src/client/components/PasswordForm.tsx (2 lines):
	- line 146: // eslint-disable-next-line functional/no-let -- Conditional message, TODO: could refactor to avoid
	- line 304: // eslint-disable-next-line functional/no-let -- Conditional boolean, TODO: could refactor to avoid


src/server/routes/register.ts (1 line):
	- line 444: * TODO: This flow SHOULD be updated to support existing users in the future, once we have finished implementing passcodes


src/client/styles/Theme.tsx (1 line):
	- line 22: --color-divider: #bcbcbc; // TODO: Change to Source preset when available


src/server/lib/encryptedStateCookie.ts (1 line):
	- line 67: // eslint-disable-next-line functional/no-let -- used to determine the cookie source, TODO: potential for refactoring to remove let


cypress/integration/ete/consent_token.2.cy.ts (1 line):
	- line 21: // TODO: Would be nice to check that the user is actually


src/server/lib/middleware/rateLimit.ts (1 line):
	- line 37: // TODO: decide if we also want to rate limit against specific tokens


src/server/routes/welcome.ts (1 line):
	- line 258: // eslint-disable-next-line functional/no-let -- the state will be updated depending on the outcome of the try/catch, TODO: potential for refactor to avoid let?


src/client/lib/hooks/useRecaptcha.tsx (1 line):
	- line 226: // TODO: This is a fix for when the reCAPTCHA badge is not visible in the DOM.


src/server/lib/idapi/consents.ts (1 line):
	- line 123: // eslint-disable-next-line functional/no-let -- mutation required to update consent with user consent data, TODO: potential for refactoring


src/server/lib/middleware/requestState.ts (1 line):
	- line 61: // TODO: potential for refactoring to no longer use let to assign isNativeApp and appName


src/server/lib/newsletters.ts (1 line):
	- line 57: // eslint-disable-next-line functional/no-let -- mutation required to update newsletter with user newsletter data, TODO: potential for refactoring to avoid let


src/server/routes/oauth.ts (1 line):
	- line 142: // TODO: We probably don't want to keep doing this fix profile thing


src/server/lib/okta/tokens.ts (1 line):
	- line 172: // eslint-disable-next-line functional/no-let -- used to determine the cookie source, TODO: potential for refactoring to remove let


src/server/lib/idapi/unauth.ts (1 line):
	- line 21: // eslint-disable-next-line functional/immutable-data -- Mutating headers, TODO: potentially refactor to avoid


src/client/components/ThemedTextInput.tsx (1 line):
	- line 9: /* TODO: textError sets the color of both the input text and the error message,


src/server/lib/IDAPIFetch.ts (1 line):
	- line 1: /* eslint-disable @typescript-eslint/no-explicit-any -- unknown body shape, TODO: potential refactor opportunity here to use zod types for correct body shape */