MCP Observatory
8m ago Tracked 59,479 Last 8m ago 24h 2,575
github TypeScript re-analysis due deep scan · partial (245/3,337 files)

insciqq/AIQSA

github

Self-hosted, model-agnostic AI workspace: OpenAI, Anthropic, Gemini, OpenRouter, and OpenAI-compatible models with MCP tools, web search, Knowledge bases, and Memory in one conversation-first UI.

maintainer
insciqq
licence
AGPL-3.0
first seen
2026-07-27
last seen
2026-09-17
releases · 30d
16
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 8 tools
transport http counts 8 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • add_memory
  • call_tool
  • delete_memory
  • find_tools
  • get_memory
  • list_memories
  • search_memories
  • update_memory
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit b2e1999 · analyzer v33 · 12h ago

skills & prompt files 13

danger signals5

code evidence vv0.2.12 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 2921

filesystem 101

  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/aiqsa-memory-dream-qualification/run-live-audit.ts :1 import { readFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/aiqsa-memory-live-microbench/acceptance/contract.test.ts :1 import { readFileSync } from "node:fs";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/aiqsa-memory-live-microbench/acceptance/regradeAnswers.ts :2 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/aiqsa-memory-live-microbench/acceptance/run.ts :2 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/aiqsa-memory-live-microbench/run.ts :2 import { mkdir, rename, writeFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/brightAnswerHarness.test.ts :1 import { mkdir, mkdtemp, readFile, rm, stat, symlink, writeFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/brightAnswerHarness.ts :2 import { chmod, lstat, mkdir, open, readdir, readFile, rename, unlink } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/brightAnswerLive.ts :1 import { readFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/brightStackOverflowPrepared.ts :2 import { createReadStream } from "node:fs";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/censusBrightStackOverflowProduct.ts :2 import { readFile, rename, writeFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/embedBrightStackOverflowImport.ts :2 import { mkdir, readFile, rename, unlink, writeFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/evaluate.ts :1 import { readFile, realpath } from "node:fs/promises";
show 28 more
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/ingest.ts :1 import { createReadStream } from "node:fs";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/openRagAnswerLive.ts :4 import { readFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/openRagAnswerRunner.test.ts :1 import { mkdir, mkdtemp, rm, symlink } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/openRagAnswerRunner.ts :10 } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/openRagCurrentAnswerLive.ts :2 import { readdir, readFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/prepareBrightStackOverflowDataset.ts :2 import { createReadStream } from "node:fs";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/prepareOpenRagSlice.ts :6 } from "node:fs";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/retrievalReplay.test.ts :1 import { mkdtemp, rm, stat } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/retrievalReplay.ts :2 import { lstat } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/retrieve.test.ts :1 import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/retrieve.ts :1 import { createReadStream } from "node:fs";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/stageBrightStackOverflowImport.ts :2 import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/caseEvaluation.test.ts :1 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/caseEvaluation.ts :9 } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/checkpoint.test.ts :1 import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/checkpoint.ts :9 } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/evaluate.ts :1 import { createReadStream } from "node:fs";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/memoryQualitySelection.test.ts :2 import { readFileSync } from "node:fs";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/officialEvaluator.ts :1 import { createReadStream } from "node:fs";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/qualification.ts :2 import { readFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/qualificationRevision.ts :3 import { lstat, readFile, readlink } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/run.ts :3 import { createReadStream } from "node:fs";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/runtime-boundary.test.ts :1 import { readdirSync, readFileSync } from "node:fs";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/solEvaluate.ts :3 import { readFile, writeFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/memory-agent-bench/run.ts :3 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/benchmarks/reranker-calibration/run.ts :2 import { mkdir, writeFile } from "node:fs/promises";
  • fs (weak) insciqq-AIQSA-b2e1999/lib/server/http/requestBodyBoundary.test.ts :3 import { readFileSync } from "node:fs";
  • fs (weak) insciqq-AIQSA-b2e1999/lib/server/knowledge/retiredRuntime.test.ts :1 import { existsSync, readdirSync, readFileSync } from "node:fs";

61 more not shown — this panel samples each group; the count above is the real total.

shell / exec 46

  • shell (weak) insciqq-AIQSA-b2e1999/benchmarks/aiqsa-memory-live-microbench/acceptance/run.ts :1 import { execFileSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/openRagAnswerLive.ts :3 import { execFile } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/evaluate.ts :10 import { spawn } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/officialEvaluator.ts :9 import { spawn } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/qualificationRevision.ts :1 import { execFile as execFileCallback } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/run.ts :11 import { execFile as execFileCallback } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/solEvaluate.ts :2 import { execFileSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/benchmarks/memory-agent-bench/run.ts :2 import { execFileSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/lib/server/observability/process.test.ts :3 import { spawnSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/lib/server/providers/embeddings.test.ts :424 const text = "price $$; match $&; prefix $`; suffix $'";
  • shell (weak) insciqq-AIQSA-b2e1999/lib/server/uploads/imageMetadata.test.ts :1 import { execFile } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/lib/server/workspace/projectArchive.integration.test.ts :2 import { execFileSync, spawnSync } from "node:child_process";
show 28 more
  • shell insciqq-AIQSA-b2e1999/lib/server/workspace/secrets/sshKey.ts :1 import { execFile } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/lib/server/workspace/toolCatalog.test.ts :1 import { execFileSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/prisma/scripts/tests/migration-contract.ts :23 import { spawnSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/build-workspace-oci.mjs :12 import { spawnSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/configure.test.ts :1 import { execFileSync, spawnSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/dev-bootstrap.test.ts :3 import { spawnSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/docs-check.mjs :4 import { spawnSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/docs-check.test.ts :3 import { spawnSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/production-smoke.mjs :4 import { spawn } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/release-plan.mjs :3 import { spawnSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/release-plan.test.ts :3 import { spawnSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/release-privacy-check.mjs :4 import { spawnSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/release-privacy-check.test.ts :1 import { spawnSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/runtime-launcher.test.ts :4 import { spawnSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/smoke-memory-mcp-codex.ts :1 import { spawn, type ChildProcess } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/smoke-workspace-operation-fence.ts :2 import { spawn, type ChildProcess } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/smoke-workspace-runner-restart.ts :1 import { execFileSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/smoke-workspace-secrets.ts :2 import { spawn, type ChildProcess } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/smoke-workspace-user-paid.ts :1 import { execFileSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/task-ledger.mjs :13 import { spawnSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/task-ledger.test.ts :1 import { spawnSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/verify-release-vision.cjs :4 const { spawnSync } = require("node:child_process");
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/worker-bootstrap.test.ts :3 import { spawnSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/scripts/workspace-user-paid-support.ts :124 exec(compile(files["pricing.py"],"pricing.py","exec"),module.__dict__)
  • shell (weak) insciqq-AIQSA-b2e1999/tests/e2e/answer-sound.spec.ts :2 import { execFileSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/tests/e2e/chat-output-defaults.spec.ts :1 import { execFileSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/tests/e2e/chat-titles.spec.ts :1 import { execFileSync } from "node:child_process";
  • shell (weak) insciqq-AIQSA-b2e1999/tests/e2e/conversational-images.spec.ts :4 import { execFileSync } from "node:child_process";

6 more not shown — this panel samples each group; the count above is the real total.

network 72

  • net (weak) insciqq-AIQSA-b2e1999/benchmarks/aiqsa-memory-live-microbench/acceptance/driver.ts :134 const response = await fetch(new URL(path, this.baseUrl), {
  • net (weak) insciqq-AIQSA-b2e1999/benchmarks/aiqsa-memory-live-microbench/run.ts :495 const response = await fetch(new URL("/api/me/catalog", baseUrl), {
  • net (weak) insciqq-AIQSA-b2e1999/benchmarks/aiqsa-memory-opensearch-shadow/run.ts :982 const response = await fetch(new URL(indexName, root), { method: "DELETE" });
  • net (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/brightAnswerLive.ts :51 const response = await fetch(new URL(route, base), {
  • net (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/ingest.ts :403 const response = await fetch(new URL(path, baseUrl), {
  • net (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/openRagAnswerLive.ts :392 const response = await fetch(new URL(route, input.baseUrl), {
  • net (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/prepareOpenRagSlice.ts :175 const response = await fetch(url, {
  • net (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/compare-embedding-providers.ts :87 const response = await fetch(endpointCatalogUrl, {
  • net (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/run.ts :2895 const response = await fetch(new URL("/api/me/catalog", baseUrl), {
  • net insciqq-AIQSA-b2e1999/components/app-shell/answerSound.ts :38 const response = await fetch(source, { signal });
  • net insciqq-AIQSA-b2e1999/components/app-shell/shellApi.ts :56 ? await fetch(input)
  • net insciqq-AIQSA-b2e1999/components/auth/AuthLogin.tsx :364 const response = await fetch(url, {
show 28 more
  • net insciqq-AIQSA-b2e1999/features/settings-v2/instructionPresetsApi.ts :8 const response = await fetch(`/api/me/instructions${path}`, {
  • net insciqq-AIQSA-b2e1999/features/settings-v2/workspaceSecretsApi.ts :7 const response = await fetch("/api/me/workspace/secrets", {
  • net insciqq-AIQSA-b2e1999/lib/server/auth/clientIdentity.ts :2 import { isIP } from "node:net";
  • net insciqq-AIQSA-b2e1999/lib/server/email/definitions.ts :1 import { isIP } from "node:net";
  • net insciqq-AIQSA-b2e1999/lib/server/email/smtpTransport.ts :2 import { connect as netConnect, isIP } from "node:net";
  • net (weak) insciqq-AIQSA-b2e1999/lib/server/knowledge/structuredData.test.ts :49 expect(decodeStructuredPlan({ ...plan(), command: "fetch('https://invalid')" })).toBeNull();
  • net (weak) insciqq-AIQSA-b2e1999/lib/server/mcp/clientSession.test.ts :2 import { createServer, type Server as HttpServer } from "node:http";
  • net insciqq-AIQSA-b2e1999/lib/server/mcp/endpointCorrection.ts :69 const get = (url: URL, accept: string) => input.fetch(url, {
  • net insciqq-AIQSA-b2e1999/lib/server/mcp/hubHandler.ts :226 const response = holdResponse(await mcp.fetch(bounded.request, { authInfo: auth, parsedBody }), bounded, release);
  • net insciqq-AIQSA-b2e1999/lib/server/mcp/localPackageResolver.ts :198 fetchImplementation: ToolHiveFetch = (input, init) => fetch(input, init)
  • net (weak) insciqq-AIQSA-b2e1999/lib/server/mcp/oauthService.test.ts :2 import { createServer } from "node:http";
  • net (weak) insciqq-AIQSA-b2e1999/lib/server/mcp/remoteRuntime.integration.test.ts :1 import { createServer, type Server as HttpServer } from "node:http";
  • net (weak) insciqq-AIQSA-b2e1999/lib/server/mcp/responseGuard.test.ts :465 await request.run(() => fetch("https://mcp.example", {
  • net (weak) insciqq-AIQSA-b2e1999/lib/server/mcp/safeFetch.test.ts :1 import { createServer } from "node:http";
  • net insciqq-AIQSA-b2e1999/lib/server/mcp/safeFetch.ts :2 import { request as httpRequest } from "node:http";
  • net insciqq-AIQSA-b2e1999/lib/server/mcp/toolhiveClient.ts :364 this.#fetch = input.fetch ?? ((url, init) => fetch(url, init));
  • net insciqq-AIQSA-b2e1999/lib/server/memoryMcp/handler.ts :192 return mcp.fetch(request, { authInfo: auth });
  • net (weak) insciqq-AIQSA-b2e1999/lib/server/observability/http.test.ts :3 import http, { type Server } from "node:http";
  • net insciqq-AIQSA-b2e1999/lib/server/parsing/client.ts :194 this.#fetch = input.fetch ?? ((url, init) => fetch(url, init));
  • net (weak) insciqq-AIQSA-b2e1999/lib/server/providers/providerSafeFetch.test.ts :1 import { createServer } from "node:http";
  • net insciqq-AIQSA-b2e1999/lib/server/search/opensearch/coreTransport.ts :168 const response = await fetch(url, {
  • net (weak) insciqq-AIQSA-b2e1999/lib/server/search/opensearch/memoryClient.integration.test.ts :125 const response = await fetch(new URL(configuration.physicalIndexName, root), {
  • net (weak) insciqq-AIQSA-b2e1999/lib/server/workspace/remoteRuntime.test.ts :2 import type { AddressInfo } from "node:net";
  • net insciqq-AIQSA-b2e1999/lib/server/workspace/remoteRuntime.ts :182 return await fetch(new URL(path, this.baseUrl), {
  • net (weak) insciqq-AIQSA-b2e1999/lib/server/workspace/runnerFencing.test.ts :4 import type { AddressInfo } from "node:net";
  • net (weak) insciqq-AIQSA-b2e1999/lib/server/workspace/runnerServer.test.ts :2 import type { IncomingMessage, ServerResponse } from "node:http";
  • net insciqq-AIQSA-b2e1999/lib/server/workspace/runnerServer.ts :2 import { createServer, type IncomingMessage, type Server, type ServerResponse } from "node:http";
  • net (weak) insciqq-AIQSA-b2e1999/lib/server/workspace/sessionOperation.prisma.test.ts :4 import type { AddressInfo } from "node:net";

32 more not shown — this panel samples each group; the count above is the real total.

secrets 23

  • secrets (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/openRagAnswerLive.ts :314 const fromEnvironment = process.env.AIQSA_OPENRAG_SESSION_TOKEN?.trim();
  • secrets (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/retrieve.ts :1086 if (!process.env.AIQSA_ENCRYPTION_KEY) {
  • secrets (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/stageBrightStackOverflowImport.ts :634 !process.env.S3_ACCESS_KEY_ID || !process.env.S3_SECRET_ACCESS_KEY) {
  • secrets (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/compare-embedding-providers.ts :41 const secret = process.env.OPENROUTER_API_KEY?.trim();
  • secrets (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/evaluate.ts :434 if (!options.reuseCaseEvaluations && !process.env.OPENAI_API_KEY) {
  • secrets (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/officialEvaluator.ts :167 if (!process.env.OPENAI_API_KEY) {
  • secrets (weak) insciqq-AIQSA-b2e1999/lib/server/workspace/microsandboxRuntime.test.ts :180 expect(process.env.SERVICE_TOKEN).not.toBe(token);
  • secrets insciqq-AIQSA-b2e1999/playwright.config.ts :5 const encryptionKey = process.env.AIQSA_ENCRYPTION_KEY?.trim() ||
  • secrets (weak) insciqq-AIQSA-b2e1999/scripts/smoke-anthropic-messages.ts :61 const apiKey = process.env.ANTHROPIC_API_KEY ?? "";
  • secrets (weak) insciqq-AIQSA-b2e1999/scripts/smoke-deepseek-browser-paid.cjs :79 const apiKey = process.env.DEEPSEEK_API_KEY?.trim() ?? "";
  • secrets (weak) insciqq-AIQSA-b2e1999/scripts/smoke-deepseek-responses.ts :56 const apiKey = process.env.DEEPSEEK_API_KEY?.trim() ?? "";
  • secrets (weak) insciqq-AIQSA-b2e1999/scripts/smoke-gemini-interactions.ts :39 const apiKey = process.env.GEMINI_API_KEY ?? "";
show 11 more
  • secrets (weak) insciqq-AIQSA-b2e1999/scripts/smoke-memory-browser-paid.cjs :58 const bootstrapToken = process.env.AIQSA_BOOTSTRAP_AUTH_TOKEN ?? "";
  • secrets (weak) insciqq-AIQSA-b2e1999/scripts/smoke-memory-mcp-codex.ts :1312 const encryptionKey = process.env.AIQSA_ENCRYPTION_KEY?.trim() ||
  • secrets (weak) insciqq-AIQSA-b2e1999/scripts/smoke-memory-semantic-retrieval.ts :156 const bootstrapToken = process.env.AIQSA_BOOTSTRAP_AUTH_TOKEN ?? "";
  • secrets (weak) insciqq-AIQSA-b2e1999/scripts/smoke-openai-responses.ts :47 const openAIKey = process.env.OPENAI_API_KEY ?? "";
  • secrets (weak) insciqq-AIQSA-b2e1999/scripts/smoke-openrouter-perplexity.ts :50 const openRouterKey = process.env.OPENROUTER_API_KEY ?? "";
  • secrets (weak) insciqq-AIQSA-b2e1999/scripts/smoke-workspace-user-paid.ts :56 const secret = process.env.CODEX_LB_API_KEY;
  • secrets (weak) insciqq-AIQSA-b2e1999/scripts/workspace-runner.ts :14 const token = process.env.AIQSA_WORKSPACE_RUNNER_TOKEN?.trim();
  • secrets (weak) insciqq-AIQSA-b2e1999/tests/e2e/provider-admin-ui.spec.ts :237 process.env.AIQSA_ENCRYPTION_KEY?.trim() || playwrightEncryptionKey
  • secrets (weak) insciqq-AIQSA-b2e1999/tests/e2e/workspace-export-fence.spec.ts :66 local = createWorkspaceRunnerServer({ runtime: new DeterministicWorkspaceRuntime(config), token: process.env.AIQSA_WORKSPACE_RUNNER_TOKEN! });
  • secrets (weak) insciqq-AIQSA-b2e1999/tests/e2e/workspace-file-integrity.spec.ts :89 local = createWorkspaceRunnerServer({ runtime: new DeterministicWorkspaceRuntime(config), token: process.env.AIQSA_WORKSPACE_RUNNER_TOKEN! });
  • secrets (weak) insciqq-AIQSA-b2e1999/tests/e2e/workspace-operation-fence.spec.ts :50 server = createWorkspaceRunnerServer({ runtime: local, token: process.env.AIQSA_WORKSPACE_RUNNER_TOKEN! });

database 392

  • db insciqq-AIQSA-b2e1999/app/api/projects/[projectId]/attachments/[attachmentId]/route.ts :6 import { Prisma } from "@prisma/client";
  • db insciqq-AIQSA-b2e1999/app/api/uploads/route.ts :10 import { Prisma } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/aiqsa-memory-live-microbench/acceptance/driver.ts :2 import { Prisma, PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/aiqsa-memory-live-microbench/run.ts :12 } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/aiqsa-memory-opensearch-shadow/run.ts :2 import { PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/activateBrightStackOverflowImport.ts :3 import { PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/brightAnswerLive.ts :5 import { PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/brightAnswerTrace.test.ts :1 import type { PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/brightAnswerTrace.ts :1 import type { PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/embedBrightStackOverflowImport.ts :7 import { Prisma, PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/ingest.ts :7 import { Prisma, PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/openRagAnswerLive.ts :9 import { PrismaClient } from "@prisma/client";
show 28 more
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/openRagCurrentAnswerLive.ts :6 import { PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/retrievalReplay.ts :1 import { Prisma } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/retrieve.ts :7 import { Prisma, PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/snapshotBrightStackOverflowImport.ts :3 import { Prisma, PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/knowledge/stageBrightStackOverflowImport.ts :5 import { Prisma, PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/identitySetupRetry.test.ts :1 import { Prisma } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/identitySetupRetry.ts :2 import { Prisma } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/prepareRestoredCache.ts :1 import { Prisma, PrismaClient, type MemoryJobKind } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/probe-embedding-batch.ts :4 import { Prisma, PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/queryIsolation.test.ts :2 import type { PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/queryIsolation.ts :1 import type { PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/longmemeval/run.ts :16 import { Client } from "pg";
  • db (weak) insciqq-AIQSA-b2e1999/benchmarks/reranker-calibration/run.ts :4 import { Prisma, PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/lib/server/admin/knowledge/answerPolicyService.test.ts :1 import { Prisma, type PrismaClient } from "@prisma/client";
  • db insciqq-AIQSA-b2e1999/lib/server/admin/knowledge/answerPolicyService.ts :1 import { Prisma, type PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/lib/server/admin/knowledge/operationsService.test.ts :1 import type { PrismaClient } from "@prisma/client";
  • db insciqq-AIQSA-b2e1999/lib/server/admin/knowledge/operationsService.ts :1 import { Prisma, type PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/lib/server/admin/knowledge/policyService.test.ts :1 import type { PrismaClient } from "@prisma/client";
  • db insciqq-AIQSA-b2e1999/lib/server/admin/knowledge/policyService.ts :1 import type { PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/lib/server/admin/knowledge/profileService.test.ts :1 import type { PrismaClient } from "@prisma/client";
  • db insciqq-AIQSA-b2e1999/lib/server/admin/knowledge/profileService.ts :1 import { Prisma, type PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/lib/server/admin/memory/processingRepository.prisma.test.ts :3 import type { MemoryJobKind, MemoryJobState } from "@prisma/client";
  • db insciqq-AIQSA-b2e1999/lib/server/admin/memory/processingRepository.ts :1 import { Prisma, type PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/lib/server/admin/memory/statusRepository.test.ts :1 import type { Prisma, PrismaClient } from "@prisma/client";
  • db insciqq-AIQSA-b2e1999/lib/server/admin/memory/statusRepository.ts :6 } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/lib/server/admin/providers/capabilityFailures.test.ts :1 import type { PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/lib/server/admin/providers/credentialActivation.prisma.test.ts :2 import { Prisma, type PrismaClient } from "@prisma/client";
  • db (weak) insciqq-AIQSA-b2e1999/lib/server/admin/providers/customSetupPrismaRepository.test.ts :1 import { Prisma } from "@prisma/client";

352 more not shown — this panel samples each group; the count above is the real total.

tool registrations 8

  • find_tools insciqq-AIQSA-b2e1999/lib/server/mcp/hubServer.ts :82
  • call_tool insciqq-AIQSA-b2e1999/lib/server/mcp/hubServer.ts :96
  • add_memory insciqq-AIQSA-b2e1999/lib/server/memoryMcp/server.ts :136
  • search_memories insciqq-AIQSA-b2e1999/lib/server/memoryMcp/server.ts :154
  • list_memories insciqq-AIQSA-b2e1999/lib/server/memoryMcp/server.ts :174
  • get_memory insciqq-AIQSA-b2e1999/lib/server/memoryMcp/server.ts :194
  • update_memory insciqq-AIQSA-b2e1999/lib/server/memoryMcp/server.ts :209
  • delete_memory insciqq-AIQSA-b2e1999/lib/server/memoryMcp/server.ts :227

declared dependencies 48

  • @modelcontextprotocol/client@2.0.0
  • @modelcontextprotocol/sdk@1.30.0
  • @modelcontextprotocol/server@2.0.0
  • @modelcontextprotocol/node@2.0.0
  • @aws-sdk/client-s3@^3.1063.0
  • @aws-sdk/s3-request-presigner@3.1063.0
  • @napi-rs/canvas@^0.1.100
  • @prisma/client@^6.19.3
  • jose@6.2.3
  • katex@0.18.1
  • lucide-react@0.468.0
  • microsandbox@0.6.16
show 28 more
  • microsandbox-mcp@0.6.16
  • next@16.3.3
  • parse5@7.3.0
  • pdf-lib@^1.17.1
  • pdfjs-dist@6.2.108
  • pg@^8.16.3
  • react@19
  • react-dom@19
  • semver@7.8.5
  • shiki@^4.2.0
  • ssh2@1.17.0
  • unpdf@^1.6.2
  • xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz
  • zod@4.4.3
  • zustand@^5.0.14
  • @playwright/test@1.60.0
  • @testing-library/jest-dom@6.6.3
  • @testing-library/react@16.1.0
  • @types/node@^22.12.0
  • @types/pg@^8.15.5
  • @types/react@19
  • @types/react-dom@19
  • @types/semver@7.7.1
  • autoprefixer@10.4.20
  • eslint@9
  • eslint-config-next@16.3.3
  • gpt-tokenizer@4.0.0
  • hyparquet@1.29.2

8 more not shown — this panel samples each group; the count above is the real total.

obfuscation 3

  • dynamic require()/import() insciqq-AIQSA-b2e1999/lib/server/observability/process.test.ts :43 const { installProcessFailureHooks } = require(${JSON.stringify(processModule)});
  • dynamic require()/import() insciqq-AIQSA-b2e1999/lib/server/workspace/toolCatalog.test.ts :54 `const { loadPinnedOfficialWorkspaceToolCatalog } = require(${JSON.stringify(runtimePath)});
  • dynamic require()/import() insciqq-AIQSA-b2e1999/scripts/worker-bootstrap.test.ts :46 const bootstrap = require(${JSON.stringify(bootstrap)});

perm:untrusted 2

  • untrusted (weak) insciqq-AIQSA-b2e1999/lib/server/observability/http.test.ts :204 await (await fetch(`${origin}${url}`)).text();
  • untrusted (weak) insciqq-AIQSA-b2e1999/tests/e2e/auth-admin.spec.ts :190 (url) => fetch(url).then((response) => response.status),

transport_posture 5

  • binds all interfaces (0.0.0.0) insciqq-AIQSA-b2e1999/lib/server/mcp/localDraftValidator.test.ts :83 host: "0.0.0.0",
  • binds all interfaces (0.0.0.0) insciqq-AIQSA-b2e1999/lib/server/mcp/toolhiveClient.test.ts :99 host: "0.0.0.0",
  • network-listening, binds all interfaces, no auth detected insciqq-AIQSA-b2e1999/lib/server/mcp/toolhiveClient.ts :506 host: "0.0.0.0",
  • network-listening, binds all interfaces, no auth detected insciqq-AIQSA-b2e1999/lib/server/mcp/toolhiveRuntimeDriver.test.ts :68 host: "0.0.0.0",
  • network-listening, binds all interfaces, no auth detected insciqq-AIQSA-b2e1999/tests/e2e/support/http-server.cjs :12 app.prepare().then(() => server.listen(3000, "0.0.0.0")).catch(() => {