AI Slop Code Risk Monitor

open-legal-products/mike

SlopCodeMonitor badge for open-legal-products/mike Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).
2.0 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for open-legal-products/mike. SynthScan examined 511,439 lines of code across 1962 source files, recording 853 pattern matches distributed across 9 syntactic categories. The legacy adjusted pattern signal is 2.0 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

2.0
Adjusted Signal
2.0
Raw Pattern Score
100%
Time Factor
—
Last Push
—
Stars
—
Language
511.4K
Lines of Code
2.0K
Files
853
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 7.0/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 728 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.5/100 · LOW

Are imports declared and package/API names verified? 46 finding(s).

Agent Over-Engineering Ratio 7.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 616 finding(s).

PR Review Velocity Impact 9.6/100 · LOW

Which changes need focused human review? 853 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 90LOW 763

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 853 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers537 hits · 530 pts
SeverityFileLineSnippetContext
LOWfrontend/src/app/(pages)/assistant/chat/[id]/page.tsx21function AssistantChatPageForWorkspace() {CODE
LOW…src/app/(pages)/organizations/[id]/settings/layout.tsx9export default function OrganizationSettingsLayout({CODE
LOW…)/organizations/[id]/settings/private-content/page.tsx7export default function OrganizationPrivateContentPage() {CODE
LOW…ges)/organizations/[id]/settings/(sections)/layout.tsx6export default function OrganizationSettingsSectionsLayout({CODE
LOW…pages)/organizations/[id]/settings/(sections)/page.tsx5export default function OrganizationGeneralSettingsPage() {CODE
LOW…anizations/[id]/settings/(sections)/providers/page.tsx5export default function OrganizationProvidersSettingsPage() {CODE
LOW…zations/[id]/settings/(sections)/privacy-data/page.tsx5export default function OrganizationPrivacyDataSettingsPage() {CODE
LOW…p/(pages)/organizations/[id]/settings/members/page.tsx7export default function OrganizationMembersSettingsPage() {CODE
LOWfrontend/src/app/(pages)/settings/settingsStyles.ts6export function settingsTabButtonClassName(active: boolean) {CODE
LOW…ontend/src/app/(pages)/settings/organizations/page.tsx5export default function OrganizationsSettingsPage() {CODE
LOW…tend/src/app/(pages)/settings/connectors/page.test.tsx153async function reachAuthStepAndFirstPoll() {CODE
LOWfrontend/src/app/(pages)/settings/connectors/page.tsx231function connectorPlaceholderClassName(connector: McpConnectorSummary) {CODE
LOWfrontend/src/app/(pages)/settings/security/page.tsx87function isDuplicateFriendlyNameError(error: unknown) {CODE
LOWfrontend/src/app/(pages)/settings/security/page.tsx330 async function returnToSetupInstructions() {CODE
LOWfrontend/src/app/(pages)/settings/security/page.tsx435 async function handleLoginPreferenceToggle() {CODE
LOWfrontend/src/app/(pages)/settings/models/page.tsx369function ReasoningPreferenceDropdown({CODE
LOW…ntend/src/app/(pages)/projects/[id]/assistant/page.tsx120 function requestDeleteSelectedChats() {CODE
LOW…src/app/(pages)/projects/[id]/tabular-reviews/page.tsx42export default function ProjectTabularReviewsPage({ params }: Props) {CODE
LOW…src/app/(pages)/workflows/tabular-review/[id]/page.tsx10export default function TabularReviewWorkflowPage({ params }: Props) {CODE
LOW…/(pages)/library/templates/folders/[folderId]/page.tsx10export default function LibraryTemplateFolderPage({ params }: Props) {CODE
LOW…/library/templates/folders/[folderId]/presets/page.tsx10export default function LibraryTemplateFolderPresetsPage({ params }: Props) {CODE
LOW…end/src/app/(pages)/library/templates/presets/page.tsx5export default function LibraryPresetTemplatesPage() {CODE
LOWfrontend/src/app/(pages)/tabular-reviews/page.tsx60function TabularReviewsWorkspacePage({ workspace }: { workspace?: string }) {CODE
LOWfrontend/src/app/(pages)/tabular-reviews/page.tsx174 function handleProjectFilterChange(value: string | null) {CODE
LOWfrontend/src/app/components/assistant/EditCard.tsx21export function applyOptimisticResolution(CODE
LOW…end/src/app/components/assistant/QuickActionsModal.tsx34function QuickActionsModalForWorkspace({CODE
LOWfrontend/src/app/components/assistant/ModelToggle.tsx31export function mergeConfiguredModelOptions(CODE
LOW…/app/components/assistant/useAssistantDocumentPanel.ts56export function useAssistantDocumentPanel() {CODE
LOW…pp/components/assistant/AssistantDocumentPanelHost.tsx24export function AssistantDocumentPanelHost({CODE
LOW…nd/src/app/components/assistant/AssistantSidePanel.tsx63export function mergeAssistantSidePanelTab(CODE
LOW…nd/src/app/components/assistant/AssistantSidePanel.tsx94export function upsertAssistantSidePanelTab(CODE
LOW…nd/src/app/components/assistant/AssistantSidePanel.tsx112export function reorderAssistantSidePanelTabs(CODE
LOW…nd/src/app/components/assistant/AssistantSidePanel.tsx197export function maxAssistantSidePanelWidth(CODE
LOW…nd/src/app/components/assistant/AssistantSidePanel.tsx208export function defaultAssistantSidePanelWidth(CODE
LOW…d/src/app/components/assistant/panelDocumentVersion.ts44export async function resolvePanelDocumentVersionResult(CODE
LOW…/components/assistant/message/citationVerification.tsx25export function citationVerificationState(CODE
LOW⚡…/components/assistant/message/citationVerification.tsx37export function citationVerificationPillClassName(citation: Citation): string {CODE
LOW⚡…/components/assistant/message/citationVerification.tsx43export function citationVerificationDescription(CODE
LOW⚡…/components/assistant/message/citationVerification.tsx50export function citationVerificationAriaLabel(citation: Citation): string {CODE
LOW⚡…/components/assistant/message/citationVerification.tsx57export function CitationVerificationBadge({CODE
LOW…mponents/organizations/OrganizationGeneralSettings.tsx61export function OrganizationGeneralSettings() {CODE
LOW…onents/organizations/OrganizationProvidersSettings.tsx20export function OrganizationProvidersSettings() {CODE
LOW…rc/app/components/organizations/OrganizationModals.tsx235export function InviteOrganizationMemberModal({CODE
LOW…components/organizations/OrganizationSettingsShell.tsx82export function OrganizationSettingsProvider({CODE
LOW…components/organizations/OrganizationSettingsShell.tsx185export function OrganizationSettingsFrame({CODE
LOW…mponents/organizations/OrganizationDepartedMembers.tsx203export function OrganizationDepartedMembers({CODE
LOWfrontend/src/app/components/ui/markdown-editor.tsx431 function rememberTableInsertionSelection() {CODE
LOW…/src/app/components/settings/PersonalisationFields.tsx52export function personalisationInitialValues(profile: {CODE
LOW…src/app/components/settings/CourtListenerConnector.tsx43export function useCourtListenerConnector(workspace?: string) {CODE
LOW…/app/components/settings/CustomInstructionsSection.tsx28export function CustomInstructionsSection() {CODE
LOW…/components/settings/SettingsPersonalisationFields.tsx10export function SettingsPersonalisationFields({CODE
LOW…ontend/src/app/components/projects/NewProjectModal.tsx182 async function createProjectFromDocuments() {CODE
LOW…ntend/src/app/components/projects/ProjectPageParts.tsx567function hasFilenameExtensionChange(previous: string, next: string) {CODE
LOW…ntend/src/app/components/projects/ProjectsOverview.tsx279 function handlePracticeFilterChange(value: string | null) {CODE
LOW…ntend/src/app/components/projects/ProjectWorkspace.tsx155function activeSectionFromSegments(CODE
LOW…/src/app/components/projects/ProjectAssistantTable.tsx163 function handleCreatorFilterChange(value: string | null) {CODE
LOW…/src/app/components/projects/ProjectAssistantTable.tsx433function ProjectAssistantLoadingRows() {CODE
LOWfrontend/src/app/components/tabular/NewTRModal.test.tsx438 async function attachFileOnDocumentsStep(filename: string) {CODE
LOWfrontend/src/app/components/tabular/TabularCell.tsx240 function handleCitationClickInOverlay(CODE
LOW…c/app/components/tabular/TabularReviewDetailsModal.tsx23export function TabularReviewDetailsModal({CODE
477 more matches not shown…
Decorative Section Separators79 hits · 242 pts
SeverityFileLineSnippetContext
MEDIUM…(pages)/projects/[id]/assistant/chat/[chatId]/page.tsx413 // ── Tabs ──────────────────────────────────────────────────────────────────COMMENT
MEDIUM…(pages)/projects/[id]/assistant/chat/[chatId]/page.tsx483 // ── Handlers ──────────────────────────────────────────────────────────────COMMENT
MEDIUM…(pages)/projects/[id]/assistant/chat/[chatId]/page.tsx669 // ── Upload ────────────────────────────────────────────────────────────────COMMENT
MEDIUM…(pages)/projects/[id]/assistant/chat/[chatId]/page.tsx921 // ── Folder handlers ───────────────────────────────────────────────────────COMMENT
MEDIUM…(pages)/projects/[id]/assistant/chat/[chatId]/page.tsx1183 // ── Resize handlers ───────────────────────────────────────────────────────COMMENT
MEDIUM…ntend/src/app/components/projects/ProjectChatPanel.tsx559 // ── Chat actions ──────────────────────────────────────────────────────────COMMENT
MEDIUMfrontend/src/app/components/documents/DocTable.tsx1094 // ── Folder handlers ───────────────────────────────────────────────────────COMMENT
MEDIUMfrontend/src/app/components/documents/DocTable.tsx1321 // ── Doc/chat/review handlers ──────────────────────────────────────────────COMMENT
MEDIUMfrontend/src/app/components/documents/DocTable.tsx1579 // ── Drag & drop ───────────────────────────────────────────────────────────COMMENT
MEDIUMfrontend/src/app/components/documents/DocTable.tsx2246 // ── Tree rendering ────────────────────────────────────────────────────────COMMENT
MEDIUMfrontend/src/app/components/documents/DocTable.tsx3311 // ── Loading skeleton ──────────────────────────────────────────────────────COMMENT
MEDIUM…end/src/__tests__/integration/workflows.routes.test.ts133 // ── GET /workflows (overview) ─────────────────────────────────────────COMMENT
MEDIUM…end/src/__tests__/integration/workflows.routes.test.ts262 // ── GET /workflows/system ──────────────────────────────────────────────COMMENT
MEDIUM…end/src/__tests__/integration/workflows.routes.test.ts328 // ── GET /workflows/ids (select-all-matching support) ──────────────────COMMENT
MEDIUM…end/src/__tests__/integration/workflows.routes.test.ts438 // ── Organization workflows ────────────────────────────────────────────COMMENT
MEDIUM…end/src/__tests__/integration/workflows.routes.test.ts671 // ── organization overrides are written as ONE statement ─────────────COMMENT
MEDIUM…end/src/__tests__/integration/workflows.routes.test.ts926 // ── POST /workflows/:workflowId/assets/from-documents ─────────────────COMMENT
MEDIUM…kend/src/__tests__/integration/projects.routes.test.ts211 // ── GET /projects (overview) ──────────────────────────────────────────COMMENT
MEDIUM…kend/src/__tests__/integration/projects.routes.test.ts466 // ── directory search vs. the deny override ─────────────────────────COMMENT
MEDIUM…kend/src/__tests__/integration/projects.routes.test.ts740 // ── GET /projects/ids (select-all-matching support) ──────────────────COMMENT
MEDIUM…kend/src/__tests__/integration/projects.routes.test.ts778 // ── Active workspace ────────────────────────────────────────────────COMMENT
MEDIUM…kend/src/__tests__/integration/projects.routes.test.ts1238 // ── POST /projects (create) ───────────────────────────────────────────COMMENT
MEDIUM…kend/src/__tests__/integration/projects.routes.test.ts1381 // ── GET /projects/:projectId (detail, shared access helper) ───────────COMMENT
MEDIUM…kend/src/__tests__/integration/projects.routes.test.ts1508 // ── GET /projects/:projectId/people ─────────────────────────────────COMMENT
MEDIUM…kend/src/__tests__/integration/projects.routes.test.ts1604 // ── DELETE /projects/:projectId/folders/:folderId (role ladder) ──────COMMENT
MEDIUM…kend/src/__tests__/integration/projects.routes.test.ts1662 // ── POST /projects/:projectId/folders (404 vs 403) ───────────────────COMMENT
MEDIUM…kend/src/__tests__/integration/projects.routes.test.ts1700 // ── GET /projects/:projectId/chats ────────────────────────────────────COMMENT
MEDIUM…kend/src/__tests__/integration/projects.routes.test.ts1825 // ── GET /projects/:projectId/documents (checkProjectAccess guard) ─────COMMENT
MEDIUM…kend/src/__tests__/integration/projects.routes.test.ts1855 // ── PATCH /projects/:projectId ───────────────────────────────────────COMMENT
MEDIUM…kend/src/__tests__/integration/projects.routes.test.ts1882 // ── DELETE /projects/:projectId ───────────────────────────────────────COMMENT
MEDIUM…kend/src/__tests__/integration/projects.routes.test.ts1968 // ── GET /projects/:projectId/export (tamper-evident manifest) ─────────COMMENT
MEDIUMbackend/src/__tests__/integration/user.routes.test.ts503 // ── GET /user/profile (MFA bootstrap path) ────────────────────────────COMMENT
MEDIUMbackend/src/__tests__/integration/user.routes.test.ts729 // ── PATCH /user/profile (appearance preference) ───────────────────────COMMENT
MEDIUMbackend/src/__tests__/integration/user.routes.test.ts852 // ── POST /user/profile (bootstrap upsert) ─────────────────────────────COMMENT
MEDIUMbackend/src/__tests__/integration/user.routes.test.ts1025 // ── GET /user/api-keys (presence without plaintext) ───────────────────COMMENT
MEDIUMbackend/src/__tests__/integration/user.routes.test.ts1075 // ── PUT /user/api-keys/:provider (crypto + MFA guard) ─────────────────COMMENT
MEDIUMbackend/src/__tests__/integration/user.routes.test.ts1748 // ── Data export endpoint (MFA-guarded) ─────────────────────────────────COMMENT
MEDIUMbackend/src/__tests__/integration/user.routes.test.ts1815 // ── Data deletion endpoints (MFA-guarded, cleanup helpers) ────────────COMMENT
MEDIUMbackend/src/__tests__/integration/user.routes.test.ts2133 // ── GET /user/mcp-connectors/oauth/callback (popup hand-off page) ─────COMMENT
MEDIUMbackend/src/__tests__/integration/user.routes.test.ts2204 // ── PATCH /user/security/mfa-login (factor-gated, MFA-guarded) ────────COMMENT
MEDIUM…ckend/src/__tests__/integration/tabular.routes.test.ts289 // ── GET /tabular-review/creators ──────────────────────────────────────COMMENT
MEDIUM…ckend/src/__tests__/integration/tabular.routes.test.ts326 // ── GET /tabular-review (overview) ────────────────────────────────────COMMENT
MEDIUM…ckend/src/__tests__/integration/tabular.routes.test.ts442 // ── POST /tabular-review (create) ─────────────────────────────────────COMMENT
MEDIUM…ckend/src/__tests__/integration/tabular.routes.test.ts845 // ── GET /tabular-review/:reviewId (detail) ────────────────────────────COMMENT
MEDIUM…ckend/src/__tests__/integration/tabular.routes.test.ts1044 // ── PATCH /tabular-review/:reviewId ───────────────────────────────────COMMENT
MEDIUM…ckend/src/__tests__/integration/tabular.routes.test.ts1218 // ── DELETE /tabular-review/:reviewId ──────────────────────────────────COMMENT
MEDIUM…ckend/src/__tests__/integration/tabular.routes.test.ts1347 // ── POST /tabular-review/:reviewId/clear-cells ────────────────────────COMMENT
MEDIUM…ckend/src/__tests__/integration/tabular.routes.test.ts1471 // ── POST /tabular-review/:reviewId/regenerate-cell ────────────────────COMMENT
MEDIUM…ckend/src/__tests__/integration/tabular.routes.test.ts1706 // ── the write gate ────────────────────────────────────────────────COMMENT
MEDIUM…ckend/src/__tests__/integration/tabular.routes.test.ts2015 // ── server-owned generation: detach, resume, stop ─────────────────────COMMENT
MEDIUM…ckend/src/__tests__/integration/tabular.routes.test.ts2336 // ── POST /tabular-review/:reviewId/chat (streaming GUARDS only) ───────COMMENT
MEDIUM…ckend/src/__tests__/integration/tabular.routes.test.ts2586 // ── server-owned review chat: detach, resume, stop ────────────────────COMMENT
MEDIUM…ckend/src/__tests__/integration/tabular.routes.test.ts3018 // ── GET /tabular-review/:reviewId/chats ───────────────────────────────COMMENT
MEDIUM…ckend/src/__tests__/integration/tabular.routes.test.ts3056 // ── DELETE / PATCH /tabular-review/:reviewId/chats/:chatId ────────────COMMENT
MEDIUMbackend/src/modules/projects/projects.routes.ts601// ── Folder routes ─────────────────────────────────────────────────────────────COMMENT
MEDIUMscripts/stack.sh89# ---------------------------------------------------------------------------COMMENT
MEDIUMscripts/stack.sh91# ---------------------------------------------------------------------------COMMENT
MEDIUMscripts/stack.sh133# ---------------------------------------------------------------------------COMMENT
MEDIUMscripts/stack.sh135# ---------------------------------------------------------------------------COMMENT
MEDIUMscripts/stack.sh271# ---------------------------------------------------------------------------COMMENT
19 more matches not shown…
Over-Commented Block177 hits · 177 pts
SeverityFileLineSnippetContext
LOW.gitleaks.toml1# gitleaks config for the Secret scan workflow (.github/workflows/gitleaks.yml).COMMENT
LOWdocker-compose.yml1# MikeOSS — full local stack, one `docker compose up`. No external accounts.COMMENT
LOWdocker-compose.yml61 # Enterprise SAML is opt-in. Set these in the Compose environment/rootCOMMENT
LOWdocker-compose.yml121 retries: 20COMMENT
LOWdocker-compose.yml321 condition: service_completed_successfullyCOMMENT
LOWdocker-compose.yml341 # env_file:COMMENT
LOWdocker/db-init/adopt-ledger.sh1#!/usr/bin/env bashCOMMENT
LOWfrontend/tsconfig.build.json1{COMMENT
LOWfrontend/vitest.setup.ts1import "@testing-library/jest-dom/vitest";COMMENT
LOWfrontend/src/app/contexts/UserProfileContext.tsx221COMMENT
LOWfrontend/src/app/contexts/ChatHistoryContext.tsx301 ? { org_id: workspaceOrgId }COMMENT
LOWfrontend/src/app/(pages)/settings/connectors/page.tsx801 }COMMENT
LOW…jects/[id]/assistant/chat/[chatId]/page.roles.test.tsx1import { describe, expect, it, vi, beforeEach } from "vitest";COMMENT
LOW…end/src/app/components/assistant/AssistantChatPane.tsx101 // load, which used to read "Viewing only — sending needs edit access" atCOMMENT
LOW…d/src/app/components/assistant/panelDocumentVersion.ts81// visible when a document was missing. Every caller now has a reason to give,COMMENT
LOW…components/organizations/OrganizationSettingsShell.tsx21import { useItemWorkspace } from "@/app/hooks/useItemWorkspace";COMMENT
LOW…ontend/src/app/components/projects/NewProjectModal.tsx81 const [pendingProject, setPendingProject] = useState<Project | null>(null);COMMENT
LOW…ntend/src/app/components/projects/ProjectChatPanel.tsx321COMMENT
LOW…ntend/src/app/components/tabular/TabularReviewView.tsx221 const stopRequestedRef = useRef(false);COMMENT
LOW…ntend/src/app/components/tabular/TabularReviewView.tsx421 -1,COMMENT
LOW…ntend/src/app/components/tabular/TabularReviewView.tsx821 action: "show a generated cell",COMMENT
LOW…nd/src/app/components/workflows/WorkflowDetailPage.tsx781 email: share.shared_with_email,COMMENT
LOWfrontend/src/shared/ui/dropdown.tsx21// never hidden behind its host. A caller can still pass its own `z-*` class.COMMENT
LOWfrontend/src/shared/lib/modelCatalog.ts1// The model catalog both clients build their pickers from: the web app (viaCOMMENT
LOWfrontend/src/__tests__/architecture.test.ts1// Architecture fitness test — the frontend's build-boundary rules, executable.COMMENT
LOWdesktop/scripts/fetch-local-stack.sh1#!/usr/bin/env bashCOMMENT
LOWdesktop/src/main.js201 // callback); all http(s) hops must stay in the popup so window.openerCOMMENT
LOWdesktop/src/main.js241 void resolveForeignNavigation(url, win.webContents);COMMENT
LOWdesktop/src/local/supervisor.js1// The local stack supervisor — docker-compose reimplemented as a processCOMMENT
LOWdesktop/src/local/upgrade.test.js1// The desktop counterpart of .github/workflows/schema-drift.yml, run throughCOMMENT
LOWdesktop/src/local/sql.js1// Applying a SQL file through the pure-JS `pg` client.COMMENT
LOWdesktop/src/local/secrets.js1// Per-install secrets for the local stack, minted once on first run.COMMENT
LOWbackend/tsconfig.test.json1// Type-checks the test suites, which the build tsconfig deliberately excludesCOMMENT
LOWbackend/supabase/config.toml1# For detailed configuration reference documentation, visit:COMMENT
LOWbackend/supabase/config.toml21# without explicit GRANTs. When unset, new entities are NOT auto-exposed, matching the new cloudCOMMENT
LOWbackend/supabase/config.toml121# [storage.buckets.images]COMMENT
LOWbackend/supabase/config.toml161# external_url = ""COMMENT
LOWbackend/supabase/config.toml181# Allow/disallow anonymous sign-ins to your project.COMMENT
LOWbackend/supabase/config.toml201[auth.rate_limit]COMMENT
LOWbackend/supabase/config.toml261COMMENT
LOWbackend/supabase/config.toml281# inactivity_timeout = "8h"COMMENT
LOWbackend/supabase/config.toml321# enroll_enabled = trueCOMMENT
LOWbackend/supabase/config.toml421# Configures AWS_SECRET_ACCESS_KEY for S3 bucketCOMMENT
LOWbackend/scripts/migrate.sh1#!/usr/bin/env bashCOMMENT
LOWbackend/scripts/migrate.sh21# a file applied by hand (for example in the SQL editor).COMMENT
LOWbackend/src/workerRuntime.ts1// Everything that processes background work, bundled behind one start/stopCOMMENT
LOWbackend/src/worker.ts1// Standalone worker entrypoint — run background workers as their ownCOMMENT
LOWbackend/src/middleware/asyncRoute.ts1// Shared plumbing for async Express handlers.COMMENT
LOWbackend/src/middleware/asyncRoute.ts41// Its only job is to attribute the failure to a router in the logs; theCOMMENT
LOWbackend/src/__tests__/workerEntrypoint.test.ts1import { describe, it, expect } from "vitest";COMMENT
LOWbackend/src/__tests__/schemaOrder.test.ts1import { readFileSync } from "node:fs";COMMENT
LOWbackend/src/__tests__/lifecycleGate.test.ts1import { describe, it, expect, afterEach } from "vitest";COMMENT
LOW…kend/src/__tests__/orgAccessFollowup.migration.test.ts1import { describe, it, expect } from "vitest";COMMENT
LOWbackend/src/__tests__/architecture.test.ts1// Architecture fitness test — the backend's layering rules, executable.COMMENT
LOWbackend/src/__tests__/architecture.test.ts21// visible and can only shrink (a ratchet).COMMENT
LOW…/src/__tests__/integration/asyncExports.routes.test.ts1import { describe, it, expect, vi, beforeEach } from "vitest";COMMENT
LOW…ckend/src/__tests__/integration/stack.supabase.test.ts1import { randomUUID } from "node:crypto";COMMENT
LOWbackend/src/__tests__/integration/orgs.routes.test.ts1import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";COMMENT
LOW…end/src/__tests__/integration/workflows.routes.test.ts21// ---------------------------------------------------------------------------COMMENT
LOW…__/integration/projects.directorySearch.routes.test.ts1import { describe, it, expect, vi, beforeEach } from "vitest";COMMENT
117 more matches not shown…
Fake / Example Data46 hits · 50 pts
SeverityFileLineSnippetContext
LOWfrontend/src/app/signup/page.test.tsx99 "placeholder",CODE
LOW…src/app/components/assistant/ChatView.actions.test.tsx98 useAuth: () => ({ user: { id: "user-1", email: "user@example.com" } }),CODE
LOW…ntend/src/app/components/settings/ApiKeyField.test.tsx55 expect(input).not.toHaveAttribute("placeholder");CODE
LOW…/src/app/components/projects/ProjectWorkspace.test.tsx27 useAuth: () => ({ user: { id: "user-1", email: "user@example.com" } }),CODE
LOW…p/components/projects/ProjectWorkspace.errors.test.tsx31 useAuth: () => ({ user: { id: "user-1", email: "user@example.com" } }),CODE
LOW…c/app/components/workflows/OpenSourceWorkflowModal.tsx237 placeholder="Jane Doe"CODE
LOW…ponents/workflows/WorkflowDetailPage.recovery.test.tsx29 useAuth: () => ({ user: { id: "user-1", email: "user@example.com" } }),CODE
LOW…src/app/components/playbooks/PlaybookRuleForm.test.tsx110 expect(screen.getByLabelText(label)).not.toHaveAttribute("placeholder");CODE
LOW…d/src/app/components/playbooks/PlaybookEditor.test.tsx190 expect(input).toHaveAttribute("placeholder", "Untitled rule");CODE
LOWfrontend/src/app/login/page.test.tsx88 "placeholder",CODE
LOWfrontend/src/shared/lib/diagnosticVocabulary.test.ts13 expect(diagnosticEvent({ tags: { operation: "Jane Doe's file.pdf", filename: "private.pdf" }, request: { data: "CODE
LOW…src/__tests__/integration/documentsFile.routes.test.ts41 res.locals.userEmail = "user@example.com";CODE
LOW…s__/integration/orgDepartureRetention.postgres.test.ts248 sql(`insert into public.user_profiles(user_id,display_name,email) values (${q(2)},'Jane Doe','departing@example.CODE
LOW…s__/integration/orgDepartureRetention.postgres.test.ts260 { kind: "chat", item_id: uid(64), title: "Standalone", former_user_id: uid(2), former_display_name: "Jane DoCODE
LOWbackend/src/__tests__/integration/memory.routes.test.ts30 res.locals.userEmail = "user@example.com";CODE
LOW…rc/__tests__/integration/storageAdapter.routes.test.ts67 res.locals.userEmail = "user@example.com";CODE
LOWbackend/src/lib/pdfText.test.ts476 withPdf([[]], [[{ fieldName: "Name", fieldValue: "Jane Doe" }]]);CODE
LOW…end/src/lib/observability/sentryPrivacy.canary.test.ts14const CANARIES = ['Jane_Doe_NDA.pdf', 'Jane Doe', 'jane@acme-law.example', 'documents/u1/d1/source.pdf', 'Acme Corp v. DCODE
LOW…end/src/lib/observability/sentryPrivacy.canary.test.ts44 const cause = Object.assign(new Error('AccessDenied for documents/u1/d1/source.pdf uploaded by jane@acme-law.example')CODE
LOW…end/src/lib/observability/sentryPrivacy.canary.test.ts80 diagnosticEvent({ tags: { component: 'word-office', operation: 'word.edit_apply', stage: 'apply', office_code: 'ItemCODE
LOWbackend/src/lib/__tests__/userLookup.test.ts101 expect(normalizeEmail(" User@Example.COM ")).toBe("user@example.com");CODE
LOW⚡backend/src/modules/chat/__tests__/chat.leave.test.ts50 ], "user@example.com");CODE
LOW⚡backend/src/modules/chat/__tests__/chat.leave.test.ts56 await withChatLeaveAccess(db, Array.from({ length: 201 }, (_, i) => ({ id: String(i), project_id: null, access_rCODE
LOW⚡backend/src/modules/chat/__tests__/chat.leave.test.ts62 expect(await withChatLeaveAccess(db, [{ id: "c", project_id: null, access_role: "viewer" }], "user@example.com")CODE
LOW…c/modules/projects/__tests__/projects.overview.test.ts23 p_user_email: "user@example.com",CODE
LOW…c/modules/projects/__tests__/projects.overview.test.ts70 p_user_email: "user@example.com",CODE
LOW…src/modules/tabular/__tests__/tabular.overview.test.ts22 p_user_email: "user@example.com",CODE
LOW…src/modules/tabular/__tests__/tabular.overview.test.ts67 p_user_email: "user@example.com",CODE
LOW…/src/modules/tabular/__tests__/tabular.history.test.ts22 p_user_id: "u1", p_user_email: "user@example.com", p_review_ids: ["r1"],CODE
LOW…modules/workflows/__tests__/workflows.overview.test.ts25 p_user_email: "user@example.com",CODE
LOW…modules/workflows/__tests__/workflows.overview.test.ts78 p_user_email: "user@example.com",CODE
LOW…d/src/modules/uploads/__tests__/uploads.access.test.ts85 "user@example.com",CODE
LOW…d/src/modules/uploads/__tests__/uploads.access.test.ts103 "user@example.com",CODE
LOW…d/src/modules/uploads/__tests__/uploads.access.test.ts127 "user@example.com",CODE
LOW…d/src/modules/uploads/__tests__/uploads.access.test.ts155 "user@example.com",CODE
LOWbackend/src/modules/orgs/orgs.retention.test.ts68 former_user_id: "jane", former_display_name: "Jane Doe", former_email: "jane@example.test",CODE
LOW⚡backend/src/modules/orgs/orgs.retention.test.ts95 ["Jane Doe", "2026-10-01T00:00:00+00:00", "2026-10-31T00:00:00+00:00", 2],CODE
LOW⚡backend/src/modules/orgs/orgs.retention.test.ts96 ["Jane Doe", "2026-10-05T00:00:00+00:00", "2026-11-04T00:00:00+00:00", 1],CODE
LOW⚡backend/src/modules/orgs/orgs.retention.test.ts103 expect(result.data.departures[0].member).toEqual({ user_id: "jane", display_name: "Jane Doe", email: "jane@exampCODE
LOWword-addin/e2e/auth.spec.ts79 await expect(email).not.toHaveAttribute("placeholder");CODE
LOWword-addin/e2e/auth.spec.ts83 await expect(password).not.toHaveAttribute("placeholder");CODE
LOW⚡word-addin/e2e/replace-all.spec.ts21 "Acme Corp",CODE
LOW⚡word-addin/e2e/replace-all.spec.ts22 "Acme Ltd",CODE
LOW⚡word-addin/e2e/replace-all.spec.ts27const WRITE = { text: "Acme Ltd", location: "After", original: "Acme Corp" };CODE
LOWword-addin/e2e/replace-all.spec.ts84 original_text: "Acme Corp",CODE
LOWword-addin/e2e/replace-all.spec.ts85 replacement_text: "Acme Ltd",CODE
AI Slop Vocabulary7 hits · 21 pts
SeverityFileLineSnippetContext
MEDIUM…tend/src/app/components/shared/views/highlightQuote.ts19// Strip everything except alphanumerics (a-z A-Z 0-9) for robust matchingCOMMENT
MEDIUMbackend/scripts/test-stack.sh5# mocks. They are the harness you re-run on every Supabase image bump to proveCOMMENT
MEDIUM.github/workflows/stack-tests.yml47 # deliberately (this is also the harness you re-run on image bumps).COMMENT
MEDIUM.github/workflows/mutation.yml12# original header guessed). That promotion is held back because the harnessCOMMENT
MEDIUM.github/workflows/ci.yml6# regresses — the `--if-present` escape hatches from the pre-harness era areCOMMENT
MEDIUM.github/workflows/ci.yml102 # pre-harness fallback: if "test:coverage" were ever renamed orCOMMENT
MEDIUM.github/workflows/ci.yml105 # harness landed, so the fallback buys nothing but that silence — itCOMMENT
Modern AI Meta-Vocabulary4 hits · 12 pts
SeverityFileLineSnippetContext
MEDIUMbackend/src/modules/tabular/tabular.routes.ts950// POST /tabular-review/:reviewId/chat — agentic streamingCOMMENT
MEDIUMbackend/src/modules/tabular/tabular.chats.ts4// and building the system + history messages the agentic review chat streamsCOMMENT
MEDIUM.github/workflows/word-addin.yml116 # orchestration: its webServer command runs `build:e2e` (typecheck +COMMENT
MEDIUM.github/workflows/e2e.yml246 # (the app targets a hosted Supabase project), so we scaffold one withCOMMENT
Example Usage Blocks1 hit · 2 pts
SeverityFileLineSnippetContext
LOWbackend/scripts/migrate.sh6# Usage:COMMENT
Verbosity Indicators1 hit · 2 pts
SeverityFileLineSnippetContext
LOWword-addin/e2e/conflicted-retry.spec.ts97 // Step 1: the occupying revision was accepted (and only it)…COMMENT
Structural Annotation Overuse1 hit · 2 pts
SeverityFileLineSnippetContext
LOWword-addin/e2e/conflicted-retry.spec.ts97 // Step 1: the occupying revision was accepted (and only it)…COMMENT