MCP Observatory
1m ago Tracked 26,718 Last 1m ago 24h 1,587
github TypeScript analyzed 33d10b0

sergezuber/FABULA-LLM-5

github

The agent harness that makes small local models finish hard tasks — and prove it. Done is enforced by the engine, not the prompt: gates, rewinds, a judge, and a replayable Proof-of-Done receipt on every finished run. Any model in the socket. Local, sovereign, air-gapped-capable. macOS · Apple Silicon.

maintainer
sergezuber
license
MIT
first seen
2026-07-16
last seen
2026-08-02
releases · 30d
15
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged dynamic code execution ×3 in sergezuber/FABULA-LLM-5
  2. HIGH code analysis flagged dynamic code execution ×2 in sergezuber/FABULA-LLM-5
  3. HIGH code analysis flagged dynamic code execution ×2 in sergezuber/FABULA-LLM-5
capabilities 0 tools
transport http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 33d10b0 · analyzer v28 · 3d ago

skills & prompt files 43

danger signals18

code evidence vv0.78.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 1886

filesystem 74

  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/vite.js :1 import { readFileSync } from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/script/build.ts :4 import fs from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/script/dev.ts :7 import fs from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/script/fix-node-pty.ts :3 import fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/script/postinstall.mjs :3 import fs from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/agent.ts :9 import fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/providers.ts :9 import fs from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/receipt.ts :11 import { existsSync, readFileSync, readdirSync, rmSync, statSync } from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/serve.ts :5 import { readFileSync, writeFileSync, rmSync } from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/tui/component/dialog-image-list.tsx :11 import fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/tui/component/prompt/frecency.tsx :7 import { appendFile, writeFile } from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/tui/component/prompt/history.tsx :7 import { appendFile, writeFile } from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/tui/component/prompt/stash.tsx :7 import { appendFile, writeFile } from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/tui/context/kv.tsx :4 import { rename, rm } from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/tui/util/clipboard.ts :5 import fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/tui/util/editor.ts :2 import { rm } from "node:fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/tui/util/sound.ts :2 import { mkdirSync } from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/uninstall.ts :7 import fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/config/config.ts :8 import fsNode from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/config/managed.ts :3 import { existsSync } from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/control-plane/dev/debug-workspace-plugin.ts :2 import { rename, writeFile } from "node:fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/file/watcher.ts :5 import { readdir } from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/global/index.ts :1 import fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/lsp/server.ts :7 import fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/memory/reconcile.ts :1 import * as fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/patch/index.ts :3 import * as fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/plugin/index.ts :40 import fs from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/plugin/mimo.ts :8 import fs from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/plugin/subagent-progress-checker.ts :2 import fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/project/project-id.ts :1 import * as fs from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/project/project.ts :2 import * as nodeFs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/project/vcs.ts :24 const buf = yield* fs.readFile(full).pipe(Effect.catch(() => Effect.succeed(new Uint8Array())))
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/server/routes/global.ts :92 import nodeFs from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/server/routes/instance/session.ts :34 import fs from "node:fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/server/routes/ui.ts :4 import fs from "node:fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/session/checkpoint-paths.ts :2 import fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/session/checkpoint-progress-reconcile.ts :1 import fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/session/checkpoint-retry.ts :1 import fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/session/checkpoint.ts :1 import fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/session/claude-import.ts :2 import { existsSync } from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/session/codex-import.ts :2 import { existsSync } from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/session/external-import.ts :2 import { existsSync } from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/session/opencode-import.ts :1 import { existsSync } from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/session/prompt.ts :13 import { readdir } from "node:fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/session/trace.ts :21 import { appendFileSync, existsSync, statSync, mkdirSync, renameSync } from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/skill/builtin/bundle.macro.ts :1 import fs from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/skill/compose/bundle.macro.ts :1 import fs from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/storage/db.ts :12 import { readFileSync, readdirSync, existsSync } from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/storage/json-migration.ts :9 import { existsSync } from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/team/index.ts :8 import * as fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/tool/bash.ts :3 import { createWriteStream, readFileSync } from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/tool/read.ts :3 import { createReadStream } from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/util/filesystem.ts :1 import { chmod, mkdir, readFile, stat as statFile, writeFile } from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/util/log.ts :2 import fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/workflow/persistence.ts :4 import { appendFileSync, mkdirSync } from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/plugin/src/example-workspace.ts :2 import { mkdir, rm } from "node:fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/shared/src/filesystem.ts :3 import { realpathSync } from "fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/packages/shared/src/util/flock.ts :4 import { mkdir, readFile, rm, stat, utimes, writeFile } from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/script/beta.ts :4 import fs from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/engine/script/changelog.ts :3 import { rm } from "fs/promises"
  • fs sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-attest.ts :14 import { readFileSync } from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-buddy.ts :19 import * as fs from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-context.ts :14 import { promises as fs, realpathSync } from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-coordinator.ts :17 import * as fs from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-corpus.ts :39 import { readdirSync } from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-escalate.ts :13 import * as fs from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-handoff.ts :8 import { promises as fs } from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-interview.ts :13 import { promises as fs } from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-multimodal.ts :10 import { promises as fs, existsSync } from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-ops.ts :9 import { promises as fs, existsSync, realpathSync } from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-purge-hook.ts :8 import { promises as fs } from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-receipt.ts :16 import { writeFileSync, mkdirSync } from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-registry.ts :19 import * as fs from "node:fs"
  • fs sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-relay.ts :16 import * as fs from "node:fs"

shell / exec 46

  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/pages/layout/sidebar-all-chats.tsx :227 <DropdownMenu.Item onSelect={() => void fork()}>
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/script/build.ts :64 await $`bun run --cwd ${appDir} build`
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/script/check-migrations.ts :6 const result = await $`bun drizzle-kit check`.quiet().nothrow()
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/script/dev.ts :26 const proc = Bun.spawn(["bun", "run", "--conditions=browser", "src/index.ts", ...process.argv.slice(2)], {
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/script/publish.ts :11 return (await $`npm view ${name}@${version} version`.nothrow()).exitCode === 0
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/db.ts :2 import { spawn } from "child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/receipt.ts :10 import { spawnSync } from "child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/effect/cross-spawn-spawner.ts :24 import * as NodeChildProcess from "node:child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/lsp/launch.ts :1 import type { ChildProcessWithoutNullStreams } from "child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/lsp/server.ts :1 import type { ChildProcessWithoutNullStreams } from "child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/plugin/mimo.ts :5 import { exec } from "child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/pty/index.ts :202 spawn(command, args, {
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/pty/pty.bun.ts :6 export function spawn(file: string, args: string[], opts: Opts): Proc {
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/pty/pty.node.ts :7 export function spawn(file: string, args: string[], opts: Opts): Proc {
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/server/routes/global.ts :198 const proc = Bun.spawn(["git", ...args], { cwd: dir, stdout: "pipe", stderr: "pipe" })
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/shell/shell.ts :6 import { spawn, type ChildProcess } from "child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/util/process.ts :1 import { type ChildProcess } from "child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/workflow/meta.ts :11 // { name: (globalThis.process.mainModule.require('child_process').execSync('id'),'x') }
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/workflow/runtime.ts :33 /** Hard ceiling on total agents a single run may spawn (lifecycle cap). */
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/plugin/script/publish.ts :10 return (await $`npm view ${name}@${version} version`.nothrow()).exitCode === 0
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/script/src/index.ts :30 return await $`git branch --show-current`.text().then((x) => x.trim()) || "latest"
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/sdk/js/script/build.ts :12 await $`bun dev generate > ${dir}/openapi.json`.cwd(path.resolve(dir, "../../opencode"))
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/sdk/js/script/publish.ts :11 return (await $`npm view ${name}@${version} version`.nothrow()).exitCode === 0
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/sdk/js/src/process.ts :1 import { type ChildProcess, spawnSync } from "node:child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/ui/src/components/markdown-stream.ts :22 return !new RegExp(`^[\\t ]{0,3}${char}{${size},}[\\t ]*$`).test(last)
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/packages/ui/src/context/marked.tsx :404 return `$${math}$`
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/script/beta.ts :29 await $`gh pr comment ${prNumber} --body ${body}`
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/script/changelog.ts :55 const proc = Bun.spawn(cmd, {
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/script/format.ts :5 await $`bun run prettier --ignore-unknown --write .`
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/script/generate.ts :5 await $`bun ./packages/sdk/js/script/build.ts`
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/script/publish.ts :25 await $`bun install`
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/script/raw-changelog.ts :48 const data = await $`gh api "/repos/${repo}/releases?per_page=100"`.json()
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/script/release.ts :18 await $`./script/version.ts`
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/script/stats.ts :184 await Bun.spawn(["bunx", "prettier", "--write", file]).exited
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/script/sync-zed.ts :24 const commitSha = await $`git rev-parse ${version}`.text()
  • shell sergezuber-FABULA-LLM-5-33d10b0/engine/script/version.ts :7 const sha = process.env.GITHUB_SHA ?? (await $`git rev-parse HEAD`.text()).trim()
  • shell sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-brainstorm.ts :10 import { spawn } from "node:child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-change-quiz.ts :13 import { spawn } from "node:child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-context.ts :17 import { execFile } from "node:child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-corpus.ts :31 import { spawn } from "node:child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-daemon.ts :17 import { execFileSync } from "node:child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-interview.ts :12 import { spawn } from "node:child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-multimodal.ts :13 import { spawn } from "node:child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-ops.ts :13 import { spawn } from "node:child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-receipt.ts :15 import { spawn } from "node:child_process"
  • shell sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-registry.ts :22 import { execFileSync, execSync } from "node:child_process"

network 65

  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/buddy-widget.tsx :82 const res = await fetch("/global/fabula/buddy" + (dir ? "?dir=" + encodeURIComponent(dir) : ""))
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/dialog-custom-provider.tsx :149 const res = await fetch("/global/fabula/providers-config", {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/dialog-palette-global.tsx :79 const res = await fetch(`/global/fabula/search?q=${encodeURIComponent(q)}&limit=20${dirsQs}`).catch(
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/git-review-bar.tsx :28 const res = await fetch(`/global/fabula/git/state?dir=${encodeURIComponent(dir)}`).catch(() => undefined)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/home-usage-widget.tsx :50 const res = await fetch(`/global/fabula/usage${qs.size ? `?${qs}` : ""}`).catch(() => undefined)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/pmode-menu.tsx :18 const res = await fetch("/global/fabula/pmode").catch(() => undefined)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/prompt-input.tsx :1184 const res = await fetch("/global/fabula/enhance", {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/settings-general.tsx :90 const res = await fetch("/global/fabula/paths").catch(() => undefined)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/settings-mcp.tsx :15 const res = await fetch("/global/fabula/mcp").catch(() => undefined)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/settings-models.tsx :44 const res = await fetch("/global/fabula/providers-config", {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/settings-permissions.tsx :12 const res = await fetch("/global/fabula/pmode").catch(() => undefined)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/settings-plugins.tsx :26 const res = await fetch("/global/fabula/plugins").catch(() => undefined)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/settings-providers.tsx :80 const res = await fetch("/global/fabula/providers-config").catch(() => undefined)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/settings-registry.tsx :28 const res = await fetch(`/global/fabula/registry?${params}`).catch(() => undefined)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/settings-usage.tsx :40 const res = await fetch(`/global/fabula/usage${qs.size ? `?${qs}` : ""}`).catch(() => undefined)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/status-popover-body.tsx :26 const res = await fetch("/global/fabula/plugins").catch(() => undefined)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/components/terminal.tsx :525 const res = await fetch(tokenUrl, { method: "POST", headers })
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/pages/home.tsx :64 const res = await fetch("/global/fabula/enhance", {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/pages/layout/sidebar-all-sessions.ts :32 const res = await fetch("/global/fabula/sessions")
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/pages/session/use-background-work.ts :32 const r = await fetch(`/session/${encodeURIComponent(id)}/background-work`)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/app/src/utils/fabula-imported.ts :11 const res = await fetch("/global/fabula/imported-ids")
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/script/fds-upload.ts :105 const putRes = await fetch(url, {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/script/generate.ts :14 : await fetch(`${modelsUrl}/api.json`).then((x) => x.text())
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/import.ts :116 let response = await fetch(`${baseUrl}${dataPath}`, {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/mcp.ts :704 const response = await fetch(serverConfig.url, {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/providers.ts :449 const wellknown = (await fetch(`${url}/.well-known/opencode`).then((x) => x.json())) as {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/run.ts :699 return Server.Default().app.fetch(request)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/serve.ts :27 const res = await fetch(`http://${host}:${port}/global/health`, { signal: AbortSignal.timeout(1500) })
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/tui/asset/ten_vad_loader.js :14 function T(){var b=R;try{if(b==R&&y)return new Uint8Array(y);if(w)return w(b);throw"both async and sync fetching of the wasm failed";}catch(c){z(c)}}function ca(){return y||!r&&!u||"function"!=typeof
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/tui/component/dialog-workspace-create.tsx :188 .fetch(url)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/tui/util/voice.ts :211 const res = await fetch(url, {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/tui/worker.ts :49 async fetch(input: { url: string; method: string; headers: Record<string, string>; body?: string }) {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/config/config.ts :739 fetch(`${url}/.well-known/opencode`, { signal: AbortSignal.timeout(1000) }),
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/control-plane/dev/debug-workspace-plugin.ts :15 const response = await fetch(url)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/control-plane/workspace.ts :234 const res = await fetch(url, {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/lsp/server.ts :165 const response = await fetch("https://github.com/microsoft/vscode-eslint/archive/refs/heads/main.zip")
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/mcp/oauth-callback.ts :1 import { createConnection } from "net"
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/memory/service.ts :114 // Over-fetch (3x, capped) so the relative floor can trim common-word
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/metrics/client.ts :34 await fetch(ENDPOINT, {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/npm/index.ts :113 try: () => fetch(`https://registry.npmjs.org/${pkg}`),
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/plugin/codex.ts :8 import { createServer } from "http"
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/plugin/github-copilot/copilot.ts :92 async fetch(request: RequestInfo | URL, init?: RequestInit) {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/plugin/github-copilot/models.ts :119 const data = await fetch(`${baseURL}/models`, {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/plugin/index.ts :231 fetch: async (...args) => (await Server.Default()).app.fetch(...args),
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/plugin/mimo.ts :3 import { createServer } from "http"
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/provider/error.ts :2 import { STATUS_CODES } from "http"
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/provider/models.ts :123 const result = await fetch(`${url()}/api.json`, {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/provider/provider.ts :486 return fetch(input, { ...init, headers })
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/server/proxy.ts :116 return fetch(
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/server/routes/global.ts :249 const resp = await fetch(`${baseURL.replace(/\/$/, "")}/chat/completions`, {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/session/message-v2.ts :21 /** Error shape thrown by Bun's fetch() when gzip/br decompression fails mid-stream */
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/sdk/js/src/client.ts :37 return fetch(req)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/sdk/js/src/gen/core/serverSentEvents.gen.ts :102 const response = await fetch(url, { ...options, headers, signal })
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/sdk/js/src/v2/client.ts :51 return fetch(req)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/packages/ui/src/theme/loader.ts :70 const response = await fetch(url)
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/script/github/close-issues.ts :30 const comment = await fetch(`${base}/comments`, {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/script/stats.ts :11 const response = await fetch("https://us.i.posthog.com/i/v0/e/", {
  • net sergezuber-FABULA-LLM-5-33d10b0/engine/sdks/vscode/src/extension.ts :78 await fetch(`http://localhost:${port}/app`)
  • net sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-browser.ts :127 const r = await fetch(ep.url, { method: "POST", headers: { "Content-Type": "application/json", ...ep.headers }, body: JSON.stringify(visionBody(ep.model, args.prompt, dataUrl)) })
  • net sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-escalate.ts :48 const r = await fetch(url, {
  • net sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-graph.ts :27 try { cachedModel = String((await (await fetch(`${BASE}/models`)).json())?.data?.[0]?.id || "") } catch { cachedModel = "" }
  • net sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-multimodal.ts :47 const r = await fetch(args.image); const buf = Buffer.from(await r.arrayBuffer())
  • net sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-ops.ts :71 const r = await fetch(req.url, { method: "POST", headers: req.headers, body: req.body })
  • net sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-receipt.ts :157 const res = await fetch(api, { signal: AbortSignal.timeout(1500) })
  • net sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-registry.ts :147 const r = await fetch(url, { signal: ctl.signal } as any)

secrets 11

  • secrets sergezuber-FABULA-LLM-5-33d10b0/engine/infra/console.ts :245 new sst.Secret("CLOUDFLARE_API_TOKEN", process.env.CLOUDFLARE_API_TOKEN!),
  • secrets sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/run.ts :686 const password = args.password ?? process.env.MIMOCODE_SERVER_PASSWORD
  • secrets sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/tui/attach.ts :62 const password = args.password ?? process.env.MIMOCODE_SERVER_PASSWORD
  • secrets sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/config/config.ts :857 process.env["MIMOCODE_CONSOLE_TOKEN"] = tokenOpt.value
  • secrets sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/flag/flag.ts :116 MIMOCODE_SERVER_PASSWORD: process.env["MIMOCODE_SERVER_PASSWORD"],
  • secrets sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/provider/provider.ts :518 const envAICoreServiceKey = process.env.AICORE_SERVICE_KEY
  • secrets sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/tool/mcp-exa.ts :4 const URL = process.env.EXA_API_KEY
  • secrets sergezuber-FABULA-LLM-5-33d10b0/engine/script/github/close-issues.ts :7 const token = process.env.GITHUB_TOKEN
  • secrets sergezuber-FABULA-LLM-5-33d10b0/engine/script/release.ts :13 process.env.GH_TOKEN = process.env.GH_TOKEN || process.env.GITHUB_TOKEN
  • secrets sergezuber-FABULA-LLM-5-33d10b0/engine/script/stats.ts :4 const key = process.env["POSTHOG_KEY"]
  • secrets sergezuber-FABULA-LLM-5-33d10b0/engine/sst.config.ts :12 apiKey: process.env.STRIPE_SECRET_KEY!,

install hooks 3

  • postinstall sergezuber-FABULA-LLM-5-33d10b0/engine/package.json :13 bun run --cwd packages/opencode fix-node-pty
  • prepare sergezuber-FABULA-LLM-5-33d10b0/engine/package.json :14 husky
  • prepare sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/package.json :12 effect-language-service patch || true

clipboard 1

  • clipboard shell call sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/tui/util/clipboard.ts :94 const wayland = await Process.run(["wl-paste", "-t", "image/png"], { nothrow: true })

obfuscation 3

  • dynamic require()/import() sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/plugin/index.ts :426 try: () => import(`${pathToFileURL(match).href}?v=${Date.now()}`),
  • dynamic require()/import() sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/tool/registry.ts :192 const mod = yield* Effect.promise(() => import(`${pathToFileURL(match).href}?v=${Date.now()}`))
  • dynamic require()/import() sergezuber-FABULA-LLM-5-33d10b0/plugin/__tests__/corner-hooks-reliability.test.ts :36 const mod = await import(`../fabula-reliability?${tag}`)

perm:untrusted 4

  • untrusted sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/script/generate.ts :14 : await fetch(`${modelsUrl}/api.json`).then((x) => x.text())
  • untrusted sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/providers.ts :449 const wellknown = (await fetch(`${url}/.well-known/opencode`).then((x) => x.json())) as {
  • untrusted sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/tui/asset/ten_vad_loader.js :14 function T(){var b=R;try{if(b==R&&y)return new Uint8Array(y);if(w)return w(b);throw"both async and sync fetching of the wasm failed";}catch(c){z(c)}}function ca(){return y||!r&&!u||"function"!=typeof
  • untrusted sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-graph.ts :27 try { cachedModel = String((await (await fetch(`${BASE}/models`)).json())?.data?.[0]?.id || "") } catch { cachedModel = "" }

transport_posture 1

  • punycode (IDN homograph) host in endpoint sergezuber-FABULA-LLM-5-33d10b0/plugin/__tests__/corner-security-libs.test.ts :214 expect(() => checkUrlSync("https://xn--r8jz45g.xn--zckzah/")).not.toThrow()