MCP Observatory
4m ago Tracked 60,039 Last 4m ago 24h 2,475
github TypeScript analyzed de29aba

siaarzh/scrybe

github

Self-hosted semantic code search. Index repos and knowledge sources into a local vector DB, then search by natural language from CLI or any MCP-compatible agent.

maintainer
siaarzh
licence
MIT
first seen
2026-06-07
last seen
2026-08-31
releases · 30d
1
short id

Drift inferred · capture-to-capture

tool count over time

06-08 10:29 now
25t
3t
capabilities 1 tools
transport stdio · http counts 1 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • scrybe_install_incomplete
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit de29aba · analyzer v33 · 6d ago

skills & prompt files 2

code evidence vv0.51.1 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 354

filesystem 166

  • fs siaarzh-scrybe-de29aba/npm-hooks/post-install.js :6 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
  • fs siaarzh-scrybe-de29aba/npm-hooks/pre-install.js :6 import { readFileSync, existsSync } from "node:fs";
  • fs siaarzh-scrybe-de29aba/plugins/scrybe/hooks/scrybe-toll.mjs :63 import { appendFileSync, constants as fsConstants, readFileSync, statSync, writeFileSync } from "node:fs";
  • fs siaarzh-scrybe-de29aba/src/branch-state.ts :2 import { readFileSync, writeFileSync, mkdirSync, existsSync, unlinkSync, renameSync, lstatSync, readdirSync } from "node:fs";
  • fs siaarzh-scrybe-de29aba/src/chunker.ts :2 import { readFileSync, readdirSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/config.ts :3 import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/cursors.ts :2 import { mkdirSync, readFileSync, writeFileSync, existsSync, rmSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/build-integrity.ts :32 import { existsSync } from "node:fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/cgroup-stats.ts :21 import { readFileSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/container-detect.ts :1 import { existsSync, readFileSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/data-dir-lock.ts :78 import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync, realpathSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/embedding-migration-scan.ts :21 import { appendFileSync } from "node:fs";
show 28 more
  • fs siaarzh-scrybe-de29aba/src/daemon/events.ts :1 import { appendFileSync } from "node:fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/git-watcher.ts :18 import { existsSync, lstatSync, readFileSync, realpathSync } from "node:fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/hooks.ts :14 import { readFileSync, writeFileSync, existsSync, mkdirSync, chmodSync } from "node:fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/install/linux-cron.ts :1 import { writeFileSync, unlinkSync, mkdtempSync, rmdirSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/install/linux-systemd.ts :1 import { existsSync, writeFileSync, unlinkSync, mkdirSync, statSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/install/macos.ts :1 import { existsSync, writeFileSync, unlinkSync, mkdirSync, statSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/install/shared.ts :1 import { writeFileSync, chmodSync, mkdirSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/log-rotate.ts :1 import { existsSync, statSync, renameSync, unlinkSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/main.ts :1 import { appendFileSync, createWriteStream, existsSync, mkdirSync, writeSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/migrate-models-cache.ts :15 import { existsSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/pidfile.ts :1 import { readFileSync, writeFileSync, unlinkSync, existsSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/queue.ts :14 import { appendFileSync, existsSync, renameSync, statSync } from "node:fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/spawn-detached.ts :3 import { writeFileSync, mkdirSync, existsSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/ticket-poller.ts :30 import { existsSync } from "node:fs";
  • fs siaarzh-scrybe-de29aba/src/daemon/watcher.ts :14 import { existsSync, readFileSync } from "node:fs";
  • fs siaarzh-scrybe-de29aba/src/editor.ts :16 import { existsSync, writeFileSync, mkdirSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/embed-batch-state.ts :1 import { readFileSync, writeFileSync, existsSync, renameSync, unlinkSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/health-probe.ts :21 import { existsSync, readdirSync, statSync, readFileSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/ignore-rules.ts :1 import { existsSync, readFileSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/indexer.ts :24 import { appendFileSync, existsSync, readFileSync, rmSync, statSync } from "node:fs";
  • fs siaarzh-scrybe-de29aba/src/install-doctor.ts :14 import { existsSync, writeFileSync, unlinkSync } from "node:fs";
  • fs siaarzh-scrybe-de29aba/src/local-embedder.ts :6 import { existsSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/migrations.ts :10 import { existsSync, readFileSync, writeFileSync, mkdirSync, renameSync, unlinkSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/migrations/chunk-id-rehash.ts :20 import { appendFileSync } from "node:fs";
  • fs siaarzh-scrybe-de29aba/src/onboarding/doctor.ts :1 import { existsSync, accessSync, statSync, readdirSync, constants, readFileSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/onboarding/language-sniff.ts :1 import { readdirSync, statSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/onboarding/mcp-config.ts :1 import { existsSync, readFileSync, writeFileSync, mkdirSync, renameSync, unlinkSync } from "fs";
  • fs siaarzh-scrybe-de29aba/src/onboarding/repo-discovery.ts :1 import { readdirSync, statSync, existsSync } from "fs";

126 more not shown — this panel samples each group; the count above is the real total.

shell / exec 66

  • shell siaarzh-scrybe-de29aba/npm-hooks/post-install.js :9 import { spawn } from "node:child_process";
  • shell siaarzh-scrybe-de29aba/src/daemon/install/detect-init-system.ts :1 import { spawnSync } from "child_process";
  • shell siaarzh-scrybe-de29aba/src/daemon/install/linux-cron.ts :4 import { spawnSync } from "child_process";
  • shell siaarzh-scrybe-de29aba/src/daemon/install/linux-systemd.ts :4 import { spawnSync } from "child_process";
  • shell siaarzh-scrybe-de29aba/src/daemon/install/macos.ts :4 import { spawnSync } from "child_process";
  • shell siaarzh-scrybe-de29aba/src/daemon/install/windows.ts :1 import { spawnSync } from "child_process";
  • shell siaarzh-scrybe-de29aba/src/daemon/main.ts :304 // Plan 109 Phase 4: report whether the process spawn() actually landed under
  • shell siaarzh-scrybe-de29aba/src/daemon/spawn-detached.ts :1 import { spawn, spawnSync } from "child_process";
  • shell siaarzh-scrybe-de29aba/src/editor.ts :15 import { spawnSync } from "child_process";
  • shell siaarzh-scrybe-de29aba/src/install-doctor.ts :15 import { spawnSync, spawn } from "node:child_process";
  • shell siaarzh-scrybe-de29aba/src/onboarding/doctor.ts :4 import { execSync } from "child_process";
  • shell siaarzh-scrybe-de29aba/src/onboarding/windows-av.ts :14 import { spawnSync } from "child_process";
show 28 more
  • shell siaarzh-scrybe-de29aba/src/onboarding/windows-reserved-ports.ts :14 import { execFileSync } from "child_process";
  • shell siaarzh-scrybe-de29aba/src/util/git-exec.ts :1 import { execFileSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/branch-state-indexer.test.ts :24 import { execSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/cli-completion.test.ts :2 import { spawnSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/cli-deprecation.test.ts :2 import { spawnSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/cli-help-coverage.test.ts :2 import { spawnSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/cli-shorthand-flags.test.ts :2 import { spawnSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/daemon-cgroup-cap.test.ts :15 const original = await importOriginal<typeof import("child_process")>();
  • shell (weak) siaarzh-scrybe-de29aba/tests/daemon-fetch.test.ts :8 import { execSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/daemon-heartbeat.test.ts :6 import { spawn, spawnSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/daemon-hook.test.ts :9 import { execSync } from "node:child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/daemon-http-api.test.ts :7 import { spawn, spawnSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/daemon-lifecycle.test.ts :9 import { spawn, spawnSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/daemon-ownership.test.ts :19 import { spawn, spawnSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/daemon-status-cli.test.ts :10 import { spawnSync, spawn } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/e2e/init.test.ts :9 import { execSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/e2e/zero-config.test.ts :9 import { execSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/git-exec.test.ts :5 import { execSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/helpers/daemon.ts :6 import { spawn, spawnSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/helpers/fixtures.ts :6 import { execSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/helpers/git.ts :6 import { execSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/helpers/lock-probe.ts :5 import { spawn, spawnSync, type ChildProcess } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/init-mcp-local-defer.test.ts :14 import { execSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/legacy-deprecation-warn.test.ts :9 import { spawn } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/lookup-symbol.test.ts :165 const { execSync } = await import("child_process");
  • shell (weak) siaarzh-scrybe-de29aba/tests/mcp-shim-e2e.test.ts :37 import { spawn, type ChildProcess } from "node:child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/plan108-stop-invariants.test.ts :53 import { spawn, spawnSync } from "child_process";
  • shell (weak) siaarzh-scrybe-de29aba/tests/plan47.test.ts :7 import { execSync } from "child_process";

26 more not shown — this panel samples each group; the count above is the real total.

network 38

  • net siaarzh-scrybe-de29aba/npm-hooks/post-install.js :65 const res = await fetch(`http://127.0.0.1:${port}/health`, {
  • net siaarzh-scrybe-de29aba/npm-hooks/pre-install.js :67 await fetch(`http://127.0.0.1:${port}/shutdown`, {
  • net siaarzh-scrybe-de29aba/src/cli.ts :1033 const res = await fetch(`http://127.0.0.1:${pidData.port}/kick`, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body), signal: AbortSignal.timeout(5000) });
  • net siaarzh-scrybe-de29aba/src/daemon/client.ts :388 res = await fetch(url.toString(), {
  • net siaarzh-scrybe-de29aba/src/daemon/http-server.ts :6 import http from "node:http";
  • net siaarzh-scrybe-de29aba/src/daemon/mcp-rpc.ts :13 import http from "node:http";
  • net siaarzh-scrybe-de29aba/src/daemon/pidfile.ts :193 // coerce to a bounded TCP port integer before it reaches fetch(). Anything outside the
  • net siaarzh-scrybe-de29aba/src/mcp-server.ts :150 await fetch(`http://127.0.0.1:${pidData.port}/clients/heartbeat`, {
  • net siaarzh-scrybe-de29aba/src/mcp-shim.ts :97 await fetch(`${url}/clients/heartbeat`, {
  • net siaarzh-scrybe-de29aba/src/migrations.ts :480 // re-fetch (no cursor = fetch all issues from the beginning).
  • net siaarzh-scrybe-de29aba/src/onboarding/doctor.ts :849 const res = await fetch(`http://127.0.0.1:${pidData.port}/health`, {
  • net siaarzh-scrybe-de29aba/src/onboarding/validate-provider.ts :34 resp = await fetch(url.toString(), {
show 26 more
  • net siaarzh-scrybe-de29aba/src/onboarding/wizard.ts :298 const resp = await fetch(url, {
  • net siaarzh-scrybe-de29aba/src/plugins/github-issues.ts :109 const res = await fetch(url, {
  • net siaarzh-scrybe-de29aba/src/plugins/gitlab-issues.ts :49 const res = await fetch(url, {
  • net siaarzh-scrybe-de29aba/src/reranker.ts :194 const res = await fetch(config.rerankBaseUrl, {
  • net siaarzh-scrybe-de29aba/src/tools/status-mcp.ts :89 const res = await fetch(`http://127.0.0.1:${pidData.port}/health`, {
  • net (weak) siaarzh-scrybe-de29aba/tests/daemon-ensure-running-budget.test.ts :20 import { createServer, type Server } from "http";
  • net (weak) siaarzh-scrybe-de29aba/tests/daemon-heartbeat.test.ts :75 const hbRes = await fetch(`http://127.0.0.1:${port}/clients/heartbeat`, {
  • net (weak) siaarzh-scrybe-de29aba/tests/daemon-http-api.test.ts :9 import http from "node:http";
  • net (weak) siaarzh-scrybe-de29aba/tests/daemon-mcp-rpc.test.ts :17 import http from "node:http";
  • net (weak) siaarzh-scrybe-de29aba/tests/daemon-ownership.test.ts :109 const health = await fetch(`http://127.0.0.1:${winnerData.port}/health`);
  • net (weak) siaarzh-scrybe-de29aba/tests/daemon-status-cli.test.ts :138 try { return (await fetch(`http://127.0.0.1:${d.port}/health`)).ok; } catch { return false; }
  • net (weak) siaarzh-scrybe-de29aba/tests/daemon-sticky-port.test.ts :24 import net from "node:net";
  • net (weak) siaarzh-scrybe-de29aba/tests/helpers/daemon.ts :8 import http from "node:http";
  • net (weak) siaarzh-scrybe-de29aba/tests/local-embedder.ts :10 import http from "http";
  • net (weak) siaarzh-scrybe-de29aba/tests/mcp-shim.test.ts :10 import http from "node:http";
  • net (weak) siaarzh-scrybe-de29aba/tests/plan101-health-503.test.ts :50 const res = await fetch(`http://127.0.0.1:${port}/health`);
  • net (weak) siaarzh-scrybe-de29aba/tests/plan108-stop-invariants.test.ts :209 try { return (await fetch(`${baseUrl}/health`)).ok; } catch { return false; }
  • net (weak) siaarzh-scrybe-de29aba/tests/plan96-rss-guard-restart.test.ts :24 import * as net from "net";
  • net (weak) siaarzh-scrybe-de29aba/tests/rename-detection.test.ts :15 const resp = await fetch(healthUrl);
  • net (weak) siaarzh-scrybe-de29aba/tests/retry-backoff.test.ts :60 const r = await fetch(healthUrl);
  • net (weak) siaarzh-scrybe-de29aba/tests/scenarios/daemon.test.ts :128 const health = await fetch(`http://127.0.0.1:${d.port}/health`);
  • net (weak) siaarzh-scrybe-de29aba/tests/scenarios/fixtures/local-embedder-recall/src/notifications/push.ts :67 const resp = await fetch(subscription.endpoint, {
  • net (weak) siaarzh-scrybe-de29aba/tests/scenarios/fixtures/local-embedder-recall/src/notifications/webhook.ts :76 const resp = await fetch(endpoint.url, {
  • net (weak) siaarzh-scrybe-de29aba/tests/setup.ts :68 const resp = await fetch(`${baseUrl.replace(/\/v1$/, "")}/health`);
  • net (weak) siaarzh-scrybe-de29aba/tests/sigterm-escalation.test.ts :196 try { return (await fetch(`${baseUrl}/health`)).ok; } catch { return false; }
  • net (weak) siaarzh-scrybe-de29aba/tests/spawn-serialisation.test.ts :135 const health = await fetch(`http://127.0.0.1:${winner.port}/health`);

secrets 23

  • secrets siaarzh-scrybe-de29aba/src/config.ts :267 const apiKey = process.env.SCRYBE_RERANK_API_KEY ?? "";
  • secrets siaarzh-scrybe-de29aba/src/migrations.ts :67 process.env["SCRYBE_CODE_EMBEDDING_API_KEY"] ??
  • secrets siaarzh-scrybe-de29aba/src/registry.ts :319 api_key_env: process.env.SCRYBE_KNOWLEDGE_EMBEDDING_API_KEY ? "SCRYBE_KNOWLEDGE_EMBEDDING_API_KEY" : "SCRYBE_CODE_EMBEDDING_API_KEY",
  • secrets siaarzh-scrybe-de29aba/src/tools/model.ts :169 process.env["SCRYBE_VOYAGE_API_KEY"] = process.env["SCRYBE_VOYAGE_API_KEY"] ?? "";
  • secrets (weak) siaarzh-scrybe-de29aba/tests/config-cgroup-cap-invariant.test.ts :37 process.env["SCRYBE_CODE_EMBEDDING_API_KEY"] = "test-key";
  • secrets (weak) siaarzh-scrybe-de29aba/tests/config-env-hardening.test.ts :69 process.env["SCRYBE_CODE_EMBEDDING_API_KEY"] = "voyage-key";
  • secrets (weak) siaarzh-scrybe-de29aba/tests/config-local-default.test.ts :115 process.env["SCRYBE_CODE_EMBEDDING_API_KEY"] = "key";
  • secrets (weak) siaarzh-scrybe-de29aba/tests/doctor-daemon.test.ts :18 process.env["SCRYBE_CODE_EMBEDDING_API_KEY"] = "test-key";
  • secrets (weak) siaarzh-scrybe-de29aba/tests/doctor-memory-cap.test.ts :25 process.env["SCRYBE_CODE_EMBEDDING_API_KEY"] = "test-key";
  • secrets (weak) siaarzh-scrybe-de29aba/tests/e2e/init.test.ts :147 process.env["SCRYBE_CODE_EMBEDDING_API_KEY"] = "existing-key";
  • secrets (weak) siaarzh-scrybe-de29aba/tests/embed-batch-state.test.ts :93 process.env.FAKE_EMBED_KEY = "test-key";
  • secrets (weak) siaarzh-scrybe-de29aba/tests/isolate.ts :49 process.env["SCRYBE_CODE_EMBEDDING_API_KEY"] = "test";
show 11 more
  • secrets (weak) siaarzh-scrybe-de29aba/tests/migration.test.ts :455 const savedKey = process.env["SCRYBE_RERANK_API_KEY"];
  • secrets (weak) siaarzh-scrybe-de29aba/tests/onboarding-doctor.test.ts :18 process.env["SCRYBE_CODE_EMBEDDING_API_KEY"] = "test-key";
  • secrets (weak) siaarzh-scrybe-de29aba/tests/plan23-slice2.test.ts :62 process.env["SCRYBE_VOYAGE_API_KEY"] = "test-voyage-key";
  • secrets (weak) siaarzh-scrybe-de29aba/tests/plan23-slice3.test.ts :399 process.env["SCRYBE_VOYAGE_API_KEY"] = "test-key";
  • secrets (weak) siaarzh-scrybe-de29aba/tests/plan23-slice5.test.ts :360 delete process.env["SCRYBE_VOYAGE_API_KEY"];
  • secrets (weak) siaarzh-scrybe-de29aba/tests/plan23-slice6.test.ts :287 process.env["SCRYBE_CODE_EMBEDDING_API_KEY"] = "test";
  • secrets (weak) siaarzh-scrybe-de29aba/tests/plan32-slice4-doctor-token-health.test.ts :109 process.env["SCRYBE_CODE_EMBEDDING_API_KEY"] = "test-key";
  • secrets (weak) siaarzh-scrybe-de29aba/tests/rerank-local.test.ts :110 return jwt.sign({ sub: user.id }, process.env.JWT_SECRET!, { expiresIn: "1h" });
  • secrets (weak) siaarzh-scrybe-de29aba/tests/scenarios/fixtures/local-embedder-recall/src/auth/jwt.ts :7 const JWT_SECRET = process.env.JWT_SECRET ?? "fallback-dev-secret";
  • secrets (weak) siaarzh-scrybe-de29aba/tests/scenarios/fixtures/local-embedder-recall/src/utils/config-loader.ts :83 if (process.env.JWT_SECRET) c.jwt = { ...c.jwt, secret: process.env.JWT_SECRET };
  • secrets (weak) siaarzh-scrybe-de29aba/tests/windows-av.test.ts :106 process.env["SCRYBE_CODE_EMBEDDING_API_KEY"] = "test-key";

tool registrations 1

  • scrybe_install_incomplete siaarzh-scrybe-de29aba/src/install-doctor.ts :121

install hooks 3

  • preinstall siaarzh-scrybe-de29aba/package.json :31 node npm-hooks/pre-install.js
  • postinstall siaarzh-scrybe-de29aba/package.json :32 node npm-hooks/post-install.js
  • prepublishOnly siaarzh-scrybe-de29aba/package.json :42 npm run build

declared dependencies 31

  • @modelcontextprotocol/sdk@^1.0.0
  • @clack/prompts@^1.2.0
  • @lancedb/lancedb@^0.31.0
  • @parcel/watcher@^2.5.6
  • @xenova/transformers@~2.17.2
  • apache-arrow@^17.0.0
  • commander@^15.0.0
  • ignore@^7.0.5
  • ink@^7.0.1
  • openai@^6.35.0
  • react@^19.2.5
  • tree-sitter@^0.21.0
show 19 more
  • tree-sitter-c@0.23.2
  • tree-sitter-c-sharp@0.23.1
  • tree-sitter-cpp@0.23.4
  • tree-sitter-go@0.23.4
  • tree-sitter-java@0.23.5
  • tree-sitter-javascript@0.23.1
  • tree-sitter-python@0.23.4
  • tree-sitter-ruby@^0.23.1
  • tree-sitter-rust@0.23.1
  • tree-sitter-typescript@0.23.2
  • update-notifier@^7.3.1
  • zod@^4.4.3
  • @types/node@^26.0.1
  • @types/react@^19.2.14
  • @types/update-notifier@^6.0.8
  • tree-sitter-cli@^0.26.8
  • tsx@^4.21.0
  • typescript@^7.0.2
  • vitest@^4.1.5

obfuscation 2

  • dynamic require()/import() siaarzh-scrybe-de29aba/tests/scenarios/auto-gc-removed-project.test.ts :41 const { initQueue } = await import("${queueFileUrl}");
  • dynamic require()/import() siaarzh-scrybe-de29aba/tests/scenarios/queue-orphan-jobs.test.ts :44 const { initQueue, submitToQueue } = await import("${queueFileUrl}");

perm:untrusted 4

  • untrusted (weak) siaarzh-scrybe-de29aba/tests/daemon-heartbeat.test.ts :82 const status = await fetch(`http://127.0.0.1:${port}/status`).then((r) => r.json()) as any;
  • untrusted (weak) siaarzh-scrybe-de29aba/tests/daemon-http-api.test.ts :114 const data = await (await fetch(`${baseUrl}/health`)).json() as Record<string, unknown>;
  • untrusted (weak) siaarzh-scrybe-de29aba/tests/plan108-stop-invariants.test.ts :227 const data = await (await fetch(`${baseUrl}/status`)).json() as { queue?: { active?: number } };
  • untrusted (weak) siaarzh-scrybe-de29aba/tests/sigterm-escalation.test.ts :217 const data = await (await fetch(`${baseUrl}/status`)).json() as { queue?: { active?: number } };

transport_posture 1

  • network-listening, binds all interfaces, no auth detected siaarzh-scrybe-de29aba/tests/scenarios/fixtures/local-embedder-recall/src/utils/config-loader.ts :41 host: "0.0.0.0",