github TypeScript analyzed f2ac022

ido4-dev/ido4

github

Development Governance Platform — deterministic methodology enforcement for AI-augmented teams

maintainer
ido4-dev
license
MIT
first seen
2026-06-12
last seen
2026-06-18
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 53 tools
transport stdio · http counts 53 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • add_task_comment
  • analyze_dependencies
  • assign_task_to_${id}
  • check_merge_readiness
  • complete_and_handoff
  • compute_compliance_score
  • create_${id}
  • create_sandbox
  • create_task
  • delete_orphan_sandbox
  • destroy_sandbox
  • find_task_pr
  • get_${id}_status
  • get_analytics
  • get_audit_summary
  • get_board_data
  • get_compliance_data
  • get_coordination_state
  • get_epic_tasks
  • get_epic_timeline
  • get_governance_memory
  • get_health_data
  • get_methodology_profile
  • get_next_task
  • get_pr_reviews
  • get_project_status
  • get_standup_data
  • get_sub_issues
  • get_task
  • get_task_comments
  • get_task_cycle_time
  • get_task_execution_data
  • get_task_field
  • get_task_lineage
  • ingest_spec
  • init_project
  • list_${id}s
  • list_agents
  • list_orphan_sandboxes
  • list_tasks
  • lock_task
  • parse_strategic_spec
  • persist_audit_findings
  • query_audit_trail
  • register_agent
  • release_task
  • reset_sandbox
  • search_epics
  • validate_${id}_completion
  • validate_all_transitions
  • validate_dependencies
  • validate_epic_integrity
  • validate_transition
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit f2ac022 · analyzer v33 · 4d ago

skills & prompt files 3

danger signals1

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 325

filesystem 31

  • fs (weak) ido4-dev-ido4-f2ac022/docs/scripts/generate-previews.mjs :1 import { readdir, mkdir, rm } from 'node:fs/promises';
  • fs ido4-dev-ido4-f2ac022/packages/core/src/config/git-workflow-config.ts :8 import * as fs from 'node:fs/promises';
  • fs ido4-dev-ido4-f2ac022/packages/core/src/config/methodology-config.ts :11 import { promises as fs } from 'node:fs';
  • fs ido4-dev-ido4-f2ac022/packages/core/src/config/profile-loader.ts :8 import { promises as fs } from 'node:fs';
  • fs ido4-dev-ido4-f2ac022/packages/core/src/config/project-config-loader.ts :11 import * as fs from 'node:fs/promises';
  • fs ido4-dev-ido4-f2ac022/packages/core/src/domains/agents/agent-store.ts :8 import { promises as fs } from 'node:fs';
  • fs ido4-dev-ido4-f2ac022/packages/core/src/domains/audit/audit-store.ts :12 import { promises as fs } from 'node:fs';
  • fs ido4-dev-ido4-f2ac022/packages/core/src/domains/containers/container-metadata-service.ts :8 import { promises as fs } from 'node:fs';
  • fs ido4-dev-ido4-f2ac022/packages/core/src/domains/projects/project-init-service.ts :16 import * as fs from 'node:fs/promises';
  • fs (weak) ido4-dev-ido4-f2ac022/packages/core/src/domains/sandbox/sandbox-service.ts :20 import * as fs from 'node:fs/promises';
  • fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/config/methodology-config.test.ts :2 import { promises as fs } from 'node:fs';
  • fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/config/profile-loader.test.ts :2 import { promises as fs } from 'node:fs';
  • fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/container/service-container.test.ts :5 import * as fs from 'node:fs/promises';
  • fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/domains/agents/agent-store.test.ts :2 import { promises as fs } from 'node:fs';
  • fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/domains/audit/audit-store.test.ts :2 import { promises as fs } from 'node:fs';
  • fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/domains/projects/project-init-service.test.ts :15 import * as fs from 'node:fs/promises';
  • fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/domains/sandbox/sandbox-service.test.ts :7 import * as fs from 'node:fs/promises';
  • fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/integration/audit-analytics-integration.test.ts :11 import { promises as fs } from 'node:fs';
  • fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/integration/full-lifecycle-integration.test.ts :24 import { promises as fs } from 'node:fs';
  • fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/integration/methodology-config-integration.test.ts :12 import { promises as fs } from 'node:fs';
  • fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/integration/multi-agent-integration.test.ts :12 import { promises as fs } from 'node:fs';
  • fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/integration/scrum-lifecycle-integration.test.ts :18 import { promises as fs } from 'node:fs';
  • fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/integration/shape-up-lifecycle-integration.test.ts :23 import { promises as fs } from 'node:fs';
  • fs ido4-dev-ido4-f2ac022/packages/mcp/src/tools/finding-tools.ts :13 import { existsSync, readFileSync, writeFileSync, mkdirSync, renameSync, unlinkSync } from 'node:fs';
  • fs ido4-dev-ido4-f2ac022/packages/mcp/src/tools/sandbox-tools.ts :83 const configData = JSON.parse(await fs.readFile(configPath, 'utf-8'));
  • fs (weak) ido4-dev-ido4-f2ac022/packages/mcp/tests/finding-tools.test.ts :13 import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, rmSync } from 'node:fs';
  • fs ido4-dev-ido4-f2ac022/packages/spec-format/esbuild.bundle.mjs :12 import { readFileSync } from 'node:fs';
  • fs ido4-dev-ido4-f2ac022/packages/spec-format/src/cli.ts :17 import { readFileSync } from 'node:fs';
  • fs ido4-dev-ido4-f2ac022/packages/tech-spec-format/esbuild.bundle.mjs :12 import { readFileSync } from 'node:fs';
  • fs ido4-dev-ido4-f2ac022/packages/tech-spec-format/src/cli.ts :20 import { readFileSync } from 'node:fs';
  • fs (weak) ido4-dev-ido4-f2ac022/scripts/test-ingestion-live.mjs :8 import fs from 'node:fs';

shell / exec 3

  • shell ido4-dev-ido4-f2ac022/packages/core/src/domains/projects/project-init-service.ts :15 import { execFile } from 'node:child_process';
  • shell ido4-dev-ido4-f2ac022/packages/core/src/infrastructure/github/core/credential-manager.ts :8 import { execFile } from 'node:child_process';
  • shell (weak) ido4-dev-ido4-f2ac022/packages/core/tests/infrastructure/github/core/credential-manager.test.ts :6 // Mock child_process.execFile

network 1

  • net ido4-dev-ido4-f2ac022/packages/core/src/infrastructure/github/core/types.ts :50 /** Safety cap on maximum pages to fetch (default: 10) */

secrets 5

  • secrets ido4-dev-ido4-f2ac022/packages/core/src/infrastructure/github/core/credential-manager.ts :71 const githubToken = process.env.GITHUB_TOKEN;
  • secrets (weak) ido4-dev-ido4-f2ac022/packages/core/tests/infrastructure/github/core/credential-manager.test.ts :20 delete process.env.GITHUB_TOKEN;
  • secrets (weak) ido4-dev-ido4-f2ac022/packages/core/tests/setup.ts :2 process.env.GITHUB_TOKEN = 'test-token-for-unit-tests';
  • secrets ido4-dev-ido4-f2ac022/packages/mcp/src/helpers/container-init.ts :32 githubToken: process.env.GITHUB_TOKEN,
  • secrets (weak) ido4-dev-ido4-f2ac022/packages/mcp/tests/helpers/container-init.test.ts :73 const originalToken = process.env.GITHUB_TOKEN;

tool registrations 53

  • register_agent ido4-dev-ido4-f2ac022/packages/mcp/src/tools/agent-tools.ts :10
  • list_agents ido4-dev-ido4-f2ac022/packages/mcp/src/tools/agent-tools.ts :26
  • lock_task ido4-dev-ido4-f2ac022/packages/mcp/src/tools/agent-tools.ts :37
  • release_task ido4-dev-ido4-f2ac022/packages/mcp/src/tools/agent-tools.ts :49
  • get_analytics ido4-dev-ido4-f2ac022/packages/mcp/src/tools/analytics-tools.ts :10
  • get_task_cycle_time ido4-dev-ido4-f2ac022/packages/mcp/src/tools/analytics-tools.ts :30
  • query_audit_trail ido4-dev-ido4-f2ac022/packages/mcp/src/tools/audit-tools.ts :10
  • get_audit_summary ido4-dev-ido4-f2ac022/packages/mcp/src/tools/audit-tools.ts :33
  • compute_compliance_score ido4-dev-ido4-f2ac022/packages/mcp/src/tools/compliance-tools.ts :10
  • list_${id}s ido4-dev-ido4-f2ac022/packages/mcp/src/tools/container-tools.ts :31
  • get_${id}_status ido4-dev-ido4-f2ac022/packages/mcp/src/tools/container-tools.ts :43
  • assign_task_to_${id} ido4-dev-ido4-f2ac022/packages/mcp/src/tools/container-tools.ts :56
  • create_${id} ido4-dev-ido4-f2ac022/packages/mcp/src/tools/container-tools.ts :94
  • validate_${id}_completion ido4-dev-ido4-f2ac022/packages/mcp/src/tools/container-tools.ts :111
  • get_coordination_state ido4-dev-ido4-f2ac022/packages/mcp/src/tools/coordination-tools.ts :13
  • analyze_dependencies ido4-dev-ido4-f2ac022/packages/mcp/src/tools/dependency-tools.ts :10
  • validate_dependencies ido4-dev-ido4-f2ac022/packages/mcp/src/tools/dependency-tools.ts :21
  • get_next_task ido4-dev-ido4-f2ac022/packages/mcp/src/tools/distribution-tools.ts :14
  • complete_and_handoff ido4-dev-ido4-f2ac022/packages/mcp/src/tools/distribution-tools.ts :26
  • search_epics ido4-dev-ido4-f2ac022/packages/mcp/src/tools/epic-tools.ts :23
  • get_epic_tasks ido4-dev-ido4-f2ac022/packages/mcp/src/tools/epic-tools.ts :34
  • get_epic_timeline ido4-dev-ido4-f2ac022/packages/mcp/src/tools/epic-tools.ts :45
  • validate_epic_integrity ido4-dev-ido4-f2ac022/packages/mcp/src/tools/epic-tools.ts :56
  • persist_audit_findings ido4-dev-ido4-f2ac022/packages/mcp/src/tools/finding-tools.ts :39
  • get_governance_memory ido4-dev-ido4-f2ac022/packages/mcp/src/tools/finding-tools.ts :165
  • check_merge_readiness ido4-dev-ido4-f2ac022/packages/mcp/src/tools/gate-tools.ts :13
  • ingest_spec ido4-dev-ido4-f2ac022/packages/mcp/src/tools/ingestion-tools.ts :14
  • parse_strategic_spec ido4-dev-ido4-f2ac022/packages/mcp/src/tools/ingestion-tools.ts :36
  • init_project ido4-dev-ido4-f2ac022/packages/mcp/src/tools/project-tools.ts :21
  • get_project_status ido4-dev-ido4-f2ac022/packages/mcp/src/tools/project-tools.ts :68
  • create_sandbox ido4-dev-ido4-f2ac022/packages/mcp/src/tools/sandbox-tools.ts :41
  • destroy_sandbox ido4-dev-ido4-f2ac022/packages/mcp/src/tools/sandbox-tools.ts :59
  • reset_sandbox ido4-dev-ido4-f2ac022/packages/mcp/src/tools/sandbox-tools.ts :72
  • list_orphan_sandboxes ido4-dev-ido4-f2ac022/packages/mcp/src/tools/sandbox-tools.ts :104
  • delete_orphan_sandbox ido4-dev-ido4-f2ac022/packages/mcp/src/tools/sandbox-tools.ts :115
  • get_standup_data ido4-dev-ido4-f2ac022/packages/mcp/src/tools/skill-data-tools.ts :22
  • get_board_data ido4-dev-ido4-f2ac022/packages/mcp/src/tools/skill-data-tools.ts :36
  • get_compliance_data ido4-dev-ido4-f2ac022/packages/mcp/src/tools/skill-data-tools.ts :49
  • get_health_data ido4-dev-ido4-f2ac022/packages/mcp/src/tools/skill-data-tools.ts :65
  • get_task_execution_data ido4-dev-ido4-f2ac022/packages/mcp/src/tools/skill-data-tools.ts :78
  • get_methodology_profile ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :42
  • get_task ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :54
  • get_task_field ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :67
  • list_tasks ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :83
  • create_task ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :98
  • validate_transition ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :125
  • validate_all_transitions ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :139
  • find_task_pr ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :154
  • get_pr_reviews ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :165
  • add_task_comment ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :178
  • get_task_comments ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :189
  • get_task_lineage ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :223
  • get_sub_issues ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :240