Repository Analysis

paperclipai/paperclip

The open-source app everyone uses to manage agents at work

4.0 Likely human-written View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of paperclipai/paperclip, a TypeScript project with 73,591 GitHub stars. SynthScan v2.0 examined 975,923 lines of code across 3072 source files, recording 3662 pattern matches distributed across 10 syntactic categories. The overall adjusted score of 4.0 places this repository in the Likely human-written band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

4.0
Adjusted Score
4.0
Raw Score
100%
Time Factor
2026-07-14
Last Push
73.6K
Stars
TypeScript
Language
975.9K
Lines of Code
3.1K
Files
3.7K
Pattern Hits
2026-07-14
Scan Date
0.00
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 3HIGH 0MEDIUM 201LOW 3458

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 3662 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Hyper-Verbose Identifiers3204 hits · 2966 pts
SeverityFileLineSnippetContext
LOWui/storybook/.storybook/preview.tsx41function withStorybookTimelineDetails(data: WorkTimelineResult): WorkTimelineResult {CODE
LOWui/storybook/.storybook/preview.tsx72function installStorybookApiFixtures() {CODE
LOW…torybook/stories/projects-goals-workspaces.stories.tsx446function ProjectsGoalsWorkspacesStories() {CODE
LOW…rybook/stories/assigned-backlog-safeguards.stories.tsx95function AssignedBacklogNoticePanel() {CODE
LOWui/storybook/stories/scheduled-retry.stories.tsx59function ScheduledRetrySurfaceStories() {CODE
LOWui/storybook/stories/successful-run-handoff.stories.tsx33function SuccessfulRunHandoffStates() {CODE
LOWui/storybook/stories/successful-run-handoff.stories.tsx164function SuccessfulRunHandoffPinnedNotice() {CODE
LOWui/storybook/stories/successful-run-handoff.stories.tsx168function SuccessfulRunHandoffActivityEvents() {CODE
LOWui/storybook/stories/successful-run-handoff.stories.tsx172function SuccessfulRunHandoffIssueCard() {CODE
LOWui/storybook/stories/successful-run-handoff.stories.tsx176function SuccessfulRunHandoffEscalationComment() {CODE
LOWui/storybook/stories/issue-management.stories.tsx238function seedIssueListLocalStorage() {CODE
LOWui/storybook/stories/issue-management.stories.tsx285function IssuePropertiesLongValuePane({ inline = false }: { inline?: boolean }) {CODE
LOWui/storybook/stories/issue-management.stories.tsx314function ColumnConfigurationMatrix() {CODE
LOWui/storybook/stories/issue-management.stories.tsx891function ModelProfileLedgerStandalone() {CODE
LOWui/storybook/stories/blocked-inbox.stories.tsx211function BlockedReasonChipsCatalog() {CODE
LOW…torybook/stories/issue-thread-interactions.stories.tsx109function InteractiveSuggestedTasksCard() {CODE
LOW…torybook/stories/issue-thread-interactions.stories.tsx169function InteractiveAskUserQuestionsCard() {CODE
LOW…torybook/stories/issue-thread-interactions.stories.tsx186function InteractiveRequestConfirmationCard() {CODE
LOW…torybook/stories/issue-thread-interactions.stories.tsx211function InteractiveRequestCheckboxConfirmationCard({CODE
LOW…torybook/stories/issue-thread-interactions.stories.tsx252function InteractiveRequestItemVerdictsCard({CODE
LOW…torybook/stories/issue-thread-interactions.stories.tsx299function AutoOpenDeclineRequestConfirmationCard({CODE
LOWui/storybook/stories/external-objects.stories.tsx625function FilterPopoverWithExternalChecked() {CODE
LOWui/storybook/stories/dialogs-modals.stories.tsx644function ExecutionWorkspaceDialogStory({ blocked }: { blocked?: boolean }) {CODE
LOWui/storybook/stories/dialogs-modals.stories.tsx708function findAssigneeOptionsButton() {CODE
LOWui/storybook/stories/dialogs-modals.stories.tsx715function useCheapLaneAdapterOverrides(variant: CheapLaneVariant) {CODE
LOWui/storybook/stories/dialogs-modals.stories.tsx764function CheapLaneIssueDialogOpener({ variant }: { variant: CheapLaneVariant }) {CODE
LOWui/storybook/stories/dialogs-modals.stories.tsx820function PathInstructionsModalStory() {CODE
LOWui/storybook/stories/search.stories.tsx414function SearchOperatorInputPreview() {CODE
LOWui/storybook/stories/search.stories.tsx447function CommandPaletteWithSearchAll({CODE
LOWui/storybook/stories/navigation-layout.stories.tsx127function MobileBottomNavActiveStateMatrix() {CODE
LOWui/storybook/stories/navigation-layout.stories.tsx370function SidebarIconAlignmentHarness() {CODE
LOWui/storybook/stories/document-annotations.stories.tsx369function DirtyDraftWithIntegratedHeader() {CODE
LOWui/storybook/stories/forms-editors.stories.tsx467function EnvironmentVariablesEditorGallery() {CODE
LOWui/storybook/stories/work-timeline.stories.tsx22function withStorybookTimelineDetails(data: WorkTimelineResult): WorkTimelineResult {CODE
LOWui/src/App.tsx242function LegacySkillStudioRedirect() {CODE
LOWui/src/main.tsx40function CompanyAwareBreadcrumbProvider({ children }: { children: React.ReactNode }) {CODE
LOWui/src/context/EditorAutocompleteContext.tsx41export function EditorAutocompleteProvider({ children }: { children: ReactNode }) {CODE
LOWui/src/context/FileViewerContext.tsx56export function getCurrentFileViewerSearch(fallbackSearch: string): string {CODE
LOWui/src/context/FileViewerContext.tsx61export function shouldNavigateFileViewerSearch(nextSearch: string, fallbackSearch: string): boolean {CODE
LOWui/src/context/FileViewerContext.tsx65export function readFileViewerStateFromSearch(search: string): FileViewerUrlState | null {CODE
LOWui/src/context/FileViewerContext.tsx90export function writeFileViewerStateToSearch(current: string, next: FileViewerUrlState | null): string {CODE
LOWui/src/context/FileViewerContext.tsx127export function readBrowseStateFromSearch(search: string): FileViewerBrowseState | null {CODE
LOWui/src/context/FileViewerContext.tsx142export function writeFolderViewerStateToSearch(CODE
LOWui/src/context/FileViewerContext.tsx202function EnabledFileViewerProvider({ issueId, children }: Omit<FileViewerProviderProps, "enabled">) {CODE
LOWui/src/context/LiveUpdatesProvider.tsx180function resolveVisibleIssueRouteContext(CODE
LOWui/src/context/LiveUpdatesProvider.tsx233function shouldSuppressActivityToastForVisibleIssue(CODE
LOWui/src/context/LiveUpdatesProvider.tsx249function shouldSuppressRunStatusToastForVisibleIssue(CODE
LOWui/src/context/LiveUpdatesProvider.tsx265function invalidateVisibleIssueRunQueries(CODE
LOWui/src/context/LiveUpdatesProvider.tsx366function readRunLiveStatusPatchFromPayload(CODE
LOWui/src/context/LiveUpdatesProvider.tsx409function applyRunLiveStatusPatchToCaches(CODE
LOWui/src/context/LiveUpdatesProvider.tsx467function shouldSuppressAgentStatusToastForVisibleIssue(CODE
LOWui/src/context/LiveUpdatesProvider.tsx480function shouldDeferIssueRefetchForVisibleAgentActivity(CODE
LOWui/src/context/LiveUpdatesProvider.tsx503function shouldDeferVisibleIssueCommentActivity(CODE
LOWui/src/context/LiveUpdatesProvider.tsx523async function hydrateVisibleIssueComment(CODE
LOWui/src/context/LiveUpdatesProvider.tsx799function invalidateHeartbeatQueries(CODE
LOWui/src/context/LiveUpdatesProvider.tsx818function invalidateHeartbeatProgressQueries(CODE
LOWui/src/context/LiveUpdatesProvider.tsx829function invalidateActivityQueries(CODE
LOWui/src/context/CompanyContext.tsx38export function resolveBootstrapCompanySelection(input: {CODE
LOWui/src/context/CompanyContext.tsx58export function shouldClearStoredCompanySelection(input: {CODE
LOWui/src/plugins/launchers.tsx161function resolveLauncherNavigationTarget(target: string, hostContext: PluginLauncherContext): string {CODE
3144 more matches not shown…
Decorative Section Separators187 hits · 504 pts
SeverityFileLineSnippetContext
MEDIUMui/src/adapters/registry.ts166 // ── Builtin override lifecycle ──────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/registry.ts222 // ── Non-builtin externals ───────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/schema-config-fields.tsx16// ── Select field (extracted to keep hooks at component top level) ──────COMMENT
MEDIUMui/src/adapters/sandboxed-parser-worker.ts14// ── Message protocol ────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/sandboxed-parser-worker.ts27// ── Worker bootstrap source ─────────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/sandboxed-parser-worker.ts41// ── 1. Lock down dangerous globals ──────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/sandboxed-parser-worker.ts82// ── 2. Parser state ─────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/sandboxed-parser-worker.ts88// ── 3. Message handler ──────────────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/sandboxed-parser-worker.ts158// ── Public API ───────────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/dynamic-loader.ts35// ── Types ───────────────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/dynamic-loader.ts49// ── State ───────────────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/dynamic-loader.ts69// ── Internal helpers ────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/dynamic-loader.ts210// ── Public API ──────────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/components/PipelineItemBodyDocument.tsx281 // ── Body content (edit / preview / read) ──────────────────────────────────────────────COMMENT
MEDIUMui/src/components/transcript/RunTranscriptView.tsx625 // ── Diff entries — accumulate into diff_group blocks ──────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx52// ── Import-specific helpers ───────────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx148// ── Import file tree customization ───────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx180// ── Preview pane ──────────────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx267// ── Conflict item type ───────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx389// ── Conflict resolution UI ───────────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx515// ── Adapter type options for import ───────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx522// ── Adapter picker for imported agents ───────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx625// ── Helpers ───────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx646// ── Main page ─────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/OrgChart.tsx27// ── Tree layout types ───────────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/OrgChart.tsx54// ── Layout algorithm ────────────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/OrgChart.tsx158// ── Status dot colors (raw hex for SVG) ─────────────────────────────────COMMENT
MEDIUMui/src/pages/OrgChart.tsx172// ── Main component ──────────────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyExport.tsx345// ── Frontmatter card (export-specific: skill click support) ──────────COMMENT
MEDIUMui/src/pages/CompanyExport.tsx390// ── Client-side README generation ────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyExport.tsx488// ── Preview pane ──────────────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyExport.tsx557// ── Main page ─────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/nux-phase4-screenshots.spec.ts60 // ── Section A: create-company path (name → mission → hire) ────────────COMMENT
MEDIUMtests/e2e/nux-phase4-screenshots.spec.ts101 // ── Section B: front door + growth intake ─────────────────────────────COMMENT
MEDIUMtests/e2e/nux-phase4-screenshots.spec.ts132 // ── Section C: Conference Room (BoardChat) ────────────────────────────COMMENT
MEDIUMtests/e2e/nux-phase4-screenshots.spec.ts148 // ── Section D: Artifacts ──────────────────────────────────────────────COMMENT
MEDIUMserver/src/__tests__/plugin-routes-authz.test.ts917 // ─── Agent JWT tool execution (cherry-picked from #5549) ─────────────────────COMMENT
MEDIUMserver/src/__tests__/plugin-routes-authz.test.ts917 // ─── Agent JWT tool execution (cherry-picked from #5549) ─────────────────────COMMENT
MEDIUMserver/src/routes/adapters.ts564 // ── POST /api/adapters/:type/reinstall ──────────────────────────────────COMMENT
MEDIUMserver/src/routes/adapters.ts632 // ── GET /api/adapters/:type/config-schema ────────────────────────────────COMMENT
MEDIUMserver/src/routes/adapters.ts676 // ── GET /api/adapters/:type/ui-parser.js ─────────────────────────────────COMMENT
MEDIUMserver/src/routes/org-chart-svg.ts30// ── Style theme definitions ──────────────────────────────────────COMMENT
MEDIUMserver/src/routes/org-chart-svg.ts54// ── Role config with Twemoji SVG inlines (viewBox 0 0 36 36) ─────COMMENT
MEDIUMserver/src/routes/org-chart-svg.ts159// ── Style themes ─────────────────────────────────────────────────COMMENT
MEDIUMserver/src/routes/org-chart-svg.ts318// ── Layout constants ─────────────────────────────────────────────COMMENT
MEDIUMserver/src/routes/org-chart-svg.ts327// ── Collapsed avatar grid constants ─────────────────────────────COMMENT
MEDIUMserver/src/routes/org-chart-svg.ts335// ── Text measurement ─────────────────────────────────────────────COMMENT
MEDIUMserver/src/routes/org-chart-svg.ts379// ── Tree layout (top-down, centered) ─────────────────────────────COMMENT
MEDIUMserver/src/routes/org-chart-svg.ts420// ── SVG rendering ────────────────────────────────────────────────COMMENT
MEDIUMserver/src/routes/org-chart-svg.ts566// ── Public API ───────────────────────────────────────────────────COMMENT
MEDIUMserver/src/routes/openapi.ts420// ─── Common schemas ──────────────────────────────────────────────────────────COMMENT
MEDIUMserver/src/routes/openapi.ts881// ─── Health ──────────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/src/routes/openapi.ts969// ─── Companies ───────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/src/routes/openapi.ts1131// ─── Teams Catalog ──────────────────────────────────────────────────────────COMMENT
MEDIUMserver/src/routes/openapi.ts1149// ─── Agents ──────────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/src/routes/openapi.ts1603// ─── Adapters ────────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/src/routes/openapi.ts1635// ─── Issues ──────────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/src/routes/openapi.ts2091// ─── Projects ────────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/src/routes/openapi.ts2186// ─── Routines ────────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/src/routes/openapi.ts2305// ─── Goals ───────────────────────────────────────────────────────────────────COMMENT
127 more matches not shown…
Structural Annotation Overuse109 hits · 199 pts
SeverityFileLineSnippetContext
LOWtests/e2e/signoff-policy.spec.ts301 // Step 1: Executor marks done → should route to reviewerCOMMENT
LOWtests/e2e/signoff-policy.spec.ts319 // Step 2: Navigate to issue in UI and verify execution labelCOMMENT
LOWtests/e2e/signoff-policy.spec.ts323 // Step 3: Reviewer approves → should route to approverCOMMENT
LOWtests/e2e/signoff-policy.spec.ts337 // Step 4: Verify UI shows approval pendingCOMMENT
LOWtests/e2e/signoff-policy.spec.ts341 // Step 5: Approver approves → should completeCOMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts62 // Step 0: front door (skipped when the wizard opens on the create path).COMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts66 // Step 1: company name.COMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts70 // Step 2: mission (direct path default).COMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts76 // Step 3: lead name (prefilled) → Next.COMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts82 // Step 4: adapter (claude_local default); heartbeat is intercepted.COMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts85 // Step 5: review → Get started creates the first task and opens dashboard.COMMENT
LOW.agents/skills/company-creator/SKILL.md33### Step 1: Gather ContextCOMMENT
LOW.agents/skills/company-creator/SKILL.md40### Step 2: Interview (Use AskUserQuestion)COMMENT
LOW.agents/skills/company-creator/SKILL.md88### Step 3: Read the SpecCOMMENT
LOW.agents/skills/company-creator/SKILL.md100### Step 4: Generate the PackageCOMMENT
LOW.agents/skills/company-creator/SKILL.md159### Step 5: Confirm Output LocationCOMMENT
LOW.agents/skills/company-creator/SKILL.md167### Step 6: Write README.md and LICENSECOMMENT
LOW.agents/skills/company-creator/SKILL.md180### Step 7: Write Files and SummarizeCOMMENT
LOW.agents/skills/deal-with-security-advisory/SKILL.md26## Step 0: Fetch the Advisory DetailsCOMMENT
LOW.agents/skills/deal-with-security-advisory/SKILL.md37## Step 1: Acknowledge the ReportCOMMENT
LOW.agents/skills/deal-with-security-advisory/SKILL.md47## Step 2: Create the Temporary Private ForkCOMMENT
LOW.agents/skills/deal-with-security-advisory/SKILL.md78## Step 3: Develop and Validate the FixCOMMENT
LOW.agents/skills/deal-with-security-advisory/SKILL.md103## Step 4: Coordinate with the ReporterCOMMENT
LOW.agents/skills/deal-with-security-advisory/SKILL.md111## Step 5: Request a CVECOMMENT
LOW.agents/skills/deal-with-security-advisory/SKILL.md123## Step 6: Publish Everything SimultaneouslyCOMMENT
LOW.agents/skills/deal-with-security-advisory/SKILL.md208## Step 7: Post-Publication VerificationCOMMENT
LOWserver/src/routes/access.ts1931 ## Step 2: Wait for board approvalCOMMENT
LOWserver/src/routes/access.ts1934 ## Step 3: Claim API key (one-time)COMMENT
LOWserver/src/routes/access.ts1857 ## Step 1: Submit agent join requestCOMMENT
LOWserver/src/routes/access.ts1951 ## Step 4: Install Paperclip skillCOMMENT
LOWserver/src/routes/plugins.ts2530 // Step 1: Resolve the pluginCOMMENT
LOWserver/src/routes/plugins.ts2537 // Step 2: Validate the plugin is in 'ready' stateCOMMENT
LOWserver/src/routes/plugins.ts2545 // Step 3: Validate the plugin has webhooks.receive capabilityCOMMENT
LOWserver/src/routes/plugins.ts2605 // Step 7: Dispatch to the worker via handleWebhook RPCCOMMENT
LOWserver/src/routes/plugins.ts2615 // Step 8: Update delivery record to successCOMMENT
LOWserver/src/routes/plugins.ts2560 // Step 4: Validate the endpointKey exists in the manifest's webhook declarationsCOMMENT
LOWserver/src/routes/plugins.ts2572 // Step 5: Extract request dataCOMMENT
LOWserver/src/routes/plugins.ts2591 // Step 6: Record the delivery in the databaseCOMMENT
LOWserver/src/routes/plugin-ui-static.ts244 // Step 1: Look up the pluginCOMMENT
LOWserver/src/routes/plugin-ui-static.ts266 // Step 2: Verify the plugin is ready and has UI declaredCOMMENT
LOWserver/src/routes/plugin-ui-static.ts393 // Step 3: Resolve the plugin's UI directoryCOMMENT
LOWserver/src/routes/plugin-ui-static.ts410 // Step 4: Resolve the requested file path and prevent traversal (including symlinks)COMMENT
LOWserver/src/routes/plugin-ui-static.ts413 // Step 5: Check that the file exists and is a regular fileCOMMENT
LOWserver/src/routes/plugin-ui-static.ts445 // Step 6: Determine cache strategy based on filenameCOMMENT
LOWserver/src/routes/plugin-ui-static.ts449 // Step 7: Set cache headersCOMMENT
LOWserver/src/routes/plugin-ui-static.ts467 // Step 8: Set Content-TypeCOMMENT
LOWserver/src/routes/plugin-ui-static.ts474 // Step 9: Set CORS headers (plugin UI may be loaded from different origin in dev)COMMENT
LOWserver/src/routes/plugin-ui-static.ts477 // Step 10: Send the fileCOMMENT
LOWserver/src/services/plugin-worker-manager.ts992 // Step 1: Send shutdown RPC and wait for the worker to exit gracefully.COMMENT
LOWserver/src/services/plugin-worker-manager.ts1016 // Step 2: Send SIGTERM and waitCOMMENT
LOWserver/src/services/plugin-worker-manager.ts1025 // Step 3: Forcefully kill with SIGKILLCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts266 // Step 1: Resolve environmentCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts273 // Step 2: Acquire leaseCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts284 // Step 3: Log lease acquisition activityCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts304 // Step 4: Resolve execution transportCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts354 // Step 1: Build workspace realization requestCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts367 // Step 2: Realize workspace in the environment via the runtime driverCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts445 // Step 3: Persist realization metadata on lease and execution workspaceCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts469 // Step 4: Resolve execution target for the adapterCOMMENT
LOWserver/src/services/plugin-tool-dispatcher.ts330 // Step 1: Load tools from all currently-ready pluginsCOMMENT
49 more matches not shown…
Verbosity Indicators51 hits · 99 pts
SeverityFileLineSnippetContext
LOWtests/e2e/signoff-policy.spec.ts301 // Step 1: Executor marks done → should route to reviewerCOMMENT
LOWtests/e2e/signoff-policy.spec.ts319 // Step 2: Navigate to issue in UI and verify execution labelCOMMENT
LOWtests/e2e/signoff-policy.spec.ts323 // Step 3: Reviewer approves → should route to approverCOMMENT
LOWtests/e2e/signoff-policy.spec.ts337 // Step 4: Verify UI shows approval pendingCOMMENT
LOWtests/e2e/signoff-policy.spec.ts341 // Step 5: Approver approves → should completeCOMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts62 // Step 0: front door (skipped when the wizard opens on the create path).COMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts66 // Step 1: company name.COMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts70 // Step 2: mission (direct path default).COMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts76 // Step 3: lead name (prefilled) → Next.COMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts82 // Step 4: adapter (claude_local default); heartbeat is intercepted.COMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts85 // Step 5: review → Get started creates the first task and opens dashboard.COMMENT
LOWserver/src/routes/access.ts1931 ## Step 2: Wait for board approvalCOMMENT
LOWserver/src/routes/access.ts1934 ## Step 3: Claim API key (one-time)COMMENT
LOWserver/src/routes/access.ts1857 ## Step 1: Submit agent join requestCOMMENT
LOWserver/src/routes/access.ts1951 ## Step 4: Install Paperclip skillCOMMENT
LOWserver/src/routes/plugins.ts2530 // Step 1: Resolve the pluginCOMMENT
LOWserver/src/routes/plugins.ts2537 // Step 2: Validate the plugin is in 'ready' stateCOMMENT
LOWserver/src/routes/plugins.ts2545 // Step 3: Validate the plugin has webhooks.receive capabilityCOMMENT
LOWserver/src/routes/plugins.ts2605 // Step 7: Dispatch to the worker via handleWebhook RPCCOMMENT
LOWserver/src/routes/plugins.ts2615 // Step 8: Update delivery record to successCOMMENT
LOWserver/src/routes/plugins.ts2560 // Step 4: Validate the endpointKey exists in the manifest's webhook declarationsCOMMENT
LOWserver/src/routes/plugins.ts2572 // Step 5: Extract request dataCOMMENT
LOWserver/src/routes/plugins.ts2591 // Step 6: Record the delivery in the databaseCOMMENT
LOWserver/src/routes/plugin-ui-static.ts244 // Step 1: Look up the pluginCOMMENT
LOWserver/src/routes/plugin-ui-static.ts266 // Step 2: Verify the plugin is ready and has UI declaredCOMMENT
LOWserver/src/routes/plugin-ui-static.ts393 // Step 3: Resolve the plugin's UI directoryCOMMENT
LOWserver/src/routes/plugin-ui-static.ts410 // Step 4: Resolve the requested file path and prevent traversal (including symlinks)COMMENT
LOWserver/src/routes/plugin-ui-static.ts413 // Step 5: Check that the file exists and is a regular fileCOMMENT
LOWserver/src/routes/plugin-ui-static.ts445 // Step 6: Determine cache strategy based on filenameCOMMENT
LOWserver/src/routes/plugin-ui-static.ts449 // Step 7: Set cache headersCOMMENT
LOWserver/src/routes/plugin-ui-static.ts467 // Step 8: Set Content-TypeCOMMENT
LOWserver/src/routes/plugin-ui-static.ts474 // Step 9: Set CORS headers (plugin UI may be loaded from different origin in dev)COMMENT
LOWserver/src/routes/plugin-ui-static.ts477 // Step 10: Send the fileCOMMENT
LOWserver/src/services/plugin-worker-manager.ts992 // Step 1: Send shutdown RPC and wait for the worker to exit gracefully.COMMENT
LOWserver/src/services/plugin-worker-manager.ts1016 // Step 2: Send SIGTERM and waitCOMMENT
LOWserver/src/services/plugin-worker-manager.ts1025 // Step 3: Forcefully kill with SIGKILLCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts266 // Step 1: Resolve environmentCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts273 // Step 2: Acquire leaseCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts284 // Step 3: Log lease acquisition activityCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts304 // Step 4: Resolve execution transportCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts354 // Step 1: Build workspace realization requestCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts367 // Step 2: Realize workspace in the environment via the runtime driverCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts445 // Step 3: Persist realization metadata on lease and execution workspaceCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts469 // Step 4: Resolve execution target for the adapterCOMMENT
LOWserver/src/services/plugin-tool-dispatcher.ts330 // Step 1: Load tools from all currently-ready pluginsCOMMENT
LOWserver/src/services/plugin-tool-dispatcher.ts350 // Step 2: Subscribe to lifecycle events for dynamic updatesCOMMENT
LOWserver/src/services/plugin-loader.ts1222 // Step 4: Reject incompatible plugin API versionsCOMMENT
LOWserver/src/services/plugin-loader.ts1230 // Step 5: Validate manifest capabilities are consistentCOMMENT
LOWserver/src/services/plugin-loader.ts1201 // Step 3: Read and validate plugin manifestCOMMENT
LOWserver/src/services/plugin-loader.ts1241 // Step 6: Reject plugins that require a newer host than the running serverCOMMENT
LOWserver/src/services/plugin-loader.ts1649 // Step 6: Persist install record and apply plugin-owned schema migrationsCOMMENT
Fake / Example Data50 hits · 50 pts
SeverityFileLineSnippetContext
LOWui/src/App.test.tsx105 user: { id: "user-1", email: "user@example.com", name: "User", image: null },CODE
LOWui/src/App.test.tsx108 user: { id: "user-1", email: "user@example.com", name: "User", image: null },CODE
LOWui/src/App.test.tsx128 user: { id: "user-1", email: "user@example.com", name: "User", image: null },CODE
LOWui/src/App.test.tsx131 user: { id: "user-1", email: "user@example.com", name: "User", image: null },CODE
LOWui/src/App.test.tsx179 user: { id: "user-1", email: "user@example.com", name: "User", image: null },CODE
LOWui/src/App.test.tsx216 user: { id: "user-1", email: "user@example.com", name: "User", image: null },CODE
LOWui/src/App.cases-routing.test.tsx141 user: { id: "user-1", email: "user@example.com", name: "User", image: null },CODE
LOWui/src/App.cases-routing.test.tsx144 user: { id: "user-1", email: "user@example.com", name: "User", image: null },CODE
LOWui/src/plugins/slots.tsx765 missingBehavior?: "hidden" | "placeholder";CODE
LOWui/src/plugins/slots.tsx886 missingBehavior?: "hidden" | "placeholder";CODE
LOWui/src/plugins/slots.test.ts74 missingBehavior: "placeholder",CODE
LOWui/src/components/CommentThread.tsx399 missingBehavior="placeholder"CODE
LOWui/src/components/CommentThread.tsx434 missingBehavior="placeholder"CODE
LOWui/src/components/SidebarProjects.tsx219 missingBehavior="placeholder"CODE
LOWui/src/components/OnboardingWizard.tsx993 placeholder="Acme Corp"CODE
LOWui/src/components/IssueProperties.test.tsx2003 const textInput = inputs.find((input) => input.getAttribute("placeholder") === "What should the agent re-check?");CODE
LOWui/src/components/IssueProperties.test.tsx2098 .find((node) => node.getAttribute("placeholder")?.includes("watchdog"));CODE
LOWui/src/components/Layout.tsx146 missingBehavior="placeholder"CODE
LOWui/src/components/Sidebar.tsx255 missingBehavior="placeholder"CODE
LOWui/src/components/Sidebar.tsx283 missingBehavior="placeholder"CODE
LOWui/src/pages/IssueDetail.tsx4502 missingBehavior="placeholder"CODE
LOWui/src/pages/IssueDetail.tsx4529 missingBehavior="placeholder"CODE
LOWui/src/pages/IssueDetail.tsx4849 missingBehavior="placeholder"CODE
LOWui/src/pages/ExecutionWorkspaceDetail.tsx953 missingBehavior="placeholder"CODE
LOWui/src/pages/ExecutionWorkspaceDetail.tsx1401 missingBehavior="placeholder"CODE
LOWui/src/pages/ProjectDetail.tsx844 missingBehavior="placeholder"CODE
LOWui/src/pages/ProjectDetail.tsx957 missingBehavior="placeholder"CODE
LOWui/src/pages/PluginSettings.tsx242 missingBehavior="placeholder"CODE
LOWui/src/pages/ProjectWorkspaceDetail.tsx736 missingBehavior="placeholder"CODE
LOWui/src/pages/CompanySettingsPluginPage.tsx85 missingBehavior="placeholder"CODE
LOWui/src/pages/PluginPage.tsx182 missingBehavior="placeholder"CODE
LOWtests/e2e/nux-phase4-screenshots.spec.ts71 await page.getByPlaceholder("Acme Corp").fill("QA Robotics");CODE
LOWtests/e2e/nux-phase4-screenshots.spec.ts125 await page.getByPlaceholder("Acme Corp").fill("QA Robotics Grow");CODE
LOWtests/e2e/planning-mode-visual-verification.spec.ts52 await page.locator('input[placeholder="Acme Corp"]').fill(companyName);CODE
LOWtests/e2e/onboarding.spec.ts60 await page.getByPlaceholder("Acme Corp").fill(COMPANY_NAME);CODE
LOWtests/e2e/conference-room-typing-intro.spec.ts67 await page.getByPlaceholder("Acme Corp").fill(COMPANY_NAME);CODE
LOWtests/release-smoke/docker-auth-onboarding.spec.ts47 await page.locator('input[placeholder="Acme Corp"]').fill(COMPANY_NAME);CODE
LOWserver/src/__tests__/auth-session-route.test.ts46 email: "user@example.com",CODE
LOWserver/src/__tests__/auth-session-route.test.ts62 userEmail: "user@example.com",CODE
LOW…/src/__tests__/codex-local-adapter-environment.test.ts54 JSON.stringify({ accessToken: "fake-token", accountId: "acct-1" }),CODE
LOWserver/src/__tests__/redact-sensitive.test.ts6 const body = { email: "user@example.com", password: "founding6gomez6croaking" };CODE
LOWserver/src/__tests__/redact-sensitive.test.ts10 expect(out.email).toBe("user@example.com");CODE
LOWserver/src/__tests__/redact-sensitive.test.ts44 user: { email: "user@example.com", password: "secret-pass" },CODE
LOWserver/src/__tests__/redact-sensitive.test.ts48 expect((out.user as Record<string, unknown>).email).toBe("user@example.com");CODE
LOWserver/src/__tests__/work-timeline-service.test.ts92 email: "user@example.com",CODE
LOWserver/src/__tests__/cli-auth-routes.test.ts212 user: { id: "user-1", name: "User One", email: "user@example.com" },CODE
LOW…box-providers/kubernetes/test/unit/kube-client.test.ts22 token: fake-tokenCODE
LOWpackages/plugins/create-paperclip-plugin/README.md17 --author "Acme Inc"CODE
LOWpackages/db/src/client.test.ts229 VALUES ('user-1', 'User One', 'user@example.com', true, now(), now())CODE
LOWdoc/plans/2026-02-18-agent-authentication.md126 "name": "Acme Corp"CODE
Over-Commented Block37 hits · 34 pts
SeverityFileLineSnippetContext
LOWui/src/App.cases-routing.test.tsx1// @vitest-environment jsdomCOMMENT
LOWui/src/context/SidebarContext.tsx21 // True while a secondary sidebar forces the rail: the collapse is locked, soCOMMENT
LOWui/src/components/Layout.tsx241 cancelable: true,COMMENT
LOW…nvironment-variables-editor/ConvertToSecretPopover.tsx1// The "Store as secret" (convert) flow shares its form with the create flow;COMMENT
LOWui/src/components/environment-variables-editor/Row.tsx481 // anchored here. Those controls close by returning focus toCOMMENT
LOWui/src/lib/attention.ts81// ---------------------------------------------------------------------------COMMENT
LOWevals/promptfoo/promptfooconfig.yaml1# yaml-language-server: $schema=https://promptfoo.dev/config-schema.jsonCOMMENT
LOWserver/src/agent-auth-jwt.ts181 // tokens issued before per-company derivation existed continue to verify —COMMENT
LOWserver/src/instrumentation.ts1// Optional OpenTelemetry auto-instrumentation for HTTP / Express / PG / …COMMENT
LOWserver/src/instrumentation.ts181 // unreachable collector must not block process exit. 5s matches theCOMMENT
LOWserver/src/middleware/trust-proxy.ts41//COMMENT
LOWserver/src/middleware/redact-sensitive.ts1// Redaction for HTTP log payloads.COMMENT
LOWserver/src/__tests__/trust-proxy.test.ts41 expect(() => parseTrustProxyEnv("01")).toThrow(/invalid integer/);COMMENT
LOWserver/src/__tests__/qa-routine-secrets-e2e.test.ts1// QA validation for [PAP-9522](/PAP/issues/PAP-9522). Drives the routine-secretCOMMENT
LOW…er/src/__tests__/execution-lock-orphan-cleanup.test.ts301 it("clears checkout_run_id on every sibling and preserves an in-flight retry's execution_run_id pointer", async () =COMMENT
LOWserver/src/services/heartbeat.ts13561 recoveryAgent.status !== "paused" &&COMMENT
LOWserver/src/services/heartbeat.ts13621 // Clear orphaned execution-lock columns that still point at this finalizingCOMMENT
LOWserver/src/services/heartbeat.ts14781 }COMMENT
LOWserver/src/services/plugin-loader.ts2201 // are registered by the host handler layer when the worker callsCOMMENT
LOWserver/src/services/recovery/service.ts1841COMMENT
LOWscripts/kill-workspaces.sh1#!/usr/bin/env bashCOMMENT
LOW…ckages/plugins/sandbox-providers/daytona/src/plugin.ts81COMMENT
LOW…ckages/plugins/sandbox-providers/daytona/src/plugin.ts701 } catch (error) {COMMENT
LOW…iders/kubernetes/manifests/operator-prerequisites.yaml1# This plugin uses only stable Kubernetes APIs. No CRD installation is required.COMMENT
LOW…iders/kubernetes/manifests/operator-prerequisites.yaml21# - kubernetes-sigs/agent-sandbox (when it reaches v1beta1) as an alternativeCOMMENT
LOW…s/plugins/sandbox-providers/kubernetes/src/pod-exec.ts101COMMENT
LOW…ges/plugins/sandbox-providers/kubernetes/src/plugin.ts201 // `adapterType` is an optional per-run hint the server may pass once theCOMMENT
LOW…ndbox-providers/kubernetes/src/sandbox-orchestrator.ts61 // Optional warm-pool / Kata-FC extension slots. Job-backed implementationCOMMENT
LOWpackages/adapters/opencode-local/src/index.ts1import type { AdapterModelProfileDefinition } from "@paperclipai/adapter-utils";COMMENT
LOWpackages/adapters/opencode-local/src/index.ts21// Security tradeoff: this is `curl | bash` without a SHA-256 verification ofCOMMENT
LOWpackages/adapters/opencode-local/src/index.ts61 { id: "openai/gpt-5.2", label: "openai/gpt-5.2" },COMMENT
LOWpackages/adapters/gemini-local/src/server/execute.ts421 // image are invisible -- pre-select the api-key auth whenever an API keyCOMMENT
LOW…ckages/adapters/claude-local/src/server/permissions.ts1// Explicit allowlist of Claude Code tools we permit when running on a remoteCOMMENT
LOWpackages/adapters/codex-local/src/server/execute.ts501 followSymlinks: true,COMMENT
LOW…ages/adapters/codex-local/src/server/runtime-config.ts61// "base_url": "http://...", // OpenAI-compatible endpointCOMMENT
LOW…ages/adapters/codex-local/src/server/runtime-config.ts321// $CODEX_HOME/config.toml, selected by a top-level `model_provider = "<id>"`COMMENT
LOWpackages/adapters/pi-local/src/server/runtime-config.ts81 };COMMENT
Modern AI Meta-Vocabulary10 hits · 30 pts
SeverityFileLineSnippetContext
MEDIUM.agents/skills/paperclip-create-plugin/SKILL.md40## 3. CLI-first scaffold workflowCOMMENT
MEDIUM.agents/skills/paperclip-create-plugin/SKILL.md92## 5. After scaffolding, sanity-check the packageCOMMENT
MEDIUMpackages/plugins/create-paperclip-plugin/README.md44## Workflow after scaffoldingCOMMENT
MEDIUM…bundled/paperclip-operations/reflection-coach/SKILL.md48## Hard guardrailsCOMMENT
MEDIUM…bundled/paperclip-operations/reflection-coach/SKILL.md86### 3) Read the target's current guardrailsCOMMENT
MEDIUMdoc/plans/2026-04-08-agent-os-technical-report.md219### 1. Its built-in orchestration primitives overlap the wrong layerCOMMENT
MEDIUMdoc/plans/2026-02-21-humans-and-permissions.md331## Phase 1: Mode and guardrailsCOMMENT
MEDIUM…ans/2026-03-10-workspace-strategy-and-git-worktrees.md624### 11. Runtime service orchestrationCOMMENT
MEDIUMdoc/plugins/ideas-from-opencode.md429## 3. Prefer event-driven extensions over core-logic mutationCOMMENT
MEDIUM…perclip-create-agent/references/baseline-role-guide.md128## Minimal scaffoldCOMMENT
Hallucination Indicators3 hits · 30 pts
SeverityFileLineSnippetContext
CRITICAL…s/plugins/sandbox-providers/daytona/src/plugin.test.ts732 const uploadCall = sandbox.fs.uploadFile.mock.calls.find(CODE
CRITICAL…kages/plugins/sandbox-providers/e2b/src/plugin.test.ts306 const stdinCall = sandbox.commands.run.mock.calls.find(([cmd]: [string]) => cmd.includes("'printf'"));CODE
CRITICAL…kages/plugins/sandbox-providers/e2b/src/plugin.test.ts363 const fgCall = sandbox.commands.run.mock.calls.find(([cmd]: [string]) => cmd.includes("'printf'"));CODE
Example Usage Blocks7 hits · 10 pts
SeverityFileLineSnippetContext
LOWevals/promptfoo/promptfooconfig.yaml8# Usage:COMMENT
LOWscripts/build-npm.sh9# Usage:COMMENT
LOWscripts/kill-agent-browsers.sh5# Usage:COMMENT
LOWscripts/kill-workspaces.sh9# Usage:COMMENT
LOWscripts/kill-dev.sh5# Usage:COMMENT
LOWscripts/kill-vitest.sh5# Usage:COMMENT
LOWscripts/backup-db.sh7# Usage:COMMENT
AI Slop Vocabulary4 hits · 10 pts
SeverityFileLineSnippetContext
MEDIUMui/storybook/stories/skills-store-detail.stories.tsx22 markdown: "# deep-research\n\nResearch harness.",CODE
MEDIUM…er/src/__tests__/execution-lock-orphan-cleanup.test.ts269 // make us robust against it.COMMENT
MEDIUMserver/src/__tests__/helpers/wake-message.ts5// them robust to serialization formatting/key-order changes.COMMENT
MEDIUM…es/plugins/plugin-llm-wiki/tests/screenshots/entry.tsx5if (!container) throw new Error("No #root in harness host");CODE