`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5064f02c447cb791", "name": "Dangling fetch: POST /solar-rec/api/auth/login (client/src/components/SolarRecAuthGate.tsx:51)", "shortDescription": {"text": "Dangling fetch: POST /solar-rec/api/auth/login (client/src/components/SolarRecAuthGate.tsx:51)"}, "fullDescription": {"text": "`client/src/components/SolarRecAuthGate.tsx:51` calls `POST /solar-rec/api/auth/login` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/solar-rec/api/auth/login`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-552cb797518f6b32", "name": "Dangling fetch: GET https://api.todoist.com/sync/v9/completed/get_all?${params.toString()} (server/services/integrations", "shortDescription": {"text": "Dangling fetch: GET https://api.todoist.com/sync/v9/completed/get_all?${params.toString()} (server/services/integrations/todoist.ts:704)"}, "fullDescription": {"text": "`server/services/integrations/todoist.ts:704` calls `GET https://api.todoist.com/sync/v9/completed/get_all?${params.toString()}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.todoist.com/sync/v9/completed/get_all`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-86db4c13b09dfe22", "name": "Dangling fetch: POST https://api.anthropic.com/v1/messages (server/services/integrations/supplements.ts:178)", "shortDescription": {"text": "Dangling fetch: POST https://api.anthropic.com/v1/messages (server/services/integrations/supplements.ts:178)"}, "fullDescription": {"text": "`server/services/integrations/supplements.ts:178` calls `POST https://api.anthropic.com/v1/messages` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.anthropic.com/v1/messages`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a02a85b691605903", "name": "Dangling fetch: GET /admin/login (server/services/integrations/csgPortal.ts:629)", "shortDescription": {"text": "Dangling fetch: GET /admin/login (server/services/integrations/csgPortal.ts:629)"}, "fullDescription": {"text": "`server/services/integrations/csgPortal.ts:629` calls `GET /admin/login` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: helper:request\nNormalized path used for matching: `/admin/login`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-25bec2902316f615", "name": "Dangling fetch: POST /admin/login (server/services/integrations/csgPortal.ts:655)", "shortDescription": {"text": "Dangling fetch: POST /admin/login (server/services/integrations/csgPortal.ts:655)"}, "fullDescription": {"text": "`server/services/integrations/csgPortal.ts:655` calls `POST /admin/login` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: helper:request\nNormalized path used for matching: `/admin/login`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e9d5861b7935be62", "name": "Dangling fetch: POST https://slack.com/api/oauth.v2.access (server/services/integrations/slack.ts:62)", "shortDescription": {"text": "Dangling fetch: POST https://slack.com/api/oauth.v2.access (server/services/integrations/slack.ts:62)"}, "fullDescription": {"text": "`server/services/integrations/slack.ts:62` calls `POST https://slack.com/api/oauth.v2.access` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/slack.com/api/oauth.v2.access`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-901ec5d3a4886b54", "name": "Dangling fetch: POST https://slack.com/api/auth.test (server/services/integrations/slack.ts:91)", "shortDescription": {"text": "Dangling fetch: POST https://slack.com/api/auth.test (server/services/integrations/slack.ts:91)"}, "fullDescription": {"text": "`server/services/integrations/slack.ts:91` calls `POST https://slack.com/api/auth.test` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/slack.com/api/auth.test`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-df483fe23b1e9b94", "name": "Dangling fetch: GET https://slack.com/api/search.messages?${params.toString()} (server/services/integrations/slack.ts:15", "shortDescription": {"text": "Dangling fetch: GET https://slack.com/api/search.messages?${params.toString()} (server/services/integrations/slack.ts:157)"}, "fullDescription": {"text": "`server/services/integrations/slack.ts:157` calls `GET https://slack.com/api/search.messages?${params.toString()}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/slack.com/api/search.messages`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3a0de849a139d77f", "name": "Dangling fetch: POST https://gmail.googleapis.com/gmail/v1/users/me/messages/${encodeURIComponent(messageId)}/modify (se", "shortDescription": {"text": "Dangling fetch: POST https://gmail.googleapis.com/gmail/v1/users/me/messages/${encodeURIComponent(messageId)}/modify (server/services/integrations/google.ts:328)"}, "fullDescription": {"text": "`server/services/integrations/google.ts:328` calls `POST https://gmail.googleapis.com/gmail/v1/users/me/messages/${encodeURIComponent(messageId)}/modify` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/gmail.googleapis.com/gmail/v1/users/me/messages/
/modify`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7cd0e6163798ef72", "name": "Dangling fetch: POST https://sheets.googleapis.com/v4/spreadsheets (server/services/integrations/google.ts:405)", "shortDescription": {"text": "Dangling fetch: POST https://sheets.googleapis.com/v4/spreadsheets (server/services/integrations/google.ts:405)"}, "fullDescription": {"text": "`server/services/integrations/google.ts:405` calls `POST https://sheets.googleapis.com/v4/spreadsheets` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/sheets.googleapis.com/v4/spreadsheets`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-74e364fb07e661a9", "name": "Dangling fetch: POST https://oauth2.googleapis.com/token (server/services/integrations/google.ts:621)", "shortDescription": {"text": "Dangling fetch: POST https://oauth2.googleapis.com/token (server/services/integrations/google.ts:621)"}, "fullDescription": {"text": "`server/services/integrations/google.ts:621` calls `POST https://oauth2.googleapis.com/token` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/oauth2.googleapis.com/token`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-38e54d9ced9c9524", "name": "Dangling fetch: POST https://oauth2.googleapis.com/token (server/services/integrations/google.ts:652)", "shortDescription": {"text": "Dangling fetch: POST https://oauth2.googleapis.com/token (server/services/integrations/google.ts:652)"}, "fullDescription": {"text": "`server/services/integrations/google.ts:652` calls `POST https://oauth2.googleapis.com/token` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/oauth2.googleapis.com/token`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-420c0dadf564e33d", "name": "Dangling fetch: POST https://api.anthropic.com/v1/messages (server/services/core/addressCleaning.ts:470)", "shortDescription": {"text": "Dangling fetch: POST https://api.anthropic.com/v1/messages (server/services/core/addressCleaning.ts:470)"}, "fullDescription": {"text": "`server/services/core/addressCleaning.ts:470` calls `POST https://api.anthropic.com/v1/messages` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.anthropic.com/v1/messages`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b4e9da1404ee1de4", "name": "Dangling fetch: POST https://api.openai.com/v1/chat/completions (server/services/core/addressCleaning.ts:496)", "shortDescription": {"text": "Dangling fetch: POST https://api.openai.com/v1/chat/completions (server/services/core/addressCleaning.ts:496)"}, "fullDescription": {"text": "`server/services/core/addressCleaning.ts:496` calls `POST https://api.openai.com/v1/chat/completions` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.openai.com/v1/chat/completions`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-854f3e2b83470a42", "name": "Dangling fetch: GET /eguard/ (server/services/solar/egauge.ts:895)", "shortDescription": {"text": "Dangling fetch: GET /eguard/ (server/services/solar/egauge.ts:895)"}, "fullDescription": {"text": "`server/services/solar/egauge.ts:895` calls `GET /eguard/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: helper:request\nNormalized path used for matching: `/eguard`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3efae5e569f9374b", "name": "Dangling fetch: GET /eguard/data/ (server/services/solar/egauge.ts:1075)", "shortDescription": {"text": "Dangling fetch: GET /eguard/data/ (server/services/solar/egauge.ts:1075)"}, "fullDescription": {"text": "`server/services/solar/egauge.ts:1075` calls `GET /eguard/data/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: helper:request\nNormalized path used for matching: `/eguard/data`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4f8ab9fb6e68303a", "name": "Dangling fetch: POST https://api.openai.com/v1/chat/completions (server/routers/productivity.ts:650)", "shortDescription": {"text": "Dangling fetch: POST https://api.openai.com/v1/chat/completions (server/routers/productivity.ts:650)"}, "fullDescription": {"text": "`server/routers/productivity.ts:650` calls `POST https://api.openai.com/v1/chat/completions` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.openai.com/v1/chat/completions`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f7b1a3872f7ef24c", "name": "Dangling fetch: POST https://api.openai.com/v1/chat/completions (server/routers/productivity.ts:812)", "shortDescription": {"text": "Dangling fetch: POST https://api.openai.com/v1/chat/completions (server/routers/productivity.ts:812)"}, "fullDescription": {"text": "`server/routers/productivity.ts:812` calls `POST https://api.openai.com/v1/chat/completions` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.openai.com/v1/chat/completions`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b812fcfeb904daae", "name": "Dangling fetch: POST https://api.openai.com/v1/chat/completions (server/routers/productivity.ts:947)", "shortDescription": {"text": "Dangling fetch: POST https://api.openai.com/v1/chat/completions (server/routers/productivity.ts:947)"}, "fullDescription": {"text": "`server/routers/productivity.ts:947` calls `POST https://api.openai.com/v1/chat/completions` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.openai.com/v1/chat/completions`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-452348a82716bfa3", "name": "Dangling fetch: GET https://gmail.googleapis.com/gmail/v1/users/me/messages/${encodeURIComponent(messageId)}?format=meta", "shortDescription": {"text": "Dangling fetch: GET https://gmail.googleapis.com/gmail/v1/users/me/messages/${encodeURIComponent(messageId)}?format=metadata&metadataHeaders=Subject (server/routers/personalData.ts:2723)"}, "fullDescription": {"text": "`server/routers/personalData.ts:2723` calls `GET https://gmail.googleapis.com/gmail/v1/users/me/messages/${encodeURIComponent(messageId)}?format=metadata&metadataHeaders=Subject` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/gmail.googleapis.com/gmail/v1/users/me/messages/
`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e7763b195e068798", "name": "Dangling fetch: GET https://www.googleapis.com/calendar/v3/calendars/${encodeURIComponent(calId)}/events/${encodeURIComp", "shortDescription": {"text": "Dangling fetch: GET https://www.googleapis.com/calendar/v3/calendars/${encodeURIComponent(calId)}/events/${encodeURIComponent(eventId!)} (server/routers/personalData.ts:2791)"}, "fullDescription": {"text": "`server/routers/personalData.ts:2791` calls `GET https://www.googleapis.com/calendar/v3/calendars/${encodeURIComponent(calId)}/events/${encodeURIComponent(eventId!)}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/www.googleapis.com/calendar/v3/calendars/
/events/
`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d7012941c24520f1", "name": "Dangling fetch: GET https://www.googleapis.com/calendar/v3/users/me/calendarList?fields=items(id,accessRole) (server/rou", "shortDescription": {"text": "Dangling fetch: GET https://www.googleapis.com/calendar/v3/users/me/calendarList?fields=items(id,accessRole) (server/routers/personalData.ts:2811)"}, "fullDescription": {"text": "`server/routers/personalData.ts:2811` calls `GET https://www.googleapis.com/calendar/v3/users/me/calendarList?fields=items(id,accessRole)` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/www.googleapis.com/calendar/v3/users/me/calendarlist`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c8b0c9e6bcd777a8", "name": "Dangling fetch: GET https://www.googleapis.com/drive/v3/files/${spreadsheetId}?fields=name (server/routers/personalData.", "shortDescription": {"text": "Dangling fetch: GET https://www.googleapis.com/drive/v3/files/${spreadsheetId}?fields=name (server/routers/personalData.ts:2886)"}, "fullDescription": {"text": "`server/routers/personalData.ts:2886` calls `GET https://www.googleapis.com/drive/v3/files/${spreadsheetId}?fields=name` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/www.googleapis.com/drive/v3/files/
`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-173b1bc476c98547", "name": "Dangling fetch: GET https://api.todoist.com/api/v1/tasks/${encodeURIComponent(taskId)} (server/routers/personalData.ts:2", "shortDescription": {"text": "Dangling fetch: GET https://api.todoist.com/api/v1/tasks/${encodeURIComponent(taskId)} (server/routers/personalData.ts:2945)"}, "fullDescription": {"text": "`server/routers/personalData.ts:2945` calls `GET https://api.todoist.com/api/v1/tasks/${encodeURIComponent(taskId)}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.todoist.com/api/v1/tasks/
`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-be9a5833e4e283f4", "name": "Dangling fetch: POST https://api.anthropic.com/v1/messages (server/routers/personalData.ts:3598)", "shortDescription": {"text": "Dangling fetch: POST https://api.anthropic.com/v1/messages (server/routers/personalData.ts:3598)"}, "fullDescription": {"text": "`server/routers/personalData.ts:3598` calls `POST https://api.anthropic.com/v1/messages` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.anthropic.com/v1/messages`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0dbe1cb992fb5c5b", "name": "Unused endpoint: GET /oauth/google", "shortDescription": {"text": "Unused endpoint: GET /oauth/google"}, "fullDescription": {"text": "`server/oauth-routes.ts` declares `GET /oauth/google` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eb03a5115c2d8a71", "name": "Unused endpoint: GET /oauth/google/callback", "shortDescription": {"text": "Unused endpoint: GET /oauth/google/callback"}, "fullDescription": {"text": "`server/oauth-routes.ts` declares `GET /oauth/google/callback` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e6ffe0a4ac46924c", "name": "Unused endpoint: GET /oauth/whoop", "shortDescription": {"text": "Unused endpoint: GET /oauth/whoop"}, "fullDescription": {"text": "`server/oauth-routes.ts` declares `GET /oauth/whoop` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-db650ca1d12fd589", "name": "Unused endpoint: GET /oauth/whoop/callback", "shortDescription": {"text": "Unused endpoint: GET /oauth/whoop/callback"}, "fullDescription": {"text": "`server/oauth-routes.ts` declares `GET /oauth/whoop/callback` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49362ec901d9305e", "name": "Unused endpoint: GET /oauth/slack", "shortDescription": {"text": "Unused endpoint: GET /oauth/slack"}, "fullDescription": {"text": "`server/oauth-routes.ts` declares `GET /oauth/slack` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ce32167f382c6754", "name": "Unused endpoint: GET /oauth/slack/callback", "shortDescription": {"text": "Unused endpoint: GET /oauth/slack/callback"}, "fullDescription": {"text": "`server/oauth-routes.ts` declares `GET /oauth/slack/callback` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d2c9063bc9b9c01b", "name": "Unused endpoint: POST /webhooks/whoop", "shortDescription": {"text": "Unused endpoint: POST /webhooks/whoop"}, "fullDescription": {"text": "`server/oauth-routes.ts` declares `POST /webhooks/whoop` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d2db90a05e7614b5", "name": "Unused endpoint: POST /webhooks/samsung-health", "shortDescription": {"text": "Unused endpoint: POST /webhooks/samsung-health"}, "fullDescription": {"text": "`server/oauth-routes.ts` declares `POST /webhooks/samsung-health` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e17fd20f3fae5cd6", "name": "Unused endpoint: POST /webhooks/samsung-health/batch", "shortDescription": {"text": "Unused endpoint: POST /webhooks/samsung-health/batch"}, "fullDescription": {"text": "`server/oauth-routes.ts` declares `POST /webhooks/samsung-health/batch` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d3f0e6642e916974", "name": "Unused endpoint: POST /webhooks/samsung-health/sdk-shadow/batch", "shortDescription": {"text": "Unused endpoint: POST /webhooks/samsung-health/sdk-shadow/batch"}, "fullDescription": {"text": "`server/oauth-routes.ts` declares `POST /webhooks/samsung-health/sdk-shadow/batch` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-52aa6bb90f761c98", "name": "Unused endpoint: POST /webhooks/samsung-health/import-daily-metrics", "shortDescription": {"text": "Unused endpoint: POST /webhooks/samsung-health/import-daily-metrics"}, "fullDescription": {"text": "`server/oauth-routes.ts` declares `POST /webhooks/samsung-health/import-daily-metrics` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8b0514fb34f15a11", "name": "Unused endpoint: GET /webhooks/samsung-health/debug", "shortDescription": {"text": "Unused endpoint: GET /webhooks/samsung-health/debug"}, "fullDescription": {"text": "`server/oauth-routes.ts` declares `GET /webhooks/samsung-health/debug` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c582c77bd1a58a0f", "name": "Unused endpoint: USE /api/trpc/