{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-a8814fd0464b05cc", "name": "Stray `console.log` in TS/JS \u2014 apps/upload/src/worker-configuration.d.ts:185", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 apps/upload/src/worker-configuration.d.ts:185"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9a1102baab0a59fb", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 apps/apex/src/app/Shell.tsx:32", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 apps/apex/src/app/Shell.tsx:32"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4e47bf324b1f1263", "name": "Stray `console.log` in TS/JS \u2014 apps/api/src/worker-configuration.d.ts:216", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 apps/api/src/worker-configuration.d.ts:216"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6de8180a851b475c", "name": "`truncate` class without `title=` for hover reveal \u2014 apps/web/src/components/dashboard/RecentAudit.tsx:36", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/web/src/components/dashboard/RecentAudit.tsx:36"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-90f47e1e3eec7e0b", "name": "`truncate` class without `title=` for hover reveal \u2014 apps/web/src/components/dashboard/RecentArtifacts.tsx:46", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/web/src/components/dashboard/RecentArtifacts.tsx:46"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-af8316112c47035e", "name": "`truncate` class without `title=` for hover reveal \u2014 apps/web/src/components/chrome/Topbar.tsx:34", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/web/src/components/chrome/Topbar.tsx:34"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-28ea708f0b13f9bb", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 apps/web/src/components/chrome/ThemeToggle.tsx:34", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 apps/web/src/components/chrome/ThemeToggle.tsx:34"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b6022badd94db7a4", "name": "`truncate` class without `title=` for hover reveal \u2014 apps/web/src/components/access-links/AccessLinkBrandBar.tsx:42", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/web/src/components/access-links/AccessLinkBrandBar.tsx:42"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-00ff61be328e44dc", "name": "`truncate` class without `title=` for hover reveal \u2014 apps/web/src/routes/_authed.artifacts.$artifactId.tsx:116", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/web/src/routes/_authed.artifacts.$artifactId.tsx:116"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a5f81054e34091a2", "name": "Stray `console.log` in TS/JS \u2014 apps/content/src/worker-configuration.d.ts:175", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 apps/content/src/worker-configuration.d.ts:175"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0a03d344918dbf49", "name": "Stray `console.log` in TS/JS \u2014 apps/jobs/src/worker-configuration.d.ts:184", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 apps/jobs/src/worker-configuration.d.ts:184"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1775e6eaa4264684", "name": "Stray `console.log` in TS/JS \u2014 apps/jobs/src/op-log.ts:39", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 apps/jobs/src/op-log.ts:39"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7e95d18a5937a807", "name": "Stray `console.log` in TS/JS \u2014 apps/jobs/src/bundle/generate-zip.test.ts:8", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 apps/jobs/src/bundle/generate-zip.test.ts:8"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-630af9bad182756f", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 packages/ui/src/components/Prose.tsx:12", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 packages/ui/src/components/Prose.tsx:12"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ab66e8e9a011a7c8", "name": "Stray `console.log` in TS/JS \u2014 packages/storage/src/unified-diff.test.ts:149", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/storage/src/unified-diff.test.ts:149"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0922783b5105b179", "name": "Docker base image is tag-pinned but not digest-pinned: node:24-bookworm", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: node:24-bookworm"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-159f87a72f76cd69", "name": "Insecure pattern 'exec_used' in apps/upload/src/worker-configuration.d.ts:3056", "shortDescription": {"text": "Insecure pattern 'exec_used' in apps/upload/src/worker-configuration.d.ts:3056"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c622b0a8c6294a97", "name": "Insecure pattern 'direct_innerhtml_assignment' in apps/apex/src/client.ts:45", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in apps/apex/src/client.ts:45"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3185a4981bf9f2d0", "name": "Insecure pattern 'dangerous_innerhtml' in apps/apex/src/app/Shell.tsx:32", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in apps/apex/src/app/Shell.tsx:32"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c6c720877cf02c3", "name": "Insecure pattern 'exec_used' in apps/api/src/worker-configuration.d.ts:3087", "shortDescription": {"text": "Insecure pattern 'exec_used' in apps/api/src/worker-configuration.d.ts:3087"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b0c679a1ecfb40cd", "name": "Insecure pattern 'node_child_process' in apps/cli/scripts/prepublish-guard.mjs:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in apps/cli/scripts/prepublish-guard.mjs:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-191b1eff31e8a879", "name": "Insecure pattern 'node_child_process' in apps/cli/src/loopback.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in apps/cli/src/loopback.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7ef3276a26faf7b1", "name": "Insecure pattern 'node_child_process' in apps/cli/src/keychain.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in apps/cli/src/keychain.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76c5186e84c9fde4", "name": "Insecure pattern 'dangerous_innerhtml' in apps/web/src/components/chrome/ThemeToggle.tsx:34", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in apps/web/src/components/chrome/ThemeToggle.tsx:34"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f4cf8b5ff3e7c14b", "name": "Insecure pattern 'exec_used' in apps/content/src/worker-configuration.d.ts:3046", "shortDescription": {"text": "Insecure pattern 'exec_used' in apps/content/src/worker-configuration.d.ts:3046"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6d7a8e00371c5f75", "name": "Insecure pattern 'exec_used' in apps/jobs/src/worker-configuration.d.ts:3055", "shortDescription": {"text": "Insecure pattern 'exec_used' in apps/jobs/src/worker-configuration.d.ts:3055"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a1bec75eeaef3f15", "name": "Insecure pattern 'private_key_in_repo' in apps/jobs/src/safety/resolve-scanner.test.ts:13", "shortDescription": {"text": "Insecure pattern 'private_key_in_repo' in apps/jobs/src/safety/resolve-scanner.test.ts:13"}, "fullDescription": {"text": "Found a known-risky pattern (private_key_in_repo). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-1c645fdcf166463d", "name": "Insecure pattern 'node_child_process' in scripts/security-attest.mjs:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/security-attest.mjs:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b5f879c805bd3b7", "name": "Possible secret in scripts/smoke-local-mvp.mjs", "shortDescription": {"text": "Possible secret in scripts/smoke-local-mvp.mjs"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-b69a1a086da51859", "name": "Insecure pattern 'node_child_process' in scripts/smoke-local-mvp.mjs:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/smoke-local-mvp.mjs:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4e53d3dc13bb5562", "name": "Insecure pattern 'node_child_process' in scripts/install-hooks.mjs:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/install-hooks.mjs:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6db400390a4ca212", "name": "Insecure pattern 'node_child_process' in scripts/jscpd-check.mjs:5", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/jscpd-check.mjs:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7423b6e3ac226f57", "name": "Insecure pattern 'node_child_process' in scripts/rotate-versioned-secret.test.mjs:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/rotate-versioned-secret.test.mjs:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c673fdad18c6b643", "name": "Insecure pattern 'node_child_process' in scripts/dev-web-local.mjs:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/dev-web-local.mjs:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a89c633efe3344d4", "name": "Insecure pattern 'node_child_process' in scripts/deploy.mjs:29", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/deploy.mjs:29"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7d3edbfceefb3c99", "name": "Insecure pattern 'node_child_process' in scripts/smoke-local-patch.mjs:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/smoke-local-patch.mjs:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5227d23cc5c253cf", "name": "Insecure pattern 'node_child_process' in scripts/smoke-local-ephemeral.mjs:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/smoke-local-ephemeral.mjs:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aa8e89de82b17e5d", "name": "Insecure pattern 'node_child_process' in scripts/smoke-hosted.mjs:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/smoke-hosted.mjs:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1d33172f83182ead", "name": "Insecure pattern 'node_child_process' in scripts/smoke-hosted-ephemeral.mjs:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/smoke-hosted-ephemeral.mjs:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ec317b4db92bfd60", "name": "Insecure pattern 'node_child_process' in scripts/wrangler-secrets.mjs:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/wrangler-secrets.mjs:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cf79f10a30935fde", "name": "Insecure pattern 'node_child_process' in scripts/smoke-ci-postgres.mjs:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/smoke-ci-postgres.mjs:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-15535e96c9923987", "name": "Possible secret in scripts/lighthouse-dashboard-a11y.mjs", "shortDescription": {"text": "Possible secret in scripts/lighthouse-dashboard-a11y.mjs"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-6770d2803a015d1d", "name": "Insecure pattern 'node_child_process' in scripts/lighthouse-dashboard-a11y.mjs:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/lighthouse-dashboard-a11y.mjs:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-518c5608377e8f0a", "name": "Insecure pattern 'node_child_process' in scripts/deploy-pr-preview.test.mjs:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/deploy-pr-preview.test.mjs:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-06f262ff93e8d4e3", "name": "Possible secret in scripts/smoke-web-api.mjs", "shortDescription": {"text": "Possible secret in scripts/smoke-web-api.mjs"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-535e84e3733cd172", "name": "Insecure pattern 'node_child_process' in scripts/smoke-web-api.mjs:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/smoke-web-api.mjs:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f05093b2e65724ce", "name": "Insecure pattern 'node_child_process' in scripts/knip-check.mjs:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/knip-check.mjs:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f83fb50a7365c384", "name": "Insecure pattern 'node_child_process' in scripts/migrate.mjs:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/migrate.mjs:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b5e35a77339422bf", "name": "Insecure pattern 'node_child_process' in scripts/setup-worktree.mjs:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/setup-worktree.mjs:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cfcd04647fc9cd39", "name": "Insecure pattern 'node_child_process' in scripts/rotate-workos-secrets.test.mjs:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/rotate-workos-secrets.test.mjs:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ca5d0fd5fcc7f1db", "name": "Insecure pattern 'node_child_process' in scripts/lib/spawn-command.mjs:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/lib/spawn-command.mjs:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bb0ec1cae5a3a725", "name": "Possible secret in scripts/lib/smoke-mcp-local.mjs", "shortDescription": {"text": "Possible secret in scripts/lib/smoke-mcp-local.mjs"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-a68c731aedfefc0e", "name": "Insecure pattern 'node_child_process' in scripts/lib/smoke-mcp-local.mjs:5", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/lib/smoke-mcp-local.mjs:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-897ba72d15f3b7d5", "name": "Insecure pattern 'node_child_process' in scripts/lib/hyperdrive-branch-guard.mjs:8", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/lib/hyperdrive-branch-guard.mjs:8"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b88ecc524aad8239", "name": "Insecure pattern 'node_child_process' in packages/db/scripts/introspect-check.mjs:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/db/scripts/introspect-check.mjs:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-65a716a27d2be993", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-637168208f334d71", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-210eae4b6fa29b44", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cb639d9a10a47b23", "name": "package.json defines install-time lifecycle scripts", "shortDescription": {"text": "package.json defines install-time lifecycle scripts"}, "fullDescription": {"text": "preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cd63c2d3bf8039dd", "name": "Very large file: apps/upload/src/worker-configuration.d.ts (13641 lines)", "shortDescription": {"text": "Very large file: apps/upload/src/worker-configuration.d.ts (13641 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5d406ba9da7be297", "name": "Very large file: apps/api/src/worker-configuration.d.ts (13672 lines)", "shortDescription": {"text": "Very large file: apps/api/src/worker-configuration.d.ts (13672 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c16fdef8f77350f1", "name": "Very large file: apps/api/src/index.test.ts (3651 lines)", "shortDescription": {"text": "Very large file: apps/api/src/index.test.ts (3651 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-630a1bf2e8c7e4de", "name": "Very large file: apps/content/src/worker-configuration.d.ts (13631 lines)", "shortDescription": {"text": "Very large file: apps/content/src/worker-configuration.d.ts (13631 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e1649099b9e7ec0d", "name": "Very large file: apps/jobs/src/worker-configuration.d.ts (13640 lines)", "shortDescription": {"text": "Very large file: apps/jobs/src/worker-configuration.d.ts (13640 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ba4310559a73e8c4", "name": "Very large file: packages/db/src/index.test.ts (3143 lines)", "shortDescription": {"text": "Very large file: packages/db/src/index.test.ts (3143 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-81bd4199e36ae250", "name": "Node manifest has dependencies but no lockfile: apps/upload/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: apps/upload/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0b1fa58c0a13757f", "name": "Node manifest has dependencies but no lockfile: apps/apex/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: apps/apex/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b06b8d86f24c77f9", "name": "Node manifest has dependencies but no lockfile: apps/api/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: apps/api/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33bfb396f1c1ee27", "name": "Node manifest has dependencies but no lockfile: apps/mcp/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: apps/mcp/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a0165ea166579aa4", "name": "Node manifest has dependencies but no lockfile: apps/cli/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: apps/cli/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d06217b2deee019d", "name": "Node manifest has dependencies but no lockfile: apps/stream/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: apps/stream/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4a9eb7dc7c6e3880", "name": "Node manifest has dependencies but no lockfile: apps/web/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: apps/web/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a44fc5b1026ccf12", "name": "Node manifest has dependencies but no lockfile: apps/content/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: apps/content/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f7549f59839ed4f0", "name": "Node manifest has dependencies but no lockfile: apps/jobs/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: apps/jobs/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-892d4f964c9036e2", "name": "Node manifest has dependencies but no lockfile: packages/api-client/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/api-client/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0724b71eef0f4c25", "name": "Node manifest has dependencies but no lockfile: packages/brand/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/brand/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-41b225e183229484", "name": "Node manifest has dependencies but no lockfile: packages/auth/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/auth/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-50218c90b43393bb", "name": "Node manifest has dependencies but no lockfile: packages/ui/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/ui/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d94e6674120e6563", "name": "Node manifest has dependencies but no lockfile: packages/revise-core/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/revise-core/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-233edd299cafbdbc", "name": "Node manifest has dependencies but no lockfile: packages/repo-lint/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/repo-lint/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-147327abec69965f", "name": "Node manifest has dependencies but no lockfile: packages/billing/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/billing/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8b9dcb9b490bc5bf", "name": "Node manifest has dependencies but no lockfile: packages/worker-runtime/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/worker-runtime/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b6e23c87c84be16", "name": "Node manifest has dependencies but no lockfile: packages/tokens/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/tokens/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b16ae2bd0fca524", "name": "Node manifest has dependencies but no lockfile: packages/db/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/db/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f85d8f0719e22fa8", "name": "Node manifest has dependencies but no lockfile: packages/contracts/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/contracts/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f4e5772c0a9bad21", "name": "Node manifest has dependencies but no lockfile: packages/write-allowance/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/write-allowance/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-490d0cab30698fe7", "name": "Node manifest has dependencies but no lockfile: packages/rotation/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/rotation/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ffe735b6528d997a", "name": "Node manifest has dependencies but no lockfile: packages/plans/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/plans/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-137007a5b04ba75f", "name": "Node manifest has dependencies but no lockfile: packages/storage/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/storage/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 10 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 42 placeholder/mock markers across 19 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cc55229a7a3c078d", "name": "Agent authority lacks a verifier contract: .mcp.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .mcp.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-033976c93882a426", "name": "Agent instruction contains unpinned remote install: .claude/skills/agent-paste-neon-postgres/SKILL.md", "shortDescription": {"text": "Agent instruction contains unpinned remote install: .claude/skills/agent-paste-neon-postgres/SKILL.md"}, "fullDescription": {"text": "Remote install commands in agent instructions are a supply-chain risk, especially when an agent can execute shell commands."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bea13bb8e7991c32", "name": "Agent authority lacks a verifier contract: .cursor/rules/agent-paste.mdc", "shortDescription": {"text": "Agent authority lacks a verifier contract: .cursor/rules/agent-paste.mdc"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d7da4b05e585b72a", "name": "Commented-code block (5 lines) in vitest.shared.config.ts:21", "shortDescription": {"text": "Commented-code block (5 lines) in vitest.shared.config.ts:21"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f147781b84c38669", "name": "Commented-code block (7 lines) in vitest.scripts.config.ts:22", "shortDescription": {"text": "Commented-code block (7 lines) in vitest.scripts.config.ts:22"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8fd8c87baf60c040", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/upload/src/finalize.test.ts:67", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/upload/src/finalize.test.ts:67"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-db53ab3e0ca3672f", "name": "Legacy-named symbol `certIssuerDNLegacy` in apps/upload/src/worker-configuration.d.ts:11089", "shortDescription": {"text": "Legacy-named symbol `certIssuerDNLegacy` in apps/upload/src/worker-configuration.d.ts:11089"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b1160803b8804aad", "name": "Commented-code block (8 lines) in apps/upload/src/worker-configuration.d.ts:12084", "shortDescription": {"text": "Commented-code block (8 lines) in apps/upload/src/worker-configuration.d.ts:12084"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7b2ef369969397b5", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/upload/src/worker-configuration.d.ts:318", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/upload/src/worker-configuration.d.ts:318"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fb7852f9af73b556", "name": "Commented-code block (6 lines) in apps/upload/src/finalize.ts:18", "shortDescription": {"text": "Commented-code block (6 lines) in apps/upload/src/finalize.ts:18"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fba571c98a889f69", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/upload/src/index.ts:113", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/upload/src/index.ts:113"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-991d68d1aa159721", "name": "Commented-code block (5 lines) in apps/apex/scripts/prerender.mjs:1", "shortDescription": {"text": "Commented-code block (5 lines) in apps/apex/scripts/prerender.mjs:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-14b512c337fb1605", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/apex/src/server.test.ts:11", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/apex/src/server.test.ts:11"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4937a76a4b57189e", "name": "Commented-code block (5 lines) in apps/apex/src/copy.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in apps/apex/src/copy.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-10f7faadecd2e323", "name": "Legacy-named symbol `feedback_never_unit_test_copy` in apps/apex/src/render.test.tsx:152", "shortDescription": {"text": "Legacy-named symbol `feedback_never_unit_test_copy` in apps/apex/src/render.test.tsx:152"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0d68c9acf0c964cc", "name": "Commented-code block (5 lines) in apps/apex/src/render.test.tsx:11", "shortDescription": {"text": "Commented-code block (5 lines) in apps/apex/src/render.test.tsx:11"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b689dd0840432ce9", "name": "Commented-code block (5 lines) in apps/apex/src/about.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in apps/apex/src/about.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-07167720600fae58", "name": "Commented-code block (5 lines) in apps/apex/src/install-sh.ts:8", "shortDescription": {"text": "Commented-code block (5 lines) in apps/apex/src/install-sh.ts:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-28d5abb9f224e809", "name": "Commented-code block (7 lines) in apps/apex/src/client.ts:1", "shortDescription": {"text": "Commented-code block (7 lines) in apps/apex/src/client.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7fec13a82ddbdce6", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/apex/src/server.ts:11", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/apex/src/server.ts:11"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8fe950e7e4850112", "name": "Commented-code block (5 lines) in apps/apex/src/install-ps1.ts:4", "shortDescription": {"text": "Commented-code block (5 lines) in apps/apex/src/install-ps1.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6b808225cdecd720", "name": "Commented-code block (5 lines) in apps/apex/src/app/chrome.tsx:96", "shortDescription": {"text": "Commented-code block (5 lines) in apps/apex/src/app/chrome.tsx:96"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-50156267231c3f3e", "name": "Commented-code block (5 lines) in apps/apex/src/app/scripts.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in apps/apex/src/app/scripts.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-95183d9e6f85317d", "name": "Legacy-named symbol `certIssuerDNLegacy` in apps/api/src/worker-configuration.d.ts:11120", "shortDescription": {"text": "Legacy-named symbol `certIssuerDNLegacy` in apps/api/src/worker-configuration.d.ts:11120"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-35f8e384a01d21df", "name": "Commented-code block (8 lines) in apps/api/src/worker-configuration.d.ts:12115", "shortDescription": {"text": "Commented-code block (8 lines) in apps/api/src/worker-configuration.d.ts:12115"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8eb5334190134911", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/worker-configuration.d.ts:349", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/worker-configuration.d.ts:349"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a7852abfb7ecf97b", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/member-artifact-delete-invalidation.test.ts:145", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/member-artifact-delete-invalidation.test.ts:145"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bb5bef939a287287", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/env.ts:87", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/env.ts:87"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-86b4bb3cbc08f91b", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/local-mvp.test.ts:322", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/local-mvp.test.ts:322"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-339bdae07f4c3cb9", "name": "Commented-code block (5 lines) in apps/api/src/index.ts:133", "shortDescription": {"text": "Commented-code block (5 lines) in apps/api/src/index.ts:133"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-752542953a812507", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/index.ts:403", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/index.ts:403"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ed44083e340da7df", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/publish-coordinator.test.ts:27", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/publish-coordinator.test.ts:27"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d78debf8eae1faf2", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/live-updates.ts:19", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/live-updates.ts:19"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5dcedbde4adb3b61", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/access-link-invalidation.test.ts:155", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/access-link-invalidation.test.ts:155"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-62f0139c8ba7450e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/ephemeral-provision-gate.ts:128", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/ephemeral-provision-gate.ts:128"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0ae5388f9b00ac18", "name": "Commented-code block (5 lines) in apps/api/src/routes/artifact-file-content.ts:13", "shortDescription": {"text": "Commented-code block (5 lines) in apps/api/src/routes/artifact-file-content.ts:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9b16ea9123cd7617", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/routes/billing.test.ts:36", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/routes/billing.test.ts:36"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6cbbd0e4e2a16e33", "name": "Commented-code block (5 lines) in apps/api/src/routes/cli-version.ts:4", "shortDescription": {"text": "Commented-code block (5 lines) in apps/api/src/routes/cli-version.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d45ecbfa3ef9a2af", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/mcp/src/transport.test.ts:236", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/mcp/src/transport.test.ts:236"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7c03700ff990b23f", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/mcp/src/index.test.ts:5", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/mcp/src/index.test.ts:5"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-423a1ec58ca1633c", "name": "Commented-code block (5 lines) in apps/mcp/src/protocol.ts:11", "shortDescription": {"text": "Commented-code block (5 lines) in apps/mcp/src/protocol.ts:11"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-30649a26a371d2e2", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/mcp/src/tools.test.ts:19", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/mcp/src/tools.test.ts:19"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f0109e69510b1ad0", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/mcp/src/index.ts:44", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/mcp/src/index.ts:44"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-86005837e02d3a22", "name": "Commented-code block (8 lines) in apps/mcp/src/tools.ts:231", "shortDescription": {"text": "Commented-code block (8 lines) in apps/mcp/src/tools.ts:231"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-29561ca6b87fecbc", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/mcp/src/forward.ts:10", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/mcp/src/forward.ts:10"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-710fdda5e669b39f", "name": "Commented-code block (5 lines) in apps/cli/build.mjs:5", "shortDescription": {"text": "Commented-code block (5 lines) in apps/cli/build.mjs:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5f9b6ed738d7088f", "name": "Commented-code block (6 lines) in apps/cli/src/config.ts:9", "shortDescription": {"text": "Commented-code block (6 lines) in apps/cli/src/config.ts:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-90afa8ab91df1263", "name": "Commented-code block (10 lines) in apps/cli/src/render.ts:127", "shortDescription": {"text": "Commented-code block (10 lines) in apps/cli/src/render.ts:127"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bfdb927caf3e5c7f", "name": "Commented-code block (8 lines) in apps/cli/src/revise.ts:123", "shortDescription": {"text": "Commented-code block (8 lines) in apps/cli/src/revise.ts:123"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d5c33cdb5b0d7c65", "name": "Commented-code block (5 lines) in apps/cli/src/version.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in apps/cli/src/version.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-97cb8636e717d854", "name": "Commented-code block (5 lines) in apps/cli/src/index.ts:61", "shortDescription": {"text": "Commented-code block (5 lines) in apps/cli/src/index.ts:61"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-88df89e43ef3cef8", "name": "Commented-code block (7 lines) in apps/cli/src/manifest-cache.ts:6", "shortDescription": {"text": "Commented-code block (7 lines) in apps/cli/src/manifest-cache.ts:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bd41dab9ff37710e", "name": "Commented-code block (5 lines) in apps/cli/src/upgrade.ts:10", "shortDescription": {"text": "Commented-code block (5 lines) in apps/cli/src/upgrade.ts:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ef44fafea97fb93f", "name": "Commented-code block (5 lines) in apps/cli/src/keychain.ts:3", "shortDescription": {"text": "Commented-code block (5 lines) in apps/cli/src/keychain.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1e43dba9b051721a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/memory-artifact-live.ts:19", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/memory-artifact-live.ts:19"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1a582bcd602e29af", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/index.ts:9", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/index.ts:9"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-23d7db67537be483", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/artifact-live.ts:34", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/artifact-live.ts:34"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d6c7d7e6c39f1780", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/authorize.ts:9", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/authorize.ts:9"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7f7d0b2a2a8ff82b", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/artifact-live.test.ts:24", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/artifact-live.test.ts:24"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0e1b04f2ad3e0f0e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/memory-artifact-live.test.ts:40", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/memory-artifact-live.test.ts:40"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2e022a3ef168e4a3", "name": "Commented-code block (5 lines) in apps/web/vite.config.ts:19", "shortDescription": {"text": "Commented-code block (5 lines) in apps/web/vite.config.ts:19"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7cfe2926944027b0", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/test/api-client.test.ts:7", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/test/api-client.test.ts:7"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3a21e94b00be5b9f", "name": "Commented-code block (9 lines) in apps/web/src/security-headers.ts:6", "shortDescription": {"text": "Commented-code block (9 lines) in apps/web/src/security-headers.ts:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6c72fc9b833454d1", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/server.ts:18", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/server.ts:18"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-51526e7a9ced6cd1", "name": "Commented-code block (6 lines) in apps/web/src/lib/analytics-scripts.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in apps/web/src/lib/analytics-scripts.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1546c632cf80147f", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/lib/live-updates.ts:33", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/lib/live-updates.ts:33"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d5d76e7cb345dfa7", "name": "Commented-code block (5 lines) in apps/web/src/lib/csp-nonce-client.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in apps/web/src/lib/csp-nonce-client.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b027eb754b487493", "name": "Commented-code block (5 lines) in apps/web/src/routes/v.$artifactId.tsx:23", "shortDescription": {"text": "Commented-code block (5 lines) in apps/web/src/routes/v.$artifactId.tsx:23"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-624830693fdd8458", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/routes/al.$publicId.tsx:75", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/routes/al.$publicId.tsx:75"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-35fead65204dfa44", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/routes/api/live/artifacts/$artifactId.ts:21", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/routes/api/live/artifacts/$artifactId.ts:21"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cf178d74d616d274", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/routes/api/live/access-links/$publicId.ts:11", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/routes/api/live/access-links/$publicId.ts:11"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-65e4d4412a49595c", "name": "Commented-code block (5 lines) in apps/web/src/server/csp-nonce.ts:4", "shortDescription": {"text": "Commented-code block (5 lines) in apps/web/src/server/csp-nonce.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2846431ddabb7b8b", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/server/csp-nonce.ts:11", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/server/csp-nonce.ts:11"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0699cca7fa006c99", "name": "Legacy-named symbol `certIssuerDNLegacy` in apps/content/src/worker-configuration.d.ts:11079", "shortDescription": {"text": "Legacy-named symbol `certIssuerDNLegacy` in apps/content/src/worker-configuration.d.ts:11079"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1e6ccc54d9e95d33", "name": "Commented-code block (8 lines) in apps/content/src/worker-configuration.d.ts:12074", "shortDescription": {"text": "Commented-code block (8 lines) in apps/content/src/worker-configuration.d.ts:12074"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-65134bc6c00138ab", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/content/src/worker-configuration.d.ts:308", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/content/src/worker-configuration.d.ts:308"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dac20d53564aa1db", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/content/src/serve-object.test.ts:364", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/content/src/serve-object.test.ts:364"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2f0be83b2b911366", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/content/src/index.ts:104", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/content/src/index.ts:104"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-db1aa33c126737f0", "name": "Commented-code block (7 lines) in apps/content/src/serve-object.ts:446", "shortDescription": {"text": "Commented-code block (7 lines) in apps/content/src/serve-object.ts:446"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-64d0f90a16e4bf3c", "name": "Legacy-named symbol `certIssuerDNLegacy` in apps/jobs/src/worker-configuration.d.ts:11088", "shortDescription": {"text": "Legacy-named symbol `certIssuerDNLegacy` in apps/jobs/src/worker-configuration.d.ts:11088"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b631afae528cdb35", "name": "Commented-code block (8 lines) in apps/jobs/src/worker-configuration.d.ts:12083", "shortDescription": {"text": "Commented-code block (8 lines) in apps/jobs/src/worker-configuration.d.ts:12083"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2a91feb887d098e2", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/jobs/src/worker-configuration.d.ts:317", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/jobs/src/worker-configuration.d.ts:317"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4a12f33b1e5d607b", "name": "Legacy-named symbol `stub_v1` in apps/jobs/src/index.test.ts:210", "shortDescription": {"text": "Legacy-named symbol `stub_v1` in apps/jobs/src/index.test.ts:210"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a6a427161ffb56c5", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/jobs/src/index.test.ts:19", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/jobs/src/index.test.ts:19"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c36219d4c574830f", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/jobs/src/index.ts:73", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/jobs/src/index.ts:73"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-839f4cccc3d13d0d", "name": "`fetch()` without try/.catch or AbortSignal \u2014 apps/jobs/src/smoke.test.ts:196", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/jobs/src/smoke.test.ts:196"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-890fec5215a6e75a", "name": "Legacy-named symbol `stub_v1` in apps/jobs/src/jobs-coverage.test.ts:236", "shortDescription": {"text": "Legacy-named symbol `stub_v1` in apps/jobs/src/jobs-coverage.test.ts:236"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6c4570a35dab8bf2", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-local-mvp.mjs:114", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-local-mvp.mjs:114"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-50a5dcec40bd4ce5", "name": "Commented-code block (6 lines) in scripts/install-hooks.mjs:5", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/install-hooks.mjs:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ec71fd844f219591", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-harness.mjs:49", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-harness.mjs:49"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-81b93afc2085c31d", "name": "Commented-code block (11 lines) in scripts/deploy.mjs:10", "shortDescription": {"text": "Commented-code block (11 lines) in scripts/deploy.mjs:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-34304d0674fe48cf", "name": "Commented-code block (14 lines) in scripts/smoke-local-patch.mjs:3", "shortDescription": {"text": "Commented-code block (14 lines) in scripts/smoke-local-patch.mjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d184ba6aa6e0a02e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-local-patch.mjs:316", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-local-patch.mjs:316"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ddf93a935d92e3f7", "name": "Commented-code block (6 lines) in scripts/deploy-pr-preview.mjs:89", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/deploy-pr-preview.mjs:89"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9c646acd86e4c4ea", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/local-mvp-server.mjs:356", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/local-mvp-server.mjs:356"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-db562facf69ecf05", "name": "Commented-code block (6 lines) in scripts/smoke-hosted.mjs:24", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/smoke-hosted.mjs:24"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-325d71eda2db0584", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-hosted.mjs:82", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-hosted.mjs:82"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-511f877f29db62dc", "name": "Commented-code block (6 lines) in scripts/merge-coverage.mjs:14", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/merge-coverage.mjs:14"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dc95e63d6c85a879", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/lighthouse-dashboard-a11y.mjs:267", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/lighthouse-dashboard-a11y.mjs:267"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a19795ce5dd4182b", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/resolve-neon-role-url.mjs:95", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/resolve-neon-role-url.mjs:95"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-55e47dffc2f6e881", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-ephemeral-harness.mjs:217", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-ephemeral-harness.mjs:217"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3efefe6c1627dbb2", "name": "Commented-code block (5 lines) in scripts/smoke-web-api.mjs:242", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/smoke-web-api.mjs:242"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-451775d110d6e132", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-web-api.mjs:276", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-web-api.mjs:276"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-50aaf3f672b98da2", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-mcp-harness.mjs:90", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-mcp-harness.mjs:90"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-662f9b5910055dbe", "name": "Commented-code block (5 lines) in scripts/lib/local-env-secrets.mjs:4", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/lib/local-env-secrets.mjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-95948d8b9c5dd57e", "name": "Commented-code block (6 lines) in scripts/lib/smoke-readonly.mjs:29", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/lib/smoke-readonly.mjs:29"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-993f69dd2bf026ed", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/lib/smoke-readonly.mjs:111", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/lib/smoke-readonly.mjs:111"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1268ab36cca5a0ec", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/lib/smoke-mcp-local.mjs:102", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/lib/smoke-mcp-local.mjs:102"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e1a1ebff05299123", "name": "Commented-code block (5 lines) in scripts/lib/secret-routing.mjs:4", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/lib/secret-routing.mjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-80b9cbe2f3ff84db", "name": "Commented-code block (7 lines) in scripts/lib/hyperdrive-branch-guard.mjs:1", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/lib/hyperdrive-branch-guard.mjs:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c14b01c5b8fee865", "name": "Commented-code block (6 lines) in scripts/lib/secret-values.mjs:1", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/lib/secret-values.mjs:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-20ce7bb24bcd9b22", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/auth/src/request-id.test.ts:39", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/auth/src/request-id.test.ts:39"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e1314376cdcb611", "name": "Commented-code block (5 lines) in packages/ui/src/components/Prose.tsx:15", "shortDescription": {"text": "Commented-code block (5 lines) in packages/ui/src/components/Prose.tsx:15"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d9cb97566e9c2ec0", "name": "Commented-code block (5 lines) in packages/revise-core/src/revise-one-path.ts:106", "shortDescription": {"text": "Commented-code block (5 lines) in packages/revise-core/src/revise-one-path.ts:106"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2aaf1904ec2d1edc", "name": "Commented-code block (5 lines) in packages/revise-core/src/unified-diff-gen.ts:3", "shortDescription": {"text": "Commented-code block (5 lines) in packages/revise-core/src/unified-diff-gen.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a3c6f96bacf17ca7", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/worker-runtime/src/bound-responders.test.ts:19", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/worker-runtime/src/bound-responders.test.ts:19"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-43bfea921120ccd9", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/worker-runtime/src/contract-errors.test.ts:123", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/worker-runtime/src/contract-errors.test.ts:123"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27245130b350a8c5", "name": "Commented-code block (5 lines) in packages/worker-runtime/src/security-headers.ts:3", "shortDescription": {"text": "Commented-code block (5 lines) in packages/worker-runtime/src/security-headers.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9b2327ea13914013", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/worker-runtime/src/registrar.test.ts:62", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/worker-runtime/src/registrar.test.ts:62"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6f360af974afaac9", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/worker-runtime/src/security-headers.test.ts:33", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/worker-runtime/src/security-headers.test.ts:33"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-180e496d14bb6f79", "name": "Commented-code block (7 lines) in packages/db/src/schema.ts:295", "shortDescription": {"text": "Commented-code block (7 lines) in packages/db/src/schema.ts:295"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-030337c2738bac87", "name": "Commented-code block (5 lines) in packages/db/src/index.test.ts:2290", "shortDescription": {"text": "Commented-code block (5 lines) in packages/db/src/index.test.ts:2290"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ad8e88dae96aef9c", "name": "Commented-code block (8 lines) in packages/db/src/types.ts:294", "shortDescription": {"text": "Commented-code block (8 lines) in packages/db/src/types.ts:294"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d53948a6d96db198", "name": "Commented-code block (5 lines) in packages/db/src/repository/local-scope.ts:4", "shortDescription": {"text": "Commented-code block (5 lines) in packages/db/src/repository/local-scope.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-35938849f622dd5c", "name": "Commented-code block (6 lines) in packages/db/src/repository/local-unit-of-work.ts:28", "shortDescription": {"text": "Commented-code block (6 lines) in packages/db/src/repository/local-unit-of-work.ts:28"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-184e1350ef3ba96d", "name": "Commented-code block (5 lines) in packages/db/src/repository/upload-session-lifecycle.ts:207", "shortDescription": {"text": "Commented-code block (5 lines) in packages/db/src/repository/upload-session-lifecycle.ts:207"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6b7fdf4fe0a02031", "name": "Legacy-named symbol `user_claim_legacy` in packages/db/src/repository/workflows/ephemeral-claim-workflow.test.ts:788", "shortDescription": {"text": "Legacy-named symbol `user_claim_legacy` in packages/db/src/repository/workflows/ephemeral-claim-workflow.test.ts:788"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c03be5543e08e2ef", "name": "Commented-code block (7 lines) in packages/db/src/postgres/connect-retry.ts:1", "shortDescription": {"text": "Commented-code block (7 lines) in packages/db/src/postgres/connect-retry.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7af9ebee76ac8d9c", "name": "Commented-code block (7 lines) in packages/db/src/postgres/revision-reconstructor.ts:11", "shortDescription": {"text": "Commented-code block (7 lines) in packages/db/src/postgres/revision-reconstructor.ts:11"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1c4b6905698d3e63", "name": "Commented-code block (5 lines) in packages/db/src/test-helpers/route-boundary-fixture.ts:10", "shortDescription": {"text": "Commented-code block (5 lines) in packages/db/src/test-helpers/route-boundary-fixture.ts:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eb7c5b704ccfdcd7", "name": "Legacy-named symbol `workspace_old` in packages/db/src/queries/index.test.ts:21", "shortDescription": {"text": "Legacy-named symbol `workspace_old` in packages/db/src/queries/index.test.ts:21"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-819dd6f2aafa48e9", "name": "Legacy-named symbol `stub_v1` in packages/contracts/src/jobs.test.ts:28", "shortDescription": {"text": "Legacy-named symbol `stub_v1` in packages/contracts/src/jobs.test.ts:28"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-db27d2db6f98c07d", "name": "Commented-code block (6 lines) in packages/contracts/src/uploadSessions.ts:21", "shortDescription": {"text": "Commented-code block (6 lines) in packages/contracts/src/uploadSessions.ts:21"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f90556abbfca605e", "name": "Commented-code block (5 lines) in packages/contracts/src/mcp.test.ts:590", "shortDescription": {"text": "Commented-code block (5 lines) in packages/contracts/src/mcp.test.ts:590"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7312075fb2f0b006", "name": "Commented-code block (7 lines) in packages/contracts/src/enums.ts:3", "shortDescription": {"text": "Commented-code block (7 lines) in packages/contracts/src/enums.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-31cf8b82159deaee", "name": "Commented-code block (9 lines) in packages/contracts/src/artifacts.ts:51", "shortDescription": {"text": "Commented-code block (9 lines) in packages/contracts/src/artifacts.ts:51"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-80c9b0460f08b70c", "name": "Commented-code block (7 lines) in packages/contracts/src/mcp/scopes.ts:43", "shortDescription": {"text": "Commented-code block (7 lines) in packages/contracts/src/mcp/scopes.ts:43"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f08f57f34d84c7a8", "name": "Commented-code block (5 lines) in packages/contracts/src/mcp/schemas.ts:25", "shortDescription": {"text": "Commented-code block (5 lines) in packages/contracts/src/mcp/schemas.ts:25"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ace701e9a6153308", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/write-allowance/src/durable-object.ts:9", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/write-allowance/src/durable-object.ts:9"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-beed968a4be37860", "name": "Commented-code block (6 lines) in packages/write-allowance/src/client.ts:30", "shortDescription": {"text": "Commented-code block (6 lines) in packages/write-allowance/src/client.ts:30"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4d07fb3539e978ef", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/write-allowance/src/client.ts:13", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/write-allowance/src/client.ts:13"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5275a9709083058f", "name": "Commented-code block (8 lines) in packages/storage/src/unified-diff.ts:1", "shortDescription": {"text": "Commented-code block (8 lines) in packages/storage/src/unified-diff.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a4889bb6679bd901", "name": "Commented-code block (5 lines) in packages/storage/src/workspace-blob-bytes.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in packages/storage/src/workspace-blob-bytes.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a330d8bcaa9d114e", "name": "71 env vars used in code but missing from .env.example", "shortDescription": {"text": "71 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `AGENT_PASTE_ACCESS_LINK_SIGNING_KEY`, `AGENT_PASTE_API_KEY`, `AGENT_PASTE_API_KEY_PEPPER`, `AGENT_PASTE_ARTIFACT_BYTES_ENCRYPTION_KEY`, `AGENT_PASTE_CONTENT_SIGNING_SECRET`, `AGENT_PASTE_ENV`, `AGENT_PASTE_EPHEMERAL_SMOKE_WORKOS_ACCESS_TOKEN`, `AGENT_PASTE_HYPERDRIVE_LIMIT` + 63 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4ca373d0f16c15aa", "name": "Dangling fetch: GET /.well-known/openid-configuration/mcp (apps/mcp/src/index.test.ts:77)", "shortDescription": {"text": "Dangling fetch: GET /.well-known/openid-configuration/mcp (apps/mcp/src/index.test.ts:77)"}, "fullDescription": {"text": "`apps/mcp/src/index.test.ts:77` calls `GET /.well-known/openid-configuration/mcp` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: helper:request\nNormalized path used for matching: `/.well-known/openid-configuration/mcp`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8a04ca3650a3ce0b", "name": "Dangling fetch: GET /missing (apps/mcp/src/index.test.ts:119)", "shortDescription": {"text": "Dangling fetch: GET /missing (apps/mcp/src/index.test.ts:119)"}, "fullDescription": {"text": "`apps/mcp/src/index.test.ts:119` calls `GET /missing` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: helper:request\nNormalized path used for matching: `/missing`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bdab134b46ab8242", "name": "Dangling fetch: GET /missing (apps/mcp/src/index.test.ts:151)", "shortDescription": {"text": "Dangling fetch: GET /missing (apps/mcp/src/index.test.ts:151)"}, "fullDescription": {"text": "`apps/mcp/src/index.test.ts:151` calls `GET /missing` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: helper:request\nNormalized path used for matching: `/missing`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-10f9f980958415e7", "name": "Dangling fetch: POST /api/access-links/resolve (apps/web/src/routes/al.$publicId.tsx:75)", "shortDescription": {"text": "Dangling fetch: POST /api/access-links/resolve (apps/web/src/routes/al.$publicId.tsx:75)"}, "fullDescription": {"text": "`apps/web/src/routes/al.$publicId.tsx:75` calls `POST /api/access-links/resolve` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/access-links/resolve`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b6aa409fe390baee", "name": "Unused endpoint: POST /__test__/provision-smoke", "shortDescription": {"text": "Unused endpoint: POST /__test__/provision-smoke"}, "fullDescription": {"text": "`apps/api/src/index.ts` declares `POST /__test__/provision-smoke` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1f48bee70a28161d", "name": "Unused endpoint: POST /__test__/force-expire", "shortDescription": {"text": "Unused endpoint: POST /__test__/force-expire"}, "fullDescription": {"text": "`apps/api/src/index.ts` declares `POST /__test__/force-expire` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1309d69e055bab63", "name": "Unused endpoint: POST /__test__/delete-artifact", "shortDescription": {"text": "Unused endpoint: POST /__test__/delete-artifact"}, "fullDescription": {"text": "`apps/api/src/index.ts` declares `POST /__test__/delete-artifact` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1f07f0fbf8569377", "name": "Unused endpoint: GET /__test__/r2-list", "shortDescription": {"text": "Unused endpoint: GET /__test__/r2-list"}, "fullDescription": {"text": "`apps/api/src/index.ts` declares `GET /__test__/r2-list` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8032f963635a176f", "name": "Unused endpoint: GET /__test__/denylist", "shortDescription": {"text": "Unused endpoint: GET /__test__/denylist"}, "fullDescription": {"text": "`apps/api/src/index.ts` declares `GET /__test__/denylist` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-86e2d6ba98212f42", "name": "Unused endpoint: POST /v1/internal/live-updates/authorize", "shortDescription": {"text": "Unused endpoint: POST /v1/internal/live-updates/authorize"}, "fullDescription": {"text": "`apps/api/src/index.ts` declares `POST /v1/internal/live-updates/authorize` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-abeedf376498a817", "name": "Unused endpoint: ALL /", "shortDescription": {"text": "Unused endpoint: ALL /"}, "fullDescription": {"text": "`apps/mcp/src/index.ts` declares `ALL /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d9bc582bbf867400", "name": "Unused endpoint: POST /__test__/run-cleanup", "shortDescription": {"text": "Unused endpoint: POST /__test__/run-cleanup"}, "fullDescription": {"text": "`apps/jobs/src/index.ts` declares `POST /__test__/run-cleanup` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e0bc41def7bb0bb5", "name": "Unused endpoint: POST /__test__/purge-recovery", "shortDescription": {"text": "Unused endpoint: POST /__test__/purge-recovery"}, "fullDescription": {"text": "`apps/jobs/src/index.ts` declares `POST /__test__/purge-recovery` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/23542"}, "properties": {"repository": "zaks-io/agent-paste", "repoUrl": "https://github.com/zaks-io/agent-paste", "branch": "main"}, "results": [{"ruleId": "scanner-a8814fd0464b05cc", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 apps/upload/src/worker-configuration.d.ts:185"}, "properties": {"repobilityId": "dd79cd305e14bdff", "scanner": "scanner-primary", "fingerprint": "a8814fd0464b05cc", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9a1102baab0a59fb", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 apps/apex/src/app/Shell.tsx:32"}, "properties": {"repobilityId": "cceb063de3a1c9a9", "scanner": "scanner-primary", "fingerprint": "9a1102baab0a59fb", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-4e47bf324b1f1263", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 apps/api/src/worker-configuration.d.ts:216"}, "properties": {"repobilityId": "727a415f04c66053", "scanner": "scanner-primary", "fingerprint": "4e47bf324b1f1263", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6de8180a851b475c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/web/src/components/dashboard/RecentAudit.tsx:36"}, "properties": {"repobilityId": "3545c300ddf29c36", "scanner": "scanner-primary", "fingerprint": "6de8180a851b475c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-90f47e1e3eec7e0b", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/web/src/components/dashboard/RecentArtifacts.tsx:46"}, "properties": {"repobilityId": "53393dd03f8140b7", "scanner": "scanner-primary", "fingerprint": "90f47e1e3eec7e0b", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-af8316112c47035e", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/web/src/components/chrome/Topbar.tsx:34"}, "properties": {"repobilityId": "18263117290736af", "scanner": "scanner-primary", "fingerprint": "af8316112c47035e", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-28ea708f0b13f9bb", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 apps/web/src/components/chrome/ThemeToggle.tsx:34"}, "properties": {"repobilityId": "d6e58f7fcde5df67", "scanner": "scanner-primary", "fingerprint": "28ea708f0b13f9bb", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-b6022badd94db7a4", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/web/src/components/access-links/AccessLinkBrandBar.tsx:42"}, "properties": {"repobilityId": "3048819ee5456cb6", "scanner": "scanner-primary", "fingerprint": "b6022badd94db7a4", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-00ff61be328e44dc", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 apps/web/src/routes/_authed.artifacts.$artifactId.tsx:116"}, "properties": {"repobilityId": "ea9b75d45e649ae5", "scanner": "scanner-primary", "fingerprint": "00ff61be328e44dc", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-a5f81054e34091a2", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 apps/content/src/worker-configuration.d.ts:175"}, "properties": {"repobilityId": "ecf24d583b9450ca", "scanner": "scanner-primary", "fingerprint": "a5f81054e34091a2", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0a03d344918dbf49", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 apps/jobs/src/worker-configuration.d.ts:184"}, "properties": {"repobilityId": "e64361bb65efeeab", "scanner": "scanner-primary", "fingerprint": "0a03d344918dbf49", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1775e6eaa4264684", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 apps/jobs/src/op-log.ts:39"}, "properties": {"repobilityId": "ed31eff1a6e8f59a", "scanner": "scanner-primary", "fingerprint": "1775e6eaa4264684", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7e95d18a5937a807", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 apps/jobs/src/bundle/generate-zip.test.ts:8"}, "properties": {"repobilityId": "56d92dc0a2d6384d", "scanner": "scanner-primary", "fingerprint": "7e95d18a5937a807", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-630af9bad182756f", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 packages/ui/src/components/Prose.tsx:12"}, "properties": {"repobilityId": "b3d7f37d1dd1abe6", "scanner": "scanner-primary", "fingerprint": "630af9bad182756f", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-ab66e8e9a011a7c8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/storage/src/unified-diff.test.ts:149"}, "properties": {"repobilityId": "30b8537e4e347ff7", "scanner": "scanner-primary", "fingerprint": "ab66e8e9a011a7c8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0922783b5105b179", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:24-bookworm"}, "properties": {"repobilityId": "539679d47b454bb7", "scanner": "scanner-primary", "fingerprint": "0922783b5105b179", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".cursor/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-159f87a72f76cd69", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in apps/upload/src/worker-configuration.d.ts:3056"}, "properties": {"repobilityId": "52593951c6e10800", "scanner": "scanner-primary", "fingerprint": "159f87a72f76cd69", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/upload/src/worker-configuration.d.ts"}, "region": {"startLine": 3056}}}]}, {"ruleId": "scanner-c622b0a8c6294a97", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in apps/apex/src/client.ts:45"}, "properties": {"repobilityId": "e935dcbba8bee706", "scanner": "scanner-primary", "fingerprint": "c622b0a8c6294a97", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/apex/src/client.ts"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-3185a4981bf9f2d0", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in apps/apex/src/app/Shell.tsx:32"}, "properties": {"repobilityId": "020c88a1ac4bec7c", "scanner": "scanner-primary", "fingerprint": "3185a4981bf9f2d0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/apex/src/app/Shell.tsx"}, "region": {"startLine": 32}}}]}, {"ruleId": "scanner-8c6c720877cf02c3", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in apps/api/src/worker-configuration.d.ts:3087"}, "properties": {"repobilityId": "cab1928195822a3d", "scanner": "scanner-primary", "fingerprint": "8c6c720877cf02c3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/api/src/worker-configuration.d.ts"}, "region": {"startLine": 3087}}}]}, {"ruleId": "scanner-b0c679a1ecfb40cd", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in apps/cli/scripts/prepublish-guard.mjs:1"}, "properties": {"repobilityId": "f29d35b5096fd022", "scanner": "scanner-primary", "fingerprint": "b0c679a1ecfb40cd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/cli/scripts/prepublish-guard.mjs"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-191b1eff31e8a879", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in apps/cli/src/loopback.ts:1"}, "properties": {"repobilityId": "f61e43c18d0d4ae0", "scanner": "scanner-primary", "fingerprint": "191b1eff31e8a879", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/cli/src/loopback.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7ef3276a26faf7b1", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in apps/cli/src/keychain.ts:1"}, "properties": {"repobilityId": "9b750db7198011cd", "scanner": "scanner-primary", "fingerprint": "7ef3276a26faf7b1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/cli/src/keychain.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-76c5186e84c9fde4", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in apps/web/src/components/chrome/ThemeToggle.tsx:34"}, "properties": {"repobilityId": "3b3b47c0239a00cb", "scanner": "scanner-primary", "fingerprint": "76c5186e84c9fde4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/web/src/components/chrome/ThemeToggle.tsx"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-f4cf8b5ff3e7c14b", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in apps/content/src/worker-configuration.d.ts:3046"}, "properties": {"repobilityId": "0a66ff845dfe0f6f", "scanner": "scanner-primary", "fingerprint": "f4cf8b5ff3e7c14b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/content/src/worker-configuration.d.ts"}, "region": {"startLine": 3046}}}]}, {"ruleId": "scanner-6d7a8e00371c5f75", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in apps/jobs/src/worker-configuration.d.ts:3055"}, "properties": {"repobilityId": "6fd35bf0c342f53c", "scanner": "scanner-primary", "fingerprint": "6d7a8e00371c5f75", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/jobs/src/worker-configuration.d.ts"}, "region": {"startLine": 3055}}}]}, {"ruleId": "scanner-a1bec75eeaef3f15", "level": "error", "message": {"text": "Insecure pattern 'private_key_in_repo' in apps/jobs/src/safety/resolve-scanner.test.ts:13"}, "properties": {"repobilityId": "23e3b6c63e8d8277", "scanner": "scanner-primary", "fingerprint": "a1bec75eeaef3f15", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["owasp", "private_key_in_repo"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/jobs/src/safety/resolve-scanner.test.ts"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-1c645fdcf166463d", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/security-attest.mjs:2"}, "properties": {"repobilityId": "63bfce7339db927b", "scanner": "scanner-primary", "fingerprint": "1c645fdcf166463d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/security-attest.mjs"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-7b5f879c805bd3b7", "level": "error", "message": {"text": "Possible secret in scripts/smoke-local-mvp.mjs"}, "properties": {"repobilityId": "09779398e38e3804", "scanner": "scanner-primary", "fingerprint": "7b5f879c805bd3b7", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/smoke-local-mvp.mjs"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-b69a1a086da51859", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/smoke-local-mvp.mjs:2"}, "properties": {"repobilityId": "9a08c5747a09e3c2", "scanner": "scanner-primary", "fingerprint": "b69a1a086da51859", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/smoke-local-mvp.mjs"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-4e53d3dc13bb5562", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/install-hooks.mjs:2"}, "properties": {"repobilityId": "1b84307b611a838b", "scanner": "scanner-primary", "fingerprint": "4e53d3dc13bb5562", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/install-hooks.mjs"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-6db400390a4ca212", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/jscpd-check.mjs:5"}, "properties": {"repobilityId": "5e56201988c83af8", "scanner": "scanner-primary", "fingerprint": "6db400390a4ca212", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/jscpd-check.mjs"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-7423b6e3ac226f57", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/rotate-versioned-secret.test.mjs:1"}, "properties": {"repobilityId": "fc9a6950dabdb8aa", "scanner": "scanner-primary", "fingerprint": "7423b6e3ac226f57", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rotate-versioned-secret.test.mjs"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c673fdad18c6b643", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/dev-web-local.mjs:2"}, "properties": {"repobilityId": "a1d2cb1f03c50d13", "scanner": "scanner-primary", "fingerprint": "c673fdad18c6b643", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/dev-web-local.mjs"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-a89c633efe3344d4", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/deploy.mjs:29"}, "properties": {"repobilityId": "ea4cb3005ad91693", "scanner": "scanner-primary", "fingerprint": "a89c633efe3344d4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/deploy.mjs"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-7d3edbfceefb3c99", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/smoke-local-patch.mjs:2"}, "properties": {"repobilityId": "e9c95d33b5db01ad", "scanner": "scanner-primary", "fingerprint": "7d3edbfceefb3c99", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/smoke-local-patch.mjs"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-5227d23cc5c253cf", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/smoke-local-ephemeral.mjs:2"}, "properties": {"repobilityId": "e271de8687a2ed56", "scanner": "scanner-primary", "fingerprint": "5227d23cc5c253cf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/smoke-local-ephemeral.mjs"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-aa8e89de82b17e5d", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/smoke-hosted.mjs:2"}, "properties": {"repobilityId": "fb46a2e449844e3b", "scanner": "scanner-primary", "fingerprint": "aa8e89de82b17e5d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/smoke-hosted.mjs"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-1d33172f83182ead", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/smoke-hosted-ephemeral.mjs:2"}, "properties": {"repobilityId": "1f887212963d7601", "scanner": "scanner-primary", "fingerprint": "1d33172f83182ead", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/smoke-hosted-ephemeral.mjs"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-ec317b4db92bfd60", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/wrangler-secrets.mjs:1"}, "properties": {"repobilityId": "e82755f8b8a014f4", "scanner": "scanner-primary", "fingerprint": "ec317b4db92bfd60", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/wrangler-secrets.mjs"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cf79f10a30935fde", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/smoke-ci-postgres.mjs:2"}, "properties": {"repobilityId": "d52723cb5aa49762", "scanner": "scanner-primary", "fingerprint": "cf79f10a30935fde", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/smoke-ci-postgres.mjs"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-15535e96c9923987", "level": "error", "message": {"text": "Possible secret in scripts/lighthouse-dashboard-a11y.mjs"}, "properties": {"repobilityId": "7fd7039060aa95a1", "scanner": "scanner-primary", "fingerprint": "15535e96c9923987", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/lighthouse-dashboard-a11y.mjs"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-15535e96c9923987", "level": "error", "message": {"text": "Possible secret in scripts/lighthouse-dashboard-a11y.mjs"}, "properties": {"repobilityId": "55aac33e2dbca3d3", "scanner": "scanner-primary", "fingerprint": "15535e96c9923987", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/lighthouse-dashboard-a11y.mjs"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-6770d2803a015d1d", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/lighthouse-dashboard-a11y.mjs:2"}, "properties": {"repobilityId": "2b1f999713f1d9a3", "scanner": "scanner-primary", "fingerprint": "6770d2803a015d1d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/lighthouse-dashboard-a11y.mjs"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-518c5608377e8f0a", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/deploy-pr-preview.test.mjs:1"}, "properties": {"repobilityId": "91b50bf23a8c5d45", "scanner": "scanner-primary", "fingerprint": "518c5608377e8f0a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/deploy-pr-preview.test.mjs"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-06f262ff93e8d4e3", "level": "error", "message": {"text": "Possible secret in scripts/smoke-web-api.mjs"}, "properties": {"repobilityId": "f7da64dfe45a5ac3", "scanner": "scanner-primary", "fingerprint": "06f262ff93e8d4e3", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/smoke-web-api.mjs"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-535e84e3733cd172", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/smoke-web-api.mjs:2"}, "properties": {"repobilityId": "6f6cd246f47f2d40", "scanner": "scanner-primary", "fingerprint": "535e84e3733cd172", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/smoke-web-api.mjs"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-f05093b2e65724ce", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/knip-check.mjs:2"}, "properties": {"repobilityId": "fd9cea2d35e71dab", "scanner": "scanner-primary", "fingerprint": "f05093b2e65724ce", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/knip-check.mjs"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-f83fb50a7365c384", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/migrate.mjs:2"}, "properties": {"repobilityId": "6ac7c6395e971b04", "scanner": "scanner-primary", "fingerprint": "f83fb50a7365c384", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/migrate.mjs"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-b5e35a77339422bf", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/setup-worktree.mjs:2"}, "properties": {"repobilityId": "6e8a08977c4f4025", "scanner": "scanner-primary", "fingerprint": "b5e35a77339422bf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/setup-worktree.mjs"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-cfcd04647fc9cd39", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/rotate-workos-secrets.test.mjs:1"}, "properties": {"repobilityId": "60fd56a016e65d5b", "scanner": "scanner-primary", "fingerprint": "cfcd04647fc9cd39", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/rotate-workos-secrets.test.mjs"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ca5d0fd5fcc7f1db", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/lib/spawn-command.mjs:1"}, "properties": {"repobilityId": "750ddc93004c3225", "scanner": "scanner-primary", "fingerprint": "ca5d0fd5fcc7f1db", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/lib/spawn-command.mjs"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bb0ec1cae5a3a725", "level": "error", "message": {"text": "Possible secret in scripts/lib/smoke-mcp-local.mjs"}, "properties": {"repobilityId": "8631ec990e45c9bc", "scanner": "scanner-primary", "fingerprint": "bb0ec1cae5a3a725", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/lib/smoke-mcp-local.mjs"}, "region": {"startLine": 278}}}]}, {"ruleId": "scanner-a68c731aedfefc0e", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/lib/smoke-mcp-local.mjs:5"}, "properties": {"repobilityId": "23cc8184d0ec30ed", "scanner": "scanner-primary", "fingerprint": "a68c731aedfefc0e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/lib/smoke-mcp-local.mjs"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-897ba72d15f3b7d5", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/lib/hyperdrive-branch-guard.mjs:8"}, "properties": {"repobilityId": "40dfda7e97292094", "scanner": "scanner-primary", "fingerprint": "897ba72d15f3b7d5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/lib/hyperdrive-branch-guard.mjs"}, "region": {"startLine": 8}}}]}, {"ruleId": "scanner-b88ecc524aad8239", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/db/scripts/introspect-check.mjs:2"}, "properties": {"repobilityId": "bb1f65eba2631177", "scanner": "scanner-primary", "fingerprint": "b88ecc524aad8239", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/db/scripts/introspect-check.mjs"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-65a716a27d2be993", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "3133a88ce98acc76", "scanner": "scanner-primary", "fingerprint": "65a716a27d2be993", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/scorecard.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-637168208f334d71", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "94c032061b7f25c0", "scanner": "scanner-primary", "fingerprint": "637168208f334d71", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cli-advertise.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-210eae4b6fa29b44", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "8b2fd1facfa6d067", "scanner": "scanner-primary", "fingerprint": "210eae4b6fa29b44", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/cli-release.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb639d9a10a47b23", "level": "note", "message": {"text": "package.json defines install-time lifecycle scripts"}, "properties": {"repobilityId": "b86179956da3a4a8", "scanner": "scanner-primary", "fingerprint": "cb639d9a10a47b23", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "npm", "install-scripts"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cd63c2d3bf8039dd", "level": "note", "message": {"text": "Very large file: apps/upload/src/worker-configuration.d.ts (13641 lines)"}, "properties": {"repobilityId": "6db353efdb89e883", "scanner": "scanner-primary", "fingerprint": "cd63c2d3bf8039dd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-5d406ba9da7be297", "level": "note", "message": {"text": "Very large file: apps/api/src/worker-configuration.d.ts (13672 lines)"}, "properties": {"repobilityId": "d20db0afebd2623a", "scanner": "scanner-primary", "fingerprint": "5d406ba9da7be297", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-c16fdef8f77350f1", "level": "note", "message": {"text": "Very large file: apps/api/src/index.test.ts (3651 lines)"}, "properties": {"repobilityId": "ca356eb2d82232de", "scanner": "scanner-primary", "fingerprint": "c16fdef8f77350f1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-630a1bf2e8c7e4de", "level": "note", "message": {"text": "Very large file: apps/content/src/worker-configuration.d.ts (13631 lines)"}, "properties": {"repobilityId": "e32238aaccfc96e6", "scanner": "scanner-primary", "fingerprint": "630a1bf2e8c7e4de", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e1649099b9e7ec0d", "level": "note", "message": {"text": "Very large file: apps/jobs/src/worker-configuration.d.ts (13640 lines)"}, "properties": {"repobilityId": "19ac02ef18c54cac", "scanner": "scanner-primary", "fingerprint": "e1649099b9e7ec0d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ba4310559a73e8c4", "level": "note", "message": {"text": "Very large file: packages/db/src/index.test.ts (3143 lines)"}, "properties": {"repobilityId": "a3936753eac03cac", "scanner": "scanner-primary", "fingerprint": "ba4310559a73e8c4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-81bd4199e36ae250", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: apps/upload/package.json"}, "properties": {"repobilityId": "b1682aa87d3099d9", "scanner": "scanner-primary", "fingerprint": "81bd4199e36ae250", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/upload/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0b1fa58c0a13757f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: apps/apex/package.json"}, "properties": {"repobilityId": "7129ee7c757018ee", "scanner": "scanner-primary", "fingerprint": "0b1fa58c0a13757f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/apex/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b06b8d86f24c77f9", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: apps/api/package.json"}, "properties": {"repobilityId": "ce77cd34ed0306d4", "scanner": "scanner-primary", "fingerprint": "b06b8d86f24c77f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/api/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-33bfb396f1c1ee27", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: apps/mcp/package.json"}, "properties": {"repobilityId": "81d32da25bb5012e", "scanner": "scanner-primary", "fingerprint": "33bfb396f1c1ee27", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/mcp/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a0165ea166579aa4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: apps/cli/package.json"}, "properties": {"repobilityId": "027862884b842339", "scanner": "scanner-primary", "fingerprint": "a0165ea166579aa4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/cli/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d06217b2deee019d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: apps/stream/package.json"}, "properties": {"repobilityId": "dad69d2231951844", "scanner": "scanner-primary", "fingerprint": "d06217b2deee019d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/stream/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4a9eb7dc7c6e3880", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: apps/web/package.json"}, "properties": {"repobilityId": "6c1704bf24cf19ac", "scanner": "scanner-primary", "fingerprint": "4a9eb7dc7c6e3880", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/web/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a44fc5b1026ccf12", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: apps/content/package.json"}, "properties": {"repobilityId": "940bfb745513be61", "scanner": "scanner-primary", "fingerprint": "a44fc5b1026ccf12", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/content/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f7549f59839ed4f0", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: apps/jobs/package.json"}, "properties": {"repobilityId": "b9b684f4c60e59f7", "scanner": "scanner-primary", "fingerprint": "f7549f59839ed4f0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "apps/jobs/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-892d4f964c9036e2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/api-client/package.json"}, "properties": {"repobilityId": "e1c2e42c288c295a", "scanner": "scanner-primary", "fingerprint": "892d4f964c9036e2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/api-client/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0724b71eef0f4c25", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/brand/package.json"}, "properties": {"repobilityId": "81ba554baf1983d0", "scanner": "scanner-primary", "fingerprint": "0724b71eef0f4c25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/brand/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-41b225e183229484", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/auth/package.json"}, "properties": {"repobilityId": "c022328d0892fb4d", "scanner": "scanner-primary", "fingerprint": "41b225e183229484", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/auth/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-50218c90b43393bb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/ui/package.json"}, "properties": {"repobilityId": "637e26a8c754e81d", "scanner": "scanner-primary", "fingerprint": "50218c90b43393bb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/ui/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d94e6674120e6563", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/revise-core/package.json"}, "properties": {"repobilityId": "d3a36fa34189f78c", "scanner": "scanner-primary", "fingerprint": "d94e6674120e6563", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/revise-core/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-233edd299cafbdbc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/repo-lint/package.json"}, "properties": {"repobilityId": "7664748bdf904c08", "scanner": "scanner-primary", "fingerprint": "233edd299cafbdbc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/repo-lint/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-147327abec69965f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/billing/package.json"}, "properties": {"repobilityId": "1ab8928e987536e3", "scanner": "scanner-primary", "fingerprint": "147327abec69965f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/billing/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8b9dcb9b490bc5bf", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/worker-runtime/package.json"}, "properties": {"repobilityId": "9762de456d15a88f", "scanner": "scanner-primary", "fingerprint": "8b9dcb9b490bc5bf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/worker-runtime/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b6e23c87c84be16", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/tokens/package.json"}, "properties": {"repobilityId": "d5b583943aa8021c", "scanner": "scanner-primary", "fingerprint": "7b6e23c87c84be16", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/tokens/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b16ae2bd0fca524", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/db/package.json"}, "properties": {"repobilityId": "2bddd295d559a9b6", "scanner": "scanner-primary", "fingerprint": "7b16ae2bd0fca524", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/db/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f85d8f0719e22fa8", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/contracts/package.json"}, "properties": {"repobilityId": "9533b27beaa7d171", "scanner": "scanner-primary", "fingerprint": "f85d8f0719e22fa8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/contracts/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f4e5772c0a9bad21", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/write-allowance/package.json"}, "properties": {"repobilityId": "6362706edd99dd18", "scanner": "scanner-primary", "fingerprint": "f4e5772c0a9bad21", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/write-allowance/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-490d0cab30698fe7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/rotation/package.json"}, "properties": {"repobilityId": "af5ea241adf974a0", "scanner": "scanner-primary", "fingerprint": "490d0cab30698fe7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/rotation/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ffe735b6528d997a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/plans/package.json"}, "properties": {"repobilityId": "431a56b5a8dd886d", "scanner": "scanner-primary", "fingerprint": "ffe735b6528d997a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/plans/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-137007a5b04ba75f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/storage/package.json"}, "properties": {"repobilityId": "c54ae775ce7f58ec", "scanner": "scanner-primary", "fingerprint": "137007a5b04ba75f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/storage/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "41831f61de6cc4e9", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "3fd7e68d2e90827b", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "7bd8c8fe9481d767", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "65c105d152b84820", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "9d6f0645b3c4e57f", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "f95b12a0152d103b", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-cc55229a7a3c078d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .mcp.json"}, "properties": {"repobilityId": "51942fb3d5b8b5b4", "scanner": "scanner-primary", "fingerprint": "cc55229a7a3c078d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "mcp_config"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".mcp.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-033976c93882a426", "level": "warning", "message": {"text": "Agent instruction contains unpinned remote install: .claude/skills/agent-paste-neon-postgres/SKILL.md"}, "properties": {"repobilityId": "02110b77561b5f6a", "scanner": "scanner-primary", "fingerprint": "033976c93882a426", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "supply-chain", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/agent-paste-neon-postgres/SKILL.md"}, "region": {"startLine": 68}}}]}, {"ruleId": "scanner-bea13bb8e7991c32", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .cursor/rules/agent-paste.mdc"}, "properties": {"repobilityId": "5258eb2c9539eb74", "scanner": "scanner-primary", "fingerprint": "bea13bb8e7991c32", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "cursor_rule"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".cursor/rules/agent-paste.mdc"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d7da4b05e585b72a", "level": "none", "message": {"text": "Commented-code block (5 lines) in vitest.shared.config.ts:21"}, "properties": {"repobilityId": "ddd7f2960811b27c", "scanner": "scanner-primary", "fingerprint": "d7da4b05e585b72a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f147781b84c38669", "level": "none", "message": {"text": "Commented-code block (7 lines) in vitest.scripts.config.ts:22"}, "properties": {"repobilityId": "420ae1c837ce321e", "scanner": "scanner-primary", "fingerprint": "f147781b84c38669", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8fd8c87baf60c040", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/upload/src/finalize.test.ts:67"}, "properties": {"repobilityId": "514c423c48ca712a", "scanner": "scanner-primary", "fingerprint": "8fd8c87baf60c040", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-db53ab3e0ca3672f", "level": "note", "message": {"text": "Legacy-named symbol `certIssuerDNLegacy` in apps/upload/src/worker-configuration.d.ts:11089"}, "properties": {"repobilityId": "9f27508e49c04315", "scanner": "scanner-primary", "fingerprint": "db53ab3e0ca3672f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b1160803b8804aad", "level": "none", "message": {"text": "Commented-code block (8 lines) in apps/upload/src/worker-configuration.d.ts:12084"}, "properties": {"repobilityId": "ab6f956d77087d13", "scanner": "scanner-primary", "fingerprint": "b1160803b8804aad", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7b2ef369969397b5", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/upload/src/worker-configuration.d.ts:318"}, "properties": {"repobilityId": "71fab9402c1b7773", "scanner": "scanner-primary", "fingerprint": "7b2ef369969397b5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fb7852f9af73b556", "level": "none", "message": {"text": "Commented-code block (6 lines) in apps/upload/src/finalize.ts:18"}, "properties": {"repobilityId": "6122e0ce2cdb10d1", "scanner": "scanner-primary", "fingerprint": "fb7852f9af73b556", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fba571c98a889f69", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/upload/src/index.ts:113"}, "properties": {"repobilityId": "42991c234f8d1d03", "scanner": "scanner-primary", "fingerprint": "fba571c98a889f69", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-991d68d1aa159721", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/apex/scripts/prerender.mjs:1"}, "properties": {"repobilityId": "30cb80d0589ce50c", "scanner": "scanner-primary", "fingerprint": "991d68d1aa159721", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-14b512c337fb1605", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/apex/src/server.test.ts:11"}, "properties": {"repobilityId": "ff72962a5c6b56e7", "scanner": "scanner-primary", "fingerprint": "14b512c337fb1605", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4937a76a4b57189e", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/apex/src/copy.ts:1"}, "properties": {"repobilityId": "9b9d8441fe88f173", "scanner": "scanner-primary", "fingerprint": "4937a76a4b57189e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-10f7faadecd2e323", "level": "note", "message": {"text": "Legacy-named symbol `feedback_never_unit_test_copy` in apps/apex/src/render.test.tsx:152"}, "properties": {"repobilityId": "8e43fe87c52195c1", "scanner": "scanner-primary", "fingerprint": "10f7faadecd2e323", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0d68c9acf0c964cc", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/apex/src/render.test.tsx:11"}, "properties": {"repobilityId": "3591525f68236d8b", "scanner": "scanner-primary", "fingerprint": "0d68c9acf0c964cc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b689dd0840432ce9", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/apex/src/about.ts:1"}, "properties": {"repobilityId": "d58408e14d77df45", "scanner": "scanner-primary", "fingerprint": "b689dd0840432ce9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-07167720600fae58", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/apex/src/install-sh.ts:8"}, "properties": {"repobilityId": "eb3553a70b850ded", "scanner": "scanner-primary", "fingerprint": "07167720600fae58", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-28d5abb9f224e809", "level": "none", "message": {"text": "Commented-code block (7 lines) in apps/apex/src/client.ts:1"}, "properties": {"repobilityId": "156b251bc4100dc1", "scanner": "scanner-primary", "fingerprint": "28d5abb9f224e809", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7fec13a82ddbdce6", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/apex/src/server.ts:11"}, "properties": {"repobilityId": "65ad20d6793c4f11", "scanner": "scanner-primary", "fingerprint": "7fec13a82ddbdce6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8fe950e7e4850112", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/apex/src/install-ps1.ts:4"}, "properties": {"repobilityId": "269bfdbabd821e70", "scanner": "scanner-primary", "fingerprint": "8fe950e7e4850112", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6b808225cdecd720", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/apex/src/app/chrome.tsx:96"}, "properties": {"repobilityId": "0e6c99e1a8b58d6a", "scanner": "scanner-primary", "fingerprint": "6b808225cdecd720", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-50156267231c3f3e", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/apex/src/app/scripts.ts:1"}, "properties": {"repobilityId": "b711b4000a04fd70", "scanner": "scanner-primary", "fingerprint": "50156267231c3f3e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-95183d9e6f85317d", "level": "note", "message": {"text": "Legacy-named symbol `certIssuerDNLegacy` in apps/api/src/worker-configuration.d.ts:11120"}, "properties": {"repobilityId": "025d659b47467f58", "scanner": "scanner-primary", "fingerprint": "95183d9e6f85317d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-35f8e384a01d21df", "level": "none", "message": {"text": "Commented-code block (8 lines) in apps/api/src/worker-configuration.d.ts:12115"}, "properties": {"repobilityId": "9bd77412ca045c65", "scanner": "scanner-primary", "fingerprint": "35f8e384a01d21df", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8eb5334190134911", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/worker-configuration.d.ts:349"}, "properties": {"repobilityId": "2ff037c088b5b855", "scanner": "scanner-primary", "fingerprint": "8eb5334190134911", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a7852abfb7ecf97b", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/member-artifact-delete-invalidation.test.ts:145"}, "properties": {"repobilityId": "ab17dcb582b4c62a", "scanner": "scanner-primary", "fingerprint": "a7852abfb7ecf97b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-bb5bef939a287287", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/env.ts:87"}, "properties": {"repobilityId": "82dcb6238b93699d", "scanner": "scanner-primary", "fingerprint": "bb5bef939a287287", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-86b4bb3cbc08f91b", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/local-mvp.test.ts:322"}, "properties": {"repobilityId": "1779148e50a920a7", "scanner": "scanner-primary", "fingerprint": "86b4bb3cbc08f91b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-339bdae07f4c3cb9", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/api/src/index.ts:133"}, "properties": {"repobilityId": "5907c66e6479bf3a", "scanner": "scanner-primary", "fingerprint": "339bdae07f4c3cb9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-752542953a812507", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/index.ts:403"}, "properties": {"repobilityId": "2f3d11766233ae23", "scanner": "scanner-primary", "fingerprint": "752542953a812507", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ed44083e340da7df", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/publish-coordinator.test.ts:27"}, "properties": {"repobilityId": "2d02e824ff914232", "scanner": "scanner-primary", "fingerprint": "ed44083e340da7df", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d78debf8eae1faf2", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/live-updates.ts:19"}, "properties": {"repobilityId": "ce0002ac6561c235", "scanner": "scanner-primary", "fingerprint": "d78debf8eae1faf2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5dcedbde4adb3b61", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/access-link-invalidation.test.ts:155"}, "properties": {"repobilityId": "a80cf4ad8bc5d9a0", "scanner": "scanner-primary", "fingerprint": "5dcedbde4adb3b61", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-62f0139c8ba7450e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/ephemeral-provision-gate.ts:128"}, "properties": {"repobilityId": "d5226b27595ccad7", "scanner": "scanner-primary", "fingerprint": "62f0139c8ba7450e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0ae5388f9b00ac18", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/api/src/routes/artifact-file-content.ts:13"}, "properties": {"repobilityId": "7afa572172b01ded", "scanner": "scanner-primary", "fingerprint": "0ae5388f9b00ac18", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9b16ea9123cd7617", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/api/src/routes/billing.test.ts:36"}, "properties": {"repobilityId": "6b3fb47aba8cf613", "scanner": "scanner-primary", "fingerprint": "9b16ea9123cd7617", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-6cbbd0e4e2a16e33", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/api/src/routes/cli-version.ts:4"}, "properties": {"repobilityId": "378cff195ad79aee", "scanner": "scanner-primary", "fingerprint": "6cbbd0e4e2a16e33", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d45ecbfa3ef9a2af", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/mcp/src/transport.test.ts:236"}, "properties": {"repobilityId": "b05dd27d212f88c9", "scanner": "scanner-primary", "fingerprint": "d45ecbfa3ef9a2af", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7c03700ff990b23f", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/mcp/src/index.test.ts:5"}, "properties": {"repobilityId": "239781883c4ef851", "scanner": "scanner-primary", "fingerprint": "7c03700ff990b23f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-423a1ec58ca1633c", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/mcp/src/protocol.ts:11"}, "properties": {"repobilityId": "aed368401e930b16", "scanner": "scanner-primary", "fingerprint": "423a1ec58ca1633c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-30649a26a371d2e2", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/mcp/src/tools.test.ts:19"}, "properties": {"repobilityId": "4bd27f8d101bb65f", "scanner": "scanner-primary", "fingerprint": "30649a26a371d2e2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f0109e69510b1ad0", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/mcp/src/index.ts:44"}, "properties": {"repobilityId": "a51ce2634bd6a8b9", "scanner": "scanner-primary", "fingerprint": "f0109e69510b1ad0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-86005837e02d3a22", "level": "none", "message": {"text": "Commented-code block (8 lines) in apps/mcp/src/tools.ts:231"}, "properties": {"repobilityId": "809a42e4aa194583", "scanner": "scanner-primary", "fingerprint": "86005837e02d3a22", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-29561ca6b87fecbc", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/mcp/src/forward.ts:10"}, "properties": {"repobilityId": "9b8a8bcaff9e22a3", "scanner": "scanner-primary", "fingerprint": "29561ca6b87fecbc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-710fdda5e669b39f", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/cli/build.mjs:5"}, "properties": {"repobilityId": "dd5e0c587886c287", "scanner": "scanner-primary", "fingerprint": "710fdda5e669b39f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5f9b6ed738d7088f", "level": "none", "message": {"text": "Commented-code block (6 lines) in apps/cli/src/config.ts:9"}, "properties": {"repobilityId": "e4bcadf7e48a1f2f", "scanner": "scanner-primary", "fingerprint": "5f9b6ed738d7088f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-90afa8ab91df1263", "level": "none", "message": {"text": "Commented-code block (10 lines) in apps/cli/src/render.ts:127"}, "properties": {"repobilityId": "028a71fce0c996f0", "scanner": "scanner-primary", "fingerprint": "90afa8ab91df1263", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bfdb927caf3e5c7f", "level": "none", "message": {"text": "Commented-code block (8 lines) in apps/cli/src/revise.ts:123"}, "properties": {"repobilityId": "f2779efb219d71b1", "scanner": "scanner-primary", "fingerprint": "bfdb927caf3e5c7f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d5c33cdb5b0d7c65", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/cli/src/version.ts:1"}, "properties": {"repobilityId": "8b1e625488367544", "scanner": "scanner-primary", "fingerprint": "d5c33cdb5b0d7c65", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-97cb8636e717d854", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/cli/src/index.ts:61"}, "properties": {"repobilityId": "f45b31d3f02a79cf", "scanner": "scanner-primary", "fingerprint": "97cb8636e717d854", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-88df89e43ef3cef8", "level": "none", "message": {"text": "Commented-code block (7 lines) in apps/cli/src/manifest-cache.ts:6"}, "properties": {"repobilityId": "e64803fff575a575", "scanner": "scanner-primary", "fingerprint": "88df89e43ef3cef8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bd41dab9ff37710e", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/cli/src/upgrade.ts:10"}, "properties": {"repobilityId": "04ac09fe65a5726c", "scanner": "scanner-primary", "fingerprint": "bd41dab9ff37710e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ef44fafea97fb93f", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/cli/src/keychain.ts:3"}, "properties": {"repobilityId": "08c38f6342bb43e9", "scanner": "scanner-primary", "fingerprint": "ef44fafea97fb93f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1e43dba9b051721a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/memory-artifact-live.ts:19"}, "properties": {"repobilityId": "9c01da0a553629b8", "scanner": "scanner-primary", "fingerprint": "1e43dba9b051721a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1a582bcd602e29af", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/index.ts:9"}, "properties": {"repobilityId": "8b8db21275b411cc", "scanner": "scanner-primary", "fingerprint": "1a582bcd602e29af", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-23d7db67537be483", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/artifact-live.ts:34"}, "properties": {"repobilityId": "657b960500b35d2f", "scanner": "scanner-primary", "fingerprint": "23d7db67537be483", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d6c7d7e6c39f1780", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/authorize.ts:9"}, "properties": {"repobilityId": "31377b63d95b2ccf", "scanner": "scanner-primary", "fingerprint": "d6c7d7e6c39f1780", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7f7d0b2a2a8ff82b", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/artifact-live.test.ts:24"}, "properties": {"repobilityId": "3fd3722d27e67e05", "scanner": "scanner-primary", "fingerprint": "7f7d0b2a2a8ff82b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0e1b04f2ad3e0f0e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/stream/src/memory-artifact-live.test.ts:40"}, "properties": {"repobilityId": "dbe86f6e14a1eb16", "scanner": "scanner-primary", "fingerprint": "0e1b04f2ad3e0f0e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2e022a3ef168e4a3", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/web/vite.config.ts:19"}, "properties": {"repobilityId": "fd451258cdcd2969", "scanner": "scanner-primary", "fingerprint": "2e022a3ef168e4a3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7cfe2926944027b0", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/test/api-client.test.ts:7"}, "properties": {"repobilityId": "a0c297b3f664a8b1", "scanner": "scanner-primary", "fingerprint": "7cfe2926944027b0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3a21e94b00be5b9f", "level": "none", "message": {"text": "Commented-code block (9 lines) in apps/web/src/security-headers.ts:6"}, "properties": {"repobilityId": "bb9ec77325ca5f52", "scanner": "scanner-primary", "fingerprint": "3a21e94b00be5b9f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6c72fc9b833454d1", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/server.ts:18"}, "properties": {"repobilityId": "3d57c1ff26ff9102", "scanner": "scanner-primary", "fingerprint": "6c72fc9b833454d1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-51526e7a9ced6cd1", "level": "none", "message": {"text": "Commented-code block (6 lines) in apps/web/src/lib/analytics-scripts.ts:1"}, "properties": {"repobilityId": "042771293bbd8dbc", "scanner": "scanner-primary", "fingerprint": "51526e7a9ced6cd1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1546c632cf80147f", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/lib/live-updates.ts:33"}, "properties": {"repobilityId": "ca7b79022bca069a", "scanner": "scanner-primary", "fingerprint": "1546c632cf80147f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d5d76e7cb345dfa7", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/web/src/lib/csp-nonce-client.ts:1"}, "properties": {"repobilityId": "adfda4734b345617", "scanner": "scanner-primary", "fingerprint": "d5d76e7cb345dfa7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b027eb754b487493", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/web/src/routes/v.$artifactId.tsx:23"}, "properties": {"repobilityId": "5f0c8bb27e669c95", "scanner": "scanner-primary", "fingerprint": "b027eb754b487493", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-624830693fdd8458", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/routes/al.$publicId.tsx:75"}, "properties": {"repobilityId": "04e4815dff599b8e", "scanner": "scanner-primary", "fingerprint": "624830693fdd8458", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-35fead65204dfa44", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/routes/api/live/artifacts/$artifactId.ts:21"}, "properties": {"repobilityId": "70f9c5355cdc77e5", "scanner": "scanner-primary", "fingerprint": "35fead65204dfa44", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-cf178d74d616d274", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/routes/api/live/access-links/$publicId.ts:11"}, "properties": {"repobilityId": "5f8d00586525a971", "scanner": "scanner-primary", "fingerprint": "cf178d74d616d274", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-65e4d4412a49595c", "level": "none", "message": {"text": "Commented-code block (5 lines) in apps/web/src/server/csp-nonce.ts:4"}, "properties": {"repobilityId": "171f3e8ea4a8cf2c", "scanner": "scanner-primary", "fingerprint": "65e4d4412a49595c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2846431ddabb7b8b", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/web/src/server/csp-nonce.ts:11"}, "properties": {"repobilityId": "173882b74657e0c2", "scanner": "scanner-primary", "fingerprint": "2846431ddabb7b8b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0699cca7fa006c99", "level": "note", "message": {"text": "Legacy-named symbol `certIssuerDNLegacy` in apps/content/src/worker-configuration.d.ts:11079"}, "properties": {"repobilityId": "e65ff5f095032181", "scanner": "scanner-primary", "fingerprint": "0699cca7fa006c99", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1e6ccc54d9e95d33", "level": "none", "message": {"text": "Commented-code block (8 lines) in apps/content/src/worker-configuration.d.ts:12074"}, "properties": {"repobilityId": "7f1b7ae8bc0415c2", "scanner": "scanner-primary", "fingerprint": "1e6ccc54d9e95d33", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-65134bc6c00138ab", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/content/src/worker-configuration.d.ts:308"}, "properties": {"repobilityId": "a7299e9dda6a4404", "scanner": "scanner-primary", "fingerprint": "65134bc6c00138ab", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-dac20d53564aa1db", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/content/src/serve-object.test.ts:364"}, "properties": {"repobilityId": "3ecebe4519bb9432", "scanner": "scanner-primary", "fingerprint": "dac20d53564aa1db", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2f0be83b2b911366", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/content/src/index.ts:104"}, "properties": {"repobilityId": "11a3322bfeaeca0b", "scanner": "scanner-primary", "fingerprint": "2f0be83b2b911366", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-db1aa33c126737f0", "level": "none", "message": {"text": "Commented-code block (7 lines) in apps/content/src/serve-object.ts:446"}, "properties": {"repobilityId": "350a32e43d361214", "scanner": "scanner-primary", "fingerprint": "db1aa33c126737f0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-64d0f90a16e4bf3c", "level": "note", "message": {"text": "Legacy-named symbol `certIssuerDNLegacy` in apps/jobs/src/worker-configuration.d.ts:11088"}, "properties": {"repobilityId": "27d072e5a2dcf512", "scanner": "scanner-primary", "fingerprint": "64d0f90a16e4bf3c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b631afae528cdb35", "level": "none", "message": {"text": "Commented-code block (8 lines) in apps/jobs/src/worker-configuration.d.ts:12083"}, "properties": {"repobilityId": "9178d9f78e6892e6", "scanner": "scanner-primary", "fingerprint": "b631afae528cdb35", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2a91feb887d098e2", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/jobs/src/worker-configuration.d.ts:317"}, "properties": {"repobilityId": "c5ed4d437fc4ac66", "scanner": "scanner-primary", "fingerprint": "2a91feb887d098e2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4a12f33b1e5d607b", "level": "note", "message": {"text": "Legacy-named symbol `stub_v1` in apps/jobs/src/index.test.ts:210"}, "properties": {"repobilityId": "bfe6c97c3bc5de77", "scanner": "scanner-primary", "fingerprint": "4a12f33b1e5d607b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a6a427161ffb56c5", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/jobs/src/index.test.ts:19"}, "properties": {"repobilityId": "ecd76828427e3a30", "scanner": "scanner-primary", "fingerprint": "a6a427161ffb56c5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c36219d4c574830f", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/jobs/src/index.ts:73"}, "properties": {"repobilityId": "dc9c801d331c44f6", "scanner": "scanner-primary", "fingerprint": "c36219d4c574830f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-839f4cccc3d13d0d", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 apps/jobs/src/smoke.test.ts:196"}, "properties": {"repobilityId": "4dcdb4a07f9789c7", "scanner": "scanner-primary", "fingerprint": "839f4cccc3d13d0d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-890fec5215a6e75a", "level": "note", "message": {"text": "Legacy-named symbol `stub_v1` in apps/jobs/src/jobs-coverage.test.ts:236"}, "properties": {"repobilityId": "3f72a5f02e9bd9d0", "scanner": "scanner-primary", "fingerprint": "890fec5215a6e75a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6c4570a35dab8bf2", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-local-mvp.mjs:114"}, "properties": {"repobilityId": "ab3c5ff5e202f7d8", "scanner": "scanner-primary", "fingerprint": "6c4570a35dab8bf2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-50a5dcec40bd4ce5", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/install-hooks.mjs:5"}, "properties": {"repobilityId": "ad71a938f203b314", "scanner": "scanner-primary", "fingerprint": "50a5dcec40bd4ce5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ec71fd844f219591", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-harness.mjs:49"}, "properties": {"repobilityId": "6b5ed72c546bb967", "scanner": "scanner-primary", "fingerprint": "ec71fd844f219591", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-81b93afc2085c31d", "level": "none", "message": {"text": "Commented-code block (11 lines) in scripts/deploy.mjs:10"}, "properties": {"repobilityId": "83fc6a2c1be447c8", "scanner": "scanner-primary", "fingerprint": "81b93afc2085c31d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-34304d0674fe48cf", "level": "none", "message": {"text": "Commented-code block (14 lines) in scripts/smoke-local-patch.mjs:3"}, "properties": {"repobilityId": "0648f26062622156", "scanner": "scanner-primary", "fingerprint": "34304d0674fe48cf", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d184ba6aa6e0a02e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-local-patch.mjs:316"}, "properties": {"repobilityId": "cd195a759796a560", "scanner": "scanner-primary", "fingerprint": "d184ba6aa6e0a02e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ddf93a935d92e3f7", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/deploy-pr-preview.mjs:89"}, "properties": {"repobilityId": "8b05a1f1ddf9384d", "scanner": "scanner-primary", "fingerprint": "ddf93a935d92e3f7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9c646acd86e4c4ea", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/local-mvp-server.mjs:356"}, "properties": {"repobilityId": "c314315ce4eec34c", "scanner": "scanner-primary", "fingerprint": "9c646acd86e4c4ea", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-db562facf69ecf05", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/smoke-hosted.mjs:24"}, "properties": {"repobilityId": "832c8fcf0d8363bc", "scanner": "scanner-primary", "fingerprint": "db562facf69ecf05", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-325d71eda2db0584", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-hosted.mjs:82"}, "properties": {"repobilityId": "97ee612bb4403475", "scanner": "scanner-primary", "fingerprint": "325d71eda2db0584", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-511f877f29db62dc", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/merge-coverage.mjs:14"}, "properties": {"repobilityId": "e4880e341692bee0", "scanner": "scanner-primary", "fingerprint": "511f877f29db62dc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dc95e63d6c85a879", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/lighthouse-dashboard-a11y.mjs:267"}, "properties": {"repobilityId": "ea258dbeb30009e4", "scanner": "scanner-primary", "fingerprint": "dc95e63d6c85a879", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a19795ce5dd4182b", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/resolve-neon-role-url.mjs:95"}, "properties": {"repobilityId": "40ea38067ff1250d", "scanner": "scanner-primary", "fingerprint": "a19795ce5dd4182b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-55e47dffc2f6e881", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-ephemeral-harness.mjs:217"}, "properties": {"repobilityId": "6dc86f0376c0dce8", "scanner": "scanner-primary", "fingerprint": "55e47dffc2f6e881", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3efefe6c1627dbb2", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/smoke-web-api.mjs:242"}, "properties": {"repobilityId": "d80c6ee971d5137e", "scanner": "scanner-primary", "fingerprint": "3efefe6c1627dbb2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-451775d110d6e132", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-web-api.mjs:276"}, "properties": {"repobilityId": "35b7fa8a862a26a6", "scanner": "scanner-primary", "fingerprint": "451775d110d6e132", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-50aaf3f672b98da2", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/smoke-mcp-harness.mjs:90"}, "properties": {"repobilityId": "c70e85ef3ece4b16", "scanner": "scanner-primary", "fingerprint": "50aaf3f672b98da2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-662f9b5910055dbe", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/lib/local-env-secrets.mjs:4"}, "properties": {"repobilityId": "39788f64b83951bc", "scanner": "scanner-primary", "fingerprint": "662f9b5910055dbe", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-95948d8b9c5dd57e", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/lib/smoke-readonly.mjs:29"}, "properties": {"repobilityId": "af8269b1af028657", "scanner": "scanner-primary", "fingerprint": "95948d8b9c5dd57e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-993f69dd2bf026ed", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/lib/smoke-readonly.mjs:111"}, "properties": {"repobilityId": "e86e89645f78adbe", "scanner": "scanner-primary", "fingerprint": "993f69dd2bf026ed", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1268ab36cca5a0ec", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/lib/smoke-mcp-local.mjs:102"}, "properties": {"repobilityId": "ca00a4412ab08543", "scanner": "scanner-primary", "fingerprint": "1268ab36cca5a0ec", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e1a1ebff05299123", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/lib/secret-routing.mjs:4"}, "properties": {"repobilityId": "69ad5e5ac18fa799", "scanner": "scanner-primary", "fingerprint": "e1a1ebff05299123", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-80b9cbe2f3ff84db", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/lib/hyperdrive-branch-guard.mjs:1"}, "properties": {"repobilityId": "173b21dc45e5ab50", "scanner": "scanner-primary", "fingerprint": "80b9cbe2f3ff84db", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c14b01c5b8fee865", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/lib/secret-values.mjs:1"}, "properties": {"repobilityId": "c7b78b42dd16b0e4", "scanner": "scanner-primary", "fingerprint": "c14b01c5b8fee865", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-20ce7bb24bcd9b22", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/auth/src/request-id.test.ts:39"}, "properties": {"repobilityId": "9ee8fce35834abc0", "scanner": "scanner-primary", "fingerprint": "20ce7bb24bcd9b22", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9e1314376cdcb611", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/ui/src/components/Prose.tsx:15"}, "properties": {"repobilityId": "be5eeced96dc16b1", "scanner": "scanner-primary", "fingerprint": "9e1314376cdcb611", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d9cb97566e9c2ec0", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/revise-core/src/revise-one-path.ts:106"}, "properties": {"repobilityId": "697311b2eac50bce", "scanner": "scanner-primary", "fingerprint": "d9cb97566e9c2ec0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2aaf1904ec2d1edc", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/revise-core/src/unified-diff-gen.ts:3"}, "properties": {"repobilityId": "312742cdab0a8da8", "scanner": "scanner-primary", "fingerprint": "2aaf1904ec2d1edc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a3c6f96bacf17ca7", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/worker-runtime/src/bound-responders.test.ts:19"}, "properties": {"repobilityId": "efd95e6a4e08eb5b", "scanner": "scanner-primary", "fingerprint": "a3c6f96bacf17ca7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-43bfea921120ccd9", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/worker-runtime/src/contract-errors.test.ts:123"}, "properties": {"repobilityId": "f441c004b639a529", "scanner": "scanner-primary", "fingerprint": "43bfea921120ccd9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-27245130b350a8c5", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/worker-runtime/src/security-headers.ts:3"}, "properties": {"repobilityId": "1e5cba3214f58748", "scanner": "scanner-primary", "fingerprint": "27245130b350a8c5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9b2327ea13914013", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/worker-runtime/src/registrar.test.ts:62"}, "properties": {"repobilityId": "ad5bde6da7f8a199", "scanner": "scanner-primary", "fingerprint": "9b2327ea13914013", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-6f360af974afaac9", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/worker-runtime/src/security-headers.test.ts:33"}, "properties": {"repobilityId": "5aa8e6ae081921cc", "scanner": "scanner-primary", "fingerprint": "6f360af974afaac9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-180e496d14bb6f79", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/db/src/schema.ts:295"}, "properties": {"repobilityId": "3210a59bd41d1c59", "scanner": "scanner-primary", "fingerprint": "180e496d14bb6f79", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-030337c2738bac87", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/db/src/index.test.ts:2290"}, "properties": {"repobilityId": "fd77b93f8fbc8418", "scanner": "scanner-primary", "fingerprint": "030337c2738bac87", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ad8e88dae96aef9c", "level": "none", "message": {"text": "Commented-code block (8 lines) in packages/db/src/types.ts:294"}, "properties": {"repobilityId": "8fa9b9ff65ac501a", "scanner": "scanner-primary", "fingerprint": "ad8e88dae96aef9c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d53948a6d96db198", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/db/src/repository/local-scope.ts:4"}, "properties": {"repobilityId": "3f9edf42407853d2", "scanner": "scanner-primary", "fingerprint": "d53948a6d96db198", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-35938849f622dd5c", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/db/src/repository/local-unit-of-work.ts:28"}, "properties": {"repobilityId": "865c7ce9c719678b", "scanner": "scanner-primary", "fingerprint": "35938849f622dd5c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-184e1350ef3ba96d", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/db/src/repository/upload-session-lifecycle.ts:207"}, "properties": {"repobilityId": "be9c0cb1924ca9b4", "scanner": "scanner-primary", "fingerprint": "184e1350ef3ba96d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6b7fdf4fe0a02031", "level": "note", "message": {"text": "Legacy-named symbol `user_claim_legacy` in packages/db/src/repository/workflows/ephemeral-claim-workflow.test.ts:788"}, "properties": {"repobilityId": "0efe3f9536d3d457", "scanner": "scanner-primary", "fingerprint": "6b7fdf4fe0a02031", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-c03be5543e08e2ef", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/db/src/postgres/connect-retry.ts:1"}, "properties": {"repobilityId": "21daa8fa599e8f6a", "scanner": "scanner-primary", "fingerprint": "c03be5543e08e2ef", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7af9ebee76ac8d9c", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/db/src/postgres/revision-reconstructor.ts:11"}, "properties": {"repobilityId": "63ccb2bad9aece14", "scanner": "scanner-primary", "fingerprint": "7af9ebee76ac8d9c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1c4b6905698d3e63", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/db/src/test-helpers/route-boundary-fixture.ts:10"}, "properties": {"repobilityId": "554124a76fd9fc1f", "scanner": "scanner-primary", "fingerprint": "1c4b6905698d3e63", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eb7c5b704ccfdcd7", "level": "note", "message": {"text": "Legacy-named symbol `workspace_old` in packages/db/src/queries/index.test.ts:21"}, "properties": {"repobilityId": "47b9373104f4a12c", "scanner": "scanner-primary", "fingerprint": "eb7c5b704ccfdcd7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-819dd6f2aafa48e9", "level": "note", "message": {"text": "Legacy-named symbol `stub_v1` in packages/contracts/src/jobs.test.ts:28"}, "properties": {"repobilityId": "ad002be15230e3fc", "scanner": "scanner-primary", "fingerprint": "819dd6f2aafa48e9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-db27d2db6f98c07d", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/contracts/src/uploadSessions.ts:21"}, "properties": {"repobilityId": "4d7038d0cc69a534", "scanner": "scanner-primary", "fingerprint": "db27d2db6f98c07d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f90556abbfca605e", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/contracts/src/mcp.test.ts:590"}, "properties": {"repobilityId": "08b86491442d2f61", "scanner": "scanner-primary", "fingerprint": "f90556abbfca605e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7312075fb2f0b006", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/contracts/src/enums.ts:3"}, "properties": {"repobilityId": "25d3df945a2f8381", "scanner": "scanner-primary", "fingerprint": "7312075fb2f0b006", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-31cf8b82159deaee", "level": "none", "message": {"text": "Commented-code block (9 lines) in packages/contracts/src/artifacts.ts:51"}, "properties": {"repobilityId": "5c73e0d0204d4c59", "scanner": "scanner-primary", "fingerprint": "31cf8b82159deaee", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-80c9b0460f08b70c", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/contracts/src/mcp/scopes.ts:43"}, "properties": {"repobilityId": "22542dbe1231874d", "scanner": "scanner-primary", "fingerprint": "80c9b0460f08b70c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f08f57f34d84c7a8", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/contracts/src/mcp/schemas.ts:25"}, "properties": {"repobilityId": "df2927a9852b1574", "scanner": "scanner-primary", "fingerprint": "f08f57f34d84c7a8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ace701e9a6153308", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/write-allowance/src/durable-object.ts:9"}, "properties": {"repobilityId": "ffede77520d7c953", "scanner": "scanner-primary", "fingerprint": "ace701e9a6153308", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-beed968a4be37860", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/write-allowance/src/client.ts:30"}, "properties": {"repobilityId": "03f57c17199b1e80", "scanner": "scanner-primary", "fingerprint": "beed968a4be37860", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4d07fb3539e978ef", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/write-allowance/src/client.ts:13"}, "properties": {"repobilityId": "86fc975833b72f38", "scanner": "scanner-primary", "fingerprint": "4d07fb3539e978ef", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5275a9709083058f", "level": "none", "message": {"text": "Commented-code block (8 lines) in packages/storage/src/unified-diff.ts:1"}, "properties": {"repobilityId": "6f3ab8a3f818d48a", "scanner": "scanner-primary", "fingerprint": "5275a9709083058f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a4889bb6679bd901", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/storage/src/workspace-blob-bytes.ts:1"}, "properties": {"repobilityId": "cb6a57563cee653a", "scanner": "scanner-primary", "fingerprint": "a4889bb6679bd901", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a330d8bcaa9d114e", "level": "note", "message": {"text": "71 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "c3d45b3e514673d8", "scanner": "scanner-primary", "fingerprint": "a330d8bcaa9d114e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-4ca373d0f16c15aa", "level": "error", "message": {"text": "Dangling fetch: GET /.well-known/openid-configuration/mcp (apps/mcp/src/index.test.ts:77)"}, "properties": {"repobilityId": "80c3059fea77b5f3", "scanner": "scanner-primary", "fingerprint": "4ca373d0f16c15aa", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "helper:request"]}}, {"ruleId": "scanner-8a04ca3650a3ce0b", "level": "error", "message": {"text": "Dangling fetch: GET /missing (apps/mcp/src/index.test.ts:119)"}, "properties": {"repobilityId": "ea53257388d570c1", "scanner": "scanner-primary", "fingerprint": "8a04ca3650a3ce0b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "helper:request"]}}, {"ruleId": "scanner-bdab134b46ab8242", "level": "error", "message": {"text": "Dangling fetch: GET /missing (apps/mcp/src/index.test.ts:151)"}, "properties": {"repobilityId": "7870997aad7b7551", "scanner": "scanner-primary", "fingerprint": "bdab134b46ab8242", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "helper:request"]}}, {"ruleId": "scanner-10f9f980958415e7", "level": "error", "message": {"text": "Dangling fetch: POST /api/access-links/resolve (apps/web/src/routes/al.$publicId.tsx:75)"}, "properties": {"repobilityId": "a16e41f6686bf335", "scanner": "scanner-primary", "fingerprint": "10f9f980958415e7", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-b6aa409fe390baee", "level": "note", "message": {"text": "Unused endpoint: POST /__test__/provision-smoke"}, "properties": {"repobilityId": "1f0189871fa058dc", "scanner": "scanner-primary", "fingerprint": "b6aa409fe390baee", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1f48bee70a28161d", "level": "note", "message": {"text": "Unused endpoint: POST /__test__/force-expire"}, "properties": {"repobilityId": "e245692af1a83c0f", "scanner": "scanner-primary", "fingerprint": "1f48bee70a28161d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1309d69e055bab63", "level": "note", "message": {"text": "Unused endpoint: POST /__test__/delete-artifact"}, "properties": {"repobilityId": "978d56a308c4e599", "scanner": "scanner-primary", "fingerprint": "1309d69e055bab63", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1f07f0fbf8569377", "level": "note", "message": {"text": "Unused endpoint: GET /__test__/r2-list"}, "properties": {"repobilityId": "d040a0b61984d20d", "scanner": "scanner-primary", "fingerprint": "1f07f0fbf8569377", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8032f963635a176f", "level": "note", "message": {"text": "Unused endpoint: GET /__test__/denylist"}, "properties": {"repobilityId": "9d11b8f99b40386f", "scanner": "scanner-primary", "fingerprint": "8032f963635a176f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-86e2d6ba98212f42", "level": "note", "message": {"text": "Unused endpoint: POST /v1/internal/live-updates/authorize"}, "properties": {"repobilityId": "9a305ce7ebc7e5b7", "scanner": "scanner-primary", "fingerprint": "86e2d6ba98212f42", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-abeedf376498a817", "level": "note", "message": {"text": "Unused endpoint: ALL /"}, "properties": {"repobilityId": "0f1b8eee339e46a2", "scanner": "scanner-primary", "fingerprint": "abeedf376498a817", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d9bc582bbf867400", "level": "note", "message": {"text": "Unused endpoint: POST /__test__/run-cleanup"}, "properties": {"repobilityId": "4d24849d5e82eb52", "scanner": "scanner-primary", "fingerprint": "d9bc582bbf867400", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e0bc41def7bb0bb5", "level": "note", "message": {"text": "Unused endpoint: POST /__test__/purge-recovery"}, "properties": {"repobilityId": "2a9ba8480e8abacb", "scanner": "scanner-primary", "fingerprint": "e0bc41def7bb0bb5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}