github TypeScript analyzed f5bb315

smixs/iva

github

AI assistant in Telegram that remembers everything and helps you run your life. Self-hosted in one command.

maintainer: smixs
licence: MIT
first seen: 2026-06-20
last seen: 2026-08-19
releases · 30d: 11
short id

Drift inferred · capture-to-capture

HIGH 2026-08-17 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-17 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-17 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-17 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-17 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-17 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-16 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-16 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-16 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-16 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-16 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-16 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-16 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-16 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-15 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-15 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-15 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-15 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-15 code analysis flagged committed secret in smixs/iva
HIGH 2026-08-14 code analysis flagged committed secret in smixs/iva

capabilities 1 tools

transport stdio · streamable-http · http counts 1 tools · 0 res · 0 prompts permission surface via code analysis

tools

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit f5bb315 · analyzer v33 · 4d ago

skills & prompt files 7

danger signals13

suspicious endpoint api.telegram.org smixs-iva-agent-f5bb315/agent/lib/error-humanizer.test.ts :129 "Request URL https://api.telegram.org/bot123456:secret-token/getMe failed",
suspicious endpoint api.telegram.org smixs-iva-agent-f5bb315/agent/lib/telegram-media.ts :71 `https://api.telegram.org/file/bot${token}/${filePath}`,
suspicious endpoint api.telegram.org smixs-iva-agent-f5bb315/scripts/fixtures/telegram-main-guard-child.ts :25 if (!target.startsWith("https://api.telegram.org/")) {
suspicious endpoint api.telegram.org smixs-iva-agent-f5bb315/scripts/lib/telegram-send.test.ts :57 "https://api.telegram.org/bottest-bot/sendMessage",
suspicious endpoint api.telegram.org smixs-iva-agent-f5bb315/scripts/lib/telegram-send.ts :100 `https://api.telegram.org/bot${bot}/${method}`,
suspicious endpoint api.telegram.org smixs-iva-agent-f5bb315/scripts/lib/telegram-status.ts :135 const api = `https://api.telegram.org/bot${token}`;
suspicious endpoint api.telegram.org smixs-iva-agent-f5bb315/scripts/lib/update-check.ts :336 `https://api.telegram.org/bot${token}/sendMessage`,
suspicious endpoint api.telegram.org smixs-iva-agent-f5bb315/scripts/memory/brain.ts :125 const res = await fetch(`https://api.telegram.org/bot${BOT}/sendMessage`, {
suspicious endpoint api.telegram.org smixs-iva-agent-f5bb315/scripts/poller/config.test.ts :137 assert.equal(config.api, "https://api.telegram.org/botundefined");
suspicious endpoint api.telegram.org smixs-iva-agent-f5bb315/scripts/poller/config.ts :28 export const API = `https://api.telegram.org/bot${TOKEN}`;
suspicious endpoint api.telegram.org smixs-iva-agent-f5bb315/scripts/poller/transport.ts :85 `https://api.telegram.org/file/bot${TOKEN}/${String(path)}`,
suspicious endpoint api.telegram.org smixs-iva-agent-f5bb315/scripts/setup/main.ts :462 const res = await fetch(`https://api.telegram.org/bot${token}/getMe`);
suspicious endpoint api.telegram.org smixs-iva-agent-f5bb315/scripts/update-finish.ts :471 `https://api.telegram.org/bot${token}/sendMessage`,

code evidence vv0.3.27 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 508

filesystem 234

fs smixs-iva-agent-f5bb315/agent/connections/telegram-userbot.ts :9 import { readFileSync } from "node:fs";
fs smixs-iva-agent-f5bb315/agent/instructions/05-language.ts :2 import { readFileSync } from "node:fs";
fs smixs-iva-agent-f5bb315/agent/instructions/20-core.ts :2 import { readFileSync } from "node:fs";
fs smixs-iva-agent-f5bb315/agent/instructions/25-persona.ts :2 import { readFileSync } from "node:fs";
fs smixs-iva-agent-f5bb315/agent/instructions/now.ts :2 import { readFileSync } from "node:fs";
fs smixs-iva-agent-f5bb315/agent/lib/card-store.ts :8 import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/codex-auth.test.ts :17 } from "node:fs";
fs smixs-iva-agent-f5bb315/agent/lib/codex-auth.ts :22 } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/custom-skills.property.test.ts :12 import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/custom-skills.test.ts :15 } from "node:fs";
fs smixs-iva-agent-f5bb315/agent/lib/custom-skills.ts :17 import type { Dirent } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/fs-atomic.fixtures.test.ts :4 import { mkdtempSync } from "node:fs";

show 28 more

fs (weak) smixs-iva-agent-f5bb315/agent/lib/fs-atomic.test.ts :19 } from "node:fs";
fs smixs-iva-agent-f5bb315/agent/lib/fs-atomic.ts :30 } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/fs-lock.test.ts :17 } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/i18n.test.ts :5 import { mkdtempSync, writeFileSync } from "node:fs";
fs smixs-iva-agent-f5bb315/agent/lib/i18n.ts :9 import { statSync } from "node:fs";
fs smixs-iva-agent-f5bb315/agent/lib/json-store.ts :5 import { renameSync } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/model-provider.test.ts :8 import { mkdtempSync, readFileSync, rmSync } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/outbox.test.ts :2 import { mkdirSync, mkdtempSync, readFileSync, rmSync } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/plugin-config.test.ts :6 import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
fs smixs-iva-agent-f5bb315/agent/lib/plugin-config.ts :11 import { readFileSync } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/plugin-reader.property.test.ts :19 } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/plugin-reader.test.ts :15 } from "node:fs";
fs smixs-iva-agent-f5bb315/agent/lib/plugin-reader.ts :24 import type { Dirent } from "node:fs";
fs smixs-iva-agent-f5bb315/agent/lib/plugin-skills.ts :14 import type { Dirent } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/plugin-store.test.ts :15 } from "node:fs";
fs smixs-iva-agent-f5bb315/agent/lib/plugin-store.ts :16 import { mkdir, readFile } from "node:fs/promises";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/run-status.test.ts :15 } from "node:fs";
fs smixs-iva-agent-f5bb315/agent/lib/run-status.ts :14 import { readFileSync, readdirSync, renameSync } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/schedule-migration.test.ts :4 import { chmod, mkdir, mkdtemp, readFile, writeFile } from "node:fs/promises";
fs smixs-iva-agent-f5bb315/agent/lib/schedule-migration.ts :23 import { existsSync, rmSync } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/schedule-paths.test.ts :3 import { mkdtempSync, realpathSync, rmSync } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/schedule-runner.test.ts :8 import { mkdir, mkdtemp, readFile, writeFile } from "node:fs/promises";
fs smixs-iva-agent-f5bb315/agent/lib/schedule-runner.ts :13 import { readFileSync } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/schedule-table.test.ts :9 } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/security-gate.test.ts :2 import { mkdtempSync, readdirSync, rmSync } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/settings.test.ts :17 } from "node:fs";
fs smixs-iva-agent-f5bb315/agent/lib/settings.ts :8 import { readFileSync } from "node:fs";
fs (weak) smixs-iva-agent-f5bb315/agent/lib/telegram-inbound.test.ts :3 import { mkdirSync, mkdtempSync, readFileSync, readdirSync } from "node:fs";

194 more not shown — this panel samples each group; the count above is the real total.

shell / exec 101

shell (weak) smixs-iva-agent-f5bb315/agent/instrumentation.test.ts :4 import { spawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/agent/lib/fs-atomic.fixtures.test.ts :2 import { spawn, type ChildProcess } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/agent/lib/fs-atomic.test.ts :7 import { execFileSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/agent/lib/fs-lock.test.ts :5 import { execFileSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/agent/lib/i18n.test.ts :4 import { execFileSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/agent/lib/model-provider.test.ts :7 import { spawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/agent/lib/run-status.test.ts :4 import { spawn } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/agent/lib/schedule-migration.test.ts :3 import { spawnSync } from "node:child_process";
shell smixs-iva-agent-f5bb315/agent/lib/schedule-migration.ts :24 import { spawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/agent/lib/schedule-paths.test.ts :2 import { execFileSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/agent/lib/schedule-runner.test.ts :7 } from "node:child_process";
shell smixs-iva-agent-f5bb315/agent/lib/schedule-runner.ts :11 } from "node:child_process";

show 28 more

shell (weak) smixs-iva-agent-f5bb315/agent/lib/settings.test.ts :4 import { execFileSync, spawn } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/agent/lib/trace-hook.test.ts :11 import { spawnSync } from "node:child_process";
shell smixs-iva-agent-f5bb315/agent/tools/bash.ts :3 import { execFileSync, spawn } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/bash-tool.test.ts :13 import { spawn, spawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/bootstrap-shell.test.ts :2 import { execFileSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/build-isolation.test.ts :3 import { execFileSync, spawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/build.ts :1 import { execFileSync, spawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/check-port.test.ts :3 import { spawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/cli/account-entrypoints.test.ts :2 import { spawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/cli/config.test.ts :3 import { spawn } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/cli/entrypoints.test.ts :2 import { spawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/cli/plugin.test.ts :7 import { spawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/cli/router-entrypoints.test.ts :2 import { spawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/cli/runtime.ts :1 import { spawnSync, type SpawnSyncOptions } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/cli/services-entrypoints.test.ts :2 import { spawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/cli/update-bridge.test.ts :4 import { spawn } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/cli/update.ts :1 import { spawnSync as nodeSpawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/cli/userbot-entrypoints.test.ts :2 import { spawnSync, type SpawnSyncReturns } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/cli/version-update-command.ts :1 import { spawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/cli/version-update-rebuild.test.ts :7 import { execFileSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/cli/version-update-telegram.test.ts :3 import { execFileSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/data-dir-contract.test.ts :3 import { spawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/fixtures/install-world.ts :6 } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/fixtures/update-recovery.ts :1 import { execFileSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/init-vault.test.ts :2 import { execFileSync, spawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/init-vault.ts :9 import { execFileSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/install-decisions.test.ts :2 import { execFileSync, spawn, spawnSync } from "node:child_process";
shell (weak) smixs-iva-agent-f5bb315/scripts/install-shell.test.ts :7 } from "node:child_process";

61 more not shown — this panel samples each group; the count above is the real total.

network 39

net smixs-iva-agent-f5bb315/agent/lib/codex-auth.ts :139 const res = await fetch(TOKEN_URL, {
net smixs-iva-agent-f5bb315/agent/lib/embeddings.ts :70 const res = await fetch(cfg.url, {
net smixs-iva-agent-f5bb315/agent/lib/telegram-media.ts :70 const dl = await fetch(
net smixs-iva-agent-f5bb315/agent/provider.ts :227 const response = await fetch(input, { ...init, headers, body });
net smixs-iva-agent-f5bb315/agent/tools/web_search.ts :215 res = await fetch(req.url, {
net smixs-iva-agent-f5bb315/agent/transcribe.ts :9 const res = await fetch(url, {
net smixs-iva-agent-f5bb315/agent/vision.ts :48 const res = await fetch(`${baseURL}/chat/completions`, {
net (weak) smixs-iva-agent-f5bb315/scripts/check-port.test.ts :4 import { createServer } from "node:net";
net (weak) smixs-iva-agent-f5bb315/scripts/cli/config.test.ts :6 import net from "node:net";
net (weak) smixs-iva-agent-f5bb315/scripts/cli/doctor.test.ts :11 import { createServer } from "node:http";
net (weak) smixs-iva-agent-f5bb315/scripts/cli/doctor.ts :742 const answer = await fetch(`http://127.0.0.1:${port}/health`, {
net (weak) smixs-iva-agent-f5bb315/scripts/cli/post.ts :319 const response = await fetch("https://tmpfiles.org/api/v1/upload", {

show 27 more

net (weak) smixs-iva-agent-f5bb315/scripts/cli/update-rollback.test.ts :30 const response = await fetch(`http://127.0.0.1:${port}/`, {
net (weak) smixs-iva-agent-f5bb315/scripts/cli/update.ts :125 fetch(
net (weak) smixs-iva-agent-f5bb315/scripts/fixtures/install-world.ts :67 import { createServer } from "node:http";
net (weak) smixs-iva-agent-f5bb315/scripts/fixtures/version-update-harness.ts :20 import { createServer } from "node:http";
net (weak) smixs-iva-agent-f5bb315/scripts/lib/codex-oauth.ts :26 import { createServer } from "node:http";
net (weak) smixs-iva-agent-f5bb315/scripts/lib/health-probe.test.ts :14 import { createServer } from "node:http";
net (weak) smixs-iva-agent-f5bb315/scripts/lib/health-probe.ts :29 return await fetch(url, { signal: AbortSignal.timeout(ms) });
net (weak) smixs-iva-agent-f5bb315/scripts/lib/menu/gws-auth.ts :13 import { request as httpRequest } from "node:http";
net (weak) smixs-iva-agent-f5bb315/scripts/lib/mock-openai-server.test.ts :10 const res = await fetch(`${baseUrl}/chat/completions`, {
net (weak) smixs-iva-agent-f5bb315/scripts/lib/mock-openai-server.ts :7 import { createServer, type IncomingMessage } from "node:http";
net (weak) smixs-iva-agent-f5bb315/scripts/lib/model-catalog.ts :425 const res = await fetch(url, {
net (weak) smixs-iva-agent-f5bb315/scripts/lib/ports.test.ts :2 import net from "node:net";
net (weak) smixs-iva-agent-f5bb315/scripts/lib/ports.ts :9 import net from "node:net";
net (weak) smixs-iva-agent-f5bb315/scripts/lib/search-catalog.ts :90 const res = await fetch(req.url, {
net (weak) smixs-iva-agent-f5bb315/scripts/lib/userbot-health-cli.test.ts :3 import { createServer } from "node:http";
net (weak) smixs-iva-agent-f5bb315/scripts/memory/brain.ts :125 const res = await fetch(`https://api.telegram.org/bot${BOT}/sendMessage`, {
net (weak) smixs-iva-agent-f5bb315/scripts/memory/embed-index.test.ts :10 import { createServer, type Server } from "node:http";
net (weak) smixs-iva-agent-f5bb315/scripts/memory/rollup-client.test.ts :12 import { createServer, type IncomingMessage, type Server } from "node:http";
net (weak) smixs-iva-agent-f5bb315/scripts/poller/deliver.ts :92 const res = await fetch(route, {
net (weak) smixs-iva-agent-f5bb315/scripts/poller/transport.ts :33 const res = await fetch(`${API}/${method}`, {
net (weak) smixs-iva-agent-f5bb315/scripts/repair-shell.test.ts :3 import { createServer } from "node:http";
net (weak) smixs-iva-agent-f5bb315/scripts/replica-smoke.ts :18 import { createServer } from "node:net";
net (weak) smixs-iva-agent-f5bb315/scripts/setup/main.ts :330 const res = await fetch(`${OLLAMA_BASE}/models`, {
net (weak) smixs-iva-agent-f5bb315/scripts/update-finish.ts :470 const response = await fetch(
net (weak) smixs-iva-agent-f5bb315/scripts/web-fetch-tool.test.ts :9 // Тул зовёт штатный web_fetch eve, а тот — глобальный fetch (с собственным
net (weak) smixs-iva-agent-f5bb315/services/mcp-proxy/proxy.test.ts :221 fetch(url, {
net smixs-iva-agent-f5bb315/services/mcp-proxy/proxy.ts :24 } from "node:http";

secrets 33

secrets smixs-iva-agent-f5bb315/agent/channels/telegram.ts :405 process.env.TELEGRAM_WEBHOOK_SECRET_TOKEN,
secrets smixs-iva-agent-f5bb315/agent/connections/telegram-userbot.ts :19 if (process.env.TELEGRAM_MCP_TOKEN) return process.env.TELEGRAM_MCP_TOKEN;
secrets smixs-iva-agent-f5bb315/agent/lib/embeddings.ts :18 const name = explicit || (process.env.JINA_API_KEY ? "jina" : "deepinfra");
secrets (weak) smixs-iva-agent-f5bb315/agent/lib/error-humanizer.test.ts :124 const previous = process.env.TELEGRAM_BOT_TOKEN;
secrets smixs-iva-agent-f5bb315/agent/lib/error-humanizer.ts :38 const token = process.env.TELEGRAM_BOT_TOKEN;
secrets smixs-iva-agent-f5bb315/agent/lib/telegram-acceptance.ts :95 const expected = process.env.TELEGRAM_WEBHOOK_SECRET_TOKEN;
secrets (weak) smixs-iva-agent-f5bb315/agent/lib/telegram-inbound.test.ts :17 process.env.TELEGRAM_BOT_TOKEN = "1:test-token";
secrets (weak) smixs-iva-agent-f5bb315/agent/lib/telegram-media.test.ts :16 process.env.TELEGRAM_BOT_TOKEN = "1:test-token";
secrets smixs-iva-agent-f5bb315/agent/lib/telegram-media.ts :69 const token = process.env.TELEGRAM_BOT_TOKEN ?? "";
secrets smixs-iva-agent-f5bb315/agent/lib/telegram-stop.ts :127 secret = process.env.TELEGRAM_WEBHOOK_SECRET_TOKEN,
secrets smixs-iva-agent-f5bb315/agent/provider.ts :57 apiKey: process.env.OLLAMA_API_KEY,
secrets smixs-iva-agent-f5bb315/agent/transcribe.ts :12 Authorization: `Token ${process.env.DEEPGRAM_API_KEY ?? ""}`,

show 21 more

secrets (weak) smixs-iva-agent-f5bb315/scripts/daily-digest.ts :12 const BOT = process.env.TELEGRAM_BOT_TOKEN;
secrets (weak) smixs-iva-agent-f5bb315/scripts/fixtures/telegram-main-guard-child.ts :13 process.env.TELEGRAM_BOT_TOKEN = "74002:test-token";
secrets (weak) smixs-iva-agent-f5bb315/scripts/fixtures/telegram-poll-queue-harness.ts :46 process.env.TELEGRAM_BOT_TOKEN = "73002:test-token";
secrets (weak) smixs-iva-agent-f5bb315/scripts/fixtures/telegram-process-lock-child.ts :12 process.env.TELEGRAM_BOT_TOKEN = `${botId}:test-token`;
secrets (weak) smixs-iva-agent-f5bb315/scripts/lib/telegram-queue.test.ts :113 process.env.TELEGRAM_BOT_TOKEN ??= "999:test-token";
secrets (weak) smixs-iva-agent-f5bb315/scripts/lib/update-ui.test.ts :688 const previousToken = process.env.TELEGRAM_BOT_TOKEN;
secrets (weak) smixs-iva-agent-f5bb315/scripts/memory/brain.ts :38 const BOT = process.env.TELEGRAM_BOT_TOKEN;
secrets (weak) smixs-iva-agent-f5bb315/scripts/memory/rollup.ts :64 const BOT = process.env.TELEGRAM_BOT_TOKEN;
secrets (weak) smixs-iva-agent-f5bb315/scripts/poller/config.ts :10 export const TOKEN = process.env.TELEGRAM_BOT_TOKEN;
secrets (weak) smixs-iva-agent-f5bb315/scripts/poller/control.test.ts :92 process.env.TELEGRAM_BOT_TOKEN = "424242:test-token";
secrets (weak) smixs-iva-agent-f5bb315/scripts/poller/deliver.test.ts :6 process.env.TELEGRAM_BOT_TOKEN = "73002:test-token";
secrets (weak) smixs-iva-agent-f5bb315/scripts/poller/update-flow.test.ts :23 process.env.TELEGRAM_BOT_TOKEN = "token";
secrets (weak) smixs-iva-agent-f5bb315/scripts/poller/update-reconcile.test.ts :26 process.env.TELEGRAM_BOT_TOKEN = "token";
secrets (weak) smixs-iva-agent-f5bb315/scripts/setup/main.ts :676 existing: process.env.OLLAMA_API_KEY || existing.OLLAMA_API_KEY || "",
secrets (weak) smixs-iva-agent-f5bb315/scripts/telegram-acceptance.test.ts :179 process.env.TELEGRAM_BOT_TOKEN = fakeBotToken(999, "acceptance-default");
secrets (weak) smixs-iva-agent-f5bb315/scripts/telegram-failure-events.test.ts :21 process.env.TELEGRAM_BOT_TOKEN = "failure-test-token";
secrets (weak) smixs-iva-agent-f5bb315/scripts/telegram-media-identity.test.ts :25 process.env.TELEGRAM_BOT_TOKEN = "999:media-test-token";
secrets (weak) smixs-iva-agent-f5bb315/scripts/telegram-poll-reset.test.ts :143 process.env.TELEGRAM_BOT_TOKEN = "test-token";
secrets (weak) smixs-iva-agent-f5bb315/scripts/telegram-poll.test.ts :139 process.env.TELEGRAM_BOT_TOKEN ??= "test:token";
secrets (weak) smixs-iva-agent-f5bb315/scripts/telegram-reply-context.test.ts :27 process.env.TELEGRAM_BOT_TOKEN = telegramBotToken;
secrets (weak) smixs-iva-agent-f5bb315/scripts/web-search-tool.test.ts :54 process.env.TAVILY_API_KEY = "test-key";

tool registrations 1

fn smixs-iva-agent-f5bb315/services/telegram-userbot/onboarding.py :165

install hooks 1

postinstall smixs-iva-agent-f5bb315/package.json :36 patch-package --error-on-fail

declared dependencies 22

@modelcontextprotocol/sdk@1.30.0
@ai-sdk/openai@4.0.15
@ai-sdk/openai-compatible@^3.0.11
@iva/context-window@file:packages/context-window
@iva/data-dir@file:packages/data-dir
@iva/timezone@file:packages/timezone
@vercel/connect@0.2.2
ai@7.0.39
eve@0.51.1
just-bash@^3.0.0
zod@4.4.3
@eslint/js@^10.0.1

show 10 more

@types/node@24.x
@typescript/native-preview@7.0.0-dev.20260523.1
eslint@^10.8.0
eslint-config-prettier@^10.1.8
fast-check@4.9.0
globals@^17.9.0
patch-package@^8.0.1
prettier@^3.9.6
typescript@~6.0.3
typescript-eslint@^8.66.0

obfuscation 7

dynamic require()/import() smixs-iva-agent-f5bb315/agent/lib/schedule-table.test.ts :138 const module = (await import(`../schedules/${name}.ts`)) as {
dynamic require()/import() smixs-iva-agent-f5bb315/scripts/lib/systemd-control.test.ts :410 const { createCliRuntime } = await import(${JSON.stringify(runtime)});
dynamic require()/import() smixs-iva-agent-f5bb315/scripts/lib/update-ui.test.ts :702 const bridge = await import(`../telegram-poll.mjs?test=${Date.now()}`);
dynamic require()/import() smixs-iva-agent-f5bb315/scripts/poller/config.test.ts :37 const config = await import(${JSON.stringify(CONFIG_URL)});
dynamic require()/import() smixs-iva-agent-f5bb315/scripts/poller/control.test.ts :101 import(`./control.ts?control-test=${Date.now()}`),
dynamic require()/import() smixs-iva-agent-f5bb315/scripts/poller/update-flow.test.ts :27 (await import(`./update-flow.ts?characterize=${Date.now()}`)) as {
dynamic require()/import() smixs-iva-agent-f5bb315/scripts/telegram-poll-reset.test.ts :148 import(`./telegram-poll.mjs?reset-test=${Date.now()}`),

transport_posture 4

network-listening, binds all interfaces, no auth detected smixs-iva-agent-f5bb315/scripts/check-port.test.ts :25 server.listen(0, "0.0.0.0", resolve);
network-listening, binds all interfaces, no auth detected smixs-iva-agent-f5bb315/scripts/cli/config.test.ts :367 listener.listen(0, "0.0.0.0", () =>
network-listening, binds all interfaces, no auth detected smixs-iva-agent-f5bb315/scripts/lib/ports.test.ts :18 held.listen(0, "0.0.0.0", () =>
network-listening, binds all interfaces, no auth detected smixs-iva-agent-f5bb315/scripts/lib/ports.ts :57 srv.listen(port, "0.0.0.0"); // 0.0.0.0 перекрывает и 127.0.0.1, и чужой wildcard-биндинг