1 line
48 KiB
JSON
1 line
48 KiB
JSON
{"version":"1.175.0","results":[{"check_id":"javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring","path":".forum/poc-g1/ontology_poc.ts","start":{"line":111,"col":15,"offset":3296},"end":{"line":111,"col":61,"offset":3342},"extra":{"message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string.","metadata":{"cwe":["CWE-134: Use of Externally-Controlled Format String"],"owasp":["A01:2021 - Broken Access Control","A01:2025 - Broken Access Control"],"category":"security","technology":["javascript"],"subcategory":["audit"],"likelihood":"MEDIUM","impact":"LOW","confidence":"LOW","references":["https://cwe.mitre.org/data/definitions/134.html"],"license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Improper Validation"],"source":"https://semgrep.dev/r/javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring","shortlink":"https://sg.run/7Y5R"},"severity":"INFO","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring","path":".forum/src/agents/adversary.ts","start":{"line":56,"col":19,"offset":1394},"end":{"line":56,"col":55,"offset":1430},"extra":{"message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string.","metadata":{"cwe":["CWE-134: Use of Externally-Controlled Format String"],"owasp":["A01:2021 - Broken Access Control","A01:2025 - Broken Access Control"],"category":"security","technology":["javascript"],"subcategory":["audit"],"likelihood":"MEDIUM","impact":"LOW","confidence":"LOW","references":["https://cwe.mitre.org/data/definitions/134.html"],"license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Improper Validation"],"source":"https://semgrep.dev/r/javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring","shortlink":"https://sg.run/7Y5R"},"severity":"INFO","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring","path":".forum/src/agents/analyst.ts","start":{"line":59,"col":19,"offset":1426},"end":{"line":59,"col":55,"offset":1462},"extra":{"message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string.","metadata":{"cwe":["CWE-134: Use of Externally-Controlled Format String"],"owasp":["A01:2021 - Broken Access Control","A01:2025 - Broken Access Control"],"category":"security","technology":["javascript"],"subcategory":["audit"],"likelihood":"MEDIUM","impact":"LOW","confidence":"LOW","references":["https://cwe.mitre.org/data/definitions/134.html"],"license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Improper Validation"],"source":"https://semgrep.dev/r/javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring","shortlink":"https://sg.run/7Y5R"},"severity":"INFO","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring","path":".forum/src/agents/evaluator.ts","start":{"line":91,"col":19,"offset":2506},"end":{"line":91,"col":55,"offset":2542},"extra":{"message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string.","metadata":{"cwe":["CWE-134: Use of Externally-Controlled Format String"],"owasp":["A01:2021 - Broken Access Control","A01:2025 - Broken Access Control"],"category":"security","technology":["javascript"],"subcategory":["audit"],"likelihood":"MEDIUM","impact":"LOW","confidence":"LOW","references":["https://cwe.mitre.org/data/definitions/134.html"],"license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Improper Validation"],"source":"https://semgrep.dev/r/javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring","shortlink":"https://sg.run/7Y5R"},"severity":"INFO","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring","path":".forum/src/agents/gatekeeper.ts","start":{"line":65,"col":19,"offset":1648},"end":{"line":65,"col":55,"offset":1684},"extra":{"message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string.","metadata":{"cwe":["CWE-134: Use of Externally-Controlled Format String"],"owasp":["A01:2021 - Broken Access Control","A01:2025 - Broken Access Control"],"category":"security","technology":["javascript"],"subcategory":["audit"],"likelihood":"MEDIUM","impact":"LOW","confidence":"LOW","references":["https://cwe.mitre.org/data/definitions/134.html"],"license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Improper Validation"],"source":"https://semgrep.dev/r/javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring","shortlink":"https://sg.run/7Y5R"},"severity":"INFO","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring","path":".forum/src/agents/translator.ts","start":{"line":55,"col":19,"offset":1343},"end":{"line":55,"col":55,"offset":1379},"extra":{"message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string.","metadata":{"cwe":["CWE-134: Use of Externally-Controlled Format String"],"owasp":["A01:2021 - Broken Access Control","A01:2025 - Broken Access Control"],"category":"security","technology":["javascript"],"subcategory":["audit"],"likelihood":"MEDIUM","impact":"LOW","confidence":"LOW","references":["https://cwe.mitre.org/data/definitions/134.html"],"license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Improper Validation"],"source":"https://semgrep.dev/r/javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring","shortlink":"https://sg.run/7Y5R"},"severity":"INFO","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring","path":".forum/src/core/meta_state_manager.ts","start":{"line":152,"col":19,"offset":4601},"end":{"line":152,"col":55,"offset":4637},"extra":{"message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string.","metadata":{"cwe":["CWE-134: Use of Externally-Controlled Format String"],"owasp":["A01:2021 - Broken Access Control","A01:2025 - Broken Access Control"],"category":"security","technology":["javascript"],"subcategory":["audit"],"likelihood":"MEDIUM","impact":"LOW","confidence":"LOW","references":["https://cwe.mitre.org/data/definitions/134.html"],"license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Improper Validation"],"source":"https://semgrep.dev/r/javascript.lang.security.audit.unsafe-formatstring.unsafe-formatstring","shortlink":"https://sg.run/7Y5R"},"severity":"INFO","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.browser.security.open-redirect.js-open-redirect","path":"public/auth-client.js","start":{"line":56,"col":31,"offset":1731},"end":{"line":56,"col":45,"offset":1745},"extra":{"message":"The application accepts potentially user-controlled input `$PROP` which can control the location of the current window context. This can lead two types of vulnerabilities open-redirection and Cross-Site-Scripting (XSS) with JavaScript URIs. It is recommended to validate user-controllable input before allowing it to control the redirection.","metadata":{"interfile":true,"cwe":["CWE-601: URL Redirection to Untrusted Site ('Open Redirect')"],"owasp":["A01:2021 - Broken Access Control","A01:2025 - Broken Access Control"],"asvs":{"control_id":"5.5.1 Insecue Redirect","control_url":"https://github.com/OWASP/ASVS/blob/master/4.0/en/0x13-V5-Validation-Sanitization-Encoding.md#v51-input-validation","section":"V5 Validation, Sanitization and Encoding","version":"4"},"category":"security","confidence":"HIGH","references":["https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html"],"technology":["browser"],"subcategory":["vuln"],"likelihood":"HIGH","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Open Redirect"],"source":"https://semgrep.dev/r/javascript.browser.security.open-redirect.js-open-redirect","shortlink":"https://sg.run/3xRe"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.browser.security.open-redirect.js-open-redirect","path":"public/auth-client.js","start":{"line":160,"col":31,"offset":4697},"end":{"line":160,"col":45,"offset":4711},"extra":{"message":"The application accepts potentially user-controlled input `$PROP` which can control the location of the current window context. This can lead two types of vulnerabilities open-redirection and Cross-Site-Scripting (XSS) with JavaScript URIs. It is recommended to validate user-controllable input before allowing it to control the redirection.","metadata":{"interfile":true,"cwe":["CWE-601: URL Redirection to Untrusted Site ('Open Redirect')"],"owasp":["A01:2021 - Broken Access Control","A01:2025 - Broken Access Control"],"asvs":{"control_id":"5.5.1 Insecue Redirect","control_url":"https://github.com/OWASP/ASVS/blob/master/4.0/en/0x13-V5-Validation-Sanitization-Encoding.md#v51-input-validation","section":"V5 Validation, Sanitization and Encoding","version":"4"},"category":"security","confidence":"HIGH","references":["https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html"],"technology":["browser"],"subcategory":["vuln"],"likelihood":"HIGH","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Open Redirect"],"source":"https://semgrep.dev/r/javascript.browser.security.open-redirect.js-open-redirect","shortlink":"https://sg.run/3xRe"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"problem-based-packs.insecure-transport.js-node.bypass-tls-verification.bypass-tls-verification","path":"sdk/mod.ts","start":{"line":81,"col":46,"offset":2021},"end":{"line":81,"col":75,"offset":2050},"extra":{"message":"Checks for setting the environment variable NODE_TLS_REJECT_UNAUTHORIZED to 0, which disables TLS verification. This should only be used for debugging purposes. Setting the option rejectUnauthorized to false bypasses verification against the list of trusted CAs, which also leads to insecure transport. These options lead to vulnerability to MTM attacks, and should not be used.","metadata":{"likelihood":"MEDIUM","impact":"MEDIUM","confidence":"MEDIUM","category":"security","cwe":"CWE-319: Cleartext Transmission of Sensitive Information","owasp":"A03:2017 - Sensitive Data Exposure","references":["https://nodejs.org/api/https.html#https_https_request_options_callback","https://stackoverflow.com/questions/20433287/node-js-request-cert-has-expired#answer-29397100"],"subcategory":["vuln"],"technology":["node.js"],"vulnerability":"Insecure Transport","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Mishandled Sensitive Information"],"source":"https://semgrep.dev/r/problem-based-packs.insecure-transport.js-node.bypass-tls-verification.bypass-tls-verification","shortlink":"https://sg.run/9oxr"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.browser.security.open-redirect.js-open-redirect","path":"ui/public/auth-client.js","start":{"line":51,"col":31,"offset":1599},"end":{"line":51,"col":45,"offset":1613},"extra":{"message":"The application accepts potentially user-controlled input `$PROP` which can control the location of the current window context. This can lead two types of vulnerabilities open-redirection and Cross-Site-Scripting (XSS) with JavaScript URIs. It is recommended to validate user-controllable input before allowing it to control the redirection.","metadata":{"interfile":true,"cwe":["CWE-601: URL Redirection to Untrusted Site ('Open Redirect')"],"owasp":["A01:2021 - Broken Access Control","A01:2025 - Broken Access Control"],"asvs":{"control_id":"5.5.1 Insecue Redirect","control_url":"https://github.com/OWASP/ASVS/blob/master/4.0/en/0x13-V5-Validation-Sanitization-Encoding.md#v51-input-validation","section":"V5 Validation, Sanitization and Encoding","version":"4"},"category":"security","confidence":"HIGH","references":["https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html"],"technology":["browser"],"subcategory":["vuln"],"likelihood":"HIGH","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Open Redirect"],"source":"https://semgrep.dev/r/javascript.browser.security.open-redirect.js-open-redirect","shortlink":"https://sg.run/3xRe"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.browser.security.open-redirect.js-open-redirect","path":"ui/public/auth-client.js","start":{"line":149,"col":31,"offset":4384},"end":{"line":149,"col":45,"offset":4398},"extra":{"message":"The application accepts potentially user-controlled input `$PROP` which can control the location of the current window context. This can lead two types of vulnerabilities open-redirection and Cross-Site-Scripting (XSS) with JavaScript URIs. It is recommended to validate user-controllable input before allowing it to control the redirection.","metadata":{"interfile":true,"cwe":["CWE-601: URL Redirection to Untrusted Site ('Open Redirect')"],"owasp":["A01:2021 - Broken Access Control","A01:2025 - Broken Access Control"],"asvs":{"control_id":"5.5.1 Insecue Redirect","control_url":"https://github.com/OWASP/ASVS/blob/master/4.0/en/0x13-V5-Validation-Sanitization-Encoding.md#v51-input-validation","section":"V5 Validation, Sanitization and Encoding","version":"4"},"category":"security","confidence":"HIGH","references":["https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html"],"technology":["browser"],"subcategory":["vuln"],"likelihood":"HIGH","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Open Redirect"],"source":"https://semgrep.dev/r/javascript.browser.security.open-redirect.js-open-redirect","shortlink":"https://sg.run/3xRe"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}}],"errors":[{"code":3,"level":"warn","type":["PartialParsing",[{"path":".jules/setup-vm.sh","start":{"line":65,"col":63,"offset":0},"end":{"line":79,"col":8,"offset":415}}]],"message":"Syntax error at line .jules/setup-vm.sh:65:\n `_EOF' >> ~/.bashrc\nexport RP_ID=\"atyg.org\"\nexport ORIGIN=\"https://auth.atyg.org\"\nexport REQUIRE_HARDWARE_TOKEN=\"false\"\nexport DATABASE_URL=\"postgresql://postgres:postgres@localhost:5432/auth_yes\"\nexport VALKEY_URL=\"redis://localhost:6379\"\nENV_EOF\n\necho \"==== DIAG: HYGIENE ====\"\nsudo apt-get clean || true\nsudo apt-get autoclean -y || true\nsudo apt-get autoremove -y || true\n\necho \"==== SETUP COMPLETE ====\"\nset +x\n` was unexpected","path":".jules/setup-vm.sh","spans":[{"file":".jules/setup-vm.sh","start":{"line":65,"col":63,"offset":0},"end":{"line":79,"col":8,"offset":415}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"src/features/admin/invites_fragments.tsx","start":{"line":20,"col":20,"offset":0},"end":{"line":20,"col":39,"offset":19}}]],"message":"Syntax error at line src/features/admin/invites_fragments.tsx:20:\n `& Onboarding Tokens` was unexpected","path":"src/features/admin/invites_fragments.tsx","spans":[{"file":"src/features/admin/invites_fragments.tsx","start":{"line":20,"col":20,"offset":0},"end":{"line":20,"col":39,"offset":19}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"src/features/admin/roles_fragments.tsx","start":{"line":18,"col":18,"offset":0},"end":{"line":18,"col":38,"offset":20}}]],"message":"Syntax error at line src/features/admin/roles_fragments.tsx:18:\n `& Permission Catalog` was unexpected","path":"src/features/admin/roles_fragments.tsx","spans":[{"file":"src/features/admin/roles_fragments.tsx","start":{"line":18,"col":18,"offset":0},"end":{"line":18,"col":38,"offset":20}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"src/features/admin/user_details_fragments.tsx","start":{"line":49,"col":28,"offset":0},"end":{"line":49,"col":36,"offset":8}},{"path":"src/features/admin/user_details_fragments.tsx","start":{"line":98,"col":34,"offset":0},"end":{"line":98,"col":47,"offset":13}}]],"message":"Syntax error at line src/features/admin/user_details_fragments.tsx:49:\n `& Status` was unexpected","path":"src/features/admin/user_details_fragments.tsx","spans":[{"file":"src/features/admin/user_details_fragments.tsx","start":{"line":49,"col":28,"offset":0},"end":{"line":49,"col":36,"offset":8}},{"file":"src/features/admin/user_details_fragments.tsx","start":{"line":98,"col":34,"offset":0},"end":{"line":98,"col":47,"offset":13}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"src/features/auth/login_fragments.tsx","start":{"line":86,"col":22,"offset":0},"end":{"line":86,"col":40,"offset":18}}]],"message":"Syntax error at line src/features/auth/login_fragments.tsx:86:\n `& Recovery Options` was unexpected","path":"src/features/auth/login_fragments.tsx","spans":[{"file":"src/features/auth/login_fragments.tsx","start":{"line":86,"col":22,"offset":0},"end":{"line":86,"col":40,"offset":18}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"src/features/auth/recovery_fragments.tsx","start":{"line":74,"col":25,"offset":0},"end":{"line":74,"col":43,"offset":18}}]],"message":"Syntax error at line src/features/auth/recovery_fragments.tsx:74:\n `& Bind New Passkey` was unexpected","path":"src/features/auth/recovery_fragments.tsx","spans":[{"file":"src/features/auth/recovery_fragments.tsx","start":{"line":74,"col":25,"offset":0},"end":{"line":74,"col":43,"offset":18}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"src/features/events/drawer_fragments.tsx","start":{"line":118,"col":30,"offset":0},"end":{"line":118,"col":42,"offset":12}},{"path":"src/features/events/drawer_fragments.tsx","start":{"line":156,"col":34,"offset":0},"end":{"line":156,"col":55,"offset":21}}]],"message":"Syntax error at line src/features/events/drawer_fragments.tsx:118:\n `& Expiration` was unexpected","path":"src/features/events/drawer_fragments.tsx","spans":[{"file":"src/features/events/drawer_fragments.tsx","start":{"line":118,"col":30,"offset":0},"end":{"line":118,"col":42,"offset":12}},{"file":"src/features/events/drawer_fragments.tsx","start":{"line":156,"col":34,"offset":0},"end":{"line":156,"col":55,"offset":21}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"src/features/events/splash_fragments.tsx","start":{"line":93,"col":34,"offset":0},"end":{"line":93,"col":46,"offset":12}}]],"message":"Syntax error at line src/features/events/splash_fragments.tsx:93:\n `& Claim Seat` was unexpected","path":"src/features/events/splash_fragments.tsx","spans":[{"file":"src/features/events/splash_fragments.tsx","start":{"line":93,"col":34,"offset":0},"end":{"line":93,"col":46,"offset":12}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"src/features/sessions/deck_fragments.tsx","start":{"line":75,"col":37,"offset":0},"end":{"line":75,"col":45,"offset":8}}]],"message":"Syntax error at line src/features/sessions/deck_fragments.tsx:75:\n `& Seats:` was unexpected","path":"src/features/sessions/deck_fragments.tsx","spans":[{"file":"src/features/sessions/deck_fragments.tsx","start":{"line":75,"col":37,"offset":0},"end":{"line":75,"col":45,"offset":8}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"src/features/sessions/drawer_fragments.tsx","start":{"line":63,"col":24,"offset":0},"end":{"line":63,"col":41,"offset":17}},{"path":"src/features/sessions/drawer_fragments.tsx","start":{"line":105,"col":27,"offset":0},"end":{"line":105,"col":40,"offset":13}},{"path":"src/features/sessions/drawer_fragments.tsx","start":{"line":142,"col":41,"offset":0},"end":{"line":142,"col":60,"offset":19}}]],"message":"Syntax error at line src/features/sessions/drawer_fragments.tsx:63:\n `& Auto-Expiration` was unexpected","path":"src/features/sessions/drawer_fragments.tsx","spans":[{"file":"src/features/sessions/drawer_fragments.tsx","start":{"line":63,"col":24,"offset":0},"end":{"line":63,"col":41,"offset":17}},{"file":"src/features/sessions/drawer_fragments.tsx","start":{"line":105,"col":27,"offset":0},"end":{"line":105,"col":40,"offset":13}},{"file":"src/features/sessions/drawer_fragments.tsx","start":{"line":142,"col":41,"offset":0},"end":{"line":142,"col":60,"offset":19}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"src/features/sessions/passkeys_fragments.tsx","start":{"line":101,"col":55,"offset":0},"end":{"line":101,"col":77,"offset":22}}]],"message":"Syntax error at line src/features/sessions/passkeys_fragments.tsx:101:\n `& Cold 12-Word Voucher` was unexpected","path":"src/features/sessions/passkeys_fragments.tsx","spans":[{"file":"src/features/sessions/passkeys_fragments.tsx","start":{"line":101,"col":55,"offset":0},"end":{"line":101,"col":77,"offset":22}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"src/features/sessions/sessions_fragments.tsx","start":{"line":44,"col":22,"offset":0},"end":{"line":44,"col":30,"offset":8}},{"path":"src/features/sessions/sessions_fragments.tsx","start":{"line":127,"col":40,"offset":0},"end":{"line":127,"col":53,"offset":13}}]],"message":"Syntax error at line src/features/sessions/sessions_fragments.tsx:44:\n `& Events` was unexpected","path":"src/features/sessions/sessions_fragments.tsx","spans":[{"file":"src/features/sessions/sessions_fragments.tsx","start":{"line":44,"col":22,"offset":0},"end":{"line":44,"col":30,"offset":8}},{"file":"src/features/sessions/sessions_fragments.tsx","start":{"line":127,"col":40,"offset":0},"end":{"line":127,"col":53,"offset":13}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"src/features/sessions/table_fragments.tsx","start":{"line":21,"col":24,"offset":0},"end":{"line":21,"col":31,"offset":7}}]],"message":"Syntax error at line src/features/sessions/table_fragments.tsx:21:\n `& Label` was unexpected","path":"src/features/sessions/table_fragments.tsx","spans":[{"file":"src/features/sessions/table_fragments.tsx","start":{"line":21,"col":24,"offset":0},"end":{"line":21,"col":31,"offset":7}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"ui/components/AdminInvitesPage.tsx","start":{"line":29,"col":20,"offset":0},"end":{"line":29,"col":39,"offset":19}}]],"message":"Syntax error at line ui/components/AdminInvitesPage.tsx:29:\n `& Onboarding Tokens` was unexpected","path":"ui/components/AdminInvitesPage.tsx","spans":[{"file":"ui/components/AdminInvitesPage.tsx","start":{"line":29,"col":20,"offset":0},"end":{"line":29,"col":39,"offset":19}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"ui/components/AdminRolesPage.tsx","start":{"line":22,"col":18,"offset":0},"end":{"line":22,"col":38,"offset":20}}]],"message":"Syntax error at line ui/components/AdminRolesPage.tsx:22:\n `& Permission Catalog` was unexpected","path":"ui/components/AdminRolesPage.tsx","spans":[{"file":"ui/components/AdminRolesPage.tsx","start":{"line":22,"col":18,"offset":0},"end":{"line":22,"col":38,"offset":20}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"ui/components/AdminUserDetailsPage.tsx","start":{"line":49,"col":28,"offset":0},"end":{"line":49,"col":42,"offset":14}},{"path":"ui/components/AdminUserDetailsPage.tsx","start":{"line":91,"col":34,"offset":0},"end":{"line":91,"col":47,"offset":13}}]],"message":"Syntax error at line ui/components/AdminUserDetailsPage.tsx:49:\n `& Display Name` was unexpected","path":"ui/components/AdminUserDetailsPage.tsx","spans":[{"file":"ui/components/AdminUserDetailsPage.tsx","start":{"line":49,"col":28,"offset":0},"end":{"line":49,"col":42,"offset":14}},{"file":"ui/components/AdminUserDetailsPage.tsx","start":{"line":91,"col":34,"offset":0},"end":{"line":91,"col":47,"offset":13}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"ui/components/EventSplashPage.tsx","start":{"line":93,"col":34,"offset":0},"end":{"line":93,"col":46,"offset":12}}]],"message":"Syntax error at line ui/components/EventSplashPage.tsx:93:\n `& Claim Seat` was unexpected","path":"ui/components/EventSplashPage.tsx","spans":[{"file":"ui/components/EventSplashPage.tsx","start":{"line":93,"col":34,"offset":0},"end":{"line":93,"col":46,"offset":12}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"ui/components/LoginPage.tsx","start":{"line":86,"col":22,"offset":0},"end":{"line":86,"col":40,"offset":18}}]],"message":"Syntax error at line ui/components/LoginPage.tsx:86:\n `& Recovery Options` was unexpected","path":"ui/components/LoginPage.tsx","spans":[{"file":"ui/components/LoginPage.tsx","start":{"line":86,"col":22,"offset":0},"end":{"line":86,"col":40,"offset":18}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"ui/components/PasskeysPage.tsx","start":{"line":112,"col":55,"offset":0},"end":{"line":112,"col":77,"offset":22}}]],"message":"Syntax error at line ui/components/PasskeysPage.tsx:112:\n `& Cold 12-Word Voucher` was unexpected","path":"ui/components/PasskeysPage.tsx","spans":[{"file":"ui/components/PasskeysPage.tsx","start":{"line":112,"col":55,"offset":0},"end":{"line":112,"col":77,"offset":22}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"ui/components/RecoveryPage.tsx","start":{"line":74,"col":25,"offset":0},"end":{"line":74,"col":43,"offset":18}}]],"message":"Syntax error at line ui/components/RecoveryPage.tsx:74:\n `& Bind New Passkey` was unexpected","path":"ui/components/RecoveryPage.tsx","spans":[{"file":"ui/components/RecoveryPage.tsx","start":{"line":74,"col":25,"offset":0},"end":{"line":74,"col":43,"offset":18}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"ui/components/SessionsPage.tsx","start":{"line":40,"col":22,"offset":0},"end":{"line":40,"col":30,"offset":8}},{"path":"ui/components/SessionsPage.tsx","start":{"line":122,"col":40,"offset":0},"end":{"line":122,"col":53,"offset":13}}]],"message":"Syntax error at line ui/components/SessionsPage.tsx:40:\n `& Events` was unexpected","path":"ui/components/SessionsPage.tsx","spans":[{"file":"ui/components/SessionsPage.tsx","start":{"line":40,"col":22,"offset":0},"end":{"line":40,"col":30,"offset":8}},{"file":"ui/components/SessionsPage.tsx","start":{"line":122,"col":40,"offset":0},"end":{"line":122,"col":53,"offset":13}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"ui/components/sessions/DirectPassDrawer.tsx","start":{"line":61,"col":22,"offset":0},"end":{"line":61,"col":39,"offset":17}},{"path":"ui/components/sessions/DirectPassDrawer.tsx","start":{"line":103,"col":25,"offset":0},"end":{"line":103,"col":38,"offset":13}},{"path":"ui/components/sessions/DirectPassDrawer.tsx","start":{"line":112,"col":40,"offset":0},"end":{"line":112,"col":53,"offset":13}},{"path":"ui/components/sessions/DirectPassDrawer.tsx","start":{"line":150,"col":47,"offset":0},"end":{"line":150,"col":72,"offset":25}},{"path":"ui/components/sessions/DirectPassDrawer.tsx","start":{"line":210,"col":18,"offset":0},"end":{"line":210,"col":36,"offset":18}}]],"message":"Syntax error at line ui/components/sessions/DirectPassDrawer.tsx:61:\n `& Auto-Expiration` was unexpected","path":"ui/components/sessions/DirectPassDrawer.tsx","spans":[{"file":"ui/components/sessions/DirectPassDrawer.tsx","start":{"line":61,"col":22,"offset":0},"end":{"line":61,"col":39,"offset":17}},{"file":"ui/components/sessions/DirectPassDrawer.tsx","start":{"line":103,"col":25,"offset":0},"end":{"line":103,"col":38,"offset":13}},{"file":"ui/components/sessions/DirectPassDrawer.tsx","start":{"line":112,"col":40,"offset":0},"end":{"line":112,"col":53,"offset":13}},{"file":"ui/components/sessions/DirectPassDrawer.tsx","start":{"line":150,"col":47,"offset":0},"end":{"line":150,"col":72,"offset":25}},{"file":"ui/components/sessions/DirectPassDrawer.tsx","start":{"line":210,"col":18,"offset":0},"end":{"line":210,"col":36,"offset":18}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"ui/components/sessions/SessionTable.tsx","start":{"line":13,"col":24,"offset":0},"end":{"line":13,"col":31,"offset":7}}]],"message":"Syntax error at line ui/components/sessions/SessionTable.tsx:13:\n `& Label` was unexpected","path":"ui/components/sessions/SessionTable.tsx","spans":[{"file":"ui/components/sessions/SessionTable.tsx","start":{"line":13,"col":24,"offset":0},"end":{"line":13,"col":31,"offset":7}}]},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"ui/components/sessions/WorkshopDrawer.tsx","start":{"line":114,"col":30,"offset":0},"end":{"line":114,"col":42,"offset":12}},{"path":"ui/components/sessions/WorkshopDrawer.tsx","start":{"line":152,"col":38,"offset":0},"end":{"line":152,"col":66,"offset":28}}]],"message":"Syntax error at line ui/components/sessions/WorkshopDrawer.tsx:114:\n `& Expiration` was unexpected","path":"ui/components/sessions/WorkshopDrawer.tsx","spans":[{"file":"ui/components/sessions/WorkshopDrawer.tsx","start":{"line":114,"col":30,"offset":0},"end":{"line":114,"col":42,"offset":12}},{"file":"ui/components/sessions/WorkshopDrawer.tsx","start":{"line":152,"col":38,"offset":0},"end":{"line":152,"col":66,"offset":28}}]}],"paths":{"scanned":[".eslintignore",".forum/CONCEPTS.md",".forum/agent-forum.md",".forum/env/setup-debian.sh",".forum/env/setup-fedora.sh",".forum/poc-g1/ASSESSMENT.md",".forum/poc-g1/BOUNDARIES.md",".forum/poc-g1/cfg_poc.ts",".forum/poc-g1/code_intelligence_poc.ts",".forum/poc-g1/constitution_poc.ts",".forum/poc-g1/dag_engine_poc.ts",".forum/poc-g1/dependency_graph_poc.ts",".forum/poc-g1/execution_flywheel_poc.ts",".forum/poc-g1/frontmatter_poc.ts",".forum/poc-g1/git_hooks_poc.ts",".forum/poc-g1/git_storage_poc.ts",".forum/poc-g1/graveyard_poc.ts",".forum/poc-g1/lab.ts",".forum/poc-g1/merkle_diff_poc.ts",".forum/poc-g1/multi_vec_poc.ts",".forum/poc-g1/mutation_poc.ts",".forum/poc-g1/ontology_poc.ts",".forum/poc-g1/orchestration_matrix_poc.ts",".forum/poc-g1/orphan_branch_poc.ts",".forum/poc-g1/protobuf_poc.ts",".forum/poc-g1/state_machine_poc.ts",".forum/poc-g1/static_analysis_poc.ts",".forum/poc-g1/telemetry_poc.ts",".forum/poc-g1/tool_sandbox_poc.ts",".forum/poc-g1/vector_db_poc.ts",".forum/poc-g2/BOUNDARIES.md",".forum/poc-g2/cfg_poc.ts",".forum/poc-g2/code_intelligence_poc.ts",".forum/poc-g2/constitution_poc.ts",".forum/poc-g2/dag_engine_poc.ts",".forum/poc-g2/dependency_graph_poc.ts",".forum/poc-g2/execution_flywheel_poc.ts",".forum/poc-g2/frontmatter_poc.ts",".forum/poc-g2/git_hooks_poc.ts",".forum/poc-g2/git_storage_poc.ts",".forum/poc-g2/graveyard_poc.ts",".forum/poc-g2/lab.ts",".forum/poc-g2/merkle_diff_poc.ts",".forum/poc-g2/multi_vec_poc.ts",".forum/poc-g2/mutation_poc.ts",".forum/poc-g2/ontology_poc.ts",".forum/poc-g2/orchestration_matrix_poc.ts",".forum/poc-g2/orphan_branch_poc.ts",".forum/poc-g2/protobuf_poc.ts",".forum/poc-g2/state_machine_poc.ts",".forum/poc-g2/static_analysis_poc.ts",".forum/poc-g2/sys_exec.ts",".forum/poc-g2/telemetry_poc.ts",".forum/poc-g2/tool_sandbox_poc.ts",".forum/poc-g2/vector_db_poc.ts",".forum/poc-g3/BOUNDARIES.md",".forum/poc-g3/harness_consolidation_poc.ts",".forum/poc-g3/lab.ts",".forum/poc-g3/orchestration_runner_poc.ts",".forum/poc-g3/pre_filter_adapters_poc.ts",".forum/src/agents/adversary.ts",".forum/src/agents/analyst.ts",".forum/src/agents/evaluator.ts",".forum/src/agents/gatekeeper.ts",".forum/src/agents/historian.ts",".forum/src/agents/translator.ts",".forum/src/bootstrap_meta.ts",".forum/src/core/meta_state_manager.ts",".forum/src/core/transitions.json",".forum/src/hooks/pre-commit",".forum/src/hooks/pre-push",".forum/src/install_hooks.ts",".forum/src/run.ts",".gitignore",".jules/setup-vm.sh","AGENTS.md","COMPOSE_CONVENTIONS.md","Custom IAM Architecture Analysis v2.md","Custom IAM Architecture Analysis.md","Dockerfile","LICENSE","LICENSE-APACHE","LICENSE-MIT","ONBOARDING.md","README.md","deno.json","deno.lock","deps.ts","docs/Auth-Yes System Enhancement Research.md","docs/Custom IAM Architecture Analysis v2.md","docs/Custom IAM Architecture Analysis.md","docs/DEEP_RESEARCH_BRIEF.md","docs/DUAL_AUDIENCE_DEVELOPMENT_GUIDE.md","docs/FORWARDAUTH_REDIRECT_SPEC.md","docs/GHOST_COCKPIT_SPEC.md","docs/HYBRID_INGRESS_PLAYBOOK.md","docs/HYPERMEDIA_ARCHITECTURE_BLUEPRINT.md","docs/PHASED_IMPLEMENTATION_PLAN.md","docs/STRUCTURAL_AUDIT.md","docs/TIER1_INGRESS_SPEC.md","docs/USE_CASES_AND_EFFORT.md","docs/V3_AUDIT_REPORT.md","docs/V3_PROGRESS_TRACKER.md","docs/VERIFY.md","docs/archive/AUTH_AUDIT_PROGRESS.md","docs/archive/AUTH_AUDIT_REPORT.md","docs/archive/WEB_AUDIT.md","docs/archive/WEB_PROGRESS.md","docs/superpowers/plans/2026-08-25-ephemeral-passes-and-multi-claim-events.md","docs/superpowers/specs/2026-08-24-mobile-first-ui-revamp-design.md","infra/release.sh","infra/setup/build.ts","infra/setup/cli.ts","infra/setup/commands/auth.ts","infra/setup/commands/build.ts","infra/setup/commands/compose.ts","infra/setup/commands/secrets.ts","infra/setup/commands/test.ts","infra/setup/compose.ts","infra/setup/env.ts","infra/setup/prompts/auth.ts","infra/setup/prompts/wizard.ts","infra/setup.ts","public/admin-scripts.js","public/auth-client.js","public/sessions-scripts.js","public/utils/bip39.js","public/utils/bip39_wordlist.js","public/wasm/sss_recovery_bg.wasm.js","public/webauthn-login.js","public/webauthn-recovery.js","public/webauthn-register.js","scratch/INVESTIGATIVE_REPORT.md","scratch/chromium_cookie_investigation.md","scratch/fix_db.patch","scratch/hono_cookie_test.ts","scratch/jules_scope_guards.patch","scratch/jules_session_13025.patch","scratch/jules_ui_latest.patch","scratch/pg_timezone_test.ts","scripts/lint_arch.ts","sdk/deno.json","sdk/gen/auth_connect.ts","sdk/gen/auth_pb.ts","sdk/hono.test.ts","sdk/hono.ts","sdk/mod.test.ts","sdk/mod.ts","server/audit.ts","server/audit_merkle.test.ts","server/audit_merkle.ts","server/auth-session.ts","server/auth.proto","server/db.test.ts","server/db.ts","server/db.ts.orig","server/deno.json","server/forward_auth.ts","server/http_signatures.test.ts","server/http_signatures.ts","server/main.ts","server/middleware.ts","server/ratelimit.ts","server/recovery.ts","server/routes/admin/apps.ts","server/routes/admin/audit.ts","server/routes/admin/hardware_keys.ts","server/routes/admin/invites.ts","server/routes/admin/roles.ts","server/routes/admin/users.ts","server/routes/admin.ts","server/routes/auth/guest.ts","server/routes/auth/login.ts","server/routes/auth/passkeys.ts","server/routes/auth/register.ts","server/routes/auth/utils.ts","server/routes/auth.ts","server/routes/auth_forward.ts","server/routes/events.ts","server/routes/passes_magic.ts","server/routes/sessions.ts","server/rpc.ts","server/session_resolver.ts","server/spire_ffi.test.ts","server/spire_ffi.ts","server/valkey.test.ts","server/valkey.ts","spire/Dockerfile.agent","spire/Dockerfile.server","spire/entrypoint.agent.sh","spire/entrypoint.server.sh","spire/templates/agent.conf","spire/templates/server.conf","spire_ffi/Cargo.lock","spire_ffi/Cargo.toml","spire_ffi/build.rs","spire_ffi/proto/workload.proto","spire_ffi/src/lib.rs","src/core/audit.ts","src/core/audit_merkle.ts","src/core/auth_guards.test.ts","src/core/auth_guards.ts","src/core/content_negotiation.ts","src/core/db.ts","src/core/error_fragments.tsx","src/core/forward_auth.ts","src/core/http_signatures.ts","src/core/middleware.ts","src/core/rpc.ts","src/core/session.ts","src/core/spire_ffi.ts","src/core/sse_adapter.ts","src/core/valkey.ts","src/deno.json","src/features/admin/aaguid_fragments.tsx","src/features/admin/admin.test.ts","src/features/admin/admin_actions_routes.ts","src/features/admin/apps_fragments.tsx","src/features/admin/audit_fragments.tsx","src/features/admin/fragments.tsx","src/features/admin/invites_fragments.tsx","src/features/admin/queries.ts","src/features/admin/roles_fragments.tsx","src/features/admin/routes.tsx","src/features/admin/user_details_fragments.tsx","src/features/admin/users_fragments.tsx","src/features/auth/auth.test.ts","src/features/auth/fragments.tsx","src/features/auth/login_fragments.tsx","src/features/auth/login_routes.ts","src/features/auth/queries.ts","src/features/auth/recovery_fragments.tsx","src/features/auth/recovery_routes.ts","src/features/auth/register_fragments.tsx","src/features/auth/register_routes.ts","src/features/auth/routes.tsx","src/features/dashboard/launchpad_fragments.tsx","src/features/events/attendees_fragments.tsx","src/features/events/cockpit_fragments.tsx","src/features/events/cockpit_styles.ts","src/features/events/drawer_fragments.tsx","src/features/events/events.test.ts","src/features/events/events_actions_routes.ts","src/features/events/fragments.tsx","src/features/events/join_fragments.tsx","src/features/events/queries.ts","src/features/events/routes.tsx","src/features/events/splash_fragments.tsx","src/features/events/stream_routes.ts","src/features/forward_auth/forward_auth.test.ts","src/features/forward_auth/routes.ts","src/features/sessions/actions_routes.ts","src/features/sessions/deck_fragments.tsx","src/features/sessions/drawer_fragments.tsx","src/features/sessions/fragments.tsx","src/features/sessions/modal_fragments.tsx","src/features/sessions/pass_routes.test.ts","src/features/sessions/pass_routes.ts","src/features/sessions/passkeys_fragments.tsx","src/features/sessions/queries.ts","src/features/sessions/routes.tsx","src/features/sessions/sessions.test.tsx","src/features/sessions/sessions_fragments.tsx","src/features/sessions/table_fragments.tsx","src/main.ts","src/shared/ui/CommonStyles.ts","src/shared/ui/admin_layout_fragments.tsx","src/shared/ui/fragments.tsx","src/shared/ui/layout_fragments.tsx","src/shared/ui/layout_styles.ts","src/shared/ui/navbar_fragments.tsx","stryker.config.json","tasks/GUIDELINES.md","tasks/audit-1.md","tasks/audit-2.md","tasks/audits/2026-0827-audit-2-phase-1.md","tasks/audits/2026-0827-audit-2-phase-2.md","tasks/audits/2026-0827-audit-2-phase-3.md","tasks/audits/2026-0827-audit-2-phase-4.md","tasks/checklist.md","tasks/cleanup-legacy-directories.md","tasks/complete/.gitkeep","tasks/complete/2026-0821.01.jul.audit.layered-security.verify-3tier-auth-and-rbac-2303.md","tasks/complete/2026-0821.01.jul.story.auth-yes.extract-standalone-repo-1828.md","tasks/complete/2026-0821.01.jul.story.setup-ts.headless-architecture-analysis-0105.md","tasks/complete/2026-0821.01.jul.story.staging.extract-auth-yes-1854.md","tasks/complete/2026-0821.02.jul.arch.setup-ts.shared-cli-architecture-1857.md","tasks/complete/2026-0821.03.jul.story.auth-yes.modular-workspace-1855.md","tasks/complete/2026-0823.01.gem.feat.spire.smart-image-packaging-and-single-volume-bootstrap-0941.md","tasks/complete/2026-0824.01.jul.feat.audit-merkle.add-merkle-tree-ledger-0547.md","tasks/complete/2026-0824.01.jul.feat.auth-api.traefik-ingress-control-2105.md","tasks/complete/2026-0824.01.jul.feat.sdk-hono.ghost-cockpit-protocol-0431.md","tasks/complete/2026-0824.01.jul.feat.spire-ffi.native-argon2-0352.md","tasks/complete/2026-0824.01.jul.feat.webauthn.prf-extension-1200.md","tasks/complete/2026-0824.02.jul.feat.http-sigs.rfc9421-verification-0436.md","tasks/complete/2026-0824.02.jul.feat.recovery.sss-wasm-matrix-1200.md","tasks/complete/2026-0824.02.jul.feat.sdk.realtime-invalidation-bus-1200.md","tasks/complete/2026-0824.02.jul.story.app-launchpad.sso-launchpad-and-logout-2100.md","tasks/complete/2026-0824.03.jul.feat.auth-api.ingress-grant-injection-1200.md","tasks/complete/2026-0824.04.gem.feat.ui-shell.design-tokens-and-adaptive-nav-2215.md","tasks/complete/2026-0824.05.gem.feat.ui-auth.hero-passkey-and-onboarding-2216.md","tasks/complete/2026-0824.06.gem.feat.ui-user-hub.adaptive-launchpad-sessions-passkeys-2217.md","tasks/complete/2026-0824.07.gem.feat.ui-admin.mobile-admin-cards-and-filters-2218.md","tasks/complete/2026-0824.08.gem.feat.session-delegation.agent-spawner-and-scoped-permissions-2345.md","tasks/complete/2026-0825.01.gem.feat.magic-passes.ephemeral-1-click-guest-links-0045.md","tasks/complete/2026-0825.01.jul.sec.auth-api.zero-trust-scope-guards-1805.md","tasks/complete/2026-0825.01.jul.story.arch.monolith-decomposition-roadmap-1845.md","tasks/complete/2026-0825.01.jul.story.arch.monolith-decomposition-roadmap-1845.ph1.md","tasks/complete/2026-0825.01.jul.story.arch.monolith-decomposition-roadmap-1845.ph2.md","tasks/complete/2026-0825.01.jul.story.arch.monolith-decomposition-roadmap-1845.ph3.1.md","tasks/complete/2026-0825.01.jul.story.arch.monolith-decomposition-roadmap-1845.ph3.md","tasks/complete/2026-0825.01.jul.story.arch.monolith-decomposition-roadmap-1845.ph4.1.md","tasks/complete/2026-0825.01.jul.story.arch.monolith-decomposition-roadmap-1845.ph4.md","tasks/complete/2026-0825.01.jul.story.arch.monolith-decomposition-roadmap-1845.ph5.md","tasks/complete/2026-0825.01.jul.story.arch.monolith-decomposition-roadmap-1845.ph6.md","tasks/complete/2026-0825.01.jul.story.arch.ui-decomposition-roadmap-2300.md","tasks/complete/2026-0825.01.jul.story.arch.ui-decomposition-roadmap-2300.ph1.md","tasks/complete/2026-0825.01.jul.story.arch.ui-decomposition-roadmap-2300.ph2.md","tasks/complete/2026-0825.01.jul.story.arch.ui-decomposition-roadmap-2300.ph3.md","tasks/complete/2026-0825.01.jul.story.ui.redesign-sessions-drawer-1812.md","tasks/complete/2026-0825.02.gem.feat.event-passes.multi-claim-workshops-and-kiosks-0046.md","tasks/complete/2026-0825.03.gem.feat.event-cockpit.live-metrics-and-master-killswitch-0047.md","tasks/complete/2026-0826.01.jul.story.events.phase-1-guest-ingress-1400.ph1.md","tasks/complete/2026-0826.02.jul.story.events.join-reentry-and-limits-2156.ph2.md","tasks/complete/2026-0826.03.jul.feat.ui.sessions-layout-drawer-machine-2156.ph3.md","tasks/complete/2026-0826.04.jul.feat.event-controls.attendees-drawer-and-live-controls-0029.ph4.md","tasks/complete/2026-0826.05.gem.feat.sessions-ui.sessions-and-guest-drawer-overhaul-2023.ph5.md","tasks/complete/2026-0826.06.gem.feat.ui.sessions-and-events-final-polish-2305.ph6.md","tasks/complete/2026-0826.07.gem.refactor.backend.attendee-relational-decoupling.2359.md","tasks/complete/2026-0827.01.gem.fix.ui.missed-audit-items-0005.md","tasks/debug.md","tasks/do.md","tasks/in-progress/2026-0827.07.jul.plan.arch.hypermedia-and-vertical-slicing-1715.md","tasks/new/.gitkeep","tasks/new/2026-0821.01.jul.feat.auth-yes.seamless-3rd-party-sso-1609.md","tasks/new/2026-0825.01.jul.story.protocol.universal-agent-framework-1945.md","tasks/new/2026-0827.02.gem.feat.security.p2p-vouching-and-web-of-trust-1040.md","tasks/new/2026-0827.03.gem.feat.security.client-proof-of-work-shield-1041.md","tasks/new/2026-0827.04.gem.feat.ui.expired-events-archive-and-guest-telemetry-1042.md","tasks/new/2026-0827.05.gem.feat.mesh.spiffe-workload-api-live-harness-1043.md","tasks/new/2026-0827.06.gem.feat.ui.sessions-docking-and-creation-flow-1130.md","tasks/path.md","tasks/plan.md","tasks/ui-audit-3.md","tasks/ui-audit-4.md","tasks/wip/.gitkeep","test.ts","tsconfig.json","ui/auth_checks.ts","ui/components/AAGUIDPage.tsx","ui/components/AdminAppsPage.tsx","ui/components/AdminInvitesPage.tsx","ui/components/AdminLayout.tsx","ui/components/AdminRolesPage.tsx","ui/components/AdminUserDetailsPage.tsx","ui/components/AdminUsersPage.tsx","ui/components/AppLaunchpadPage.tsx","ui/components/AuditLogPage.tsx","ui/components/AuthenticatedLayout.tsx","ui/components/CommonStyles.ts","ui/components/EventJoinPage.tsx","ui/components/EventSplashPage.tsx","ui/components/Layout.tsx","ui/components/LoginPage.tsx","ui/components/PasskeysPage.tsx","ui/components/RecoveryPage.tsx","ui/components/RegisterPage.tsx","ui/components/SessionsPage.tsx","ui/components/UnregisteredAppPage.tsx","ui/components/admin/AdminAppsScript.tsx","ui/components/admin/AdminInvitesScript.tsx","ui/components/admin/AdminModal.tsx","ui/components/admin/AdminRolesScript.tsx","ui/components/admin/AdminTable.tsx","ui/components/admin/AdminUserDetailsScript.tsx","ui/components/admin/drawers/AppDrawer.tsx","ui/components/admin/drawers/GrantDrawer.tsx","ui/components/admin/drawers/InviteDrawer.tsx","ui/components/admin/drawers/RoleEditorDrawer.tsx","ui/components/auth/PasskeyTable.tsx","ui/components/auth/WebAuthnScript.tsx","ui/components/layout/MobileNav.tsx","ui/components/layout/Navbar.tsx","ui/components/layout/UserMenu.tsx","ui/components/sessions/DirectPassDrawer.tsx","ui/components/sessions/EventCockpitDeck.tsx","ui/components/sessions/EventGuestsDrawer.tsx","ui/components/sessions/ScopeModal.tsx","ui/components/sessions/SessionDeck.tsx","ui/components/sessions/SessionTable.tsx","ui/components/sessions/SessionsScript.tsx","ui/components/sessions/WorkshopDrawer.tsx","ui/components/sessions/formatters.ts","ui/db_queries.ts","ui/deno.json","ui/mod.ts","ui/public/auth-client.js","ui/public/wasm/sss_recovery_bg.wasm.js","ui/ui_scripts.test.ts","ui/utils/bip39.ts","ui/utils/bip39_wordlist.ts","wasm/sss_recovery/Cargo.lock","wasm/sss_recovery/Cargo.toml","wasm/sss_recovery/src/lib.rs"]},"time":{"rules":[],"rules_parse_time":0.28262996673583984,"profiling_times":{"config_time":0.8725745677947998,"core_time":2.3529675006866455,"ignores_time":0.0007779598236083984,"total_time":3.2345774173736572},"parsing_time":{"total_time":0.0,"per_file_time":{"mean":0.0,"std_dev":0.0},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_files":[]},"scanning_time":{"total_time":17.27925992012024,"per_file_time":{"mean":0.015954995309436986,"std_dev":0.0031098731146058795},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_files":[]},"matching_time":{"total_time":0.0,"per_file_and_rule_time":{"mean":0.0,"std_dev":0.0},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_rules_on_files":[]},"tainting_time":{"total_time":0.0,"per_def_and_rule_time":{"mean":0.0,"std_dev":0.0},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_rules_on_defs":[]},"fixpoint_timeouts":[],"prefiltering":{"project_level_time":0.0,"file_level_time":0.0,"rules_with_project_prefilters_ratio":0.0,"rules_with_file_prefilters_ratio":0.9868816525796649,"rules_selected_ratio":0.03284568506002889,"rules_matched_ratio":0.03284568506002889},"targets":[],"total_bytes":0,"max_memory_bytes":1377276736},"engine_requested":"OSS","skipped_rules":[],"profiling_results":[]} |