Repository Analysis

paperclipai/paperclip

The open-source app everyone uses to manage agents at work

3.7 Likely human-written View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of paperclipai/paperclip, a TypeScript project with 79,553 GitHub stars. SynthScan v2.0 examined 1,485,032 lines of code across 4405 source files, recording 5279 pattern matches distributed across 10 syntactic categories. The overall adjusted score of 3.7 places this repository in the Likely human-written band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

3.7
Adjusted Score
3.7
Raw Score
100%
Time Factor
2026-08-28
Last Push
79.6K
Stars
TypeScript
Language
1.5M
Lines of Code
4.4K
Files
5.3K
Pattern Hits
2026-08-29
Scan Date
0.00
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 17HIGH 0MEDIUM 226LOW 5036

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 5279 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Hyper-Verbose Identifiers4440 hits · 4061 pts
SeverityFileLineSnippetContext
LOWui/storybook/.storybook/preview.tsx42function withStorybookTimelineDetails(data: WorkTimelineResult): WorkTimelineResult {CODE
LOWui/storybook/.storybook/preview.tsx73function installStorybookApiFixtures() {CODE
LOW…torybook/stories/projects-goals-workspaces.stories.tsx446function ProjectsGoalsWorkspacesStories() {CODE
LOW…rybook/stories/assigned-backlog-safeguards.stories.tsx95function AssignedBacklogNoticePanel() {CODE
LOWui/storybook/stories/scheduled-retry.stories.tsx59function ScheduledRetrySurfaceStories() {CODE
LOWui/storybook/stories/successful-run-handoff.stories.tsx33function SuccessfulRunHandoffStates() {CODE
LOWui/storybook/stories/successful-run-handoff.stories.tsx138function HandoffLivenessComparisonPanel() {CODE
LOWui/storybook/stories/successful-run-handoff.stories.tsx212function SuccessfulRunHandoffPinnedNotice() {CODE
LOWui/storybook/stories/successful-run-handoff.stories.tsx216function SuccessfulRunHandoffInFlightNoticeStory() {CODE
LOWui/storybook/stories/successful-run-handoff.stories.tsx220function SuccessfulRunHandoffLivenessComparison() {CODE
LOWui/storybook/stories/successful-run-handoff.stories.tsx228function SuccessfulRunHandoffActivityEvents() {CODE
LOWui/storybook/stories/successful-run-handoff.stories.tsx232function SuccessfulRunHandoffIssueCard() {CODE
LOWui/storybook/stories/successful-run-handoff.stories.tsx236function SuccessfulRunHandoffEscalationComment() {CODE
LOWui/storybook/stories/issue-management.stories.tsx251function seedIssueListLocalStorage() {CODE
LOWui/storybook/stories/issue-management.stories.tsx298function IssuePropertiesLongValuePane({ inline = false }: { inline?: boolean }) {CODE
LOWui/storybook/stories/issue-management.stories.tsx327function IssuePropertiesModelOverridePane() {CODE
LOWui/storybook/stories/issue-management.stories.tsx348function IssuePropertiesMobileBlockerActionsPane() {CODE
LOWui/storybook/stories/issue-management.stories.tsx382function ColumnConfigurationMatrix() {CODE
LOWui/storybook/stories/issue-management.stories.tsx970function ModelProfileLedgerStandalone() {CODE
LOWui/storybook/stories/blocked-inbox.stories.tsx211function BlockedReasonChipsCatalog() {CODE
LOW…torybook/stories/issue-thread-interactions.stories.tsx139function InteractiveSuggestedTasksCard() {CODE
LOW…torybook/stories/issue-thread-interactions.stories.tsx199function InteractiveAskUserQuestionsCard() {CODE
LOW…torybook/stories/issue-thread-interactions.stories.tsx216function InteractiveRequestConfirmationCard() {CODE
LOW…torybook/stories/issue-thread-interactions.stories.tsx241function InteractiveRequestCheckboxConfirmationCard({CODE
LOW…torybook/stories/issue-thread-interactions.stories.tsx282function InteractiveRequestItemVerdictsCard({CODE
LOW…torybook/stories/issue-thread-interactions.stories.tsx329function AutoOpenDeclineRequestConfirmationCard({CODE
LOWui/storybook/stories/external-objects.stories.tsx626function FilterPopoverWithExternalChecked() {CODE
LOWui/storybook/stories/dialogs-modals.stories.tsx645function ExecutionWorkspaceDialogStory({ blocked }: { blocked?: boolean }) {CODE
LOWui/storybook/stories/dialogs-modals.stories.tsx709function findAssigneeOptionsButton() {CODE
LOWui/storybook/stories/dialogs-modals.stories.tsx716function useCheapLaneAdapterOverrides(variant: CheapLaneVariant) {CODE
LOWui/storybook/stories/dialogs-modals.stories.tsx765function CheapLaneIssueDialogOpener({ variant }: { variant: CheapLaneVariant }) {CODE
LOWui/storybook/stories/dialogs-modals.stories.tsx821function PathInstructionsModalStory() {CODE
LOWui/storybook/stories/chat-comments.stories.tsx946function CompactRecoveryNoticeReview() {CODE
LOWui/storybook/stories/search.stories.tsx414function SearchOperatorInputPreview() {CODE
LOWui/storybook/stories/search.stories.tsx447function CommandPaletteWithSearchAll({CODE
LOWui/storybook/stories/navigation-layout.stories.tsx127function MobileBottomNavActiveStateMatrix() {CODE
LOWui/storybook/stories/navigation-layout.stories.tsx370function SidebarIconAlignmentHarness() {CODE
LOWui/storybook/stories/document-annotations.stories.tsx370function DirtyDraftWithIntegratedHeader() {CODE
LOWui/storybook/stories/forms-editors.stories.tsx467function EnvironmentVariablesEditorGallery() {CODE
LOWui/storybook/stories/work-timeline.stories.tsx22function withStorybookTimelineDetails(data: WorkTimelineResult): WorkTimelineResult {CODE
LOWui/src/App.tsx361function LegacySkillStudioRedirect() {CODE
LOWui/src/App.tsx433function LegacyToolsSettingsRedirect() {CODE
LOWui/src/App.tsx445function legacyToolsRedirectTarget(tab?: string) {CODE
LOWui/src/App.tsx551function StatusCardsLegacyRedirect() {CODE
LOWui/src/main.tsx55function CompanyAwareBreadcrumbProvider({ children }: { children: React.ReactNode }) {CODE
LOWui/src/context/EditorAutocompleteContext.tsx41export function EditorAutocompleteProvider({ children }: { children: ReactNode }) {CODE
LOWui/src/context/FileViewerContext.tsx66export function getCurrentFileViewerSearch(fallbackSearch: string): string {CODE
LOWui/src/context/FileViewerContext.tsx71export function shouldNavigateFileViewerSearch(nextSearch: string, fallbackSearch: string): boolean {CODE
LOWui/src/context/FileViewerContext.tsx75export function readFileViewerStateFromSearch(search: string): FileViewerUrlState | null {CODE
LOWui/src/context/FileViewerContext.tsx100export function writeFileViewerStateToSearch(current: string, next: FileViewerUrlState | null): string {CODE
LOWui/src/context/FileViewerContext.tsx137export function readBrowseStateFromSearch(search: string): FileViewerBrowseState | null {CODE
LOWui/src/context/FileViewerContext.tsx152export function writeFolderViewerStateToSearch(CODE
LOWui/src/context/FileViewerContext.tsx212function EnabledFileViewerProvider({ issueId, children }: Omit<FileViewerProviderProps, "enabled">) {CODE
LOWui/src/context/LiveUpdatesProvider.tsx53function dispatchLiveEventToSubscribers(CODE
LOWui/src/context/LiveUpdatesProvider.tsx237function resolveVisibleIssueRouteContext(CODE
LOWui/src/context/LiveUpdatesProvider.tsx290function shouldSuppressActivityToastForVisibleIssue(CODE
LOWui/src/context/LiveUpdatesProvider.tsx306function shouldSuppressRunStatusToastForVisibleIssue(CODE
LOWui/src/context/LiveUpdatesProvider.tsx322function invalidateVisibleIssueRunQueries(CODE
LOWui/src/context/LiveUpdatesProvider.tsx423function readRunLiveStatusPatchFromPayload(CODE
LOWui/src/context/LiveUpdatesProvider.tsx466function applyRunLiveStatusPatchToCaches(CODE
4380 more matches not shown…
Decorative Section Separators210 hits · 570 pts
SeverityFileLineSnippetContext
MEDIUMui/src/adapters/registry.ts170 // ── Builtin override lifecycle ──────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/registry.ts226 // ── Non-builtin externals ───────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/schema-config-fields.tsx16// ── Select field (extracted to keep hooks at component top level) ──────COMMENT
MEDIUMui/src/adapters/sandboxed-parser-worker.ts14// ── Message protocol ────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/sandboxed-parser-worker.ts27// ── Worker bootstrap source ─────────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/sandboxed-parser-worker.ts41// ── 1. Lock down dangerous globals ──────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/sandboxed-parser-worker.ts82// ── 2. Parser state ─────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/sandboxed-parser-worker.ts88// ── 3. Message handler ──────────────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/sandboxed-parser-worker.ts158// ── Public API ───────────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/dynamic-loader.ts35// ── Types ───────────────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/dynamic-loader.ts49// ── State ───────────────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/dynamic-loader.ts69// ── Internal helpers ────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/adapters/dynamic-loader.ts210// ── Public API ──────────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/components/PipelineItemBodyDocument.tsx281 // ── Body content (edit / preview / read) ──────────────────────────────────────────────COMMENT
MEDIUMui/src/components/transcript/RunTranscriptView.tsx743 // ── Diff entries — accumulate into diff_group blocks ──────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx71// ── Import-specific helpers ───────────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx167// ── Import file tree customization ───────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx199// ── Preview pane ──────────────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx286// ── Conflict item type ───────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx408// ── Post-import activation ───────────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx431// ── Conflict resolution UI ───────────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx557// ── Adapter type options for import ───────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx564// ── Adapter picker for imported agents ───────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx684// ── Helpers ───────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx715// ── Chunked transfer flow for large local zips ───────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx742// ── Async import job flow ─────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyImport.tsx842// ── Main page ─────────────────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/OrgChart.tsx29// ── Tree layout types ───────────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/OrgChart.tsx56// ── Layout algorithm ────────────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/OrgChart.tsx160// ── Status dot colors (raw hex for SVG) ─────────────────────────────────COMMENT
MEDIUMui/src/pages/OrgChart.tsx174// ── Main component ──────────────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyExport.tsx359// ── Frontmatter card (export-specific: skill click support) ──────────COMMENT
MEDIUMui/src/pages/CompanyExport.tsx404// ── Client-side README generation ────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyExport.tsx502// ── Preview pane ──────────────────────────────────────────────────────COMMENT
MEDIUMui/src/pages/CompanyExport.tsx587// ── Main page ─────────────────────────────────────────────────────────COMMENT
MEDIUMtests/e2e/nux-phase4-screenshots.spec.ts60 // ── Section A: create-company path (name → mission → hire) ────────────COMMENT
MEDIUMtests/e2e/nux-phase4-screenshots.spec.ts92 // ── Section B: front door + growth intake ─────────────────────────────COMMENT
MEDIUMtests/e2e/nux-phase4-screenshots.spec.ts123 // ── Section C: Conference Room (BoardChat) ────────────────────────────COMMENT
MEDIUMtests/e2e/nux-phase4-screenshots.spec.ts139 // ── Section D: Artifacts ──────────────────────────────────────────────COMMENT
MEDIUMserver/src/__tests__/plugin-routes-authz.test.ts966 // ─── Agent JWT tool execution (cherry-picked from #5549) ─────────────────────COMMENT
MEDIUMserver/src/__tests__/plugin-routes-authz.test.ts966 // ─── Agent JWT tool execution (cherry-picked from #5549) ─────────────────────COMMENT
MEDIUM…rc/__tests__/agents-adapter-config-user-secret.test.ts248 // ── test-environment ──────────────────────────────────────────────COMMENT
MEDIUM…rc/__tests__/agents-adapter-config-user-secret.test.ts371 // ── claude-login ──────────────────────────────────────────────────COMMENT
MEDIUMserver/src/__tests__/cli-invocation-safety.test.ts50// ── The exact allowlist ───────────────────────────────────────────────────COMMENT
MEDIUMserver/src/__tests__/cli-invocation-safety.test.ts93// ── Documentation phrases ─────────────────────────────────────────────────COMMENT
MEDIUMserver/src/__tests__/cli-invocation-safety.test.ts108// ── Command extraction ────────────────────────────────────────────────────COMMENT
MEDIUMserver/src/__tests__/cli-invocation-safety.test.ts318// ── Repository walk ───────────────────────────────────────────────────────COMMENT
MEDIUMserver/src/__tests__/cli-invocation-safety.test.ts381// ── Backslash line continuation ───────────────────────────────────────────COMMENT
MEDIUMserver/src/__tests__/cli-invocation-safety.test.ts486 // ── The extraction and allowlist logic, in isolation ─────────────────────COMMENT
MEDIUMserver/src/__tests__/cli-invocation-safety.test.ts541 // ── Fail closed on an ambiguous quote context before the marker ──────────COMMENT
MEDIUMserver/src/__tests__/cli-invocation-safety.test.ts703 // ── Direct assertions on the runtime-generated instruction surfaces ──────COMMENT
MEDIUMserver/src/__tests__/cli-invocation-safety.test.ts753 // ── Runtime surfaces and their fixed literal lifecycle hints ─────────────COMMENT
MEDIUMserver/src/__tests__/cli-invocation-safety.test.ts813 // ── The safe-invocation note ─────────────────────────────────────────────COMMENT
MEDIUMserver/src/__tests__/cli-invocation-safety.test.ts848 // ── Backslash line continuation ──────────────────────────────────────────COMMENT
MEDIUMserver/src/routes/adapters.ts644 // ── POST /api/adapters/:type/reinstall ──────────────────────────────────COMMENT
MEDIUMserver/src/routes/adapters.ts714 // ── GET /api/adapters/:type/config-schema ────────────────────────────────COMMENT
MEDIUMserver/src/routes/adapters.ts758 // ── GET /api/adapters/:type/ui-parser.js ─────────────────────────────────COMMENT
MEDIUMserver/src/routes/org-chart-svg.ts30// ── Style theme definitions ──────────────────────────────────────COMMENT
MEDIUMserver/src/routes/org-chart-svg.ts54// ── Role config with Twemoji SVG inlines (viewBox 0 0 36 36) ─────COMMENT
MEDIUMserver/src/routes/org-chart-svg.ts159// ── Style themes ─────────────────────────────────────────────────COMMENT
150 more matches not shown…
Over-Commented Block350 hits · 284 pts
SeverityFileLineSnippetContext
LOWui/src/App.activity-routing.test.tsx1// @vitest-environment jsdomCOMMENT
LOWui/src/App.cases-routing.test.tsx1// @vitest-environment jsdomCOMMENT
LOWui/src/context/SidebarContext.tsx21 // True while a secondary sidebar forces the rail: the collapse is locked, soCOMMENT
LOWui/src/components/AttentionQueueRow.tsx161 const compactActions = !isHidden ? collectCompactActions(item) : [];COMMENT
LOWui/src/components/OnboardingWizardTheme.test.tsx1// @vitest-environment nodeCOMMENT
LOWui/src/components/OnboardingWizardTheme.test.tsx41 // case for a hardcoded colour anywhere else in the wizard, reporting aCOMMENT
LOWui/src/components/TaskChatThread.tsx341 );COMMENT
LOWui/src/components/TaskChatThread.tsx421 // Anchored turns follow their run's reply comment; comment-less turnsCOMMENT
LOWui/src/components/OnboardingWizard.tsx221COMMENT
LOWui/src/components/OnboardingWizard.tsx241 // has no bearing on whether it is junk.COMMENT
LOWui/src/components/OnboardingWizard.tsx261 // you do not own" and deletes it.COMMENT
LOWui/src/components/OnboardingWizard.tsx301 // persist effect would overwrite the customer's own draft with defaultsCOMMENT
LOWui/src/components/OnboardingWizard.tsx461 (saved?.createdProjectId as string) ?? nullCOMMENT
LOWui/src/components/OnboardingWizard.tsx481 // Same shape for the hire. Greptile (round-3 PR): with "Test now" gone theCOMMENT
LOWui/src/components/OnboardingWizard.tsx581COMMENT
LOWui/src/components/OnboardingWizard.tsx601 // that merely names the one already in hand - the wizard created it,COMMENT
LOWui/src/components/OnboardingWizard.tsx621 // prevent, reached by a path it could not see.COMMENT
LOWui/src/components/OnboardingWizard.tsx1101 }COMMENT
LOWui/src/components/OnboardingWizard.tsx1121 // here with one meant nothing had been typed since. Hydration breaksCOMMENT
LOWui/src/components/OnboardingWizard.tsx1481 }COMMENT
LOWui/src/components/IssueLinkQuicklook.tsx301COMMENT
LOWui/src/components/AgentConfigForm.tsx481 // fixed `CLAUDE_CODE_OAUTH_TOKEN` binding as present. The form sends the claimCOMMENT
LOWui/src/components/AgentConfigForm.tsx601 );COMMENT
LOWui/src/components/AgentConfigForm.tsx901 // Test can be clicked before the settings query settles (or after itCOMMENT
LOWui/src/components/AgentConfigForm.tsx1001 // session state clears with it. Hold `reset` in a ref so the effect does notCOMMENT
LOWui/src/components/AgentConfigForm.tsx2101 {label}COMMENT
LOWui/src/components/AgentConfigForm.tsx2321// route and the prompt route every two seconds. The server can leave a sessionCOMMENT
LOWui/src/components/AgentConfigForm.tsx2361 // server `stored` state, the only success state.COMMENT
LOWui/src/components/AgentConfigForm.tsx2461 clearActiveSession();COMMENT
LOWui/src/components/transcript/useLiveRunTranscripts.ts21const LOG_POLL_INTERVAL_MS = 2000;COMMENT
LOWui/src/components/issue-properties/IssueProperties.tsx201 // flag OFF — including while settings load — renders the chat-style tabCOMMENT
LOW…nvironment-variables-editor/ConvertToSecretPopover.tsx1// The "Store as secret" (convert) flow shares its form with the create flow;COMMENT
LOWui/src/components/environment-variables-editor/Row.tsx481 // anchored here. Those controls close by returning focus toCOMMENT
LOWui/src/hooks/useSignOut.ts61 onSignedOut?.();COMMENT
LOWui/src/hooks/useSignOut.ts81 // across the whole sign-out/sign-in cycle. Reset notifies them, so theCOMMENT
LOWui/src/lib/sentry.ts1// Optional Sentry error monitoring for the browser.COMMENT
LOWui/src/lib/sentry.ts21// chain (`enqueue`) instead of running at once. One operation runs at aCOMMENT
LOWui/src/lib/sentry.ts101 // Read the client before detaching it. The scope holds no client afterCOMMENT
LOWui/src/lib/status-colors.ts201// Softer, full-width banner surface derived from the same brand hue anchors asCOMMENT
LOWui/src/lib/status-colors.ts321// unknown → backlog hue (muted, dashed circle)COMMENT
LOWui/src/lib/attention.ts81COMMENT
LOWui/src/pages/Dashboard.tsx121 // out of signup.COMMENT
LOWui/src/pages/IssueDetail.test.tsx1381 // React Query returns a new mutation result object on render. The panelCOMMENT
LOWui/src/pages/InviteLanding.test.tsx761COMMENT
LOWui/src/pages/InviteLanding.tsx241 // account, so another account's list is unreachable rather than merelyCOMMENT
LOWevals/promptfoo/promptfooconfig.yaml1# yaml-language-server: $schema=https://promptfoo.dev/config-schema.jsonCOMMENT
LOWdocker/docker-compose.quickstart.yml1# Quickstart: single-container Paperclip with embedded database.COMMENT
LOWserver/vitest.config.ts21 // graceful shutdown can occasionally cross vitest's default 10s hookTimeout,COMMENT
LOWserver/src/sentry.ts1// Optional Sentry error monitoring for the server process.COMMENT
LOWserver/src/sentry.ts21// - `Console` turns a `console.*` call into a breadcrumb with the rawCOMMENT
LOWserver/src/agent-auth-jwt.ts41 if (!secret) return null;COMMENT
LOWserver/src/agent-auth-jwt.ts181 const signingInput = `${headerB64}.${claimsB64}`;COMMENT
LOWserver/src/app.ts441 // every client request (SR-7). This complements the allowlist for managedCOMMENT
LOWserver/src/app.ts881 // (pluginLifecycleManager(db, { workerManager }) — no `loader` option), soCOMMENT
LOWserver/src/index.ts781 logger.error({ err, backupDir: config.databaseBackupDir, trigger }, `${label} database backup failed`);COMMENT
LOWserver/src/index.ts1121 // provider sandbox costs money whether or not the instance schedulesCOMMENT
LOWserver/src/instrumentation.ts1// Optional OpenTelemetry auto-instrumentation for HTTP / Express / PG / …COMMENT
LOWserver/src/instrumentation.ts21// logs one diagnostic and leaves the server running without tracing; itCOMMENT
LOWserver/src/instrumentation.ts541 new Promise<void>((_, reject) => {COMMENT
LOWserver/src/middleware/trust-proxy.ts41//COMMENT
290 more matches not shown…
Structural Annotation Overuse123 hits · 221 pts
SeverityFileLineSnippetContext
LOWtests/e2e/signoff-policy.spec.ts417 // Step 1: Executor marks done → should route to reviewerCOMMENT
LOWtests/e2e/signoff-policy.spec.ts435 // Step 2: Navigate to issue in UI and verify execution labelCOMMENT
LOWtests/e2e/signoff-policy.spec.ts439 // Step 3: Reviewer approves → should route to approverCOMMENT
LOWtests/e2e/signoff-policy.spec.ts453 // Step 4: Verify UI shows approval pendingCOMMENT
LOWtests/e2e/signoff-policy.spec.ts457 // Step 5: Approver approves → should completeCOMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts71 // Step 0: front door (skipped when the wizard opens on the create path).COMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts75 // Step 1: company name.COMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts81 // Step 3: name the agent. The role picker is gone — the arc asks for aCOMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts87 // Step 4: adapter (claude_local default); heartbeat is intercepted.COMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts90 // Step 5: review → Get started creates the first task and opens itsCOMMENT
LOWtests/release-smoke/docker-auth-onboarding.spec.ts95 // Step 1: name the organization. "Continue" creates the company itself andCOMMENT
LOWtests/release-smoke/docker-auth-onboarding.spec.ts102 // Step 3: name the team lead. The name is the step's only question and itCOMMENT
LOWtests/release-smoke/docker-auth-onboarding.spec.ts112 // Step 4: keep the default adapter and connect (hire) the lead. ConnectCOMMENT
LOWtests/release-smoke/docker-auth-onboarding.spec.ts126 // Step 5: review, then launch. "Get started" provisions the onboardingCOMMENT
LOW.agents/skills/company-creator/SKILL.md33### Step 1: Gather ContextCOMMENT
LOW.agents/skills/company-creator/SKILL.md40### Step 2: Interview (Use AskUserQuestion)COMMENT
LOW.agents/skills/company-creator/SKILL.md88### Step 3: Read the SpecCOMMENT
LOW.agents/skills/company-creator/SKILL.md100### Step 4: Generate the PackageCOMMENT
LOW.agents/skills/company-creator/SKILL.md159### Step 5: Confirm Output LocationCOMMENT
LOW.agents/skills/company-creator/SKILL.md167### Step 6: Write README.md and LICENSECOMMENT
LOW.agents/skills/company-creator/SKILL.md180### Step 7: Write Files and SummarizeCOMMENT
LOW.agents/skills/deal-with-security-advisory/SKILL.md26## Step 0: Fetch the Advisory DetailsCOMMENT
LOW.agents/skills/deal-with-security-advisory/SKILL.md37## Step 1: Acknowledge the ReportCOMMENT
LOW.agents/skills/deal-with-security-advisory/SKILL.md47## Step 2: Create the Temporary Private ForkCOMMENT
LOW.agents/skills/deal-with-security-advisory/SKILL.md78## Step 3: Develop and Validate the FixCOMMENT
LOW.agents/skills/deal-with-security-advisory/SKILL.md103## Step 4: Coordinate with the ReporterCOMMENT
LOW.agents/skills/deal-with-security-advisory/SKILL.md111## Step 5: Request a CVECOMMENT
LOW.agents/skills/deal-with-security-advisory/SKILL.md123## Step 6: Publish Everything SimultaneouslyCOMMENT
LOW.agents/skills/deal-with-security-advisory/SKILL.md208## Step 7: Post-Publication VerificationCOMMENT
LOWserver/src/routes/access.ts1965 ## Step 2: Wait for board approvalCOMMENT
LOWserver/src/routes/access.ts1968 ## Step 3: Claim API key (one-time)COMMENT
LOWserver/src/routes/access.ts1891 ## Step 1: Submit agent join requestCOMMENT
LOWserver/src/routes/access.ts1985 ## Step 4: Install Paperclip skillCOMMENT
LOWserver/src/routes/plugins.ts2700 // Step 1: Resolve the pluginCOMMENT
LOWserver/src/routes/plugins.ts2707 // Step 2: Validate the plugin is in 'ready' stateCOMMENT
LOWserver/src/routes/plugins.ts2715 // Step 3: Validate the plugin has webhooks.receive capabilityCOMMENT
LOWserver/src/routes/plugins.ts2775 // Step 7: Dispatch to the worker via handleWebhook RPCCOMMENT
LOWserver/src/routes/plugins.ts2785 // Step 8: Update delivery record to successCOMMENT
LOWserver/src/routes/plugins.ts2730 // Step 4: Validate the endpointKey exists in the manifest's webhook declarationsCOMMENT
LOWserver/src/routes/plugins.ts2742 // Step 5: Extract request dataCOMMENT
LOWserver/src/routes/plugins.ts2761 // Step 6: Record the delivery in the databaseCOMMENT
LOWserver/src/routes/plugin-ui-static.ts246 // Step 1: Look up the pluginCOMMENT
LOWserver/src/routes/plugin-ui-static.ts268 // Step 2: Verify the plugin is ready and has UI declaredCOMMENT
LOWserver/src/routes/plugin-ui-static.ts407 // Step 3: Resolve the plugin's UI directoryCOMMENT
LOWserver/src/routes/plugin-ui-static.ts424 // Step 4: Resolve the requested file path and prevent traversal (including symlinks)COMMENT
LOWserver/src/routes/plugin-ui-static.ts427 // Step 5: Check that the file exists and is a regular fileCOMMENT
LOWserver/src/routes/plugin-ui-static.ts459 // Step 6: Determine cache strategy based on filenameCOMMENT
LOWserver/src/routes/plugin-ui-static.ts463 // Step 7: Set cache headersCOMMENT
LOWserver/src/routes/plugin-ui-static.ts481 // Step 8: Set Content-TypeCOMMENT
LOWserver/src/routes/plugin-ui-static.ts488 // Step 9: Set CORS headers (plugin UI may be loaded from different origin in dev)COMMENT
LOWserver/src/routes/plugin-ui-static.ts491 // Step 10: Send the fileCOMMENT
LOWserver/src/services/plugin-worker-manager.ts3259 // Step 2: Send SIGTERM and waitCOMMENT
LOWserver/src/services/plugin-worker-manager.ts3268 // Step 3: Forcefully kill with SIGKILLCOMMENT
LOWserver/src/services/plugin-worker-manager.ts3235 // Step 1: Send shutdown RPC and wait for the worker to exit gracefully.COMMENT
LOWserver/src/services/environment-run-orchestrator.ts282 // Step 1: Resolve environmentCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts289 // Step 2: Acquire leaseCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts301 // Step 3: Log lease acquisition activityCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts323 // Step 4: Resolve execution transportCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts379 // Step 1: Build workspace realization requestCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts392 // Step 2: Realize workspace in the environment via the runtime driverCOMMENT
63 more matches not shown…
Hallucination Indicators17 hits · 170 pts
SeverityFileLineSnippetContext
CRITICAL…s/plugins/sandbox-providers/daytona/src/plugin.test.ts1009 const uploadCall = sandbox.fs.uploadFile.mock.calls.find(CODE
CRITICAL…s/plugins/sandbox-providers/daytona/src/plugin.test.ts1880 const snapshotCalls = sandbox.process.getSessionCommandLogs.mock.calls.filter(CODE
CRITICAL…s/plugins/sandbox-providers/daytona/src/plugin.test.ts3460 const mvCall = sandbox.process.executeCommand.mock.calls.find(([cmd]) => String(cmd).includes("mv -f"));CODE
CRITICAL…s/plugins/sandbox-providers/daytona/src/plugin.test.ts3861 const mkdirCall = sandbox.process.executeCommand.mock.calls.find(CODE
CRITICAL…s/plugins/sandbox-providers/daytona/src/plugin.test.ts3869 const extractCall = sandbox.process.executeCommand.mock.calls.find(([cmd]) => String(cmd).includes("tar -xf"));CODE
CRITICAL…s/plugins/sandbox-providers/daytona/src/plugin.test.ts4002 const guardCall = sandbox.process.executeCommand.mock.calls.find(CODE
CRITICAL…s/plugins/sandbox-providers/daytona/src/plugin.test.ts4159 const cleanupCall = sandbox.process.executeCommand.mock.calls.find(CODE
CRITICAL…s/plugins/sandbox-providers/daytona/src/plugin.test.ts4397 sandbox.process.executeCommand.mock.calls.find(([c]) => c === cmd);CODE
CRITICAL…s/plugins/sandbox-providers/daytona/src/plugin.test.ts4403 const idx = sandbox.process.executeCommand.mock.calls.findIndex(([c]) => c === cmd);CODE
CRITICAL…s/plugins/sandbox-providers/daytona/src/plugin.test.ts4452 sandbox.process.executeCommand.mock.calls.some(([c]) => c === "should-not-run"),CODE
CRITICAL…s/plugins/sandbox-providers/daytona/src/plugin.test.ts4499 const mvCalls = sandbox.process.executeCommand.mock.calls.filter(([cmd]) =>CODE
CRITICAL…s/plugins/sandbox-providers/daytona/src/plugin.test.ts4507 const idx = sandbox.process.executeCommand.mock.calls.findIndex(([c]) => c === cmd);CODE
CRITICAL…s/plugins/sandbox-providers/daytona/src/plugin.test.ts4567 sandbox.process.executeCommand.mock.calls.some(([c]) => c === cmd);CODE
CRITICAL…s/plugins/sandbox-providers/daytona/src/plugin.test.ts4648 const destinations = sandbox.fs.uploadFiles.mock.calls.flatMap(CODE
CRITICAL…s/plugins/sandbox-providers/daytona/src/plugin.test.ts4688 const sources = sandbox.fs.downloadFiles.mock.calls.flatMap(CODE
CRITICAL…kages/plugins/sandbox-providers/e2b/src/plugin.test.ts306 const stdinCall = sandbox.commands.run.mock.calls.find(([cmd]: [string]) => cmd.includes("'printf'"));CODE
CRITICAL…kages/plugins/sandbox-providers/e2b/src/plugin.test.ts363 const fgCall = sandbox.commands.run.mock.calls.find(([cmd]: [string]) => cmd.includes("'printf'"));CODE
Verbosity Indicators56 hits · 108 pts
SeverityFileLineSnippetContext
LOWtests/e2e/signoff-policy.spec.ts417 // Step 1: Executor marks done → should route to reviewerCOMMENT
LOWtests/e2e/signoff-policy.spec.ts435 // Step 2: Navigate to issue in UI and verify execution labelCOMMENT
LOWtests/e2e/signoff-policy.spec.ts439 // Step 3: Reviewer approves → should route to approverCOMMENT
LOWtests/e2e/signoff-policy.spec.ts453 // Step 4: Verify UI shows approval pendingCOMMENT
LOWtests/e2e/signoff-policy.spec.ts457 // Step 5: Approver approves → should completeCOMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts71 // Step 0: front door (skipped when the wizard opens on the create path).COMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts75 // Step 1: company name.COMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts81 // Step 3: name the agent. The role picker is gone — the arc asks for aCOMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts87 // Step 4: adapter (claude_local default); heartbeat is intercepted.COMMENT
LOWtests/e2e/conference-room-typing-intro.spec.ts90 // Step 5: review → Get started creates the first task and opens itsCOMMENT
LOWtests/release-smoke/docker-auth-onboarding.spec.ts95 // Step 1: name the organization. "Continue" creates the company itself andCOMMENT
LOWtests/release-smoke/docker-auth-onboarding.spec.ts102 // Step 3: name the team lead. The name is the step's only question and itCOMMENT
LOWtests/release-smoke/docker-auth-onboarding.spec.ts112 // Step 4: keep the default adapter and connect (hire) the lead. ConnectCOMMENT
LOWtests/release-smoke/docker-auth-onboarding.spec.ts126 // Step 5: review, then launch. "Get started" provisions the onboardingCOMMENT
LOWserver/src/routes/access.ts1965 ## Step 2: Wait for board approvalCOMMENT
LOWserver/src/routes/access.ts1968 ## Step 3: Claim API key (one-time)COMMENT
LOWserver/src/routes/access.ts1891 ## Step 1: Submit agent join requestCOMMENT
LOWserver/src/routes/access.ts1985 ## Step 4: Install Paperclip skillCOMMENT
LOWserver/src/routes/plugins.ts2700 // Step 1: Resolve the pluginCOMMENT
LOWserver/src/routes/plugins.ts2707 // Step 2: Validate the plugin is in 'ready' stateCOMMENT
LOWserver/src/routes/plugins.ts2715 // Step 3: Validate the plugin has webhooks.receive capabilityCOMMENT
LOWserver/src/routes/plugins.ts2775 // Step 7: Dispatch to the worker via handleWebhook RPCCOMMENT
LOWserver/src/routes/plugins.ts2785 // Step 8: Update delivery record to successCOMMENT
LOWserver/src/routes/plugins.ts2730 // Step 4: Validate the endpointKey exists in the manifest's webhook declarationsCOMMENT
LOWserver/src/routes/plugins.ts2742 // Step 5: Extract request dataCOMMENT
LOWserver/src/routes/plugins.ts2761 // Step 6: Record the delivery in the databaseCOMMENT
LOWserver/src/routes/plugin-ui-static.ts246 // Step 1: Look up the pluginCOMMENT
LOWserver/src/routes/plugin-ui-static.ts268 // Step 2: Verify the plugin is ready and has UI declaredCOMMENT
LOWserver/src/routes/plugin-ui-static.ts407 // Step 3: Resolve the plugin's UI directoryCOMMENT
LOWserver/src/routes/plugin-ui-static.ts424 // Step 4: Resolve the requested file path and prevent traversal (including symlinks)COMMENT
LOWserver/src/routes/plugin-ui-static.ts427 // Step 5: Check that the file exists and is a regular fileCOMMENT
LOWserver/src/routes/plugin-ui-static.ts459 // Step 6: Determine cache strategy based on filenameCOMMENT
LOWserver/src/routes/plugin-ui-static.ts463 // Step 7: Set cache headersCOMMENT
LOWserver/src/routes/plugin-ui-static.ts481 // Step 8: Set Content-TypeCOMMENT
LOWserver/src/routes/plugin-ui-static.ts488 // Step 9: Set CORS headers (plugin UI may be loaded from different origin in dev)COMMENT
LOWserver/src/routes/plugin-ui-static.ts491 // Step 10: Send the fileCOMMENT
LOWserver/src/services/plugin-worker-manager.ts3259 // Step 2: Send SIGTERM and waitCOMMENT
LOWserver/src/services/plugin-worker-manager.ts3268 // Step 3: Forcefully kill with SIGKILLCOMMENT
LOWserver/src/services/plugin-worker-manager.ts3235 // Step 1: Send shutdown RPC and wait for the worker to exit gracefully.COMMENT
LOWserver/src/services/environment-run-orchestrator.ts282 // Step 1: Resolve environmentCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts289 // Step 2: Acquire leaseCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts301 // Step 3: Log lease acquisition activityCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts323 // Step 4: Resolve execution transportCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts379 // Step 1: Build workspace realization requestCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts392 // Step 2: Realize workspace in the environment via the runtime driverCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts495 // Step 3: Persist realization metadata on lease and execution workspaceCOMMENT
LOWserver/src/services/environment-run-orchestrator.ts519 // Step 4: Resolve execution target for the adapterCOMMENT
LOWserver/src/services/plugin-tool-dispatcher.ts330 // Step 1: Load tools from all currently-ready pluginsCOMMENT
LOWserver/src/services/plugin-tool-dispatcher.ts350 // Step 2: Subscribe to lifecycle events for dynamic updatesCOMMENT
LOWserver/src/services/plugin-loader.ts1288 // Step 4: Reject incompatible plugin API versionsCOMMENT
LOWserver/src/services/plugin-loader.ts1296 // Step 5: Validate manifest capabilities are consistentCOMMENT
LOWserver/src/services/plugin-loader.ts1267 // Step 3: Read and validate plugin manifestCOMMENT
LOWserver/src/services/plugin-loader.ts1307 // Step 6: Reject plugins that require a newer host than the running serverCOMMENT
LOWserver/src/services/plugin-loader.ts1715 // Step 6: Persist install record and apply plugin-owned schema migrationsCOMMENT
LOWserver/src/services/setup-token-transport-binding.ts202 // Step 1: lock and conditionally transition the exact durable row toCOMMENT
LOWserver/src/services/setup-token-transport-binding.ts217 // Step 2: write or rotate the secret on the same transaction handle. ACOMMENT
Fake / Example Data60 hits · 60 pts
SeverityFileLineSnippetContext
LOWui/storybook/stories/apps-connect-name.stories.tsx57 (i) => i.getAttribute("placeholder") === "My app",CODE
LOWui/src/App.test.tsx106 user: { id: "user-1", email: "user@example.com", name: "User", image: null },CODE
LOWui/src/App.test.tsx109 user: { id: "user-1", email: "user@example.com", name: "User", image: null },CODE
LOWui/src/App.test.tsx129 user: { id: "user-1", email: "user@example.com", name: "User", image: null },CODE
LOWui/src/App.test.tsx132 user: { id: "user-1", email: "user@example.com", name: "User", image: null },CODE
LOWui/src/App.test.tsx180 user: { id: "user-1", email: "user@example.com", name: "User", image: null },CODE
LOWui/src/App.test.tsx217 user: { id: "user-1", email: "user@example.com", name: "User", image: null },CODE
LOWui/src/plugins/slots.tsx772 missingBehavior?: "hidden" | "placeholder";CODE
LOWui/src/plugins/slots.tsx893 missingBehavior?: "hidden" | "placeholder";CODE
LOWui/src/plugins/slots.test.ts74 missingBehavior: "placeholder",CODE
LOWui/src/components/CommentThread.tsx379 missingBehavior="placeholder"CODE
LOWui/src/components/CommentThread.tsx414 missingBehavior="placeholder"CODE
LOWui/src/components/SidebarProjects.tsx219 missingBehavior="placeholder"CODE
LOWui/src/components/IssueProperties.test.tsx2371 const textInput = inputs.find((input) => input.getAttribute("placeholder") === "What should the agent re-check?");CODE
LOWui/src/components/IssueProperties.test.tsx2575 .find((node) => node.getAttribute("placeholder")?.includes("watchdog"));CODE
LOWui/src/components/Layout.tsx189 missingBehavior="placeholder"CODE
LOWui/src/components/Sidebar.tsx261 missingBehavior="placeholder"CODE
LOWui/src/components/Sidebar.tsx291 missingBehavior="placeholder"CODE
LOWui/src/pages/IssueDetail.tsx4931 missingBehavior="placeholder"CODE
LOWui/src/pages/IssueDetail.tsx4958 missingBehavior="placeholder"CODE
LOWui/src/pages/IssueDetail.tsx5465 missingBehavior="placeholder"CODE
LOWui/src/pages/ExecutionWorkspaceDetail.tsx1186 missingBehavior="placeholder"CODE
LOWui/src/pages/ExecutionWorkspaceDetail.tsx1683 missingBehavior="placeholder"CODE
LOWui/src/pages/ProjectDetail.tsx860 missingBehavior="placeholder"CODE
LOWui/src/pages/ProjectDetail.tsx973 missingBehavior="placeholder"CODE
LOWui/src/pages/PluginSettings.tsx252 missingBehavior="placeholder"CODE
LOWui/src/pages/ProjectWorkspaceDetail.tsx748 missingBehavior="placeholder"CODE
LOWui/src/pages/CompanySettingsPluginPage.tsx86 missingBehavior="placeholder"CODE
LOWui/src/pages/PluginPage.tsx182 missingBehavior="placeholder"CODE
LOWui/src/pages/apps/AppsConnect.test.tsx122 ).find((i) => i.getAttribute("placeholder")?.startsWith("https://"));CODE
LOWui/src/pages/apps/AppsConnect.test.tsx201 (i) => i.getAttribute("placeholder") === "My app",CODE
LOWui/src/pages/apps/AppsConnect.test.tsx613 ).find((i) => i.getAttribute("placeholder")?.startsWith("https://"));CODE
LOWui/src/pages/apps/AppsConnect.test.tsx794 i.getAttribute("placeholder")?.startsWith("https://example.com/actions"),CODE
LOWui/src/pages/apps/AppsConnect.test.tsx797 expect(linkInput?.getAttribute("placeholder")).toBe("https://example.com/actions");CODE
LOWui/src/pages/apps/AppsConnect.test.tsx810 (i) => i.getAttribute("placeholder") === "My app",CODE
LOWui/src/pages/apps/AppsConnect.test.tsx877 (i) => i.getAttribute("placeholder") === "My app",CODE
LOW…r/src/__tests__/workspace-login-handoff-issuer.test.ts276 stubDb({ adminRows: [{ id: "admin-1", email: "admin@example.com", createdAt: new Date(0) }] }),CODE
LOW…r/src/__tests__/workspace-login-handoff-issuer.test.ts279 ).resolves.toEqual({ userId: "admin-1", email: "admin@example.com" });CODE
LOWserver/src/__tests__/auth-session-route.test.ts52 email: "user@example.com",CODE
LOWserver/src/__tests__/auth-session-route.test.ts68 userEmail: "user@example.com",CODE
LOW…/src/__tests__/codex-local-adapter-environment.test.ts54 JSON.stringify({ accessToken: "fake-token", accountId: "acct-1" }),CODE
LOWserver/src/__tests__/redact-sensitive.test.ts6 const body = { email: "user@example.com", password: "founding6gomez6croaking" };CODE
LOWserver/src/__tests__/redact-sensitive.test.ts10 expect(out.email).toBe("user@example.com");CODE
LOWserver/src/__tests__/redact-sensitive.test.ts52 user: { email: "user@example.com", password: "secret-pass" },CODE
LOWserver/src/__tests__/redact-sensitive.test.ts56 expect((out.user as Record<string, unknown>).email).toBe("user@example.com");CODE
LOWserver/src/__tests__/work-timeline-service.test.ts92 email: "user@example.com",CODE
LOWserver/src/__tests__/cli-auth-routes.test.ts212 user: { id: "user-1", name: "User One", email: "user@example.com" },CODE
LOW…runner/runner/crates/runner-core/src/codex_provider.rs634 "placeholder": "Enter another answer",CODE
LOW…rclip-runner/protocol/schemas/question-set.schema.json36 "placeholder": { "type": "string", "maxLength": 1000 }CODE
LOW…box-providers/kubernetes/test/unit/kube-client.test.ts22 token: fake-tokenCODE
LOWpackages/plugins/create-paperclip-plugin/README.md17 --author "Acme Inc"CODE
LOWpackages/shared/src/app-definitions/anthropic.json36 "placeholder": "sk-ant-api03-...",CODE
LOWpackages/shared/src/app-definitions/oauth-generic.json33 "placeholder": "Paste the client ID",CODE
LOWpackages/shared/src/app-definitions/oauth-generic.json41 "placeholder": "Paste the client secret",CODE
LOW…ckages/shared/src/app-definitions/api-key-generic.json32 "placeholder": "Paste the API key",CODE
LOWpackages/shared/src/app-definitions/github.json36 "placeholder": "github_pat_...",CODE
LOWpackages/shared/src/app-definitions/zapier.json36 "placeholder": "Paste your Zapier token",CODE
LOWpackages/shared/src/validators/app-definition.ts3const field=z.object({key:z.string().min(1),label:z.string().min(1),type:z.enum(["text","password","textarea","datetime"CODE
LOWpackages/db/src/client.test.ts258 VALUES ('user-1', 'User One', 'user@example.com', true, now(), now())CODE
LOWdoc/plans/2026-02-18-agent-authentication.md126 "name": "Acme Corp"CODE
Modern AI Meta-Vocabulary10 hits · 30 pts
SeverityFileLineSnippetContext
MEDIUM.agents/skills/paperclip-create-plugin/SKILL.md40## 3. CLI-first scaffold workflowCOMMENT
MEDIUM.agents/skills/paperclip-create-plugin/SKILL.md92## 5. After scaffolding, sanity-check the packageCOMMENT
MEDIUMpackages/plugins/create-paperclip-plugin/README.md44## Workflow after scaffoldingCOMMENT
MEDIUM…bundled/paperclip-operations/reflection-coach/SKILL.md48## Hard guardrailsCOMMENT
MEDIUM…bundled/paperclip-operations/reflection-coach/SKILL.md86### 3) Read the target's current guardrailsCOMMENT
MEDIUMdoc/plans/2026-04-08-agent-os-technical-report.md219### 1. Its built-in orchestration primitives overlap the wrong layerCOMMENT
MEDIUMdoc/plans/2026-02-21-humans-and-permissions.md331## Phase 1: Mode and guardrailsCOMMENT
MEDIUM…ans/2026-03-10-workspace-strategy-and-git-worktrees.md624### 11. Runtime service orchestrationCOMMENT
MEDIUMdoc/plugins/ideas-from-opencode.md429## 3. Prefer event-driven extensions over core-logic mutationCOMMENT
MEDIUM…perclip-create-agent/references/baseline-role-guide.md128## Minimal scaffoldCOMMENT
AI Slop Vocabulary6 hits · 16 pts
SeverityFileLineSnippetContext
MEDIUMui/storybook/stories/skills-store-detail.stories.tsx22 markdown: "# deep-research\n\nResearch harness.",CODE
MEDIUM…er/src/__tests__/execution-lock-orphan-cleanup.test.ts269 // make us robust against it.COMMENT
MEDIUMserver/src/__tests__/helpers/wake-message.ts5// them robust to serialization formatting/key-order changes.COMMENT
MEDIUM…es/plugins/plugin-llm-wiki/tests/screenshots/entry.tsx5if (!container) throw new Error("No #root in harness host");CODE
MEDIUM.github/workflows/release-smoke.yml104 # Fixed here rather than read back out of the harness, so the `always()`COMMENT
MEDIUM.github/workflows/release-smoke.yml169 # harness already tore the container down it wrote this file on itsCOMMENT
Example Usage Blocks7 hits · 10 pts
SeverityFileLineSnippetContext
LOWevals/promptfoo/promptfooconfig.yaml8# Usage:COMMENT
LOWscripts/build-npm.sh9# Usage:COMMENT
LOWscripts/kill-agent-browsers.sh5# Usage:COMMENT
LOWscripts/kill-workspaces.sh9# Usage:COMMENT
LOWscripts/kill-dev.sh5# Usage:COMMENT
LOWscripts/kill-vitest.sh5# Usage:COMMENT
LOWscripts/backup-db.sh7# Usage:COMMENT