Repository Analysis

onetimesecret/onetimesecret

Keep passwords and other sensitive information out of your chat logs and inboxes.

15.5 Moderate AI signal View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of onetimesecret/onetimesecret, a Ruby project with 2,913 GitHub stars. SynthScan v2.0 examined 1,394,714 lines of code across 5399 source files, recording 11327 pattern matches distributed across 19 syntactic categories. The overall adjusted score of 15.5 places this repository in the Moderate AI signal band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

15.5
Adjusted Score
15.5
Raw Score
100%
Time Factor
2026-08-27
Last Push
2.9K
Stars
Ruby
Language
1.4M
Lines of Code
5.4K
Files
11.3K
Pattern Hits
2026-08-29
Scan Date
0.00
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 0HIGH 4MEDIUM 4824LOW 6499

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 11327 distinct pattern matches across 19 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Decorative Section Separators4471 hits · 13689 pts
SeverityFileLineSnippetContext
MEDIUMdocker/bake.hcl23# ---------------------------------------------------------------------------COMMENT
MEDIUMdocker/bake.hcl25# ---------------------------------------------------------------------------COMMENT
MEDIUMdocker/bake.hcl71# ---------------------------------------------------------------------------COMMENT
MEDIUMdocker/bake.hcl73# ---------------------------------------------------------------------------COMMENT
MEDIUMdocker/bake.hcl102# ---------------------------------------------------------------------------COMMENT
MEDIUMdocker/bake.hcl104# ---------------------------------------------------------------------------COMMENT
MEDIUMdocker/bake.hcl118# ---------------------------------------------------------------------------COMMENT
MEDIUMdocker/bake.hcl120# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/tests/conftest.py76# ============================================================================COMMENT
MEDIUMlocales/tests/conftest.py78# ============================================================================COMMENT
MEDIUMlocales/scripts/review-locale-branches.sh20# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/review-locale-branches.sh22# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/review-locale-branches.sh40# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/review-locale-branches.sh42# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/review-locale-branches.sh49# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/review-locale-branches.sh51# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/review-locale-branches.sh58# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/review-locale-branches.sh63# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/review-locale-branches.sh136# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/review-locale-branches.sh140# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/review-locale-branches.sh167# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/review-locale-branches.sh169# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/pr-per-locale.sh456# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/pr-per-locale.sh458# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/pr-per-locale.sh466# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/pr-per-locale.sh468# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/pr-per-locale.sh65# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/pr-per-locale.sh67# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/pr-per-locale.sh119# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/pr-per-locale.sh121# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/pr-per-locale.sh155# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/pr-per-locale.sh158# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/pr-per-locale.sh190# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/pr-per-locale.sh194# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/pr-per-locale.sh214# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/pr-per-locale.sh217# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/pr-per-locale.sh250# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/pr-per-locale.sh253# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/io.py20# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/io.py22# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/tokens.py29# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/tokens.py31# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/commands/tasks.py1147# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/commands/tasks.py1149# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/commands/tasks.py1377# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/commands/tasks.py1379# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/commands/tasks.py1597# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/commands/tasks.py1599# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/commands/tasks.py86# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/commands/tasks.py88# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/commands/tasks.py883# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/commands/tasks.py885# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/commands/tasks.py393# ---------------------------------------------------------------------------STRING
MEDIUMlocales/scripts/i18n/commands/tasks.py395# ---------------------------------------------------------------------------STRING
MEDIUMlocales/scripts/i18n/commands/validate.py614# ===========================================================================COMMENT
MEDIUMlocales/scripts/i18n/commands/validate.py616# ===========================================================================COMMENT
MEDIUMlocales/scripts/i18n/commands/validate.py41# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/commands/validate.py43# ---------------------------------------------------------------------------COMMENT
MEDIUMlocales/scripts/i18n/commands/validate.py55# ===========================================================================COMMENT
MEDIUMlocales/scripts/i18n/commands/validate.py57# ===========================================================================COMMENT
4411 more matches not shown…
Over-Commented Block4511 hits · 4296 pts
SeverityFileLineSnippetContext
LOW.pre-commit-config.yaml1##COMMENT
LOW.pre-commit-config.yaml21# $ pre-commit autoupdateCOMMENT
LOW.pre-commit-config.yaml101 # so `feature/ENG-123` yields no prefix. GitHub issue numbers are theCOMMENT
LOW.pre-push-config.yaml1##COMMENT
LOW.pre-push-config.yaml21#COMMENT
LOWeslint.config.ts481COMMENT
LOWeslint.config.ts501 // tags/whitelist/removeDuplicates) were dropped; `attributes` nowCOMMENT
LOWcompose.test.yml1# compose.test.yml — service dependencies for the test lanes.COMMENT
LOWcompose.test.yml21# valkey 2163 (canonical 6379; grandfathered, not 2179)COMMENT
LOW.rubocop.yml1inherit_from: .rubocop_todo.ymlCOMMENT
LOW.rubocop.yml281 Enabled: trueCOMMENT
LOWtsconfig.json1// TypeScript Project ConfigurationCOMMENT
LOWdocker-compose.yml1##COMMENT
LOWvite.config.ts161 // compositionOnly: trueCOMMENT
LOWvite.config.ts181 // - Trade-off: Larger bundle vs. complete i18n functionalityCOMMENT
LOWvite.config.ts261 //COMMENT
LOWvitest.config.ts1// vitest.config.tsCOMMENT
LOWvitest.config.ts21// Use vitest snapshots, inline snapshots. vitest -u to update snapshots.COMMENT
LOWvitest.config.ts101 // again, and the fonts/images/css/json landed in the report as emptyCOMMENT
LOWdocker/bake.hcl1##COMMENT
LOWdocker/compose/docker-compose.simple.yml1##COMMENT
LOWdocker/compose/docker-compose.mailpit.yml1##COMMENT
LOWdocker/compose/docker-compose.mailpit.yml21# SMTP: mailpit:1025 (from within the app container)COMMENT
LOWdocker/compose/docker-compose.full.yml1##COMMENT
LOWdocker/s6/build.sh1#!/bin/bashCOMMENT
LOWdocker/entrypoints/entrypoint.sh1#!/bin/bashCOMMENT
LOWdocker/entrypoints/entrypoint.sh21#COMMENT
LOWdocker/entrypoints/healthcheck.sh1#!/bin/bashCOMMENT
LOWlocales/README.md21COMMENT
LOWlocales/scripts/derive-governance.sh1#!/usr/bin/env bashCOMMENT
LOWlocales/scripts/derive-governance.sh41# The canonical data pin is the human-readable TRANSLATION_RULES_REF value (aCOMMENT
LOWlocales/scripts/export-and-commit.sh1#!/usr/bin/env bashCOMMENT
LOWlocales/scripts/export-all.sh1#!/usr/bin/env bashCOMMENT
LOWlocales/scripts/export-all.sh21# compared (authoring metadata is metadata), and untranslated keys areCOMMENT
LOWlocales/scripts/export-all.sh121 # Echo the TOTAL line even on success. "exit 0" alone cannot distinguish aCOMMENT
LOWlocales/scripts/review-locale-branches.sh1#!/usr/bin/env bashCOMMENT
LOWlocales/scripts/pr-per-locale.sh1#!/usr/bin/env bashCOMMENT
LOWlocales/scripts/pr-per-locale.sh21# instincts.COMMENT
LOWlocales/scripts/pr-per-locale.sh41# that materializes each branch and writes per-localeCOMMENT
LOWlocales/scripts/branch-per-locale.sh1#!/usr/bin/env bashCOMMENT
LOWlocales/scripts/create-all.sh1#!/usr/bin/env bashCOMMENT
LOWlocales/scripts/create-all.sh21# going, processes every other locale, lists the blocked ones at the end, andCOMMENT
LOWlocales/scripts/i18n/db.py41 agents tolerate lock contention without caller-side retry logic.COMMENT
LOWlocales/scripts/i18n/db.py61 conn.execute("PRAGMA journal_mode=WAL")COMMENT
LOWlocales/scripts/i18n/io.py21# The entry modelCOMMENT
LOWlocales/scripts/i18n/commands/tasks.py1601# writes are clean (AGENT_TRANSLATION_PROTOCOL.md "Audit stage"). This reads theCOMMENT
LOWlocales/scripts/i18n/commands/validate.py41# ---------------------------------------------------------------------------COMMENT
LOW.zed/tasks.json1// Worktree setup tasks, stored in this project's tasks.json.COMMENT
LOWtests/lanes/support/provision_rabbitmq_vhost.rb1# tests/lanes/support/provision_rabbitmq_vhost.rbCOMMENT
LOWtests/lanes/support/provision_rabbitmq_vhost.rb21# per run the way the rest of that file's queues are. Separate vhosts is whatCOMMENT
LOWtests/lanes/support/provision_rabbitmq_vhost.rb41require 'net/http'COMMENT
LOWtests/lanes/support/provision_pg_database.rb1# tests/lanes/support/provision_pg_database.rbCOMMENT
LOWtests/lanes/support/provision_pg_database.rb21# what migration 001_initial.rb already does on every fresh database.COMMENT
LOWtests/lanes/support/provision_pg_database.rb61 class << selfCOMMENT
LOWetc/defaults/config.defaults.yaml1# etc/defaults/config.defaults.yamlCOMMENT
LOWetc/defaults/config.defaults.yaml21 # Legal & policy URLs (first-class config, #4278)COMMENT
LOWetc/defaults/config.defaults.yaml41 security_url: <%= (v = ENV['SECURITY_URL'].to_s).empty? ? nil : v.to_json %>COMMENT
LOWetc/defaults/config.defaults.yaml61 # 1. matching_cidrs - Client IP must match one of these subnetsCOMMENT
LOWetc/defaults/config.defaults.yaml81 #COMMENT
LOWetc/defaults/config.defaults.yaml101 # so the canonical and custom-domain defaults stay decoupled: a customCOMMENT
4451 more matches not shown…
Self-Referential Comments222 hits · 684 pts
SeverityFileLineSnippetContext
MEDIUMcompose.test.yml30# This file is where test-service images are pinned. The one remainingCOMMENT
MEDIUMspec/unit/onetime/boot/initializer_spec.rb289 # Define a new class - should NOT be in registryCOMMENT
MEDIUMspec/unit/onetime/logic/guest_route_gating_spec.rb16 # Create a test class that includes the moduleCOMMENT
MEDIUMspec/unit/onetime/logic/require_entitlement_spec.rb9# This method is defined in Onetime::Logic::Base and is used to gateCOMMENT
MEDIUM…/models/organization/chores/standardize_planid_spec.rb21 # Create a mock logger that accepts SemanticLogger's (message, hash) signatureCOMMENT
MEDIUMspec/unit/onetime/operations/domains/remove_spec.rb235 # Create a real, fully-persisted canonical domain and register it for cleanup.COMMENT
MEDIUM…ain_validation/sender_strategies/base_strategy_spec.rb9 # Create a concrete subclass for testing since BaseStrategy has abstract methodsCOMMENT
MEDIUMspec/unit/onetime/jobs/trace_propagation_spec.rb30 # Define a minimal Sentry stub for tests that need it.COMMENT
MEDIUMspec/unit/onetime/jobs/scheduled_job_spec.rb121 # Define a proper subclassCOMMENT
MEDIUM…ec/unit/onetime/initializers/setup_diagnostics_spec.rb33 # Define a minimal Sentry constant if it doesn't exist to satisfy verify_partial_doublesCOMMENT
MEDIUMspec/unit/billing/plan_validator_spec.rb7# This module implements catalog-first plan_id validation with fail-closed behavior.COMMENT
MEDIUMspec/integration/full/postgres_infrastructure_spec.rb154 # Create a test account using elevated connectionCOMMENT
MEDIUMspec/integration/full/password_migration_spec.rb151 # Create a Rodauth account WITHOUT password hashCOMMENT
MEDIUMspec/integration/full/admin_interface_spec.rb294 # Create an admin userCOMMENT
MEDIUMspec/integration/full/admin_interface_spec.rb541 # Create a secret as a regular userCOMMENT
MEDIUMspec/integration/full/admin_interface_spec.rb557 # Create a secretCOMMENT
MEDIUMspec/integration/full/hooks/account_lifecycle_spec.rb252 # Define the methods on the module so verify_partial_doubles is satisfiedCOMMENT
MEDIUM…ec/integration/full/database_triggers/postgres_spec.rb517 # Create an active sessionCOMMENT
MEDIUMspec/integration/all/lazy_organization_creation_spec.rb160 # Create a new customerCOMMENT
MEDIUMspec/integration/all/entitlement_preview_spec.rb30 # Create a mock colonel customerCOMMENT
MEDIUMspec/integration/all/entitlement_preview_spec.rb41 # Create a mock organizationCOMMENT
MEDIUMspec/integration/all/config/after_load_spec.rb507 # Define a let block for a base configuration object.COMMENT
MEDIUMspec/integration/all/jobs/rabbitmq_publishing_spec.rb72 # Create a real connection pool for testsCOMMENT
MEDIUMspec/integration/all/jobs/rabbitmq_publishing_spec.rb247 # Create a pool that will failCOMMENT
MEDIUMspec/integration/all/jobs/workers/base_worker_spec.rb44 # Create a test worker class that includes both Sneakers::Worker and BaseWorkerCOMMENT
MEDIUM…/integration/all/jobs/workers/sneakers_harness_spec.rb194 # Create a test worker class for isolated testingCOMMENT
MEDIUMspec/cli/worker_command_spec.rb350 # Create a mock worker class for testingCOMMENT
MEDIUMspec/cli/cli_spec_helper.rb212 # Create a migration class with methods that can be mockedCOMMENT
MEDIUMspec/support/factories/auth_account_factory.rb51 # Create a verified account with passwordCOMMENT
MEDIUMspec/support/factories/auth_account_factory.rb81 # Create an unverified account (pending email verification)COMMENT
MEDIUMspec/support/factories/auth_account_factory.rb152 # Create an active session for an accountCOMMENT
MEDIUMspec/support/helpers/migration_test_helpers.rb31 # Create a fresh database connection for testing migrationsCOMMENT
MEDIUMspec/support/helpers/migration_test_helpers.rb133 # Create a database with partial migration state (migrated to specific version)COMMENT
MEDIUMspec/api/v2/entitlement_enforcement_spec.rb156 # Create a test secretCOMMENT
MEDIUMspec/api/account/get_permissions_spec.rb64 # Create a custom domain for the organizationCOMMENT
MEDIUMscripts/api-validation/bin/v1-capture.sh331# Create a secret, then retrieve itCOMMENT
MEDIUMscripts/api-validation/bin/v1-capture.sh408# Create a secret to burnCOMMENT
MEDIUMscripts/api-validation/bin/v2-capture.sh209# Create a secret, then retrieve/reveal itCOMMENT
MEDIUMscripts/api-validation/bin/v2-capture.sh300# Create a secret for receipt update testCOMMENT
MEDIUMscripts/api-validation/bin/v2-capture.sh321# Create a secret to burn via /receipt/ pathCOMMENT
MEDIUMtry/unit/error_handler_try.rb90# Create a new test key for this testCOMMENT
MEDIUMtry/unit/v3_feedback_try.rb30# Create a customer with anonymous role for testingCOMMENT
MEDIUMtry/unit/signup_validation_try.rb58## Create a SignupConfig and verify it persistsCOMMENT
MEDIUMtry/unit/boot/setup_i18n_security_try.rb57# Create a test class that includes JsonBackend for isolated testingCOMMENT
MEDIUMtry/unit/boot/setup_i18n_security_try.rb65# Create a valid test locale fileCOMMENT
MEDIUM…unit/config/config_serializer_tenant_resolution_try.rb87# Create a test CustomDomain + CustomDomain::SsoConfig for tenant resolution tests.COMMENT
MEDIUMtry/unit/config/passphrase_validation_try.rb11# Create a mock secret action for testingCOMMENT
MEDIUMtry/unit/security/invite_token_validation_try.rb40# Create a valid pending invitationCOMMENT
MEDIUMtry/unit/auth/organization_header_try.rb44# Create a third organization the owner is NOT a member ofCOMMENT
MEDIUMtry/unit/auth/organization_loader_readonly_try.rb38# Create a second customer WITH an organization (for contrast tests)COMMENT
MEDIUMtry/unit/auth/organization_loader_fallthrough_try.rb28# Create a custom domain and register it in the display_domain_index indexCOMMENT
MEDIUMtry/unit/auth/organization_loader_fallthrough_try.rb31# Create a domain-scoped member who can only access a *different* domainCOMMENT
MEDIUM…/unit/auth/operations/accept_invitation_logging_try.rb39# Create a capture array at module levelCOMMENT
MEDIUMtry/unit/logic/base_try.rb29# Create a concrete test class since Base is abstractCOMMENT
MEDIUMtry/unit/logic/guest_route_gating_try.rb43 # Create a mutable copy of the configCOMMENT
MEDIUMtry/unit/logic/guest_route_gating_behavior_try.rb46 # Create a mutable copy of the configCOMMENT
MEDIUMtry/unit/logic/secrets/reveal_secret_try.rb24# Define a lambda to create and return a new receipt instanceCOMMENT
MEDIUMtry/unit/logic/secrets/generate_secret_try.rb64## Create a secret for viewing testsCOMMENT
MEDIUMtry/unit/logic/secrets/show_receipt_try.rb24# Define a lambda to create and return a new receipt instanceCOMMENT
MEDIUMtry/unit/logic/secrets/show_secret_try.rb24# Define a lambda to create and return a new receipt instanceCOMMENT
162 more matches not shown…
Hyper-Verbose Identifiers638 hits · 623 pts
SeverityFileLineSnippetContext
LOWlocales/tests/test_utils.py36 def test_skips_non_string_values(self):CODE
LOWlocales/tests/test_utils.py55 def test_preserves_existing_structure(self):CODE
LOWlocales/tests/test_utils.py60 def test_strict_mode_raises_on_conflict(self):CODE
LOWlocales/tests/test_utils.py66 def test_non_strict_mode_overwrites(self):CODE
LOWlocales/tests/test_utils.py81 def test_returns_empty_for_missing_file(self, tmp_path):CODE
LOWlocales/tests/test_utils.py85 def test_returns_empty_for_invalid_json(self, tmp_path, capsys):CODE
LOWlocales/tests/test_utils.py97 def test_saves_json_with_formatting(self, tmp_path):CODE
LOWlocales/tests/test_utils.py103 def test_creates_parent_directories(self, tmp_path):CODE
LOWlocales/tests/test_db.py12 def test_creates_database_file(self, tmp_db_path: Path, schema_sql: str):CODE
LOWlocales/tests/test_db.py22 def test_executes_schema_creates_table(self, tmp_db_path: Path, schema_sql: str):CODE
LOWlocales/tests/test_db.py36 def test_schema_is_idempotent(self, tmp_db_path: Path, schema_sql: str):CODE
LOWlocales/tests/test_db.py60 def test_error_on_invalid_sql(self, tmp_db_path: Path):CODE
LOWlocales/tests/test_db.py73 def test_dump_produces_valid_sql(self, hydrated_db_with_data: Path):CODE
LOWlocales/tests/test_db.py92 def test_roundtrip_preserves_data(self, hydrated_db_with_data: Path):CODE
LOWlocales/tests/test_db.py173 def test_unique_constraint_on_locale_file_key(self, db_connection):CODE
LOWlocales/tests/test_db.py186 def test_default_status_is_pending(self, db_connection):CODE
LOWlocales/tests/test_db.py200 def test_created_at_has_default(self, db_connection):CODE
LOWlocales/tests/test_db.py214 def test_required_columns_not_null(self, db_connection):CODE
LOWlocales/tests/test_db.py231 def test_optional_columns_can_be_null(self, db_connection):CODE
LOWlocales/tests/test_generate_tasks.py27 def test_walks_nested_json_keys(self):CODE
LOWlocales/tests/test_generate_tasks.py70 def test_handles_empty_objects(self):CODE
LOWlocales/tests/test_generate_tasks.py78 def test_handles_nested_empty_objects(self):CODE
LOWlocales/tests/test_generate_tasks.py93 def test_skips_non_string_values(self):CODE
LOWlocales/tests/test_generate_tasks.py112 def test_detects_missing_file(self, tmp_path: Path):CODE
LOWlocales/tests/test_generate_tasks.py131 def test_detects_missing_keys(self, tmp_path: Path):CODE
LOWlocales/tests/test_generate_tasks.py163 def test_detects_empty_translations(self, tmp_path: Path):CODE
LOWlocales/tests/test_generate_tasks.py183 def test_ignores_existing_translations(self, tmp_path: Path):CODE
LOWlocales/tests/test_generate_tasks.py220 def test_export_generates_correct_insert_sql(self, hydrated_db: Path):CODE
LOWlocales/tests/test_generate_tasks.py248 def test_export_escapes_single_quotes_via_sqlite_quote(self, hydrated_db: Path):CODE
LOWlocales/tests/test_generate_tasks.py269 def test_batch_defaults_to_today(self, mock_src_locales: Path, tmp_path: Path):CODE
LOWlocales/tests/test_generate_tasks.py332 def test_exported_sql_is_executable(self, hydrated_db: Path):CODE
LOWlocales/tests/test_generate_tasks.py369 def test_dry_run_does_not_write(self, mock_src_locales: Path, tmp_path: Path):CODE
LOWlocales/tests/test_generate_tasks.py403 def test_dry_run_shows_task_count(self, mock_src_locales: Path, tmp_path: Path, capsys):CODE
LOWlocales/tests/test_generate_tasks.py440 def test_returns_empty_dict_for_missing_file(self, tmp_path: Path):CODE
LOWlocales/tests/test_generate_tasks.py446 def test_returns_empty_dict_for_invalid_json(self, tmp_path: Path):CODE
LOWlocales/tests/test_generate_tasks.py496 def test_creates_file_if_not_exists(self, tmp_path: Path):CODE
LOWlocales/scripts/tests/test_derive_governance.py62 def test_each_gate_declares_a_shape_valid_pin(self) -> None:CODE
LOWlocales/scripts/tests/test_derive_governance.py75 def test_single_canonical_pin_across_gates(self) -> None:CODE
LOWlocales/scripts/tests/test_derive_governance.py85 def test_field_re_skips_comments_and_accepts_uppercase(self) -> None:CODE
LOWlocales/scripts/tests/test_derive_governance.py98 def test_script_reads_the_gate_pin(self) -> None:CODE
LOWlocales/scripts/tests/test_derive_governance.py117 def test_rules_ref_override_is_honored(self) -> None:CODE
LOWlocales/scripts/tests/test_derive_governance.py131 def test_malformed_rules_ref_is_rejected(self) -> None:CODE
LOWlocales/scripts/tests/test_register_coverage.py79 def test_enforcing_locale_reports_token_count(self) -> None:CODE
LOWlocales/scripts/tests/test_register_coverage.py85 def test_empty_forbidden_tokens_warns(self) -> None:CODE
LOWlocales/scripts/tests/test_register_coverage.py92 def test_empty_forbidden_tokens_does_not_change_exit_code(self) -> None:CODE
LOWlocales/scripts/tests/test_register_coverage.py97 def test_missing_register_block_warns(self) -> None:CODE
LOWlocales/scripts/tests/test_register_coverage.py102 def test_fail_on_empty_is_opt_in(self) -> None:CODE
LOWlocales/scripts/tests/test_register_coverage.py106 def test_github_format_emits_annotations(self) -> None:CODE
LOWlocales/scripts/tests/test_register_coverage.py120 def test_unreadable_model_is_a_config_error(self) -> None:CODE
LOWlocales/scripts/tests/test_register_coverage.py130 def test_pronoun_possessive_casing_conflict_warns(self) -> None:CODE
LOWlocales/scripts/tests/test_register_coverage.py155 def test_consistent_casing_does_not_warn(self) -> None:CODE
LOWlocales/scripts/tests/test_register_coverage.py172 def test_malformed_token_entries_do_not_count_as_enforcement(self) -> None:CODE
LOWlocales/scripts/tests/test_register_coverage.py208 def test_all_malformed_tokens_is_not_enforcing(self) -> None:CODE
LOWlocales/scripts/tests/test_register_coverage.py230 def test_register_spec_prohibitions_counted_as_unenforced(self) -> None:CODE
LOWlocales/scripts/tests/test_i18n_cli.py942 def test_dry_run_previews_the_refusal(self) -> None:CODE
LOWlocales/scripts/tests/test_i18n_cli.py950 def test_reopen_without_apply_is_rejected(self) -> None:CODE
LOWlocales/scripts/tests/test_i18n_cli.py955 def test_completed_row_without_translations_does_not_wedge_create(CODE
LOWlocales/scripts/tests/test_i18n_cli.py127 def test_overrides_redirect_every_surface(self) -> None:CODE
LOWlocales/scripts/tests/test_i18n_cli.py160 def test_compile_is_deterministic(self) -> None:CODE
LOWlocales/scripts/tests/test_i18n_cli.py173 def test_compile_output_is_valid_nonempty_json(self) -> None:CODE
578 more matches not shown…
Fake / Example Data497 hits · 564 pts
SeverityFileLineSnippetContext
LOWlocales/scripts/tests/test_i18n_cli.py1966 "placeholder": "{count}",CODE
LOWlocales/db/schema.sql91 'placeholder', -- Variable/placeholder problemsCODE
LOWspec/unit/onetime/sso_provider/registry_spec.rb97 expect(value).to eq('placeholder'),CODE
LOWspec/unit/onetime/sso_provider/registry_spec.rb98 "definition #{defn[:key].inspect} placeholder option #{opt} must be 'placeholder'"CODE
LOWspec/unit/onetime/mail/mailer_spec.rb108 to_email: { to: 'user@example.com', from: global_from, subject: 'Test', text_body: 'body' },CODE
LOWspec/unit/onetime/mail/mailer_spec.rb130 described_class.deliver(:secret_link, { recipient: 'user@example.com' }, sender_config: mock_sender_config)CODE
LOWspec/unit/onetime/mail/mailer_spec.rb136 described_class.deliver(:secret_link, { recipient: 'user@example.com' })CODE
LOWspec/unit/onetime/mail/mailer_spec.rb152 { to: 'user@example.com', from: from, subject: 'Test', text_body: 'body' }CODE
LOWspec/unit/onetime/mail/mailer_spec.rb163 { to: 'user@example.com', from: from, subject: 'Test', text_body: 'body' }CODE
LOWspec/unit/onetime/mail/mailer_spec.rb174 { to: 'user@example.com', from: from, subject: 'Test', text_body: 'body' }CODE
LOWspec/unit/onetime/mail/mailer_spec.rb199 { to: 'user@example.com', from: from, subject: 'Test', text_body: 'body' }CODE
LOWspec/unit/onetime/mail/mailer_spec.rb224 { to: 'user@example.com', from: from, subject: 'Test', text_body: 'body' }CODE
LOWspec/unit/onetime/mail/templates_i18n_spec.rb84 recipient: 'user@example.com',CODE
LOWspec/unit/onetime/mail/templates_i18n_spec.rb121 let(:data) { { recipient: 'user@example.com' } }CODE
LOWspec/unit/onetime/mail/templates_i18n_spec.rb207 expect(context.recipient).to eq('user@example.com')CODE
LOWspec/unit/onetime/mail/templates_i18n_spec.rb379 email_address: 'user@example.com',CODE
LOWspec/unit/onetime/mail/feedback_spec.rb118 { 'value' => 'user@example.com', 'reason' => 'hard_bounce' },CODE
LOWspec/unit/onetime/mail/feedback_spec.rb120 { 'value' => '@example.org', 'reason' => 'manual' }, # extension-ish, has @CODE
LOWspec/unit/onetime/mail/feedback_spec.rb127 expect(emails).to include('user@example.com')CODE
LOWspec/unit/onetime/mail/feedback_spec.rb191 { 'email_address' => 'user@example.com', 'reason' => 'bounce' },CODE
LOWspec/unit/onetime/mail/feedback_spec.rb236 '/suppression/view', { 'email_address' => 'user@example.com' },CODE
LOWspec/unit/onetime/mail/feedback_spec.rb242 { 'email_address' => 'user@example.com', 'reason' => 'spam',CODE
LOWspec/unit/onetime/mail/feedback_spec.rb248 result = fetcher.lookup('user@example.com')CODE
LOWspec/unit/onetime/mail/feedback_spec.rb263 expect(fetcher.lookup('user@example.com')).to eq(CODE
LOWspec/unit/onetime/mail/feedback_spec.rb271 expect(fetcher.lookup('user@example.com')).to eq(CODE
LOWspec/unit/onetime/models/sso_link_verification_spec.rb20 email: overrides.fetch(:email, 'user@example.com'),CODE
LOWspec/unit/onetime/models/sso_link_verification_spec.rb57 expect(loaded.email).to eq('user@example.com')CODE
LOWspec/unit/onetime/models/sso_link_verification_spec.rb84 expect(issue.to_display).to eq(provider: 'google', email: 'user@example.com')CODE
LOW…main/chores/migrate_incoming_secrets_to_config_spec.rb206 { 'email' => 'admin@example.com', 'name' => 'Admin' },CODE
LOWspec/unit/onetime/operations/domains/remove_spec.rb52 let(:org) { double('Organization', display_name: 'Acme Inc', remove_domain: nil) }CODE
LOWspec/unit/onetime/operations/domains/remove_spec.rb81 expect(result.org_name).to eq('Acme Inc')CODE
LOW…ain_validation/sender_strategies/base_strategy_spec.rb1220 config = double('mailer_config', from_address: 'user@example.com', domain_id: 'cd:1')CODE
LOWspec/unit/onetime/jobs/publisher_spec.rb545 raw_email = { to: 'user@example.com', from: 'noreply@example.com', subject: 'Test', body: 'Body' }CODE
LOWspec/unit/onetime/jobs/publisher_spec.rb483 raw_email = { to: 'user@example.com', from: 'noreply@example.com', subject: 'Test', body: 'Body' }CODE
LOW…netime/jobs/enqueue_email_locale_normalization_spec.rb79 operation.instance_variable_set(:@email, 'user@example.com')CODE
LOW…netime/jobs/enqueue_email_locale_normalization_spec.rb139 customer = double('Customer', anonymous?: false, email: 'user@example.com', extid: 'ur_user_extid')CODE
LOW…netime/jobs/enqueue_email_locale_normalization_spec.rb149 logic.send(:send_feedback, 'admin@example.com', customer, 'hello world')CODE
LOWspec/integration/full/admin_interface_spec.rb51 email: "user@example.com",CODE
LOWspec/integration/full/admin_interface_spec.rb296 email: "admin@example.com",CODE
LOWspec/integration/all/entitlement_preview_spec.rb364 custid: 'user@example.com',CODE
LOWspec/integration/all/authentication_security_spec.rb279 { login: 'user@example.com', password: nil },CODE
LOWspec/integration/all/mail/template_rendering_spec.rb922 organization_name: 'Acme Inc',CODE
LOWspec/integration/all/mail/template_rendering_spec.rb928 organization_name: 'Acme Inc',CODE
LOWspec/integration/all/mail/template_rendering_spec.rb929 removed_by: 'admin@example.com',CODE
LOWspec/integration/all/mail/template_rendering_spec.rb933 organization_name: 'Acme Inc',CODE
LOWspec/integration/all/mail/template_rendering_spec.rb934 deleted_by: 'admin@example.com',CODE
LOW…tegration/all/operations/dispatch_notification_spec.rb60 email: 'user@example.com',CODE
LOW…tegration/all/operations/dispatch_notification_spec.rb118 addressee: { email: 'user@example.com' },CODE
LOW…tegration/all/operations/dispatch_notification_spec.rb149 to: 'user@example.com',CODE
LOW…tegration/all/operations/dispatch_notification_spec.rb246 addressee: { custid: custid, email: 'user@example.com' },CODE
LOWspec/integration/all/jobs/rabbitmq_publishing_spec.rb221 to: 'user@example.com',CODE
LOWspec/integration/all/jobs/rabbitmq_publishing_spec.rb238 expect(received[:email][:to]).to eq('user@example.com')CODE
LOWspec/integration/all/jobs/workers/email_worker_spec.rb120 recipient: 'user@example.com',CODE
LOWspec/integration/all/jobs/workers/email_worker_spec.rb134 recipient: 'user@example.com',CODE
LOWspec/integration/all/jobs/workers/email_worker_spec.rb148 recipient: 'user@example.com',CODE
LOWspec/integration/all/jobs/workers/email_worker_spec.rb161 recipient: 'user@example.com',CODE
LOWspec/integration/all/jobs/workers/email_worker_spec.rb175 recipient: 'user@example.com',CODE
LOWspec/integration/all/jobs/workers/email_worker_spec.rb188 recipient: 'user@example.com',CODE
LOWspec/integration/all/jobs/workers/email_worker_spec.rb202 recipient: 'user@example.com',CODE
LOWspec/integration/all/jobs/workers/email_worker_spec.rb215 recipient: 'user@example.com',CODE
437 more matches not shown…
Redundant / Tautological Comments332 hits · 525 pts
SeverityFileLineSnippetContext
LOWdocker/entrypoints/entrypoint.sh35# Set PORT to the existing value or default to 3000COMMENT
LOWdocker/entrypoints/entrypoint.sh79# Check if BUNDLE_INSTALL is set to "true" (case-insensitive)COMMENT
LOWdocker/entrypoints/entrypoint.sh130# Check if no arguments were provided to the scriptCOMMENT
LOWlocales/scripts/export-and-commit.sh74 # Check if there are actual changesCOMMENT
LOWlocales/scripts/branch-per-locale.sh80 # Check if branch already existsCOMMENT
LOWlocales/scripts/i18n/commands/store.py318 # Check if this is a SELECT querySTRING
LOWlocales/scripts/i18n/commands/validate.py604 # Print resultsCOMMENT
LOWlocales/scripts/i18n/commands/validate.py379 # Check if English file existsCOMMENT
LOWlocales/scripts/i18n/commands/validate.py1030 # Output resultsCOMMENT
LOWspec/integration/full/advanced_auth_mode_spec.rb296 # Check if session cookie is setCOMMENT
LOWspec/integration/full/password_migration_spec.rb166 # Check if password hash exists for accountCOMMENT
LOWspec/integration/full/pending_federation_spec.rb198 # Set subscription_period_end to past (expired)COMMENT
LOWspec/integration/full/hooks/account_deletion_spec.rb149 # Check if we have active sessions (may not always be created)COMMENT
LOWspec/integration/all/jobs/rabbitmq_publishing_spec.rb45 # Check if RabbitMQ is available before running testsCOMMENT
LOWspec/support/auth_mode_helpers.rb356 # Check if a mock is currently installedCOMMENT
LOWspec/support/postgres_mode_suite_database.rb60 # Check if PostgreSQL is available for testingCOMMENT
LOWspec/support/postgres_mode_suite_database.rb89 # Check if PostgreSQL is available - return early if not (specs will be skipped)COMMENT
LOWspec/support/postgres_mode_suite_database.rb288 # Check if we need elevated privileges for migrationsCOMMENT
LOWspec/support/helpers/migration_test_helpers.rb100 # Check if a table exists in the databaseCOMMENT
LOWspec/support/helpers/migration_test_helpers.rb363 # Check if PostgreSQL functions exist (migration 003)COMMENT
LOWspec/support/helpers/migration_test_helpers.rb376 # Check if PostgreSQL triggers exist (migration 004)COMMENT
LOWspec/support/helpers/migration_test_helpers.rb389 # Check if PostgreSQL views exist (migration 005)COMMENT
LOWscripts/corporate-branch-report.sh98 # Check if merge base matches a branch tip (like develop)COMMENT
LOWscripts/corporate-branch-report.sh142# Check if we have any branches to showCOMMENT
LOWscripts/corporate-branch-report.sh176 # Check if b1's commits are a prefix of b2's commits (b1 is subsumed by b2)COMMENT
LOWscripts/validate_display_domain_index.rb102 # Check if domain object existsCOMMENT
LOWscripts/validate_display_domain_index.rb145 # Check if this domain has a corresponding index entryCOMMENT
LOWscripts/validate_org_domain_membership.rb108 # Check if domain hash exists at allCOMMENT
LOWscripts/validate_org_domain_membership.rb155 # Check if the referenced organization actually existsCOMMENT
LOWscripts/validate_org_domain_membership.rb162 # Check if domain is in the org's ZSETCOMMENT
LOWscripts/build-and-deploy.py546 # Check if this revision has a build configCOMMENT
LOWscripts/corporate-branch-report.py151 # Check if any branch points to this commitCOMMENT
LOWscripts/check-migration-status.sh34# Check if config directory is writable (for migrations that modify config)COMMENT
LOWscripts/check-migration-status.sh47# Check if a specific migration is neededCOMMENT
LOWscripts/check-migration-status.sh68# Check if any migration is neededCOMMENT
LOWscripts/tests/verify-sentry-build.sh59# Check if we're in the project rootCOMMENT
LOW.github/workflows/debug-oci.yml129 # Check if container is still runningCOMMENT
LOW.github/scripts/detect-ci-flags.sh40# Output resultsCOMMENT
LOW.github/scripts/update-version.sh88 # Check if jq is availableCOMMENT
LOW.github/scripts/compute-path-filter-outputs.sh56# Output resultsCOMMENT
LOW.github/actions/wait-for-http-service/action.yml135 # Check if status matches expectationCOMMENT
LOWtry/unit/error_handler_try.rb67@redis.expire(@test_key, 1000) # Set TTL to 1000 secondsCODE
LOWtry/unit/config/passphrase_validation_try.rb43 # Check if passphrase is requiredCOMMENT
LOWtry/unit/config/passphrase_options_try.rb12## Check if site config existsCOMMENT
LOWtry/unit/config/passphrase_options_try.rb20## Check if passphrase config existsCOMMENT
LOWtry/unit/mail/templates_trial_expiring_try.rb18# Check if billing is enabled - tests require itCOMMENT
LOWtry/unit/mail/templates_subscription_changed_try.rb18# Check if billing is enabled - tests require itCOMMENT
LOWtry/unit/models/organization_member_debug_try.rb32## Check if customer was added to org.membersCOMMENT
LOWtry/unit/models/organization_member_debug_try.rb36## Check if customer.objid is in org.members (using wrapper that handles serialization)COMMENT
LOWtry/unit/models/organization_member_debug_try.rb40## Check if org has add_members_instance methodCOMMENT
LOWtry/integration/check_jobqueue_live_try.rb25# Check if RabbitMQ is availableCOMMENT
LOWtry/integration/auth/internal_request_hook_proof_try.rb43# Check if account was created in SQLCOMMENT
LOWtry/integration/auth/internal_request_hook_proof_try.rb53# Check if Customer was created in Redis (by the hook)COMMENT
LOWtry/integration/api/invite/show_invite_enriched_try.rb190# Set invited_at to 8 days ago to trigger expiration (default TTL is 7 days)COMMENT
LOWtry/support/test_helpers.rb174 # Check if the request has an authenticated user in sessionCOMMENT
LOWtry/support/test_helpers.rb179 # Check if authentication strategy just executed and succeededCOMMENT
LOWtry/support/test_helpers.rb184 # Check if the request is anonymous (no user in session)COMMENT
LOWtry/support/test_helpers.rb189 # Check if the user has a specific roleCOMMENT
LOWtry/support/test_helpers.rb206 # Check if the user has a specific permissionCOMMENT
LOWtry/support/test_helpers.rb226 # Check if the user has any of the specified rolesCOMMENT
272 more matches not shown…
Example Usage Blocks214 hits · 331 pts
SeverityFileLineSnippetContext
LOW.pre-commit-config.yaml13# Usage:COMMENT
LOW.pre-push-config.yaml15# Usage:COMMENT
LOWdocker/bake.hcl4# Usage:COMMENT
LOWdocker/s6/build.sh5# Usage:COMMENT
LOWdocker/entrypoints/entrypoint.sh6# Usage:COMMENT
LOWlocales/scripts/derive-governance.sh16# Usage:COMMENT
LOWlocales/scripts/export-and-commit.sh8# Usage:COMMENT
LOWlocales/scripts/export-all.sh36# Usage:COMMENT
LOWlocales/scripts/review-locale-branches.sh12# Usage:COMMENT
LOWlocales/scripts/pr-per-locale.sh23# Usage:COMMENT
LOWlocales/scripts/branch-per-locale.sh6# Usage:COMMENT
LOWlocales/scripts/create-all.sh33# Usage:COMMENT
LOWspec/integration/integration_spec_helper.rb103# Usage:COMMENT
LOWspec/support/postgres_setup_check.rb10# Usage:COMMENT
LOWspec/support/postgres_mode_suite_database.rb27# Usage:COMMENT
LOWspec/support/full_mode_suite_database.rb21# Usage:COMMENT
LOWspec/support/amqp_stubs.rb11# Usage:COMMENT
LOWspec/support/shared_contexts/rack_test_context.rb8# Usage:COMMENT
LOWspec/support/shared_contexts/clean_auth_state.rb24# Usage:COMMENT
LOWspec/support/shared_contexts/auth_rack_test_context.rb10# Usage:COMMENT
LOWspec/support/shared_contexts/view_test_context.rb8# Usage:COMMENT
LOWspec/support/factories/auth_account_factory.rb13# Usage:COMMENT
LOWspec/support/helpers/migration_test_helpers.rb19# Usage:COMMENT
LOWspec/support/shared_examples/auth_routes_examples.rb7# Usage:COMMENT
LOWspec/support/puma_integration/server_helper.rb8# Usage:COMMENT
LOWscripts/check-shell-lint.sh23# Usage:COMMENT
LOWscripts/validate_display_domain_index.rb18# Usage:COMMENT
LOWscripts/validate_org_domain_membership.rb19# Usage:COMMENT
LOWscripts/api_validation.rb17# Usage:COMMENT
LOWscripts/update-file-headers.rb8# Usage:COMMENT
LOWscripts/favicon_gen.rb12# Usage:COMMENT
LOWscripts/adr-lint.rb6# Usage:COMMENT
LOWscripts/detect_phantom_receipts.rb26# Usage:COMMENT
LOWscripts/check-migration-status.sh12# Usage:COMMENT
LOWscripts/validate_orphan_domain_zset_leaks.rb17# Usage:COMMENT
LOWscripts/install-tests/proof-of-life.sh26# Usage:COMMENT
LOWscripts/install-tests/run.sh23# Usage:COMMENT
LOWscripts/install-tests/secret-rotation.sh24# Usage:COMMENT
LOWscripts/install-tests/baremetal-boot.sh31# Usage:COMMENT
LOWscripts/tests/run.sh7# Usage:COMMENT
LOWscripts/tests/verify-sentry-build.sh13# Usage:COMMENT
LOWscripts/tests/lib/assert.sh28# Usage:COMMENT
LOWscripts/host-seam/release-sweep.sh25# Usage:COMMENT
LOWscripts/host-seam/topology-probe.sh39# Usage:COMMENT
LOWscripts/api-validation/bin/v2-diff.sh5# Usage:COMMENT
LOWscripts/api-validation/bin/v1-diff.sh5# Usage:COMMENT
LOWscripts/api-validation/bin/v2-run-all.sh5# Usage:COMMENT
LOWscripts/api-validation/bin/v1-capture.sh5# Usage:COMMENT
LOWscripts/api-validation/bin/v2-capture.sh5# Usage:COMMENT
LOWscripts/api-validation/bin/run-all.sh5# Usage:COMMENT
LOW.github/scripts/aggregate-test-results.sh8# Usage:COMMENT
LOW.github/scripts/detect-ci-flags.sh9# Usage:COMMENT
LOW.github/scripts/clean_databases.rb7# Usage:COMMENT
LOW.github/scripts/update-version.sh5# Usage:COMMENT
LOW.github/scripts/generate-test-summary.sh8# Usage:COMMENT
LOW.github/actions/generate-test-secrets/action.yml31# Usage:COMMENT
LOW.github/actions/test-docker-container/action.yml12# Usage:COMMENT
LOW.github/actions/run-test-lane/action.yml17# Usage:COMMENT
LOW.github/actions/setup-node-env/action.yml18# Usage:COMMENT
LOW.github/actions/download-frontend-assets/action.yml13# Usage:COMMENT
154 more matches not shown…
Structural Annotation Overuse124 hits · 245 pts
SeverityFileLineSnippetContext
LOWspec/integration/full/password_migration_spec.rb189 # Step 2: Create Rodauth account WITHOUT password hashCOMMENT
LOWspec/integration/full/password_migration_spec.rb198 # Step 3: POST to /auth/login with Redis passwordCOMMENT
LOWspec/integration/full/password_migration_spec.rb204 # Step 4: Verify login succeeds (200 or 3xx redirect)COMMENT
LOWspec/integration/full/password_migration_spec.rb208 # Step 5: Verify password hash now exists in account_password_hashesCOMMENT
LOWspec/integration/all/csrf_enforcement_spec.rb620 # Step 1: GET the signin page to establish a session and receive HTMLCOMMENT
LOWspec/integration/all/csrf_enforcement_spec.rb629 # Step 2: Parse the HTML to extract shrimp from __BOOTSTRAP_ME__COMMENT
LOWspec/integration/all/csrf_enforcement_spec.rb639 # Step 3: POST /signin with session cookie + extracted shrimpCOMMENT
LOWspec/integration/all/csrf_enforcement_spec.rb649 # Step 4: Assert NOT 403 -- the token from the page must be acceptedCOMMENT
LOW…specs/custom-mail-sender/custom-mail-sender-smtp2go.md196### Step 1: Add a Sender DomainCOMMENT
LOW…specs/custom-mail-sender/custom-mail-sender-smtp2go.md233### Step 2: Verify the Sender DomainCOMMENT
LOW…specs/custom-mail-sender/custom-mail-sender-smtp2go.md275# Step 1: Add the sender domainCOMMENT
LOW…specs/custom-mail-sender/custom-mail-sender-smtp2go.md286# Step 2: Verify the domain (once DNS propagated)COMMENT
LOWdocs/runbooks/duplicate-plans-on-plans-page.md43### Step 1: Verify Stripe product metadataCOMMENT
LOWdocs/runbooks/duplicate-plans-on-plans-page.md50### Step 2: Re-sync with --clearCOMMENT
LOWdocs/runbooks/duplicate-plans-on-plans-page.md58### Step 3: VerifyCOMMENT
LOWdocs/runbooks/raw-email-field-serialization.md49### Step 1: Repair the 10 recordsCOMMENT
LOWdocs/runbooks/raw-email-field-serialization.md57### Step 2: VerifyCOMMENT
LOWscripts/validate_orphan_domain_zset_leaks.rb57 # Step 1: Find all domains with nil/empty org_idCOMMENT
LOWscripts/validate_orphan_domain_zset_leaks.rb60 # Step 2: Scan all org domain ZSETs for leaked orphansCOMMENT
LOWtry/unit/logic/account/email_change_try.rb385# Step 1: Request email changeCOMMENT
LOWtry/unit/logic/account/email_change_try.rb391# Step 2: Retrieve the token from pending_email_changeCOMMENT
LOWtry/unit/logic/account/email_change_try.rb394# Step 3: Confirm email changeCOMMENT
LOWtry/unit/logic/account/email_change_try.rb622# Step 1: request phase in simple mode (no Rodauth dependency)COMMENT
LOWtry/unit/logic/account/email_change_try.rb629# Step 2: confirm phase with full mode + stubbed SQLite DBCOMMENT
LOWtry/api/v1/receipt_hsh_state_translation_try.rb133# Step 1: initial state after creation (new)COMMENT
LOWtry/api/v1/receipt_hsh_state_translation_try.rb135# Step 2: after revealed! transitionCOMMENT
LOWlib/onetime/session.rb639 # Step 1: Serialize session data to JSONCOMMENT
LOWlib/onetime/session.rb649 # Step 2: Encrypt with AES-256-GCMCOMMENT
LOWlib/onetime/session.rb659 # Step 3: Base64 encode (for safe storage of binary encrypted data)COMMENT
LOWlib/onetime/session.rb668 # Step 4: Compute HMAC signature for integrity verificationCOMMENT
LOWlib/onetime/session.rb681 # Step 5: Get or create StringKey for this sessionCOMMENT
LOWlib/onetime/session.rb684 # Step 6: Save to RedisCOMMENT
LOWlib/onetime/session.rb695 # Step 7: Update expiration if configuredCOMMENT
LOW…e/mail/sender_strategies/lettermint_sender_strategy.rb389 # WARNING: This implementation does not handle pagination. If the accountCOMMENT
LOW…/onetime/logic/credential_change_session_revocation.rb66 # Step 1: the credential watermark, via the same single-field fast-writerCOMMENT
LOW…/onetime/logic/credential_change_session_revocation.rb81 # Step 2: durable async full sweep (#3810). The worker honors theCOMMENT
LOW…/onetime/logic/credential_change_session_revocation.rb96 # Step 3: immediate guaranteed kill of every OTHER tracked session blob —COMMENT
LOWlib/onetime/cli/queue/init_command.rb82 # Step 1: Create vhost via Management APICOMMENT
LOWlib/onetime/cli/queue/init_command.rb85 # Step 2: Set permissionsCOMMENT
LOWlib/onetime/cli/queue/init_command.rb88 # Step 3: Declare exchanges and queues via AMQPCOMMENT
LOWlib/onetime/cli/queue/init_command.rb91 # Step 4: Apply DLQ policies via Management APICOMMENT
LOWlib/onetime/operations/provision_sender_domain.rb90 # Step 2: Verify provider supports provisioningCOMMENT
LOWlib/onetime/operations/provision_sender_domain.rb98 # Step 3: Load platform credentialsCOMMENT
LOWlib/onetime/operations/provision_sender_domain.rb102 # Step 4: Select strategyCOMMENT
LOWlib/onetime/operations/provision_sender_domain.rb105 # Step 5: Call strategy.provision_dns_recordsCOMMENT
LOWlib/onetime/operations/provision_sender_domain.rb125 # Step 6: Handle strategy resultCOMMENT
LOWlib/onetime/operations/provision_sender_domain.rb134 # Step 7: Extract and normalize DNS recordsCOMMENT
LOWlib/onetime/operations/provision_sender_domain.rb138 # Step 8: Store result in mailer_config and save if persist enabledCOMMENT
LOWlib/onetime/operations/provision_sender_domain.rb77 # Step 1: Validate mailer_config has required fieldsCOMMENT
LOW…me/jobs/scheduled/maintenance/instances_rebuild_job.rb78 # Step 1: Collect all existing hash keys for this prefix.COMMENT
LOW…me/jobs/scheduled/maintenance/instances_rebuild_job.rb90 # Step 2: Collect all current instances membersCOMMENT
LOW…me/jobs/scheduled/maintenance/instances_rebuild_job.rb96 # Step 3: Compute diffCOMMENT
LOWe2e/full/domains-store-org-cache.spec.ts267 // Step 1: Navigate to Default Workspace dashboardCOMMENT
LOWe2e/full/domains-store-org-cache.spec.ts281 // Step 2: Navigate to A Second Organization's page via URLCOMMENT
LOWe2e/full/domains-store-org-cache.spec.ts312 // Step 3: Navigate back to Default Workspace dashboardCOMMENT
LOWe2e/full/domains-store-org-cache.spec.ts370 // Step 1: Navigate to Default Workspace's organization page (domains tab is default)COMMENT
LOWe2e/full/domains-store-org-cache.spec.ts389 // Step 2: Navigate directly to A Second Organization's page via URL (domains tab is default)COMMENT
LOWe2e/full/domains-store-org-cache.spec.ts477 // Step 1: Navigate to Default Workspace dashboardCOMMENT
LOWe2e/full/domains-store-org-cache.spec.ts493 // Step 2: Navigate to A Second OrganizationCOMMENT
LOWe2e/full/domain-sso-multi-provider.spec.ts378 // Step 1: Open SSO modal for domain A and configure Entra IDCOMMENT
64 more matches not shown…
AI Slop Vocabulary81 hits · 230 pts
SeverityFileLineSnippetContext
MEDIUM.pre-commit-config.yaml49# Use 'system' to leverage existing rbenv/nvm installations from PATH,COMMENT
MEDIUMspec/spec_helper.rb35# Test harness for Onetime.COMMENT
MEDIUMspec/unit/auth/password_modification_gate_spec.rb21# Onetime::Customer, and only this harness connects Familia for unit specs.COMMENT
MEDIUMspec/unit/lanes/codegen_phase_spec.rb9# Regression harness for the runner-owned codegen phase in tests/lanes/run.COMMENT
MEDIUMspec/unit/lanes/isolation_key_spec.rb10# Regression harness for the datastore isolation key in tests/lanes/run.COMMENT
MEDIUMspec/unit/lanes/run_all_spec.rb44 # whatever the harness happens to carry.COMMENT
MEDIUMspec/unit/lanes/hermetic_boundary_spec.rb9# Regression harness for the hermetic boundary in tests/lanes/run.COMMENT
MEDIUMspec/unit/onetime/mail/provider_registry_spec.rb162 # empty hash, but the key-level check must stay robust to a builderCOMMENT
MEDIUM…/models/organization/with_organization_billing_spec.rb18 # The predicate harness: the smallest object the status predicates read.COMMENT
MEDIUM…ime/models/custom_domain/update_display_domain_spec.rb35 # Sanity checks — expected GREEN (proves the harness works)COMMENT
LOW…t/onetime/jobs/workers/dns_record_check_worker_spec.rb16# reject! are Sneakers methods that just return symbols; asserting on theCOMMENT
MEDIUM…/onetime/jobs/workers/domain_validation_worker_spec.rb170 # empty hash, but the key-level guard must stay robust to a builderCOMMENT
MEDIUMspec/integration/integration_spec_helper.rb27 # Parse Redis URI once at configuration time for robust port checkingCOMMENT
MEDIUMspec/integration/full/hooks/account_lifecycle_spec.rb421 # sweep (this rack-test harness commits for real, so after_commit firesCOMMENT
MEDIUMspec/integration/all/config/after_load_spec.rb516 # `config` object. This helps make tests more robust againstCOMMENT
MEDIUMspec/integration/all/initializers/boot_part1_spec.rb93 # If not, ensure test config for :dbs is comprehensive or mock Familia.members.COMMENT
MEDIUMspec/cli/billing/sync_org_command_spec.rb230 # Containment scope decision (PR #3924 review): sweep robust, single-orgCOMMENT
MEDIUMspec/support/auth_mode_helpers.rb144 # NoMethodError that reads as a harness break rather than a config error.COMMENT
MEDIUMspec/api/v1/auth_status_header_spec.rb19# test harness that simulates the controller context.COMMENT
MEDIUMscripts/install-tests/run.sh5# Tier-1 clean-room harness (install-onboarding testing-strategy §2). Runs aCOMMENT
MEDIUMscripts/install-tests/run.sh30# needs no container); this is the installer-matrix harness.COMMENT
MEDIUMscripts/install-tests/secret-rotation.sh5# SECRET-rotation harness lane (install-onboarding C10 §5). Proves theCOMMENT
MEDIUMscripts/tests/sentry-preflight-test.sh100# The negative control for the scrub itself. If the harness leaked an ambientCOMMENT
MEDIUMscripts/host-seam/topology-probe.sh117# same window. A harness that only exercised Apx-Incoming-Host would miss halfCOMMENT
MEDIUM.github/workflows/installer.yml4# Runs the Tier-1 clean-room harness (scripts/install-tests/run.sh) in CI — theCOMMENT
MEDIUM.github/workflows/installer.yml60 # Docker is preinstalled on ubuntu runners; the harness does the restCOMMENT
MEDIUM.github/workflows/installer.yml161 # macOS ships bash 3.2. The setup entrypoint and the harness scriptsCOMMENT
MEDIUMtry/unit/error_handler_try.rb6# The ErrorHandler provides robust error handling for non-critical operationsCOMMENT
MEDIUMtry/unit/middleware/admin_network_isolation_try.rb537## harness writes otto.client_ip by hand and no closure — a shape the otto mountCOMMENT
MEDIUMtry/unit/middleware/admin_network_isolation_try.rb539## precision only because the harness wrote it that way. In a real no-middlewareCOMMENT
MEDIUMtry/unit/auth/auth_org_immutability_try.rb54# A thin harness that includes OrganizationContext the same wayCOMMENT
MEDIUMtry/unit/auth/organization_loader_fallthrough_try.rb16# Build a test harness that includes OrganizationLoader so we can callCOMMENT
MEDIUM…models/organization_pending_invitations_cleanup_try.rb216# If comprehensive cleanup is needed, a separate issue should address cleanupCOMMENT
LOWtry/unit/models/custom_domain_migration_setup_try.rb5# Minimal test - just create customers and orgs, no domainsCOMMENT
MEDIUMtry/unit/cli/billing/sync_org_command_try.rb184# Containment scope decision (PR #3924 review): sweep robust, single-orgCOMMENT
MEDIUMtry/integration/api/domains/put_signin_config_try.rb8# Uses the same harness pattern as update_domain_brand_validate_try.rb.COMMENT
MEDIUMtry/integration/api/colonel/bfla_colonel_authz_try.rb100# middleware try to read a nil rack.input (a harness artifact, not an app authzCOMMENT
MEDIUMtry/support/test_helpers.rb414# Print test harness banner showing billing and auth stateCOMMENT
MEDIUMlib/onetime/error_handler.rb7# Provides robust error handling for non-critical operations, particularlyCOMMENT
MEDIUMlib/onetime/utils/strings.rb142 # mail gem's Address parser for robust email handling.COMMENT
LOWlib/onetime/refinements/stripe_refinements.rb76 # on it, otherwise we'll just return the value as-is.COMMENT
LOWlib/onetime/models/custom_domain.rb418 # we can simply call `fobj.to_s`. In both cases the result is the unqiueCOMMENT
LOWlib/onetime/models/field_types/boolean_field_type.rb29 # 3. **No defensive reads**: callers just use the field. NoCOMMENT
LOWlib/onetime/models/features/required_fields.rb27 # I think it would work since extend doesn't just add methods - itCOMMENT
LOWlib/onetime/models/secret/features/deprecated_fields.rb19 base.field :metadata_key # do not add receipt_key; just use identifierCODE
MEDIUMlib/onetime/application/registry.rb80 # Rack::Test harness asks its `app` once per EXAMPLE (rack-test 2.2COMMENT
MEDIUMlib/onetime/jobs/workers/domain_validation_worker.rb86 # credentialed hash, so key-level checks are the robust contractCOMMENT
MEDIUMlib/onetime/services/redis_key_migrator.rb95 # The migrator includes comprehensive error handling:COMMENT
MEDIUMapps/web/core/application.rb106 # ruby memory from the get go? It'll need to be more nuanced and robustCOMMENT
MEDIUMapps/web/core/application.rb106 # ruby memory from the get go? It'll need to be more nuanced and robustCOMMENT
MEDIUMapps/web/auth/error_translator.rb120 # iteration order) so the lookup is robust to hash reordering andCOMMENT
MEDIUMapps/web/auth/spec/config/hooks/omniauth_spec.rb231 # pure-logic harness, so we model the halt as a marker carrying the redirectCOMMENT
MEDIUM…on/full_mfa/sso_link_confirm_mailbox_proof_mfa_spec.rb26# WHAT IT LOCKS IN (the sequence the shared full/ harness cannot reach —COMMENT
MEDIUM…tion/full_mfa/omniauth_signin_interstitial_mfa_spec.rb19# WHAT IT LOCKS IN (the sequence the shared-harness spec cannot reach):COMMENT
MEDIUM…tion/full_mfa/omniauth_signin_interstitial_mfa_spec.rb79 # Returns [challenge_issuer, token]. Skips (like the shared-harness specs)COMMENT
MEDIUM…h/spec/integration/full/backfill_tenant_issuer_spec.rb81 # Track auth-DB rows for explicit cleanup (belt-and-suspenders; the harness'sCOMMENT
MEDIUM…ntegration/full/sso_link_confirm_mailbox_proof_spec.rb369 # The token is minted with a KNOWN sid; the POST's current_sid is the harnessCOMMENT
MEDIUM…ntegration/full/sso_link_confirm_mailbox_proof_spec.rb140 # probes the index and misses. That exact shape cannot be staged in this harnessCOMMENT
MEDIUM…ntegration/full/sso_link_confirm_mailbox_proof_spec.rb165 # deliver a real email in this harness; deterministic capture is cleaner and isCOMMENT
MEDIUM…ntegration/full/sso_link_confirm_mailbox_proof_spec.rb763 # THIS shared harness boots ONCE (before(:all)) with MFA disabled and cannotCOMMENT
21 more matches not shown…
Verbosity Indicators109 hits · 219 pts
SeverityFileLineSnippetContext
LOWspec/integration/full/password_migration_spec.rb189 # Step 2: Create Rodauth account WITHOUT password hashCOMMENT
LOWspec/integration/full/password_migration_spec.rb198 # Step 3: POST to /auth/login with Redis passwordCOMMENT
LOWspec/integration/full/password_migration_spec.rb204 # Step 4: Verify login succeeds (200 or 3xx redirect)COMMENT
LOWspec/integration/full/password_migration_spec.rb208 # Step 5: Verify password hash now exists in account_password_hashesCOMMENT
LOWspec/integration/all/csrf_enforcement_spec.rb620 # Step 1: GET the signin page to establish a session and receive HTMLCOMMENT
LOWspec/integration/all/csrf_enforcement_spec.rb629 # Step 2: Parse the HTML to extract shrimp from __BOOTSTRAP_ME__COMMENT
LOWspec/integration/all/csrf_enforcement_spec.rb639 # Step 3: POST /signin with session cookie + extracted shrimpCOMMENT
LOWspec/integration/all/csrf_enforcement_spec.rb649 # Step 4: Assert NOT 403 -- the token from the page must be acceptedCOMMENT
LOWscripts/validate_orphan_domain_zset_leaks.rb57 # Step 1: Find all domains with nil/empty org_idCOMMENT
LOWscripts/validate_orphan_domain_zset_leaks.rb60 # Step 2: Scan all org domain ZSETs for leaked orphansCOMMENT
LOWtry/unit/logic/account/email_change_try.rb385# Step 1: Request email changeCOMMENT
LOWtry/unit/logic/account/email_change_try.rb391# Step 2: Retrieve the token from pending_email_changeCOMMENT
LOWtry/unit/logic/account/email_change_try.rb394# Step 3: Confirm email changeCOMMENT
LOWtry/unit/logic/account/email_change_try.rb622# Step 1: request phase in simple mode (no Rodauth dependency)COMMENT
LOWtry/unit/logic/account/email_change_try.rb629# Step 2: confirm phase with full mode + stubbed SQLite DBCOMMENT
LOWtry/api/v1/receipt_hsh_state_translation_try.rb133# Step 1: initial state after creation (new)COMMENT
LOWtry/api/v1/receipt_hsh_state_translation_try.rb135# Step 2: after revealed! transitionCOMMENT
LOWlib/onetime/session.rb639 # Step 1: Serialize session data to JSONCOMMENT
LOWlib/onetime/session.rb649 # Step 2: Encrypt with AES-256-GCMCOMMENT
LOWlib/onetime/session.rb659 # Step 3: Base64 encode (for safe storage of binary encrypted data)COMMENT
LOWlib/onetime/session.rb668 # Step 4: Compute HMAC signature for integrity verificationCOMMENT
LOWlib/onetime/session.rb681 # Step 5: Get or create StringKey for this sessionCOMMENT
LOWlib/onetime/session.rb684 # Step 6: Save to RedisCOMMENT
LOWlib/onetime/session.rb695 # Step 7: Update expiration if configuredCOMMENT
LOW…/onetime/logic/credential_change_session_revocation.rb66 # Step 1: the credential watermark, via the same single-field fast-writerCOMMENT
LOW…/onetime/logic/credential_change_session_revocation.rb81 # Step 2: durable async full sweep (#3810). The worker honors theCOMMENT
LOW…/onetime/logic/credential_change_session_revocation.rb96 # Step 3: immediate guaranteed kill of every OTHER tracked session blob —COMMENT
LOWlib/onetime/cli/queue/init_command.rb82 # Step 1: Create vhost via Management APICOMMENT
LOWlib/onetime/cli/queue/init_command.rb85 # Step 2: Set permissionsCOMMENT
LOWlib/onetime/cli/queue/init_command.rb88 # Step 3: Declare exchanges and queues via AMQPCOMMENT
LOWlib/onetime/cli/queue/init_command.rb91 # Step 4: Apply DLQ policies via Management APICOMMENT
LOWlib/onetime/operations/provision_sender_domain.rb90 # Step 2: Verify provider supports provisioningCOMMENT
LOWlib/onetime/operations/provision_sender_domain.rb98 # Step 3: Load platform credentialsCOMMENT
LOWlib/onetime/operations/provision_sender_domain.rb102 # Step 4: Select strategyCOMMENT
LOWlib/onetime/operations/provision_sender_domain.rb105 # Step 5: Call strategy.provision_dns_recordsCOMMENT
LOWlib/onetime/operations/provision_sender_domain.rb125 # Step 6: Handle strategy resultCOMMENT
LOWlib/onetime/operations/provision_sender_domain.rb134 # Step 7: Extract and normalize DNS recordsCOMMENT
LOWlib/onetime/operations/provision_sender_domain.rb138 # Step 8: Store result in mailer_config and save if persist enabledCOMMENT
LOWlib/onetime/operations/provision_sender_domain.rb77 # Step 1: Validate mailer_config has required fieldsCOMMENT
LOW…me/jobs/scheduled/maintenance/instances_rebuild_job.rb78 # Step 1: Collect all existing hash keys for this prefix.COMMENT
LOW…me/jobs/scheduled/maintenance/instances_rebuild_job.rb90 # Step 2: Collect all current instances membersCOMMENT
LOW…me/jobs/scheduled/maintenance/instances_rebuild_job.rb96 # Step 3: Compute diffCOMMENT
LOWe2e/full/domains-store-org-cache.spec.ts267 // Step 1: Navigate to Default Workspace dashboardCOMMENT
LOWe2e/full/domains-store-org-cache.spec.ts281 // Step 2: Navigate to A Second Organization's page via URLCOMMENT
LOWe2e/full/domains-store-org-cache.spec.ts312 // Step 3: Navigate back to Default Workspace dashboardCOMMENT
LOWe2e/full/domains-store-org-cache.spec.ts370 // Step 1: Navigate to Default Workspace's organization page (domains tab is default)COMMENT
LOWe2e/full/domains-store-org-cache.spec.ts389 // Step 2: Navigate directly to A Second Organization's page via URL (domains tab is default)COMMENT
LOWe2e/full/domains-store-org-cache.spec.ts477 // Step 1: Navigate to Default Workspace dashboardCOMMENT
LOWe2e/full/domains-store-org-cache.spec.ts493 // Step 2: Navigate to A Second OrganizationCOMMENT
LOWe2e/full/domain-sso-multi-provider.spec.ts378 // Step 1: Open SSO modal for domain A and configure Entra IDCOMMENT
LOWe2e/full/domain-sso-multi-provider.spec.ts384 // Step 2: Open SSO modal for domain B and configure Generic OIDCCOMMENT
LOWe2e/full/domain-sso-multi-provider.spec.ts390 // Step 3: Verify both domains appear in org SSO hubCOMMENT
LOWe2e/full/cross-org-domain-isolation.spec.ts379 // Step 1: Navigate to OrgA (domains tab is default)COMMENT
LOWe2e/full/cross-org-domain-isolation.spec.ts389 // Step 2: Navigate to OrgB via URL (domains tab is default)COMMENT
LOWe2e/full/cross-org-domain-isolation.spec.ts407 // Step 3: Navigate back to OrgA (domains tab is default)COMMENT
LOWe2e/full/domain-sso-config.spec.ts923 // Step 1: Open SSO modal for domain ACOMMENT
LOWe2e/full/domain-sso-config.spec.ts926 // Step 2: Configure Entra ID for domain ACOMMENT
LOWe2e/full/domain-sso-config.spec.ts935 // Step 3: Save domain A config (anchor on the mocked save round-trip)COMMENT
LOWe2e/full/domain-sso-config.spec.ts943 // Step 4: Open SSO modal for domain B (navigates to domain B's signin page)COMMENT
LOWe2e/full/domain-sso-config.spec.ts946 // Step 5: Configure Generic OIDC for domain B (#3902: tenant SSO isCOMMENT
49 more matches not shown…
Modern AI Meta-Vocabulary30 hits · 88 pts
SeverityFileLineSnippetContext
MEDIUMlocales/scripts/derive-governance.sh8# generated/i18n/ — never committed. The translation orchestration readsCOMMENT
MEDIUMlocales/scripts/review-locale-branches.sh9# The agent orchestration and triage stages live in the slash commandCOMMENT
MEDIUMlocales/scripts/pr-per-locale.sh337 # Cap the diff so a huge export can't blow up the context window.COMMENT
MEDIUMetc/defaults/logging.defaults.yaml20# Workers - RabbitMQ worker message processing and orchestrationCOMMENT
MEDIUMetc/defaults/logging.defaults.yaml72 Workers: info # RabbitMQ worker message processing and orchestrationCODE
MEDIUMspec/unit/auth/confirm_sso_link_spec.rb9# Unit tests for Auth::Operations::ConfirmSsoLink — the orchestration step of theCOMMENT
MEDIUM…els/features/with_plan_entitlements_standalone_spec.rb13# These tests reuse the FakeSet/FakeHashKey scaffold fromCOMMENT
MEDIUM…netime/operations/email/sync_provider_feedback_spec.rb8# Unit tests for the sync orchestration: provider selection, the fetch ->COMMENT
MEDIUMspec/cli/org_delete_command_spec.rb11# guardrails themselves and the audit event are the op's job and are coveredCOMMENT
MEDIUM…install-onboarding/install-onboarding-problem-space.md114| Onboarding empty-state dashboard | `DashboardEmpty.vue` (#2088) CODE
MEDIUMdocs/specs/colonel-ui/spec-session-performance.md96The expectations spec's stated precondition is already satisfied. Revocation is authoritative server-side — blob deletioCODE
MEDIUMdocs/specs/rodauth-admin/10-aggregate-visibility.md90### Performance guardrails (200k rows)COMMENT
MEDIUMscripts/build-and-deploy.py359# ─── Build orchestration ────────────────────────────────────────────────────COMMENT
MEDIUM.github/workflows/migration-tests.yml19# - The concurrent-boot job is deliberately NOT a lane: it orchestrates fiveCOMMENT
MEDIUM.github/workflows/migration-tests.yml162 # processes against a scratch database — gating/orchestration policy thatCOMMENT
MEDIUMlib/onetime/mail/feedback/base.rb21 # Fetchers are read-only and provider-specific; the orchestration (whichCOMMENT
MEDIUMlib/onetime/cli/worker_command.rb32 # Semantic exit codes for scripting and orchestrationCOMMENT
MEDIUMlib/onetime/cli/customers/doctor_command.rb27# this command owns orchestration (scan-all, output formatting, exit codes). TheCOMMENT
MEDIUMlib/onetime/operations/validate_sender_domain.rb14 # This operation orchestrates the verification flow:COMMENT
MEDIUMapps/web/auth/README-roda.md138├── commands/ # Command objects (validation + orchestration)CODE
MEDIUMapps/web/auth/README-rodauth.md78├── config.rb # 150 lines - Core config + orchestrationCODE
MEDIUMapps/web/auth/operations/confirm_sso_link.rb12# (#3840 Phase 4). This is the orchestration step for the passwordless linkingCOMMENT
MEDIUMapps/web/auth/operations/customers/doctor.rb17 # thin adapter: it owns orchestration (scan-all, output formatting, exitCOMMENT
MEDIUMapps/web/billing/spec/cli/catalog_sync_command_spec.rb8# These specs verify step orchestration, option forwarding, abort-on-failure,COMMENT
MEDIUM…/billing/spec/operations/process_webhook_event_spec.rb7# This file tests orchestration behavior: unhandled events, context options.COMMENT
MEDIUM…s/spec/logic/organizations/delete_organization_spec.rb18# The teardown itself, the guardrails and the audit event belong to the op andCOMMENT
MEDIUM…ganizations/logic/organizations/delete_organization.rb26 # The op's guardrails now apply to customers too, and two of them are newCOMMENT
MEDIUM…colonel/spec/logic/colonel/delete_organization_spec.rb9# Adapter-layer coverage only. The teardown, the guardrails and the singleCOMMENT
MEDIUMapps/api/colonel/logic/colonel/delete_organization.rb23 # guardrails, the teardown, the `default_org_id` repair, the memberCOMMENT
MEDIUM…ps/workspace/account/settings/OrganizationSettings.vue285 // Delete guardrails mirrored from Onetime::Operations::Org::Delete. TheCOMMENT
Excessive Try-Catch Wrapping40 hits · 65 pts
SeverityFileLineSnippetContext
MEDIUMlocales/scripts/interpolate-product-name.py162 print(f"Error: locale directory not found: {locale_dirs[0]}", file=sys.stderr)CODE
MEDIUMlocales/scripts/i18n/commands/store.py170 print(f"Error: {e}", file=sys.stderr)STRING
MEDIUMlocales/scripts/i18n/commands/store.py173 print(f"Error: {e}", file=sys.stderr)STRING
MEDIUMlocales/scripts/i18n/commands/store.py182 print(f"Error: {e}", file=sys.stderr)STRING
MEDIUMlocales/scripts/i18n/commands/store.py185 print(f"Error: {e}", file=sys.stderr)STRING
MEDIUMlocales/scripts/i18n/commands/store.py194 print(f"Error: {e}", file=sys.stderr)STRING
MEDIUMlocales/scripts/i18n/commands/store.py197 print(f"Error: {e}", file=sys.stderr)STRING
MEDIUMlocales/scripts/i18n/commands/store.py206 print(f"Error: {e}", file=sys.stderr)STRING
MEDIUMlocales/scripts/i18n/commands/store.py209 print(f"Error: {e}", file=sys.stderr)STRING
MEDIUMlocales/scripts/i18n/commands/store.py218 print(f"Error: {e}", file=sys.stderr)STRING
MEDIUMlocales/scripts/i18n/commands/store.py221 print(f"Error: {e}", file=sys.stderr)STRING
MEDIUMlocales/scripts/i18n/commands/store.py237 print(f"Error: {e}", file=sys.stderr)STRING
MEDIUMlocales/scripts/i18n/commands/store.py240 print(f"Error: {e}", file=sys.stderr)STRING
MEDIUMlocales/scripts/i18n/commands/store.py252 print(f"Error: {e}", file=sys.stderr)STRING
MEDIUMlocales/scripts/i18n/commands/store.py255 print(f"Error: {e}", file=sys.stderr)STRING
MEDIUMlocales/scripts/i18n/commands/store.py566 print(f"Error importing {sql_file.name}: {e}", file=sys.stderr)CODE
MEDIUMlocales/scripts/i18n/commands/tasks.py1140 print(f"Error: {e}", file=sys.stderr)CODE
MEDIUMlocales/scripts/i18n/commands/tasks.py1367 print(f"Error: {e}", file=sys.stderr)CODE
MEDIUMlocales/scripts/i18n/commands/tasks.py1370 print(f"Error: {e}", file=sys.stderr)CODE
MEDIUMlocales/scripts/i18n/commands/tasks.py1590 print(f"Error: {e}", file=sys.stderr)CODE
MEDIUMlocales/scripts/i18n/commands/tasks.py1593 print(f"Error: {e}", file=sys.stderr)CODE
MEDIUMlocales/scripts/i18n/commands/tasks.py516 print(f"Error: English directory not found: {EN_DIR}", file=sys.stderr)CODE
MEDIUMlocales/scripts/i18n/commands/tasks.py1297 print(f"Error reading file: {e}", file=sys.stderr)CODE
MEDIUMlocales/scripts/i18n/commands/tasks.py1321 print(f"Error: Task {args.task_id} not found", file=sys.stderr)CODE
MEDIUMlocales/scripts/i18n/commands/tasks.py2134 print(f"Error: {e}", file=sys.stderr)CODE
MEDIUMlocales/scripts/i18n/commands/tasks.py1070def _next_handler(args) -> int:CODE
LOWlocales/scripts/i18n/commands/tasks.py1592 except Exception as e:CODE
LOWlocales/scripts/i18n/commands/tasks.py1296 except Exception as e:CODE
MEDIUMlocales/scripts/i18n/commands/validate.py160 print(f"Error running git diff: {e}", file=sys.stderr)CODE
MEDIUMlocales/scripts/i18n/commands/validate.py1002 print(f"Error: Source locale not found: {source_dir}", file=sys.stderr)CODE
MEDIUMlocales/scripts/i18n/commands/validate.py1009 print(f"Error: Locale not found: {args.locale}", file=sys.stderr)CODE
LOWlocales/scripts/i18n/commands/validate.py176 except Exception as e:CODE
LOWlocales/scripts/i18n/commands/validate.py405 except Exception as e:CODE
MEDIUMlocales/scripts/i18n/commands/content.py454 print(f"Error in {locale}: {e}", file=sys.stderr)CODE
LOWdocs/architecture/build-architecture.md193 except Exception:CODE
LOWscripts/logtide-ship.py87except Exception:CODE
LOWscripts/logtide-ship.py703 except Exception as e:CODE
LOWscripts/logtide-ship.py764 except Exception:CODE
LOWscripts/logtide-ship.py779 except Exception:CODE
LOWscripts/logtide-ship.py807 except Exception as e:CODE
Unused Imports22 hits · 18 pts
SeverityFileLineSnippetContext
LOWlocales/tests/test_generate_tasks.py8CODE
LOWlocales/tests/test_generate_tasks.py13CODE
LOWlocales/tests/test_generate_tasks.py13CODE
LOWlocales/scripts/register-coverage.py45CODE
LOWlocales/scripts/tests/test_derive_governance.py23CODE
LOWlocales/scripts/tests/test_register_coverage.py26CODE
LOWlocales/scripts/tests/test_i18n_cli.py24CODE
LOWlocales/scripts/i18n/console.py14CODE
LOWlocales/scripts/i18n/db.py23CODE
LOWlocales/scripts/i18n/config.py21CODE
LOWlocales/scripts/i18n/io.py10CODE
LOWlocales/scripts/i18n/tokens.py23CODE
LOWlocales/scripts/i18n/cli.py10CODE
LOWlocales/scripts/i18n/commands/store.py14CODE
LOWlocales/scripts/i18n/commands/tasks.py18CODE
LOWlocales/scripts/i18n/commands/validate.py19CODE
LOWlocales/scripts/i18n/commands/validate.py34CODE
LOWlocales/scripts/i18n/commands/validate.py34CODE
LOWlocales/scripts/i18n/commands/content.py22CODE
LOWscripts/build-and-deploy.py72CODE
LOWscripts/tests/test_logtide_ship.py13CODE
LOWscripts/tests/test_logtide_ship.py19CODE
Deep Nesting26 hits · 18 pts
SeverityFileLineSnippetContext
LOWlocales/scripts/interpolate-product-name.py90CODE
LOWlocales/scripts/i18n/io.py76CODE
LOWlocales/scripts/i18n/io.py238CODE
LOWlocales/scripts/i18n/commands/store.py338CODE
LOWlocales/scripts/i18n/commands/store.py495CODE
LOWlocales/scripts/i18n/commands/tasks.py494CODE
LOWlocales/scripts/i18n/commands/tasks.py1070CODE
LOWlocales/scripts/i18n/commands/tasks.py1278CODE
LOWlocales/scripts/i18n/commands/tasks.py1427CODE
LOWlocales/scripts/i18n/commands/validate.py131CODE
LOWlocales/scripts/i18n/commands/validate.py180CODE
LOWlocales/scripts/i18n/commands/validate.py483CODE
LOWlocales/scripts/i18n/commands/validate.py705CODE
LOWlocales/scripts/i18n/commands/validate.py895CODE
LOWlocales/scripts/i18n/commands/validate.py943CODE
LOWlocales/scripts/i18n/commands/validate.py1059CODE
LOWlocales/scripts/i18n/commands/validate.py1112CODE
LOWlocales/scripts/i18n/commands/validate.py1228CODE
LOWlocales/scripts/i18n/commands/content.py603CODE
LOWlocales/scripts/i18n/commands/content.py849CODE
LOWlocales/scripts/i18n/commands/content.py917CODE
LOWscripts/build-and-deploy.py530CODE
LOWscripts/corporate-branch-report.py238CODE
LOWscripts/corporate-branch-report.py305CODE
LOWscripts/logtide-ship.py661CODE
LOWscripts/logtide-ship.py720CODE
Cross-Language Confusion3 hits · 15 pts
SeverityFileLineSnippetContext
HIGHlocales/scripts/interpolate-product-name.py346 print(" cd locales/scripts && python build/compile.py --all --merged --output-dir ../../generated/locales")CODE
HIGHlocales/scripts/i18n/commands/content.py221 # Null value (field present, value is null)COMMENT
HIGHscripts/build-and-deploy.py11 mkdir -p /opt/builds && chown <hook-user>:<hook-user> /opt/buildsSTRING
Slop Phrases4 hits · 8 pts
SeverityFileLineSnippetContext
LOWeslint.config.ts526 // uncomment the next line to enable it (don't forget to import it at theCOMMENT
MEDIUMapps/web/billing/cli/webhooks_command.rb163 # This is a basic implementation - in production you'd want a secondary indexCOMMENT
LOWapps/web/billing/cli/prices_generate_command.rb88 puts '# Make sure to replace PRODUCT_ID with actual Stripe product ID'CODE
MEDIUMsrc/shared/components/ui/MovingGlobules.vue11 [`clipPath`]() value with a transition. Here's how you can modify the code:CODE
Synthetic Comment Markers1 hit · 8 pts
SeverityFileLineSnippetContext
HIGHlib/onetime/models/features/right_to_be_forgotten.rb23 # Marks the customer account as requested for destruction.COMMENT
AI Structural Patterns1 hit · 1 pts
SeverityFileLineSnippetContext
LOWlocales/scripts/i18n/tokens.py125CODE
Overly Generic Function Names1 hit · 1 pts
SeverityFileLineSnippetContext
LOWscripts/tests/test_logtide_ship.py64 def handle_request(self, request):CODE