{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-51cfcc54ad818080", "name": "Stray `console.log` in TS/JS \u2014 tests/tauri-driver/specs/prevent-default.e2e.ts:136", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/tauri-driver/specs/prevent-default.e2e.ts:136"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4d929aaf126dfa81", "name": "Stray `console.log` in TS/JS \u2014 tests/server/markdown-roundtrip.test.ts:135", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/server/markdown-roundtrip.test.ts:135"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-585778f4f500d24a", "name": "Stray `console.log` in TS/JS \u2014 tests/server/authorship-tracking.test.ts:165", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/server/authorship-tracking.test.ts:165"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d92492c1ec53386b", "name": "Stray `console.log` in TS/JS \u2014 tests/server/file-opener-edge-cases.test.ts:81", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/server/file-opener-edge-cases.test.ts:81"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e086bb60bfecb21", "name": "Stray `console.log` in TS/JS \u2014 tests/server/annotations/perf.test.ts:129", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/server/annotations/perf.test.ts:129"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-97ef0e8b474e5964", "name": "Stray `console.log` in TS/JS \u2014 tests/crdt/authorship-marks-size.test.ts:120", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/crdt/authorship-marks-size.test.ts:120"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b459a3cb5ea25f75", "name": "Stray `console.log` in TS/JS \u2014 scripts/generate-keys.ts:6", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-keys.ts:6"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-70567fc50c77ccbd", "name": "Stray `console.log` in TS/JS \u2014 scripts/sign-license.ts:35", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/sign-license.ts:35"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0090d56312101ef7", "name": "Stray `console.log` in TS/JS \u2014 scripts/spikes/probe-monitor-viability.ts:367", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/spikes/probe-monitor-viability.ts:367"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cbdc41e503909267", "name": "Stray `console.log` in TS/JS \u2014 scripts/spikes/probe-session-resume.ts:418", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/spikes/probe-session-resume.ts:418"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3a68da06e587f208", "name": "TODO/FIXME marker in shipping code \u2014 src/client/App.svelte:1889", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 src/client/App.svelte:1889"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dab5504dd26a42f8", "name": "TODO/FIXME marker in shipping code \u2014 src/client/hooks/useTandemSettings.ts:169", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 src/client/hooks/useTandemSettings.ts:169"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a04dd44804cf7ab1", "name": "Stray `console.log` in TS/JS \u2014 src/cli/index.ts:51", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/cli/index.ts:51"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-16c38f3d0c74e308", "name": "TODO/FIXME marker in shipping code \u2014 src/cli/rotate-token.ts:107", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 src/cli/rotate-token.ts:107"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e13f47408b240096", "name": "Possible secret in tests/client/use-tandem-settings-migration.test.ts", "shortDescription": {"text": "Possible secret in tests/client/use-tandem-settings-migration.test.ts"}, "fullDescription": {"text": "Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-3291bac0ce2d9e3f", "name": "Insecure pattern 'node_child_process' in scripts/build-reaper.mjs:25", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/build-reaper.mjs:25"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4df7b73123de2ced", "name": "Insecure pattern 'node_child_process' in scripts/download-node-sidecar.mjs:14", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/download-node-sidecar.mjs:14"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9747e7d2b85c1e92", "name": "Insecure pattern 'node_child_process' in scripts/e2e-server.mjs:19", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/e2e-server.mjs:19"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5f267f5176aaf0b5", "name": "Insecure pattern 'node_child_process' in scripts/dev-standalone.mjs:3", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/dev-standalone.mjs:3"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3414f0d4331ac4d3", "name": "Insecure pattern 'node_child_process' in scripts/spikes/probe-monitor-viability.ts:33", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/spikes/probe-monitor-viability.ts:33"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-393263dcc0f7b039", "name": "Insecure pattern 'node_child_process' in scripts/spikes/run-docx-export.mjs:12", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/spikes/run-docx-export.mjs:12"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ff8761c8790366c8", "name": "Insecure pattern 'node_child_process' in scripts/spikes/probe-launcher.mjs:40", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/spikes/probe-launcher.mjs:40"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1e89d282954f3292", "name": "Insecure pattern 'node_child_process' in scripts/spikes/probe-session-resume.ts:26", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/spikes/probe-session-resume.ts:26"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8ce30e7248b2f804", "name": "Insecure pattern 'node_child_process' in scripts/ci/stdio-smoke.mjs:14", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/ci/stdio-smoke.mjs:14"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-92de275d634e80e6", "name": "Insecure pattern 'node_child_process' in src/server/platform.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/server/platform.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c72d113892cf69b5", "name": "Insecure pattern 'node_child_process' in src/server/launcher/supervisor.ts:19", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/server/launcher/supervisor.ts:19"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-04fbb16cd4e93df0", "name": "Insecure pattern 'node_child_process' in src/server/integrations/install-claude-cli.ts:37", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/server/integrations/install-claude-cli.ts:37"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-83cbd1224bd8a7b1", "name": "Insecure pattern 'node_child_process' in src/server/integrations/acl-win.ts:38", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/server/integrations/acl-win.ts:38"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9bb0aeb0cc03fd29", "name": "Insecure pattern 'node_child_process' in src/server/annotations/process-identity.ts:20", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/server/annotations/process-identity.ts:20"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-396e15b3fd8342b3", "name": "Insecure pattern 'cors_wildcard' in src/server/mcp/server.ts:377", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in src/server/mcp/server.ts:377"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6e1b013a59ca4d0f", "name": "Insecure pattern 'node_child_process' in src/server/mcp/launcher.ts:7", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/server/mcp/launcher.ts:7"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ad6ee9d21224ba8c", "name": "Insecure pattern 'node_child_process' in src/cli/uninstall-scrub.ts:39", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/cli/uninstall-scrub.ts:39"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4282721767c3d9cc", "name": "Insecure pattern 'node_child_process' in src/cli/start.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/cli/start.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a455f2d64c0a2a02", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/design-system-impl/preview/d5-empty-states.html:121", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/design-system-impl/preview/d5-empty-states.html:121"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-77166cbd46fcd8e4", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2f7ba46acc6dbe8c", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-node@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b8004a05c79a56b1", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7ffa33751be3d771", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27924aa79fa4a517", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/upload-artifact@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cb639d9a10a47b23", "name": "package.json defines install-time lifecycle scripts", "shortDescription": {"text": "package.json defines install-time lifecycle scripts"}, "fullDescription": {"text": "preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dac4a556d6251b5f", "name": "Very large file: tests/server/annotations/sync.test.ts (1499 lines)", "shortDescription": {"text": "Very large file: tests/server/annotations/sync.test.ts (1499 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-87dd7d433cbfc593", "name": "Very large file: tests/e2e/margin-view.spec.ts (1361 lines)", "shortDescription": {"text": "Very large file: tests/e2e/margin-view.spec.ts (1361 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4b345d6d2c15179b", "name": "Very large file: src/server/mcp/document-service.ts (1282 lines)", "shortDescription": {"text": "Very large file: src/server/mcp/document-service.ts (1282 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-66b6ea93fd82da55", "name": "Very large file: src/server/mcp/file-opener.ts (1552 lines)", "shortDescription": {"text": "Very large file: src/server/mcp/file-opener.ts (1552 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3a504a2d18bf9bbf", "name": "Very large file: src-tauri/src/cowork_installer.rs (1251 lines)", "shortDescription": {"text": "Very large file: src-tauri/src/cowork_installer.rs (1251 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-087886763463bdde", "name": "Very large file: src-tauri/src/lib.rs (3973 lines)", "shortDescription": {"text": "Very large file: src-tauri/src/lib.rs (3973 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4198c04cfc9ddc35", "name": "Node manifest has dependencies but no lockfile: tests/tauri-driver/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: tests/tauri-driver/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 91 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 18 placeholder/mock markers across 14 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bea357a6497a2d5d", "name": "Agent authority lacks a verifier contract: CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d9d71dfa0b422cc6", "name": "Agent authority lacks a verifier contract: skills/tandem/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: skills/tandem/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-122f91b7f2906dc4", "name": "Agent authority lacks a verifier contract: .claude/settings.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27147c535974da6d", "name": "Agent authority lacks a verifier contract: .claude/agents/diverge-on-call.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/diverge-on-call.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-34b96c3ee581935e", "name": "Agent authority lacks a verifier contract: .claude/notes/pr-review-765-2026-05-18.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/notes/pr-review-765-2026-05-18.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-21c4d02948afc8f8", "name": "Agent authority lacks a verifier contract: .claude/notes/pr-review-summary-2026-05-18.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/notes/pr-review-summary-2026-05-18.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7c31298ea7e70979", "name": "Agent authority lacks a verifier contract: .claude/notes/pr-review-759-2026-05-18.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/notes/pr-review-759-2026-05-18.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-05f399b06d32f5dd", "name": "Agent authority lacks a verifier contract: .claude/notes/pr-review-761-2026-05-18.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/notes/pr-review-761-2026-05-18.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-168ab73d8e4bc3c8", "name": "Agent authority lacks a verifier contract: .claude/notes/pr-review-760-2026-05-18.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/notes/pr-review-760-2026-05-18.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d993ad889253fb14", "name": "Agent authority lacks a verifier contract: .claude/commands/diverge.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/diverge.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-586240d0ba2b9956", "name": "Agent instruction/config may expose a secret: .claude/reviews/pr-578.codex.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/reviews/pr-578.codex.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-62e80a1b5939ea39", "name": "Agent instruction/config may expose a secret: .claude/reviews/pr-579.codex.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/reviews/pr-579.codex.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bf2aa698bddb4e6e", "name": "Agent authority lacks a verifier contract: .claude/reviews/issue-pipeline-skill-plan-review-content.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/reviews/issue-pipeline-skill-plan-review-content.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8d1c41d3c5936d9b", "name": "Agent authority lacks a verifier contract: .claude/reviews/meta-plan.codex.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/reviews/meta-plan.codex.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dd83c76a57925077", "name": "Agent instruction/config may expose a secret: .claude/reviews/pr-580.codex.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/reviews/pr-580.codex.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-770f0a269ccddbfb", "name": "Agent authority lacks a verifier contract: .claude/knowledge-graph/nodes/rule-extract-text-not-markdown.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/knowledge-graph/nodes/rule-extract-text-not-markdown.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-630cddc4073afa53", "name": "Agent authority lacks a verifier contract: .claude/knowledge-graph/nodes/adr-031.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/knowledge-graph/nodes/adr-031.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f210bafcff1fed83", "name": "Agent authority lacks a verifier contract: .claude/knowledge-graph/nodes/concept-file-watcher.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/knowledge-graph/nodes/concept-file-watcher.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5d1de6566fe72758", "name": "Agent authority lacks a verifier contract: .claude/knowledge-graph/nodes/rule-stdout-reserved.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/knowledge-graph/nodes/rule-stdout-reserved.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d55cee2d7bebafa", "name": "Agent authority lacks a verifier contract: .claude/skills/screenshots/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/screenshots/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-67a279e9670a364c", "name": "Agent authority lacks a verifier contract: .claude/skills/e2e/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/e2e/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e725d2ab884fbd49", "name": "Multiple root agent instruction files without precedence", "shortDescription": {"text": "Multiple root agent instruction files without precedence"}, "fullDescription": {"text": "The repo has multiple top-level AI-coder instruction files. Without precedence rules, different agents may follow different policies."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f6d0302dc84892e7", "name": "Commented-code block (5 lines) in vitest.config.ts:46", "shortDescription": {"text": "Commented-code block (5 lines) in vitest.config.ts:46"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2ff4719883abf794", "name": "Commented-code block (6 lines) in playwright.config.ts:4", "shortDescription": {"text": "Commented-code block (6 lines) in playwright.config.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7d91261af5699b04", "name": "Commented-code block (7 lines) in tests/scripts/build-reaper.test.ts:6", "shortDescription": {"text": "Commented-code block (7 lines) in tests/scripts/build-reaper.test.ts:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9d5d1c83107c49b1", "name": "Commented-code block (9 lines) in tests/tauri-driver/wdio.conf.ts:3", "shortDescription": {"text": "Commented-code block (9 lines) in tests/tauri-driver/wdio.conf.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e5d1234203e92e5d", "name": "Commented-code block (5 lines) in tests/tauri-driver/specs/prevent-default.e2e.ts:3", "shortDescription": {"text": "Commented-code block (5 lines) in tests/tauri-driver/specs/prevent-default.e2e.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dafab1aac58f1d7d", "name": "Commented-code block (11 lines) in tests/channel/event-bridge.test.ts:486", "shortDescription": {"text": "Commented-code block (11 lines) in tests/channel/event-bridge.test.ts:486"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a18db0dfa14584d6", "name": "Commented-code block (5 lines) in tests/server/event-queue-observer-split.test.ts:38", "shortDescription": {"text": "Commented-code block (5 lines) in tests/server/event-queue-observer-split.test.ts:38"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-63c5bdd1e7ea17f2", "name": "Commented-code block (6 lines) in tests/server/provider.test.ts:88", "shortDescription": {"text": "Commented-code block (6 lines) in tests/server/provider.test.ts:88"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6b936f84d1927748", "name": "Commented-code block (7 lines) in tests/server/typing-presence.test.ts:144", "shortDescription": {"text": "Commented-code block (7 lines) in tests/server/typing-presence.test.ts:144"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-78da2a198a667531", "name": "Commented-code block (5 lines) in tests/server/mdast-ydoc.test.ts:751", "shortDescription": {"text": "Commented-code block (5 lines) in tests/server/mdast-ydoc.test.ts:751"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7a8f2db89a33c590", "name": "Commented-code block (8 lines) in tests/server/rename-route.test.ts:98", "shortDescription": {"text": "Commented-code block (8 lines) in tests/server/rename-route.test.ts:98"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-60f30bf9cb4ba6ec", "name": "Commented-code block (5 lines) in tests/server/annotations.test.ts:312", "shortDescription": {"text": "Commented-code block (5 lines) in tests/server/annotations.test.ts:312"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b447def04a696721", "name": "Legacy-named symbol `nOld` in tests/server/issue-377-position-diagnostics.test.ts:308", "shortDescription": {"text": "Legacy-named symbol `nOld` in tests/server/issue-377-position-diagnostics.test.ts:308"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ae10602257432bca", "name": "Commented-code block (6 lines) in tests/server/issue-377-position-diagnostics.test.ts:85", "shortDescription": {"text": "Commented-code block (6 lines) in tests/server/issue-377-position-diagnostics.test.ts:85"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e81688d5787b4552", "name": "Commented-code block (12 lines) in tests/server/docx-comment-export.test.ts:1", "shortDescription": {"text": "Commented-code block (12 lines) in tests/server/docx-comment-export.test.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d71ac772f80ea8be", "name": "Commented-code block (7 lines) in tests/server/file-opener-cleanup-on-failure.test.ts:169", "shortDescription": {"text": "Commented-code block (7 lines) in tests/server/file-opener-cleanup-on-failure.test.ts:169"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-20ad6dc17f8bd088", "name": "Commented-code block (5 lines) in tests/server/boot-order.test.ts:11", "shortDescription": {"text": "Commented-code block (5 lines) in tests/server/boot-order.test.ts:11"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ec0e07502998c881", "name": "Commented-code block (6 lines) in tests/server/mcp-tool-integration.test.ts:531", "shortDescription": {"text": "Commented-code block (6 lines) in tests/server/mcp-tool-integration.test.ts:531"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3947579c4967a05b", "name": "Commented-code block (8 lines) in tests/server/file-opener-transact-batching.test.ts:175", "shortDescription": {"text": "Commented-code block (8 lines) in tests/server/file-opener-transact-batching.test.ts:175"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6428b0c97e57abdd", "name": "Commented-code block (6 lines) in tests/server/rename-document.test.ts:253", "shortDescription": {"text": "Commented-code block (6 lines) in tests/server/rename-document.test.ts:253"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a047bc6f33487ee7", "name": "Commented-code block (5 lines) in tests/server/startup-file.test.ts:9", "shortDescription": {"text": "Commented-code block (5 lines) in tests/server/startup-file.test.ts:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2fbb906f119597d3", "name": "Commented-code block (5 lines) in tests/server/server-security-invariants.test.ts:82", "shortDescription": {"text": "Commented-code block (5 lines) in tests/server/server-security-invariants.test.ts:82"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e080532e8f33c644", "name": "Commented-code block (5 lines) in tests/server/reload-from-disk-persistence.test.ts:213", "shortDescription": {"text": "Commented-code block (5 lines) in tests/server/reload-from-disk-persistence.test.ts:213"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bd974ea1501224e3", "name": "Commented-code block (8 lines) in tests/server/tutorial-annotations.test.ts:82", "shortDescription": {"text": "Commented-code block (8 lines) in tests/server/tutorial-annotations.test.ts:82"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-627bb3d4fab2e1cd", "name": "Commented-code block (8 lines) in tests/server/document-service.test.ts:688", "shortDescription": {"text": "Commented-code block (8 lines) in tests/server/document-service.test.ts:688"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4ce1710e58862a57", "name": "Commented-code block (6 lines) in tests/server/reaper.test.ts:236", "shortDescription": {"text": "Commented-code block (6 lines) in tests/server/reaper.test.ts:236"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8ce937e973b611e3", "name": "Legacy-named symbol `ann_old` in tests/server/event-queue.test.ts:704", "shortDescription": {"text": "Legacy-named symbol `ann_old` in tests/server/event-queue.test.ts:704"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-87393d262175d686", "name": "Commented-code block (6 lines) in tests/server/event-queue.test.ts:305", "shortDescription": {"text": "Commented-code block (6 lines) in tests/server/event-queue.test.ts:305"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-39dd0a5e2e4a6a9e", "name": "Commented-code block (5 lines) in tests/server/info-route.test.ts:115", "shortDescription": {"text": "Commented-code block (5 lines) in tests/server/info-route.test.ts:115"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-447b9a68282dc862", "name": "Commented-code block (7 lines) in tests/server/wire-annotation-store-internal-failure.test.ts:8", "shortDescription": {"text": "Commented-code block (7 lines) in tests/server/wire-annotation-store-internal-failure.test.ts:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c6c4513e3d702938", "name": "Commented-code block (5 lines) in tests/server/launcher/supervisor.test.ts:283", "shortDescription": {"text": "Commented-code block (5 lines) in tests/server/launcher/supervisor.test.ts:283"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e9631c713fdebb40", "name": "Legacy-named symbol `report_v2` in tests/server/file-io/filename-safety.test.ts:13", "shortDescription": {"text": "Legacy-named symbol `report_v2` in tests/server/file-io/filename-safety.test.ts:13"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-634309a00749df0a", "name": "Commented-code block (5 lines) in tests/server/file-io/markdown-escaping.test.ts:125", "shortDescription": {"text": "Commented-code block (5 lines) in tests/server/file-io/markdown-escaping.test.ts:125"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ec7de8d106deddbd", "name": "Commented-code block (6 lines) in tests/server/integrations/apply-malformed.test.ts:189", "shortDescription": {"text": "Commented-code block (6 lines) in tests/server/integrations/apply-malformed.test.ts:189"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8caaa3dc6b80f2fd", "name": "Commented-code block (5 lines) in tests/server/integrations/apply.test.ts:82", "shortDescription": {"text": "Commented-code block (5 lines) in tests/server/integrations/apply.test.ts:82"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-88eaa6f74cc85a0a", "name": "Commented-code block (5 lines) in tests/server/integrations/storage.test.ts:154", "shortDescription": {"text": "Commented-code block (5 lines) in tests/server/integrations/storage.test.ts:154"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4e544e460642e40e", "name": "Commented-code block (7 lines) in tests/server/integrations/existing-config.test.ts:36", "shortDescription": {"text": "Commented-code block (7 lines) in tests/server/integrations/existing-config.test.ts:36"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-234c2ce026ddb3a7", "name": "Commented-code block (5 lines) in tests/server/integrations/backup.test.ts:113", "shortDescription": {"text": "Commented-code block (5 lines) in tests/server/integrations/backup.test.ts:113"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1718e37289f8cfd4", "name": "Commented-code block (7 lines) in tests/server/integrations/apply-acl.test.ts:74", "shortDescription": {"text": "Commented-code block (7 lines) in tests/server/integrations/apply-acl.test.ts:74"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5ce9a50e4bad0946", "name": "Commented-code block (5 lines) in tests/server/integrations/api-routes.test.ts:558", "shortDescription": {"text": "Commented-code block (5 lines) in tests/server/integrations/api-routes.test.ts:558"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-076253973e8276c7", "name": "Commented-code block (5 lines) in tests/server/integrations/keychain.test.ts:119", "shortDescription": {"text": "Commented-code block (5 lines) in tests/server/integrations/keychain.test.ts:119"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3a271e1a307cd03c", "name": "Legacy-named symbol `ann_legacy` in tests/server/annotations/sync.test.ts:318", "shortDescription": {"text": "Legacy-named symbol `ann_legacy` in tests/server/annotations/sync.test.ts:318"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-44b6c717494dee75", "name": "Commented-code block (5 lines) in tests/server/annotations/sync.test.ts:616", "shortDescription": {"text": "Commented-code block (5 lines) in tests/server/annotations/sync.test.ts:616"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-094644dbb32ffdb3", "name": "Commented-code block (8 lines) in tests/server/annotations/migrations/runner.test.ts:94", "shortDescription": {"text": "Commented-code block (8 lines) in tests/server/annotations/migrations/runner.test.ts:94"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d799f9f687aa70d5", "name": "Commented-code block (5 lines) in tests/client/cardMotion.test.ts:12", "shortDescription": {"text": "Commented-code block (5 lines) in tests/client/cardMotion.test.ts:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-03c8644d82707cad", "name": "Commented-code block (5 lines) in tests/client/use-tandem-settings-migration.test.ts:397", "shortDescription": {"text": "Commented-code block (5 lines) in tests/client/use-tandem-settings-migration.test.ts:397"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-91501b696f7e1331", "name": "Commented-code block (5 lines) in tests/client/marginCollision.test.ts:154", "shortDescription": {"text": "Commented-code block (5 lines) in tests/client/marginCollision.test.ts:154"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8309aee172751efa", "name": "Commented-code block (5 lines) in tests/client/shortcut-conflicts.test.ts:73", "shortDescription": {"text": "Commented-code block (5 lines) in tests/client/shortcut-conflicts.test.ts:73"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2fe40190d0be3c18", "name": "Commented-code block (7 lines) in tests/client/MarginColumn.import-author.test.ts:8", "shortDescription": {"text": "Commented-code block (7 lines) in tests/client/MarginColumn.import-author.test.ts:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f30af99d33932933", "name": "Commented-code block (5 lines) in tests/client/markdown-paste.test.ts:111", "shortDescription": {"text": "Commented-code block (5 lines) in tests/client/markdown-paste.test.ts:111"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-49acdc22519203ae", "name": "Commented-code block (5 lines) in tests/client/annotation-decoration.test.ts:384", "shortDescription": {"text": "Commented-code block (5 lines) in tests/client/annotation-decoration.test.ts:384"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3fb55265faf4b23c", "name": "Commented-code block (5 lines) in tests/client/useIntegrationWizard.test.ts:477", "shortDescription": {"text": "Commented-code block (5 lines) in tests/client/useIntegrationWizard.test.ts:477"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d748a95c7b58367e", "name": "Commented-code block (7 lines) in tests/client/keychain-backend.test.ts:172", "shortDescription": {"text": "Commented-code block (7 lines) in tests/client/keychain-backend.test.ts:172"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9152c60573444fd5", "name": "Commented-code block (6 lines) in tests/client/DocumentTabs.svelte.test.ts:56", "shortDescription": {"text": "Commented-code block (6 lines) in tests/client/DocumentTabs.svelte.test.ts:56"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fca63ecd5ee6d75a", "name": "Commented-code block (7 lines) in tests/client/useMarginPositions.test.ts:115", "shortDescription": {"text": "Commented-code block (7 lines) in tests/client/useMarginPositions.test.ts:115"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d9e066b902da998c", "name": "Commented-code block (5 lines) in tests/client/editor-stage.test.ts:115", "shortDescription": {"text": "Commented-code block (5 lines) in tests/client/editor-stage.test.ts:115"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-971e65f7884bb891", "name": "Commented-code block (8 lines) in tests/client/useTandemSettings.test.ts:158", "shortDescription": {"text": "Commented-code block (8 lines) in tests/client/useTandemSettings.test.ts:158"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1e8ab6e2865b6d3a", "name": "Commented-code block (5 lines) in tests/client/cowork-admin-declined-modal.test.ts:12", "shortDescription": {"text": "Commented-code block (5 lines) in tests/client/cowork-admin-declined-modal.test.ts:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5548690958da825c", "name": "Commented-code block (6 lines) in tests/client/tab-reconcile.test.ts:4", "shortDescription": {"text": "Commented-code block (6 lines) in tests/client/tab-reconcile.test.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dbb291aee00d9be4", "name": "Commented-code block (5 lines) in tests/client/keybindings.test.ts:35", "shortDescription": {"text": "Commented-code block (5 lines) in tests/client/keybindings.test.ts:35"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-23718744f8a4c514", "name": "Commented-code block (5 lines) in tests/client/marginLeaderGeometry.test.ts:34", "shortDescription": {"text": "Commented-code block (5 lines) in tests/client/marginLeaderGeometry.test.ts:34"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c22dcfd577904252", "name": "Commented-code block (6 lines) in tests/client/cardDensity.test.ts:13", "shortDescription": {"text": "Commented-code block (6 lines) in tests/client/cardDensity.test.ts:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dfe5bc809e243757", "name": "Commented-code block (5 lines) in tests/client/recent-files.test.ts:52", "shortDescription": {"text": "Commented-code block (5 lines) in tests/client/recent-files.test.ts:52"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2a5df108bd856e64", "name": "Commented-code block (6 lines) in tests/client/useAnnotationReplies.test.ts:12", "shortDescription": {"text": "Commented-code block (6 lines) in tests/client/useAnnotationReplies.test.ts:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f716d3f9a37cd202", "name": "Commented-code block (6 lines) in tests/client/useTauriFileDrop.test.ts:228", "shortDescription": {"text": "Commented-code block (6 lines) in tests/client/useTauriFileDrop.test.ts:228"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2bd948f63a737bfd", "name": "Commented-code block (7 lines) in tests/cli/dev-standalone.test.ts:56", "shortDescription": {"text": "Commented-code block (7 lines) in tests/cli/dev-standalone.test.ts:56"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-127d55de4f122299", "name": "Commented-code block (5 lines) in tests/cli/mcp-stdio.test.ts:233", "shortDescription": {"text": "Commented-code block (5 lines) in tests/cli/mcp-stdio.test.ts:233"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eaad899fddc4ef5f", "name": "Commented-code block (5 lines) in tests/cli/run-setup-apply.test.ts:3", "shortDescription": {"text": "Commented-code block (5 lines) in tests/cli/run-setup-apply.test.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-42d18129d8cf6659", "name": "Commented-code block (5 lines) in tests/cli/doctor.test.ts:162", "shortDescription": {"text": "Commented-code block (5 lines) in tests/cli/doctor.test.ts:162"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7c935cb716e4d222", "name": "Commented-code block (5 lines) in tests/e2e/document-rename.spec.ts:33", "shortDescription": {"text": "Commented-code block (5 lines) in tests/e2e/document-rename.spec.ts:33"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5dc0d353c71de5f4", "name": "Commented-code block (5 lines) in tests/e2e/toolbar-redesign.spec.ts:300", "shortDescription": {"text": "Commented-code block (5 lines) in tests/e2e/toolbar-redesign.spec.ts:300"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-76d6f882aae0742c", "name": "Commented-code block (5 lines) in tests/e2e/margin-view.spec.ts:151", "shortDescription": {"text": "Commented-code block (5 lines) in tests/e2e/margin-view.spec.ts:151"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d9d99d4a8bdc81fd", "name": "Commented-code block (5 lines) in tests/e2e/keyboard-shortcuts.spec.ts:103", "shortDescription": {"text": "Commented-code block (5 lines) in tests/e2e/keyboard-shortcuts.spec.ts:103"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-44001b20abe952eb", "name": "Commented-code block (6 lines) in tests/e2e/activity-tray.spec.ts:10", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/activity-tray.spec.ts:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-21dcda4a9a8ed07f", "name": "Commented-code block (5 lines) in tests/e2e/highlight-ux.spec.ts:92", "shortDescription": {"text": "Commented-code block (5 lines) in tests/e2e/highlight-ux.spec.ts:92"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-73706d10fc1153e0", "name": "Commented-code block (7 lines) in tests/e2e/annotation-ping.spec.ts:10", "shortDescription": {"text": "Commented-code block (7 lines) in tests/e2e/annotation-ping.spec.ts:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-801dfb12dbfc8599", "name": "Commented-code block (6 lines) in tests/e2e/settings-models.spec.ts:94", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/settings-models.spec.ts:94"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-66b8356851bc8615", "name": "Commented-code block (5 lines) in tests/e2e/palette-motion.spec.ts:10", "shortDescription": {"text": "Commented-code block (5 lines) in tests/e2e/palette-motion.spec.ts:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1160ca2fbd7d1053", "name": "Commented-code block (16 lines) in tests/e2e/accessibility.spec.ts:11", "shortDescription": {"text": "Commented-code block (16 lines) in tests/e2e/accessibility.spec.ts:11"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c809b7780d16c87e", "name": "Commented-code block (7 lines) in tests/e2e/integration-wizard.spec.ts:103", "shortDescription": {"text": "Commented-code block (7 lines) in tests/e2e/integration-wizard.spec.ts:103"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0c572e2b8dadd6e6", "name": "Commented-code block (6 lines) in tests/e2e/settings-and-filters.spec.ts:85", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/settings-and-filters.spec.ts:85"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8735e0f35f69dd1f", "name": "Commented-code block (5 lines) in tests/e2e/rail-motion.spec.ts:13", "shortDescription": {"text": "Commented-code block (5 lines) in tests/e2e/rail-motion.spec.ts:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-afa4f96da13d25a3", "name": "Commented-code block (6 lines) in tests/e2e/tab-overflow.spec.ts:127", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/tab-overflow.spec.ts:127"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-34e940b5b6b72134", "name": "Commented-code block (10 lines) in tests/e2e/editor-motion.spec.ts:14", "shortDescription": {"text": "Commented-code block (10 lines) in tests/e2e/editor-motion.spec.ts:14"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-92bd41d061f243e7", "name": "Commented-code block (7 lines) in tests/e2e/settings-modal.spec.ts:14", "shortDescription": {"text": "Commented-code block (7 lines) in tests/e2e/settings-modal.spec.ts:14"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-74cdcdad3df1de03", "name": "Commented-code block (6 lines) in tests/e2e/redesign-final-qa.spec.ts:366", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/redesign-final-qa.spec.ts:366"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eaef3ff0e9d74aa9", "name": "Commented-code block (5 lines) in tests/e2e/onboarding-tutorial.spec.ts:50", "shortDescription": {"text": "Commented-code block (5 lines) in tests/e2e/onboarding-tutorial.spec.ts:50"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-13bc2cc8401fa0f5", "name": "Commented-code block (6 lines) in tests/e2e/slash-command-menu.spec.ts:129", "shortDescription": {"text": "Commented-code block (6 lines) in tests/e2e/slash-command-menu.spec.ts:129"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a56f7fd31f98cb13", "name": "Commented-code block (6 lines) in tests/monitor/sse-parsing.test.ts:203", "shortDescription": {"text": "Commented-code block (6 lines) in tests/monitor/sse-parsing.test.ts:203"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5a4ae8cbafc8745b", "name": "Commented-code block (8 lines) in tests/monitor/integration.test.ts:6", "shortDescription": {"text": "Commented-code block (8 lines) in tests/monitor/integration.test.ts:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-19672dfa0476e957", "name": "Commented-code block (7 lines) in tests/monitor/retry.test.ts:107", "shortDescription": {"text": "Commented-code block (7 lines) in tests/monitor/retry.test.ts:107"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c03bdf3121a81f10", "name": "Commented-code block (7 lines) in scripts/audit-origins.ts:12", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/audit-origins.ts:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-54ad292a2d7eea0f", "name": "Commented-code block (5 lines) in scripts/e2e-server.mjs:3", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/e2e-server.mjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-06847b5f18de4d56", "name": "Commented-code block (7 lines) in scripts/kg-lint.mjs:2", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/kg-lint.mjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3fa6e2c066a3466f", "name": "Commented-code block (5 lines) in scripts/check-semantic-tokens.ts:240", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/check-semantic-tokens.ts:240"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7a9f17e6669b8173", "name": "Commented-code block (5 lines) in scripts/design-baselines/capture.spec.ts:142", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/design-baselines/capture.spec.ts:142"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1b5c3ee208e039e4", "name": "Commented-code block (5 lines) in scripts/spikes/probe-monitor-viability.ts:184", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/spikes/probe-monitor-viability.ts:184"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-208f865cb0e49bba", "name": "Commented-code block (5 lines) in scripts/spikes/libreoffice-poc.mjs:145", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/spikes/libreoffice-poc.mjs:145"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e4208feb082f75aa", "name": "Commented-code block (10 lines) in scripts/spikes/probe-launcher.mjs:4", "shortDescription": {"text": "Commented-code block (10 lines) in scripts/spikes/probe-launcher.mjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-195a0dd46760412e", "name": "Commented-code block (5 lines) in scripts/spikes/probe-session-resume.ts:230", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/spikes/probe-session-resume.ts:230"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-634de5be8c339dc0", "name": "Commented-code block (6 lines) in scripts/ci/stdio-smoke.mjs:49", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/ci/stdio-smoke.mjs:49"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-29bee352eb7fd0d1", "name": "Commented-code block (6 lines) in src/channel/run.ts:113", "shortDescription": {"text": "Commented-code block (6 lines) in src/channel/run.ts:113"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5d5e38be80418ef3", "name": "Commented-code block (6 lines) in src/server/index.ts:106", "shortDescription": {"text": "Commented-code block (6 lines) in src/server/index.ts:106"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-47dd040a91f85372", "name": "Commented-code block (5 lines) in src/server/positions.ts:406", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/positions.ts:406"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a9fbe30a308e3736", "name": "Commented-code block (11 lines) in src/server/launcher/supervisor.ts:308", "shortDescription": {"text": "Commented-code block (11 lines) in src/server/launcher/supervisor.ts:308"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-82cdc2cffb204fda", "name": "Commented-code block (15 lines) in src/server/file-io/docx-comment-export.ts:8", "shortDescription": {"text": "Commented-code block (15 lines) in src/server/file-io/docx-comment-export.ts:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-826a410d10368766", "name": "Legacy-named symbol `tooOld` in src/server/file-io/doc-backup.ts:459", "shortDescription": {"text": "Legacy-named symbol `tooOld` in src/server/file-io/doc-backup.ts:459"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cce3d35e7be58d4a", "name": "Commented-code block (7 lines) in src/server/file-io/doc-backup.ts:483", "shortDescription": {"text": "Commented-code block (7 lines) in src/server/file-io/doc-backup.ts:483"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-071e35dc1e60918e", "name": "Commented-code block (6 lines) in src/server/file-io/mdast-ydoc.ts:102", "shortDescription": {"text": "Commented-code block (6 lines) in src/server/file-io/mdast-ydoc.ts:102"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7499f93892a9137a", "name": "Commented-code block (5 lines) in src/server/file-io/docx-comments.ts:259", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/file-io/docx-comments.ts:259"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4867179b631191d2", "name": "Commented-code block (7 lines) in src/server/file-io/filename-safety.ts:88", "shortDescription": {"text": "Commented-code block (7 lines) in src/server/file-io/filename-safety.ts:88"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e6ceda9d8be3980e", "name": "Commented-code block (7 lines) in src/server/file-io/spike-docx-export.ts:12", "shortDescription": {"text": "Commented-code block (7 lines) in src/server/file-io/spike-docx-export.ts:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-51360ad3cf5a4976", "name": "Commented-code block (5 lines) in src/server/file-io/markdown.ts:89", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/file-io/markdown.ts:89"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3d7ff65a5d824460", "name": "Commented-code block (10 lines) in src/server/file-io/docx-export.ts:8", "shortDescription": {"text": "Commented-code block (10 lines) in src/server/file-io/docx-export.ts:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c6a3351e90ce409e", "name": "Legacy-named symbol `tooOld` in src/server/file-io/reaper.ts:96", "shortDescription": {"text": "Legacy-named symbol `tooOld` in src/server/file-io/reaper.ts:96"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2654405301200835", "name": "Commented-code block (8 lines) in src/server/integrations/existing-config.ts:219", "shortDescription": {"text": "Commented-code block (8 lines) in src/server/integrations/existing-config.ts:219"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ea562ae2244ec387", "name": "Commented-code block (5 lines) in src/server/integrations/storage.ts:111", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/integrations/storage.ts:111"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-50834c6b30cf4123", "name": "Commented-code block (9 lines) in src/server/integrations/install-claude-cli.ts:153", "shortDescription": {"text": "Commented-code block (9 lines) in src/server/integrations/install-claude-cli.ts:153"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cad45e84116984d1", "name": "Commented-code block (9 lines) in src/server/integrations/acl-win.ts:145", "shortDescription": {"text": "Commented-code block (9 lines) in src/server/integrations/acl-win.ts:145"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c021717fc4a9a203", "name": "Commented-code block (8 lines) in src/server/integrations/apply.ts:380", "shortDescription": {"text": "Commented-code block (8 lines) in src/server/integrations/apply.ts:380"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-781e25da7ab2980f", "name": "Commented-code block (5 lines) in src/server/integrations/api-routes.ts:373", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/integrations/api-routes.ts:373"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-525ee53b2bb21bfe", "name": "Commented-code block (5 lines) in src/server/yjs/provider.ts:32", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/yjs/provider.ts:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5937b1639eaae94b", "name": "Commented-code block (5 lines) in src/server/annotations/schema.ts:177", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/annotations/schema.ts:177"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7ef5e1843e90939f", "name": "Commented-code block (7 lines) in src/server/annotations/store.ts:236", "shortDescription": {"text": "Commented-code block (7 lines) in src/server/annotations/store.ts:236"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4b8c5159e26cd0bd", "name": "Commented-code block (7 lines) in src/server/annotations/sync.ts:261", "shortDescription": {"text": "Commented-code block (7 lines) in src/server/annotations/sync.ts:261"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2bfc8ab354b8608c", "name": "Commented-code block (5 lines) in src/server/annotations/lifecycle.ts:61", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/annotations/lifecycle.ts:61"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-18a0f8137024b0fb", "name": "Commented-code block (7 lines) in src/server/annotations/rename-recovery.ts:82", "shortDescription": {"text": "Commented-code block (7 lines) in src/server/annotations/rename-recovery.ts:82"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ffc96df55a2f4aaf", "name": "Legacy-named symbol `v1_to_v2` in src/server/annotations/migrations/index.ts:3", "shortDescription": {"text": "Legacy-named symbol `v1_to_v2` in src/server/annotations/migrations/index.ts:3"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d2280623610ebdd2", "name": "Legacy-named symbol `v1_to_v2` in src/server/annotations/migrations/runner.ts:23", "shortDescription": {"text": "Legacy-named symbol `v1_to_v2` in src/server/annotations/migrations/runner.ts:23"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5519b13a59d780cf", "name": "Legacy-named symbol `v1_to_v2` in src/server/annotations/migrations/v1_to_v2.ts:27", "shortDescription": {"text": "Legacy-named symbol `v1_to_v2` in src/server/annotations/migrations/v1_to_v2.ts:27"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fa3f8821cd2cce95", "name": "Commented-code block (9 lines) in src/server/annotations/migrations/v1_to_v2.ts:25", "shortDescription": {"text": "Commented-code block (9 lines) in src/server/annotations/migrations/v1_to_v2.ts:25"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-345c1af3a81cda6c", "name": "Commented-code block (5 lines) in src/server/mcp/server.ts:66", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/mcp/server.ts:66"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0d6711df4f1d2c61", "name": "Commented-code block (6 lines) in src/server/mcp/document.ts:560", "shortDescription": {"text": "Commented-code block (6 lines) in src/server/mcp/document.ts:560"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0d2fca6ed9ece36f", "name": "Commented-code block (6 lines) in src/server/mcp/convert.ts:90", "shortDescription": {"text": "Commented-code block (6 lines) in src/server/mcp/convert.ts:90"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-08d5a7a3e2fe17e9", "name": "Commented-code block (6 lines) in src/server/mcp/docx-apply.ts:46", "shortDescription": {"text": "Commented-code block (6 lines) in src/server/mcp/docx-apply.ts:46"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-180874cf968d584c", "name": "Commented-code block (5 lines) in src/server/mcp/document-service.ts:194", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/mcp/document-service.ts:194"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d24a1b1715122c9a", "name": "Commented-code block (5 lines) in src/server/mcp/channel-routes.ts:54", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/mcp/channel-routes.ts:54"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e9fa02ce1fc893b2", "name": "Commented-code block (5 lines) in src/server/mcp/file-opener.ts:121", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/mcp/file-opener.ts:121"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c2d89357872a2e92", "name": "Commented-code block (6 lines) in src/server/mcp/awareness.ts:107", "shortDescription": {"text": "Commented-code block (6 lines) in src/server/mcp/awareness.ts:107"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-554ce695874f3b24", "name": "Commented-code block (5 lines) in src/server/mcp/annotations.ts:152", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/mcp/annotations.ts:152"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ffe30fe7c86a3a5e", "name": "Commented-code block (5 lines) in src/server/mcp/api-routes.ts:186", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/mcp/api-routes.ts:186"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3f5e15ba0bc9e829", "name": "Commented-code block (6 lines) in src/server/mcp/routes/_shared.ts:78", "shortDescription": {"text": "Commented-code block (6 lines) in src/server/mcp/routes/_shared.ts:78"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-799bb9250a01e663", "name": "Commented-code block (12 lines) in src/server/mcp/routes/rename.ts:27", "shortDescription": {"text": "Commented-code block (12 lines) in src/server/mcp/routes/rename.ts:27"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-48334e8b50f1cc74", "name": "Commented-code block (7 lines) in src/server/mcp/routes/shutdown.ts:34", "shortDescription": {"text": "Commented-code block (7 lines) in src/server/mcp/routes/shutdown.ts:34"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d993e0a013112aaf", "name": "Commented-code block (5 lines) in src/server/events/file-sync-registry.ts:64", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/events/file-sync-registry.ts:64"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bd31dd41f0cf24e4", "name": "Commented-code block (7 lines) in src/server/events/observers/replies.ts:25", "shortDescription": {"text": "Commented-code block (7 lines) in src/server/events/observers/replies.ts:25"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-261d51b38c9bf4f8", "name": "Commented-code block (5 lines) in src/server/events/observers/annotations.ts:33", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/events/observers/annotations.ts:33"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-03efe04b9fd5e754", "name": "Commented-code block (5 lines) in src/server/documents/registry.ts:41", "shortDescription": {"text": "Commented-code block (5 lines) in src/server/documents/registry.ts:41"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f8db22b8da0359e0", "name": "Commented-code block (5 lines) in src/client/sentry.ts:104", "shortDescription": {"text": "Commented-code block (5 lines) in src/client/sentry.ts:104"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2769cfbf90877b6d", "name": "Commented-code block (6 lines) in src/client/panels/annotation-context-menu.ts:3", "shortDescription": {"text": "Commented-code block (6 lines) in src/client/panels/annotation-context-menu.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-13a7e51194df65a3", "name": "Commented-code block (10 lines) in src/client/panels/useAnnotationReview.svelte.ts:220", "shortDescription": {"text": "Commented-code block (10 lines) in src/client/panels/useAnnotationReview.svelte.ts:220"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-740f1c7713b577c5", "name": "Commented-code block (9 lines) in src/client/panels/annotation-context-menu-host.ts:8", "shortDescription": {"text": "Commented-code block (9 lines) in src/client/panels/annotation-context-menu-host.ts:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f192495659340bd7", "name": "Commented-code block (7 lines) in src/client/hooks/useAppShortcuts.ts:132", "shortDescription": {"text": "Commented-code block (7 lines) in src/client/hooks/useAppShortcuts.ts:132"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-08489ce69da9d321", "name": "Commented-code block (7 lines) in src/client/hooks/useTauriFileDrop.svelte.ts:164", "shortDescription": {"text": "Commented-code block (7 lines) in src/client/hooks/useTauriFileDrop.svelte.ts:164"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-31e763cc1a4e3212", "name": "Commented-code block (7 lines) in src/client/hooks/useIntegrationWizard.svelte.ts:243", "shortDescription": {"text": "Commented-code block (7 lines) in src/client/hooks/useIntegrationWizard.svelte.ts:243"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ee21b9db7490c1b5", "name": "Commented-code block (6 lines) in src/client/hooks/useTandemSettings.ts:24", "shortDescription": {"text": "Commented-code block (6 lines) in src/client/hooks/useTandemSettings.ts:24"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-af14d6533b572b5f", "name": "Commented-code block (6 lines) in src/client/hooks/useUpdaterChannel.svelte.ts:64", "shortDescription": {"text": "Commented-code block (6 lines) in src/client/hooks/useUpdaterChannel.svelte.ts:64"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-76772af6996106c3", "name": "Commented-code block (5 lines) in src/client/hooks/useScratchpadPersistence.svelte.ts:170", "shortDescription": {"text": "Commented-code block (5 lines) in src/client/hooks/useScratchpadPersistence.svelte.ts:170"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6f857b071285836e", "name": "Commented-code block (6 lines) in src/client/hooks/useAiReadiness.svelte.ts:104", "shortDescription": {"text": "Commented-code block (6 lines) in src/client/hooks/useAiReadiness.svelte.ts:104"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8b585b7532a20701", "name": "Commented-code block (8 lines) in src/client/hooks/useTandemSettings.svelte.ts:124", "shortDescription": {"text": "Commented-code block (8 lines) in src/client/hooks/useTandemSettings.svelte.ts:124"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-194b1ff123eb1949", "name": "Commented-code block (6 lines) in src/client/hooks/useClaudeCliStatus.svelte.ts:114", "shortDescription": {"text": "Commented-code block (6 lines) in src/client/hooks/useClaudeCliStatus.svelte.ts:114"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e1393046ede8358c", "name": "Commented-code block (7 lines) in src/client/hooks/yjsSync.svelte.ts:246", "shortDescription": {"text": "Commented-code block (7 lines) in src/client/hooks/yjsSync.svelte.ts:246"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-33ae7a76e9412f1c", "name": "Commented-code block (5 lines) in src/client/layout/editor-stage.svelte.ts:72", "shortDescription": {"text": "Commented-code block (5 lines) in src/client/layout/editor-stage.svelte.ts:72"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f6d3dea5e339504a", "name": "Commented-code block (5 lines) in src/client/editor/extensions/heading-collapse.ts:229", "shortDescription": {"text": "Commented-code block (5 lines) in src/client/editor/extensions/heading-collapse.ts:229"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-009726d72c2095c0", "name": "Commented-code block (5 lines) in src/client/editor/extensions/list-item-checkbox.ts:46", "shortDescription": {"text": "Commented-code block (5 lines) in src/client/editor/extensions/list-item-checkbox.ts:46"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bc8d75bafabe0899", "name": "Commented-code block (7 lines) in src/client/editor/extensions/annotationPing.ts:180", "shortDescription": {"text": "Commented-code block (7 lines) in src/client/editor/extensions/annotationPing.ts:180"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a163103476ae721b", "name": "Commented-code block (5 lines) in src/client/editor/utils/plain-paste.ts:6", "shortDescription": {"text": "Commented-code block (5 lines) in src/client/editor/utils/plain-paste.ts:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-faea1d474c79277c", "name": "Commented-code block (6 lines) in src/client/editor/utils/markdown-paste.ts:3", "shortDescription": {"text": "Commented-code block (6 lines) in src/client/editor/utils/markdown-paste.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ed62ea6dad6b190f", "name": "Commented-code block (5 lines) in src/client/editor/context-menu/detect.ts:3", "shortDescription": {"text": "Commented-code block (5 lines) in src/client/editor/context-menu/detect.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9f333dc33be18ee2", "name": "Commented-code block (5 lines) in src/client/editor/context-menu/install.ts:7", "shortDescription": {"text": "Commented-code block (5 lines) in src/client/editor/context-menu/install.ts:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e64dda684effedee", "name": "Commented-code block (6 lines) in src/client/editor/context-menu/types.ts:3", "shortDescription": {"text": "Commented-code block (6 lines) in src/client/editor/context-menu/types.ts:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b0792f1f5bec77db", "name": "Commented-code block (5 lines) in src/client/editor/context-menu/dispatch.ts:17", "shortDescription": {"text": "Commented-code block (5 lines) in src/client/editor/context-menu/dispatch.ts:17"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d1c1cb8b8e0eb9c3", "name": "Commented-code block (5 lines) in src/client/editor/slash-menu/extension.ts:287", "shortDescription": {"text": "Commented-code block (5 lines) in src/client/editor/slash-menu/extension.ts:287"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-720afdf8c0338d13", "name": "Commented-code block (5 lines) in src/client/editor/slash-menu/suppression.ts:44", "shortDescription": {"text": "Commented-code block (5 lines) in src/client/editor/slash-menu/suppression.ts:44"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4ef1f3a206d6bfe4", "name": "Commented-code block (5 lines) in src/client/editor/toolbar/highlight-toggle.ts:66", "shortDescription": {"text": "Commented-code block (5 lines) in src/client/editor/toolbar/highlight-toggle.ts:66"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-859b5cc645af524d", "name": "Commented-code block (10 lines) in src/client/editor/toolbar/selection-toolbar.ts:13", "shortDescription": {"text": "Commented-code block (10 lines) in src/client/editor/toolbar/selection-toolbar.ts:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-aa384fe88009a57c", "name": "Commented-code block (7 lines) in src/client/keychain/keychain-backend.ts:118", "shortDescription": {"text": "Commented-code block (7 lines) in src/client/keychain/keychain-backend.ts:118"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ba0808fcbe91b0b3", "name": "Commented-code block (9 lines) in src/client/actions/builtin.svelte.ts:324", "shortDescription": {"text": "Commented-code block (9 lines) in src/client/actions/builtin.svelte.ts:324"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-31f565463df2cc79", "name": "Commented-code block (5 lines) in src/client/actions/static-shortcuts.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in src/client/actions/static-shortcuts.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3f3068f73477cc29", "name": "Commented-code block (7 lines) in src/cli/index.ts:16", "shortDescription": {"text": "Commented-code block (7 lines) in src/cli/index.ts:16"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-22fbc063f8c29150", "name": "Commented-code block (5 lines) in src/cli/setup.ts:150", "shortDescription": {"text": "Commented-code block (5 lines) in src/cli/setup.ts:150"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a0bf9090683c58d9", "name": "Commented-code block (5 lines) in src/cli/rotate-token.ts:21", "shortDescription": {"text": "Commented-code block (5 lines) in src/cli/rotate-token.ts:21"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ee27275ef0387d3d", "name": "Commented-code block (5 lines) in src/cli/mcp-stdio.ts:41", "shortDescription": {"text": "Commented-code block (5 lines) in src/cli/mcp-stdio.ts:41"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-be8d916b6044ac47", "name": "Commented-code block (6 lines) in src/shared/constants.ts:23", "shortDescription": {"text": "Commented-code block (6 lines) in src/shared/constants.ts:23"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bf15eeee36651a25", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/shared/cli-runtime.ts:170", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/shared/cli-runtime.ts:170"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-adc6aebd2c33568d", "name": "Commented-code block (5 lines) in src/shared/sse-consumer.ts:484", "shortDescription": {"text": "Commented-code block (5 lines) in src/shared/sse-consumer.ts:484"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-502222884e168913", "name": "Commented-code block (6 lines) in src/shared/sanitize.ts:106", "shortDescription": {"text": "Commented-code block (6 lines) in src/shared/sanitize.ts:106"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b2d48bf712e0b3a3", "name": "Commented-code block (6 lines) in src/monitor/index.ts:67", "shortDescription": {"text": "Commented-code block (6 lines) in src/monitor/index.ts:67"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ca395a18e146a116", "name": "38 env vars used in code but missing from .env.example", "shortDescription": {"text": "38 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `APPDATA`, `CAPTURE_DESIGN_BASELINES`, `CI`, `CLAUDECODE`, `CLAUDE_CODE_SESSION_ID`, `CLAUDE_PLUGIN_OPTION_AUTH_TOKEN`, `CLAUDE_PLUGIN_OPTION_SERVER_URL`, `DEV` + 30 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a5ce321893cfa6fc", "name": "Dangling fetch: GET /api/info (tests/tauri-driver/specs/prevent-default.e2e.ts:140)", "shortDescription": {"text": "Dangling fetch: GET /api/info (tests/tauri-driver/specs/prevent-default.e2e.ts:140)"}, "fullDescription": {"text": "`tests/tauri-driver/specs/prevent-default.e2e.ts:140` calls `GET /api/info` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/info`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a044696216b572fd", "name": "Dangling fetch: GET http://127.0.0.1:${address.port}${url} (tests/server/sessions-routes.test.ts:70)", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:${address.port}${url} (tests/server/sessions-routes.test.ts:70)"}, "fullDescription": {"text": "`tests/server/sessions-routes.test.ts:70` calls `GET http://127.0.0.1:${address.port}${url}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8320f41dcb2da5af", "name": "Dangling fetch: POST http://127.0.0.1:${address.port}${API_STORE_RECLAIM_LOCK} (tests/server/store-reclaim-route.test.ts", "shortDescription": {"text": "Dangling fetch: POST http://127.0.0.1:${address.port}${API_STORE_RECLAIM_LOCK} (tests/server/store-reclaim-route.test.ts:60)"}, "fullDescription": {"text": "`tests/server/store-reclaim-route.test.ts:60` calls `POST http://127.0.0.1:${address.port}${API_STORE_RECLAIM_LOCK}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e1b5add8dc1665a3", "name": "Dangling fetch: POST http://127.0.0.1:${address.port}${API_SHUTDOWN} (tests/server/shutdown-route.test.ts:48)", "shortDescription": {"text": "Dangling fetch: POST http://127.0.0.1:${address.port}${API_SHUTDOWN} (tests/server/shutdown-route.test.ts:48)"}, "fullDescription": {"text": "`tests/server/shutdown-route.test.ts:48` calls `POST http://127.0.0.1:${address.port}${API_SHUTDOWN}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0f2501b1a8e06938", "name": "Dangling fetch: GET http://127.0.0.1:${port}/.well-known/oauth-protected-resource (tests/server/server-security-invarian", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:${port}/.well-known/oauth-protected-resource (tests/server/server-security-invariants.test.ts:40)"}, "fullDescription": {"text": "`tests/server/server-security-invariants.test.ts:40` calls `GET http://127.0.0.1:${port}/.well-known/oauth-protected-resource` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/.well-known/oauth-protected-resource`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f8d0fd1d836af52b", "name": "Dangling fetch: GET http://127.0.0.1:${port}/.well-known/oauth-protected-resource/mcp (tests/server/server-security-inva", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:${port}/.well-known/oauth-protected-resource/mcp (tests/server/server-security-invariants.test.ts:52)"}, "fullDescription": {"text": "`tests/server/server-security-invariants.test.ts:52` calls `GET http://127.0.0.1:${port}/.well-known/oauth-protected-resource/mcp` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/.well-known/oauth-protected-resource/mcp`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-14759cc259182c38", "name": "Dangling fetch: GET http://127.0.0.1:${port}/.well-known/oauth-protected-resource (tests/server/server-security-invarian", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:${port}/.well-known/oauth-protected-resource (tests/server/server-security-invariants.test.ts:64)"}, "fullDescription": {"text": "`tests/server/server-security-invariants.test.ts:64` calls `GET http://127.0.0.1:${port}/.well-known/oauth-protected-resource` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/.well-known/oauth-protected-resource`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-30d16290629bad8f", "name": "Dangling fetch: GET http://127.0.0.1:${port}/health (tests/server/server-security-invariants.test.ts:90)", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:${port}/health (tests/server/server-security-invariants.test.ts:90)"}, "fullDescription": {"text": "`tests/server/server-security-invariants.test.ts:90` calls `GET http://127.0.0.1:${port}/health` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/health`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-22dc22c405ce655a", "name": "Dangling fetch: GET http://127.0.0.1:${port}/health (tests/server/server-security-invariants.test.ts:102)", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:${port}/health (tests/server/server-security-invariants.test.ts:102)"}, "fullDescription": {"text": "`tests/server/server-security-invariants.test.ts:102` calls `GET http://127.0.0.1:${port}/health` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/health`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b3ccf86e64613e4c", "name": "Dangling fetch: POST http://127.0.0.1:${port}/api/rotate-token (tests/server/rotate-token-route.test.ts:76)", "shortDescription": {"text": "Dangling fetch: POST http://127.0.0.1:${port}/api/rotate-token (tests/server/rotate-token-route.test.ts:76)"}, "fullDescription": {"text": "`tests/server/rotate-token-route.test.ts:76` calls `POST http://127.0.0.1:${port}/api/rotate-token` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/api/rotate-token`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d7bdc113800171d2", "name": "Dangling fetch: POST http://127.0.0.1:${port}/api/rotate-token (tests/server/rotate-token-route.test.ts:98)", "shortDescription": {"text": "Dangling fetch: POST http://127.0.0.1:${port}/api/rotate-token (tests/server/rotate-token-route.test.ts:98)"}, "fullDescription": {"text": "`tests/server/rotate-token-route.test.ts:98` calls `POST http://127.0.0.1:${port}/api/rotate-token` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/api/rotate-token`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e90888c2c275aaef", "name": "Dangling fetch: POST http://127.0.0.1:${port}/api/rotate-token (tests/server/rotate-token-route.test.ts:114)", "shortDescription": {"text": "Dangling fetch: POST http://127.0.0.1:${port}/api/rotate-token (tests/server/rotate-token-route.test.ts:114)"}, "fullDescription": {"text": "`tests/server/rotate-token-route.test.ts:114` calls `POST http://127.0.0.1:${port}/api/rotate-token` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/api/rotate-token`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-97b216a6b1b8d025", "name": "Dangling fetch: POST http://127.0.0.1:${port}/api/rotate-token (tests/server/rotate-token-route.test.ts:132)", "shortDescription": {"text": "Dangling fetch: POST http://127.0.0.1:${port}/api/rotate-token (tests/server/rotate-token-route.test.ts:132)"}, "fullDescription": {"text": "`tests/server/rotate-token-route.test.ts:132` calls `POST http://127.0.0.1:${port}/api/rotate-token` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/api/rotate-token`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2d2bce73eba577bb", "name": "Dangling fetch: POST http://127.0.0.1:${port}/api/rotate-token (tests/server/rotate-token-route.test.ts:150)", "shortDescription": {"text": "Dangling fetch: POST http://127.0.0.1:${port}/api/rotate-token (tests/server/rotate-token-route.test.ts:150)"}, "fullDescription": {"text": "`tests/server/rotate-token-route.test.ts:150` calls `POST http://127.0.0.1:${port}/api/rotate-token` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/api/rotate-token`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-80f9c603f83d9dce", "name": "Dangling fetch: POST http://127.0.0.1:${noTokenPort}/api/rotate-token (tests/server/rotate-token-route.test.ts:179)", "shortDescription": {"text": "Dangling fetch: POST http://127.0.0.1:${noTokenPort}/api/rotate-token (tests/server/rotate-token-route.test.ts:179)"}, "fullDescription": {"text": "`tests/server/rotate-token-route.test.ts:179` calls `POST http://127.0.0.1:${noTokenPort}/api/rotate-token` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/api/rotate-token`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f5337ca09d5a9186", "name": "Dangling fetch: GET http://127.0.0.1:${port}${url} (tests/server/launcher/api-routes.test.ts:106)", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:${port}${url} (tests/server/launcher/api-routes.test.ts:106)"}, "fullDescription": {"text": "`tests/server/launcher/api-routes.test.ts:106` calls `GET http://127.0.0.1:${port}${url}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a422c6806c7da115", "name": "Dangling fetch: GET http://127.0.0.1:${port}${url} (tests/server/integrations/api-routes.test.ts:129)", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:${port}${url} (tests/server/integrations/api-routes.test.ts:129)"}, "fullDescription": {"text": "`tests/server/integrations/api-routes.test.ts:129` calls `GET http://127.0.0.1:${port}${url}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c525a25143a533b7", "name": "Dangling fetch: GET http://127.0.0.1:${port}${url} (tests/server/models/api-routes.test.ts:92)", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:${port}${url} (tests/server/models/api-routes.test.ts:92)"}, "fullDescription": {"text": "`tests/server/models/api-routes.test.ts:92` calls `GET http://127.0.0.1:${port}${url}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c647236977c62045", "name": "Dangling fetch: GET http://127.0.0.1:${DEFAULT_MCP_PORT}${API_INFO} (src/client/hooks/yjsSync.svelte.ts:194)", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:${DEFAULT_MCP_PORT}${API_INFO} (src/client/hooks/yjsSync.svelte.ts:194)"}, "fullDescription": {"text": "`src/client/hooks/yjsSync.svelte.ts:194` calls `GET http://127.0.0.1:${DEFAULT_MCP_PORT}${API_INFO}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c35118e3bb707b3e", "name": "Dangling fetch: POST http://127.0.0.1:${DEFAULT_MCP_PORT}${API_CLOSE} (src/client/hooks/yjsSync.svelte.ts:579)", "shortDescription": {"text": "Dangling fetch: POST http://127.0.0.1:${DEFAULT_MCP_PORT}${API_CLOSE} (src/client/hooks/yjsSync.svelte.ts:579)"}, "fullDescription": {"text": "`src/client/hooks/yjsSync.svelte.ts:579` calls `POST http://127.0.0.1:${DEFAULT_MCP_PORT}${API_CLOSE}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b385768236d3ca9d", "name": "Dangling fetch: POST http://127.0.0.1:${DEFAULT_MCP_PORT}${API_RENAME} (src/client/hooks/yjsSync.svelte.ts:610)", "shortDescription": {"text": "Dangling fetch: POST http://127.0.0.1:${DEFAULT_MCP_PORT}${API_RENAME} (src/client/hooks/yjsSync.svelte.ts:610)"}, "fullDescription": {"text": "`src/client/hooks/yjsSync.svelte.ts:610` calls `POST http://127.0.0.1:${DEFAULT_MCP_PORT}${API_RENAME}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2d4ad00765699426", "name": "Dangling fetch: GET http://127.0.0.1:${mcpPort}/api/events (src/cli/doctor.ts:377)", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:${mcpPort}/api/events (src/cli/doctor.ts:377)"}, "fullDescription": {"text": "`src/cli/doctor.ts:377` calls `GET http://127.0.0.1:${mcpPort}/api/events` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: helper:request\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/api/events`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-239a938869adf673", "name": "Unused endpoint: POST /mcp", "shortDescription": {"text": "Unused endpoint: POST /mcp"}, "fullDescription": {"text": "`src/server/mcp/server.ts` declares `POST /mcp` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cc1d680cdc3d6aa1", "name": "Unused endpoint: GET /mcp", "shortDescription": {"text": "Unused endpoint: GET /mcp"}, "fullDescription": {"text": "`src/server/mcp/server.ts` declares `GET /mcp` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-56b4efafa0127feb", "name": "Unused endpoint: DELETE /mcp", "shortDescription": {"text": "Unused endpoint: DELETE /mcp"}, "fullDescription": {"text": "`src/server/mcp/server.ts` declares `DELETE /mcp` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0de5d84fb5ba1a7f", "name": "Unused endpoint: POST /webhooks/license", "shortDescription": {"text": "Unused endpoint: POST /webhooks/license"}, "fullDescription": {"text": "`src/server/mcp/server.ts` declares `POST /webhooks/license` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-95e266019920938e", "name": "Unused endpoint: USE /mcp", "shortDescription": {"text": "Unused endpoint: USE /mcp"}, "fullDescription": {"text": "`src/server/mcp/server.ts` declares `USE /mcp` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dde3adb27bf7eebe", "name": "Unused endpoint: USE /api", "shortDescription": {"text": "Unused endpoint: USE /api"}, "fullDescription": {"text": "`src/server/mcp/server.ts` declares `USE /api` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-77a21e69b379a5bf", "name": "Unused endpoint: GET /{*path}", "shortDescription": {"text": "Unused endpoint: GET /{*path}"}, "fullDescription": {"text": "`src/server/mcp/server.ts` declares `GET /{*path}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/24636"}, "properties": {"repository": "bloknayrb/tandem", "repoUrl": "https://github.com/bloknayrb/tandem", "branch": "main"}, "results": [{"ruleId": "scanner-51cfcc54ad818080", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/tauri-driver/specs/prevent-default.e2e.ts:136"}, "properties": {"repobilityId": "fbe650ef0577dff4", "scanner": "scanner-primary", "fingerprint": "51cfcc54ad818080", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-4d929aaf126dfa81", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/server/markdown-roundtrip.test.ts:135"}, "properties": {"repobilityId": "92d2cf01bad43364", "scanner": "scanner-primary", "fingerprint": "4d929aaf126dfa81", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-585778f4f500d24a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/server/authorship-tracking.test.ts:165"}, "properties": {"repobilityId": "7d92c0e2a2911036", "scanner": "scanner-primary", "fingerprint": "585778f4f500d24a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d92492c1ec53386b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/server/file-opener-edge-cases.test.ts:81"}, "properties": {"repobilityId": "0d8e2aee99f2b8dd", "scanner": "scanner-primary", "fingerprint": "d92492c1ec53386b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2e086bb60bfecb21", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/server/annotations/perf.test.ts:129"}, "properties": {"repobilityId": "0f45b1f0877bfd1c", "scanner": "scanner-primary", "fingerprint": "2e086bb60bfecb21", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-97ef0e8b474e5964", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/crdt/authorship-marks-size.test.ts:120"}, "properties": {"repobilityId": "ed5650276fd003f7", "scanner": "scanner-primary", "fingerprint": "97ef0e8b474e5964", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b459a3cb5ea25f75", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-keys.ts:6"}, "properties": {"repobilityId": "4c35567c475a8beb", "scanner": "scanner-primary", "fingerprint": "b459a3cb5ea25f75", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-70567fc50c77ccbd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/sign-license.ts:35"}, "properties": {"repobilityId": "7e233c3f66c995f9", "scanner": "scanner-primary", "fingerprint": "70567fc50c77ccbd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0090d56312101ef7", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/spikes/probe-monitor-viability.ts:367"}, "properties": {"repobilityId": "f8959ad4521045d1", "scanner": "scanner-primary", "fingerprint": "0090d56312101ef7", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-cbdc41e503909267", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/spikes/probe-session-resume.ts:418"}, "properties": {"repobilityId": "c07a0c783a869701", "scanner": "scanner-primary", "fingerprint": "cbdc41e503909267", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3a68da06e587f208", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 src/client/App.svelte:1889"}, "properties": {"repobilityId": "dbb9945c7ea6f26b", "scanner": "scanner-primary", "fingerprint": "3a68da06e587f208", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-dab5504dd26a42f8", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 src/client/hooks/useTandemSettings.ts:169"}, "properties": {"repobilityId": "4e0940981689f215", "scanner": "scanner-primary", "fingerprint": "dab5504dd26a42f8", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-a04dd44804cf7ab1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/cli/index.ts:51"}, "properties": {"repobilityId": "ee7dac2d7990903e", "scanner": "scanner-primary", "fingerprint": "a04dd44804cf7ab1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-16c38f3d0c74e308", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 src/cli/rotate-token.ts:107"}, "properties": {"repobilityId": "140caf64d79456e5", "scanner": "scanner-primary", "fingerprint": "16c38f3d0c74e308", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-e13f47408b240096", "level": "error", "message": {"text": "Possible secret in tests/client/use-tandem-settings-migration.test.ts"}, "properties": {"repobilityId": "5ffc371c242060b4", "scanner": "scanner-primary", "fingerprint": "e13f47408b240096", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/client/use-tandem-settings-migration.test.ts"}, "region": {"startLine": 311}}}]}, {"ruleId": "scanner-3291bac0ce2d9e3f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/build-reaper.mjs:25"}, "properties": {"repobilityId": "901ecc57a3a617f6", "scanner": "scanner-primary", "fingerprint": "3291bac0ce2d9e3f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/build-reaper.mjs"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-4df7b73123de2ced", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/download-node-sidecar.mjs:14"}, "properties": {"repobilityId": "ea0b2ddecf82e2fd", "scanner": "scanner-primary", "fingerprint": "4df7b73123de2ced", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/download-node-sidecar.mjs"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-9747e7d2b85c1e92", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/e2e-server.mjs:19"}, "properties": {"repobilityId": "dc45e911a48e83c9", "scanner": "scanner-primary", "fingerprint": "9747e7d2b85c1e92", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/e2e-server.mjs"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-5f267f5176aaf0b5", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/dev-standalone.mjs:3"}, "properties": {"repobilityId": "6b101be78c099de9", "scanner": "scanner-primary", "fingerprint": "5f267f5176aaf0b5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/dev-standalone.mjs"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-3414f0d4331ac4d3", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/spikes/probe-monitor-viability.ts:33"}, "properties": {"repobilityId": "c3c368bc4ba0e625", "scanner": "scanner-primary", "fingerprint": "3414f0d4331ac4d3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/spikes/probe-monitor-viability.ts"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-393263dcc0f7b039", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/spikes/run-docx-export.mjs:12"}, "properties": {"repobilityId": "5d76665f8d7a2d92", "scanner": "scanner-primary", "fingerprint": "393263dcc0f7b039", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/spikes/run-docx-export.mjs"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-ff8761c8790366c8", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/spikes/probe-launcher.mjs:40"}, "properties": {"repobilityId": "c3d6897d2102270c", "scanner": "scanner-primary", "fingerprint": "ff8761c8790366c8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/spikes/probe-launcher.mjs"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-1e89d282954f3292", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/spikes/probe-session-resume.ts:26"}, "properties": {"repobilityId": "0bc85bc7d4c99570", "scanner": "scanner-primary", "fingerprint": "1e89d282954f3292", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/spikes/probe-session-resume.ts"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-8ce30e7248b2f804", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/ci/stdio-smoke.mjs:14"}, "properties": {"repobilityId": "0e6464a7fc990b48", "scanner": "scanner-primary", "fingerprint": "8ce30e7248b2f804", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/ci/stdio-smoke.mjs"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-92de275d634e80e6", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/server/platform.ts:1"}, "properties": {"repobilityId": "7ed7f9a1017c49a0", "scanner": "scanner-primary", "fingerprint": "92de275d634e80e6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/server/platform.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c72d113892cf69b5", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/server/launcher/supervisor.ts:19"}, "properties": {"repobilityId": "2e102f6173fa8f73", "scanner": "scanner-primary", "fingerprint": "c72d113892cf69b5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/server/launcher/supervisor.ts"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-04fbb16cd4e93df0", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/server/integrations/install-claude-cli.ts:37"}, "properties": {"repobilityId": "a228ad611373fc7e", "scanner": "scanner-primary", "fingerprint": "04fbb16cd4e93df0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/server/integrations/install-claude-cli.ts"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-83cbd1224bd8a7b1", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/server/integrations/acl-win.ts:38"}, "properties": {"repobilityId": "a954736a0201a0d2", "scanner": "scanner-primary", "fingerprint": "83cbd1224bd8a7b1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/server/integrations/acl-win.ts"}, "region": {"startLine": 38}}}]}, {"ruleId": "scanner-9bb0aeb0cc03fd29", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/server/annotations/process-identity.ts:20"}, "properties": {"repobilityId": "f44ef4c9160922c5", "scanner": "scanner-primary", "fingerprint": "9bb0aeb0cc03fd29", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/server/annotations/process-identity.ts"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-396e15b3fd8342b3", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in src/server/mcp/server.ts:377"}, "properties": {"repobilityId": "98a44177596df6de", "scanner": "scanner-primary", "fingerprint": "396e15b3fd8342b3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/server/mcp/server.ts"}, "region": {"startLine": 377}}}]}, {"ruleId": "scanner-6e1b013a59ca4d0f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/server/mcp/launcher.ts:7"}, "properties": {"repobilityId": "5f74b7f9dd40b457", "scanner": "scanner-primary", "fingerprint": "6e1b013a59ca4d0f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/server/mcp/launcher.ts"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-ad6ee9d21224ba8c", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/cli/uninstall-scrub.ts:39"}, "properties": {"repobilityId": "436d0790600eaebb", "scanner": "scanner-primary", "fingerprint": "ad6ee9d21224ba8c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/cli/uninstall-scrub.ts"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-4282721767c3d9cc", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/cli/start.ts:1"}, "properties": {"repobilityId": "4fa7916ca6b37711", "scanner": "scanner-primary", "fingerprint": "4282721767c3d9cc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/cli/start.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a455f2d64c0a2a02", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/design-system-impl/preview/d5-empty-states.html:121"}, "properties": {"repobilityId": "fa231b94476ec068", "scanner": "scanner-primary", "fingerprint": "a455f2d64c0a2a02", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/design-system-impl/preview/d5-empty-states.html"}, "region": {"startLine": 121}}}]}, {"ruleId": "scanner-77166cbd46fcd8e4", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "50f3b563ffac10e9", "scanner": "scanner-primary", "fingerprint": "77166cbd46fcd8e4", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/claude-code-review.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2f7ba46acc6dbe8c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a5c1c8096db03bd6", "scanner": "scanner-primary", "fingerprint": "2f7ba46acc6dbe8c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tauri-release.yml"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-2f7ba46acc6dbe8c", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "bf4aee4cafbf7066", "scanner": "scanner-primary", "fingerprint": "2f7ba46acc6dbe8c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tauri-release.yml"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-2f7ba46acc6dbe8c", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0614799f2af0c5a9", "scanner": "scanner-primary", "fingerprint": "2f7ba46acc6dbe8c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tauri-release.yml"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-b8004a05c79a56b1", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "a170316b97014bf3", "scanner": "scanner-primary", "fingerprint": "b8004a05c79a56b1", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tauri-release.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7ffa33751be3d771", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "491a3ad29cbaf189", "scanner": "scanner-primary", "fingerprint": "7ffa33751be3d771", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/publish.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8fb57e9e0362cf03", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 150}}}]}, {"ruleId": "scanner-cb639d9a10a47b23", "level": "note", "message": {"text": "package.json defines install-time lifecycle scripts"}, "properties": {"repobilityId": "b86179956da3a4a8", "scanner": "scanner-primary", "fingerprint": "cb639d9a10a47b23", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "npm", "install-scripts"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dac4a556d6251b5f", "level": "note", "message": {"text": "Very large file: tests/server/annotations/sync.test.ts (1499 lines)"}, "properties": {"repobilityId": "360b96ff9d57769e", "scanner": "scanner-primary", "fingerprint": "dac4a556d6251b5f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-87dd7d433cbfc593", "level": "note", "message": {"text": "Very large file: tests/e2e/margin-view.spec.ts (1361 lines)"}, "properties": {"repobilityId": "f3d709042b4f4352", "scanner": "scanner-primary", "fingerprint": "87dd7d433cbfc593", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4b345d6d2c15179b", "level": "note", "message": {"text": "Very large file: src/server/mcp/document-service.ts (1282 lines)"}, "properties": {"repobilityId": "86a69061cee34ad7", "scanner": "scanner-primary", "fingerprint": "4b345d6d2c15179b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-66b6ea93fd82da55", "level": "note", "message": {"text": "Very large file: src/server/mcp/file-opener.ts (1552 lines)"}, "properties": {"repobilityId": "9b792e1da3dcf52e", "scanner": "scanner-primary", "fingerprint": "66b6ea93fd82da55", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3a504a2d18bf9bbf", "level": "note", "message": {"text": "Very large file: src-tauri/src/cowork_installer.rs (1251 lines)"}, "properties": {"repobilityId": "b4c509eea4690a00", "scanner": "scanner-primary", "fingerprint": "3a504a2d18bf9bbf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-087886763463bdde", "level": "note", "message": {"text": "Very large file: src-tauri/src/lib.rs (3973 lines)"}, "properties": {"repobilityId": "f072133525c0c23b", "scanner": "scanner-primary", "fingerprint": "087886763463bdde", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4198c04cfc9ddc35", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: tests/tauri-driver/package.json"}, "properties": {"repobilityId": "33ea645fb782c4f7", "scanner": "scanner-primary", "fingerprint": "4198c04cfc9ddc35", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/tauri-driver/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "0817d66817342eba", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "07b06d66644dda91", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "26f65a83ae927c3b", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "b06f51c048e2071f", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-bea357a6497a2d5d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: CLAUDE.md"}, "properties": {"repobilityId": "aae72df3934829ac", "scanner": "scanner-primary", "fingerprint": "bea357a6497a2d5d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d9d71dfa0b422cc6", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: skills/tandem/SKILL.md"}, "properties": {"repobilityId": "2ef3ae2527baf0b4", "scanner": "scanner-primary", "fingerprint": "d9d71dfa0b422cc6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skills/tandem/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-122f91b7f2906dc4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "properties": {"repobilityId": "a2967269048b6a9d", "scanner": "scanner-primary", "fingerprint": "122f91b7f2906dc4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/settings.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-27147c535974da6d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/diverge-on-call.md"}, "properties": {"repobilityId": "ecb8e28714dd169f", "scanner": "scanner-primary", "fingerprint": "27147c535974da6d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/diverge-on-call.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-34b96c3ee581935e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/notes/pr-review-765-2026-05-18.md"}, "properties": {"repobilityId": "758d314ac32a23f0", "scanner": "scanner-primary", "fingerprint": "34b96c3ee581935e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/notes/pr-review-765-2026-05-18.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-21c4d02948afc8f8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/notes/pr-review-summary-2026-05-18.md"}, "properties": {"repobilityId": "61c308ebfab2b543", "scanner": "scanner-primary", "fingerprint": "21c4d02948afc8f8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/notes/pr-review-summary-2026-05-18.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7c31298ea7e70979", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/notes/pr-review-759-2026-05-18.md"}, "properties": {"repobilityId": "2716de0613b1444e", "scanner": "scanner-primary", "fingerprint": "7c31298ea7e70979", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/notes/pr-review-759-2026-05-18.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-05f399b06d32f5dd", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/notes/pr-review-761-2026-05-18.md"}, "properties": {"repobilityId": "be8b2161d70f373a", "scanner": "scanner-primary", "fingerprint": "05f399b06d32f5dd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/notes/pr-review-761-2026-05-18.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-168ab73d8e4bc3c8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/notes/pr-review-760-2026-05-18.md"}, "properties": {"repobilityId": "82b36262805be9d5", "scanner": "scanner-primary", "fingerprint": "168ab73d8e4bc3c8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/notes/pr-review-760-2026-05-18.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d993ad889253fb14", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/diverge.md"}, "properties": {"repobilityId": "e64a39d8817e42e7", "scanner": "scanner-primary", "fingerprint": "d993ad889253fb14", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/diverge.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-586240d0ba2b9956", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/reviews/pr-578.codex.md"}, "properties": {"repobilityId": "5bc2c0e300bdcd33", "scanner": "scanner-primary", "fingerprint": "586240d0ba2b9956", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/reviews/pr-578.codex.md"}, "region": {"startLine": 374}}}]}, {"ruleId": "scanner-62e80a1b5939ea39", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/reviews/pr-579.codex.md"}, "properties": {"repobilityId": "a3c81f0dbbe9466b", "scanner": "scanner-primary", "fingerprint": "62e80a1b5939ea39", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/reviews/pr-579.codex.md"}, "region": {"startLine": 1079}}}]}, {"ruleId": "scanner-bf2aa698bddb4e6e", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/reviews/issue-pipeline-skill-plan-review-content.md"}, "properties": {"repobilityId": "16804d4de3f849ca", "scanner": "scanner-primary", "fingerprint": "bf2aa698bddb4e6e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/reviews/issue-pipeline-skill-plan-review-content.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8d1c41d3c5936d9b", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/reviews/meta-plan.codex.md"}, "properties": {"repobilityId": "f74ce4eb04b05202", "scanner": "scanner-primary", "fingerprint": "8d1c41d3c5936d9b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/reviews/meta-plan.codex.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dd83c76a57925077", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/reviews/pr-580.codex.md"}, "properties": {"repobilityId": "11b000b0570bcfa0", "scanner": "scanner-primary", "fingerprint": "dd83c76a57925077", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/reviews/pr-580.codex.md"}, "region": {"startLine": 1273}}}]}, {"ruleId": "scanner-770f0a269ccddbfb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/knowledge-graph/nodes/rule-extract-text-not-markdown.md"}, "properties": {"repobilityId": "344ea6577e51a566", "scanner": "scanner-primary", "fingerprint": "770f0a269ccddbfb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/knowledge-graph/nodes/rule-extract-text-not-markdown.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-630cddc4073afa53", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/knowledge-graph/nodes/adr-031.md"}, "properties": {"repobilityId": "ca56592a143f816c", "scanner": "scanner-primary", "fingerprint": "630cddc4073afa53", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/knowledge-graph/nodes/adr-031.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f210bafcff1fed83", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/knowledge-graph/nodes/concept-file-watcher.md"}, "properties": {"repobilityId": "aad5ebd5b89dd25c", "scanner": "scanner-primary", "fingerprint": "f210bafcff1fed83", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/knowledge-graph/nodes/concept-file-watcher.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5d1de6566fe72758", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/knowledge-graph/nodes/rule-stdout-reserved.md"}, "properties": {"repobilityId": "2aa0a1d3ebc4d6c8", "scanner": "scanner-primary", "fingerprint": "5d1de6566fe72758", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/knowledge-graph/nodes/rule-stdout-reserved.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6d55cee2d7bebafa", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/screenshots/SKILL.md"}, "properties": {"repobilityId": "e2028cc2d42daca1", "scanner": "scanner-primary", "fingerprint": "6d55cee2d7bebafa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/screenshots/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-67a279e9670a364c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/e2e/SKILL.md"}, "properties": {"repobilityId": "9a7fae9084e084d8", "scanner": "scanner-primary", "fingerprint": "67a279e9670a364c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/e2e/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e725d2ab884fbd49", "level": "note", "message": {"text": "Multiple root agent instruction files without precedence"}, "properties": {"repobilityId": "1953db6c89508d22", "scanner": "scanner-primary", "fingerprint": "e725d2ab884fbd49", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["agent-instructions", "governance"]}}, {"ruleId": "scanner-f6d0302dc84892e7", "level": "none", "message": {"text": "Commented-code block (5 lines) in vitest.config.ts:46"}, "properties": {"repobilityId": "3ae3c68486f51f28", "scanner": "scanner-primary", "fingerprint": "f6d0302dc84892e7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2ff4719883abf794", "level": "none", "message": {"text": "Commented-code block (6 lines) in playwright.config.ts:4"}, "properties": {"repobilityId": "9800bf3a1375b1b1", "scanner": "scanner-primary", "fingerprint": "2ff4719883abf794", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7d91261af5699b04", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/scripts/build-reaper.test.ts:6"}, "properties": {"repobilityId": "84c50944c0bcf533", "scanner": "scanner-primary", "fingerprint": "7d91261af5699b04", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9d5d1c83107c49b1", "level": "none", "message": {"text": "Commented-code block (9 lines) in tests/tauri-driver/wdio.conf.ts:3"}, "properties": {"repobilityId": "fe53f4cc71fd98e0", "scanner": "scanner-primary", "fingerprint": "9d5d1c83107c49b1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e5d1234203e92e5d", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/tauri-driver/specs/prevent-default.e2e.ts:3"}, "properties": {"repobilityId": "be535d69baced588", "scanner": "scanner-primary", "fingerprint": "e5d1234203e92e5d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dafab1aac58f1d7d", "level": "none", "message": {"text": "Commented-code block (11 lines) in tests/channel/event-bridge.test.ts:486"}, "properties": {"repobilityId": "9f667f0b5d2f1550", "scanner": "scanner-primary", "fingerprint": "dafab1aac58f1d7d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a18db0dfa14584d6", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/server/event-queue-observer-split.test.ts:38"}, "properties": {"repobilityId": "9178b857542ca335", "scanner": "scanner-primary", "fingerprint": "a18db0dfa14584d6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-63c5bdd1e7ea17f2", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/server/provider.test.ts:88"}, "properties": {"repobilityId": "af4f69af09a17840", "scanner": "scanner-primary", "fingerprint": "63c5bdd1e7ea17f2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6b936f84d1927748", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/server/typing-presence.test.ts:144"}, "properties": {"repobilityId": "dee1879d15400399", "scanner": "scanner-primary", "fingerprint": "6b936f84d1927748", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-78da2a198a667531", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/server/mdast-ydoc.test.ts:751"}, "properties": {"repobilityId": "8ab46962073da89c", "scanner": "scanner-primary", "fingerprint": "78da2a198a667531", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7a8f2db89a33c590", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/server/rename-route.test.ts:98"}, "properties": {"repobilityId": "7a080ad0e905cf33", "scanner": "scanner-primary", "fingerprint": "7a8f2db89a33c590", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-60f30bf9cb4ba6ec", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/server/annotations.test.ts:312"}, "properties": {"repobilityId": "e4669a6dfd732462", "scanner": "scanner-primary", "fingerprint": "60f30bf9cb4ba6ec", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b447def04a696721", "level": "note", "message": {"text": "Legacy-named symbol `nOld` in tests/server/issue-377-position-diagnostics.test.ts:308"}, "properties": {"repobilityId": "b7a24b87c9c97391", "scanner": "scanner-primary", "fingerprint": "b447def04a696721", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-ae10602257432bca", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/server/issue-377-position-diagnostics.test.ts:85"}, "properties": {"repobilityId": "9f884ff17b7aa796", "scanner": "scanner-primary", "fingerprint": "ae10602257432bca", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e81688d5787b4552", "level": "none", "message": {"text": "Commented-code block (12 lines) in tests/server/docx-comment-export.test.ts:1"}, "properties": {"repobilityId": "03aa880829d06fe3", "scanner": "scanner-primary", "fingerprint": "e81688d5787b4552", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d71ac772f80ea8be", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/server/file-opener-cleanup-on-failure.test.ts:169"}, "properties": {"repobilityId": "8500d179f0cf5c05", "scanner": "scanner-primary", "fingerprint": "d71ac772f80ea8be", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-20ad6dc17f8bd088", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/server/boot-order.test.ts:11"}, "properties": {"repobilityId": "be7b6444de3486f4", "scanner": "scanner-primary", "fingerprint": "20ad6dc17f8bd088", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ec0e07502998c881", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/server/mcp-tool-integration.test.ts:531"}, "properties": {"repobilityId": "0d7b84ff0df662b5", "scanner": "scanner-primary", "fingerprint": "ec0e07502998c881", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3947579c4967a05b", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/server/file-opener-transact-batching.test.ts:175"}, "properties": {"repobilityId": "e6f257d43c578888", "scanner": "scanner-primary", "fingerprint": "3947579c4967a05b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6428b0c97e57abdd", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/server/rename-document.test.ts:253"}, "properties": {"repobilityId": "7db0f29bc16d0d5d", "scanner": "scanner-primary", "fingerprint": "6428b0c97e57abdd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a047bc6f33487ee7", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/server/startup-file.test.ts:9"}, "properties": {"repobilityId": "3b4bd2dc09802525", "scanner": "scanner-primary", "fingerprint": "a047bc6f33487ee7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2fbb906f119597d3", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/server/server-security-invariants.test.ts:82"}, "properties": {"repobilityId": "0593fd8a99811f4e", "scanner": "scanner-primary", "fingerprint": "2fbb906f119597d3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e080532e8f33c644", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/server/reload-from-disk-persistence.test.ts:213"}, "properties": {"repobilityId": "622a49b63065c0d2", "scanner": "scanner-primary", "fingerprint": "e080532e8f33c644", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bd974ea1501224e3", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/server/tutorial-annotations.test.ts:82"}, "properties": {"repobilityId": "3ec7bf85c53a92d6", "scanner": "scanner-primary", "fingerprint": "bd974ea1501224e3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-627bb3d4fab2e1cd", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/server/document-service.test.ts:688"}, "properties": {"repobilityId": "1a0dea7a951c3f4a", "scanner": "scanner-primary", "fingerprint": "627bb3d4fab2e1cd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4ce1710e58862a57", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/server/reaper.test.ts:236"}, "properties": {"repobilityId": "aeed49f5b586560b", "scanner": "scanner-primary", "fingerprint": "4ce1710e58862a57", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8ce937e973b611e3", "level": "note", "message": {"text": "Legacy-named symbol `ann_old` in tests/server/event-queue.test.ts:704"}, "properties": {"repobilityId": "168fccba08ef29fd", "scanner": "scanner-primary", "fingerprint": "8ce937e973b611e3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-87393d262175d686", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/server/event-queue.test.ts:305"}, "properties": {"repobilityId": "91468f301ad93c1b", "scanner": "scanner-primary", "fingerprint": "87393d262175d686", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-39dd0a5e2e4a6a9e", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/server/info-route.test.ts:115"}, "properties": {"repobilityId": "a8d95455d88969b4", "scanner": "scanner-primary", "fingerprint": "39dd0a5e2e4a6a9e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-447b9a68282dc862", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/server/wire-annotation-store-internal-failure.test.ts:8"}, "properties": {"repobilityId": "01a3822841a9ce22", "scanner": "scanner-primary", "fingerprint": "447b9a68282dc862", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c6c4513e3d702938", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/server/launcher/supervisor.test.ts:283"}, "properties": {"repobilityId": "7158c1b607e1d5c2", "scanner": "scanner-primary", "fingerprint": "c6c4513e3d702938", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e9631c713fdebb40", "level": "note", "message": {"text": "Legacy-named symbol `report_v2` in tests/server/file-io/filename-safety.test.ts:13"}, "properties": {"repobilityId": "126e9fb6e7978437", "scanner": "scanner-primary", "fingerprint": "e9631c713fdebb40", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-634309a00749df0a", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/server/file-io/markdown-escaping.test.ts:125"}, "properties": {"repobilityId": "3088b2f1fc8c1859", "scanner": "scanner-primary", "fingerprint": "634309a00749df0a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ec7de8d106deddbd", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/server/integrations/apply-malformed.test.ts:189"}, "properties": {"repobilityId": "ee3fa18a4e0c8878", "scanner": "scanner-primary", "fingerprint": "ec7de8d106deddbd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8caaa3dc6b80f2fd", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/server/integrations/apply.test.ts:82"}, "properties": {"repobilityId": "140dcade52feca01", "scanner": "scanner-primary", "fingerprint": "8caaa3dc6b80f2fd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-88eaa6f74cc85a0a", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/server/integrations/storage.test.ts:154"}, "properties": {"repobilityId": "19a47829adf8151e", "scanner": "scanner-primary", "fingerprint": "88eaa6f74cc85a0a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4e544e460642e40e", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/server/integrations/existing-config.test.ts:36"}, "properties": {"repobilityId": "736c732df0bed915", "scanner": "scanner-primary", "fingerprint": "4e544e460642e40e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-234c2ce026ddb3a7", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/server/integrations/backup.test.ts:113"}, "properties": {"repobilityId": "6e88524d1b6950d6", "scanner": "scanner-primary", "fingerprint": "234c2ce026ddb3a7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1718e37289f8cfd4", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/server/integrations/apply-acl.test.ts:74"}, "properties": {"repobilityId": "845eded073ad1cd5", "scanner": "scanner-primary", "fingerprint": "1718e37289f8cfd4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5ce9a50e4bad0946", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/server/integrations/api-routes.test.ts:558"}, "properties": {"repobilityId": "c64d1599b157647c", "scanner": "scanner-primary", "fingerprint": "5ce9a50e4bad0946", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-076253973e8276c7", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/server/integrations/keychain.test.ts:119"}, "properties": {"repobilityId": "427c3dfea4a534d3", "scanner": "scanner-primary", "fingerprint": "076253973e8276c7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3a271e1a307cd03c", "level": "note", "message": {"text": "Legacy-named symbol `ann_legacy` in tests/server/annotations/sync.test.ts:318"}, "properties": {"repobilityId": "780ed5903c48baea", "scanner": "scanner-primary", "fingerprint": "3a271e1a307cd03c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-44b6c717494dee75", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/server/annotations/sync.test.ts:616"}, "properties": {"repobilityId": "66f6f1036054d0ef", "scanner": "scanner-primary", "fingerprint": "44b6c717494dee75", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-094644dbb32ffdb3", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/server/annotations/migrations/runner.test.ts:94"}, "properties": {"repobilityId": "820c12a2beb6c5a2", "scanner": "scanner-primary", "fingerprint": "094644dbb32ffdb3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d799f9f687aa70d5", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/client/cardMotion.test.ts:12"}, "properties": {"repobilityId": "a02763967dbd5963", "scanner": "scanner-primary", "fingerprint": "d799f9f687aa70d5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-03c8644d82707cad", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/client/use-tandem-settings-migration.test.ts:397"}, "properties": {"repobilityId": "b177d22f6407db82", "scanner": "scanner-primary", "fingerprint": "03c8644d82707cad", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-91501b696f7e1331", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/client/marginCollision.test.ts:154"}, "properties": {"repobilityId": "fbc34a89f03acff4", "scanner": "scanner-primary", "fingerprint": "91501b696f7e1331", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8309aee172751efa", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/client/shortcut-conflicts.test.ts:73"}, "properties": {"repobilityId": "7c900d62126f3099", "scanner": "scanner-primary", "fingerprint": "8309aee172751efa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2fe40190d0be3c18", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/client/MarginColumn.import-author.test.ts:8"}, "properties": {"repobilityId": "56c9d37b5395aef1", "scanner": "scanner-primary", "fingerprint": "2fe40190d0be3c18", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f30af99d33932933", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/client/markdown-paste.test.ts:111"}, "properties": {"repobilityId": "425cccef9b9da873", "scanner": "scanner-primary", "fingerprint": "f30af99d33932933", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-49acdc22519203ae", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/client/annotation-decoration.test.ts:384"}, "properties": {"repobilityId": "b1a6926a44c64444", "scanner": "scanner-primary", "fingerprint": "49acdc22519203ae", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3fb55265faf4b23c", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/client/useIntegrationWizard.test.ts:477"}, "properties": {"repobilityId": "0a21d78d0453acbd", "scanner": "scanner-primary", "fingerprint": "3fb55265faf4b23c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d748a95c7b58367e", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/client/keychain-backend.test.ts:172"}, "properties": {"repobilityId": "e8b46c4428201012", "scanner": "scanner-primary", "fingerprint": "d748a95c7b58367e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9152c60573444fd5", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/client/DocumentTabs.svelte.test.ts:56"}, "properties": {"repobilityId": "bbf338d6a225d4fa", "scanner": "scanner-primary", "fingerprint": "9152c60573444fd5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fca63ecd5ee6d75a", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/client/useMarginPositions.test.ts:115"}, "properties": {"repobilityId": "3ae94a3e50c8d047", "scanner": "scanner-primary", "fingerprint": "fca63ecd5ee6d75a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d9e066b902da998c", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/client/editor-stage.test.ts:115"}, "properties": {"repobilityId": "aa6a139c322ce590", "scanner": "scanner-primary", "fingerprint": "d9e066b902da998c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-971e65f7884bb891", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/client/useTandemSettings.test.ts:158"}, "properties": {"repobilityId": "daa2203b38515c8e", "scanner": "scanner-primary", "fingerprint": "971e65f7884bb891", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1e8ab6e2865b6d3a", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/client/cowork-admin-declined-modal.test.ts:12"}, "properties": {"repobilityId": "3c90bf28cf3ed9f9", "scanner": "scanner-primary", "fingerprint": "1e8ab6e2865b6d3a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5548690958da825c", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/client/tab-reconcile.test.ts:4"}, "properties": {"repobilityId": "5b50b8938a411ba0", "scanner": "scanner-primary", "fingerprint": "5548690958da825c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dbb291aee00d9be4", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/client/keybindings.test.ts:35"}, "properties": {"repobilityId": "45b8fc0c0eea05d4", "scanner": "scanner-primary", "fingerprint": "dbb291aee00d9be4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-23718744f8a4c514", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/client/marginLeaderGeometry.test.ts:34"}, "properties": {"repobilityId": "34820a3ae5008f0d", "scanner": "scanner-primary", "fingerprint": "23718744f8a4c514", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c22dcfd577904252", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/client/cardDensity.test.ts:13"}, "properties": {"repobilityId": "8c9108d9fc0a98c4", "scanner": "scanner-primary", "fingerprint": "c22dcfd577904252", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dfe5bc809e243757", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/client/recent-files.test.ts:52"}, "properties": {"repobilityId": "702242db74b24d4a", "scanner": "scanner-primary", "fingerprint": "dfe5bc809e243757", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2a5df108bd856e64", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/client/useAnnotationReplies.test.ts:12"}, "properties": {"repobilityId": "d59c6833fa8e8e98", "scanner": "scanner-primary", "fingerprint": "2a5df108bd856e64", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f716d3f9a37cd202", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/client/useTauriFileDrop.test.ts:228"}, "properties": {"repobilityId": "28b48e7bc46e7570", "scanner": "scanner-primary", "fingerprint": "f716d3f9a37cd202", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2bd948f63a737bfd", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/cli/dev-standalone.test.ts:56"}, "properties": {"repobilityId": "9e05a29f689680c1", "scanner": "scanner-primary", "fingerprint": "2bd948f63a737bfd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-127d55de4f122299", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/cli/mcp-stdio.test.ts:233"}, "properties": {"repobilityId": "28ee6fbba35bed73", "scanner": "scanner-primary", "fingerprint": "127d55de4f122299", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eaad899fddc4ef5f", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/cli/run-setup-apply.test.ts:3"}, "properties": {"repobilityId": "ce51f449892af3ef", "scanner": "scanner-primary", "fingerprint": "eaad899fddc4ef5f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-42d18129d8cf6659", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/cli/doctor.test.ts:162"}, "properties": {"repobilityId": "0522d67f59d0f4af", "scanner": "scanner-primary", "fingerprint": "42d18129d8cf6659", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7c935cb716e4d222", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/e2e/document-rename.spec.ts:33"}, "properties": {"repobilityId": "895dd3c822da455c", "scanner": "scanner-primary", "fingerprint": "7c935cb716e4d222", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5dc0d353c71de5f4", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/e2e/toolbar-redesign.spec.ts:300"}, "properties": {"repobilityId": "a90593afcf0336a5", "scanner": "scanner-primary", "fingerprint": "5dc0d353c71de5f4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-76d6f882aae0742c", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/e2e/margin-view.spec.ts:151"}, "properties": {"repobilityId": "d446f73977a68b8a", "scanner": "scanner-primary", "fingerprint": "76d6f882aae0742c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d9d99d4a8bdc81fd", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/e2e/keyboard-shortcuts.spec.ts:103"}, "properties": {"repobilityId": "7bca029dcf8f0993", "scanner": "scanner-primary", "fingerprint": "d9d99d4a8bdc81fd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-44001b20abe952eb", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/activity-tray.spec.ts:10"}, "properties": {"repobilityId": "b34fd3f87fe3bd95", "scanner": "scanner-primary", "fingerprint": "44001b20abe952eb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-21dcda4a9a8ed07f", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/e2e/highlight-ux.spec.ts:92"}, "properties": {"repobilityId": "0d8569060720754f", "scanner": "scanner-primary", "fingerprint": "21dcda4a9a8ed07f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-73706d10fc1153e0", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/e2e/annotation-ping.spec.ts:10"}, "properties": {"repobilityId": "21387655ac18a497", "scanner": "scanner-primary", "fingerprint": "73706d10fc1153e0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-801dfb12dbfc8599", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/settings-models.spec.ts:94"}, "properties": {"repobilityId": "a1acaa87de808435", "scanner": "scanner-primary", "fingerprint": "801dfb12dbfc8599", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-66b8356851bc8615", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/e2e/palette-motion.spec.ts:10"}, "properties": {"repobilityId": "6b68983480198838", "scanner": "scanner-primary", "fingerprint": "66b8356851bc8615", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1160ca2fbd7d1053", "level": "none", "message": {"text": "Commented-code block (16 lines) in tests/e2e/accessibility.spec.ts:11"}, "properties": {"repobilityId": "90948013d086fd1d", "scanner": "scanner-primary", "fingerprint": "1160ca2fbd7d1053", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c809b7780d16c87e", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/e2e/integration-wizard.spec.ts:103"}, "properties": {"repobilityId": "d936c66d6bbc0e56", "scanner": "scanner-primary", "fingerprint": "c809b7780d16c87e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0c572e2b8dadd6e6", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/settings-and-filters.spec.ts:85"}, "properties": {"repobilityId": "e677dd38de658248", "scanner": "scanner-primary", "fingerprint": "0c572e2b8dadd6e6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8735e0f35f69dd1f", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/e2e/rail-motion.spec.ts:13"}, "properties": {"repobilityId": "b0633f821bcb78ac", "scanner": "scanner-primary", "fingerprint": "8735e0f35f69dd1f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-afa4f96da13d25a3", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/tab-overflow.spec.ts:127"}, "properties": {"repobilityId": "1dfdc56faf0d4db2", "scanner": "scanner-primary", "fingerprint": "afa4f96da13d25a3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-34e940b5b6b72134", "level": "none", "message": {"text": "Commented-code block (10 lines) in tests/e2e/editor-motion.spec.ts:14"}, "properties": {"repobilityId": "bb928939f0ac400b", "scanner": "scanner-primary", "fingerprint": "34e940b5b6b72134", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-92bd41d061f243e7", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/e2e/settings-modal.spec.ts:14"}, "properties": {"repobilityId": "bf6feab0c61adbb2", "scanner": "scanner-primary", "fingerprint": "92bd41d061f243e7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-74cdcdad3df1de03", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/redesign-final-qa.spec.ts:366"}, "properties": {"repobilityId": "2f44bb0d52817e49", "scanner": "scanner-primary", "fingerprint": "74cdcdad3df1de03", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eaef3ff0e9d74aa9", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/e2e/onboarding-tutorial.spec.ts:50"}, "properties": {"repobilityId": "8f783d8a40b62d42", "scanner": "scanner-primary", "fingerprint": "eaef3ff0e9d74aa9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-13bc2cc8401fa0f5", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/e2e/slash-command-menu.spec.ts:129"}, "properties": {"repobilityId": "47d3444ebf5d067e", "scanner": "scanner-primary", "fingerprint": "13bc2cc8401fa0f5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a56f7fd31f98cb13", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/monitor/sse-parsing.test.ts:203"}, "properties": {"repobilityId": "498f6146ebab2493", "scanner": "scanner-primary", "fingerprint": "a56f7fd31f98cb13", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5a4ae8cbafc8745b", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/monitor/integration.test.ts:6"}, "properties": {"repobilityId": "a2af29d17f93c311", "scanner": "scanner-primary", "fingerprint": "5a4ae8cbafc8745b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-19672dfa0476e957", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/monitor/retry.test.ts:107"}, "properties": {"repobilityId": "361cad5d191fbbbf", "scanner": "scanner-primary", "fingerprint": "19672dfa0476e957", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c03bdf3121a81f10", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/audit-origins.ts:12"}, "properties": {"repobilityId": "9462ec77b914643d", "scanner": "scanner-primary", "fingerprint": "c03bdf3121a81f10", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-54ad292a2d7eea0f", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/e2e-server.mjs:3"}, "properties": {"repobilityId": "ec4cf850eceebca0", "scanner": "scanner-primary", "fingerprint": "54ad292a2d7eea0f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-06847b5f18de4d56", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/kg-lint.mjs:2"}, "properties": {"repobilityId": "f08b1f3cd31a9f31", "scanner": "scanner-primary", "fingerprint": "06847b5f18de4d56", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3fa6e2c066a3466f", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/check-semantic-tokens.ts:240"}, "properties": {"repobilityId": "494f0028321aed8d", "scanner": "scanner-primary", "fingerprint": "3fa6e2c066a3466f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7a9f17e6669b8173", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/design-baselines/capture.spec.ts:142"}, "properties": {"repobilityId": "699cbfa02ba388dd", "scanner": "scanner-primary", "fingerprint": "7a9f17e6669b8173", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1b5c3ee208e039e4", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/spikes/probe-monitor-viability.ts:184"}, "properties": {"repobilityId": "b9cd1ca63cbbf11c", "scanner": "scanner-primary", "fingerprint": "1b5c3ee208e039e4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-208f865cb0e49bba", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/spikes/libreoffice-poc.mjs:145"}, "properties": {"repobilityId": "56cad49587e2427e", "scanner": "scanner-primary", "fingerprint": "208f865cb0e49bba", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e4208feb082f75aa", "level": "none", "message": {"text": "Commented-code block (10 lines) in scripts/spikes/probe-launcher.mjs:4"}, "properties": {"repobilityId": "dcbc17338757d418", "scanner": "scanner-primary", "fingerprint": "e4208feb082f75aa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-195a0dd46760412e", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/spikes/probe-session-resume.ts:230"}, "properties": {"repobilityId": "0c95105e87d8c503", "scanner": "scanner-primary", "fingerprint": "195a0dd46760412e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-634de5be8c339dc0", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/ci/stdio-smoke.mjs:49"}, "properties": {"repobilityId": "db783de364fe8abd", "scanner": "scanner-primary", "fingerprint": "634de5be8c339dc0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-29bee352eb7fd0d1", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/channel/run.ts:113"}, "properties": {"repobilityId": "db1fdc1cc0bcd822", "scanner": "scanner-primary", "fingerprint": "29bee352eb7fd0d1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5d5e38be80418ef3", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/server/index.ts:106"}, "properties": {"repobilityId": "d57823a69405c2f7", "scanner": "scanner-primary", "fingerprint": "5d5e38be80418ef3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-47dd040a91f85372", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/positions.ts:406"}, "properties": {"repobilityId": "e67a79bec7ae57eb", "scanner": "scanner-primary", "fingerprint": "47dd040a91f85372", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a9fbe30a308e3736", "level": "none", "message": {"text": "Commented-code block (11 lines) in src/server/launcher/supervisor.ts:308"}, "properties": {"repobilityId": "f3babfe40e028761", "scanner": "scanner-primary", "fingerprint": "a9fbe30a308e3736", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-82cdc2cffb204fda", "level": "none", "message": {"text": "Commented-code block (15 lines) in src/server/file-io/docx-comment-export.ts:8"}, "properties": {"repobilityId": "97d0dc7a0349886a", "scanner": "scanner-primary", "fingerprint": "82cdc2cffb204fda", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-826a410d10368766", "level": "note", "message": {"text": "Legacy-named symbol `tooOld` in src/server/file-io/doc-backup.ts:459"}, "properties": {"repobilityId": "c863235dbb1a2604", "scanner": "scanner-primary", "fingerprint": "826a410d10368766", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-cce3d35e7be58d4a", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/server/file-io/doc-backup.ts:483"}, "properties": {"repobilityId": "aa1044df115dd36f", "scanner": "scanner-primary", "fingerprint": "cce3d35e7be58d4a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-071e35dc1e60918e", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/server/file-io/mdast-ydoc.ts:102"}, "properties": {"repobilityId": "004d094eb8ec569b", "scanner": "scanner-primary", "fingerprint": "071e35dc1e60918e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7499f93892a9137a", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/file-io/docx-comments.ts:259"}, "properties": {"repobilityId": "f3156cd23c60a1e7", "scanner": "scanner-primary", "fingerprint": "7499f93892a9137a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4867179b631191d2", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/server/file-io/filename-safety.ts:88"}, "properties": {"repobilityId": "10732ddf930a19c4", "scanner": "scanner-primary", "fingerprint": "4867179b631191d2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e6ceda9d8be3980e", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/server/file-io/spike-docx-export.ts:12"}, "properties": {"repobilityId": "39077576f91e5efd", "scanner": "scanner-primary", "fingerprint": "e6ceda9d8be3980e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-51360ad3cf5a4976", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/file-io/markdown.ts:89"}, "properties": {"repobilityId": "f1f8f059fe37dd9e", "scanner": "scanner-primary", "fingerprint": "51360ad3cf5a4976", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3d7ff65a5d824460", "level": "none", "message": {"text": "Commented-code block (10 lines) in src/server/file-io/docx-export.ts:8"}, "properties": {"repobilityId": "8160627233cc1a10", "scanner": "scanner-primary", "fingerprint": "3d7ff65a5d824460", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c6a3351e90ce409e", "level": "note", "message": {"text": "Legacy-named symbol `tooOld` in src/server/file-io/reaper.ts:96"}, "properties": {"repobilityId": "7075881c1065c11c", "scanner": "scanner-primary", "fingerprint": "c6a3351e90ce409e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-2654405301200835", "level": "none", "message": {"text": "Commented-code block (8 lines) in src/server/integrations/existing-config.ts:219"}, "properties": {"repobilityId": "6d1a937f0bc95cb4", "scanner": "scanner-primary", "fingerprint": "2654405301200835", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ea562ae2244ec387", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/integrations/storage.ts:111"}, "properties": {"repobilityId": "65aa2448f4a9e512", "scanner": "scanner-primary", "fingerprint": "ea562ae2244ec387", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-50834c6b30cf4123", "level": "none", "message": {"text": "Commented-code block (9 lines) in src/server/integrations/install-claude-cli.ts:153"}, "properties": {"repobilityId": "44bca705138bcd49", "scanner": "scanner-primary", "fingerprint": "50834c6b30cf4123", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cad45e84116984d1", "level": "none", "message": {"text": "Commented-code block (9 lines) in src/server/integrations/acl-win.ts:145"}, "properties": {"repobilityId": "d2e9d242ab3c6fee", "scanner": "scanner-primary", "fingerprint": "cad45e84116984d1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c021717fc4a9a203", "level": "none", "message": {"text": "Commented-code block (8 lines) in src/server/integrations/apply.ts:380"}, "properties": {"repobilityId": "ea49bdb63db1fb55", "scanner": "scanner-primary", "fingerprint": "c021717fc4a9a203", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-781e25da7ab2980f", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/integrations/api-routes.ts:373"}, "properties": {"repobilityId": "3f5e84452248e1e7", "scanner": "scanner-primary", "fingerprint": "781e25da7ab2980f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-525ee53b2bb21bfe", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/yjs/provider.ts:32"}, "properties": {"repobilityId": "cda3b709b9916097", "scanner": "scanner-primary", "fingerprint": "525ee53b2bb21bfe", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5937b1639eaae94b", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/annotations/schema.ts:177"}, "properties": {"repobilityId": "a9717c4b3c7bb12a", "scanner": "scanner-primary", "fingerprint": "5937b1639eaae94b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7ef5e1843e90939f", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/server/annotations/store.ts:236"}, "properties": {"repobilityId": "574cb3147c7378d5", "scanner": "scanner-primary", "fingerprint": "7ef5e1843e90939f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4b8c5159e26cd0bd", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/server/annotations/sync.ts:261"}, "properties": {"repobilityId": "ed93d7781ce9b10c", "scanner": "scanner-primary", "fingerprint": "4b8c5159e26cd0bd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2bfc8ab354b8608c", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/annotations/lifecycle.ts:61"}, "properties": {"repobilityId": "9e6318c9b265dea6", "scanner": "scanner-primary", "fingerprint": "2bfc8ab354b8608c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-18a0f8137024b0fb", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/server/annotations/rename-recovery.ts:82"}, "properties": {"repobilityId": "8180198f956b07a8", "scanner": "scanner-primary", "fingerprint": "18a0f8137024b0fb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ffc96df55a2f4aaf", "level": "note", "message": {"text": "Legacy-named symbol `v1_to_v2` in src/server/annotations/migrations/index.ts:3"}, "properties": {"repobilityId": "b4010b48cd7739fd", "scanner": "scanner-primary", "fingerprint": "ffc96df55a2f4aaf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-d2280623610ebdd2", "level": "note", "message": {"text": "Legacy-named symbol `v1_to_v2` in src/server/annotations/migrations/runner.ts:23"}, "properties": {"repobilityId": "e686dc7b4100c98d", "scanner": "scanner-primary", "fingerprint": "d2280623610ebdd2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-5519b13a59d780cf", "level": "note", "message": {"text": "Legacy-named symbol `v1_to_v2` in src/server/annotations/migrations/v1_to_v2.ts:27"}, "properties": {"repobilityId": "140431c253ebe250", "scanner": "scanner-primary", "fingerprint": "5519b13a59d780cf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-fa3f8821cd2cce95", "level": "none", "message": {"text": "Commented-code block (9 lines) in src/server/annotations/migrations/v1_to_v2.ts:25"}, "properties": {"repobilityId": "e37aeded3da91719", "scanner": "scanner-primary", "fingerprint": "fa3f8821cd2cce95", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-345c1af3a81cda6c", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/mcp/server.ts:66"}, "properties": {"repobilityId": "cf31dc43e4b8e0fe", "scanner": "scanner-primary", "fingerprint": "345c1af3a81cda6c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0d6711df4f1d2c61", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/server/mcp/document.ts:560"}, "properties": {"repobilityId": "09837afd88d4d539", "scanner": "scanner-primary", "fingerprint": "0d6711df4f1d2c61", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0d2fca6ed9ece36f", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/server/mcp/convert.ts:90"}, "properties": {"repobilityId": "c2388e263fc285a9", "scanner": "scanner-primary", "fingerprint": "0d2fca6ed9ece36f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-08d5a7a3e2fe17e9", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/server/mcp/docx-apply.ts:46"}, "properties": {"repobilityId": "deab44185077dd27", "scanner": "scanner-primary", "fingerprint": "08d5a7a3e2fe17e9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-180874cf968d584c", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/mcp/document-service.ts:194"}, "properties": {"repobilityId": "8f776ccba47b2497", "scanner": "scanner-primary", "fingerprint": "180874cf968d584c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d24a1b1715122c9a", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/mcp/channel-routes.ts:54"}, "properties": {"repobilityId": "0681ef14b4c264b2", "scanner": "scanner-primary", "fingerprint": "d24a1b1715122c9a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e9fa02ce1fc893b2", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/mcp/file-opener.ts:121"}, "properties": {"repobilityId": "6bf77b5749b05834", "scanner": "scanner-primary", "fingerprint": "e9fa02ce1fc893b2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c2d89357872a2e92", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/server/mcp/awareness.ts:107"}, "properties": {"repobilityId": "a368a308fd5961d3", "scanner": "scanner-primary", "fingerprint": "c2d89357872a2e92", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-554ce695874f3b24", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/mcp/annotations.ts:152"}, "properties": {"repobilityId": "3b926c44df7c607d", "scanner": "scanner-primary", "fingerprint": "554ce695874f3b24", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ffe30fe7c86a3a5e", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/mcp/api-routes.ts:186"}, "properties": {"repobilityId": "19db1e4530907da1", "scanner": "scanner-primary", "fingerprint": "ffe30fe7c86a3a5e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3f5e15ba0bc9e829", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/server/mcp/routes/_shared.ts:78"}, "properties": {"repobilityId": "b4ccde912e682dfd", "scanner": "scanner-primary", "fingerprint": "3f5e15ba0bc9e829", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-799bb9250a01e663", "level": "none", "message": {"text": "Commented-code block (12 lines) in src/server/mcp/routes/rename.ts:27"}, "properties": {"repobilityId": "c6ce2e953f2922f8", "scanner": "scanner-primary", "fingerprint": "799bb9250a01e663", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-48334e8b50f1cc74", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/server/mcp/routes/shutdown.ts:34"}, "properties": {"repobilityId": "2c49e53c3f445a9b", "scanner": "scanner-primary", "fingerprint": "48334e8b50f1cc74", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d993e0a013112aaf", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/events/file-sync-registry.ts:64"}, "properties": {"repobilityId": "e7db6772b7f95d73", "scanner": "scanner-primary", "fingerprint": "d993e0a013112aaf", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bd31dd41f0cf24e4", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/server/events/observers/replies.ts:25"}, "properties": {"repobilityId": "07151f528d14e697", "scanner": "scanner-primary", "fingerprint": "bd31dd41f0cf24e4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-261d51b38c9bf4f8", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/events/observers/annotations.ts:33"}, "properties": {"repobilityId": "b410b4805d51f6b0", "scanner": "scanner-primary", "fingerprint": "261d51b38c9bf4f8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-03efe04b9fd5e754", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/server/documents/registry.ts:41"}, "properties": {"repobilityId": "de080cd8e7a734ce", "scanner": "scanner-primary", "fingerprint": "03efe04b9fd5e754", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f8db22b8da0359e0", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/client/sentry.ts:104"}, "properties": {"repobilityId": "9878f9b241c976da", "scanner": "scanner-primary", "fingerprint": "f8db22b8da0359e0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2769cfbf90877b6d", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/client/panels/annotation-context-menu.ts:3"}, "properties": {"repobilityId": "a98c4121ae45b863", "scanner": "scanner-primary", "fingerprint": "2769cfbf90877b6d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-13a7e51194df65a3", "level": "none", "message": {"text": "Commented-code block (10 lines) in src/client/panels/useAnnotationReview.svelte.ts:220"}, "properties": {"repobilityId": "007a2cc6828a6d1f", "scanner": "scanner-primary", "fingerprint": "13a7e51194df65a3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-740f1c7713b577c5", "level": "none", "message": {"text": "Commented-code block (9 lines) in src/client/panels/annotation-context-menu-host.ts:8"}, "properties": {"repobilityId": "2d50f542a3ecf9ea", "scanner": "scanner-primary", "fingerprint": "740f1c7713b577c5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f192495659340bd7", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/client/hooks/useAppShortcuts.ts:132"}, "properties": {"repobilityId": "a48241a3dcc791fa", "scanner": "scanner-primary", "fingerprint": "f192495659340bd7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-08489ce69da9d321", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/client/hooks/useTauriFileDrop.svelte.ts:164"}, "properties": {"repobilityId": "16912049e3a2c78a", "scanner": "scanner-primary", "fingerprint": "08489ce69da9d321", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-31e763cc1a4e3212", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/client/hooks/useIntegrationWizard.svelte.ts:243"}, "properties": {"repobilityId": "2f5a6d49a2ad8207", "scanner": "scanner-primary", "fingerprint": "31e763cc1a4e3212", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ee21b9db7490c1b5", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/client/hooks/useTandemSettings.ts:24"}, "properties": {"repobilityId": "50290c1b9fa68b06", "scanner": "scanner-primary", "fingerprint": "ee21b9db7490c1b5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-af14d6533b572b5f", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/client/hooks/useUpdaterChannel.svelte.ts:64"}, "properties": {"repobilityId": "2cd8202f7c2280a6", "scanner": "scanner-primary", "fingerprint": "af14d6533b572b5f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-76772af6996106c3", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/client/hooks/useScratchpadPersistence.svelte.ts:170"}, "properties": {"repobilityId": "7b36a1d4f8e41922", "scanner": "scanner-primary", "fingerprint": "76772af6996106c3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6f857b071285836e", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/client/hooks/useAiReadiness.svelte.ts:104"}, "properties": {"repobilityId": "2e2bde892c9751d6", "scanner": "scanner-primary", "fingerprint": "6f857b071285836e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8b585b7532a20701", "level": "none", "message": {"text": "Commented-code block (8 lines) in src/client/hooks/useTandemSettings.svelte.ts:124"}, "properties": {"repobilityId": "96302056d79bb76c", "scanner": "scanner-primary", "fingerprint": "8b585b7532a20701", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-194b1ff123eb1949", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/client/hooks/useClaudeCliStatus.svelte.ts:114"}, "properties": {"repobilityId": "60c9bb78b4c66326", "scanner": "scanner-primary", "fingerprint": "194b1ff123eb1949", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e1393046ede8358c", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/client/hooks/yjsSync.svelte.ts:246"}, "properties": {"repobilityId": "334dee6c8d43634d", "scanner": "scanner-primary", "fingerprint": "e1393046ede8358c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-33ae7a76e9412f1c", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/client/layout/editor-stage.svelte.ts:72"}, "properties": {"repobilityId": "f5d71522182c27a5", "scanner": "scanner-primary", "fingerprint": "33ae7a76e9412f1c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f6d3dea5e339504a", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/client/editor/extensions/heading-collapse.ts:229"}, "properties": {"repobilityId": "27ee2132776015fc", "scanner": "scanner-primary", "fingerprint": "f6d3dea5e339504a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-009726d72c2095c0", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/client/editor/extensions/list-item-checkbox.ts:46"}, "properties": {"repobilityId": "b04fbe6f4bc38a94", "scanner": "scanner-primary", "fingerprint": "009726d72c2095c0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bc8d75bafabe0899", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/client/editor/extensions/annotationPing.ts:180"}, "properties": {"repobilityId": "394a61bc01c7a6fa", "scanner": "scanner-primary", "fingerprint": "bc8d75bafabe0899", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a163103476ae721b", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/client/editor/utils/plain-paste.ts:6"}, "properties": {"repobilityId": "d9ea300060b8917d", "scanner": "scanner-primary", "fingerprint": "a163103476ae721b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-faea1d474c79277c", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/client/editor/utils/markdown-paste.ts:3"}, "properties": {"repobilityId": "fb55a6ceda3ae74e", "scanner": "scanner-primary", "fingerprint": "faea1d474c79277c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ed62ea6dad6b190f", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/client/editor/context-menu/detect.ts:3"}, "properties": {"repobilityId": "ca8ef61d8d8b0734", "scanner": "scanner-primary", "fingerprint": "ed62ea6dad6b190f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9f333dc33be18ee2", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/client/editor/context-menu/install.ts:7"}, "properties": {"repobilityId": "f2c11e45916da2fb", "scanner": "scanner-primary", "fingerprint": "9f333dc33be18ee2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e64dda684effedee", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/client/editor/context-menu/types.ts:3"}, "properties": {"repobilityId": "2dc511eab8b2c716", "scanner": "scanner-primary", "fingerprint": "e64dda684effedee", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b0792f1f5bec77db", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/client/editor/context-menu/dispatch.ts:17"}, "properties": {"repobilityId": "102fce1972e08971", "scanner": "scanner-primary", "fingerprint": "b0792f1f5bec77db", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d1c1cb8b8e0eb9c3", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/client/editor/slash-menu/extension.ts:287"}, "properties": {"repobilityId": "35da69a93f3119b6", "scanner": "scanner-primary", "fingerprint": "d1c1cb8b8e0eb9c3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-720afdf8c0338d13", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/client/editor/slash-menu/suppression.ts:44"}, "properties": {"repobilityId": "282e067366115277", "scanner": "scanner-primary", "fingerprint": "720afdf8c0338d13", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4ef1f3a206d6bfe4", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/client/editor/toolbar/highlight-toggle.ts:66"}, "properties": {"repobilityId": "f70f2f1f0da2f1ab", "scanner": "scanner-primary", "fingerprint": "4ef1f3a206d6bfe4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-859b5cc645af524d", "level": "none", "message": {"text": "Commented-code block (10 lines) in src/client/editor/toolbar/selection-toolbar.ts:13"}, "properties": {"repobilityId": "92fbea8f3f141792", "scanner": "scanner-primary", "fingerprint": "859b5cc645af524d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-aa384fe88009a57c", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/client/keychain/keychain-backend.ts:118"}, "properties": {"repobilityId": "b6d1a62934466982", "scanner": "scanner-primary", "fingerprint": "aa384fe88009a57c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ba0808fcbe91b0b3", "level": "none", "message": {"text": "Commented-code block (9 lines) in src/client/actions/builtin.svelte.ts:324"}, "properties": {"repobilityId": "4f992a01cdc02e29", "scanner": "scanner-primary", "fingerprint": "ba0808fcbe91b0b3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-31f565463df2cc79", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/client/actions/static-shortcuts.ts:1"}, "properties": {"repobilityId": "45e0524e991ccb6b", "scanner": "scanner-primary", "fingerprint": "31f565463df2cc79", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3f3068f73477cc29", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/cli/index.ts:16"}, "properties": {"repobilityId": "65b3361d6a59a6da", "scanner": "scanner-primary", "fingerprint": "3f3068f73477cc29", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-22fbc063f8c29150", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/cli/setup.ts:150"}, "properties": {"repobilityId": "54715d717805f1c6", "scanner": "scanner-primary", "fingerprint": "22fbc063f8c29150", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a0bf9090683c58d9", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/cli/rotate-token.ts:21"}, "properties": {"repobilityId": "619c70387c9ff553", "scanner": "scanner-primary", "fingerprint": "a0bf9090683c58d9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ee27275ef0387d3d", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/cli/mcp-stdio.ts:41"}, "properties": {"repobilityId": "93a99b8f18f40d6f", "scanner": "scanner-primary", "fingerprint": "ee27275ef0387d3d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-be8d916b6044ac47", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/shared/constants.ts:23"}, "properties": {"repobilityId": "92f304a83113fbff", "scanner": "scanner-primary", "fingerprint": "be8d916b6044ac47", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bf15eeee36651a25", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/shared/cli-runtime.ts:170"}, "properties": {"repobilityId": "3b7215e792be413f", "scanner": "scanner-primary", "fingerprint": "bf15eeee36651a25", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-adc6aebd2c33568d", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/shared/sse-consumer.ts:484"}, "properties": {"repobilityId": "5c7d245fed273fb2", "scanner": "scanner-primary", "fingerprint": "adc6aebd2c33568d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-502222884e168913", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/shared/sanitize.ts:106"}, "properties": {"repobilityId": "01a221ce1385b23c", "scanner": "scanner-primary", "fingerprint": "502222884e168913", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b2d48bf712e0b3a3", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/monitor/index.ts:67"}, "properties": {"repobilityId": "9cebc4870c55b29c", "scanner": "scanner-primary", "fingerprint": "b2d48bf712e0b3a3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ca395a18e146a116", "level": "note", "message": {"text": "38 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "44b4fc87d4005415", "scanner": "scanner-primary", "fingerprint": "ca395a18e146a116", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-a5ce321893cfa6fc", "level": "error", "message": {"text": "Dangling fetch: GET /api/info (tests/tauri-driver/specs/prevent-default.e2e.ts:140)"}, "properties": {"repobilityId": "b266594f15675ac1", "scanner": "scanner-primary", "fingerprint": "a5ce321893cfa6fc", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-a044696216b572fd", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:${address.port}${url} (tests/server/sessions-routes.test.ts:70)"}, "properties": {"repobilityId": "f9251fef3ed254c0", "scanner": "scanner-primary", "fingerprint": "a044696216b572fd", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-8320f41dcb2da5af", "level": "error", "message": {"text": "Dangling fetch: POST http://127.0.0.1:${address.port}${API_STORE_RECLAIM_LOCK} (tests/server/store-reclaim-route.test.ts:60)"}, "properties": {"repobilityId": "5fef2cffc5b9bcd5", "scanner": "scanner-primary", "fingerprint": "8320f41dcb2da5af", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-e1b5add8dc1665a3", "level": "error", "message": {"text": "Dangling fetch: POST http://127.0.0.1:${address.port}${API_SHUTDOWN} (tests/server/shutdown-route.test.ts:48)"}, "properties": {"repobilityId": "35b71e0df1befa80", "scanner": "scanner-primary", "fingerprint": "e1b5add8dc1665a3", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-0f2501b1a8e06938", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:${port}/.well-known/oauth-protected-resource (tests/server/server-security-invariants.test.ts:40)"}, "properties": {"repobilityId": "ab8417538115daf6", "scanner": "scanner-primary", "fingerprint": "0f2501b1a8e06938", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-f8d0fd1d836af52b", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:${port}/.well-known/oauth-protected-resource/mcp (tests/server/server-security-invariants.test.ts:52)"}, "properties": {"repobilityId": "18b1068d1024d581", "scanner": "scanner-primary", "fingerprint": "f8d0fd1d836af52b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-14759cc259182c38", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:${port}/.well-known/oauth-protected-resource (tests/server/server-security-invariants.test.ts:64)"}, "properties": {"repobilityId": "9c42994bd992145d", "scanner": "scanner-primary", "fingerprint": "14759cc259182c38", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-30d16290629bad8f", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:${port}/health (tests/server/server-security-invariants.test.ts:90)"}, "properties": {"repobilityId": "6427d15eb1bc879f", "scanner": "scanner-primary", "fingerprint": "30d16290629bad8f", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-22dc22c405ce655a", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:${port}/health (tests/server/server-security-invariants.test.ts:102)"}, "properties": {"repobilityId": "7ef1b7b2f23c0cf8", "scanner": "scanner-primary", "fingerprint": "22dc22c405ce655a", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-b3ccf86e64613e4c", "level": "error", "message": {"text": "Dangling fetch: POST http://127.0.0.1:${port}/api/rotate-token (tests/server/rotate-token-route.test.ts:76)"}, "properties": {"repobilityId": "bb2ee9e5f07a0231", "scanner": "scanner-primary", "fingerprint": "b3ccf86e64613e4c", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-d7bdc113800171d2", "level": "error", "message": {"text": "Dangling fetch: POST http://127.0.0.1:${port}/api/rotate-token (tests/server/rotate-token-route.test.ts:98)"}, "properties": {"repobilityId": "c8daf7e7a848c901", "scanner": "scanner-primary", "fingerprint": "d7bdc113800171d2", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-e90888c2c275aaef", "level": "error", "message": {"text": "Dangling fetch: POST http://127.0.0.1:${port}/api/rotate-token (tests/server/rotate-token-route.test.ts:114)"}, "properties": {"repobilityId": "a812470ff5798f79", "scanner": "scanner-primary", "fingerprint": "e90888c2c275aaef", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-97b216a6b1b8d025", "level": "error", "message": {"text": "Dangling fetch: POST http://127.0.0.1:${port}/api/rotate-token (tests/server/rotate-token-route.test.ts:132)"}, "properties": {"repobilityId": "7a95e43ea9bc6b06", "scanner": "scanner-primary", "fingerprint": "97b216a6b1b8d025", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-2d2bce73eba577bb", "level": "error", "message": {"text": "Dangling fetch: POST http://127.0.0.1:${port}/api/rotate-token (tests/server/rotate-token-route.test.ts:150)"}, "properties": {"repobilityId": "ba52be011ea58699", "scanner": "scanner-primary", "fingerprint": "2d2bce73eba577bb", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-80f9c603f83d9dce", "level": "error", "message": {"text": "Dangling fetch: POST http://127.0.0.1:${noTokenPort}/api/rotate-token (tests/server/rotate-token-route.test.ts:179)"}, "properties": {"repobilityId": "9dec5b8802e5c425", "scanner": "scanner-primary", "fingerprint": "80f9c603f83d9dce", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-f5337ca09d5a9186", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:${port}${url} (tests/server/launcher/api-routes.test.ts:106)"}, "properties": {"repobilityId": "9f6fe7b213be9cbd", "scanner": "scanner-primary", "fingerprint": "f5337ca09d5a9186", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-a422c6806c7da115", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:${port}${url} (tests/server/integrations/api-routes.test.ts:129)"}, "properties": {"repobilityId": "092503c2224f2bf6", "scanner": "scanner-primary", "fingerprint": "a422c6806c7da115", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-c525a25143a533b7", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:${port}${url} (tests/server/models/api-routes.test.ts:92)"}, "properties": {"repobilityId": "43fff2773e922b46", "scanner": "scanner-primary", "fingerprint": "c525a25143a533b7", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-c647236977c62045", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:${DEFAULT_MCP_PORT}${API_INFO} (src/client/hooks/yjsSync.svelte.ts:194)"}, "properties": {"repobilityId": "cf7b03e3912f0450", "scanner": "scanner-primary", "fingerprint": "c647236977c62045", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-c35118e3bb707b3e", "level": "error", "message": {"text": "Dangling fetch: POST http://127.0.0.1:${DEFAULT_MCP_PORT}${API_CLOSE} (src/client/hooks/yjsSync.svelte.ts:579)"}, "properties": {"repobilityId": "1ff35a2408460d27", "scanner": "scanner-primary", "fingerprint": "c35118e3bb707b3e", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-b385768236d3ca9d", "level": "error", "message": {"text": "Dangling fetch: POST http://127.0.0.1:${DEFAULT_MCP_PORT}${API_RENAME} (src/client/hooks/yjsSync.svelte.ts:610)"}, "properties": {"repobilityId": "39fba5a25991dffd", "scanner": "scanner-primary", "fingerprint": "b385768236d3ca9d", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-2d4ad00765699426", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:${mcpPort}/api/events (src/cli/doctor.ts:377)"}, "properties": {"repobilityId": "4ab9ff135a809333", "scanner": "scanner-primary", "fingerprint": "2d4ad00765699426", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "helper:request"]}}, {"ruleId": "scanner-239a938869adf673", "level": "note", "message": {"text": "Unused endpoint: POST /mcp"}, "properties": {"repobilityId": "17d443e4bc6e579f", "scanner": "scanner-primary", "fingerprint": "239a938869adf673", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cc1d680cdc3d6aa1", "level": "note", "message": {"text": "Unused endpoint: GET /mcp"}, "properties": {"repobilityId": "397e6e495f0e79fb", "scanner": "scanner-primary", "fingerprint": "cc1d680cdc3d6aa1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-56b4efafa0127feb", "level": "note", "message": {"text": "Unused endpoint: DELETE /mcp"}, "properties": {"repobilityId": "a1ce3cb79d396847", "scanner": "scanner-primary", "fingerprint": "56b4efafa0127feb", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0de5d84fb5ba1a7f", "level": "note", "message": {"text": "Unused endpoint: POST /webhooks/license"}, "properties": {"repobilityId": "0439ef6840fa3048", "scanner": "scanner-primary", "fingerprint": "0de5d84fb5ba1a7f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-95e266019920938e", "level": "note", "message": {"text": "Unused endpoint: USE /mcp"}, "properties": {"repobilityId": "ced53efdeec7e006", "scanner": "scanner-primary", "fingerprint": "95e266019920938e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-dde3adb27bf7eebe", "level": "note", "message": {"text": "Unused endpoint: USE /api"}, "properties": {"repobilityId": "ad55908e7dc77088", "scanner": "scanner-primary", "fingerprint": "dde3adb27bf7eebe", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-77a21e69b379a5bf", "level": "note", "message": {"text": "Unused endpoint: GET /{*path}"}, "properties": {"repobilityId": "9829e03a1a676e78", "scanner": "scanner-primary", "fingerprint": "77a21e69b379a5bf", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}