talirezun/the-curator

filesystem 245

• fs talirezun-the-curator-739389e/desktop/lib/adhoc-sign.mjs :79 import { readdirSync } from 'node:fs';
• fs talirezun-the-curator-739389e/desktop/lib/app-version.js :54 import { readFileSync } from 'node:fs';
• fs talirezun-the-curator-739389e/desktop/lib/dist.js :24 import { existsSync } from 'node:fs';
• fs talirezun-the-curator-739389e/desktop/lib/update-engine.js :64 import { createWriteStream } from 'node:fs';
• fs talirezun-the-curator-739389e/desktop/lib/verify-version.mjs :44 import { readdirSync, readFileSync } from 'node:fs';
• fs talirezun-the-curator-739389e/desktop/lib/window-state.js :52 import { readFileSync, writeFileSync, mkdirSync } from 'node:fs';
• fs talirezun-the-curator-739389e/desktop/main.js :48 import { existsSync, readFileSync, watch as fsWatch } from 'node:fs';
• fs talirezun-the-curator-739389e/mcp/storage/local.js :84 import fs from 'node:fs/promises';
• fs talirezun-the-curator-739389e/mcp/tools/compile.js :21 import { existsSync } from 'fs';
• fs (weak) talirezun-the-curator-739389e/scripts/bulk-reingest.js :22 import { readdir } from 'fs/promises';
• fs (weak) talirezun-the-curator-739389e/scripts/check-doc-suite-counts.js :51 import { readFileSync } from 'node:fs';
• fs (weak) talirezun-the-curator-739389e/scripts/fix-tag-spaces.js :12 import { readFileSync, writeFileSync } from 'fs';

205 more not shown — this panel samples each group; the count above is the real total.

shell / exec 66

• shell talirezun-the-curator-739389e/desktop/lib/adhoc-sign.mjs :78 import { spawnSync } from 'node:child_process';
• shell talirezun-the-curator-739389e/desktop/lib/dist.js :23 import { spawnSync } from 'node:child_process';
• shell talirezun-the-curator-739389e/desktop/lib/verify-version.mjs :43 import { execFileSync } from 'node:child_process';
• shell talirezun-the-curator-739389e/desktop/main.js :34 * `if (!process.env.CURATOR_NO_OPEN) exec('open http://localhost:'+PORT)`.
• shell (weak) talirezun-the-curator-739389e/scripts/fix-tag-spaces.js :14 import { execSync } from 'child_process';
• shell (weak) talirezun-the-curator-739389e/scripts/release.js :107 import { spawnSync } from 'node:child_process';
• shell (weak) talirezun-the-curator-739389e/scripts/repair-wiki.js :501 const { execFileSync } = await import('child_process');
• shell (weak) talirezun-the-curator-739389e/scripts/run-tests.js :25 import { spawn } from 'child_process';
• shell (weak) talirezun-the-curator-739389e/scripts/test-beta8-stress.js :21 import { spawn } from 'child_process';
• shell (weak) talirezun-the-curator-739389e/scripts/test-build-model.js :67 import { execFileSync } from 'child_process';
• shell (weak) talirezun-the-curator-739389e/scripts/test-desktop-update-macos.js :42 import { spawn, spawnSync } from 'node:child_process';
• shell (weak) talirezun-the-curator-739389e/scripts/test-desktop-update.js :65 import { spawn, spawnSync } from 'node:child_process';

26 more not shown — this panel samples each group; the count above is the real total.

network 61

• net talirezun-the-curator-739389e/desktop/lib/port.js :57 import net from 'node:net';
• net talirezun-the-curator-739389e/desktop/lib/update-plan.js :362 // downloads from. This URL comes off the network and is handed to fetch(),
• net talirezun-the-curator-739389e/desktop/lib/update-verdict.js :118 * `fetch()` yields an unquarantined one. Both arms are in the macOS suite,
• net (weak) talirezun-the-curator-739389e/scripts/run-tests.js :319 'test-desktop-update-macos.js', // the update swap against a REAL ad-hoc-signed fixture bundle, with real hdiutil, ditto, plutil and codesign. LIVE_LOCAL rather than OFFLINE because it need
• net (weak) talirezun-the-curator-739389e/scripts/test-api-keys-contract.js :67 import { createServer } from 'node:http';
• net (weak) talirezun-the-curator-739389e/scripts/test-background-mode.js :53 import { createServer } from 'http';
• net (weak) talirezun-the-curator-739389e/scripts/test-build-model.js :66 import { createServer } from 'http';
• net (weak) talirezun-the-curator-739389e/scripts/test-chat-cancel.js :192 const res = await fetch(url, { ...init, signal: ac.signal });
• net (weak) talirezun-the-curator-739389e/scripts/test-chat-streaming.js :228 const res = await fetch(url, {
• net (weak) talirezun-the-curator-739389e/scripts/test-desktop-packaging.js :501 'CONTROL — no assertion in this section escaped to the real fetch (this suite is OFFLINE)');
• net (weak) talirezun-the-curator-739389e/scripts/test-desktop-update.js :289 'asset-unusable', 'PLAIN HTTP IS REFUSED — the URL comes off the network and is handed to fetch()');
• net (weak) talirezun-the-curator-739389e/scripts/test-first-run-domains.js :88 import http from 'node:http';

21 more not shown — this panel samples each group; the count above is the real total.

secrets 20

• secrets (weak) talirezun-the-curator-739389e/scripts/test-anthropic-content-blocks.js :58 process.env.ANTHROPIC_API_KEY = 'sk-ant-test-not-a-real-key';
• secrets (weak) talirezun-the-curator-739389e/scripts/test-beta13-chat-live.js :35 if (!process.env.GEMINI_API_KEY) {
• secrets (weak) talirezun-the-curator-739389e/scripts/test-beta14-anthropic-fix.js :119 const LIVE_KEY = process.env.ANTHROPIC_API_KEY;
• secrets (weak) talirezun-the-curator-739389e/scripts/test-beta8-live-llm.js :82 if (!process.env.GEMINI_API_KEY) {
• secrets (weak) talirezun-the-curator-739389e/scripts/test-build-model.js :88 delete process.env.GEMINI_API_KEY;
• secrets (weak) talirezun-the-curator-739389e/scripts/test-chat-cancel.js :223 delete process.env.GEMINI_API_KEY;
• secrets (weak) talirezun-the-curator-739389e/scripts/test-chat-intent-live.js :91 const haveGemini = !!keys.geminiApiKey || !!process.env.GEMINI_API_KEY;
• secrets (weak) talirezun-the-curator-739389e/scripts/test-chat-model.js :114 const savedA = process.env.ANTHROPIC_API_KEY;
• secrets (weak) talirezun-the-curator-739389e/scripts/test-chat-streaming.js :260 delete process.env.GEMINI_API_KEY;
• secrets (weak) talirezun-the-curator-739389e/scripts/test-chat-style-live.js :102 const haveGemini = !!keys.geminiApiKey || !!process.env.GEMINI_API_KEY;
• secrets (weak) talirezun-the-curator-739389e/scripts/test-chat-truncation-live.js :99 const haveGemini = !!keys.geminiApiKey || !!process.env.GEMINI_API_KEY;
• secrets (weak) talirezun-the-curator-739389e/scripts/test-ingest-deep.js :120 let geminiKey = process.env.GEMINI_API_KEY || null;

declared dependencies 8

• @modelcontextprotocol/sdk@^1.29.0
• @anthropic-ai/sdk@^0.39.0
• @google/generative-ai@^0.24.0
• dotenv@^16.5.0
• express@^4.21.2
• jsonrepair@^3.13.3
• multer@^2.2.0
• pdf-parse@^1.1.1

obfuscation 10

• dynamic require()/import() talirezun-the-curator-739389e/scripts/test-beta14-anthropic-fix.js :146 const cfgMod = await import(`../src/brain/config.js?live=${Date.now()}`);
• dynamic require()/import() talirezun-the-curator-739389e/scripts/test-beta8-stress.js :218 import('${path.resolve('src/brain/atomic-write.js').replace(/\\\\/g, '/')}').then(async ({ writeFileAtomic }) => {
• dynamic require()/import() talirezun-the-curator-739389e/scripts/test-build-model.js :147 try { OLD = await import(`../src/brain/${path.basename(BC_PATH)}`); }
• dynamic require()/import() talirezun-the-curator-739389e/scripts/test-desktop-version-identity.js :391 const hook = await import(`file://${hookPath}`);
• dynamic require()/import() talirezun-the-curator-739389e/scripts/test-domain-stats.js :681 const { default: router } = await import(${JSON.stringify(pathToFileURL(path.join(PROJECT_ROOT, 'src/routes/domains.js')).href)});
• dynamic require()/import() talirezun-the-curator-739389e/scripts/test-mcp-launcher.js :268 const m = await import(${JSON.stringify('file://' + path.join(appRoot, 'src/routes/mcp.js'))});
• dynamic require()/import() talirezun-the-curator-739389e/scripts/test-openrouter-catalogue-sync.js :547 await import(${JSON.stringify(path.join(REPO_ROOT, 'src/routes/config.js'))});
• dynamic require()/import() talirezun-the-curator-739389e/scripts/test-paths.js :597 const c = await import(${JSON.stringify(path.join(ROOT, 'src/brain/config.js'))});
• dynamic require()/import() talirezun-the-curator-739389e/scripts/test-sidebar-status-rows.js :245 const m = await import(${JSON.stringify(filesUrl)});
• dynamic require()/import() talirezun-the-curator-739389e/scripts/test-working-state-stress.js :383 const WS = await import(${JSON.stringify(path.join(REPO, 'src/brain/working-state.js'))});

perm:untrusted 5

• untrusted (weak) talirezun-the-curator-739389e/scripts/test-api-keys-contract.js :132 const getKeys = async () => (await fetch(BASE + '/api/config/api-keys')).json();
• untrusted (weak) talirezun-the-curator-739389e/scripts/test-offer-list-memo.js :333 const fetchBody = async () => JSON.parse(await (await fetch(`http://127.0.0.1:${port}/api/config/api-keys`)).text());
• untrusted (weak) talirezun-the-curator-739389e/scripts/test-offerable-models-route.js :1012 const before = await (await fetch(BASE + '/api/config/api-keys')).json();
• untrusted (weak) talirezun-the-curator-739389e/scripts/test-router-lanes.js :388 const getKeys = async () => (await fetch(BASE + '/api/config/api-keys')).json();
• untrusted (weak) talirezun-the-curator-739389e/scripts/test-selected-model.js :499 const after = await (await fetch('http://127.0.0.1:' + port + '/api/config/api-keys')).json();