Repository Analysis

saltbo/zpan

Lightweight file hosting platform built on top of S3-compatible storage

5.9 Low AI signal View on GitHub

Analysis Overview

This report presents the forensic synthetic code analysis of saltbo/zpan, a TypeScript project with 2,064 GitHub stars. SynthScan v2.0 examined 231,275 lines of code across 1036 source files, recording 715 pattern matches distributed across 6 syntactic categories. The overall adjusted score of 5.9 places this repository in the Low AI signal band.

The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).

5.9
Adjusted Score
5.9
Raw Score
100%
Time Factor
2026-08-24
Last Push
2.1K
Stars
TypeScript
Language
231.3K
Lines of Code
1.0K
Files
715
Pattern Hits
2026-08-29
Scan Date
0.00
HC Hit Rate

What These Metrics Mean

Adjusted Score
Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score
The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor
The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits
Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate
High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files
Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 0HIGH 0MEDIUM 295LOW 420

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 715 distinct pattern matches across 6 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Decorative Section Separators294 hits · 914 pts
SeverityFileLineSnippetContext
MEDIUMwrangler.toml75# ----------------------------------------------------------------------------COMMENT
MEDIUMwrangler.toml80# ----------------------------------------------------------------------------COMMENT
MEDIUM…er/middleware/image-hosting-domain.integration.test.ts11// ─── Helpers ──────────────────────────────────────────────────────────────────COMMENT
MEDIUM…er/middleware/image-hosting-domain.integration.test.ts79// ─── Setup ────────────────────────────────────────────────────────────────────COMMENT
MEDIUM…er/middleware/image-hosting-domain.integration.test.ts86// ─── App-host passthrough tests ───────────────────────────────────────────────COMMENT
MEDIUM…er/middleware/image-hosting-domain.integration.test.ts140// ─── Unverified custom domain ─────────────────────────────────────────────────COMMENT
MEDIUM…er/middleware/image-hosting-domain.integration.test.ts161// ─── Custom domain redirect ───────────────────────────────────────────────────COMMENT
MEDIUM…er/middleware/image-hosting-domain.integration.test.ts434// ─── Referer allowlist tests ──────────────────────────────────────────────────COMMENT
MEDIUM…er/middleware/image-hosting-domain.integration.test.ts476// ─── Cross-org isolation ──────────────────────────────────────────────────────COMMENT
MEDIUM…er/middleware/image-hosting-domain.integration.test.ts514// ─── accessCount atomicity ────────────────────────────────────────────────────COMMENT
MEDIUMserver/middleware/image-hosting-domain.cf-test.ts62// ─── CF custom domain tests ───────────────────────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/share.integration.test.ts38// ─── Helpers ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/share.integration.test.ts65// ─── createShare ─────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/share.integration.test.ts179// ─── resolveShareByToken ──────────────────────────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/share.integration.test.ts256// ─── verifyPassword ───────────────────────────────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/share.integration.test.ts299// ─── isAccessibleByUser ───────────────────────────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/share.integration.test.ts319// ─── listForApi ──────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/share.integration.test.ts340// ─── listReceivedForApi ──────────────────────────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/share.integration.test.ts373// ─── incrementViews ──────────────────────────────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/share.integration.test.ts391// ─── incrementDownloadsAtomic ─────────────────────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/share.integration.test.ts468// ─── revokeShareByToken ──────────────────────────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/share.integration.test.ts499// ─── listShareRecipientUserIds ────────────────────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/share.integration.test.ts535// ─── revokeByMatter ───────────────────────────────────────────────────────────COMMENT
MEDIUM…dapters/repos/matter-name-conflict.integration.test.ts75// ─── findActiveConflict ───────────────────────────────────────────────────────COMMENT
MEDIUM…dapters/repos/matter-name-conflict.integration.test.ts148// ─── applyConflictResolution ──────────────────────────────────────────────────COMMENT
MEDIUM…dapters/repos/matter-name-conflict.integration.test.ts366// ─── planConflictResolution ───────────────────────────────────────────────────COMMENT
MEDIUM…dapters/repos/matter-name-conflict.integration.test.ts419// ─── commitConflictPlan ───────────────────────────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/share.cf-test.ts45// ─── Atomic counter race tests on D1 ─────────────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/share.cf-test.ts103// ─── revokeByMatter on D1 ────────────────────────────────────────────────────COMMENT
MEDIUM…ver/adapters/repos/matter-conflict.integration.test.ts93// ─── createMatter ─────────────────────────────────────────────────────────────COMMENT
MEDIUM…ver/adapters/repos/matter-conflict.integration.test.ts242// ─── confirmUpload ─────────────────────────────────────────────────────────────COMMENT
MEDIUM…ver/adapters/repos/matter-conflict.integration.test.ts282// ─── updateMatter (rename / move) ─────────────────────────────────────────────COMMENT
MEDIUM…ver/adapters/repos/matter-conflict.integration.test.ts355// ─── move ─────────────────────────────────────────────────────────────────────COMMENT
MEDIUM…ver/adapters/repos/matter-conflict.integration.test.ts393// ─── copyMatter ───────────────────────────────────────────────────────────────COMMENT
MEDIUM…ver/adapters/repos/matter-conflict.integration.test.ts456// ─── restoreMatter ────────────────────────────────────────────────────────────COMMENT
MEDIUM…ver/adapters/repos/matter-conflict.integration.test.ts514// ─── case-insensitive conflict across service calls ───────────────────────────COMMENT
MEDIUM…ver/adapters/repos/matter-conflict.integration.test.ts546// ─── confirmUpload quota-then-replace atomicity ───────────────────────────────COMMENT
MEDIUM…ver/adapters/repos/matter-conflict.integration.test.ts586// ─── restoreMatter rename-before-activate ordering ───────────────────────────COMMENT
MEDIUMserver/adapters/repos/matter.integration.test.ts105// ─── storage usage reservations ───────────────────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/matter.integration.test.ts321// ─── confirmUpload ────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/matter.integration.test.ts470// ─── updateMatter — folder-into-itself error ──────────────────────────────────COMMENT
MEDIUMserver/adapters/repos/matter.integration.test.ts505// ─── listTrashedRoots ─────────────────────────────────────────────────────────COMMENT
MEDIUMserver/http/teams.integration.test.ts57// ─── Public invite-link info ────────────────────────────────────────────────────COMMENT
MEDIUMserver/http/teams.integration.test.ts80// ─── POST /:teamId/invite-links ────────────────────────────────────────────────COMMENT
MEDIUMserver/http/teams.integration.test.ts129// ─── GET /:teamId/invitations ─────────────────────────────────────────────────COMMENT
MEDIUMserver/http/teams.integration.test.ts167// ─── POST /:teamId/members ─────────────────────────────────────────────────────COMMENT
MEDIUMserver/http/teams.integration.test.ts229// ─── Activity feed tests (from master) ────────────────────────────────────────COMMENT
MEDIUMserver/http/teams.integration.test.ts277// ─── Auth guard ────────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/http/teams.integration.test.ts287// ─── Access control ────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/http/teams.integration.test.ts368// ─── Happy path ────────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/http/teams.integration.test.ts461// ─── Pagination ────────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/http/teams.integration.test.ts542// ─── Ordering ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/http/teams.integration.test.ts562// ─── Metadata ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/http/teams.integration.test.ts597// ─── Multiple events across orgs ──────────────────────────────────────────────COMMENT
MEDIUMserver/http/teams.integration.test.ts671// ─── Org logo (PUT/DELETE /:teamId/logo) ─────────────────────────────────────COMMENT
MEDIUMserver/http/teams.integration.test.ts871// ─── Admin Teams API (/api/teams admin-console resources) ─────────────────────COMMENT
MEDIUMserver/http/shares.integration.test.ts14// ─── Helpers ──────────────────────────────────────────────────────────────────COMMENT
MEDIUMserver/http/shares.integration.test.ts126// ─── POST /api/shares auth guard ─────────────────────────────────────────────COMMENT
MEDIUMserver/http/shares.integration.test.ts140// ─── POST /api/shares ─────────────────────────────────────────────────────────COMMENT
MEDIUMserver/http/shares.integration.test.ts418// ─── PUT /api/shares/:token/privacy ──────────────────────────────────────────COMMENT
234 more matches not shown…
Hyper-Verbose Identifiers334 hits · 356 pts
SeverityFileLineSnippetContext
LOWserver/entry-node.ts106function reportNodeInstanceTelemetry(): void {CODE
LOWserver/app.ts436function shouldReportInitialTelemetry(requestUrl: string): boolean {CODE
LOWserver/auth.integration.test.ts36async function configureRequiredEmailVerification(ctx: TestCtx) {CODE
LOWserver/openapi.integration.test.ts967function resolveLocalOpenApiReference(document: unknown, reference: string): unknown {CODE
LOWserver/auth.ts124function isExternalResourceClientRegistration(body: Record<string, unknown>): boolean {CODE
LOWserver/auth.ts139async function dynamicRegistrationOrigins(request: Request): Promise<string[]> {CODE
LOWserver/auth.ts160export function officialWorkersPreviewOrigin(CODE
LOWserver/auth.ts225export function toBetterAuthCaptchaOptions(config: CaptchaConfig): CaptchaOptions {CODE
LOWserver/auth.ts261function usesEmailVerificationPolicy(request: Request): boolean {CODE
LOWserver/auth.ts291async function recordOrganizationAuthAudit(CODE
LOWserver/auth.ts347async function ensureUserRegistrationAudit(db: Database, userId: string, firstAccountId?: string): Promise<void> {CODE
LOWserver/auth.ts403function buildVerificationEmailHtml(url: string): string {CODE
LOWserver/auth.ts415function buildResetPasswordEmailHtml(url: string): string {CODE
LOWserver/auth.ts1083async function findPersonalOrgFromExistingSession(db: Database, userId: string): Promise<string | null> {CODE
LOWserver/auth.ts1119async function createFreePlanEntitlementValues(CODE
LOWserver/auth.ts1203async function getDefaultOrgTrafficQuota(db: Database): Promise<number> {CODE
LOW…er/middleware/image-hosting-domain.integration.test.ts30async function setTrafficPlanEntitlement(db: TestDb, orgId: string, bytes: number) {CODE
LOWserver/middleware/authz.ts134async function currentAuthorizationContext(CODE
LOWserver/middleware/image-hosting-domain.ts139function recordImageDownloadFailure(CODE
LOWserver/middleware/image-hosting-domain.ts168export async function handleImageHostingDomainRequest({CODE
LOWserver/middleware/auth.integration.test.ts25async function authedHeadersWithFreshSession(CODE
LOWserver/middleware/audit-routes.ts283function responseDownloadTaskTarget(): AuditTarget {CODE
LOWserver/middleware/audit-transfers.ts146async function resolveCreatedImageUpload(context: AuditRouteContext): Promise<TransferAuditTarget | null> {CODE
LOWserver/middleware/auth.ts247export function mapOauthVerificationError(error: unknown, resource: string): AppError {CODE
LOWserver/test/storage-usage-consistency.ts41export async function calculateExpectedStorageUsage(db: Database, orgId: string): Promise<StorageUsageBreakdown[]> {CODE
LOWserver/test/storage-usage-consistency.ts72export async function expectStorageUsageConsistent(db: Database, orgId: string, context: string): Promise<void> {CODE
LOWserver/auth/oauth-par.ts13export function oauthPushedAuthorizationRequests(options: OAuthProviderOptions): BetterAuthPlugin {CODE
LOWserver/auth/oauth-par.ts69export async function resolvePushedAuthorizationRequest(input: {CODE
LOWserver/auth/oauth-par.ts103async function validatePushedAuthorizationRequest(CODE
LOWserver/auth/oauth-provider.ts33export function createOAuthProviderOptions(input: {CODE
LOWserver/auth/oauth-provider.ts126function oauthStandardsMetadataExtension(): OAuthProviderExtension {CODE
LOWserver/auth/oauth-provider.ts135function externalResourceGrantExtension(resourceAudience: string): OAuthProviderExtension {CODE
LOWserver/auth/oauth-provider.ts215function parseWorkspaceAuthorizationDetail(detail: AuthorizationDetail) {CODE
LOWserver/auth/oauth-provider.ts221function assertUniqueWorkspaceIdentifiers(details: Array<{ identifier?: string }>) {CODE
LOWserver/auth/oauth-provider.ts228function workspaceAuthorizationDetailsCovered(CODE
LOWserver/auth/oauth-provider.ts240function parseTokenExchangeAuthorizationDetails(body: unknown): AuthorizationDetail[] {CODE
LOWserver/auth/oauth-client-registration-management.ts141export function addOAuthClientRegistrationManagementOpenApi(document: { paths: Record<string, unknown> }): void {CODE
LOWserver/auth/oauth-client-registration-management.ts224export async function handleOAuthClientRegistrationManagement(CODE
LOWserver/auth/oauth-client-registration-management.ts273async function augmentRegistrationResponse(CODE
LOWserver/auth/oauth-client-registration-management.ts408function isSecureOrLocalDevelopmentUrl(value: string, serverUrl: URL): boolean {CODE
LOWserver/auth/oauth-client-registration-management.ts504async function matchesStoredClientSecret(candidate: string, stored: string | null): Promise<boolean> {CODE
LOWserver/adapters/repos/archive-target-folder.ts32export function createArchiveTargetFolderRepo(db: Database): ArchiveTargetFolderRepo {CODE
LOWserver/adapters/repos/admin-stats-counter-query.ts194export function buildAdminStatsCounterRowsSqlStatements(range: AdminStatsCounterQueryRange): string[] {CODE
LOWserver/adapters/repos/admin-stats-counter-query.ts211export function buildAdminStatsCounterRollupInsertSqlStatements(range: AdminStatsCounterQueryRange): string[] {CODE
LOWserver/adapters/repos/admin-stats-counter-query.ts243function buildCounterSqlStatements(range: AdminStatsCounterQueryRange, statement: string): string[] {CODE
LOWserver/adapters/repos/webdav-state.ts327function lockConflictsWithResource(lock: DavLock, resourcePath: string): boolean {CODE
LOWserver/adapters/repos/oauth-client-registration.ts10export async function insertOAuthClientRegistration(db: Database, clientId: string, tokenHash: string): Promise<void> {CODE
LOWserver/adapters/repos/oauth-client-registration.ts46export async function replaceManagedOAuthClient(CODE
LOWserver/adapters/repos/oauth-client-registration.ts66export async function listManagedOAuthClientResources(db: Database, clientId: string): Promise<string[]> {CODE
LOWserver/adapters/repos/oauth.ts188function workspaceIdsFromAuthorizationDetails(value: unknown): string[] {CODE
LOWserver/adapters/repos/admin-stats-rollup.ts184export async function captureAdminStatsSnapshot(CODE
LOWserver/adapters/repos/matter.ts64function descendantParentCondition(folderPath: string): SQL {CODE
LOWserver/adapters/repos/image-hosting-config.ts6export function createImageHostingConfigRepo(db: Database): ImageHostingConfigRepo {CODE
LOWserver/adapters/repos/license-binding.ts75async function updateLicenseBindingAfterRefresh(db: Database, input: UpdateLicenseBindingInput): Promise<void> {CODE
LOWserver/adapters/repos/user-admin.ts25async function findActiveUserIdByUsername(db: Database, username: string): Promise<string | null> {CODE
LOWserver/adapters/repos/user-admin.ts40async function listUserPersonalEntitlements(CODE
LOWserver/adapters/repos/user-admin.ts49async function grantUserPersonalEntitlement(CODE
LOWserver/adapters/repos/user-admin.ts65async function updateUserPersonalEntitlement(CODE
LOWserver/adapters/repos/user-admin.ts81async function revokeUserPersonalEntitlement(CODE
LOWserver/adapters/repos/downloader-bootstrap.ts11export function createDownloaderBootstrapCredentialRepo(CODE
274 more matches not shown…
Fake / Example Data70 hits · 78 pts
SeverityFileLineSnippetContext
LOWserver/auth.integration.test.ts386 const res = await signUp(ctx, 'user@example.com')CODE
LOWserver/middleware/auth.integration.test.ts55 await authedHeadersWithFreshSession(app, 'admin@example.com', 'password123456', 'Admin')CODE
LOWserver/middleware/auth.integration.test.ts63 await authedHeadersWithFreshSession(app, 'admin@example.com', 'password123456', 'Admin')CODE
LOWserver/middleware/auth.integration.test.ts73 const headers = await authedHeadersWithFreshSession(app, 'admin@example.com', 'password123456', 'Admin')CODE
LOWserver/middleware/auth.integration.test.ts80 const headers = await authedHeadersWithFreshSession(app, 'admin@example.com', 'password123456', 'Admin')CODE
LOWserver/middleware/auth.integration.test.ts88 const headers = await authedHeadersWithFreshSession(app, 'admin@example.com', 'password123456', 'Admin')CODE
LOWserver/middleware/auth.integration.test.ts99 const headers = await authedHeadersWithFreshSession(app, 'admin@example.com', 'password123456', 'Admin')CODE
LOWserver/test/setup.ts903 await authedHeaders(app, 'admin@example.com', 'password123456')CODE
LOWserver/test/setup.ts908 body: JSON.stringify({ email: 'admin@example.com', password: 'password123456' }),CODE
LOWserver/adapters/gateways/email.integration.test.ts75 { key: 'email_smtp_user', value: 'user@example.com' },CODE
LOWserver/adapters/gateways/email.integration.test.ts85 expect(config.smtp.user).toBe('user@example.com')CODE
LOWserver/adapters/gateways/email.integration.test.ts191 await gatewayFor(db).send(bareplatform(db), { to: 'user@example.com', subject: 'Hello', html: '<p>Hi</p>' })CODE
LOWserver/adapters/gateways/email.integration.test.ts194 to: 'user@example.com',CODE
LOWserver/adapters/gateways/email.integration.test.ts219 await gatewayFor(db).send(bareplatform(db), { to: 'user@example.com', subject: 'Hello', html: '<p>Hi</p>' })CODE
LOWserver/adapters/gateways/email.integration.test.ts229 to: 'user@example.com',CODE
LOWserver/adapters/gateways/email.integration.test.ts274 to: 'user@example.com',CODE
LOWserver/adapters/gateways/email.integration.test.ts280 to: 'user@example.com',CODE
LOWserver/adapters/gateways/email.integration.test.ts310 gatewayFor(db).send(bareplatform(db), { to: 'user@example.com', subject: 'Hi', html: '<p>Hi</p>' }),CODE
LOWserver/adapters/gateways/email.integration.test.ts369 to: 'user@example.com',CODE
LOWserver/adapters/gateways/email.integration.test.ts376 to: 'user@example.com',CODE
LOWserver/http/teams.integration.test.ts875 await authedHeaders(app, 'admin@example.com', 'password123456')CODE
LOWserver/http/teams.integration.test.ts879 body: JSON.stringify({ email: 'admin@example.com', password: 'password123456' }),CODE
LOWserver/http/teams.integration.test.ts926 await authedHeaders(app, 'admin@example.com', 'password123456')CODE
LOWserver/http/teams.integration.test.ts941 const adminId = await userId(db, 'admin@example.com')CODE
LOWserver/http/admin-users-ba.integration.test.ts12 await authedHeaders(app, 'admin@example.com', 'password123456')CODE
LOWserver/http/admin-users-ba.integration.test.ts16 body: JSON.stringify({ email: 'admin@example.com', password: 'password123456' }),CODE
LOWserver/http/admin-users-ba.integration.test.ts33 expect(body.users.map((u) => u.email)).toEqual(expect.arrayContaining(['admin@example.com', 'member@example.com']))CODE
LOWserver/http/admin-users-ba.integration.test.ts38 await authedHeaders(app, 'admin@example.com', 'password123456')CODE
LOWserver/http/admin-users-ba.integration.test.ts52 const adminRows = await db.all<{ id: string }>(sql`SELECT id FROM user WHERE email = 'admin@example.com'`)CODE
LOWserver/http/admin-users-ba.integration.test.ts119 const adminRows = await db.all<{ id: string }>(sql`SELECT id FROM user WHERE email = 'admin@example.com'`)CODE
LOWserver/http/webdav.integration.test.ts189 headers: basicHeaders('user@example.com', 'secret'),CODE
LOWserver/http/users.integration.test.ts7 await authedHeaders(app, 'admin@example.com', 'password123456')CODE
LOWserver/http/users.integration.test.ts12 body: JSON.stringify({ email: 'admin@example.com', password: 'password123456' }),CODE
LOWserver/http/quotas.integration.test.ts7 await authedHeaders(app, 'admin@example.com', 'password123456')CODE
LOWserver/http/quotas.integration.test.ts12 body: JSON.stringify({ email: 'admin@example.com', password: 'password123456' }),CODE
LOWserver/http/quotas.integration.test.ts26 await authedHeaders(app, 'admin@example.com')CODE
LOWserver/http/auth/auth.integration.test.ts209 body: JSON.stringify({ name: 'Admin User', email: 'admin@example.com', password: 'password123456' }),CODE
LOWserver/http/auth/auth.integration.test.ts211 const users = await db.select().from(authSchema.user).where(eq(authSchema.user.email, 'admin@example.com'))CODE
LOWserver/http/auth/auth.integration.test.ts220 body: JSON.stringify({ name: 'Admin User', email: 'admin@example.com', password: 'password123456' }),CODE
LOWserver/http/site/audit.integration.test.ts15 const headers = await authedHeaders(app, 'user@example.com')CODE
LOWserver/http/site/audit.integration.test.ts531 body: JSON.stringify({ email: 'admin@example.com', password: 'password123456' }),CODE
LOWserver/http/site/branding.integration.test.ts122 const headers = await authedHeaders(app, 'user@example.com')CODE
LOWserver/http/site/email-config.integration.test.ts13 { key: 'email_smtp_user', value: 'user@example.com' },CODE
LOWserver/http/site/email-config.integration.test.ts46 await authedHeaders(app, 'admin@example.com')CODE
LOWserver/http/site/email-config.integration.test.ts117 expect(smtp.user).toBe('user@example.com')CODE
LOWserver/http/site/email-config.integration.test.ts179 user: 'user@example.com',CODE
LOWserver/http/site/licensing.integration.test.ts28 cloudAccountEmail: 'user@example.com',CODE
LOWserver/http/site/licensing.integration.test.ts40 expect(body.account_email).toBe('user@example.com')CODE
LOWserver/http/site/invitations.integration.test.ts321 .where(eq(authSchema.user.email, 'admin@example.com'))CODE
LOWserver/http/site/storages.integration.test.ts36 await authedHeaders(app, 'admin@example.com')CODE
LOWserver/http/site/announcements.integration.test.ts35 const headers = await authedHeaders(app, 'user@example.com')CODE
LOWserver/http/site/audit-events.integration.test.ts477 const users = await db.all<{ id: string }>(sql`SELECT id FROM user WHERE email = 'admin@example.com' LIMIT 1`)CODE
LOWserver/http/site/licensing-admin.integration.test.ts84 await authedHeaders(app, 'admin@example.com')CODE
LOWserver/usecases/webdav.test.ts210 username: 'user@example.com',CODE
LOWserver/usecases/webdav.test.ts236 expect(findActiveUserIdByUsername).toHaveBeenCalledWith('user@example.com')CODE
LOWserver/usecases/site/email-config.test.ts21 smtp: { host: 'smtp.example.com', port: 587, user: 'user@example.com', pass: 'supersecret', secure: true },CODE
LOWserver/usecases/site/email-config.test.ts97 user: 'user@example.com',CODE
LOWserver/usecases/site/signup-mode.integration.test.ts21 await signUp(ctx, 'admin@example.com')CODE
LOWserver/usecases/site/signup-mode.integration.test.ts149 await signUp(ctx, 'admin@example.com')CODE
LOWserver/usecases/site/signup-mode.integration.test.ts153 body: JSON.stringify({ email: 'admin@example.com', password: 'password123456' }),CODE
10 more matches not shown…
Over-Commented Block15 hits · 15 pts
SeverityFileLineSnippetContext
LOWserver/http/events.ts61// event: resync → retention gap; refetch active queriesCOMMENT
LOWserver/domain/license-keys.ts1// Cloud public keys for verifying PASETO v4 entitlement certificates.COMMENT
LOWserver/usecases/team.ts1// The team resource usecase. Owns every business decision behind both teamCOMMENT
LOWserver/usecases/background-job.ts1// The background-jobs resource usecase (/api/background-jobs). Owns everyCOMMENT
LOWserver/usecases/object.ts1// The objects resource usecase. Owns every business decision behind theCOMMENT
LOWserver/usecases/user.ts1// The users resource usecase. Owns the front-of-house business decisions behindCOMMENT
LOWserver/usecases/webdav.ts1// The WebDAV resource usecase. WebDAV is special: the http handler owns theCOMMENT
LOWserver/usecases/image-hosting/images.ts1// The image-hosting (ihost) resource usecase. Owns every business decision behindCOMMENT
LOWserver/usecases/ports/archive-target-folder.ts1// Validates that an explicit archive target folder exists and is a folder (not aCOMMENT
LOWserver/usecases/store/store.ts1// The cloud store resource usecase. Owns every business decision behind theCOMMENT
LOWshared/schemas/errors.ts1import { z } from '@hono/zod-openapi'COMMENT
LOW.github/workflows/deploy.yml1name: DeployCOMMENT
LOWsrc/components/files/files-toolbar.test.ts1import { describe, expect, it } from 'vitest'COMMENT
LOWsrc/routes/(auth)/sign-up.test.ts1import { SignupMode } from '@shared/constants'COMMENT
LOWsrc/routes/(auth)/sign-in.test.ts1import { SignupMode } from '@shared/constants'COMMENT
Modern AI Meta-Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMdocs/design/agent-file-management-regression.md90### Debug round 1 — plugin approval orchestrationCOMMENT
Example Usage Blocks1 hit · 2 pts
SeverityFileLineSnippetContext
LOWdeploy/docker-compose.downloader.yml2# Usage:COMMENT