npm JavaScript analyzed 11.3.15

iclavue

v11.3.15

Clavue: execution-first AI coding CLI with direct repo tools, provider routing, native workflows, MCP integration, and long-session recovery

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence v11.3.15 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 12

fs package/dist/cli.js :28 Path=getLockFile(file2,options);options.fs.mkdir(lockfilePath,err2=>{if(!err2)return mtimePrecision.probe(lockfilePath,options.fs,(err3,mtime,mtimePrecision2)=>{if(err3)return options.fs.rmdir(lockfil
fs package/dist/login-redirect-command.js :1 import { existsSync, readFileSync } from 'node:fs'
fs package/dist/mao-command.js :5 ePath=getLockFile(file,options);options.fs.mkdir(lockfilePath,err=>{if(!err)return mtimePrecision.probe(lockfilePath,options.fs,(err2,mtime,mtimePrecision2)=>{if(err2)return options.fs.rmdir(lockfileP
fs package/dist/openai-responses-adapter.js :62 ror)}},createWriteStream(path10){return fs.createWriteStream(path10)},async readFileBytes(fsPath,maxBytes){if(maxBytes===void 0)return readFilePromise(fsPath);let handle=await open(fsPath,"r");try{let
fs package/dist/provider-setup.js :3 import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'
fs package/dist/team-command.js :1 import { existsSync, readdirSync, readFileSync } from 'node:fs'
fs (weak) package/scripts/postinstall-pager.mjs :7 import { chmodSync, existsSync, readdirSync } from 'node:fs'

shell package/dist/cli.js :11 ons});if(!reexecArgv)return!1;let child=spawnSync(execPath2,reexecArgv,{stdio:"inherit",env:{...env5,[HEAP_REEXEC_GUARD_ENV]:"1"}});if(child.error)return console.error(`Clavue could not restart with $
shell package/dist/mao-command.js :17 (command,args=[],options={}){let result=spawnSync(command,args,{cwd:options.cwd,env:options.env,encoding:"utf8",input:options.input,stdio:options.stdio??"pipe",shell:process6.platform==="win32",window
shell package/dist/provider-setup.js :1 import { execFileSync, spawnSync } from 'node:child_process'

net package/dist/cli.js :41 (({host,clientKey,headers})=>polyfills2.fetch(`${host}/api/features/${clientKey}`,{headers}),"fetchFeaturesCall"),fetchRemoteEvalCall:__name(({host,clientKey,payload,headers})=>{let options={method:"P
net package/dist/provider-setup.js :3104 const response = await fetch(

secrets package/dist/provider-setup.js :4412 delete process.env.ANTHROPIC_API_KEY