deletes Omar. | COMMENT |
| LOW | …tabases/src/outbound/pg_databases_repo/test/journal.rs | 269 | /// Step 4: Wolf deletes the Plus Ones column. | COMMENT |
| LOW | crates/notification/src/outbound/digest_batcher.rs | 117 | // Step 1: Atomically pop one user from the pending set | COMMENT |
| LOW | crates/notification/src/outbound/digest_batcher.rs | 154 | // Step 2: Atomically snapshot the list via RENAME | COMMENT |
| LOW | crates/notification/src/outbound/digest_batcher.rs | 165 | // Step 3: Read from the snapshot and clean up | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 734 | // Step 1: Check if allowed | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 740 | // Step 2: Check user existence | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 749 | // Step 3: Check push notifications | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 769 | // Step 1: Check if allowed | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 775 | // Step 2: Check user existence | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 784 | // Step 3: Check push notifications - disabled | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 793 | // Step 4: Check last online time - recently online | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 814 | // Step 1: Check if allowed | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 820 | // Step 2: Check user existence | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 829 | // Step 3: Check push notifications - disabled | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 838 | // Step 4: Check last online time - offline for a while | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 859 | // Step 1: Check if allowed | COMMENT |
| LOW⚡ | …on/src/domain/models/email_notification_digest/test.rs | 865 | // Step 2: Check user existence - does not exist → DontSend (no account = no email) | COMMENT |
| LOW | crates/email_db_client/src/contacts/upsert_message.rs | 112 | // Step 1: Fetch existing (fast, no locks) | COMMENT |
| LOW⚡ | crates/email_db_client/src/contacts/upsert_message.rs | 136 | // Step 2: Filter to contacts we don't have yet | COMMENT |
| LOW⚡ | crates/email_db_client/src/contacts/upsert_message.rs | 146 | // Step 3: Try to insert new contacts | COMMENT |
| LOW | crates/email_db_client/src/contacts/upsert_message.rs | 158 | // Step 4: Any still missing? Fetch them (handles race condition) | COMMENT |
| LOW⚡ | crates/properties/src/outbound/test.rs | 600 | // Step 1: Set task-standalone as parent of task-orphan | COMMENT |
| LOW⚡ | crates/properties/src/outbound/test.rs | 605 | // Step 2: Now try to add task-standalone as a subtask of task-orphan | COMMENT |
| LOW⚡ | crates/properties/src/outbound/test.rs | 630 | // Step 1: Add task-standalone as a subtask of task-orphan | COMMENT |
| LOW⚡ | crates/properties/src/outbound/test.rs | 635 | // Step 2: Now try to set task-standalone as parent of task-orphan | COMMENT |
| LOW⚡ | crates/properties/src/outbound/test.rs | 662 | // Step 1: Set task-standalone as parent of task-orphan | COMMENT |
| LOW⚡ | crates/properties/src/outbound/test.rs | 667 | // Step 2: Now try to set task-orphan as parent of task-standalone | COMMENT |
| LOW⚡ | crates/properties/src/outbound/test.rs | 694 | // Step 1: Add task-standalone as subtask of task-orphan | COMMENT |
| LOW⚡ | crates/properties/src/outbound/test.rs | 699 | // Step 2: Now try to add task-orphan as subtask of task-standalone | COMMENT |
| LOW | crates/system_properties/src/outbound/pgpool.rs | 161 | // Step 1: Fetch all properties from source task. A copy doesn't join | COMMENT |
| LOW | crates/system_properties/src/outbound/pgpool.rs | 177 | // Step 2: Copy all properties to destination task (with v7 UUIDs) | COMMENT |
| LOW | crates/system_properties/src/outbound/pgpool.rs | 222 | // Step 3: Ensure all system task properties exist (insert with null if missing) | COMMENT |
| LOW | crates/email/src/outbound/email_pg_repo/contact.rs | 53 | // Step 1: Fetch existing contacts | COMMENT |
| LOW | crates/email/src/outbound/email_pg_repo/contact.rs | 71 | // Step 2: Update names for existing contacts that don't have one yet | COMMENT |
| LOW | crates/email/src/outbound/email_pg_repo/contact.rs | 100 | // Step 3: Insert new contacts | COMMENT |
| LOW | crates/email/src/outbound/email_pg_repo/contact.rs | 138 | // Step 4: Handle race conditions - fetch any still-missing contacts | COMMENT |
| LOW | …ail_service/src/util/process_pre_insert/sync_labels.rs | 14 | // Step 1: Fetch the persisted labels | COMMENT |
| LOW | …ail_service/src/util/process_pre_insert/sync_labels.rs | 30 | // Step 2: Identify labels to delete (in DB but not in Gmail) | COMMENT |
| LOW | …ail_service/src/util/process_pre_insert/sync_labels.rs | 41 | // Step 3: Identify labels to insert or update | COMMENT |
| LOW | …ail_service/src/util/process_pre_insert/sync_labels.rs | 66 | // Step 4: Perform deletions if needed | COMMENT |
| LOW | …ail_service/src/util/process_pre_insert/sync_labels.rs | 84 | // Step 5: Perform insert/update operations | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tooling/xtask/crates/xtask_local/Cargo.toml | 15 | # Local/dev orchestration. These deps reuse the workspace-pinned versions so | COMMENT |
| MEDIUM | tooling/xtask/crates/xtask_local/src/local/cli.rs | 14 | #[command(name = "cargo-x", about = "Macro local & dev orchestration")] | COMMENT |
| MEDIUM | crates/agent_session/Cargo.toml | 9 | # Quota contracts and helper orchestration without enabling session adapters. | COMMENT |
| MEDIUM | crates/agent/src/hook.rs | 194 | /// Sends [`StreamPart`] items through an unbounded channel as the RIG agentic | COMMENT |
| MEDIUM | crates/agent/src/error.rs | 11 | /// An error from the RIG prompt/agentic loop. | COMMENT |
| MEDIUM | crates/agent/src/lib.rs | 3 | //! Agent crate — agentic loop | COMMENT |
| MEDIUM | crates/agent/src/tool_adapter.rs | 105 | /// agentic loop without modification. | COMMENT |
| MEDIUM | …t/src/test/agent_loop/test_cooperative_cancellation.rs | 73 | // tool returns) just finalizes so the agentic loop terminates. | COMMENT |
| MEDIUM | crates/agent/src/model/router.rs | 261 | /// Run the agentic loop and adapt rig's stream into the provider-agnostic | COMMENT |
| MEDIUM | crates/agent/src/model/router.rs | 662 | /// Run the agentic loop on `agent` and adapt rig's stream into the | COMMENT |
| MEDIUM | crates/agent_inmem/src/lib.rs | 6 | //! milliseconds and its transport never leaves the process. The agentic loop | COMMENT |
| MEDIUM | crates/agent_inmem/src/domain/engine.rs | 1 | //! The seam between the ACP surface and the agentic loop that serves it. | COMMENT |
| MEDIUM | …outbound/email_pg_repo/test/crm_scope_dynamic_query.rs | 323 | // test scaffold or buggy caller bypassing soup's 403 check). Defensive | COMMENT |
| MEDIUM | crates/ai_toolset/src/toolset/types.rs | 50 | #[error("error deserializing tool call (possible hallucination): {0}")] | COMMENT |
| MEDIUM | .agents/rules/rust/guardrails.md | 11 | # Backend guardrails | COMMENT |
| MEDIUM | .cargo/config.toml | 11 | # (anything else) # local/dev orchestration (xtask_local) | COMMENT |
| MEDIUM | apps/marketing/src/app/routes/RouteEmail.tsx | 145 | <a href="#agentic-editing"> | CODE |
| MEDIUM | …rc/features/marketing/components/email/email-demos.css | 69 | #agentic-editing .homepage-conversation { margin-bottom: 48px; } | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | crates/coding_agent_worker/e2e/update_e2e.py | 442 | except ProcessLookupError: | CODE |
| HIGH | crates/coding_agent_worker/e2e/update_e2e.py | 450 | except ProcessLookupError: | CODE |
| HIGH | crates/pptx_engine/scripts/render_references.py | 97 | except Exception: # noqa: BLE001 - python-pptx rejects some valid wild files | CODE |
| HIGH | crates/pptx_engine/scripts/render_references.py | 152 | except (OSError, ValueError): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | apps/web/scripts/desktop-signing.test.ts | 43 | elif [ "$1 $2" = 'release download' ]; then | CODE |
| HIGH | apps/web/src/lib/urql-solid/browser-test/harness.tsx | 42 | print(FIRST_DOCUMENT) === FIRST_TEXT && | CODE |
| HIGH | apps/web/src/lib/urql-solid/browser-test/harness.tsx | 43 | print(SECOND_DOCUMENT) === SECOND_TEXT; | CODE |
| HIGH | apps/web/src/lib/queries/mutation-coverage.test.ts | 170 | print(type), | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tooling/scripts/consolidate-agent-config.py | 19 | CODE | |
| LOW | …acks/observability/nixos/goalert/macro-alerts-relay.py | 59 | CODE | |
| LOW | crates/coding_agent_worker/e2e/update_e2e.py | 287 | CODE | |
| LOW | crates/coding_agent_worker/e2e/update_e2e.py | 138 | CODE | |
| LOW | crates/docx_engine/scripts/render_references.py | 202 | CODE | |
| LOW | crates/pptx_engine/scripts/update_manifest.py | 62 | CODE | |
| LOW | crates/pptx_engine/scripts/corpus_xml.py | 479 | CODE | |
| LOW | crates/pptx_engine/scripts/generate_corpus.py | 234 | CODE | |
| LOW | crates/pptx_engine/scripts/generate_corpus.py | 598 | CODE | |
| LOW | crates/pptx_engine/scripts/generate_corpus.py | 1649 | CODE | |
| LOW | crates/pptx_engine/scripts/generate_corpus.py | 2263 | CODE | |
| LOW | crates/pptx_engine/scripts/generate_corpus.py | 2304 | CODE | |
| LOW | crates/pptx_engine/scripts/render_references.py | 251 | CODE | |
| LOW | crates/pptx_engine/scripts/inspect_pptx.py | 138 | CODE | |
| LOW | crates/pptx_engine/scripts/inspect_pptx.py | 433 | CODE | |
| LOW | crates/pptx_engine/scripts/inspect_pptx.py | 279 | CODE | |
| LOW | nix/appimage/relocate.py | 39 | CODE | |
| LOW | apps/web/tests/native/ios/smoke.py | 54 | CODE | |
| LOW | services/transcription/transcriber.py | 338 | CODE | |
| LOW | services/transcription/transcriber.py | 386 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tooling/pii/test_scan.py | 3 | CODE | |
| LOW | tooling/pii/scan.py | 12 | CODE | |
| LOW | …es/folds/agent_fold/scripts/convert_stdio_recording.py | 32 | CODE | |
| LOW | crates/folds/agent_fold/scripts/sanitize_recording.py | 43 | CODE | |
| LOW | crates/folds/agent_fold/scripts/sanitize_recording.py | 46 | CODE | |
| LOW | crates/docx_engine/scripts/fetch_corpus.py | 15 | CODE | |
| LOW | crates/docx_engine/scripts/render_references.py | 25 | CODE | |
| LOW | crates/pptx_engine/scripts/update_manifest.py | 19 | CODE | |
| LOW | crates/pptx_engine/scripts/corpus_xml.py | 14 | CODE | |
| LOW | crates/pptx_engine/scripts/generate_corpus.py | 30 | CODE | |
| LOW | crates/pptx_engine/scripts/render_references.py | 31 | CODE | |
| LOW | crates/pptx_engine/scripts/corpus_media.py | 17 | CODE | |
| LOW | crates/pptx_engine/scripts/inspect_pptx.py | 18 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .config/hakari.toml | 1 | # This file contains settings for `cargo hakari`. | COMMENT |
| MEDIUM | crates/workspace-hack/Cargo.toml | 1 | # This file is generated by `cargo hakari`. | COMMENT |
| MEDIUM | .github/workflows/build-rust-ci-image.yml | 6 | # Create a GitHub-hosted larger image-generation runner with this label before | COMMENT |
| MEDIUM | .github/actions/deploy-cloud-storage-pulumi/action.yml | 193 | # Create the stack on first deploy of a new service; no-op for | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tooling/scripts/backfill-video-file-types.sh | 55 | # Check if extensionless key exists | COMMENT |
| LOW | …cripts/migrate-s3-keys-extensionless/run-until-done.sh | 14 | # Check if cursor was cleared (migration complete) | COMMENT |
| LOW | crates/opensearch_query_builder/docker-compose.yml | 17 | soft: -1 # Set memlock to unlimited (no soft or hard limit) | CODE |
| LOW | crates/opensearch_query_builder/docker-compose.yml | 43 | soft: -1 # Set memlock to unlimited (no soft or hard limit) | CODE |
| LOW | services/lexical-service/scripts/test-search.sh | 3 | # Check if document ID is provided | COMMENT |
| LOW | services/lexical-service/scripts/test-cognition.sh | 3 | # Check if document ID is provided | COMMENT |
| LOW | services/lexical-service/scripts/test-markdown.sh | 3 | # Check if document ID is provided | COMMENT |
| LOW | services/lexical-service/scripts/test-plaintext.sh | 3 | # Check if document ID is provided | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | crates/folds/agent_fold/scripts/sanitize_recording.py | 110 | - Placeholder or example values (`YOUR_API_KEY`, `sk-ant-xxx...`, `<token>`) | CODE |
| HIGH | apps/docs/.agents/skills/mintlify-api/SKILL.md | 20 | Authorization: Bearer <your-api-key> | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/pptx_engine/scripts/corpus_xml.py | 168 | CODE | |
| LOW | crates/pptx_engine/scripts/corpus_xml.py | 199 | CODE | |
| LOW | crates/pptx_engine/scripts/corpus_xml.py | 220 | CODE | |
| LOW | crates/pptx_engine/scripts/corpus_xml.py | 236 | CODE | |
| LOW | crates/pptx_engine/scripts/corpus_xml.py | 314 | CODE | |
| LOW | crates/pptx_engine/scripts/corpus_xml.py | 348 | CODE | |
| LOW | crates/pptx_engine/scripts/corpus_xml.py | 398 | CODE | |
| LOW | crates/pptx_engine/scripts/corpus_xml.py | 413 | CODE | |
| LOW | crates/pptx_engine/scripts/corpus_xml.py | 424 | CODE | |
| LOW | crates/pptx_engine/scripts/corpus_xml.py | 442 | CODE | |
| LOW | crates/pptx_engine/scripts/generate_corpus.py | 199 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ks/observability/nixos/database-collector/bootstrap.py | 87 | except Exception: | CODE |
| LOW | crates/docx_engine/scripts/fetch_corpus.py | 37 | except Exception as error: # noqa: BLE001 - report and continue | CODE |
| LOW | crates/docx_engine/scripts/render_references.py | 230 | except Exception as e: # noqa: BLE001 | CODE |
| LOW | crates/pptx_engine/scripts/render_references.py | 97 | except Exception: # noqa: BLE001 - python-pptx rejects some valid wild files | CODE |
| LOW | crates/pptx_engine/scripts/render_references.py | 103 | except Exception: # noqa: BLE001 | CODE |
| LOW | crates/pptx_engine/scripts/render_references.py | 291 | except Exception as e: # noqa: BLE001 | CODE |
| LOW | services/transcription/transcriber.py | 326 | except Exception: | CODE |
| LOW | services/transcription/transcriber.py | 331 | except Exception: | CODE |
| LOW | services/transcription/transcriber.py | 499 | except Exception as exc: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ro_db_client/src/user_document_view_location/upsert.rs | 27 | // TODO: Add tests | COMMENT |
| LOW | apps/web/src/features/block-pdf/signal/location.ts | 466 | // TODO: implement specific annotation navigation, e.g. comments | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/pptx_engine/scripts/generate_corpus.py | 176 | def set_title(self, text: str, size: float | None = 28) -> None: | CODE |
| LOW | crates/pptx_engine/scripts/corpus_media.py | 120 | def set_map_mode(self, mode: int) -> None: | CODE |
| LOW | services/transcription/transcriber.py | 141 | def _update_centroid(cluster: _VoiceCluster, vector: np.ndarray) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | crates/pptx_engine/scripts/corpus_media.py | 7 | * EMF (MS-EMF): anisotropic mapping, pens/brushes (solid, null, hatched), fonts | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | apps/web/scripts/ios-release.sh | 172 | echo "Don't forget to commit the version bump ($IOS_CONF and synced plists)." | CODE |