github TypeScript re-analysis due

objectstack-ai/objectstack

A complex business system in 170k tokens. ObjectStack compresses an entire app — data model, UI, workflows, permissions — into typed metadata, an AI agent can hold in context, reason about, and refactor whole.

maintainer: objectstack-ai
license: Apache-2.0
first seen: 2026-07-21
last seen: 2026-08-14
releases · 30d: 629
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit e9cb9ab · analyzer v31 · 1d ago

skills & prompt files 31

danger signals6

dynamic code execution new Function() objectstack-ai-objectstack-e9cb9ab/examples/app-showcase/test/my-work-visibility.test.ts :59 const fn = new Function('current_user', `"use strict"; return (${source});`) as (
dynamic code execution new Function() objectstack-ai-objectstack-e9cb9ab/examples/app-showcase/test/page-variables.test.ts :51 const fn = new Function('page', `"use strict"; return (${source});`) as (
dynamic code execution new Function() objectstack-ai-objectstack-e9cb9ab/packages/services/service-automation/src/builtin/template.ts :115 const fn = new Function(`"use strict"; return (${safe});`);
committed secret Slack token objectstack-ai-objectstack-e9cb9ab/examples/app-showcase/objectstack.config.ts :146 xoxb-s…(24 chars, redacted)
committed secret Slack token objectstack-ai-objectstack-e9cb9ab/packages/connectors/connector-slack/src/connector-slack-plugin.test.ts :30 xoxb-s…(17 chars, redacted)
credential in logs credential in log objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-auth/src/auth-plugin.ts :1462 ctx.logger.info(`🔑 Dev admin seeded: ${email} / ${password}`);

code evidence v@objectstack/connector-slack@17.0.0-rc.6 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 4235

filesystem 254

fs objectstack-ai-objectstack-e9cb9ab/eslint.config.mjs :3 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/examples/app-showcase/e2e/global-setup.ts :2 import { mkdirSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/examples/app-showcase/test/coverage.test.ts :3 import { existsSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/examples/app-showcase/test/gap-fill.test.ts :3 import { existsSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/examples/app-showcase/test/inert-wirings.test.ts :3 import { readdirSync, readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/scripts/check-app-nav-i18n.mjs :68 import { existsSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/compile.ts :5 import fs from 'fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/create.ts :5 import fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/database-driver-allowlist.pin.test.ts :48 import { readFileSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/datasource/introspect.ts :4 import { writeFile } from 'node:fs/promises';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/db/clean.ts :4 import { statSync, existsSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/dev-default-db.test.ts :16 import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/dev.ts :7 import fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/doctor-config-env-overlay.test.ts :54 import fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/doctor-config-load-cause.test.ts :52 import fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/doctor-env-provenance.test.ts :44 import fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/doctor-ledger-dir-authority.test.ts :48 import fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/doctor-ledger-posture-independence.test.ts :65 import fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/doctor-ledger-read-failure.test.ts :86 import fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/doctor-node-env-default.test.ts :42 import fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/doctor-tenancy-posture-report.test.ts :56 import fs from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/doctor.ts :7 import fs from 'fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/environments/bind.ts :5 import fs from 'node:fs/promises';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/generate.ts :5 import fs from 'fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/i18n/extract.ts :3 import fs from 'fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/init.ts :6 import fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/migrate/meta.stored-flow-resolution.integration.test.ts :23 import { mkdtempSync, writeFileSync, mkdirSync, rmSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/migrate/meta.ts :4 import { writeFileSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/package/install.ts :25 import { readFile } from 'node:fs/promises';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/package/publish.ts :21 import { readFile } from 'node:fs/promises';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/plugin/build.ts :24 import { mkdir, readFile, readdir, stat, writeFile } from 'node:fs/promises';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/plugin/publish.ts :22 import { readFile, readdir } from 'node:fs/promises';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/plugin/sign.ts :16 import { readFile, writeFile } from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/serve-email-config-parity.contract.test.ts :37 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/serve-verify-security-parity.contract.test.ts :38 import { readFileSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/serve.ts :5 import fs from 'fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/start.ts :8 import fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/test.ts :6 import fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/unified-db-resolution.pin.test.ts :24 import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/auth-config.ts :5 import { readFile, writeFile, mkdir, chmod } from 'node:fs/promises';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/build-runtime.ts :4 import { mkdirSync, writeFileSync, readFileSync, existsSync, unlinkSync, readdirSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/cloud-config.ts :25 import { chmod, mkdir, readFile, unlink, writeFile } from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/collect-docs.test.ts :4 import fs from 'fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/collect-docs.ts :26 import fs from 'fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/config.ts :4 import fs from 'fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/console.ts :36 import fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/dev-restart.test.ts :4 import fs from 'fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/dev-restart.ts :20 import fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/driver-vocabulary-parity.test.ts :35 import { mkdtempSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/optional-package.test.ts :29 import fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/schema-migrate.deferred-ddl.integration.test.ts :17 import { mkdtempSync, writeFileSync, mkdirSync, rmSync, existsSync, statSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/schema-migrate.integration.test.ts :4 import { mkdtempSync, writeFileSync, mkdirSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/schema-migrate.lazy-driver-import.test.ts :31 import { readdirSync, readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/schema-migrate.readonly-probe.integration.test.ts :33 import { mkdtempSync, writeFileSync, mkdirSync, rmSync, existsSync, readdirSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/schema-migrate.teardown.integration.test.ts :32 import { mkdtempSync, writeFileSync, mkdirSync, rmSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/sdui-manifest.ts :16 import { existsSync, readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/sqlite-occupancy.test.ts :15 import { mkdtempSync, rmSync, writeFileSync, existsSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/sqlite-occupancy.ts :77 import { existsSync, readdirSync, readlinkSync, realpathSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/authoring-rule-command-parity.test.ts :27 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/cloud-login-json-ndjson.e2e.test.ts :69 import { mkdtempSync, rmSync, readFileSync, existsSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/console-resolve.test.ts :14 import fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/emit-json-pipe.test.ts :5 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/format-zod-union.test.ts :32 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/init.test.ts :5 import fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/json-stdout-purity.e2e.test.ts :61 import { mkdtempSync, rmSync, writeFileSync, readFileSync, readdirSync, statSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/login-json-ndjson.e2e.test.ts :65 import { mkdtempSync, rmSync, readFileSync, existsSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/login-json-noninteractive.e2e.test.ts :55 import { mkdtempSync, rmSync, readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/metadata-type-schema-gate.test.ts :45 import { existsSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/migrate-exit-code.e2e.test.ts :35 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/migrate-meta.e2e.test.ts :20 import { mkdtempSync, rmSync, writeFileSync, readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/osplugin.test.ts :5 import { mkdtemp, rm, mkdir, writeFile, readFile } from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/package-publish-namespace.test.ts :17 import { mkdtemp, rm, writeFile } from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/plugin-publish.test.ts :4 import { mkdtemp, rm, writeFile } from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/plugin-sign.test.ts :5 import { mkdtemp, rm, mkdir, writeFile, readFile } from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/qa-empty-glob-exit-code.e2e.test.ts :37 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/qa-suite-schema-load.test.ts :32 import { mkdtempSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/remote-api-utils.test.ts :5 import * as fs from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/resolve-glob-lazy-walk.test.ts :28 import fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/runtime-assets.test.ts :11 import fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/serve-app-runtime-hooks.e2e.test.ts :27 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/serve-boot-diagnostics.e2e.test.ts :30 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/serve-capability-identity.test.ts :32 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/serve-mcp-capability-collision.e2e.test.ts :47 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/serve-mcp-stdio-answers.e2e.test.ts :46 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/serve-no-artifact.e2e.test.ts :53 import { mkdirSync, mkdtempSync, rmSync, writeFileSync, existsSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/serve-organizations-host-resolution.e2e.test.ts :32 import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/serve-organizations-mount-failure.e2e.test.ts :37 import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/serve-stdio-stdout-purity.e2e.test.ts :43 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/validate-build-gate-parity.test.ts :4 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/client/src/discovery-double-retired-key.test.ts :81 import { readdirSync, readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/connection-credential-store.test.ts :14 import { mkdtempSync, rmSync, statSync, writeFileSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/connection-credential-store.ts :25 import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/local-manifest-source.test.ts :11 import { mkdtempSync, mkdirSync, rmSync, writeFileSync, readdirSync, existsSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/local-manifest-source.ts :31 import { existsSync, mkdirSync, readFileSync, readdirSync, unlinkSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/marketplace-install-local-bundle.test.ts :12 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/marketplace-install-local-conflict.test.ts :14 import { mkdtempSync, rmSync, readdirSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/marketplace-install-local-corrupt-ledger.test.ts :36 import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/marketplace-install-local-heal.test.ts :21 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/marketplace-install-local-offline-degradation.test.ts :27 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/marketplace-install-local-posture-gate.test.ts :27 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/marketplace-install-local-reseed.test.ts :17 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/marketplace-install-local-seed-lookup.test.ts :25 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/marketplace-install-local-state-machine-exempt.test.ts :25 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/marketplace-install-local-storage-dir.test.ts :27 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/marketplace-install-local-tenancy-posture.test.ts :33 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/runtime-config-marketplace-derivation.test.ts :44 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/core/src/logger-esm-file.test.ts :4 // logger is consumed as ESM (#3110). `openFileStream` used to `require('fs')`
fs objectstack-ai-objectstack-e9cb9ab/packages/core/src/logger.ts :269 const stream = fs.createWriteStream(path, { flags: 'a' });
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/core/src/security/operation-private-keys.pin.test.ts :80 import { readFileSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/create-objectstack/src/index.ts :36 import fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/create-objectstack/src/rewrite-identity.test.ts :8 import fs from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/create-objectstack/src/rewrite-identity.ts :46 import fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/create-objectstack/src/template-consistency.test.ts :9 import fs from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/create-objectstack/src/template-copy.ts :7 import fs from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/create-objectstack/tsup.config.ts :4 import { cpSync } from 'fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-memory/src/persistence/file-adapter.ts :3 import * as fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-memory/src/persistence/persistence.test.ts :3 import * as fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sql/src/adr0120-three-posture-conformance.test.ts :4 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sql/src/declared-index-retired-keys.test.ts :3 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sql/src/sql-driver-autonumber-persistence.test.ts :4 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sql/src/sql-driver-external-columnmap.test.ts :13 import { rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sql/src/sql-driver-external-remote-name.test.ts :20 import { rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sql/src/sql-driver-multiwrite-tx.test.ts :9 import fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sql/src/sql-driver-overlay-index-drift.test.ts :3 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sql/src/sql-driver-sqlite-absent-file.test.ts :19 import { mkdtempSync, rmSync, existsSync, readdirSync, writeFileSync, mkdirSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sql/src/sql-driver-sqlite-journal-mode.test.ts :10 import { existsSync, mkdtempSync, rmSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sql/src/sql-driver.ts :86 import { existsSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sqlite-wasm/scripts/restart-proof.mjs :9 import { readFile, writeFile } from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sqlite-wasm/src/sqlite-wasm-driver-durability.test.ts :12 } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sqlite-wasm/src/sqlite-wasm-driver-journal-mode.test.ts :9 import { mkdtempSync, rmSync, writeFileSync, existsSync, readdirSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sqlite-wasm/src/sqlite-wasm-driver-returning-persist.test.ts :4 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sqlite-wasm/src/sqlite-wasm-driver-transaction-persist.test.ts :4 import { mkdtempSync, rmSync, statSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sqlite-wasm/src/sqlite-wasm-driver.test.ts :4 import { mkdtempSync, rmSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sqlite-wasm/src/wasm-connection.ts :167 await this.fs.mkdir(dir, { recursive: true });
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/formula/src/rls-predicate.test.ts :16 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/formula/src/skill-catalog-sync.test.ts :2 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/lint/scripts/check-doc-formula-expressions.mjs :150 import { readdirSync, readFileSync, existsSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/lint/src/authoring-rule-wiring.test.ts :67 import { existsSync, readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/lint/src/lazy-deps.test.ts :45 import { existsSync, readFileSync, readdirSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/lint/src/lint-liveness-properties.ts :25 import { existsSync, readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/lint/src/lint-startup-registry-verdict.corpus.test.ts :27 import { readdirSync, readFileSync, statSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/lint/src/rule-id-barrel-exports.test.ts :54 import { readFileSync, readdirSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/lint/src/runtime-lazy-deps.test.ts :24 import { existsSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/lint/src/validate-expressions.test.ts :1 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/lint/src/validate-org-axis-red-lines.test.ts :3 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/lint/src/validate-rule-compilability.test.ts :18 import { existsSync, readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/lint/src/validate-rule-schema-formats.test.ts :20 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/lint/src/validate-security-posture.test.ts :9 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/lint/src/validate-visibility-predicates.test.ts :3 import { readFileSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/metadata-fs/src/jsonl-log.ts :9 * - Append with `O_APPEND` semantics (Node's `fs.appendFile` is
fs objectstack-ai-objectstack-e9cb9ab/packages/metadata-fs/src/repository.ts :24 import fs from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/metadata-fs/test/contract.test.ts :7 import fs from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/metadata-fs/test/fs-behavior.test.ts :4 import fs from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/metadata-fs/test/no-root-on-attach.test.ts :24 import fs from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/metadata-fs/test/self-write-suppression.test.ts :65 import fs from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/metadata-fs/test/watch-dot-root.test.ts :38 import fs from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/metadata-fs/test/watch-write-registration.test.ts :55 import fs from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/metadata-protocol/src/sys-metadata-repository.draft-drain.test.ts :38 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/metadata-protocol/src/sys-metadata-repository.history-counters.test.ts :35 import { readFileSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/metadata/src/loaders/filesystem-loader.ts :9 import * as fs from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/metadata/src/metadata-repository-fs-dot-root.test.ts :24 import fs from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/metadata/src/metadata.test.ts :4 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/metadata/src/node-metadata-manager-degraded-file-event.test.ts :38 import * as fs from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/metadata/src/node-metadata-manager-fs-invalidation.test.ts :37 import * as fs from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/metadata/src/plugin-hmr-reload.test.ts :12 import { mkdtempSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/metadata/src/plugin-no-metadata-root-on-boot.test.ts :24 import { mkdtempSync, rmSync, existsSync, readdirSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/metadata/src/plugin.ts :3 import { readFile } from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/objectql/scripts/dry-run-hash-compat.ts :269 const raw = await fs.readFile(path, 'utf8');
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/objectql/src/core-boundary.ratchet.test.ts :13 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/objectql/src/engine-middleware-operation-vocabulary.test.ts :92 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/platform-objects/src/managed-api-method-affordance-sweep.test.ts :89 import { readdirSync, statSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-approvals/src/admin-exemption-retired.test.ts :62 import { readdirSync, readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-auth/src/managed-extension-fields.test.ts :102 import { readFileSync, readdirSync, statSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-auth/src/rate-limit-storage-isolation.test.ts :43 import { readFileSync, existsSync, readdirSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-hono-server/src/hono-plugin.ts :14 import * as fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-security/src/audience-anchor-set-claims.pin.test.ts :53 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/dogfood/test/attachments-permission-matrix.dogfood.test.ts :20 import { mkdtempSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/dogfood/test/authz-conformance.test.ts :18 import { readdirSync, readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/dogfood/test/build-shaped-artifact.ts :68 import { writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/dogfood/test/declarative-endpoint-policy.dogfood.test.ts :35 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/dogfood/test/enterprise-organizations.test.ts :18 import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/dogfood/test/expression-conformance.test.ts :14 import { readFileSync, readdirSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/dogfood/test/field-file-collection.dogfood.test.ts :35 import { promises as fs } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/dogfood/test/flow-durable-suspend.dogfood.test.ts :41 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/dogfood/test/flow-trigger-conformance.test.ts :11 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/dogfood/test/meta-published-and-state-routes.dogfood.test.ts :20 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/dogfood/test/showcase-declarative-endpoints.dogfood.test.ts :48 import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/dogfood/test/showcase-object-extension-meta-read.dogfood.test.ts :32 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/dogfood/test/showcase-object-extension-scalar-divergence.dogfood.test.ts :47 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/dogfood/test/validation-conformance.test.ts :12 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/downstream-contract/test/source-resolution.pin.test.ts :4 import { readFileSync, existsSync, readdirSync, statSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/rest/src/discovery-double-retired-key.test.ts :52 import { readdirSync, readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/api-exposure.test.ts :3 import fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/app-plugin.disabled-seed.test.ts :26 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/artifact-function-declarations.test.ts :15 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/bulk-write-real-driver.integration.test.ts :13 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/datasource-autoconnect.test.ts :24 import { existsSync, rmSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/default-host.ts :28 import { existsSync, mkdirSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/domains/packages-readonly-gate.test.ts :46 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/error-envelope.conformance.test.ts :29 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/expand-nested-fields-join-key.integration.test.ts :37 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/http-server-retirement.test.ts :50 import { existsSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/load-artifact-bundle.ts :29 import { readFile } from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/package-duplicate-adopt-org-scope.integration.test.ts :9 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/package-list-commits-org-scope.integration.test.ts :9 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/package-revert-commit-org-scope.integration.test.ts :10 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/package-state-store.test.ts :17 import { mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/package-state-store.ts :20 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/package-uninstall-org-scope.integration.test.ts :9 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/preserve-audit-real-driver.integration.test.ts :26 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/resolve-project-database.test.ts :16 import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/resolve-project-database.ts :45 import { existsSync, readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/sandbox/nested-write-real-sqlite.integration.test.ts :28 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/sandbox/undeclared-field-write-driver-split.integration.test.ts :131 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/seed-multi-value-lookup-real-driver.integration.test.ts :14 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/standalone-stack.test.ts :18 import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/standalone-stack.ts :56 import { mkdirSync, existsSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-automation/src/connector-materialization.test.ts :12 import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-automation/src/engine.test.ts :2077 expect(() => engine.evaluateCondition('require("fs").readFileSync("/etc/passwd")', vars)).toThrow(/require/);
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-automation/src/paused-run-visibility.test.ts :68 import { mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-datasource/src/__tests__/datasource-pool-support.test.ts :47 import { readFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-datasource/src/__tests__/default-datasource-driver-factory.test.ts :9 import { existsSync, mkdtempSync, rmSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-datasource/src/sqlite-driver-fallback.test.ts :4 import { existsSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-i18n/src/file-i18n-adapter.test.ts :6 import * as fs from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/services/service-i18n/src/file-i18n-adapter.ts :5 import * as fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-settings/src/local-crypto-provider.test.ts :4 import { mkdtempSync, rmSync, writeFileSync, existsSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/services/service-settings/src/local-crypto-provider.ts :9 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-storage/src/error-envelope.conformance.test.ts :38 import { promises as fs } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-storage/src/local-storage-adapter.metrics.test.ts :4 import { mkdtemp, rm } from 'node:fs/promises';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-storage/src/local-storage-adapter.test.ts :4 import { promises as fs } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/services/service-storage/src/local-storage-adapter.ts :3 import { promises as fs, createReadStream, createWriteStream } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-storage/src/storage-adapter-list.conformance.test.ts :45 import { promises as fs } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-storage/src/storage-routes.metadata-outage.test.ts :22 import { promises as fs } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-storage/src/storage-routes.test.ts :8 import { promises as fs } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-storage/src/storage-service-plugin.metrics.test.ts :4 import { promises as fs } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-storage/src/storage-service-plugin.test.ts :4 import { promises as fs } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-storage/src/success-envelope.conformance.test.ts :55 import { promises as fs } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/analyze-bundle-size.ts :10 import fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/build-api-surface.ts :56 import { readFileSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/build-docs.ts :20 import fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/build-export-origins.ts :80 import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/build-migration-registry.ts :92 import { readFileSync, readdirSync, writeFileSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/build-openapi.ts :3 import fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/build-schemas-check-mode.test.ts :52 import fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/build-schemas.ts :8 import fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/build-skill-docs.ts :22 import fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/build-skill-references.ts :26 import fs from 'fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/build-spec-changes.ts :44 import { readFileSync, writeFileSync, existsSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/build-strictness-ledger-counts.mts :30 import fs from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/build-upgrade-guide.ts :18 import { readFileSync, writeFileSync, existsSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/category-title.test.ts :30 import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
fs (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/check-dual-source-exports.ts :64 import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/types/src/node.ts :97 import { readFileSync } from 'node:fs';
fs objectstack-ai-objectstack-e9cb9ab/packages/verify/src/conformance.ts :28 import { existsSync, readFileSync } from 'node:fs';

shell / exec 159

shell objectstack-ai-objectstack-e9cb9ab/eslint.config.mjs :158 const uncontracted = new RegExp(`^(${UNCONTRACTED_SLOTS})$`);
shell objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/create.ts :7 import { execSync } from 'child_process';
shell objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/dev.ts :5 import { spawnSync, spawn } from 'child_process';
shell objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/doctor.ts :5 import { execSync } from 'child_process';
shell objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/environments/bind.ts :6 import { spawnSync } from 'node:child_process';
shell objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/init.ts :45 * - 2-20 chars, `^[a-z][a-z0-9_]{1,19}$`
shell objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/login.ts :233 const { exec } = await import('node:child_process');
shell objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/start.ts :5 import { spawn, spawnSync } from 'child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/test.ts :49 return { re: new RegExp(`^${source}$`) };
shell objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/auth-flows.ts :69 const { exec } = await import('node:child_process');
shell objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/build-runtime.ts :175 const re = new RegExp(`^${baseName}\\.[a-f0-9]+\\.mjs(\\.map)?$`);
shell objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/dev-restart.ts :143 * The slice of `child_process.ChildProcess` the coordinator needs — narrow so
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/sqlite-occupancy.test.ts :18 import { spawn, type ChildProcess } from 'node:child_process';
shell objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/sqlite-occupancy.ts :78 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/authoring-rule-command-parity.test.ts :26 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/cloud-login-json-ndjson.e2e.test.ts :66 import { execFile, execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/emit-json-pipe.test.ts :4 import { execFile, spawn } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/format-zod-union.test.ts :31 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/helpers/serve-process.ts :13 import { spawn } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/json-stdout-purity.e2e.test.ts :60 import { execFile } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/login-json-ndjson.e2e.test.ts :62 import { execFile, execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/login-json-noninteractive.e2e.test.ts :52 import { spawn } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/metadata-type-schema-gate.test.ts :44 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/migrate-exit-code.e2e.test.ts :34 import { execFile } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/migrate-meta.e2e.test.ts :18 import { execFile } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/qa-empty-glob-exit-code.e2e.test.ts :36 import { execFile } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/serve-app-runtime-hooks.e2e.test.ts :25 import { execFile } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/serve-mcp-capability-collision.e2e.test.ts :46 import { spawn, type ChildProcessWithoutNullStreams } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/serve-mcp-stdio-answers.e2e.test.ts :45 import { spawn, type ChildProcessWithoutNullStreams } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/serve-stdio-stdout-purity.e2e.test.ts :42 import { spawn, type ChildProcessWithoutNullStreams } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/client/src/client-url-conformance.test.ts :92 const src = `^${head}${optionalTail ? '(?:/[^/]+)?' : ''}$`;
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/core/src/logger-esm-file.test.ts :18 import { spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/core/src/security/operation-private-keys.pin.test.ts :79 import { execFileSync } from 'node:child_process';
shell objectstack-ai-objectstack-e9cb9ab/packages/core/src/security/plugin-permission-enforcer.ts :340 return new RegExp(`^${regexStr}$`).test(str);
shell objectstack-ai-objectstack-e9cb9ab/packages/create-objectstack/src/index.ts :39 import { execSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/create-objectstack/src/template-consistency.test.ts :12 import { execFileSync } from 'node:child_process';
shell objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-memory/src/filter-refusal.ts :380 * [#5324] A `$`-key in a NODE position that is not a declared combinator.
shell objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-memory/src/memory-driver.ts :837 // Now the same pattern translation the `$`-spelling takes one method over,
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-memory/src/memory-filter-vocabulary-refusal.test.ts :203 // copied any `$`-key it did not recognise straight into the mingo query.
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-mongodb/src/mongodb-filter-shape-refusal.test.ts :28 * - **A `$`-key in a NODE position** — the severe one, and the reason this batch
shell objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-mongodb/src/mongodb-filter.ts :215 // [#5346] Everything still `$`-prefixed at this point is an UNDECLARED
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sql/src/sql-driver-out-of-contract-filter-input.test.ts :15 * A `$`-key that is not `$and`/`$or`/`$not` was compiled as a COLUMN of that
shell objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sql/src/sql-driver.ts :1148 * equality. `matches-filter.ts` `evalField` sees an all-`$` key set and
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-turso/src/remote-transport-node-operator-refusal.test.ts :4 * [#5769] A `$`-key in a NODE position that is not a declared combinator is
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-turso/src/remote-transport-undeclared-aggregate-keys.test.ts :27 * so it is closed in the same breath rather than left as a new fork (#5240).
shell objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-turso/src/remote-transport.ts :96 * The `$`-keys a filter NODE may carry (#5769).
shell objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-turso/src/turso-driver.ts :811 // array combinators rather than passing through as an opaque `$`-key
shell objectstack-ai-objectstack-e9cb9ab/packages/formula/src/matches-filter.ts :138 * `$and` element, an unknown `$`-operator, a bare array field spec) are left to
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/lint/src/lazy-deps.test.ts :44 import { execFileSync } from 'node:child_process';
shell objectstack-ai-objectstack-e9cb9ab/packages/lint/src/lint-flow-patterns.ts :510 // - `$source.id` — a `$`-prefixed reference written bare (resolves as a
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/lint/src/runtime-lazy-deps.test.ts :23 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/lint/src/validate-org-axis-red-lines.test.ts :713 return new RegExp(`^${literals.join('[^.\\[\\]]+')}$`);
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/lint/src/validate-predicate-path-refs.test.ts :367 // `$` is in the shared grammar and NOT in CEL's identifier syntax, so this
shell objectstack-ai-objectstack-e9cb9ab/packages/lint/src/validate-predicate-path-refs.ts :151 * containing `$`, which the grammar admits but CEL's own identifier syntax does
shell objectstack-ai-objectstack-e9cb9ab/packages/metadata-protocol/src/migrations/overlay-index.ts :271 await exec(buildOverlayFallbackIndexSql(indexName));
shell objectstack-ai-objectstack-e9cb9ab/packages/metadata-protocol/src/migrations/partial-index-probe.ts :238 await exec(`DROP INDEX IF EXISTS ${indexName}`);
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/metadata-protocol/src/protocol.graft-normalized-operators.test.ts :14 * everything else — auxiliary fields, unknown keys, `$`-token conditions, array
shell objectstack-ai-objectstack-e9cb9ab/packages/metadata-protocol/src/protocol.ts :815 // sides being strings so a `$`-token condition object — a different
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/metadata-protocol/src/sys-metadata-repository.package-writability.test.ts :449 // the fork (NARROW vs BROAD) goes back to the maintainer — it is not a
shell objectstack-ai-objectstack-e9cb9ab/packages/objectql/src/engine.ts :5605 const regex = new RegExp(`^${regexPattern}$`);
shell objectstack-ai-objectstack-e9cb9ab/packages/objectql/src/filter-comparand-shape.ts :67 * - **A field spec with no `$` keys** (`{ author: { name: 'x' } }`) — a
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/objectql/src/protocol-data.test.ts :75 // [#2926 ⑩] Unknown `$`-prefixed params must fail loudly instead of
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/objectql/src/protocol-unregistered-object.test.ts :162 // A bad `$` param on a KNOWN object is a 400 (#2926 ⑩); on an unknown
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/objectql/src/validation/operator-object-write-value.test.ts :137 // `$` sigil. `{ $inn: … }` is out of scope by construction; judging every
shell objectstack-ai-objectstack-e9cb9ab/packages/objectql/src/validation/record-validator.ts :350 * The deliberate consequence: an **undeclared** `$`-spelling (`{ $inn: … }`) is
shell objectstack-ai-objectstack-e9cb9ab/packages/objectql/src/validation/rule-validator.ts :1040 // Own-property, never `in`: a field name is `^[a-z_][a-z0-9_]*$`, which
shell objectstack-ai-objectstack-e9cb9ab/packages/observability/src/perf-timing.ts :87 * anchored `_+$` quantifier backtracks polynomially on underscore-heavy input
shell objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-hono-server/src/pattern-matcher.ts :60 const regex = new RegExp(`^${regexPattern}$`);
shell objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-hono-server/src/route-pattern.ts :39 return new RegExp(`^${regexBody}$`);
shell objectstack-ai-objectstack-e9cb9ab/packages/qa/http-conformance/src/adapter.ts :87 return { regex: new RegExp(`^${body}$`), keys };
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/http-conformance/src/query-multiplicity.conformance.test.ts :23 * The cli-lane seat then ruled the fork (2026-08-10, #6878 comment 5236010909):
shell objectstack-ai-objectstack-e9cb9ab/packages/rest/src/import-coerce.ts :210 * separators (`1,234`), a leading currency symbol (`$` `¥` `€` `£` `￥`), a
shell objectstack-ai-objectstack-e9cb9ab/packages/rest/src/rest-server.ts :6750 // `$`-alias table, the implicit field-equality bucket, and
shell objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/api-mapping.ts :66 * numeric key (`records.0.id`). No wildcards, no filters, no `$`-syntax, no
shell objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/domains/automation.ts :842 // INVALID_SIGNAL → 400, the signal wrote the engine's `$` variable
shell objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/middleware.ts :181 const regex = new RegExp(`^${regexPattern}$`);
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-analytics/src/__tests__/filter-normalizer-mixed-wrapper.test.ts :4 * [#6444, ruled Option A on 2026-08-08] A field wrapper mixing `$`-operator
shell objectstack-ai-objectstack-e9cb9ab/packages/services/service-analytics/src/analytics-service.ts :1734 * `$and`/`$or`/`$not` recursion, `$`-prefixed operator keys, `$between`
shell objectstack-ai-objectstack-e9cb9ab/packages/services/service-analytics/src/comparand-shape.ts :262 // A `$`-prefixed key is an operator or a combinator, so the FIELD in scope
shell objectstack-ai-objectstack-e9cb9ab/packages/services/service-analytics/src/read-scope-sql.ts :637 * - a NON-`$` key inside the constraint object (`{ owner: { manager_id:
shell objectstack-ai-objectstack-e9cb9ab/packages/services/service-analytics/src/strategies/filter-normalizer.ts :293 * that carries `$`-operator keys AND non-`$` keys at once used to compile its
shell objectstack-ai-objectstack-e9cb9ab/packages/services/service-automation/src/engine.ts :1990 * (`name` is `^[a-z_][a-z0-9_]*$` per {@link ConnectorSchema}, `origin` is
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-automation/src/resume-authority-gate.test.ts :503 it('leaves ordinary author variable names alone, `$` mid-name included', async () => {
shell objectstack-ai-objectstack-e9cb9ab/packages/services/service-cluster-redis/src/kv.ts :109 // exec() returns null when WATCH detected a concurrent change.
shell objectstack-ai-objectstack-e9cb9ab/packages/services/service-messaging/src/recipient-resolver.ts :8 * (no regex) to stay strictly linear — the obvious `^[^\s@]+@[^\s@]+\.[^\s@]+$`
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-settings/src/manifests/company.manifest.test.ts :35 // `^[A-Za-z]{2}$` constrained shape only (`ZZ` and `UK` passed the write
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-settings/src/settings-env-pattern.test.ts :67 // pattern + length window: `^[a-z]+$` and `minLength: 5`.
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-settings/src/settings-service.test.ts :2126 // Shape-valid, assigned to nobody: `ZZ` passes `^[A-Za-z]{2}$`, the domain
shell objectstack-ai-objectstack-e9cb9ab/packages/services/service-settings/src/settings-service.ts :1771 // does not exist; `ZZ` matches `^[A-Za-z]{2}$` and is assigned to
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-settings/src/value-domains.test.ts :106 // past `^[A-Za-z]{2}$`; `UK` is a CLDR alias, not an ISO 3166-1 code
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/build-schemas-check-mode.test.ts :51 import { spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/build-schemas.ts :10 import { spawnSync } from 'child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/check-generated-ledger.test.ts :31 import { spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/check-generated.ts :29 import { execSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/check-react-blocks-declaration-parity.test.ts :40 import { execFileSync, spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/check-skill-examples.ts :21 * existing `check:doc-authoring` scanner (which keys on `^```(ts|typescript|tsx)$`)
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/check-variant-docs.mts :203 const yaml = new RegExp(`^\\s*${esc(u.disc)}\\s*:\\s*${esc(v)}\\s*(#.*)?$`, 'm');
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/def-key-collisions.test.ts :26 import { spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/dist-freshness-adoption.test.ts :40 import { spawnSync, type SpawnSyncReturns } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/dist-freshness.test.ts :28 import { spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/file-description.test.ts :497 // Mirrors `build-docs.ts`'s `sourcePathToDocsRoute`: `$`-anchored with a
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/liveness/build-state-counts.mts :55 import { spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/liveness/check-liveness.test.ts :22 import { spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/liveness/evidence.mts :47 const PATH_RE = new RegExp(`^(?:${REPO_ROOTS.join('|')})/[\\w.@-]+(?:/[\\w.@-]+)*\\.[a-zA-Z]{1,5}$`);
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/openapi-self-consistency.test.ts :57 import { spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/scripts/sharded-artifacts.test.ts :404 const { spawnSync } = require('node:child_process') as typeof import('node:child_process');
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/ai/mcp.zod.ts :56 * - `stdio`: command to spawn (e.g. `npx @modelcontextprotocol/server-filesystem`)
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/api/error-code-ledger.zod.ts :60 * repo), SCREAMING_SNAKE (`^[A-Z][A-Z0-9_]*$` — lint-enforced by
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/automation/flow-region-cycle.test.ts :40 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/contracts/automation-service.ts :215 * engine's own `$` variable namespace rather than the author's field
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/data/external-lookup-retirement.test.ts :13 // ADR-0049 enforce-or-remove, fork (b) of the #8075 census (accepted
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/data/filter-comparand-type.ts :70 * descending into the no-`$`-key form would invent a contract no backend
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/data/filter-field-reference-lowering.test.ts :20 * consumer reads an all-`$` key set as an OPERATOR SPEC, and no backend
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/data/filter-verdict.ts :34 * `$`-prefixed unknown combinator and the `undefined` comparand in `driver-sql`,
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/data/filter.test.ts :446 * #7711 made that branch `.strict()` and ruled `$`-prefixed keys out of the
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/data/filter.zod.ts :823 * - the whole source is anchored `^…$`: `LIKE` matches the WHOLE value, so a
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/migrations/entries/retired-defs/17.data__ExternalDataSource.ts :4 // enforce-or-remove; fork (b) of the #8075 census, accepted 2026-08-12). The
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/migrations/entries/retired-defs/17.system__MessageQueueConfig.ts :4 // enforce-or-remove; fork (b) of the #8075 census, accepted 2026-08-12). The
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/migrations/entries/semantic/17.external-lookup-message-queue-families-retired.ts :28 'Both families are the #8075 census verdict (fork (b), accepted 2026-08-12): '
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/migrations/registry.ts :2974 'Both families are the #8075 census verdict (fork (b), accepted 2026-08-12): '
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/shared/strict-object.test.ts :3 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/system/book.zod.ts :236 return new RegExp(`^${escaped}$`);
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/system/message-queue-retirement.test.ts :13 // ADR-0049 enforce-or-remove, fork (b) of the #8075 census (accepted
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/system/settings-manifest.test.ts :257 // both — `^[A-Za-z]{2}$` is what admits `ZZ` today, which is why the domain
shell (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/system/settings-manifest.zod.ts :525 * where `pattern` cannot help — `^[A-Za-z]{2}$` admits `ZZ`, and
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-adr-0087-registration.mjs :186 import { execFileSync, spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-adr-anchors.mjs :178 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-adr-merge-approval.mjs :206 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-changeset-no-major.mjs :141 * still holds — `node:child_process` and the `git` binary are both already
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-cross-package-test-inputs.mjs :198 return new RegExp(`^${re}$`);
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-driver-conformance.mjs :356 // (`convertConditionToMongo`), the `$`-spelling's four
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-driver-memory-census.mjs :109 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-empty-changeset.mjs :140 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-engine-split-ratio.mjs :28 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-filter-alias-parity.mjs :196 * as `canonical -> extra spellings`, plus the `$`-alias table.
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-i18n-bundles.mjs :86 import { spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-i18n-coverage.mjs :92 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-node-version.mjs :36 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-nul-bytes.mjs :267 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-objectui-pin-fresh.mjs :77 import { execFileSync, spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-org-identifier.mjs :43 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-prerelease-pin-watch.mjs :107 import { spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-published-files.mjs :164 const rx = new RegExp(`^${src}$`);
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-query-options-erasure-ratchet.mjs :43 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-regen-pending.mjs :67 import { execFileSync, execSync, spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-skill-frame-freshness.mjs :106 import { spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-slot-lookup-ratchet.mjs :32 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-test-typecheck.mts :59 import { spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-type-check-coverage.mjs :281 import { spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-workflow-status-functions.mjs :74 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/docs-audit/affected-docs.mjs :61 import { execSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/docs-audit/check-audit-scope.mjs :85 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/git-merge-regen.mjs :57 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/measure-partial-retirement-annotation.mjs :73 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/objectui-changeset-digest.mjs :168 import { execFileSync, spawnSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/objectui-range.mjs :75 import { execFileSync } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/publish-smoke-pack.mjs :21 import { execFile } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/run-with-stall-guard.mjs :83 import { spawn } from 'node:child_process';
shell (weak) objectstack-ai-objectstack-e9cb9ab/scripts/setup-git-hooks.mjs :28 import { execFileSync } from 'node:child_process';

network 74

net (weak) objectstack-ai-objectstack-e9cb9ab/apps/docs/components/ai/page-actions.tsx :29 'text/plain': fetch(markdownUrl).then(async (res) => {
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/adapters/hono/src/hono.test.ts :576 * requests to the inner ObjectStack Hono app via `inner.fetch()`.
net objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/cloud/whoami.ts :40 const res = await globalThis.fetch(`${config.url}/api/v1/auth/get-session`, {
net objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/datasource/introspect.ts :42 const res = await fetch(
net objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/datasource/list-tables.ts :39 const res = await fetch(`${url}/api/v1/datasources/${args.name}/external/tables${qs}`, {
net objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/datasource/validate.ts :35 const res = await fetch(`${url}/api/v1/datasources/${args.name}/external/validate`, {
net objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/generate.ts :486 lines.push(' const res = await fetch(`${this.baseUrl}${path}`, {');
net objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/login.ts :425 const res = await globalThis.fetch(`${url}/api/v1/auth/device/code`, {
net objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/package/install.ts :259 const response = await fetch(url, { ...init, signal: controller.signal });
net objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/package/publish.ts :634 const response = await fetch(url, {
net objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/plugin/publish.ts :170 const response = await fetch(url, {
net objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/serve.ts :6 import net from 'net';
net objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/auth-flows.ts :139 const res = await globalThis.fetch(`${url}/api/v1/auth/device/code`, {
net objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/extract-hook-body.ts :16 * the regex rejects (top-level `import`, `require(`, `fetch(`, `process.*`,
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/cloud-login-json-ndjson.e2e.test.ts :67 import { createServer, type Server } from 'node:http';
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/extract-hook-body.test.ts :65 it('rejects fetch()', () => {
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/login-json-ndjson.e2e.test.ts :63 import { createServer, type Server } from 'node:http';
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/login-json-noninteractive.e2e.test.ts :53 import { createServer, type Server } from 'node:http';
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/serve-mcp-capability-collision.e2e.test.ts :187 return fetch(`${base}/mcp`, {
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/serve-mcp-stdio-answers.e2e.test.ts :199 const signIn = await fetch(`${base}/auth/sign-in/email`, {
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/serve-stdio-stdout-purity.e2e.test.ts :206 const signIn = await fetch(`${base}/auth/sign-in/email`, {
net objectstack-ai-objectstack-e9cb9ab/packages/client-react/src/metadata-hooks.tsx :89 // language switch must re-fetch (it is *not* reactive via i18next). Folding
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/client/src/client.batch-transaction.test.ts :169 const res = await fetch(`${baseUrl}/api/v1/batch`, {
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/client/src/client.environment-scoping.test.ts :101 const res = await fetch(
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/client/src/client.hono.test.ts :170 expect((await fetch(`${baseUrl}/api/v1/meta/objects`)).status).not.toBe(404);
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/client/src/i18n-wire-dialect.test.ts :87 const res = await fetch(`${baseUrl}${dead}`);
net objectstack-ai-objectstack-e9cb9ab/packages/client/src/index.ts :647 const res = await this.fetch(`${this.baseUrl}${route}`);
net objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/cloud-connection-plugin.ts :229 const resp = await fetch(`${cloudUrl}/api/v1/cloud-connection/status${qs}`, {
net objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/marketplace-install-local-plugin.ts :535 const resp = await fetch(attempt.url, { headers });
net objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/marketplace-proxy-plugin.ts :296 const revalResp = await fetch(target, { method: 'GET', headers: revalHeaders });
net objectstack-ai-objectstack-e9cb9ab/packages/core/src/qa/http-adapter.ts :93 const response = await fetch(this.collectionUrl(objectName), {
net objectstack-ai-objectstack-e9cb9ab/packages/create-objectstack/src/index.ts :171 const res = await fetch(url, { redirect: 'follow' });
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-sql/src/sql-driver-connect-bound.test.ts :10 import net from 'node:net';
net objectstack-ai-objectstack-e9cb9ab/packages/metadata-core/src/cache.ts :20 * coalesce onto a single backend fetch (the "thundering herd"
net objectstack-ai-objectstack-e9cb9ab/packages/metadata-protocol/src/protocol.ts :5144 // single-app fetch (GET /meta/app/<name>) also sees the contributed
net objectstack-ai-objectstack-e9cb9ab/packages/metadata/src/loaders/remote-loader.ts :47 const response = await fetch(`${this.baseUrl}/${type}/${name}`, {
net objectstack-ai-objectstack-e9cb9ab/packages/metadata/src/plugin.ts :568 const res = await fetch(url, { redirect: 'follow', signal: controller.signal, headers });
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/objectql/src/hook-condition-previous-scope.test.ts :450 * The demand-driven prior fetch (`engine.ts`, the `wantsPriorRecord` gate) is
net objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-email/src/transports/fake-smtp.testkit.ts :17 import net from 'node:net';
net objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-email/src/transports/postmark.ts :73 const res = await fetch(this.endpoint, {
net objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-email/src/transports/resend.ts :69 const res = await fetch(this.endpoint, {
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-hono-server/src/adapter-drain.test.ts :23 const reqP = fetch(`http://127.0.0.1:${port}/slow`);
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-hono-server/src/fallback-seam.test.ts :45 server.getRawApp().fetch(new Request(`http://localhost${path}`, init));
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-hono-server/src/handler-throw-logging.test.ts :79 server.getRawApp().fetch(new Request(`http://localhost${path}`, init));
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-hono-server/src/middleware-seam.test.ts :50 server.getRawApp().fetch(new Request(`http://localhost${path}`, init));
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-hono-server/src/notfound-405.test.ts :7 // HonoHttpServer + the plugin's notFound wiring end-to-end through app.fetch().
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/http-conformance/src/adapter.test.ts :70 const res = await fetch(`${base}/echo/42?a=1&b=x&b=y`);
net objectstack-ai-objectstack-e9cb9ab/packages/qa/http-conformance/src/adapter.ts :3 import { createServer, Server, IncomingMessage, ServerResponse } from 'node:http';
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/http-conformance/src/conformance.integration.test.ts :125 const res = await fetch(`${base}/api/v1/ready`);
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/http-conformance/src/fallback-seam.conformance.test.ts :110 const owned = await fetch(`${base}/api/v1/thing`);
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/qa/http-conformance/src/query-multiplicity.conformance.test.ts :205 const res = await fetch(`${base}/probe?${PROBE_QUERY}`);
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/rest/src/remote-tables-twin.equivalence.test.ts :136 const res = await app.fetch(new Request(`http://local${SPELLING[spelling](qs)}`));
net objectstack-ai-objectstack-e9cb9ab/packages/rest/src/rest-server.ts :3589 // tests build a `Request` object through `app.fetch(...)`.
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/auth-unknown-subpath.hono.integration.test.ts :148 const res = await fetch(`${baseUrl}${UNKNOWN_PATH}`, {
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/dispatcher-plugin.anonymous-gate.integration.test.ts :109 fetch(`${baseUrl}/api/v1${path}`, {
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/dispatcher-plugin.endpoint-fallback.integration.test.ts :140 const res = await fetch(`${baseUrl}/api/v1/apps/showcase/tasks`);
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/dispatcher-plugin.multi-tenant-endpoint.integration.test.ts :223 const res = await fetch(`${baseUrl}${PATH}`, { headers: { 'X-Environment-Id': 'env-1' } });
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/dispatcher-plugin.rate-limit.integration.test.ts :138 statuses.push((await fetch(`${baseUrl}/api/v1/health`)).status);
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/dispatcher-plugin.ready.integration.test.ts :47 const res = await fetch(`${baseUrl}/api/v1/ready`);
net objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/load-artifact-bundle.ts :60 const res = await fetch(pathOrUrl, {
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/mcp-skill-method-not-allowed.hono.integration.test.ts :128 const res = await fetch(`${baseUrl}${SKILL_PATH}`, { method });
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/notification-schema-conformance.integration.test.ts :125 const res = await fetch(`${baseUrl}${path}`, {
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/notifications.hono.integration.test.ts :108 fetch(`${baseUrl}${path}`, {
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/route-parity.integration.test.ts :150 const res = await fetch(`${baseUrl}/api/v1/discovery`);
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/server-timing.integration.test.ts :75 const res = await fetch(`${baseUrl}/widgets`);
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-automation/src/builtin/http-delivery-outcome.integration.test.ts :20 * in the NODE — `durable: true` enqueues, everything else calls `fetch()` inline
net objectstack-ai-objectstack-e9cb9ab/packages/services/service-automation/src/builtin/http-nodes.ts :28 * - **Request/response (default)** — a synchronous `fetch()` returning
net objectstack-ai-objectstack-e9cb9ab/packages/services/service-automation/src/engine.ts :3821 // so a re-fetch (getSuspendedScreen) shows the new one.
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-datasource/src/__tests__/admin-routes.test.ts :10 * `getRawApp().fetch(...)` (no socket bind needed), proving the wiring path the
net (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-datasource/src/__tests__/envelope.conformance.test.ts :61 const res = await app.fetch(req(path, init));
net (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-adr-merge-approval.mjs :552 res = await fetch(url, { headers: apiHeaders(token) });
net (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-objectui-pin-fresh.mjs :111 res = await fetch(url, { headers: apiHeaders() });
net (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-prerelease-pin-watch.mjs :273 res = await fetch(url, {
net (weak) objectstack-ai-objectstack-e9cb9ab/scripts/pm/check-half-states.mjs :481 const res = await fetch(`${API}/rate_limit`, {

secrets 34

secrets (weak) objectstack-ai-objectstack-e9cb9ab/examples/app-showcase/e2e/global-setup.ts :20 const PASSWORD = process.env.SMOKE_PASSWORD || 'admin123';
secrets (weak) objectstack-ai-objectstack-e9cb9ab/examples/app-showcase/objectstack.config.ts :146 token: process.env.SLACK_BOT_TOKEN ?? 'xoxb-s…(24 chars, redacted)',
secrets (weak) objectstack-ai-objectstack-e9cb9ab/packages/adapters/hono/src/hono.test.ts :945 const ORIG_CORS_CREDENTIALS = process.env.OS_CORS_CREDENTIALS;
secrets objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/datasource/introspect.ts :10 const token = flags.token || process.env.OS_TOKEN;
secrets objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/datasource/list-tables.ts :8 const token = flags.token || process.env.OS_TOKEN;
secrets objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/datasource/validate.ts :8 const token = flags.token || process.env.OS_TOKEN;
secrets objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/package/publish.ts :364 let token = flags.token ?? process.env.OS_TOKEN ?? undefined;
secrets objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/plugin/publish.ts :107 let token = flags.token ?? process.env.OS_TOKEN ?? undefined;
secrets objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/serve.ts :1242 const databaseAuthToken = process.env.OS_DATABASE_AUTH_TOKEN || process.env.TURSO_AUTH_TOKEN;
secrets objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/api-client.ts :53 let token = options.token || process.env.OS_TOKEN;
secrets (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/package-publish-namespace.test.ts :47 const prevEnv = { url: process.env.OS_CLOUD_URL, key: process.env.OS_CLOUD_API_KEY };
secrets (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/plugin-publish.test.ts :50 const prevEnv = { url: process.env.OS_CLOUD_URL, key: process.env.OS_CLOUD_API_KEY };
secrets (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/test/remote-api-utils.test.ts :32 const originalToken = process.env.OS_TOKEN;
secrets objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/cloud-connection-plugin.ts :129 const cloudApiKey = (this.cfg.controlPlaneApiKey ?? process.env.OS_CLOUD_API_KEY ?? '').trim();
secrets objectstack-ai-objectstack-e9cb9ab/packages/cloud-connection/src/marketplace-install-local-plugin.ts :525 const cloudCredential = (process.env.OS_CLOUD_API_KEY ?? '').trim()
secrets objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-turso/src/index.ts :87 * authToken: process.env.TURSO_AUTH_TOKEN,
secrets objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-turso/src/turso-driver.ts :242 * authToken: process.env.TURSO_AUTH_TOKEN,
secrets (weak) objectstack-ai-objectstack-e9cb9ab/packages/mcp/src/__tests__/plugin.test.ts :211 delete process.env.OS_MCP_STDIO_API_KEY;
secrets (weak) objectstack-ai-objectstack-e9cb9ab/packages/mcp/src/mcp-stdio-tools.test.ts :534 process.env.OS_MCP_STDIO_API_KEY = 'osk_stdio_pin';
secrets objectstack-ai-objectstack-e9cb9ab/packages/plugins/embedder-openai/src/index.ts :100 * new OpenAIEmbedder({ apiKey: process.env.OPENAI_API_KEY! });
secrets (weak) objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-auth/examples/basic-usage.ts :28 secret: process.env.OS_AUTH_SECRET || 'your-secret-key-at-least-32-chars',
secrets (weak) objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-auth/src/auth-manager.test.ts :2696 process.env.OS_AUTH_SECRET = 'a-strong-production-secret-value';
secrets (weak) objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-auth/src/auth-plugin.test.ts :102 const prevClientSecret = process.env.GOOGLE_CLIENT_SECRET;
secrets objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-auth/src/auth-plugin.ts :1419 const password = process.env.OS_SEED_ADMIN_PASSWORD?.trim() || 'admin123';
secrets objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-email/src/transports/postmark.ts :20 * apiKey: process.env.POSTMARK_TOKEN!,
secrets objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-email/src/transports/resend.ts :19 * transport: new ResendTransport(process.env.RESEND_API_KEY!),
secrets objectstack-ai-objectstack-e9cb9ab/packages/plugins/plugin-email/src/transports/smtp.ts :50 * password: process.env.SMTP_PASSWORD,
secrets (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/standalone-stack.libsql.test.ts :135 process.env.OS_DATABASE_AUTH_TOKEN = 'from-os-env';
secrets objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/standalone-stack.ts :502 || process.env.OS_DATABASE_AUTH_TOKEN?.trim()
secrets (weak) objectstack-ai-objectstack-e9cb9ab/packages/services/service-automation/src/connector-materialization.test.ts :276 process.env.OS_TEST_ADR96_TOKEN = 'from-env';
secrets (weak) objectstack-ai-objectstack-e9cb9ab/packages/spec/src/automation/webhook.zod.ts :94 * secret: process.env.WEBHOOK_SIGNING_SECRET,
secrets (weak) objectstack-ai-objectstack-e9cb9ab/scripts/check-objectui-pin-fresh.mjs :98 const token = process.env.GITHUB_TOKEN || process.env.GH_TOKEN || '';
secrets (weak) objectstack-ai-objectstack-e9cb9ab/scripts/pm/check-half-states.mjs :152 const TOKEN = process.env.GITHUB_TOKEN ?? process.env.GH_TOKEN ?? '';
secrets (weak) objectstack-ai-objectstack-e9cb9ab/scripts/release-github-releases.mjs :648 const token = process.env.GITHUB_TOKEN || process.env.GH_TOKEN;

database 14

db (weak) objectstack-ai-objectstack-e9cb9ab/packages/cli/src/utils/sqlite-occupancy.test.ts :20 import Database from 'better-sqlite3';
db objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-mongodb/src/mongodb-aggregation.ts :10 import type { Document } from 'mongodb';
db (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-mongodb/src/mongodb-comparand-type-conformance.test.ts :31 import { BSON } from 'mongodb';
db objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-mongodb/src/mongodb-driver.ts :22 } from 'mongodb';
db objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-mongodb/src/mongodb-filter.ts :26 import type { Filter } from 'mongodb';
db (weak) objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-mongodb/src/mongodb-schema-declared-indexes.test.ts :19 import type { Db } from 'mongodb';
db objectstack-ai-objectstack-e9cb9ab/packages/drivers/driver-mongodb/src/mongodb-schema.ts :10 import type { Db, CreateIndexesOptions, IndexSpecification } from 'mongodb';
db objectstack-ai-objectstack-e9cb9ab/packages/services/service-cluster-redis/src/client.ts :3 import { Redis, type RedisOptions } from 'ioredis';
db objectstack-ai-objectstack-e9cb9ab/packages/services/service-cluster-redis/src/counter.ts :3 import type { Redis } from 'ioredis';
db objectstack-ai-objectstack-e9cb9ab/packages/services/service-cluster-redis/src/index.ts :24 import type { Redis } from 'ioredis';
db objectstack-ai-objectstack-e9cb9ab/packages/services/service-cluster-redis/src/kv.ts :3 import type { Redis } from 'ioredis';
db objectstack-ai-objectstack-e9cb9ab/packages/services/service-cluster-redis/src/lock.ts :3 import type { Redis } from 'ioredis';
db objectstack-ai-objectstack-e9cb9ab/packages/services/service-cluster-redis/src/pubsub.ts :3 import type { Redis } from 'ioredis';
db objectstack-ai-objectstack-e9cb9ab/packages/services/service-datasource/src/sqlite-driver-fallback.ts :10 * `require('better-sqlite3')`, and not even at knex construction, but at the

install hooks 3

postinstall objectstack-ai-objectstack-e9cb9ab/apps/docs/package.json :13 fumadocs-mdx
prepare objectstack-ai-objectstack-e9cb9ab/package.json :18 node scripts/setup-git-hooks.mjs
prepublishOnly (suspicious) objectstack-ai-objectstack-e9cb9ab/packages/console/package.json :27 node -e "const fs=require('fs');const p='dist/index.html';if(!fs.existsSync(p)){console.error('\n✗ @objectstack/console: '+p+' is missing — run scripts/build-console.sh before publishing.\n');process.

declared dependencies 12

@changesets/cli@^2.31.1
@types/node@^26.1.2
@typescript-eslint/parser@^8.65.0
eslint@^10.8.0
github-slugger@2.0.0
semver@^7.8.5
svelte@^5.56.8
tsup@^8.5.1
tsx@^4.23.1
turbo@^2.10.7
typescript@^6.0.3
yaml@^2.9.0

obfuscation 4

dynamic require()/import() objectstack-ai-objectstack-e9cb9ab/packages/cli/src/commands/serve.ts :1175 try { await import(`@objectstack/service-cluster-${__clusterDriver}`); }
dynamic require()/import() objectstack-ai-objectstack-e9cb9ab/packages/lint/src/lazy-deps.test.ts :174 check(await import(${JSON.stringify(pathToFileURL(join(distDir, 'index.js')).href)}));`,
dynamic require()/import() objectstack-ai-objectstack-e9cb9ab/packages/lint/src/runtime-lazy-deps.test.ts :115 check(await import(${JSON.stringify(pathToFileURL(join(distDir, 'runtime.js')).href)}));`,
dynamic require()/import() objectstack-ai-objectstack-e9cb9ab/packages/spec/src/automation/flow-region-cycle.test.ts :58 const mod = await import(${JSON.stringify(new URL('./flow.zod.ts', import.meta.url).href)});

perm:untrusted 2

untrusted (weak) objectstack-ai-objectstack-e9cb9ab/apps/docs/components/ai/page-actions.tsx :29 'text/plain': fetch(markdownUrl).then(async (res) => {
untrusted (weak) objectstack-ai-objectstack-e9cb9ab/packages/runtime/src/route-parity.integration.test.ts :210 const disc = await (await fetch(`${baseUrl}/api/v1/discovery`)).json();