Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

Scan timing: clone 4.83s · analysis 8.99s · 14.7 MB · GitHub API rate-limit (preflight)

cloudflare/agents

https://github.com/cloudflare/agents · scanned 2026-05-24 01:20 UTC (1 week, 5 days ago) · 10 languages

3663 findings (99 legacy + 3564 scanner) 38th percentile · Typescript · large (100-500K LoC) Scanner says 55 (higher by 18)

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 week, 5 days ago · v7 · 628 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.

JSON
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 60.0 0.15 9.00
security_score 80.1 0.25 20.02
testing_score 95.0 0.20 19.00
documentation_score 62.1 0.15 9.31
practices_score 71.0 0.15 10.65
code_quality 49.5 0.10 4.95
Overall 1.00 72.9
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Scan summary Repository scanned at 54.7/100 with 100.0% coverage. It contains 5346 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 529 findings — concentrated in quality (228), api (130), frontend (104). Risk profile is high: 5 critical, 126 high, 131 medium. Recommended next step: open the quality layer findings first — that's where the highest-impact wins live.

Showing 504 of 628 findings. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

critical Legacy quality quality conf 1.00 ✓ Repobility [MINED035] Js New Function: new Function(...) compiles strings to functions.
Review and fix per the pattern semantics. See CWE-95 / for context.
packages/codemode/src/iframe-runtime.ts:131 qualitylegacy
critical 9-layer security secrets conf 1.00 Possible secret in packages/ai-chat/e2e/worker.ts
Detected pattern matching generic_api_key. Rotate the credential and move to a secret manager.
packages/ai-chat/e2e/worker.ts:156 secrets
critical 9-layer security secrets conf 1.00 Possible secret in packages/shell/src/git/index.ts
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
packages/shell/src/git/index.ts:74 secrets
critical 9-layer security secrets conf 1.00 Possible secret in packages/shell/src/git/index.ts
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
packages/shell/src/git/index.ts:258 secrets
critical 9-layer security secrets conf 1.00 Possible secret in packages/shell/src/git/index.ts
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
packages/shell/src/git/index.ts:294 secrets
critical 9-layer security secrets conf 1.00 Possible secret in packages/shell/src/git/index.ts
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
packages/shell/src/git/index.ts:323 secrets
low Legacy quality quality conf 1.00 ✓ Repobility [MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums).
Review and fix per the pattern semantics. See CWE-327 / A02:2021 for context.
packages/shell/src/prompt.ts:34 qualitylegacy
low Legacy quality quality conf 1.00 ✓ Repobility [MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums).
Review and fix per the pattern semantics. See CWE-327 / A02:2021 for context.
packages/shell/src/backend.ts:151 qualitylegacy
high Legacy quality quality conf 1.00 ✓ Repobility [MINED031] React Direct State Mutation: this.state.X = Y mutates without setState. React wont re-render.
Review and fix per the pattern semantics. See CWE-682 / for context.
openai-sdk/chess-app/src/chess.tsx:84 qualitylegacy
low Legacy software xss conf 1.00 [SEC040] innerHTML XSS — template literal with server-supplied data: Setting .innerHTML with a template literal that interpolates server-supplied or user-supplied data is the canonical stored/reflected XSS vector. The browser parses the HTML and executes any <script> or event-handler attributes in the data. CWE-79. Especially dangerous when the data comes from a CV parser, profile field, or any user-input pipeline.
For plain text: use el.textContent = data.value (auto-escapes). For HTML you need to render: el.innerHTML = DOMPurify.sanitize(html). For React/Vue/Svelte: stop using innerHTML; use the framework's binding. When data comes from CV/PDF parsers, sanitize at the parser boundary too.
packages/agents/src/experimental/memory/session/search.ts:114 xsslegacy
low Legacy software xss conf 1.00 [SEC040] innerHTML XSS — template literal with server-supplied data: Setting .innerHTML with a template literal that interpolates server-supplied or user-supplied data is the canonical stored/reflected XSS vector. The browser parses the HTML and executes any <script> or event-handler attributes in the data. CWE-79. Especially dangerous when the data comes from a CV parser, profile field, or any user-input pipeline.
For plain text: use el.textContent = data.value (auto-escapes). For HTML you need to render: el.innerHTML = DOMPurify.sanitize(html). For React/Vue/Svelte: stop using innerHTML; use the framework's binding. When data comes from CV/PDF parsers, sanitize at the parser boundary too.
packages/agents/src/experimental/memory/session/providers/postgres-search.ts:67 xsslegacy
low Legacy software xss conf 1.00 [SEC040] innerHTML XSS — template literal with server-supplied data: Setting .innerHTML with a template literal that interpolates server-supplied or user-supplied data is the canonical stored/reflected XSS vector. The browser parses the HTML and executes any <script> or event-handler attributes in the data. CWE-79. Especially dangerous when the data comes from a CV parser, profile field, or any user-input pipeline.
For plain text: use el.textContent = data.value (auto-escapes). For HTML you need to render: el.innerHTML = DOMPurify.sanitize(html). For React/Vue/Svelte: stop using innerHTML; use the framework's binding. When data comes from CV/PDF parsers, sanitize at the parser boundary too.
experimental/gadgets-subagents/src/server.ts:285 xsslegacy
low Legacy quality quality conf 1.00 [SEC085] JS: child_process.exec with non-literal: child_process.exec with user-derived input enables command injection. Ported from eslint-plugin-security detect-child-process (Apache-2.0).
Use execFile / spawn with separate args array; never pass shell strings.
experimental/gadgets-gatekeeper/src/server.ts:87 qualitylegacy
low Legacy quality quality conf 1.00 [SEC085] JS: child_process.exec with non-literal: child_process.exec with user-derived input enables command injection. Ported from eslint-plugin-security detect-child-process (Apache-2.0).
Use execFile / spawn with separate args array; never pass shell strings.
examples/playground/src/demos/core/sql-agent.ts:56 qualitylegacy
low Legacy quality quality conf 1.00 [SEC085] JS: child_process.exec with non-literal: child_process.exec with user-derived input enables command injection. Ported from eslint-plugin-security detect-child-process (Apache-2.0).
Use execFile / spawn with separate args array; never pass shell strings.
examples/codemode/src/tools.ts:158 qualitylegacy
high Legacy software dependency conf 0.90 ✓ Repobility Action `actions/cache` pinned to mutable ref `@v5`
`uses: actions/cache@v5` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate.
.github/workflows/release.yml:43 dependencylegacy
high Legacy software dependency conf 0.90 ✓ Repobility Action `actions/cache` pinned to mutable ref `@v5`
`uses: actions/cache@v5` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate.
.github/workflows/nightly.yml:33 dependencylegacy
high Legacy software dependency conf 0.90 ✓ Repobility Action `actions/cache` pinned to mutable ref `@v5`
`uses: actions/cache@v5` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate.
.github/workflows/pullrequest.yml:49 dependencylegacy
high Legacy software dependency conf 0.90 ✓ Repobility Action `actions/cache` pinned to mutable ref `@v5`
`uses: actions/cache@v5` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate.
.github/workflows/pullrequest.yml:33 dependencylegacy
high Legacy software dependency conf 0.90 ✓ Repobility Action `actions/cache` pinned to mutable ref `@v5`
`uses: actions/cache@v5` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate.
.github/workflows/semgrep.yml:51 dependencylegacy
high Legacy software dependency conf 0.90 ✓ Repobility Action `actions/checkout` pinned to mutable ref `@v6`
`uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate.
.github/workflows/release.yml:27 dependencylegacy
high Legacy software dependency conf 0.90 ✓ Repobility Action `actions/checkout` pinned to mutable ref `@v6`
`uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate.
.github/workflows/nightly.yml:55 dependencylegacy
high Legacy software dependency conf 0.90 ✓ Repobility Action `actions/checkout` pinned to mutable ref `@v6`
`uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate.
.github/workflows/nightly.yml:20 dependencylegacy
high Legacy software dependency conf 0.90 ✓ Repobility Action `actions/checkout` pinned to mutable ref `@v6`
`uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate.
.github/workflows/bonk.yml:24 dependencylegacy
high Legacy software dependency conf 0.90 ✓ Repobility Action `actions/checkout` pinned to mutable ref `@v6`
`uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate.
.github/workflows/pullrequest.yml:23 dependencylegacy
high Legacy software dependency conf 0.90 ✓ Repobility Action `actions/checkout` pinned to mutable ref `@v6`
`uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate.
.github/workflows/semgrep.yml:47 dependencylegacy
high Legacy software dependency conf 0.90 ✓ Repobility Action `ask-bonk/ask-bonk/github` pinned to mutable ref `@main`
`uses: ask-bonk/ask-bonk/github@main` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate.
.github/workflows/bonk.yml:27 dependencylegacy
high Legacy software dependency conf 0.90 ✓ Repobility Action `changesets/action` pinned to mutable ref `@v1.7.0`
`uses: changesets/[email protected]` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate.
.github/workflows/release.yml:56 dependencylegacy
high Legacy software dependency conf 0.90 ✓ Repobility Action `nrwl/nx-set-shas` pinned to mutable ref `@v5`
`uses: nrwl/nx-set-shas@v5` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate.
.github/workflows/pullrequest.yml:29 dependencylegacy
high Legacy quality quality conf 0.80 ✓ Repobility Express POST /authorize has no auth
Express route POST /authorize declared without an auth middleware in its handler chain. Destructive methods (POST/PUT/DELETE/PATCH) on unauthenticated routes are OWASP A01:2021 broken access control.
examples/mcp-worker-authenticated/src/auth-handler.ts:128 qualitylegacy
high 9-layer api wiring conf 1.00 Dangling fetch: DELETE https://localhost/v1/devtools/browser/${sessionId} (packages/agents/src/browser/cdp-session.ts:250)
`packages/agents/src/browser/cdp-session.ts:250` calls `DELETE https://localhost/v1/devtools/browser/${sessionId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/localhost/v1/devtools/browser/<p>` If this poi…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: DELETE https://localhost/v1/devtools/browser/${sessionId} (packages/agents/src/browser/shared.ts:197)
`packages/agents/src/browser/shared.ts:197` calls `DELETE https://localhost/v1/devtools/browser/${sessionId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/localhost/v1/devtools/browser/<p>` If this points a…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET /api/example-config (examples/email-agent/src/client.tsx:249)
`examples/email-agent/src/client.tsx:249` calls `GET /api/example-config` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/example-config` If this points at an external API, prefix it with `https://` so the matcher sk…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET /auth/me (examples/assistant/src/auth-client.ts:11)
`examples/assistant/src/auth-client.ts:11` calls `GET /auth/me` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/auth/me` If this points at an external API, prefix it with `https://` so the matcher skips it.
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET /auth/me (examples/auth-agent/src/auth-client.ts:11)
`examples/auth-agent/src/auth-client.ts:11` calls `GET /auth/me` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/auth/me` If this points at an external API, prefix it with `https://` so the matcher skips it.
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port} (packages/agents/src/react-tests/setup.ts:37)
`packages/agents/src/react-tests/setup.ts:37` calls `GET http://127.0.0.1:${port}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>` If this points at an external API, prefix it with `https://` so…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com (packages/codemode/src/tests/normalize.test.ts:63)
`packages/codemode/src/tests/normalize.test.ts:63` calls `GET http://example.com` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com` If this points at an external API, prefix it with `https://` so the…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com (packages/codemode/src/tests/normalize.test.ts:64)
`packages/codemode/src/tests/normalize.test.ts:64` calls `GET http://example.com` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com` If this points at an external API, prefix it with `https://` so the…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com${path} (examples/assistant/src/tests/helpers.ts:12)
`examples/assistant/src/tests/helpers.ts:12` calls `GET http://example.com${path}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/<p>` If this points at an external API, prefix it with `https://` s…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com${path} (packages/agents/src/tests/basepath.test.ts:8)
`packages/agents/src/tests/basepath.test.ts:8` calls `GET http://example.com${path}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/<p>` If this points at an external API, prefix it with `https://`…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com${path} (packages/agents/src/tests/callable.test.ts:39)
`packages/agents/src/tests/callable.test.ts:39` calls `GET http://example.com${path}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/<p>` If this points at an external API, prefix it with `https://…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com${path} (packages/agents/src/tests/client-timeout.test.ts:19)
`packages/agents/src/tests/client-timeout.test.ts:19` calls `GET http://example.com${path}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/<p>` If this points at an external API, prefix it with `ht…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com${path} (packages/agents/src/tests/mcp/connection-uri.test.ts:7)
`packages/agents/src/tests/mcp/connection-uri.test.ts:7` calls `GET http://example.com${path}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/<p>` If this points at an external API, prefix it with …
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com${path} (packages/agents/src/tests/message-handling.test.ts:7)
`packages/agents/src/tests/message-handling.test.ts:7` calls `GET http://example.com${path}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/<p>` If this points at an external API, prefix it with `h…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com${path} (packages/agents/src/tests/msg-ordering.test.ts:6)
`packages/agents/src/tests/msg-ordering.test.ts:6` calls `GET http://example.com${path}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/<p>` If this points at an external API, prefix it with `https…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com${path} (packages/agents/src/tests/observability.test.ts:296)
`packages/agents/src/tests/observability.test.ts:296` calls `GET http://example.com${path}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/<p>` If this points at an external API, prefix it with `ht…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com${path} (packages/agents/src/tests/protocol-messages.test.ts:45)
`packages/agents/src/tests/protocol-messages.test.ts:45` calls `GET http://example.com${path}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/<p>` If this points at an external API, prefix it with …
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com${path} (packages/agents/src/tests/readonly-connections.test.ts:36)
`packages/agents/src/tests/readonly-connections.test.ts:36` calls `GET http://example.com${path}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/<p>` If this points at an external API, prefix it wi…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com${path} (packages/agents/src/tests/routing.test.ts:265)
`packages/agents/src/tests/routing.test.ts:265` calls `GET http://example.com${path}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/<p>` If this points at an external API, prefix it with `https://…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com${path} (packages/agents/src/tests/state.test.ts:37)
`packages/agents/src/tests/state.test.ts:37` calls `GET http://example.com${path}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/<p>` If this points at an external API, prefix it with `https://` s…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com${path} (packages/agents/src/tests/sub-agent.test.ts:12)
`packages/agents/src/tests/sub-agent.test.ts:12` calls `GET http://example.com${path}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/<p>` If this points at an external API, prefix it with `https:/…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com${path} (packages/ai-chat/src/tests/test-utils.ts:9)
`packages/ai-chat/src/tests/test-utils.ts:9` calls `GET http://example.com${path}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/<p>` If this points at an external API, prefix it with `https://` s…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com${subAgentPath(directoryName, id)} (examples/assistant/src/tests/routing.test.ts:51)
`examples/assistant/src/tests/routing.test.ts:51` calls `GET http://example.com${subAgentPath(directoryName, id)}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/<p>` If this points at an external …
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents (packages/agents/src/tests/routing.test.ts:81)
`packages/agents/src/tests/routing.test.ts:81` calls `GET http://example.com/agents` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents` If this points at an external API, prefix it with `https:…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/ (packages/agents/src/tests/routing.test.ts:77)
`packages/agents/src/tests/routing.test.ts:77` calls `GET http://example.com/agents/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents` If this points at an external API, prefix it with `https…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/${slug}/${room} (packages/think/src/tests/assistant-agent-loop.test.ts:18)
`packages/think/src/tests/assistant-agent-loop.test.ts:18` calls `GET http://example.com/agents/${slug}/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/<p>/<p>` If this points at an …
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/${slug}/${room} (packages/think/src/tests/hooks.test.ts:14)
`packages/think/src/tests/hooks.test.ts:14` calls `GET http://example.com/agents/${slug}/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/<p>/<p>` If this points at an external API, p…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/case-sensitive-agent/room (packages/agents/src/tests/routing.test.ts:108)
`packages/agents/src/tests/routing.test.ts:108` calls `GET http://example.com/agents/case-sensitive-agent/room` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/case-sensitive-agent/room` If t…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-assistant-agent-agent/${room} (packages/think/src/tests/assistant-agent.test.ts:20)
`packages/think/src/tests/assistant-agent.test.ts:20` calls `GET http://example.com/agents/test-assistant-agent-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-assistant-a…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/chat-persistence.test.ts:191)
`packages/ai-chat/src/tests/chat-persistence.test.ts:191` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-agent/<p>` If…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/chat-persistence.test.ts:243)
`packages/ai-chat/src/tests/chat-persistence.test.ts:243` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-agent/<p>` If…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/chat-persistence.test.ts:343)
`packages/ai-chat/src/tests/chat-persistence.test.ts:343` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-agent/<p>` If…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1033)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1033` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1098)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1098` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1165)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1165` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1235)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1235` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1298)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1298` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1435)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1435` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:148)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:148` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:15)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:15` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-a…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1518)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1518` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1590)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1590` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1651)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1651` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1714)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1714` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1783)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1783` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1842)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1842` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1903)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1903` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1964)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:1964` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:2025)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:2025` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:219)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:219` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:291)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:291` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:433)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:433` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:490)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:490` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:550)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:550` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:618)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:618` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:669)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:669` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:735)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:735` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:802)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:802` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:86)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:86` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-a…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:863)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:863` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:926)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:926` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:986)
`packages/ai-chat/src/tests/client-tool-duplicate-message.test.ts:986` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-chat-agent/${room} (packages/ai-chat/src/tests/validate-messages.test.ts:8)
`packages/ai-chat/src/tests/validate-messages.test.ts:8` calls `GET http://example.com/agents/test-chat-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-chat-agent/<p>` If …
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-o-auth-agent/default/callback?code=test (packages/agents/src/tests/routing.test.ts:134)
`packages/agents/src/tests/routing.test.ts:134` calls `GET http://example.com/agents/test-o-auth-agent/default/callback?code=test` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-o-auth-…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-schedule-agent/room (packages/agents/src/tests/routing.test.ts:205)
`packages/agents/src/tests/routing.test.ts:205` calls `GET http://example.com/agents/test-schedule-agent/room` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-schedule-agent/room` If thi…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-state-agent/default (packages/agents/src/tests/routing.test.ts:39)
`packages/agents/src/tests/routing.test.ts:39` calls `GET http://example.com/agents/test-state-agent/default` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-state-agent/default` If this…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-state-agent/my-room (packages/agents/src/tests/routing.test.ts:15)
`packages/agents/src/tests/routing.test.ts:15` calls `GET http://example.com/agents/test-state-agent/my-room` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-state-agent/my-room` If this…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-state-agent/room (packages/agents/src/tests/routing.test.ts:167)
`packages/agents/src/tests/routing.test.ts:167` calls `GET http://example.com/agents/test-state-agent/room` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-state-agent/room` If this poin…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-state-agent/room (packages/agents/src/tests/routing.test.ts:180)
`packages/agents/src/tests/routing.test.ts:180` calls `GET http://example.com/agents/test-state-agent/room` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-state-agent/room` If this poin…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-state-agent/room (packages/agents/src/tests/routing.test.ts:195)
`packages/agents/src/tests/routing.test.ts:195` calls `GET http://example.com/agents/test-state-agent/room` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-state-agent/room` If this poin…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-state-agent/room (packages/agents/src/tests/routing.test.ts:240)
`packages/agents/src/tests/routing.test.ts:240` calls `GET http://example.com/agents/test-state-agent/room` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-state-agent/room` If this poin…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-state-agent/room (packages/agents/src/tests/routing.test.ts:96)
`packages/agents/src/tests/routing.test.ts:96` calls `GET http://example.com/agents/test-state-agent/room` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-state-agent/room` If this point…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-state-agent/room-1 (packages/agents/src/tests/routing.test.ts:28)
`packages/agents/src/tests/routing.test.ts:28` calls `GET http://example.com/agents/test-state-agent/room-1` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-state-agent/room-1` If this p…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-state-agent/room-a (packages/agents/src/tests/routing.test.ts:217)
`packages/agents/src/tests/routing.test.ts:217` calls `GET http://example.com/agents/test-state-agent/room-a` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-state-agent/room-a` If this …
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-state-agent/room-b (packages/agents/src/tests/routing.test.ts:223)
`packages/agents/src/tests/routing.test.ts:223` calls `GET http://example.com/agents/test-state-agent/room-b` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-state-agent/room-b` If this …
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-state-agent/room?foo=bar&baz=qux (packages/agents/src/tests/routing.test.ts:156)
`packages/agents/src/tests/routing.test.ts:156` calls `GET http://example.com/agents/test-state-agent/room?foo=bar&baz=qux` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-state-agent/ro…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/test-state-agent/user-123-abc (packages/agents/src/tests/routing.test.ts:51)
`packages/agents/src/tests/routing.test.ts:51` calls `GET http://example.com/agents/test-state-agent/user-123-abc` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/test-state-agent/user-123-ab…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/think-client-tools-agent/${room} (packages/think/src/tests/client-tools.test.ts:24)
`packages/think/src/tests/client-tools.test.ts:24` calls `GET http://example.com/agents/think-client-tools-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/think-client-tools-ag…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/think-client-tools-agent/${room} (packages/think/src/tests/message-reconciliation.test.ts:31)
`packages/think/src/tests/message-reconciliation.test.ts:31` calls `GET http://example.com/agents/think-client-tools-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/think-clien…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/think-test-agent/${parentRoom}/sub/think-test-agent/${childRoom} (packages/think/src/tests/onconnect-broadcast.test.ts:37)
`packages/think/src/tests/onconnect-broadcast.test.ts:37` calls `GET http://example.com/agents/think-test-agent/${parentRoom}/sub/think-test-agent/${childRoom}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/e…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/think-test-agent/${room} (packages/think/src/tests/onconnect-broadcast.test.ts:25)
`packages/think/src/tests/onconnect-broadcast.test.ts:25` calls `GET http://example.com/agents/think-test-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/think-test-agent/<p>` …
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/think-test-agent/${room} (packages/think/src/tests/think-session.test.ts:32)
`packages/think/src/tests/think-session.test.ts:32` calls `GET http://example.com/agents/think-test-agent/${room}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/think-test-agent/<p>` If thi…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/agents/user-notification-agent/room (packages/agents/src/tests/routing.test.ts:120)
`packages/agents/src/tests/routing.test.ts:120` calls `GET http://example.com/agents/user-notification-agent/room` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/agents/user-notification-agent/room…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/custom-state/my-instance (packages/agents/src/tests/routing.test.ts:350)
`packages/agents/src/tests/routing.test.ts:350` calls `GET http://example.com/custom-state/my-instance` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/custom-state/my-instance` If this points at an…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/spike-sub/${parent}/sub/NotAChildClass/anything (packages/agents/src/tests/spike-sub-agent-routing.test.ts:374)
`packages/agents/src/tests/spike-sub-agent-routing.test.ts:374` calls `GET http://example.com/spike-sub/${parent}/sub/NotAChildClass/anything` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/spike-s…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://example.com/user (packages/agents/src/tests/basepath.test.ts:173)
`packages/agents/src/tests/basepath.test.ts:173` calls `GET http://example.com/user` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/user` If this points at an external API, prefix it with `https://…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://localhost/ (openai-sdk/chess-app/src/index.ts:7)
`openai-sdk/chess-app/src/index.ts:7` calls `GET http://localhost/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost` If this points at an external API, prefix it with `https://` so the matcher skips i…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://localhost:8787/agents/my-agent/default (examples/cross-domain/src/client.tsx:238)
`examples/cross-domain/src/client.tsx:238` calls `GET http://localhost:8787/agents/my-agent/default` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost:8787/agents/my-agent/default` If this points at an …
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://localhost:8787/agents/my-agent/default (examples/cross-domain/src/client.tsx:84)
`examples/cross-domain/src/client.tsx:84` calls `GET http://localhost:8787/agents/my-agent/default` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost:8787/agents/my-agent/default` If this points at an e…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://warmup/ (examples/agents-as-tools/src/tests/setup.ts:10)
`examples/agents-as-tools/src/tests/setup.ts:10` calls `GET http://warmup/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/warmup` If this points at an external API, prefix it with `https://` so the matcher sk…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://warmup/ (examples/assistant/src/tests/setup.ts:10)
`examples/assistant/src/tests/setup.ts:10` calls `GET http://warmup/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/warmup` If this points at an external API, prefix it with `https://` so the matcher skips it.
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://warmup/ (packages/agents/src/tests/setup.ts:12)
`packages/agents/src/tests/setup.ts:12` calls `GET http://warmup/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/warmup` If this points at an external API, prefix it with `https://` so the matcher skips it.
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://warmup/ (packages/ai-chat/src/tests/setup.ts:6)
`packages/ai-chat/src/tests/setup.ts:6` calls `GET http://warmup/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/warmup` If this points at an external API, prefix it with `https://` so the matcher skips it.
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://warmup/ (packages/think/src/tests/setup.ts:6)
`packages/think/src/tests/setup.ts:6` calls `GET http://warmup/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/warmup` If this points at an external API, prefix it with `https://` so the matcher skips it.
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://warmup/ (packages/voice/src/tests/setup.ts:6)
`packages/voice/src/tests/setup.ts:6` calls `GET http://warmup/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/warmup` If this points at an external API, prefix it with `https://` so the matcher skips it.
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET http://x/custom-sub/${parent}/sub/counter-sub-agent/${child}/anything (packages/agents/src/tests/sub-agent-routing.test.ts:247)
`packages/agents/src/tests/sub-agent-routing.test.ts:247` calls `GET http://x/custom-sub/${parent}/sub/counter-sub-agent/${child}/anything` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/x/custom-sub/<p>/sub/c…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET https://api.github.com/user (examples/assistant/src/auth.ts:145)
`examples/assistant/src/auth.ts:145` calls `GET https://api.github.com/user` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.github.com/user` If this points at an external API, prefix it with `https://` so…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET https://api.github.com/user (examples/auth-agent/src/auth.ts:145)
`examples/auth-agent/src/auth.ts:145` calls `GET https://api.github.com/user` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.github.com/user` If this points at an external API, prefix it with `https://` s…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET https://api.openai.com/v1/responses/${responseId} (experimental/forever-chat/src/server.ts:249)
`experimental/forever-chat/src/server.ts:249` calls `GET https://api.openai.com/v1/responses/${responseId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.openai.com/v1/responses/<p>` If this points at an…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET https://example.com (packages/codemode/e2e/executor.spec.ts:238)
`packages/codemode/e2e/executor.spec.ts:238` calls `GET https://example.com` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/example.com` If this points at an external API, prefix it with `https://` so the mat…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET https://example.com (packages/codemode/src/tests/executor.test.ts:314)
`packages/codemode/src/tests/executor.test.ts:314` calls `GET https://example.com` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/example.com` If this points at an external API, prefix it with `https://` so t…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET https://example.com (packages/codemode/src/tests/iframe-executor.browser.test.ts:212)
`packages/codemode/src/tests/iframe-executor.browser.test.ts:212` calls `GET https://example.com` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/example.com` If this points at an external API, prefix it with …
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET https://example.com (packages/shell/src/tests/workers.test.ts:461)
`packages/shell/src/tests/workers.test.ts:461` calls `GET https://example.com` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/example.com` If this points at an external API, prefix it with `https://` so the m…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET https://example.com/ws-from-leaf (packages/agents/src/tests/agents/sub-agent.ts:939)
`packages/agents/src/tests/agents/sub-agent.ts:939` calls `GET https://example.com/ws-from-leaf` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/example.com/ws-from-leaf` If this points at an external API, pre…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: GET https://localhost/v1/devtools/browser (packages/agents/src/browser/cdp-session.ts:226)
`packages/agents/src/browser/cdp-session.ts:226` calls `GET https://localhost/v1/devtools/browser` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/localhost/v1/devtools/browser` If this points at an external A…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST /agents/my-voice-agent/${sessionId}?action=kick (examples/voice-agent/src/client.tsx:502)
`examples/voice-agent/src/client.tsx:502` calls `POST /agents/my-voice-agent/${sessionId}?action=kick` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/agents/my-voice-agent/<p>` If this points at an external API, pre…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST /api/github (examples/dynamic-workers-playground/src/client.tsx:508)
`examples/dynamic-workers-playground/src/client.tsx:508` calls `POST /api/github` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/github` If this points at an external API, prefix it with `https://` so the matcher sk…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST /api/run (examples/dynamic-workers-playground/src/client.tsx:575)
`examples/dynamic-workers-playground/src/client.tsx:575` calls `POST /api/run` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/run` If this points at an external API, prefix it with `https://` so the matcher skips it.
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST /api/run (examples/dynamic-workers/src/client.tsx:98)
`examples/dynamic-workers/src/client.tsx:98` calls `POST /api/run` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/run` If this points at an external API, prefix it with `https://` so the matcher skips it.
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST /api/simulate-email (examples/email-agent/src/client.tsx:321)
`examples/email-agent/src/client.tsx:321` calls `POST /api/simulate-email` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/simulate-email` If this points at an external API, prefix it with `https://` so the matcher s…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST /auth/logout (examples/assistant/src/auth-client.ts:28)
`examples/assistant/src/auth-client.ts:28` calls `POST /auth/logout` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/auth/logout` If this points at an external API, prefix it with `https://` so the matcher skips it.
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST /auth/logout (examples/auth-agent/src/auth-client.ts:28)
`examples/auth-agent/src/auth-client.ts:28` calls `POST /auth/logout` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/auth/logout` If this points at an external API, prefix it with `https://` so the matcher skips it.
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST /setup/telegram-webhook (examples/chat-sdk-messenger/src/client.tsx:239)
`examples/chat-sdk-messenger/src/client.tsx:239` calls `POST /setup/telegram-webhook` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/setup/telegram-webhook` If this points at an external API, prefix it with `https:/…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST /sfu/session (examples/voice-agent/src/use-sfu-voice.ts:83)
`examples/voice-agent/src/use-sfu-voice.ts:83` calls `POST /sfu/session` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/sfu/session` If this points at an external API, prefix it with `https://` so the matcher skips …
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST /sfu/tracks (examples/voice-agent/src/use-sfu-voice.ts:107)
`examples/voice-agent/src/use-sfu-voice.ts:107` calls `POST /sfu/tracks` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/sfu/tracks` If this points at an external API, prefix it with `https://` so the matcher skips i…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST http://example.com/setup/telegram-webhook (examples/chat-sdk-messenger/src/tests/admin.test.ts:58)
`examples/chat-sdk-messenger/src/tests/admin.test.ts:58` calls `POST http://example.com/setup/telegram-webhook` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.com/setup/telegram-webhook` If this points…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST http://example.com/spike-sub/${parent}/sub/spike-sub-child/${child}/anything (packages/agents/src/tests/spike-sub-agent-routing.test.ts:320)
`packages/agents/src/tests/spike-sub-agent-routing.test.ts:320` calls `POST http://example.com/spike-sub/${parent}/sub/spike-sub-child/${child}/anything` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/example.…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST https://api.elevenlabs.io/v1/text-to-speech/${this.#voiceId}/stream?output_format=${this.#outputFormat} (voice-providers/elevenlabs/src/index.ts:109)
`voice-providers/elevenlabs/src/index.ts:109` calls `POST https://api.elevenlabs.io/v1/text-to-speech/${this.#voiceId}/stream?output_format=${this.#outputFormat}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST https://api.elevenlabs.io/v1/text-to-speech/${this.#voiceId}?output_format=${this.#outputFormat} (voice-providers/elevenlabs/src/index.ts:66)
`voice-providers/elevenlabs/src/index.ts:66` calls `POST https://api.elevenlabs.io/v1/text-to-speech/${this.#voiceId}?output_format=${this.#outputFormat}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.el…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST https://example.com${path} (packages/agents/src/tests/agents/sub-agent.ts:697)
`packages/agents/src/tests/agents/sub-agent.ts:697` calls `POST https://example.com${path}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/example.com/<p>` If this points at an external API, prefix it with `h…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST https://example.com${path} (packages/agents/src/tests/agents/sub-agent.ts:928)
`packages/agents/src/tests/agents/sub-agent.ts:928` calls `POST https://example.com${path}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/example.com/<p>` If this points at an external API, prefix it with `h…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST https://example.com/setup/telegram-webhook (examples/chat-sdk-messenger/src/tests/admin.test.ts:45)
`examples/chat-sdk-messenger/src/tests/admin.test.ts:45` calls `POST https://example.com/setup/telegram-webhook` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/example.com/setup/telegram-webhook` If this poin…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST https://github.com/login/oauth/access_token (examples/assistant/src/auth.ts:112)
`examples/assistant/src/auth.ts:112` calls `POST https://github.com/login/oauth/access_token` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/github.com/login/oauth/access_token` If this points at an external …
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST https://github.com/login/oauth/access_token (examples/auth-agent/src/auth.ts:112)
`examples/auth-agent/src/auth.ts:112` calls `POST https://github.com/login/oauth/access_token` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/github.com/login/oauth/access_token` If this points at an external…
wiringdangling-fetchfetch
high 9-layer api wiring conf 1.00 Dangling fetch: POST https://localhost/v1/devtools/browser (packages/agents/src/browser/shared.ts:160)
`packages/agents/src/browser/shared.ts:160` calls `POST https://localhost/v1/devtools/browser` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/localhost/v1/devtools/browser` If this points at an external API, …
wiringdangling-fetchfetch
high 9-layer cicd supply-chain conf 1.00 GitHub Action tracks a moving branch
ask-bonk/ask-bonk/github@main can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
.github/workflows/bonk.yml:27 supply-chaingithub-actionspinned-dependencies
low Legacy security security conf 1.00 [SEC041] Tabnabbing — target="_blank" without rel="noopener noreferrer": <a target="_blank"> without rel="noopener noreferrer" leaks window.opener to the opened page. The opened page can then run window.opener.location = 'phishing-site' and the parent tab quietly navigates to attacker-controlled content (reverse tabnabbing). OWASP-classic; modern browsers default rel='noopener' for new windows but explicit attribute is still required for compatibility.
Add rel="noopener noreferrer" to every <a target="_blank">: <a href="..." target="_blank" rel="noopener noreferrer">link</a> For dynamically generated links from JS, set rel on the element before appending. Even safe-looking subdomains should harden — costs nothing.
examples/playground/src/demos/core/ConnectionsDemo.tsx:133 securitylegacy
low Legacy security security conf 1.00 [SEC041] Tabnabbing — target="_blank" without rel="noopener noreferrer": <a target="_blank"> without rel="noopener noreferrer" leaks window.opener to the opened page. The opened page can then run window.opener.location = 'phishing-site' and the parent tab quietly navigates to attacker-controlled content (reverse tabnabbing). OWASP-classic; modern browsers default rel='noopener' for new windows but explicit attribute is still required for compatibility.
Add rel="noopener noreferrer" to every <a target="_blank">: <a href="..." target="_blank" rel="noopener noreferrer">link</a> For dynamically generated links from JS, set rel on the element before appending. Even safe-looking subdomains should harden — costs nothing.
examples/mcp-worker-authenticated/src/auth-handler.ts:97 securitylegacy
medium Legacy quality quality conf 1.00 [SEC087] JS: weak Math.random for crypto: Math.random() is not cryptographically secure; using it for tokens/keys/nonces is predictable. Ported from gosec G404 / eslint detect-pseudoRandomBytes concept (Apache-2.0).
Use `crypto.randomBytes(32).toString('hex')` (Node) or `crypto.getRandomValues()` (browser).
site/agents/src/components/agent-visual.tsx:186 qualitylegacy
medium Legacy quality quality conf 1.00 [SEC134] AI scaffold leftover — Lorem ipsum / example.com / John Doe in code: Lorem ipsum / John Doe / example.com left in non-test code. AI agents emit these as 'reasonable defaults' when they don't know real values; the human then forgets to swap them. In production, these break demo flows, send mail to a real example.com host (it's owned by IANA), and leak that the codebase had an AI scaffolding pass.
Move dummy values to fixtures / seed files. In application code, require these to come from config or fail closed. Add a CI grep that rejects 'lorem ipsum' and 'example.com' outside test files.
packages/agents/src/browser/shared.ts:244 qualitylegacy
high Legacy security auth conf 0.82 Browser storage is used for session token material
localStorage and sessionStorage are readable by injected JavaScript. For sensitive sessions, this turns XSS into account compromise.
site/ai-playground/src/components/McpServers.tsx:342 authlegacy
high Legacy security auth conf 0.82 Browser storage is used for session token material
localStorage and sessionStorage are readable by injected JavaScript. For sensitive sessions, this turns XSS into account compromise.
site/ai-playground/src/components/McpServers.tsx:70 authlegacy
medium Legacy quality quality conf 0.70 Public web app has no Content Security Policy
A Content Security Policy reduces the blast radius of injected scripts if the app is ever served through preview, static hosting, or a web container outside its normal sandbox.
index.html qualitylegacy
medium Legacy quality quality conf 0.78 Public web service has no security.txt
security.txt gives researchers and customers a safe disclosure channel. Public web apps and APIs should publish it under /.well-known/security.txt.
.well-known/security.txt qualitylegacy
medium Legacy quality quality conf 0.78 React interval is created without an explicit cleanup
Intervals created in React hooks or components should be cleared on unmount. Missing cleanup can keep stale callbacks alive after recording, polling, or overlay components close.
examples/playground/src/demos/core/ScheduleDemo.tsx:98 qualitylegacy
medium 9-layer frontend frontend-quality conf 1.00 `dangerouslySetInnerHTML` used in a React component — examples/playground/src/components/CodeExplanation.tsx:61
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
frontend-qualityfq.dangerous-html
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/a2a/src/client.tsx:28
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/a2a/src/server.ts:264
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/agents-as-tools/src/server.ts:253
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/ai-chat/src/server.ts:204
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/assistant/src/auth-client.ts:28
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/assistant/src/auth.ts:112
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/assistant/src/server.ts:22
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/auth-agent/src/auth-client.ts:28
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/auth-agent/src/auth.ts:112
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/auth-agent/src/server.ts:83
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/chat-sdk-messenger/src/index.ts:591
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/chat-sdk-messenger/src/provider/telegram.ts:48
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/codemode-browser/src/server.ts:33
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/codemode-mcp-openapi/src/server.ts:12
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/codemode-mcp/src/server.ts:85
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/codemode/src/server.ts:105
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/cross-domain/src/server.ts:77
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/dynamic-tools/src/server.ts:52
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/dynamic-workers-playground/src/client.tsx:116
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/dynamic-workers-playground/src/github.ts:56
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/dynamic-workers/src/client.tsx:23
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/dynamic-workers/src/server.ts:27
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/elevenlabs-starter/src/agents/voice-chat.ts:35
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/elevenlabs-starter/src/server.ts:11
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/email-agent/src/client.tsx:249
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/email-agent/src/server.ts:420
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/github-webhook/src/server.ts:382
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/mcp-client/src/server.ts:34
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/mcp-elicitation/src/index.ts:125
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/mcp-rpc-transport/src/server.ts:76
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/mcp-worker-authenticated/src/server.ts:76
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/mcp-worker/src/client.tsx:79
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/mcp/src/client.tsx:79
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/multi-ai-chat/src/server.ts:472
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/playground/src/demos/core/RoutingDemo.tsx:50
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/playground/src/demos/integrations/ProductIntegrationsDemo.tsx:112
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/playground/src/demos/mcp/ServerDemo.tsx:101
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/playground/src/server.ts:120
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/playground/worker-configuration.d.ts:395
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/push-notifications/src/server.ts:177
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/resumable-stream-chat/src/server.ts:121
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/structured-input/src/server.ts:50
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/telnyx-voice-agent/src/server.ts:48
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/think-submissions/src/server.ts:65
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/tictactoe/src/server.ts:161
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/voice-agent/src/server.ts:260
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/voice-agent/src/sfu.ts:144
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/voice-agent/src/use-sfu-voice.ts:83
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/voice-input/src/server.ts:22
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/worker-bundler-playground/src/server.ts:274
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/workflows/src/server.ts:561
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/workspace-chat/src/server.ts:284
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — examples/x402-mcp/src/server.ts:126
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — experimental/forever-chat/src/server.ts:424
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — experimental/forever-fibers/src/server.ts:215
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — experimental/gadgets-chat/src/server.ts:500
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — experimental/gadgets-gatekeeper/src/server.ts:347
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — experimental/gadgets-sandbox/src/server.ts:18
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — experimental/gadgets-subagents/src/server.ts:360
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — experimental/inference-buffer/src/index.ts:152
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — experimental/session-memory/src/server.ts:158
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — experimental/session-multichat/src/server.ts:162
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — experimental/session-planetscale/src/server.ts:154
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — experimental/session-search/src/server.ts:158
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — experimental/session-skills/src/server.ts:114
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — guides/anthropic-patterns/src/server.tsx:488
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — guides/human-in-the-loop/src/server.ts:47
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — openai-sdk/basic/src/server.ts:30
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — openai-sdk/call-my-agent/src/server.ts:48
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — openai-sdk/chess-app/src/index.ts:7
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — openai-sdk/handoffs/src/server.ts:32
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — openai-sdk/human-in-the-loop/src/server.ts:118
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — openai-sdk/llm-as-a-judge/src/server.ts:117
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — openai-sdk/streaming-chat/src/server.ts:142
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/agents/src/browser/cdp-session.ts:226
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/agents/src/browser/shared.ts:144
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/agents/src/chat/__tests__/slug-parity.test.ts:4
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/agents/src/client.ts:231
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/agents/src/index.ts:5704
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/agents/src/mcp/utils.ts:245
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/agents/src/sub-routing.ts:9
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/ai-chat/e2e/worker.ts:354
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/codemode/e2e/executor.spec.ts:238
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/codemode/e2e/worker.ts:335
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/codemode/src/executor.ts:229
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/shell/src/git/index.ts:248
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/shell/src/git/provider.ts:56
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/think/src/tools/execute.ts:75
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/voice/src/sfu-utils.ts:166
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — site/agents/src/server/index.ts:9
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — site/agents/src/server/utils.ts:45
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — site/ai-playground/src/server.ts:277
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — voice-providers/telnyx/src/helpers/transport-config.ts:63
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — voice-providers/telnyx/src/providers/tts.ts:190
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — voice-providers/telnyx/src/server/jwt-endpoint.ts:68
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — voice-providers/twilio/src/index.ts:26
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — wip/issue-1410-reporter-repro/src/index.ts:111
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
integrityfragile-runtimerobustness
medium 9-layer quality integrity conf 1.00 Frontend route `ai/agent-tools` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `ai/chat` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `ai/codemode` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `ai/think-shell` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `ai/tools` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `core/callable` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `core/connections` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `core/readonly` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `core/retry` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `core/routing` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `core/schedule` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `core/sql` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `core/state` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `core/streaming` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `durable/execution` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `email/receive` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `email/secure` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `integrations/products` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `mcp/advanced` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `mcp/client` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `mcp/oauth` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `mcp/server` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `multi-agent/pipeline` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `multi-agent/rooms` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `multi-agent/supervisor` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `multi-agent/workers` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `voice/chat` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `workflow/approval` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer quality integrity conf 1.00 Frontend route `workflow/basic` has no Link/navigate to it — examples/playground/src/client.tsx
The route is registered but no `<Link to=…>` or `navigate(…)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor.
integrityorphan-pagewiring
medium 9-layer cicd supply-chain conf 1.00 GitHub Action is tag-pinned rather than SHA-pinned
changesets/[email protected] can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
.github/workflows/release.yml:56 supply-chaingithub-actionspinned-dependencies
medium 9-layer cicd supply-chain conf 1.00 GitHub Actions workflow grants broad write permissions
CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions.
.github/workflows/bonk.yml supply-chaingithub-actionsleast-privilege
medium 9-layer cicd supply-chain conf 1.00 GitHub Actions workflow grants broad write permissions
CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions.
.github/workflows/release.yml supply-chaingithub-actionsleast-privilege
medium 9-layer security owasp conf 1.00 Insecure pattern 'cors_wildcard' in packages/agents/src/mcp/utils.ts:791
Found a known-risky pattern (cors_wildcard). Review and replace if possible.
packages/agents/src/mcp/utils.ts:791 owaspcors_wildcard
high Legacy quality quality conf 0.86 Duplicated implementation block across source files
Duplicated blocks are a common artifact when generated code is pasted or recreated instead of reused. They increase maintenance cost because every future bug fix must be found in multiple locations.
guides/human-in-the-loop/vite.config.ts:8 qualitylegacy
high Legacy quality quality conf 0.86 Duplicated implementation block across source files
Duplicated blocks are a common artifact when generated code is pasted or recreated instead of reused. They increase maintenance cost because every future bug fix must be found in multiple locations.
experimental/session-skills/src/server.ts:41 qualitylegacy
high Legacy quality quality conf 0.86 Duplicated implementation block across source files
Duplicated blocks are a common artifact when generated code is pasted or recreated instead of reused. They increase maintenance cost because every future bug fix must be found in multiple locations.
experimental/session-skills/src/client.tsx:82 qualitylegacy
high Legacy quality quality conf 0.86 Duplicated implementation block across source files
Duplicated blocks are a common artifact when generated code is pasted or recreated instead of reused. They increase maintenance cost because every future bug fix must be found in multiple locations.
experimental/session-skills/src/client.tsx:81 qualitylegacy

Showing first 300 of 504. Refine filters or use the legacy findings page for deep search.

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/3b58000f-bd23-4495-babe-c5bc135de534/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/3b58000f-bd23-4495-babe-c5bc135de534/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.