{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-f110c6d16c93e178", "name": "Possibly dead Python function: cmd_app", "shortDescription": {"text": "Possibly dead Python function: cmd_app"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-870c8e7b8a5f6374", "name": "Possibly dead Python function: cmd_extends", "shortDescription": {"text": "Possibly dead Python function: cmd_extends"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d8096c1f7d15f745", "name": "Possibly dead Python function: cmd_skill", "shortDescription": {"text": "Possibly dead Python function: cmd_skill"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eec2ca89856bf51b", "name": "Possibly dead Python function: cmd_validate", "shortDescription": {"text": "Possibly dead Python function: cmd_validate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-869f44e464883f80", "name": "Possibly dead Python function: cmd_login", "shortDescription": {"text": "Possibly dead Python function: cmd_login"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f077578ad9498f5a", "name": "Possibly dead Python function: cmd_logout", "shortDescription": {"text": "Possibly dead Python function: cmd_logout"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a87def6c167aaf07", "name": "Possibly dead Python function: cmd_whoami", "shortDescription": {"text": "Possibly dead Python function: cmd_whoami"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ad971067a4bd974b", "name": "Possibly dead Python function: cmd_token_list", "shortDescription": {"text": "Possibly dead Python function: cmd_token_list"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fb13da0347015944", "name": "Possibly dead Python function: cmd_token_revoke", "shortDescription": {"text": "Possibly dead Python function: cmd_token_revoke"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-037b3f51712fb998", "name": "Possibly dead Python function: cmd_kb_get", "shortDescription": {"text": "Possibly dead Python function: cmd_kb_get"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cf83008ef8cac0c4", "name": "Possibly dead Python function: cmd_kb_search", "shortDescription": {"text": "Possibly dead Python function: cmd_kb_search"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-67fee01f0f6e85c4", "name": "Possibly dead Python function: cmd_kb_add", "shortDescription": {"text": "Possibly dead Python function: cmd_kb_add"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-95c7823cb9643bcb", "name": "Possibly dead Python function: cmd_kb_update", "shortDescription": {"text": "Possibly dead Python function: cmd_kb_update"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-623747c7bf5959ea", "name": "Possibly dead Python function: cmd_kb_attachments", "shortDescription": {"text": "Possibly dead Python function: cmd_kb_attachments"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-661b2a74fc0f9f7d", "name": "Possibly dead Python function: cmd_lib_ls", "shortDescription": {"text": "Possibly dead Python function: cmd_lib_ls"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72f8fe59085a21af", "name": "Possibly dead Python function: cmd_lib_get", "shortDescription": {"text": "Possibly dead Python function: cmd_lib_get"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b44e3845afc08643", "name": "Possibly dead Python function: cmd_files_ls", "shortDescription": {"text": "Possibly dead Python function: cmd_files_ls"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5d6798686dd49f19", "name": "Possibly dead Python function: cmd_files_get", "shortDescription": {"text": "Possibly dead Python function: cmd_files_get"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9a6aa825d8c9811f", "name": "Possibly dead Python function: cmd_erp_find", "shortDescription": {"text": "Possibly dead Python function: cmd_erp_find"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-77be27d14dc890a2", "name": "Possibly dead Python function: cmd_erp_item", "shortDescription": {"text": "Possibly dead Python function: cmd_erp_item"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b2886c092a029059", "name": "Possibly dead Python function: cmd_erp_stock", "shortDescription": {"text": "Possibly dead Python function: cmd_erp_stock"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-39e3188d26ae651c", "name": "Possibly dead Python function: cmd_erp_boms", "shortDescription": {"text": "Possibly dead Python function: cmd_erp_boms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2809270ec639dba9", "name": "Possibly dead Python function: cmd_erp_bom", "shortDescription": {"text": "Possibly dead Python function: cmd_erp_bom"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-82762f7e48c585d0", "name": "Possibly dead Python function: cleanup_old_files", "shortDescription": {"text": "Possibly dead Python function: cleanup_old_files"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0103ff15bceb0456", "name": "Possibly dead Python function: transcribe_file", "shortDescription": {"text": "Possibly dead Python function: transcribe_file"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f60ed29fe4f8c2c", "name": "Possibly dead Python function: transcribe_file_with_segments", "shortDescription": {"text": "Possibly dead Python function: transcribe_file_with_segments"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ff383a43c2eaf5e", "name": "Stray `console.log` in TS/JS \u2014 frontend/tests/window-ux.test.js:43", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 frontend/tests/window-ux.test.js:43"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-39e51b74ff35d9f3", "name": "Stray `console.log` in TS/JS \u2014 frontend/tests/path-utils.test.js:28", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 frontend/tests/path-utils.test.js:28"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4cc6d50bdb08b732", "name": "Stray `console.log` in TS/JS \u2014 frontend/tests/ui-helpers.test.js:53", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 frontend/tests/ui-helpers.test.js:53"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1ce1c38ab4fcbb0e", "name": "Stray `console.log` in TS/JS \u2014 frontend/js/knowledge-base.js:90", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 frontend/js/knowledge-base.js:90"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f16a0aae0a88104f", "name": "Stray `console.log` in TS/JS \u2014 frontend/js/socket-client.js:19", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 frontend/js/socket-client.js:19"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b89b16e1f6df1e03", "name": "Stray `console.log` in TS/JS \u2014 frontend/js/file-opener.js:115", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 frontend/js/file-opener.js:115"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9ce2c54934dcdcbc", "name": "Stray `console.log` in TS/JS \u2014 frontend/js/taskbar.js:211", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 frontend/js/taskbar.js:211"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e40d0889b87acdca", "name": "Stray `console.log` in TS/JS \u2014 frontend/js/desktop.js:198", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 frontend/js/desktop.js:198"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ddf0a3e6af39c363", "name": "Stray `console.log` in TS/JS \u2014 frontend/js/linebot.js:572", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 frontend/js/linebot.js:572"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-18086ac93ca06d34", "name": "Stray `console.log` in TS/JS \u2014 frontend/js/config.js:72", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 frontend/js/config.js:72"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ef8ff155f377bea2", "name": "Stray `console.log` in TS/JS \u2014 frontend/js/external-app.js:223", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 frontend/js/external-app.js:223"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d617f682769395a1", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/login.html:110", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/login.html:110"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d4a8729509489da3", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/index.html:255", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/index.html:255"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7d360217ff689db6", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/prompt-editor.js:276", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/prompt-editor.js:276"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f25cf90a180b6bd0", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/knowledge-base.js:330", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/knowledge-base.js:330"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6e87b732b8aeb797", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/file-manager.js:190", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/file-manager.js:190"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b550abebbbb9809f", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/agent-settings.js:532", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/agent-settings.js:532"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3d611698f00fc636", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/share-manager.js:187", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/share-manager.js:187"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c594749181e8bc6d", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/terminal.js:184", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/terminal.js:184"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aa96ddabb5a0820c", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/image-viewer.js:167", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/image-viewer.js:167"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d3ee454177d12120", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/public.js:202", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/public.js:202"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b60a5d102cbc8f0", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/share-dialog.js:191", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/share-dialog.js:191"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-170fbc261e7e9d04", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/onboarding.js:120", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/onboarding.js:120"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c9cd08d748a451b6", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/ai-log.js:290", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/ai-log.js:290"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-72096fb38bc226d5", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/taskbar.js:39", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/taskbar.js:39"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-62703ddbd47ee753", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/memory-manager.js:171", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/memory-manager.js:171"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-311b7c7357371614", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/login.js:348", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/login.js:348"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c969a2b602233a2b", "name": "Insecure pattern 'insert_adjacent_html' in frontend/js/login.js:256", "shortDescription": {"text": "Insecure pattern 'insert_adjacent_html' in frontend/js/login.js:256"}, "fullDescription": {"text": "Found a known-risky pattern (insert_adjacent_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dbb5ef60e2a72865", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/window.js:144", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/window.js:144"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-327e70ca22e63463", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/user-profile.js:53", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/user-profile.js:53"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d787c45a58bf5ef4", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/command-palette.js:39", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/command-palette.js:39"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-48dd509ee0ffb5cb", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/notification.js:60", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/notification.js:60"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-07aff2a60e9a0b25", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/linebot.js:128", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/linebot.js:128"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bb9e422f853350b3", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/voice-app.js:190", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/voice-app.js:190"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ec3001b2f85931ae", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/message-center.js:126", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/message-center.js:126"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-46e9fb2498d64a79", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/external-app.js:116", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/external-app.js:116"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e073acafee2ac01", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/task-scheduler.js:131", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/task-scheduler.js:131"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ca4e1c6e55feb426", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/ui-helpers.js:56", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/ui-helpers.js:56"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e20e4137e2a56870", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/header.js:119", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/header.js:119"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-40a43cb3fe3d0a6a", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/ai-assistant.js:273", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/ai-assistant.js:273"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-449ec212975fa0d7", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/src/main.js:19", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/src/main.js:19"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b54c7a5888172ab1", "name": "Insecure pattern 'direct_innerhtml_assignment' in extends/nvr/skills/nvr-viewer/frontend/nvr-app.js:47", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in extends/nvr/skills/nvr-viewer/frontend/nvr-app.js:47"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cf95dca2d4eb0c34", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-python@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c0840d07864313e3", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-node@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-18a922b0d4f753f0", "name": "Very large file: frontend/js/file-manager.js (1901 lines)", "shortDescription": {"text": "Very large file: frontend/js/file-manager.js (1901 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eefcec8157b1d1df", "name": "Very large file: frontend/js/agent-settings.js (1776 lines)", "shortDescription": {"text": "Very large file: frontend/js/agent-settings.js (1776 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-86a4053ad8293509", "name": "Very large file: frontend/js/linebot.js (1442 lines)", "shortDescription": {"text": "Very large file: frontend/js/linebot.js (1442 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fd596a87bc784753", "name": "Very large file: backend/src/ching_tech_os/services/linebot_ai.py (1871 lines)", "shortDescription": {"text": "Very large file: backend/src/ching_tech_os/services/linebot_ai.py (1871 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-74239df0ebf9c654", "name": "Very large file: backend/src/ching_tech_os/skills/research-skill/scripts/start-research.py (1556 lines)", "shortDescription": {"text": "Very large file: backend/src/ching_tech_os/skills/research-skill/scripts/start-research.py (1556 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 362 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 58 placeholder/mock markers across 15 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-05c406997a53ad7f", "name": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/pattern.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/pattern.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3b6a60d65e0551cb", "name": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/story.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/story.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e5b1cd09830b5d73", "name": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/generate.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/generate.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76e3f751193667c3", "name": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/icon.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/icon.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8ae414e8301f2aac", "name": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/edit.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/edit.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-48e8f9949b69f056", "name": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/restore.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/restore.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-700645b9510a8ada", "name": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/diagram.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/diagram.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6c10344bdf57df51", "name": "Agent authority lacks a verifier contract: .claude/commands/opsx/sync.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/opsx/sync.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-df8d7aecf447de62", "name": "Agent authority lacks a verifier contract: .claude/commands/opsx/archive.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/opsx/archive.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-021b572fe2fa6b9c", "name": "Agent authority lacks a verifier contract: .claude/commands/opsx/apply.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/commands/opsx/apply.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-71c341aa0d8be506", "name": "Agent authority lacks a verifier contract: .claude/skills/ctos-kb/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/ctos-kb/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-14b94de34d897ad4", "name": "Agent authority lacks a verifier contract: .claude/skills/openspec-apply-change/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/openspec-apply-change/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8a585f74bb40a5f1", "name": "Agent authority lacks a verifier contract: .claude/skills/openspec-archive-change/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/openspec-archive-change/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1861f29946301e43", "name": "Agent authority lacks a verifier contract: .claude/skills/openspec-sync-specs/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/openspec-sync-specs/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e30dce2e966aa1ee", "name": "Agent authority lacks a verifier contract: .claude/skills/ctos-architecture/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/ctos-architecture/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5dabd4d268bfaaa2", "name": "Agent authority lacks a verifier contract: .github/skills/openspec-apply-change/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .github/skills/openspec-apply-change/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-61ee0e5ebb78eeef", "name": "Agent authority lacks a verifier contract: .github/skills/openspec-archive-change/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .github/skills/openspec-archive-change/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27cfb5ad7ee46df8", "name": "Agent authority lacks a verifier contract: .github/skills/openspec-sync-specs/SKILL.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .github/skills/openspec-sync-specs/SKILL.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-88e4408267399a2c", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/file-manager.js:717", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/file-manager.js:717"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-03119964d757fbe5", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/agent-settings.js:1266", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/agent-settings.js:1266"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-77099863a2a2f6d8", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/public.js:46", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/public.js:46"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9a21a42e83b1c72c", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/share-dialog.js:150", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/share-dialog.js:150"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bb159be3899fc4b8", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/ai-log.js:95", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/ai-log.js:95"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c30cbd6258e4be88", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/user-profile.js:230", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/user-profile.js:230"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1e9b58f074677dd5", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/linebot.js:65", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/linebot.js:65"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e4c89cd30adc1d36", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/message-center.js:50", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/message-center.js:50"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5ecfcd6f1ddc19d2", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/task-scheduler.js:90", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/task-scheduler.js:90"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5b8c7b8bb5a0c58e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/pdf-viewer.js:266", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/pdf-viewer.js:266"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d11e39064f04c779", "name": "Commented-code block (10 lines) in scripts/scaffold.py:385", "shortDescription": {"text": "Commented-code block (10 lines) in scripts/scaffold.py:385"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-91437ef02756310e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 extends/nvr/skills/nvr-viewer/frontend/nvr-app.js:30", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 extends/nvr/skills/nvr-viewer/frontend/nvr-app.js:30"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8ed400207ee44e0d", "name": "Legacy-named symbol `is_tool_deprecated` in backend/tests/test_mcp_media_server_tools.py:156", "shortDescription": {"text": "Legacy-named symbol `is_tool_deprecated` in backend/tests/test_mcp_media_server_tools.py:156"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fd26495c82c403cc", "name": "Legacy-named symbol `file_legacy` in backend/tests/test_linebot_ai_context_prompt.py:34", "shortDescription": {"text": "Legacy-named symbol `file_legacy` in backend/tests/test_linebot_ai_context_prompt.py:34"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ef8e015ba1d38bf6", "name": "Legacy-named symbol `test_new_formats_not_legacy` in backend/tests/test_linebot_utils.py:122", "shortDescription": {"text": "Legacy-named symbol `test_new_formats_not_legacy` in backend/tests/test_linebot_utils.py:122"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-11fbe36544bc0c49", "name": "Stub function `downgrade` (body is just `pass`/`return`) \u2014 backend/migrations/versions/015_update_jfmskin_agents.py:118", "shortDescription": {"text": "Stub function `downgrade` (body is just `pass`/`return`) \u2014 backend/migrations/versions/015_update_jfmskin_agents.py:118"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6973014812e5f88a", "name": "Stub function `downgrade` (body is just `pass`/`return`) \u2014 backend/migrations/versions/023_fix_queue_status_prompt.py:56", "shortDescription": {"text": "Stub function `downgrade` (body is just `pass`/`return`) \u2014 backend/migrations/versions/023_fix_queue_status_prompt.py:56"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6f5dc96c5814562c", "name": "Stub function `ensure_default_linebot_agents` (body is just `pass`/`return`) \u2014 backend/src/ching_tech_os/main.py:24", "shortDescription": {"text": "Stub function `ensure_default_linebot_agents` (body is just `pass`/`return`) \u2014 backend/src/ching_tech_os/main.py:24"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-25026ed2ce1b8492", "name": "Legacy-named symbol `from_legacy` in backend/src/ching_tech_os/services/path_manager.py:332", "shortDescription": {"text": "Legacy-named symbol `from_legacy` in backend/src/ching_tech_os/services/path_manager.py:332"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6cc2988d8c0b4fd0", "name": "Network/subprocess call without timeout or try/except \u2014 backend/src/ching_tech_os/services/knowledge.py:300", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 backend/src/ching_tech_os/services/knowledge.py:300"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0f6ee8ee8096ab04", "name": "Commented-code block (7 lines) in backend/src/ching_tech_os/services/scheduler.py:476", "shortDescription": {"text": "Commented-code block (7 lines) in backend/src/ching_tech_os/services/scheduler.py:476"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-82ae9d4121dd357b", "name": "Legacy-named symbol `is_tool_deprecated` in backend/src/ching_tech_os/services/permissions.py:33", "shortDescription": {"text": "Legacy-named symbol `is_tool_deprecated` in backend/src/ching_tech_os/services/permissions.py:33"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-31bc55dff67529ec", "name": "Legacy-named symbol `is_tool_deprecated` in backend/src/ching_tech_os/services/mcp/server.py:148", "shortDescription": {"text": "Legacy-named symbol `is_tool_deprecated` in backend/src/ching_tech_os/services/mcp/server.py:148"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3dead5a700dbc3e8", "name": "Network/subprocess call without timeout or try/except \u2014 backend/src/ching_tech_os/skills/media-transcription/scripts/tra", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 backend/src/ching_tech_os/skills/media-transcription/scripts/transcribe.py:297"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a260e355ea7d9f89", "name": "32 env vars used in code but missing from .env.example", "shortDescription": {"text": "32 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `AGENT_ALLOWED_LIBRARY_PATHS`, `AGENT_ALLOWED_SHARED_SOURCES`, `ANTHROPIC_API_KEY`, `BOT_SECRET_KEY`, `BRAVE_SEARCH_API_KEY`, `CHING_TECH_WORKING_DIR`, `CTOS_AGENT_ID`, `CTOS_CONFIG` + 24 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ncli/src/ctos_cli/main.py:cmd_erp_boms, cli/src/ctos_cli/main.py:cmd_erp_bom\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02525d39071dd2c7", "name": "Near-duplicate function bodies in 5 places", "shortDescription": {"text": "Near-duplicate function bodies in 5 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nextends/voice/voice_tts.py:synthesize_audio, extends/voice/voice_tts.py:synthesize_audio, extends/voice/voice_tts.py:synthesize_audio, extends/voice/voice_tts.py:synthesize_audio\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nextends/voice/voice_tts.py:list_voices, extends/voice/voice_tts.py:list_voices, extends/voice/voice_tts.py:list_voices, extends/voice/voice_tts.py:list_voices\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cbf4f9a8e3bc6231", "name": "FastAPI POST `trigger_proactive_push` without auth dependency \u2014 backend/src/ching_tech_os/api/internal_push.py:122", "shortDescription": {"text": "FastAPI POST `trigger_proactive_push` without auth dependency \u2014 backend/src/ching_tech_os/api/internal_push.py:122"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8b0c23a395b08801", "name": "FastAPI POST `telegram_webhook` without auth dependency \u2014 backend/src/ching_tech_os/api/telegram_router.py:39", "shortDescription": {"text": "FastAPI POST `telegram_webhook` without auth dependency \u2014 backend/src/ching_tech_os/api/telegram_router.py:39"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c4d71a30fae21994", "name": "FastAPI PATCH `rename_item` without auth dependency \u2014 backend/src/ching_tech_os/api/nas.py:636", "shortDescription": {"text": "FastAPI PATCH `rename_item` without auth dependency \u2014 backend/src/ching_tech_os/api/nas.py:636"}, "fullDescription": {"text": "`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bbb5654d60f3c0cf", "name": "FastAPI POST `create_directory` without auth dependency \u2014 backend/src/ching_tech_os/api/nas.py:692", "shortDescription": {"text": "FastAPI POST `create_directory` without auth dependency \u2014 backend/src/ching_tech_os/api/nas.py:692"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-84b9926580de2c71", "name": "Dangling fetch: GET /api/admin/users (frontend/js/settings.js:277)", "shortDescription": {"text": "Dangling fetch: GET /api/admin/users (frontend/js/settings.js:277)"}, "fullDescription": {"text": "`frontend/js/settings.js:277` calls `GET /api/admin/users` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/admin/users`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1c8420a7f2aa6d9b", "name": "Dangling fetch: POST /api/admin/users (frontend/js/settings.js:609)", "shortDescription": {"text": "Dangling fetch: POST /api/admin/users (frontend/js/settings.js:609)"}, "fullDescription": {"text": "`frontend/js/settings.js:609` calls `POST /api/admin/users` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/admin/users`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8f6ed86a33c5c9af", "name": "Dangling fetch: PATCH /api/admin/users/${user.id} (frontend/js/settings.js:669)", "shortDescription": {"text": "Dangling fetch: PATCH /api/admin/users/${user.id} (frontend/js/settings.js:669)"}, "fullDescription": {"text": "`frontend/js/settings.js:669` calls `PATCH /api/admin/users/${user.id}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/admin/users/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-00b7e772a0b89dd9", "name": "Dangling fetch: POST /api/admin/users/${user.id}/reset-password (frontend/js/settings.js:723)", "shortDescription": {"text": "Dangling fetch: POST /api/admin/users/${user.id}/reset-password (frontend/js/settings.js:723)"}, "fullDescription": {"text": "`frontend/js/settings.js:723` calls `POST /api/admin/users/${user.id}/reset-password` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/admin/users/<p>/reset-password`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a85cf5b18991de41", "name": "Dangling fetch: PATCH /api/admin/users/${user.id}/status (frontend/js/settings.js:766)", "shortDescription": {"text": "Dangling fetch: PATCH /api/admin/users/${user.id}/status (frontend/js/settings.js:766)"}, "fullDescription": {"text": "`frontend/js/settings.js:766` calls `PATCH /api/admin/users/${user.id}/status` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/admin/users/<p>/status`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9d3b356076d95b23", "name": "Dangling fetch: POST /api/admin/users/${user.id}/clear-password (frontend/js/settings.js:807)", "shortDescription": {"text": "Dangling fetch: POST /api/admin/users/${user.id}/clear-password (frontend/js/settings.js:807)"}, "fullDescription": {"text": "`frontend/js/settings.js:807` calls `POST /api/admin/users/${user.id}/clear-password` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/admin/users/<p>/clear-password`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0fff085001fa6f6d", "name": "Dangling fetch: DELETE /api/admin/users/${user.id} (frontend/js/settings.js:847)", "shortDescription": {"text": "Dangling fetch: DELETE /api/admin/users/${user.id} (frontend/js/settings.js:847)"}, "fullDescription": {"text": "`frontend/js/settings.js:847` calls `DELETE /api/admin/users/${user.id}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/admin/users/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c17a79a5182c31de", "name": "Dangling fetch: GET /api/admin/default-permissions (frontend/js/settings.js:876)", "shortDescription": {"text": "Dangling fetch: GET /api/admin/default-permissions (frontend/js/settings.js:876)"}, "fullDescription": {"text": "`frontend/js/settings.js:876` calls `GET /api/admin/default-permissions` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/admin/default-permissions`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4392752da1f07a80", "name": "Dangling fetch: PATCH /api/admin/users/${user.id}/permissions (frontend/js/settings.js:969)", "shortDescription": {"text": "Dangling fetch: PATCH /api/admin/users/${user.id}/permissions (frontend/js/settings.js:969)"}, "fullDescription": {"text": "`frontend/js/settings.js:969` calls `PATCH /api/admin/users/${user.id}/permissions` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/admin/users/<p>/permissions`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6987841a308b3078", "name": "Dangling fetch: GET /api/admin/bot-settings/${platform} (frontend/js/settings.js:1035)", "shortDescription": {"text": "Dangling fetch: GET /api/admin/bot-settings/${platform} (frontend/js/settings.js:1035)"}, "fullDescription": {"text": "`frontend/js/settings.js:1035` calls `GET /api/admin/bot-settings/${platform}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/admin/bot-settings/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-024ad4428f1c63a0", "name": "Dangling fetch: PUT /api/admin/bot-settings/${platform} (frontend/js/settings.js:1184)", "shortDescription": {"text": "Dangling fetch: PUT /api/admin/bot-settings/${platform} (frontend/js/settings.js:1184)"}, "fullDescription": {"text": "`frontend/js/settings.js:1184` calls `PUT /api/admin/bot-settings/${platform}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/admin/bot-settings/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7c77594dd330ed5c", "name": "Dangling fetch: PUT /api/admin/bot-settings/${platform} (frontend/js/settings.js:1215)", "shortDescription": {"text": "Dangling fetch: PUT /api/admin/bot-settings/${platform} (frontend/js/settings.js:1215)"}, "fullDescription": {"text": "`frontend/js/settings.js:1215` calls `PUT /api/admin/bot-settings/${platform}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/admin/bot-settings/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3bd734963ed6aa13", "name": "Dangling fetch: POST /api/admin/bot-settings/${platform}/test (frontend/js/settings.js:1247)", "shortDescription": {"text": "Dangling fetch: POST /api/admin/bot-settings/${platform}/test (frontend/js/settings.js:1247)"}, "fullDescription": {"text": "`frontend/js/settings.js:1247` calls `POST /api/admin/bot-settings/${platform}/test` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/admin/bot-settings/<p>/test`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3f601bf13dd0b0f1", "name": "Dangling fetch: DELETE /api/admin/bot-settings/${platform} (frontend/js/settings.js:1270)", "shortDescription": {"text": "Dangling fetch: DELETE /api/admin/bot-settings/${platform} (frontend/js/settings.js:1270)"}, "fullDescription": {"text": "`frontend/js/settings.js:1270` calls `DELETE /api/admin/bot-settings/${platform}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/admin/bot-settings/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-929e5e97474d6b42", "name": "Dangling fetch: GET /api/ai/prompts/${promptId} (frontend/js/prompt-editor.js:85)", "shortDescription": {"text": "Dangling fetch: GET /api/ai/prompts/${promptId} (frontend/js/prompt-editor.js:85)"}, "fullDescription": {"text": "`frontend/js/prompt-editor.js:85` calls `GET /api/ai/prompts/${promptId}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/ai/prompts/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7763c0a490772207", "name": "Dangling fetch: DELETE /api/ai/prompts/${promptId} (frontend/js/prompt-editor.js:130)", "shortDescription": {"text": "Dangling fetch: DELETE /api/ai/prompts/${promptId} (frontend/js/prompt-editor.js:130)"}, "fullDescription": {"text": "`frontend/js/prompt-editor.js:130` calls `DELETE /api/ai/prompts/${promptId}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/ai/prompts/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-48d8d59d445c6b38", "name": "Dangling fetch: GET /api/nas/connections (frontend/js/file-manager.js:158)", "shortDescription": {"text": "Dangling fetch: GET /api/nas/connections (frontend/js/file-manager.js:158)"}, "fullDescription": {"text": "`frontend/js/file-manager.js:158` calls `GET /api/nas/connections` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/nas/connections`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6814b1d2be9c7bab", "name": "Dangling fetch: POST /api/nas/connect (frontend/js/file-manager.js:297)", "shortDescription": {"text": "Dangling fetch: POST /api/nas/connect (frontend/js/file-manager.js:297)"}, "fullDescription": {"text": "`frontend/js/file-manager.js:297` calls `POST /api/nas/connect` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/nas/connect`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-351eb6b0184836d6", "name": "Dangling fetch: GET /api/nas/shares (frontend/js/file-manager.js:699)", "shortDescription": {"text": "Dangling fetch: GET /api/nas/shares (frontend/js/file-manager.js:699)"}, "fullDescription": {"text": "`frontend/js/file-manager.js:699` calls `GET /api/nas/shares` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/nas/shares`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bd38555c46834c9b", "name": "Dangling fetch: GET /api/nas/browse?path=${encodeURIComponent(path)} (frontend/js/file-manager.js:717)", "shortDescription": {"text": "Dangling fetch: GET /api/nas/browse?path=${encodeURIComponent(path)} (frontend/js/file-manager.js:717)"}, "fullDescription": {"text": "`frontend/js/file-manager.js:717` calls `GET /api/nas/browse?path=${encodeURIComponent(path)}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/nas/browse`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-55ef8a7ee06cc923", "name": "Dangling fetch: GET /api/nas/search?path=${encodeURIComponent(currentPath)}&query=${encodeURIComponent(searchQuery)}&max", "shortDescription": {"text": "Dangling fetch: GET /api/nas/search?path=${encodeURIComponent(currentPath)}&query=${encodeURIComponent(searchQuery)}&max_depth=5&max_results=100 (frontend/js/file-manager.js:790)"}, "fullDescription": {"text": "`frontend/js/file-manager.js:790` calls `GET /api/nas/search?path=${encodeURIComponent(currentPath)}&query=${encodeURIComponent(searchQuery)}&max_depth=5&max_results=100` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/nas/search`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1629f41545598adf", "name": "Dangling fetch: GET /api/nas/download?path=${encodeURIComponent(filePath)} (frontend/js/file-manager.js:1614)", "shortDescription": {"text": "Dangling fetch: GET /api/nas/download?path=${encodeURIComponent(filePath)} (frontend/js/file-manager.js:1614)"}, "fullDescription": {"text": "`frontend/js/file-manager.js:1614` calls `GET /api/nas/download?path=${encodeURIComponent(filePath)}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/nas/download`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7127e67139bf4a95", "name": "Dangling fetch: POST /api/nas/upload (frontend/js/file-manager.js:1663)", "shortDescription": {"text": "Dangling fetch: POST /api/nas/upload (frontend/js/file-manager.js:1663)"}, "fullDescription": {"text": "`frontend/js/file-manager.js:1663` calls `POST /api/nas/upload` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/nas/upload`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-be87b6acbf95b8c5", "name": "Dangling fetch: POST /api/nas/mkdir (frontend/js/file-manager.js:1704)", "shortDescription": {"text": "Dangling fetch: POST /api/nas/mkdir (frontend/js/file-manager.js:1704)"}, "fullDescription": {"text": "`frontend/js/file-manager.js:1704` calls `POST /api/nas/mkdir` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/nas/mkdir`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a5523651b5d08da1", "name": "Dangling fetch: PATCH /api/nas/rename (frontend/js/file-manager.js:1749)", "shortDescription": {"text": "Dangling fetch: PATCH /api/nas/rename (frontend/js/file-manager.js:1749)"}, "fullDescription": {"text": "`frontend/js/file-manager.js:1749` calls `PATCH /api/nas/rename` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/nas/rename`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-15cb9ef20e82867f", "name": "Dangling fetch: DELETE /api/nas/file (frontend/js/file-manager.js:1800)", "shortDescription": {"text": "Dangling fetch: DELETE /api/nas/file (frontend/js/file-manager.js:1800)"}, "fullDescription": {"text": "`frontend/js/file-manager.js:1800` calls `DELETE /api/nas/file` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/nas/file`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e69d78eff14636e3", "name": "Dangling fetch: GET /api/ai/agents (frontend/js/agent-settings.js:83)", "shortDescription": {"text": "Dangling fetch: GET /api/ai/agents (frontend/js/agent-settings.js:83)"}, "fullDescription": {"text": "`frontend/js/agent-settings.js:83` calls `GET /api/ai/agents` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/ai/agents`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dcfc38d06d5aaa90", "name": "Dangling fetch: GET /api/ai/prompts (frontend/js/agent-settings.js:100)", "shortDescription": {"text": "Dangling fetch: GET /api/ai/prompts (frontend/js/agent-settings.js:100)"}, "fullDescription": {"text": "`frontend/js/agent-settings.js:100` calls `GET /api/ai/prompts` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/ai/prompts`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ced40847d0db6537", "name": "Dangling fetch: GET /api/ai/agents/${agentId} (frontend/js/agent-settings.js:118)", "shortDescription": {"text": "Dangling fetch: GET /api/ai/agents/${agentId} (frontend/js/agent-settings.js:118)"}, "fullDescription": {"text": "`frontend/js/agent-settings.js:118` calls `GET /api/ai/agents/${agentId}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/ai/agents/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e70f66d21feded66", "name": "Dangling fetch: DELETE /api/ai/agents/${agentId} (frontend/js/agent-settings.js:163)", "shortDescription": {"text": "Dangling fetch: DELETE /api/ai/agents/${agentId} (frontend/js/agent-settings.js:163)"}, "fullDescription": {"text": "`frontend/js/agent-settings.js:163` calls `DELETE /api/ai/agents/${agentId}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/ai/agents/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-af821ba977b80712", "name": "Dangling fetch: POST /api/ai/test (frontend/js/agent-settings.js:185)", "shortDescription": {"text": "Dangling fetch: POST /api/ai/test (frontend/js/agent-settings.js:185)"}, "fullDescription": {"text": "`frontend/js/agent-settings.js:185` calls `POST /api/ai/test` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/ai/test`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2b48cd73319d23e6", "name": "Dangling fetch: GET /api/skills (frontend/js/agent-settings.js:825)", "shortDescription": {"text": "Dangling fetch: GET /api/skills (frontend/js/agent-settings.js:825)"}, "fullDescription": {"text": "`frontend/js/agent-settings.js:825` calls `GET /api/skills` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/skills`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-865a3dbca57186c5", "name": "Dangling fetch: GET /api/skills/hub/sources (frontend/js/agent-settings.js:846)", "shortDescription": {"text": "Dangling fetch: GET /api/skills/hub/sources (frontend/js/agent-settings.js:846)"}, "fullDescription": {"text": "`frontend/js/agent-settings.js:846` calls `GET /api/skills/hub/sources` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/skills/hub/sources`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cbb2a7355dd4fa28", "name": "Dangling fetch: GET /api/skills/${encodeURIComponent(skillName)} (frontend/js/agent-settings.js:947)", "shortDescription": {"text": "Dangling fetch: GET /api/skills/${encodeURIComponent(skillName)} (frontend/js/agent-settings.js:947)"}, "fullDescription": {"text": "`frontend/js/agent-settings.js:947` calls `GET /api/skills/${encodeURIComponent(skillName)}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/skills/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-322cbdec0259ae5c", "name": "Dangling fetch: POST /api/skills/reload (frontend/js/agent-settings.js:1073)", "shortDescription": {"text": "Dangling fetch: POST /api/skills/reload (frontend/js/agent-settings.js:1073)"}, "fullDescription": {"text": "`frontend/js/agent-settings.js:1073` calls `POST /api/skills/reload` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/skills/reload`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9298494457db8653", "name": "Dangling fetch: GET /api/skills/${encodeURIComponent(skillName)} (frontend/js/agent-settings.js:1090)", "shortDescription": {"text": "Dangling fetch: GET /api/skills/${encodeURIComponent(skillName)} (frontend/js/agent-settings.js:1090)"}, "fullDescription": {"text": "`frontend/js/agent-settings.js:1090` calls `GET /api/skills/${encodeURIComponent(skillName)}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/skills/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-32380772d0722f46", "name": "Dangling fetch: PUT /api/skills/${encodeURIComponent(skillName)} (frontend/js/agent-settings.js:1173)", "shortDescription": {"text": "Dangling fetch: PUT /api/skills/${encodeURIComponent(skillName)} (frontend/js/agent-settings.js:1173)"}, "fullDescription": {"text": "`frontend/js/agent-settings.js:1173` calls `PUT /api/skills/${encodeURIComponent(skillName)}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/skills/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-64957422fe17d0aa", "name": "Dangling fetch: DELETE /api/skills/${encodeURIComponent(skillName)} (frontend/js/agent-settings.js:1210)", "shortDescription": {"text": "Dangling fetch: DELETE /api/skills/${encodeURIComponent(skillName)} (frontend/js/agent-settings.js:1210)"}, "fullDescription": {"text": "`frontend/js/agent-settings.js:1210` calls `DELETE /api/skills/${encodeURIComponent(skillName)}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/skills/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fa895edebcc21aba", "name": "Dangling fetch: POST /api/skills/hub/search (frontend/js/agent-settings.js:1266)", "shortDescription": {"text": "Dangling fetch: POST /api/skills/hub/search (frontend/js/agent-settings.js:1266)"}, "fullDescription": {"text": "`frontend/js/agent-settings.js:1266` calls `POST /api/skills/hub/search` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/skills/hub/search`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9088b52959ca0903", "name": "Dangling fetch: POST /api/skills/hub/install (frontend/js/agent-settings.js:1329)", "shortDescription": {"text": "Dangling fetch: POST /api/skills/hub/install (frontend/js/agent-settings.js:1329)"}, "fullDescription": {"text": "`frontend/js/agent-settings.js:1329` calls `POST /api/skills/hub/install` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/skills/hub/install`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-72b79a4dda574504", "name": "Dangling fetch: GET /api/skills/${encodeURIComponent(skillName)}/files/${encodeURIComponent(filePath)} (frontend/js/agen", "shortDescription": {"text": "Dangling fetch: GET /api/skills/${encodeURIComponent(skillName)}/files/${encodeURIComponent(filePath)} (frontend/js/agent-settings.js:1373)"}, "fullDescription": {"text": "`frontend/js/agent-settings.js:1373` calls `GET /api/skills/${encodeURIComponent(skillName)}/files/${encodeURIComponent(filePath)}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/skills/<p>/files/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-74d7793d6ba711c9", "name": "Dangling fetch: POST /api/skills/hub/inspect (frontend/js/agent-settings.js:1556)", "shortDescription": {"text": "Dangling fetch: POST /api/skills/hub/inspect (frontend/js/agent-settings.js:1556)"}, "fullDescription": {"text": "`frontend/js/agent-settings.js:1556` calls `POST /api/skills/hub/inspect` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/skills/hub/inspect`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-52a14774c69fc9a0", "name": "Dangling fetch: GET /api/share${endpoint} (frontend/js/share-manager.js:74)", "shortDescription": {"text": "Dangling fetch: GET /api/share${endpoint} (frontend/js/share-manager.js:74)"}, "fullDescription": {"text": "`frontend/js/share-manager.js:74` calls `GET /api/share${endpoint}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/share/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5db99c0bfae0e581", "name": "Dangling fetch: POST /api/share (frontend/js/share-dialog.js:150)", "shortDescription": {"text": "Dangling fetch: POST /api/share (frontend/js/share-dialog.js:150)"}, "fullDescription": {"text": "`frontend/js/share-dialog.js:150` calls `POST /api/share` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/share`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c5dd2b52e5c699dc", "name": "Dangling fetch: GET /api/messages/unread-count (frontend/js/socket-client.js:117)", "shortDescription": {"text": "Dangling fetch: GET /api/messages/unread-count (frontend/js/socket-client.js:117)"}, "fullDescription": {"text": "`frontend/js/socket-client.js:117` calls `GET /api/messages/unread-count` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/messages/unread-count`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9d8010d6990e5c8a", "name": "Dangling fetch: GET /api/ai/agents (frontend/js/ai-log.js:68)", "shortDescription": {"text": "Dangling fetch: GET /api/ai/agents (frontend/js/ai-log.js:68)"}, "fullDescription": {"text": "`frontend/js/ai-log.js:68` calls `GET /api/ai/agents` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/ai/agents`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8a741a60a2a77e3b", "name": "Dangling fetch: GET /api/ai/logs?${params.toString()} (frontend/js/ai-log.js:95)", "shortDescription": {"text": "Dangling fetch: GET /api/ai/logs?${params.toString()} (frontend/js/ai-log.js:95)"}, "fullDescription": {"text": "`frontend/js/ai-log.js:95` calls `GET /api/ai/logs?${params.toString()}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/ai/logs`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8525f4dfe65ca724", "name": "Dangling fetch: GET /api/ai/logs/stats?${params.toString()} (frontend/js/ai-log.js:119)", "shortDescription": {"text": "Dangling fetch: GET /api/ai/logs/stats?${params.toString()} (frontend/js/ai-log.js:119)"}, "fullDescription": {"text": "`frontend/js/ai-log.js:119` calls `GET /api/ai/logs/stats?${params.toString()}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/ai/logs/stats`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4c0d0207fb98e524", "name": "Dangling fetch: GET /api/ai/logs/${logId} (frontend/js/ai-log.js:135)", "shortDescription": {"text": "Dangling fetch: GET /api/ai/logs/${logId} (frontend/js/ai-log.js:135)"}, "fullDescription": {"text": "`frontend/js/ai-log.js:135` calls `GET /api/ai/logs/${logId}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/ai/logs/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-852c8ab0c12e9047", "name": "Dangling fetch: GET /api/user/me (frontend/js/permissions.js:21)", "shortDescription": {"text": "Dangling fetch: GET /api/user/me (frontend/js/permissions.js:21)"}, "fullDescription": {"text": "`frontend/js/permissions.js:21` calls `GET /api/user/me` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/user/me`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1cc32398c7c42ad3", "name": "Dangling fetch: GET /api/bot${endpoint} (frontend/js/memory-manager.js:48)", "shortDescription": {"text": "Dangling fetch: GET /api/bot${endpoint} (frontend/js/memory-manager.js:48)"}, "fullDescription": {"text": "`frontend/js/memory-manager.js:48` calls `GET /api/bot${endpoint}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/bot/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bf6172cd856e5f31", "name": "Dangling fetch: POST /api/auth/change-password (frontend/js/user-profile.js:230)", "shortDescription": {"text": "Dangling fetch: POST /api/auth/change-password (frontend/js/user-profile.js:230)"}, "fullDescription": {"text": "`frontend/js/user-profile.js:230` calls `POST /api/auth/change-password` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/auth/change-password`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dcfdb6a960a913a4", "name": "Dangling fetch: GET /api/user/me (frontend/js/user-profile.js:269)", "shortDescription": {"text": "Dangling fetch: GET /api/user/me (frontend/js/user-profile.js:269)"}, "fullDescription": {"text": "`frontend/js/user-profile.js:269` calls `GET /api/user/me` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/user/me`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d2eb672edde8e05e", "name": "Dangling fetch: PATCH /api/user/me (frontend/js/user-profile.js:289)", "shortDescription": {"text": "Dangling fetch: PATCH /api/user/me (frontend/js/user-profile.js:289)"}, "fullDescription": {"text": "`frontend/js/user-profile.js:289` calls `PATCH /api/user/me` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/user/me`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4f8f9fc9b421e046", "name": "Dangling fetch: GET /api/config/apps (frontend/js/desktop.js:143)", "shortDescription": {"text": "Dangling fetch: GET /api/config/apps (frontend/js/desktop.js:143)"}, "fullDescription": {"text": "`frontend/js/desktop.js:143` calls `GET /api/config/apps` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/config/apps`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-139183a8e4396d96", "name": "Dangling fetch: DELETE /api/bot/files/${fileId} (frontend/js/linebot.js:1260)", "shortDescription": {"text": "Dangling fetch: DELETE /api/bot/files/${fileId} (frontend/js/linebot.js:1260)"}, "fullDescription": {"text": "`frontend/js/linebot.js:1260` calls `DELETE /api/bot/files/${fileId}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/bot/files/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-59c09f25156db11b", "name": "Dangling fetch: DELETE /api/bot/groups/${groupId} (frontend/js/linebot.js:1292)", "shortDescription": {"text": "Dangling fetch: DELETE /api/bot/groups/${groupId} (frontend/js/linebot.js:1292)"}, "fullDescription": {"text": "`frontend/js/linebot.js:1292` calls `DELETE /api/bot/groups/${groupId}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/bot/groups/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-19df7fbfa0da8c70", "name": "Dangling fetch: GET /projects?limit=100 (frontend/js/linebot.js:449)", "shortDescription": {"text": "Dangling fetch: GET /projects?limit=100 (frontend/js/linebot.js:449)"}, "fullDescription": {"text": "`frontend/js/linebot.js:449` calls `GET /projects?limit=100` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: helper:request\nNormalized path used for matching: `/projects`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-db7df6f4b800cb10", "name": "Dangling fetch: GET /api/voice/voices${params} (frontend/js/voice-app.js:43)", "shortDescription": {"text": "Dangling fetch: GET /api/voice/voices${params} (frontend/js/voice-app.js:43)"}, "fullDescription": {"text": "`frontend/js/voice-app.js:43` calls `GET /api/voice/voices${params}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/voice/voices/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-439e810662774bb8", "name": "Dangling fetch: GET /api/voice/scopes (frontend/js/voice-app.js:60)", "shortDescription": {"text": "Dangling fetch: GET /api/voice/scopes (frontend/js/voice-app.js:60)"}, "fullDescription": {"text": "`frontend/js/voice-app.js:60` calls `GET /api/voice/scopes` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/voice/scopes`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0af5010b26c3bc0a", "name": "Dangling fetch: GET /api/voice/settings?${params} (frontend/js/voice-app.js:72)", "shortDescription": {"text": "Dangling fetch: GET /api/voice/settings?${params} (frontend/js/voice-app.js:72)"}, "fullDescription": {"text": "`frontend/js/voice-app.js:72` calls `GET /api/voice/settings?${params}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/voice/settings`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-79d2a33be85f88c1", "name": "Dangling fetch: PUT /api/voice/settings (frontend/js/voice-app.js:86)", "shortDescription": {"text": "Dangling fetch: PUT /api/voice/settings (frontend/js/voice-app.js:86)"}, "fullDescription": {"text": "`frontend/js/voice-app.js:86` calls `PUT /api/voice/settings` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/voice/settings`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e595e5526a1922c1", "name": "Dangling fetch: DELETE /api/voice/settings (frontend/js/voice-app.js:107)", "shortDescription": {"text": "Dangling fetch: DELETE /api/voice/settings (frontend/js/voice-app.js:107)"}, "fullDescription": {"text": "`frontend/js/voice-app.js:107` calls `DELETE /api/voice/settings` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/voice/settings`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fd3530a7bc568487", "name": "Dangling fetch: POST /api/voice/preview (frontend/js/voice-app.js:126)", "shortDescription": {"text": "Dangling fetch: POST /api/voice/preview (frontend/js/voice-app.js:126)"}, "fullDescription": {"text": "`frontend/js/voice-app.js:126` calls `POST /api/voice/preview` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/voice/preview`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6d30bd1d6a9a6e69", "name": "Dangling fetch: GET /api/scheduler/tasks (frontend/js/task-scheduler.js:25)", "shortDescription": {"text": "Dangling fetch: GET /api/scheduler/tasks (frontend/js/task-scheduler.js:25)"}, "fullDescription": {"text": "`frontend/js/task-scheduler.js:25` calls `GET /api/scheduler/tasks` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/scheduler/tasks`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-78211e03435f8d1b", "name": "Dangling fetch: GET /api/ai/agents (frontend/js/task-scheduler.js:38)", "shortDescription": {"text": "Dangling fetch: GET /api/ai/agents (frontend/js/task-scheduler.js:38)"}, "fullDescription": {"text": "`frontend/js/task-scheduler.js:38` calls `GET /api/ai/agents` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/ai/agents`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c5a0d34a20b116f4", "name": "Dangling fetch: GET /api/skills (frontend/js/task-scheduler.js:48)", "shortDescription": {"text": "Dangling fetch: GET /api/skills (frontend/js/task-scheduler.js:48)"}, "fullDescription": {"text": "`frontend/js/task-scheduler.js:48` calls `GET /api/skills` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/skills`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1382c434aa6edddd", "name": "Dangling fetch: POST /api/scheduler/tasks (frontend/js/task-scheduler.js:56)", "shortDescription": {"text": "Dangling fetch: POST /api/scheduler/tasks (frontend/js/task-scheduler.js:56)"}, "fullDescription": {"text": "`frontend/js/task-scheduler.js:56` calls `POST /api/scheduler/tasks` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/scheduler/tasks`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-426cb9cfa17fc9ef", "name": "Dangling fetch: PUT /api/scheduler/tasks/${id} (frontend/js/task-scheduler.js:69)", "shortDescription": {"text": "Dangling fetch: PUT /api/scheduler/tasks/${id} (frontend/js/task-scheduler.js:69)"}, "fullDescription": {"text": "`frontend/js/task-scheduler.js:69` calls `PUT /api/scheduler/tasks/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/scheduler/tasks/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6d35538723897593", "name": "Dangling fetch: DELETE /api/scheduler/tasks/${id} (frontend/js/task-scheduler.js:82)", "shortDescription": {"text": "Dangling fetch: DELETE /api/scheduler/tasks/${id} (frontend/js/task-scheduler.js:82)"}, "fullDescription": {"text": "`frontend/js/task-scheduler.js:82` calls `DELETE /api/scheduler/tasks/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/scheduler/tasks/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-72b16affe950a552", "name": "Dangling fetch: PATCH /api/scheduler/tasks/${id}/toggle (frontend/js/task-scheduler.js:90)", "shortDescription": {"text": "Dangling fetch: PATCH /api/scheduler/tasks/${id}/toggle (frontend/js/task-scheduler.js:90)"}, "fullDescription": {"text": "`frontend/js/task-scheduler.js:90` calls `PATCH /api/scheduler/tasks/${id}/toggle` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/scheduler/tasks/<p>/toggle`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-05368bd3f99342f4", "name": "Dangling fetch: POST /api/scheduler/tasks/${id}/run (frontend/js/task-scheduler.js:100)", "shortDescription": {"text": "Dangling fetch: POST /api/scheduler/tasks/${id}/run (frontend/js/task-scheduler.js:100)"}, "fullDescription": {"text": "`frontend/js/task-scheduler.js:100` calls `POST /api/scheduler/tasks/${id}/run` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/scheduler/tasks/<p>/run`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cb46e94492143b11", "name": "Dangling fetch: GET /ai/chats (frontend/js/api-client.js:66)", "shortDescription": {"text": "Dangling fetch: GET /ai/chats (frontend/js/api-client.js:66)"}, "fullDescription": {"text": "`frontend/js/api-client.js:66` calls `GET /ai/chats` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: helper:request\nNormalized path used for matching: `/ai/chats`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-702907d862e1fc8b", "name": "Dangling fetch: POST /ai/chats (frontend/js/api-client.js:75)", "shortDescription": {"text": "Dangling fetch: POST /ai/chats (frontend/js/api-client.js:75)"}, "fullDescription": {"text": "`frontend/js/api-client.js:75` calls `POST /ai/chats` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: helper:request\nNormalized path used for matching: `/ai/chats`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d9e0d2299725b7a6", "name": "Dangling fetch: GET /ai/chats/${chatId} (frontend/js/api-client.js:91)", "shortDescription": {"text": "Dangling fetch: GET /ai/chats/${chatId} (frontend/js/api-client.js:91)"}, "fullDescription": {"text": "`frontend/js/api-client.js:91` calls `GET /ai/chats/${chatId}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: helper:request\nNormalized path used for matching: `/ai/chats/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c4a9fd5e7f52ad61", "name": "Dangling fetch: DELETE /ai/chats/${chatId} (frontend/js/api-client.js:100)", "shortDescription": {"text": "Dangling fetch: DELETE /ai/chats/${chatId} (frontend/js/api-client.js:100)"}, "fullDescription": {"text": "`frontend/js/api-client.js:100` calls `DELETE /ai/chats/${chatId}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: helper:request\nNormalized path used for matching: `/ai/chats/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-08fbd7e4add3cdd6", "name": "Dangling fetch: PATCH /ai/chats/${chatId} (frontend/js/api-client.js:112)", "shortDescription": {"text": "Dangling fetch: PATCH /ai/chats/${chatId} (frontend/js/api-client.js:112)"}, "fullDescription": {"text": "`frontend/js/api-client.js:112` calls `PATCH /ai/chats/${chatId}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: helper:request\nNormalized path used for matching: `/ai/chats/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fc17836964f5d397", "name": "Dangling fetch: GET /ai/prompts (frontend/js/api-client.js:123)", "shortDescription": {"text": "Dangling fetch: GET /ai/prompts (frontend/js/api-client.js:123)"}, "fullDescription": {"text": "`frontend/js/api-client.js:123` calls `GET /ai/prompts` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: helper:request\nNormalized path used for matching: `/ai/prompts`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-aa58c890b61b797a", "name": "Dangling fetch: GET /api/user/me (frontend/js/header.js:80)", "shortDescription": {"text": "Dangling fetch: GET /api/user/me (frontend/js/header.js:80)"}, "fullDescription": {"text": "`frontend/js/header.js:80` calls `GET /api/user/me` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/user/me`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0c902cf50d2d1f0a", "name": "Dangling fetch: GET /api/ai/agents (frontend/js/ai-assistant.js:95)", "shortDescription": {"text": "Dangling fetch: GET /api/ai/agents (frontend/js/ai-assistant.js:95)"}, "fullDescription": {"text": "`frontend/js/ai-assistant.js:95` calls `GET /api/ai/agents` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/ai/agents`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-45f114055f72c285", "name": "Unused endpoint: GET /items", "shortDescription": {"text": "Unused endpoint: GET /items"}, "fullDescription": {"text": "`scripts/scaffold.py` declares `GET /items` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b22d1b9e26f20ce9", "name": "Unused endpoint: GET /tts/{file_id}.m4a", "shortDescription": {"text": "Unused endpoint: GET /tts/{file_id}.m4a"}, "fullDescription": {"text": "`extends/voice/tts_router.py` declares `GET /tts/{file_id}.m4a` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bf2e832402f59439", "name": "Unused endpoint: GET /tts/{file_id}.mp3", "shortDescription": {"text": "Unused endpoint: GET /tts/{file_id}.mp3"}, "fullDescription": {"text": "`extends/voice/tts_router.py` declares `GET /tts/{file_id}.mp3` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f13bccf027bedea7", "name": "Unused endpoint: GET /recording-status", "shortDescription": {"text": "Unused endpoint: GET /recording-status"}, "fullDescription": {"text": "`extends/nvr/api/nvr_status.py` declares `GET /recording-status` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c76e143a2c8a43d3", "name": "Unused endpoint: GET /snapshot/{channel}", "shortDescription": {"text": "Unused endpoint: GET /snapshot/{channel}"}, "fullDescription": {"text": "`extends/nvr/api/nvr_snapshot.py` declares `GET /snapshot/{channel}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4756b4c4da7d2088", "name": "Unused endpoint: GET /api/health", "shortDescription": {"text": "Unused endpoint: GET /api/health"}, "fullDescription": {"text": "`backend/src/ching_tech_os/main.py` declares `GET /api/health` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5baa8971ebe192a1", "name": "Unused endpoint: GET /", "shortDescription": {"text": "Unused endpoint: GET /"}, "fullDescription": {"text": "`backend/src/ching_tech_os/main.py` declares `GET /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e558236bfe8ae39a", "name": "Unused endpoint: GET /login.html", "shortDescription": {"text": "Unused endpoint: GET /login.html"}, "fullDescription": {"text": "`backend/src/ching_tech_os/main.py` declares `GET /login.html` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-21cf56c09f860b64", "name": "Unused endpoint: GET /index.html", "shortDescription": {"text": "Unused endpoint: GET /index.html"}, "fullDescription": {"text": "`backend/src/ching_tech_os/main.py` declares `GET /index.html` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-87c63478b469754a", "name": "Unused endpoint: GET /public.html", "shortDescription": {"text": "Unused endpoint: GET /public.html"}, "fullDescription": {"text": "`backend/src/ching_tech_os/main.py` declares `GET /public.html` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9998bbb70a81158c", "name": "Unused endpoint: GET /s/{token}", "shortDescription": {"text": "Unused endpoint: GET /s/{token}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/main.py` declares `GET /s/{token}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-edfd160b6b880ce4", "name": "Unused endpoint: POST /proactive-push", "shortDescription": {"text": "Unused endpoint: POST /proactive-push"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/internal_push.py` declares `POST /proactive-push` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-211746f96257b63f", "name": "Unused endpoint: GET /chats", "shortDescription": {"text": "Unused endpoint: GET /chats"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/ai_router.py` declares `GET /chats` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3b68f73b58f3006", "name": "Unused endpoint: POST /chats", "shortDescription": {"text": "Unused endpoint: POST /chats"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/ai_router.py` declares `POST /chats` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e904e461c4052fd1", "name": "Unused endpoint: GET /chats/{chat_id}", "shortDescription": {"text": "Unused endpoint: GET /chats/{chat_id}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/ai_router.py` declares `GET /chats/{chat_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1a9ed7658732412d", "name": "Unused endpoint: DELETE /chats/{chat_id}", "shortDescription": {"text": "Unused endpoint: DELETE /chats/{chat_id}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/ai_router.py` declares `DELETE /chats/{chat_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-62dd0a8d61c74b14", "name": "Unused endpoint: PATCH /chats/{chat_id}", "shortDescription": {"text": "Unused endpoint: PATCH /chats/{chat_id}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/ai_router.py` declares `PATCH /chats/{chat_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-df9f91dbdfeaa0d1", "name": "Unused endpoint: GET /hub/sources", "shortDescription": {"text": "Unused endpoint: GET /hub/sources"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/skills.py` declares `GET /hub/sources` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a12f85b46010cb53", "name": "Unused endpoint: GET /{name}", "shortDescription": {"text": "Unused endpoint: GET /{name}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/skills.py` declares `GET /{name}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-623685132065e57c", "name": "Unused endpoint: GET /{name}/meta", "shortDescription": {"text": "Unused endpoint: GET /{name}/meta"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/skills.py` declares `GET /{name}/meta` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a0c7ef87d64dc50e", "name": "Unused endpoint: PUT /{name}", "shortDescription": {"text": "Unused endpoint: PUT /{name}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/skills.py` declares `PUT /{name}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c562c83979dce866", "name": "Unused endpoint: DELETE /{name}", "shortDescription": {"text": "Unused endpoint: DELETE /{name}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/skills.py` declares `DELETE /{name}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d69b208312536d0c", "name": "Unused endpoint: POST /reload", "shortDescription": {"text": "Unused endpoint: POST /reload"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/skills.py` declares `POST /reload` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-693411bba75953b6", "name": "Unused endpoint: POST /hub/search", "shortDescription": {"text": "Unused endpoint: POST /hub/search"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/skills.py` declares `POST /hub/search` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-193c8c08e73ed855", "name": "Unused endpoint: POST /hub/inspect", "shortDescription": {"text": "Unused endpoint: POST /hub/inspect"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/skills.py` declares `POST /hub/inspect` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-622977edba69b6e5", "name": "Unused endpoint: POST /hub/install", "shortDescription": {"text": "Unused endpoint: POST /hub/install"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/skills.py` declares `POST /hub/install` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a7dbd39f154e4201", "name": "Unused endpoint: POST /{name}/scripts/{script}/run", "shortDescription": {"text": "Unused endpoint: POST /{name}/scripts/{script}/run"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/skills.py` declares `POST /{name}/scripts/{script}/run` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-194c9f6eaf55afa2", "name": "Unused endpoint: GET /{name}/frontend/{file_path:path}", "shortDescription": {"text": "Unused endpoint: GET /{name}/frontend/{file_path:path}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/skills.py` declares `GET /{name}/frontend/{file_path:path}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d819d3b519537f66", "name": "Unused endpoint: GET /{name}/files/{file_path:path}", "shortDescription": {"text": "Unused endpoint: GET /{name}/files/{file_path:path}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/skills.py` declares `GET /{name}/files/{file_path:path}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1f81277b8badb469", "name": "Unused endpoint: GET /{name}/references/{ref_path:path}", "shortDescription": {"text": "Unused endpoint: GET /{name}/references/{ref_path:path}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/skills.py` declares `GET /{name}/references/{ref_path:path}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-23b79f138e87139c", "name": "Unused endpoint: GET /{platform}", "shortDescription": {"text": "Unused endpoint: GET /{platform}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/bot_settings.py` declares `GET /{platform}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5a7376cac47fbe8d", "name": "Unused endpoint: PUT /{platform}", "shortDescription": {"text": "Unused endpoint: PUT /{platform}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/bot_settings.py` declares `PUT /{platform}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c61b06d973cc5bfb", "name": "Unused endpoint: DELETE /{platform}", "shortDescription": {"text": "Unused endpoint: DELETE /{platform}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/bot_settings.py` declares `DELETE /{platform}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f73139591552e13c", "name": "Unused endpoint: POST /{platform}/test", "shortDescription": {"text": "Unused endpoint: POST /{platform}/test"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/bot_settings.py` declares `POST /{platform}/test` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9d730b79f283293f", "name": "Unused endpoint: GET /tags", "shortDescription": {"text": "Unused endpoint: GET /tags"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/knowledge.py` declares `GET /tags` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8375156dd4caf227", "name": "Unused endpoint: POST /rebuild-index", "shortDescription": {"text": "Unused endpoint: POST /rebuild-index"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/knowledge.py` declares `POST /rebuild-index` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cbaf8511af37ea37", "name": "Unused endpoint: GET /attachments/{path:path}", "shortDescription": {"text": "Unused endpoint: GET /attachments/{path:path}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/knowledge.py` declares `GET /attachments/{path:path}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1f1d9a6d12d73946", "name": "Unused endpoint: GET /assets/{path:path}", "shortDescription": {"text": "Unused endpoint: GET /assets/{path:path}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/knowledge.py` declares `GET /assets/{path:path}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e6050eb68a8611df", "name": "Unused endpoint: GET /{kb_id}", "shortDescription": {"text": "Unused endpoint: GET /{kb_id}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/knowledge.py` declares `GET /{kb_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a009b1a56794f45", "name": "Unused endpoint: POST /", "shortDescription": {"text": "Unused endpoint: POST /"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/knowledge.py` declares `POST /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8119632668b0194f", "name": "Unused endpoint: PUT /{kb_id}", "shortDescription": {"text": "Unused endpoint: PUT /{kb_id}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/knowledge.py` declares `PUT /{kb_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-60f57e4109bc7862", "name": "Unused endpoint: DELETE /{kb_id}", "shortDescription": {"text": "Unused endpoint: DELETE /{kb_id}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/knowledge.py` declares `DELETE /{kb_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6e5c668414aae39c", "name": "Unused endpoint: GET /{kb_id}/history", "shortDescription": {"text": "Unused endpoint: GET /{kb_id}/history"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/knowledge.py` declares `GET /{kb_id}/history` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-04d5fe8a99b4ca7e", "name": "Unused endpoint: GET /{kb_id}/version/{commit}", "shortDescription": {"text": "Unused endpoint: GET /{kb_id}/version/{commit}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/knowledge.py` declares `GET /{kb_id}/version/{commit}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cad2f5c5b136f02e", "name": "Unused endpoint: POST /{kb_id}/attachments", "shortDescription": {"text": "Unused endpoint: POST /{kb_id}/attachments"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/knowledge.py` declares `POST /{kb_id}/attachments` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2bb0912a6a491130", "name": "Unused endpoint: DELETE /{kb_id}/attachments/{attachment_idx}", "shortDescription": {"text": "Unused endpoint: DELETE /{kb_id}/attachments/{attachment_idx}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/knowledge.py` declares `DELETE /{kb_id}/attachments/{attachment_idx}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9ae633f1847c118b", "name": "Unused endpoint: PATCH /{kb_id}/attachments/{attachment_idx}", "shortDescription": {"text": "Unused endpoint: PATCH /{kb_id}/attachments/{attachment_idx}"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/knowledge.py` declares `PATCH /{kb_id}/attachments/{attachment_idx}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ae38010c60493f1", "name": "Unused endpoint: POST /webhook", "shortDescription": {"text": "Unused endpoint: POST /webhook"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/telegram_router.py` declares `POST /webhook` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-618721b912bad1c2", "name": "Unused endpoint: POST /login", "shortDescription": {"text": "Unused endpoint: POST /login"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/auth.py` declares `POST /login` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-99fc36db98c134ce", "name": "Unused endpoint: POST /logout", "shortDescription": {"text": "Unused endpoint: POST /logout"}, "fullDescription": {"text": "`backend/src/ching_tech_os/api/auth.py` declares `POST /logout` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/23187"}, "properties": {"repository": "yazelin/ching-tech-os", "repoUrl": "https://github.com/yazelin/ching-tech-os", "branch": "main"}, "results": [{"ruleId": "scanner-f110c6d16c93e178", "level": "note", "message": {"text": "Possibly dead Python function: cmd_app"}, "properties": {"repobilityId": "4a879acc668db2cb", "scanner": "scanner-primary", "fingerprint": "f110c6d16c93e178", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/scaffold.py:296"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-870c8e7b8a5f6374", "level": "note", "message": {"text": "Possibly dead Python function: cmd_extends"}, "properties": {"repobilityId": "dc5ee216794aab13", "scanner": "scanner-primary", "fingerprint": "870c8e7b8a5f6374", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/scaffold.py:449"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d8096c1f7d15f745", "level": "note", "message": {"text": "Possibly dead Python function: cmd_skill"}, "properties": {"repobilityId": "f2f7472b8bf6a1d3", "scanner": "scanner-primary", "fingerprint": "d8096c1f7d15f745", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/scaffold.py:537"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eec2ca89856bf51b", "level": "note", "message": {"text": "Possibly dead Python function: cmd_validate"}, "properties": {"repobilityId": "e595afaaf6f22972", "scanner": "scanner-primary", "fingerprint": "eec2ca89856bf51b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/scaffold.py:687"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-869f44e464883f80", "level": "note", "message": {"text": "Possibly dead Python function: cmd_login"}, "properties": {"repobilityId": "994a63a3587437f2", "scanner": "scanner-primary", "fingerprint": "869f44e464883f80", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:123"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f077578ad9498f5a", "level": "note", "message": {"text": "Possibly dead Python function: cmd_logout"}, "properties": {"repobilityId": "af3f9d006da2340d", "scanner": "scanner-primary", "fingerprint": "f077578ad9498f5a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:176"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a87def6c167aaf07", "level": "note", "message": {"text": "Possibly dead Python function: cmd_whoami"}, "properties": {"repobilityId": "a6111df4b3ceaf8d", "scanner": "scanner-primary", "fingerprint": "a87def6c167aaf07", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:189"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ad971067a4bd974b", "level": "note", "message": {"text": "Possibly dead Python function: cmd_token_list"}, "properties": {"repobilityId": "fcb4e9f589824210", "scanner": "scanner-primary", "fingerprint": "ad971067a4bd974b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:210"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fb13da0347015944", "level": "note", "message": {"text": "Possibly dead Python function: cmd_token_revoke"}, "properties": {"repobilityId": "0ddec2a2d2c4f7a4", "scanner": "scanner-primary", "fingerprint": "fb13da0347015944", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:231"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-037b3f51712fb998", "level": "note", "message": {"text": "Possibly dead Python function: cmd_kb_get"}, "properties": {"repobilityId": "701943bd8bb741f6", "scanner": "scanner-primary", "fingerprint": "037b3f51712fb998", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:264"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cf83008ef8cac0c4", "level": "note", "message": {"text": "Possibly dead Python function: cmd_kb_search"}, "properties": {"repobilityId": "124c080f09e851e1", "scanner": "scanner-primary", "fingerprint": "cf83008ef8cac0c4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:289"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-67fee01f0f6e85c4", "level": "note", "message": {"text": "Possibly dead Python function: cmd_kb_add"}, "properties": {"repobilityId": "55b3d59e3c9af42e", "scanner": "scanner-primary", "fingerprint": "67fee01f0f6e85c4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:347"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-95c7823cb9643bcb", "level": "note", "message": {"text": "Possibly dead Python function: cmd_kb_update"}, "properties": {"repobilityId": "90df778327236342", "scanner": "scanner-primary", "fingerprint": "95c7823cb9643bcb", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:383"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-623747c7bf5959ea", "level": "note", "message": {"text": "Possibly dead Python function: cmd_kb_attachments"}, "properties": {"repobilityId": "1a20eeea1f3c3d1f", "scanner": "scanner-primary", "fingerprint": "623747c7bf5959ea", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:422"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-661b2a74fc0f9f7d", "level": "note", "message": {"text": "Possibly dead Python function: cmd_lib_ls"}, "properties": {"repobilityId": "a25daf35f394c0a1", "scanner": "scanner-primary", "fingerprint": "661b2a74fc0f9f7d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:482"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-72f8fe59085a21af", "level": "note", "message": {"text": "Possibly dead Python function: cmd_lib_get"}, "properties": {"repobilityId": "291606a756ef2010", "scanner": "scanner-primary", "fingerprint": "72f8fe59085a21af", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:489"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b44e3845afc08643", "level": "note", "message": {"text": "Possibly dead Python function: cmd_files_ls"}, "properties": {"repobilityId": "e743968352f007a7", "scanner": "scanner-primary", "fingerprint": "b44e3845afc08643", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:508"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5d6798686dd49f19", "level": "note", "message": {"text": "Possibly dead Python function: cmd_files_get"}, "properties": {"repobilityId": "6ad33d0ce225f873", "scanner": "scanner-primary", "fingerprint": "5d6798686dd49f19", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:520"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9a6aa825d8c9811f", "level": "note", "message": {"text": "Possibly dead Python function: cmd_erp_find"}, "properties": {"repobilityId": "06b2fbf0b46d0fc3", "scanner": "scanner-primary", "fingerprint": "9a6aa825d8c9811f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:532"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-77be27d14dc890a2", "level": "note", "message": {"text": "Possibly dead Python function: cmd_erp_item"}, "properties": {"repobilityId": "b8152dde86523c1b", "scanner": "scanner-primary", "fingerprint": "77be27d14dc890a2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:546"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b2886c092a029059", "level": "note", "message": {"text": "Possibly dead Python function: cmd_erp_stock"}, "properties": {"repobilityId": "6dad6a8440c0e441", "scanner": "scanner-primary", "fingerprint": "b2886c092a029059", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:565"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-39e3188d26ae651c", "level": "note", "message": {"text": "Possibly dead Python function: cmd_erp_boms"}, "properties": {"repobilityId": "6ddd7bcbf564da81", "scanner": "scanner-primary", "fingerprint": "39e3188d26ae651c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:592"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2809270ec639dba9", "level": "note", "message": {"text": "Possibly dead Python function: cmd_erp_bom"}, "properties": {"repobilityId": "02ac96a2a6e1e956", "scanner": "scanner-primary", "fingerprint": "2809270ec639dba9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "cli/src/ctos_cli/main.py:612"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-82762f7e48c585d0", "level": "note", "message": {"text": "Possibly dead Python function: cleanup_old_files"}, "properties": {"repobilityId": "377cd522718f94d5", "scanner": "scanner-primary", "fingerprint": "82762f7e48c585d0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "extends/voice/voice_tts.py:639"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0103ff15bceb0456", "level": "note", "message": {"text": "Possibly dead Python function: transcribe_file"}, "properties": {"repobilityId": "3993e194fea2bd74", "scanner": "scanner-primary", "fingerprint": "0103ff15bceb0456", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "extends/voice/groq_stt.py:31"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2f60ed29fe4f8c2c", "level": "note", "message": {"text": "Possibly dead Python function: transcribe_file_with_segments"}, "properties": {"repobilityId": "5a825b336afc9b5b", "scanner": "scanner-primary", "fingerprint": "2f60ed29fe4f8c2c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "extends/voice/groq_stt.py:102"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ff383a43c2eaf5e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend/tests/window-ux.test.js:43"}, "properties": {"repobilityId": "bcfdd5e3136c84e1", "scanner": "scanner-primary", "fingerprint": "3ff383a43c2eaf5e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-39e51b74ff35d9f3", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend/tests/path-utils.test.js:28"}, "properties": {"repobilityId": "8fee8da5e9760a7e", "scanner": "scanner-primary", "fingerprint": "39e51b74ff35d9f3", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-4cc6d50bdb08b732", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend/tests/ui-helpers.test.js:53"}, "properties": {"repobilityId": "bc741ed111ac375a", "scanner": "scanner-primary", "fingerprint": "4cc6d50bdb08b732", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1ce1c38ab4fcbb0e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend/js/knowledge-base.js:90"}, "properties": {"repobilityId": "f387061337367a95", "scanner": "scanner-primary", "fingerprint": "1ce1c38ab4fcbb0e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f16a0aae0a88104f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend/js/socket-client.js:19"}, "properties": {"repobilityId": "d2e1d65a92775a0c", "scanner": "scanner-primary", "fingerprint": "f16a0aae0a88104f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b89b16e1f6df1e03", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend/js/file-opener.js:115"}, "properties": {"repobilityId": "4d467fe2b7e132ba", "scanner": "scanner-primary", "fingerprint": "b89b16e1f6df1e03", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9ce2c54934dcdcbc", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend/js/taskbar.js:211"}, "properties": {"repobilityId": "ce92fd62aa48bafa", "scanner": "scanner-primary", "fingerprint": "9ce2c54934dcdcbc", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e40d0889b87acdca", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend/js/desktop.js:198"}, "properties": {"repobilityId": "cff5d7cd3c788fcd", "scanner": "scanner-primary", "fingerprint": "e40d0889b87acdca", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ddf0a3e6af39c363", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend/js/linebot.js:572"}, "properties": {"repobilityId": "613509748a8de009", "scanner": "scanner-primary", "fingerprint": "ddf0a3e6af39c363", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-18086ac93ca06d34", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend/js/config.js:72"}, "properties": {"repobilityId": "eecaf136c2586e6b", "scanner": "scanner-primary", "fingerprint": "18086ac93ca06d34", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ef8ff155f377bea2", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend/js/external-app.js:223"}, "properties": {"repobilityId": "4e0ffbc48f6393a7", "scanner": "scanner-primary", "fingerprint": "ef8ff155f377bea2", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-d617f682769395a1", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/login.html:110"}, "properties": {"repobilityId": "bfef04e349115c84", "scanner": "scanner-primary", "fingerprint": "d617f682769395a1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/login.html"}, "region": {"startLine": 110}}}]}, {"ruleId": "scanner-d4a8729509489da3", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/index.html:255"}, "properties": {"repobilityId": "e5e3013c3e1d93a5", "scanner": "scanner-primary", "fingerprint": "d4a8729509489da3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/index.html"}, "region": {"startLine": 255}}}]}, {"ruleId": "scanner-7d360217ff689db6", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/prompt-editor.js:276"}, "properties": {"repobilityId": "911b79073e60f4f5", "scanner": "scanner-primary", "fingerprint": "7d360217ff689db6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/prompt-editor.js"}, "region": {"startLine": 276}}}]}, {"ruleId": "scanner-f25cf90a180b6bd0", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/knowledge-base.js:330"}, "properties": {"repobilityId": "ec93c2a54c000f39", "scanner": "scanner-primary", "fingerprint": "f25cf90a180b6bd0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/knowledge-base.js"}, "region": {"startLine": 330}}}]}, {"ruleId": "scanner-6e87b732b8aeb797", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/file-manager.js:190"}, "properties": {"repobilityId": "647d67910c4f9a14", "scanner": "scanner-primary", "fingerprint": "6e87b732b8aeb797", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/file-manager.js"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-b550abebbbb9809f", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/agent-settings.js:532"}, "properties": {"repobilityId": "b145edeeb2c0d360", "scanner": "scanner-primary", "fingerprint": "b550abebbbb9809f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/agent-settings.js"}, "region": {"startLine": 532}}}]}, {"ruleId": "scanner-3d611698f00fc636", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/share-manager.js:187"}, "properties": {"repobilityId": "6edae81ed3005cb9", "scanner": "scanner-primary", "fingerprint": "3d611698f00fc636", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/share-manager.js"}, "region": {"startLine": 187}}}]}, {"ruleId": "scanner-c594749181e8bc6d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/terminal.js:184"}, "properties": {"repobilityId": "35da290b160e68d0", "scanner": "scanner-primary", "fingerprint": "c594749181e8bc6d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/terminal.js"}, "region": {"startLine": 184}}}]}, {"ruleId": "scanner-aa96ddabb5a0820c", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/image-viewer.js:167"}, "properties": {"repobilityId": "ee810ba24f37f070", "scanner": "scanner-primary", "fingerprint": "aa96ddabb5a0820c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/image-viewer.js"}, "region": {"startLine": 167}}}]}, {"ruleId": "scanner-d3ee454177d12120", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/public.js:202"}, "properties": {"repobilityId": "c3a47151c7d85cc7", "scanner": "scanner-primary", "fingerprint": "d3ee454177d12120", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/public.js"}, "region": {"startLine": 202}}}]}, {"ruleId": "scanner-7b60a5d102cbc8f0", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/share-dialog.js:191"}, "properties": {"repobilityId": "e2cd76aae59ceae1", "scanner": "scanner-primary", "fingerprint": "7b60a5d102cbc8f0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/share-dialog.js"}, "region": {"startLine": 191}}}]}, {"ruleId": "scanner-170fbc261e7e9d04", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/onboarding.js:120"}, "properties": {"repobilityId": "239b0d5240e01b42", "scanner": "scanner-primary", "fingerprint": "170fbc261e7e9d04", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/onboarding.js"}, "region": {"startLine": 120}}}]}, {"ruleId": "scanner-c9cd08d748a451b6", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/ai-log.js:290"}, "properties": {"repobilityId": "e3852949e72d8f6a", "scanner": "scanner-primary", "fingerprint": "c9cd08d748a451b6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/ai-log.js"}, "region": {"startLine": 290}}}]}, {"ruleId": "scanner-72096fb38bc226d5", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/taskbar.js:39"}, "properties": {"repobilityId": "f0e95c9bf9538363", "scanner": "scanner-primary", "fingerprint": "72096fb38bc226d5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/taskbar.js"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-62703ddbd47ee753", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/memory-manager.js:171"}, "properties": {"repobilityId": "d710e95d07c56854", "scanner": "scanner-primary", "fingerprint": "62703ddbd47ee753", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/memory-manager.js"}, "region": {"startLine": 171}}}]}, {"ruleId": "scanner-311b7c7357371614", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/login.js:348"}, "properties": {"repobilityId": "0f4bafd41409b427", "scanner": "scanner-primary", "fingerprint": "311b7c7357371614", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/login.js"}, "region": {"startLine": 348}}}]}, {"ruleId": "scanner-c969a2b602233a2b", "level": "warning", "message": {"text": "Insecure pattern 'insert_adjacent_html' in frontend/js/login.js:256"}, "properties": {"repobilityId": "0ce865898225da08", "scanner": "scanner-primary", "fingerprint": "c969a2b602233a2b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "insert_adjacent_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/login.js"}, "region": {"startLine": 256}}}]}, {"ruleId": "scanner-dbb5ef60e2a72865", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/window.js:144"}, "properties": {"repobilityId": "f0497d8583261a12", "scanner": "scanner-primary", "fingerprint": "dbb5ef60e2a72865", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/window.js"}, "region": {"startLine": 144}}}]}, {"ruleId": "scanner-327e70ca22e63463", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/user-profile.js:53"}, "properties": {"repobilityId": "c37fbbc282718c96", "scanner": "scanner-primary", "fingerprint": "327e70ca22e63463", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/user-profile.js"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-d787c45a58bf5ef4", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/command-palette.js:39"}, "properties": {"repobilityId": "12fcd650c6b08434", "scanner": "scanner-primary", "fingerprint": "d787c45a58bf5ef4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/command-palette.js"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-48dd509ee0ffb5cb", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/notification.js:60"}, "properties": {"repobilityId": "fb5ad7821ac49ea8", "scanner": "scanner-primary", "fingerprint": "48dd509ee0ffb5cb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/notification.js"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-07aff2a60e9a0b25", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/linebot.js:128"}, "properties": {"repobilityId": "2d64110b5955451e", "scanner": "scanner-primary", "fingerprint": "07aff2a60e9a0b25", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/linebot.js"}, "region": {"startLine": 128}}}]}, {"ruleId": "scanner-bb9e422f853350b3", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/voice-app.js:190"}, "properties": {"repobilityId": "4b9e89e20466fa80", "scanner": "scanner-primary", "fingerprint": "bb9e422f853350b3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/voice-app.js"}, "region": {"startLine": 190}}}]}, {"ruleId": "scanner-ec3001b2f85931ae", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/message-center.js:126"}, "properties": {"repobilityId": "f02a3e7a1e4f7650", "scanner": "scanner-primary", "fingerprint": "ec3001b2f85931ae", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/message-center.js"}, "region": {"startLine": 126}}}]}, {"ruleId": "scanner-46e9fb2498d64a79", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/external-app.js:116"}, "properties": {"repobilityId": "f8f1b780ee825b1e", "scanner": "scanner-primary", "fingerprint": "46e9fb2498d64a79", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/external-app.js"}, "region": {"startLine": 116}}}]}, {"ruleId": "scanner-9e073acafee2ac01", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/task-scheduler.js:131"}, "properties": {"repobilityId": "2058d64d83ff1e51", "scanner": "scanner-primary", "fingerprint": "9e073acafee2ac01", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/task-scheduler.js"}, "region": {"startLine": 131}}}]}, {"ruleId": "scanner-ca4e1c6e55feb426", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/ui-helpers.js:56"}, "properties": {"repobilityId": "10df0f99912d9137", "scanner": "scanner-primary", "fingerprint": "ca4e1c6e55feb426", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/ui-helpers.js"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-e20e4137e2a56870", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/header.js:119"}, "properties": {"repobilityId": "f2571ded9651faf2", "scanner": "scanner-primary", "fingerprint": "e20e4137e2a56870", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/header.js"}, "region": {"startLine": 119}}}]}, {"ruleId": "scanner-40a43cb3fe3d0a6a", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/js/ai-assistant.js:273"}, "properties": {"repobilityId": "e79bd3c33416f736", "scanner": "scanner-primary", "fingerprint": "40a43cb3fe3d0a6a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/js/ai-assistant.js"}, "region": {"startLine": 273}}}]}, {"ruleId": "scanner-449ec212975fa0d7", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/src/main.js:19"}, "properties": {"repobilityId": "34f4de7d3165f1f0", "scanner": "scanner-primary", "fingerprint": "449ec212975fa0d7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/main.js"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-b54c7a5888172ab1", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in extends/nvr/skills/nvr-viewer/frontend/nvr-app.js:47"}, "properties": {"repobilityId": "b2830f3ee4095637", "scanner": "scanner-primary", "fingerprint": "b54c7a5888172ab1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "extends/nvr/skills/nvr-viewer/frontend/nvr-app.js"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-cf95dca2d4eb0c34", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "e6be7d9507caaa46", "scanner": "scanner-primary", "fingerprint": "cf95dca2d4eb0c34", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/backend-tests.yml"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-cf95dca2d4eb0c34", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "e559d4efa8f85581", "scanner": "scanner-primary", "fingerprint": "cf95dca2d4eb0c34", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/backend-tests.yml"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-cf95dca2d4eb0c34", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "454679253bc903de", "scanner": "scanner-primary", "fingerprint": "cf95dca2d4eb0c34", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/backend-tests.yml"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-c0840d07864313e3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "40147a52cdfcf13f", "scanner": "scanner-primary", "fingerprint": "c0840d07864313e3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/lighthouse.yml"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-c0840d07864313e3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "70ebbd96cb94cd0f", "scanner": "scanner-primary", "fingerprint": "c0840d07864313e3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/lighthouse.yml"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-18a922b0d4f753f0", "level": "note", "message": {"text": "Very large file: frontend/js/file-manager.js (1901 lines)"}, "properties": {"repobilityId": "a8d6f524444398ea", "scanner": "scanner-primary", "fingerprint": "18a922b0d4f753f0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-eefcec8157b1d1df", "level": "note", "message": {"text": "Very large file: frontend/js/agent-settings.js (1776 lines)"}, "properties": {"repobilityId": "f11b2637004596d4", "scanner": "scanner-primary", "fingerprint": "eefcec8157b1d1df", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-86a4053ad8293509", "level": "note", "message": {"text": "Very large file: frontend/js/linebot.js (1442 lines)"}, "properties": {"repobilityId": "635e2d783953edb5", "scanner": "scanner-primary", "fingerprint": "86a4053ad8293509", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-fd596a87bc784753", "level": "note", "message": {"text": "Very large file: backend/src/ching_tech_os/services/linebot_ai.py (1871 lines)"}, "properties": {"repobilityId": "c9b307e7386f4dac", "scanner": "scanner-primary", "fingerprint": "fd596a87bc784753", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-74239df0ebf9c654", "level": "note", "message": {"text": "Very large file: backend/src/ching_tech_os/skills/research-skill/scripts/start-research.py (1556 lines)"}, "properties": {"repobilityId": "ef5e4ec726c671eb", "scanner": "scanner-primary", "fingerprint": "74239df0ebf9c654", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "eb3903296beba1ae", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "ad423003cbb037fd", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "29db027c37363050", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "753da05827c590d2", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "fc26543eab38d3ed", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-05c406997a53ad7f", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/pattern.md"}, "properties": {"repobilityId": "2ba0364a1c7a622b", "scanner": "scanner-primary", "fingerprint": "05c406997a53ad7f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/nanobanana/pattern.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3b6a60d65e0551cb", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/story.md"}, "properties": {"repobilityId": "e36e0d55af4b3bc2", "scanner": "scanner-primary", "fingerprint": "3b6a60d65e0551cb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/nanobanana/story.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e5b1cd09830b5d73", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/generate.md"}, "properties": {"repobilityId": "227931f92eea388c", "scanner": "scanner-primary", "fingerprint": "e5b1cd09830b5d73", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/nanobanana/generate.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-76e3f751193667c3", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/icon.md"}, "properties": {"repobilityId": "5a07e3a77817e8e5", "scanner": "scanner-primary", "fingerprint": "76e3f751193667c3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/nanobanana/icon.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8ae414e8301f2aac", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/edit.md"}, "properties": {"repobilityId": "aeae743adfccac6a", "scanner": "scanner-primary", "fingerprint": "8ae414e8301f2aac", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/nanobanana/edit.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-48e8f9949b69f056", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/restore.md"}, "properties": {"repobilityId": "364e78cd80d7b323", "scanner": "scanner-primary", "fingerprint": "48e8f9949b69f056", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/nanobanana/restore.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-700645b9510a8ada", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/nanobanana/diagram.md"}, "properties": {"repobilityId": "26cb124352776343", "scanner": "scanner-primary", "fingerprint": "700645b9510a8ada", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/nanobanana/diagram.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6c10344bdf57df51", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/opsx/sync.md"}, "properties": {"repobilityId": "c67e0c803c0dbcac", "scanner": "scanner-primary", "fingerprint": "6c10344bdf57df51", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/opsx/sync.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-df8d7aecf447de62", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/opsx/archive.md"}, "properties": {"repobilityId": "222623e99b9cb4f7", "scanner": "scanner-primary", "fingerprint": "df8d7aecf447de62", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/opsx/archive.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-021b572fe2fa6b9c", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/commands/opsx/apply.md"}, "properties": {"repobilityId": "5ba922ec1bca34d1", "scanner": "scanner-primary", "fingerprint": "021b572fe2fa6b9c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/commands/opsx/apply.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-71c341aa0d8be506", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/ctos-kb/SKILL.md"}, "properties": {"repobilityId": "9f56ffa4ea1552d6", "scanner": "scanner-primary", "fingerprint": "71c341aa0d8be506", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ctos-kb/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-14b94de34d897ad4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/openspec-apply-change/SKILL.md"}, "properties": {"repobilityId": "ff525910a58aad1b", "scanner": "scanner-primary", "fingerprint": "14b94de34d897ad4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/openspec-apply-change/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8a585f74bb40a5f1", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/openspec-archive-change/SKILL.md"}, "properties": {"repobilityId": "1499167b45dee6be", "scanner": "scanner-primary", "fingerprint": "8a585f74bb40a5f1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/openspec-archive-change/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1861f29946301e43", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/openspec-sync-specs/SKILL.md"}, "properties": {"repobilityId": "67a28bca6aa28ab2", "scanner": "scanner-primary", "fingerprint": "1861f29946301e43", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/openspec-sync-specs/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e30dce2e966aa1ee", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/ctos-architecture/SKILL.md"}, "properties": {"repobilityId": "8b8718531b9a79c1", "scanner": "scanner-primary", "fingerprint": "e30dce2e966aa1ee", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ctos-architecture/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5dabd4d268bfaaa2", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .github/skills/openspec-apply-change/SKILL.md"}, "properties": {"repobilityId": "c46c24f4a50f427b", "scanner": "scanner-primary", "fingerprint": "5dabd4d268bfaaa2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/skills/openspec-apply-change/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-61ee0e5ebb78eeef", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .github/skills/openspec-archive-change/SKILL.md"}, "properties": {"repobilityId": "7550f888b901a386", "scanner": "scanner-primary", "fingerprint": "61ee0e5ebb78eeef", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/skills/openspec-archive-change/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-27cfb5ad7ee46df8", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .github/skills/openspec-sync-specs/SKILL.md"}, "properties": {"repobilityId": "f32925ead409e023", "scanner": "scanner-primary", "fingerprint": "27cfb5ad7ee46df8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "skill_file"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/skills/openspec-sync-specs/SKILL.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-88e4408267399a2c", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/file-manager.js:717"}, "properties": {"repobilityId": "355fcf5bd1adccad", "scanner": "scanner-primary", "fingerprint": "88e4408267399a2c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-03119964d757fbe5", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/agent-settings.js:1266"}, "properties": {"repobilityId": "2b37816906903204", "scanner": "scanner-primary", "fingerprint": "03119964d757fbe5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-77099863a2a2f6d8", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/public.js:46"}, "properties": {"repobilityId": "280afbc069d29b67", "scanner": "scanner-primary", "fingerprint": "77099863a2a2f6d8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9a21a42e83b1c72c", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/share-dialog.js:150"}, "properties": {"repobilityId": "ac4d5109da0ffe25", "scanner": "scanner-primary", "fingerprint": "9a21a42e83b1c72c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-bb159be3899fc4b8", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/ai-log.js:95"}, "properties": {"repobilityId": "de076190639f3640", "scanner": "scanner-primary", "fingerprint": "bb159be3899fc4b8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c30cbd6258e4be88", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/user-profile.js:230"}, "properties": {"repobilityId": "b07b730b460efbb4", "scanner": "scanner-primary", "fingerprint": "c30cbd6258e4be88", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1e9b58f074677dd5", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/linebot.js:65"}, "properties": {"repobilityId": "0339f098e34c3d97", "scanner": "scanner-primary", "fingerprint": "1e9b58f074677dd5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e4c89cd30adc1d36", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/message-center.js:50"}, "properties": {"repobilityId": "00f5c531ed24d536", "scanner": "scanner-primary", "fingerprint": "e4c89cd30adc1d36", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5ecfcd6f1ddc19d2", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/task-scheduler.js:90"}, "properties": {"repobilityId": "7d5c22a1502a917d", "scanner": "scanner-primary", "fingerprint": "5ecfcd6f1ddc19d2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5b8c7b8bb5a0c58e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/js/pdf-viewer.js:266"}, "properties": {"repobilityId": "b3c827f7868a2180", "scanner": "scanner-primary", "fingerprint": "5b8c7b8bb5a0c58e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d11e39064f04c779", "level": "none", "message": {"text": "Commented-code block (10 lines) in scripts/scaffold.py:385"}, "properties": {"repobilityId": "a94115daf594a6b3", "scanner": "scanner-primary", "fingerprint": "d11e39064f04c779", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-91437ef02756310e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 extends/nvr/skills/nvr-viewer/frontend/nvr-app.js:30"}, "properties": {"repobilityId": "1911c0dab75f9a74", "scanner": "scanner-primary", "fingerprint": "91437ef02756310e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8ed400207ee44e0d", "level": "note", "message": {"text": "Legacy-named symbol `is_tool_deprecated` in backend/tests/test_mcp_media_server_tools.py:156"}, "properties": {"repobilityId": "ea480266e4d650c2", "scanner": "scanner-primary", "fingerprint": "8ed400207ee44e0d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-fd26495c82c403cc", "level": "note", "message": {"text": "Legacy-named symbol `file_legacy` in backend/tests/test_linebot_ai_context_prompt.py:34"}, "properties": {"repobilityId": "2f232d97c9ffd5b3", "scanner": "scanner-primary", "fingerprint": "fd26495c82c403cc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-ef8e015ba1d38bf6", "level": "note", "message": {"text": "Legacy-named symbol `test_new_formats_not_legacy` in backend/tests/test_linebot_utils.py:122"}, "properties": {"repobilityId": "fcfb9223562180d5", "scanner": "scanner-primary", "fingerprint": "ef8e015ba1d38bf6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-11fbe36544bc0c49", "level": "note", "message": {"text": "Stub function `downgrade` (body is just `pass`/`return`) \u2014 backend/migrations/versions/015_update_jfmskin_agents.py:118"}, "properties": {"repobilityId": "437984f1010c7157", "scanner": "scanner-primary", "fingerprint": "11fbe36544bc0c49", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-6973014812e5f88a", "level": "note", "message": {"text": "Stub function `downgrade` (body is just `pass`/`return`) \u2014 backend/migrations/versions/023_fix_queue_status_prompt.py:56"}, "properties": {"repobilityId": "3a8f34eef9758532", "scanner": "scanner-primary", "fingerprint": "6973014812e5f88a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-6f5dc96c5814562c", "level": "note", "message": {"text": "Stub function `ensure_default_linebot_agents` (body is just `pass`/`return`) \u2014 backend/src/ching_tech_os/main.py:24"}, "properties": {"repobilityId": "732c9cca83f1e745", "scanner": "scanner-primary", "fingerprint": "6f5dc96c5814562c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-25026ed2ce1b8492", "level": "note", "message": {"text": "Legacy-named symbol `from_legacy` in backend/src/ching_tech_os/services/path_manager.py:332"}, "properties": {"repobilityId": "c6e22793b0eb3f14", "scanner": "scanner-primary", "fingerprint": "25026ed2ce1b8492", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6cc2988d8c0b4fd0", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 backend/src/ching_tech_os/services/knowledge.py:300"}, "properties": {"repobilityId": "69e16b5f356c3618", "scanner": "scanner-primary", "fingerprint": "6cc2988d8c0b4fd0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0f6ee8ee8096ab04", "level": "none", "message": {"text": "Commented-code block (7 lines) in backend/src/ching_tech_os/services/scheduler.py:476"}, "properties": {"repobilityId": "1a2e95ea8e1c5dd0", "scanner": "scanner-primary", "fingerprint": "0f6ee8ee8096ab04", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-82ae9d4121dd357b", "level": "note", "message": {"text": "Legacy-named symbol `is_tool_deprecated` in backend/src/ching_tech_os/services/permissions.py:33"}, "properties": {"repobilityId": "80134b6100c8898f", "scanner": "scanner-primary", "fingerprint": "82ae9d4121dd357b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-31bc55dff67529ec", "level": "note", "message": {"text": "Legacy-named symbol `is_tool_deprecated` in backend/src/ching_tech_os/services/mcp/server.py:148"}, "properties": {"repobilityId": "36d58e428bf958cc", "scanner": "scanner-primary", "fingerprint": "31bc55dff67529ec", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-3dead5a700dbc3e8", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 backend/src/ching_tech_os/skills/media-transcription/scripts/transcribe.py:297"}, "properties": {"repobilityId": "d60b1607ee51071d", "scanner": "scanner-primary", "fingerprint": "3dead5a700dbc3e8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a260e355ea7d9f89", "level": "note", "message": {"text": "32 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "e735cee6f43259c2", "scanner": "scanner-primary", "fingerprint": "a260e355ea7d9f89", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "da2813618471753a", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "79099d515d867c2e", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "3295b41ee10477e2", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "acfcc754179cf34e", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8071c4ae293b7487", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ed4deaaed56477c2", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "5b93c411d1c5e4ae", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "92fdcf01d0f47eb7", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "371549839ae427a4", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "2156c544c90bcc30", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a94ed9cdbe6967b7", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "68c297ad292d130e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d0f5c4b90bbd7d61", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7c5dbf733bf6b76c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "e7433c76a60dfe34", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "0b08c9e6b9e4df68", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "bb6efae0aab3a13c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "df76322872e808fb", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "df220f7661d76082", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "0a113c6a9b026a84", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-cbf4f9a8e3bc6231", "level": "error", "message": {"text": "FastAPI POST `trigger_proactive_push` without auth dependency \u2014 backend/src/ching_tech_os/api/internal_push.py:122"}, "properties": {"repobilityId": "a6f8521ff03ec37b", "scanner": "scanner-primary", "fingerprint": "cbf4f9a8e3bc6231", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/src/ching_tech_os/api/internal_push.py"}, "region": {"startLine": 122}}}]}, {"ruleId": "scanner-8b0c23a395b08801", "level": "error", "message": {"text": "FastAPI POST `telegram_webhook` without auth dependency \u2014 backend/src/ching_tech_os/api/telegram_router.py:39"}, "properties": {"repobilityId": "d2c8ba873c65b4e7", "scanner": "scanner-primary", "fingerprint": "8b0c23a395b08801", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/src/ching_tech_os/api/telegram_router.py"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-c4d71a30fae21994", "level": "error", "message": {"text": "FastAPI PATCH `rename_item` without auth dependency \u2014 backend/src/ching_tech_os/api/nas.py:636"}, "properties": {"repobilityId": "ca4289017194b477", "scanner": "scanner-primary", "fingerprint": "c4d71a30fae21994", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/src/ching_tech_os/api/nas.py"}, "region": {"startLine": 636}}}]}, {"ruleId": "scanner-bbb5654d60f3c0cf", "level": "error", "message": {"text": "FastAPI POST `create_directory` without auth dependency \u2014 backend/src/ching_tech_os/api/nas.py:692"}, "properties": {"repobilityId": "7f7734bb78d425b3", "scanner": "scanner-primary", "fingerprint": "bbb5654d60f3c0cf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/src/ching_tech_os/api/nas.py"}, "region": {"startLine": 692}}}]}, {"ruleId": "scanner-84b9926580de2c71", "level": "error", "message": {"text": "Dangling fetch: GET /api/admin/users (frontend/js/settings.js:277)"}, "properties": {"repobilityId": "332bcc23d1e1d6f6", "scanner": "scanner-primary", "fingerprint": "84b9926580de2c71", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-1c8420a7f2aa6d9b", "level": "error", "message": {"text": "Dangling fetch: POST /api/admin/users (frontend/js/settings.js:609)"}, "properties": {"repobilityId": "5136139893052728", "scanner": "scanner-primary", "fingerprint": "1c8420a7f2aa6d9b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-8f6ed86a33c5c9af", "level": "error", "message": {"text": "Dangling fetch: PATCH /api/admin/users/${user.id} (frontend/js/settings.js:669)"}, "properties": {"repobilityId": "1ecb07881af62ece", "scanner": "scanner-primary", "fingerprint": "8f6ed86a33c5c9af", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-00b7e772a0b89dd9", "level": "error", "message": {"text": "Dangling fetch: POST /api/admin/users/${user.id}/reset-password (frontend/js/settings.js:723)"}, "properties": {"repobilityId": "bfafe5ba2c6e4964", "scanner": "scanner-primary", "fingerprint": "00b7e772a0b89dd9", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-a85cf5b18991de41", "level": "error", "message": {"text": "Dangling fetch: PATCH /api/admin/users/${user.id}/status (frontend/js/settings.js:766)"}, "properties": {"repobilityId": "2568e7310cbe4ee2", "scanner": "scanner-primary", "fingerprint": "a85cf5b18991de41", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-9d3b356076d95b23", "level": "error", "message": {"text": "Dangling fetch: POST /api/admin/users/${user.id}/clear-password (frontend/js/settings.js:807)"}, "properties": {"repobilityId": "4eb61ff1f4754516", "scanner": "scanner-primary", "fingerprint": "9d3b356076d95b23", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-0fff085001fa6f6d", "level": "error", "message": {"text": "Dangling fetch: DELETE /api/admin/users/${user.id} (frontend/js/settings.js:847)"}, "properties": {"repobilityId": "643229cc739ac511", "scanner": "scanner-primary", "fingerprint": "0fff085001fa6f6d", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-c17a79a5182c31de", "level": "error", "message": {"text": "Dangling fetch: GET /api/admin/default-permissions (frontend/js/settings.js:876)"}, "properties": {"repobilityId": "ce4e67f84ecba441", "scanner": "scanner-primary", "fingerprint": "c17a79a5182c31de", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-4392752da1f07a80", "level": "error", "message": {"text": "Dangling fetch: PATCH /api/admin/users/${user.id}/permissions (frontend/js/settings.js:969)"}, "properties": {"repobilityId": "37f35b787dc682df", "scanner": "scanner-primary", "fingerprint": "4392752da1f07a80", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-6987841a308b3078", "level": "error", "message": {"text": "Dangling fetch: GET /api/admin/bot-settings/${platform} (frontend/js/settings.js:1035)"}, "properties": {"repobilityId": "45e96123b04d1ad7", "scanner": "scanner-primary", "fingerprint": "6987841a308b3078", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-024ad4428f1c63a0", "level": "error", "message": {"text": "Dangling fetch: PUT /api/admin/bot-settings/${platform} (frontend/js/settings.js:1184)"}, "properties": {"repobilityId": "56e1dff70ca1478e", "scanner": "scanner-primary", "fingerprint": "024ad4428f1c63a0", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-7c77594dd330ed5c", "level": "error", "message": {"text": "Dangling fetch: PUT /api/admin/bot-settings/${platform} (frontend/js/settings.js:1215)"}, "properties": {"repobilityId": "ed49b349792e12b4", "scanner": "scanner-primary", "fingerprint": "7c77594dd330ed5c", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-3bd734963ed6aa13", "level": "error", "message": {"text": "Dangling fetch: POST /api/admin/bot-settings/${platform}/test (frontend/js/settings.js:1247)"}, "properties": {"repobilityId": "b3aec9655860bc29", "scanner": "scanner-primary", "fingerprint": "3bd734963ed6aa13", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-3f601bf13dd0b0f1", "level": "error", "message": {"text": "Dangling fetch: DELETE /api/admin/bot-settings/${platform} (frontend/js/settings.js:1270)"}, "properties": {"repobilityId": "dcbf433fb63c56d7", "scanner": "scanner-primary", "fingerprint": "3f601bf13dd0b0f1", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-929e5e97474d6b42", "level": "error", "message": {"text": "Dangling fetch: GET /api/ai/prompts/${promptId} (frontend/js/prompt-editor.js:85)"}, "properties": {"repobilityId": "675e85ebbc317cc1", "scanner": "scanner-primary", "fingerprint": "929e5e97474d6b42", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-7763c0a490772207", "level": "error", "message": {"text": "Dangling fetch: DELETE /api/ai/prompts/${promptId} (frontend/js/prompt-editor.js:130)"}, "properties": {"repobilityId": "3c18307f0734bf57", "scanner": "scanner-primary", "fingerprint": "7763c0a490772207", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-48d8d59d445c6b38", "level": "error", "message": {"text": "Dangling fetch: GET /api/nas/connections (frontend/js/file-manager.js:158)"}, "properties": {"repobilityId": "9965116ff57ffa69", "scanner": "scanner-primary", "fingerprint": "48d8d59d445c6b38", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-6814b1d2be9c7bab", "level": "error", "message": {"text": "Dangling fetch: POST /api/nas/connect (frontend/js/file-manager.js:297)"}, "properties": {"repobilityId": "1964aee27db4bf69", "scanner": "scanner-primary", "fingerprint": "6814b1d2be9c7bab", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-351eb6b0184836d6", "level": "error", "message": {"text": "Dangling fetch: GET /api/nas/shares (frontend/js/file-manager.js:699)"}, "properties": {"repobilityId": "a3aa805203d871b3", "scanner": "scanner-primary", "fingerprint": "351eb6b0184836d6", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-bd38555c46834c9b", "level": "error", "message": {"text": "Dangling fetch: GET /api/nas/browse?path=${encodeURIComponent(path)} (frontend/js/file-manager.js:717)"}, "properties": {"repobilityId": "570f0a9850ede25e", "scanner": "scanner-primary", "fingerprint": "bd38555c46834c9b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-55ef8a7ee06cc923", "level": "error", "message": {"text": "Dangling fetch: GET /api/nas/search?path=${encodeURIComponent(currentPath)}&query=${encodeURIComponent(searchQuery)}&max_depth=5&max_results=100 (frontend/js/file-manager.js:790)"}, "properties": {"repobilityId": "a69870ab33946cfe", "scanner": "scanner-primary", "fingerprint": "55ef8a7ee06cc923", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-1629f41545598adf", "level": "error", "message": {"text": "Dangling fetch: GET /api/nas/download?path=${encodeURIComponent(filePath)} (frontend/js/file-manager.js:1614)"}, "properties": {"repobilityId": "754db177cda30fe7", "scanner": "scanner-primary", "fingerprint": "1629f41545598adf", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-7127e67139bf4a95", "level": "error", "message": {"text": "Dangling fetch: POST /api/nas/upload (frontend/js/file-manager.js:1663)"}, "properties": {"repobilityId": "0d70a4df7f43fe45", "scanner": "scanner-primary", "fingerprint": "7127e67139bf4a95", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-be87b6acbf95b8c5", "level": "error", "message": {"text": "Dangling fetch: POST /api/nas/mkdir (frontend/js/file-manager.js:1704)"}, "properties": {"repobilityId": "bf00fcadd8857da9", "scanner": "scanner-primary", "fingerprint": "be87b6acbf95b8c5", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-a5523651b5d08da1", "level": "error", "message": {"text": "Dangling fetch: PATCH /api/nas/rename (frontend/js/file-manager.js:1749)"}, "properties": {"repobilityId": "017ec8e68d9cb00e", "scanner": "scanner-primary", "fingerprint": "a5523651b5d08da1", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-15cb9ef20e82867f", "level": "error", "message": {"text": "Dangling fetch: DELETE /api/nas/file (frontend/js/file-manager.js:1800)"}, "properties": {"repobilityId": "de9bc237b5b1f766", "scanner": "scanner-primary", "fingerprint": "15cb9ef20e82867f", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-e69d78eff14636e3", "level": "error", "message": {"text": "Dangling fetch: GET /api/ai/agents (frontend/js/agent-settings.js:83)"}, "properties": {"repobilityId": "ba052b8e48aa6f1f", "scanner": "scanner-primary", "fingerprint": "e69d78eff14636e3", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-dcfc38d06d5aaa90", "level": "error", "message": {"text": "Dangling fetch: GET /api/ai/prompts (frontend/js/agent-settings.js:100)"}, "properties": {"repobilityId": "2d7714f95b0aef24", "scanner": "scanner-primary", "fingerprint": "dcfc38d06d5aaa90", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-ced40847d0db6537", "level": "error", "message": {"text": "Dangling fetch: GET /api/ai/agents/${agentId} (frontend/js/agent-settings.js:118)"}, "properties": {"repobilityId": "434d54a603313c22", "scanner": "scanner-primary", "fingerprint": "ced40847d0db6537", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-e70f66d21feded66", "level": "error", "message": {"text": "Dangling fetch: DELETE /api/ai/agents/${agentId} (frontend/js/agent-settings.js:163)"}, "properties": {"repobilityId": "12d514d9fdcc37db", "scanner": "scanner-primary", "fingerprint": "e70f66d21feded66", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-af821ba977b80712", "level": "error", "message": {"text": "Dangling fetch: POST /api/ai/test (frontend/js/agent-settings.js:185)"}, "properties": {"repobilityId": "17f1d7e2db443c55", "scanner": "scanner-primary", "fingerprint": "af821ba977b80712", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-2b48cd73319d23e6", "level": "error", "message": {"text": "Dangling fetch: GET /api/skills (frontend/js/agent-settings.js:825)"}, "properties": {"repobilityId": "8bcd5254e6b69bfd", "scanner": "scanner-primary", "fingerprint": "2b48cd73319d23e6", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-865a3dbca57186c5", "level": "error", "message": {"text": "Dangling fetch: GET /api/skills/hub/sources (frontend/js/agent-settings.js:846)"}, "properties": {"repobilityId": "c1cc9a1840a4712c", "scanner": "scanner-primary", "fingerprint": "865a3dbca57186c5", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-cbb2a7355dd4fa28", "level": "error", "message": {"text": "Dangling fetch: GET /api/skills/${encodeURIComponent(skillName)} (frontend/js/agent-settings.js:947)"}, "properties": {"repobilityId": "be1592c0e10e7305", "scanner": "scanner-primary", "fingerprint": "cbb2a7355dd4fa28", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-322cbdec0259ae5c", "level": "error", "message": {"text": "Dangling fetch: POST /api/skills/reload (frontend/js/agent-settings.js:1073)"}, "properties": {"repobilityId": "436d5066a1d0ab19", "scanner": "scanner-primary", "fingerprint": "322cbdec0259ae5c", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-9298494457db8653", "level": "error", "message": {"text": "Dangling fetch: GET /api/skills/${encodeURIComponent(skillName)} (frontend/js/agent-settings.js:1090)"}, "properties": {"repobilityId": "e45376f3d6625799", "scanner": "scanner-primary", "fingerprint": "9298494457db8653", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-32380772d0722f46", "level": "error", "message": {"text": "Dangling fetch: PUT /api/skills/${encodeURIComponent(skillName)} (frontend/js/agent-settings.js:1173)"}, "properties": {"repobilityId": "a3821e621f3966f8", "scanner": "scanner-primary", "fingerprint": "32380772d0722f46", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-64957422fe17d0aa", "level": "error", "message": {"text": "Dangling fetch: DELETE /api/skills/${encodeURIComponent(skillName)} (frontend/js/agent-settings.js:1210)"}, "properties": {"repobilityId": "b237c0311f84e4fb", "scanner": "scanner-primary", "fingerprint": "64957422fe17d0aa", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-fa895edebcc21aba", "level": "error", "message": {"text": "Dangling fetch: POST /api/skills/hub/search (frontend/js/agent-settings.js:1266)"}, "properties": {"repobilityId": "989205344087bbbc", "scanner": "scanner-primary", "fingerprint": "fa895edebcc21aba", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-9088b52959ca0903", "level": "error", "message": {"text": "Dangling fetch: POST /api/skills/hub/install (frontend/js/agent-settings.js:1329)"}, "properties": {"repobilityId": "bb854ffb1a35158a", "scanner": "scanner-primary", "fingerprint": "9088b52959ca0903", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-72b79a4dda574504", "level": "error", "message": {"text": "Dangling fetch: GET /api/skills/${encodeURIComponent(skillName)}/files/${encodeURIComponent(filePath)} (frontend/js/agent-settings.js:1373)"}, "properties": {"repobilityId": "6b3f2e816896ce41", "scanner": "scanner-primary", "fingerprint": "72b79a4dda574504", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-74d7793d6ba711c9", "level": "error", "message": {"text": "Dangling fetch: POST /api/skills/hub/inspect (frontend/js/agent-settings.js:1556)"}, "properties": {"repobilityId": "2ef600adb75e719e", "scanner": "scanner-primary", "fingerprint": "74d7793d6ba711c9", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-52a14774c69fc9a0", "level": "error", "message": {"text": "Dangling fetch: GET /api/share${endpoint} (frontend/js/share-manager.js:74)"}, "properties": {"repobilityId": "fbbfe68cdadc8fcf", "scanner": "scanner-primary", "fingerprint": "52a14774c69fc9a0", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-5db99c0bfae0e581", "level": "error", "message": {"text": "Dangling fetch: POST /api/share (frontend/js/share-dialog.js:150)"}, "properties": {"repobilityId": "875b78c83ae5a555", "scanner": "scanner-primary", "fingerprint": "5db99c0bfae0e581", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-c5dd2b52e5c699dc", "level": "error", "message": {"text": "Dangling fetch: GET /api/messages/unread-count (frontend/js/socket-client.js:117)"}, "properties": {"repobilityId": "52423e5429e3e42c", "scanner": "scanner-primary", "fingerprint": "c5dd2b52e5c699dc", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-9d8010d6990e5c8a", "level": "error", "message": {"text": "Dangling fetch: GET /api/ai/agents (frontend/js/ai-log.js:68)"}, "properties": {"repobilityId": "a8ed5b654628d942", "scanner": "scanner-primary", "fingerprint": "9d8010d6990e5c8a", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-8a741a60a2a77e3b", "level": "error", "message": {"text": "Dangling fetch: GET /api/ai/logs?${params.toString()} (frontend/js/ai-log.js:95)"}, "properties": {"repobilityId": "0711411aaab216f7", "scanner": "scanner-primary", "fingerprint": "8a741a60a2a77e3b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-8525f4dfe65ca724", "level": "error", "message": {"text": "Dangling fetch: GET /api/ai/logs/stats?${params.toString()} (frontend/js/ai-log.js:119)"}, "properties": {"repobilityId": "c4ff43bde0008e1c", "scanner": "scanner-primary", "fingerprint": "8525f4dfe65ca724", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-4c0d0207fb98e524", "level": "error", "message": {"text": "Dangling fetch: GET /api/ai/logs/${logId} (frontend/js/ai-log.js:135)"}, "properties": {"repobilityId": "01a5dde275648c45", "scanner": "scanner-primary", "fingerprint": "4c0d0207fb98e524", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-852c8ab0c12e9047", "level": "error", "message": {"text": "Dangling fetch: GET /api/user/me (frontend/js/permissions.js:21)"}, "properties": {"repobilityId": "c3c05e14dc0ae175", "scanner": "scanner-primary", "fingerprint": "852c8ab0c12e9047", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-1cc32398c7c42ad3", "level": "error", "message": {"text": "Dangling fetch: GET /api/bot${endpoint} (frontend/js/memory-manager.js:48)"}, "properties": {"repobilityId": "830bf22316ca67bc", "scanner": "scanner-primary", "fingerprint": "1cc32398c7c42ad3", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-bf6172cd856e5f31", "level": "error", "message": {"text": "Dangling fetch: POST /api/auth/change-password (frontend/js/user-profile.js:230)"}, "properties": {"repobilityId": "918144048deab832", "scanner": "scanner-primary", "fingerprint": "bf6172cd856e5f31", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-dcfdb6a960a913a4", "level": "error", "message": {"text": "Dangling fetch: GET /api/user/me (frontend/js/user-profile.js:269)"}, "properties": {"repobilityId": "d40ccc65841c2984", "scanner": "scanner-primary", "fingerprint": "dcfdb6a960a913a4", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-d2eb672edde8e05e", "level": "error", "message": {"text": "Dangling fetch: PATCH /api/user/me (frontend/js/user-profile.js:289)"}, "properties": {"repobilityId": "813c30deb68f3dd1", "scanner": "scanner-primary", "fingerprint": "d2eb672edde8e05e", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-4f8f9fc9b421e046", "level": "error", "message": {"text": "Dangling fetch: GET /api/config/apps (frontend/js/desktop.js:143)"}, "properties": {"repobilityId": "5f2b1e14eba470cd", "scanner": "scanner-primary", "fingerprint": "4f8f9fc9b421e046", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-139183a8e4396d96", "level": "error", "message": {"text": "Dangling fetch: DELETE /api/bot/files/${fileId} (frontend/js/linebot.js:1260)"}, "properties": {"repobilityId": "68c1f05546a2bb5c", "scanner": "scanner-primary", "fingerprint": "139183a8e4396d96", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-59c09f25156db11b", "level": "error", "message": {"text": "Dangling fetch: DELETE /api/bot/groups/${groupId} (frontend/js/linebot.js:1292)"}, "properties": {"repobilityId": "4f8fcfd88f9d72a3", "scanner": "scanner-primary", "fingerprint": "59c09f25156db11b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-19df7fbfa0da8c70", "level": "error", "message": {"text": "Dangling fetch: GET /projects?limit=100 (frontend/js/linebot.js:449)"}, "properties": {"repobilityId": "8714b1c688e0314a", "scanner": "scanner-primary", "fingerprint": "19df7fbfa0da8c70", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "helper:request"]}}, {"ruleId": "scanner-db7df6f4b800cb10", "level": "error", "message": {"text": "Dangling fetch: GET /api/voice/voices${params} (frontend/js/voice-app.js:43)"}, "properties": {"repobilityId": "32b2b49f18b80738", "scanner": "scanner-primary", "fingerprint": "db7df6f4b800cb10", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-439e810662774bb8", "level": "error", "message": {"text": "Dangling fetch: GET /api/voice/scopes (frontend/js/voice-app.js:60)"}, "properties": {"repobilityId": "a9cefea99b180b44", "scanner": "scanner-primary", "fingerprint": "439e810662774bb8", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-0af5010b26c3bc0a", "level": "error", "message": {"text": "Dangling fetch: GET /api/voice/settings?${params} (frontend/js/voice-app.js:72)"}, "properties": {"repobilityId": "e3611cdcbddf8481", "scanner": "scanner-primary", "fingerprint": "0af5010b26c3bc0a", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-79d2a33be85f88c1", "level": "error", "message": {"text": "Dangling fetch: PUT /api/voice/settings (frontend/js/voice-app.js:86)"}, "properties": {"repobilityId": "cc7fdfa8aecb4892", "scanner": "scanner-primary", "fingerprint": "79d2a33be85f88c1", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-e595e5526a1922c1", "level": "error", "message": {"text": "Dangling fetch: DELETE /api/voice/settings (frontend/js/voice-app.js:107)"}, "properties": {"repobilityId": "8fb2ae630f306aae", "scanner": "scanner-primary", "fingerprint": "e595e5526a1922c1", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-fd3530a7bc568487", "level": "error", "message": {"text": "Dangling fetch: POST /api/voice/preview (frontend/js/voice-app.js:126)"}, "properties": {"repobilityId": "cfb4d765446b155d", "scanner": "scanner-primary", "fingerprint": "fd3530a7bc568487", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-6d30bd1d6a9a6e69", "level": "error", "message": {"text": "Dangling fetch: GET /api/scheduler/tasks (frontend/js/task-scheduler.js:25)"}, "properties": {"repobilityId": "4c05a6b9f9f07f9b", "scanner": "scanner-primary", "fingerprint": "6d30bd1d6a9a6e69", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-78211e03435f8d1b", "level": "error", "message": {"text": "Dangling fetch: GET /api/ai/agents (frontend/js/task-scheduler.js:38)"}, "properties": {"repobilityId": "0a12e397edbd4a2d", "scanner": "scanner-primary", "fingerprint": "78211e03435f8d1b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-c5a0d34a20b116f4", "level": "error", "message": {"text": "Dangling fetch: GET /api/skills (frontend/js/task-scheduler.js:48)"}, "properties": {"repobilityId": "665c3f82c156e5cf", "scanner": "scanner-primary", "fingerprint": "c5a0d34a20b116f4", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-1382c434aa6edddd", "level": "error", "message": {"text": "Dangling fetch: POST /api/scheduler/tasks (frontend/js/task-scheduler.js:56)"}, "properties": {"repobilityId": "8bfb2847aaeedc26", "scanner": "scanner-primary", "fingerprint": "1382c434aa6edddd", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-426cb9cfa17fc9ef", "level": "error", "message": {"text": "Dangling fetch: PUT /api/scheduler/tasks/${id} (frontend/js/task-scheduler.js:69)"}, "properties": {"repobilityId": "be649ad689e43c53", "scanner": "scanner-primary", "fingerprint": "426cb9cfa17fc9ef", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-6d35538723897593", "level": "error", "message": {"text": "Dangling fetch: DELETE /api/scheduler/tasks/${id} (frontend/js/task-scheduler.js:82)"}, "properties": {"repobilityId": "80534587bd414189", "scanner": "scanner-primary", "fingerprint": "6d35538723897593", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-72b16affe950a552", "level": "error", "message": {"text": "Dangling fetch: PATCH /api/scheduler/tasks/${id}/toggle (frontend/js/task-scheduler.js:90)"}, "properties": {"repobilityId": "a17ac5f3d7126802", "scanner": "scanner-primary", "fingerprint": "72b16affe950a552", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-05368bd3f99342f4", "level": "error", "message": {"text": "Dangling fetch: POST /api/scheduler/tasks/${id}/run (frontend/js/task-scheduler.js:100)"}, "properties": {"repobilityId": "75921d2f7b1c623e", "scanner": "scanner-primary", "fingerprint": "05368bd3f99342f4", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-cb46e94492143b11", "level": "error", "message": {"text": "Dangling fetch: GET /ai/chats (frontend/js/api-client.js:66)"}, "properties": {"repobilityId": "015c40c2cd0a8698", "scanner": "scanner-primary", "fingerprint": "cb46e94492143b11", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "helper:request"]}}, {"ruleId": "scanner-702907d862e1fc8b", "level": "error", "message": {"text": "Dangling fetch: POST /ai/chats (frontend/js/api-client.js:75)"}, "properties": {"repobilityId": "84cbd25646c123c1", "scanner": "scanner-primary", "fingerprint": "702907d862e1fc8b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "helper:request"]}}, {"ruleId": "scanner-d9e0d2299725b7a6", "level": "error", "message": {"text": "Dangling fetch: GET /ai/chats/${chatId} (frontend/js/api-client.js:91)"}, "properties": {"repobilityId": "6205c98135557adb", "scanner": "scanner-primary", "fingerprint": "d9e0d2299725b7a6", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "helper:request"]}}, {"ruleId": "scanner-c4a9fd5e7f52ad61", "level": "error", "message": {"text": "Dangling fetch: DELETE /ai/chats/${chatId} (frontend/js/api-client.js:100)"}, "properties": {"repobilityId": "fdd98e91d99eeeba", "scanner": "scanner-primary", "fingerprint": "c4a9fd5e7f52ad61", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "helper:request"]}}, {"ruleId": "scanner-08fbd7e4add3cdd6", "level": "error", "message": {"text": "Dangling fetch: PATCH /ai/chats/${chatId} (frontend/js/api-client.js:112)"}, "properties": {"repobilityId": "51e5a73cad573de9", "scanner": "scanner-primary", "fingerprint": "08fbd7e4add3cdd6", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "helper:request"]}}, {"ruleId": "scanner-fc17836964f5d397", "level": "error", "message": {"text": "Dangling fetch: GET /ai/prompts (frontend/js/api-client.js:123)"}, "properties": {"repobilityId": "e31ed43803dba6c8", "scanner": "scanner-primary", "fingerprint": "fc17836964f5d397", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "helper:request"]}}, {"ruleId": "scanner-aa58c890b61b797a", "level": "error", "message": {"text": "Dangling fetch: GET /api/user/me (frontend/js/header.js:80)"}, "properties": {"repobilityId": "e236a4839b2418ff", "scanner": "scanner-primary", "fingerprint": "aa58c890b61b797a", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-0c902cf50d2d1f0a", "level": "error", "message": {"text": "Dangling fetch: GET /api/ai/agents (frontend/js/ai-assistant.js:95)"}, "properties": {"repobilityId": "a0ba6c0f953d789f", "scanner": "scanner-primary", "fingerprint": "0c902cf50d2d1f0a", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-45f114055f72c285", "level": "note", "message": {"text": "Unused endpoint: GET /items"}, "properties": {"repobilityId": "f65e183576036f99", "scanner": "scanner-primary", "fingerprint": "45f114055f72c285", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b22d1b9e26f20ce9", "level": "note", "message": {"text": "Unused endpoint: GET /tts/{file_id}.m4a"}, "properties": {"repobilityId": "1f62adceed0ee2a5", "scanner": "scanner-primary", "fingerprint": "b22d1b9e26f20ce9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-bf2e832402f59439", "level": "note", "message": {"text": "Unused endpoint: GET /tts/{file_id}.mp3"}, "properties": {"repobilityId": "4a3ebeb5a4bf4cfb", "scanner": "scanner-primary", "fingerprint": "bf2e832402f59439", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f13bccf027bedea7", "level": "note", "message": {"text": "Unused endpoint: GET /recording-status"}, "properties": {"repobilityId": "32b84f4fc76f8b7c", "scanner": "scanner-primary", "fingerprint": "f13bccf027bedea7", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c76e143a2c8a43d3", "level": "note", "message": {"text": "Unused endpoint: GET /snapshot/{channel}"}, "properties": {"repobilityId": "1cb1ca7ce3f247ee", "scanner": "scanner-primary", "fingerprint": "c76e143a2c8a43d3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4756b4c4da7d2088", "level": "note", "message": {"text": "Unused endpoint: GET /api/health"}, "properties": {"repobilityId": "0ae679284d28fb27", "scanner": "scanner-primary", "fingerprint": "4756b4c4da7d2088", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5baa8971ebe192a1", "level": "note", "message": {"text": "Unused endpoint: GET /"}, "properties": {"repobilityId": "a3b9b3ab90312c7c", "scanner": "scanner-primary", "fingerprint": "5baa8971ebe192a1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e558236bfe8ae39a", "level": "note", "message": {"text": "Unused endpoint: GET /login.html"}, "properties": {"repobilityId": "1c14d98caf8f5161", "scanner": "scanner-primary", "fingerprint": "e558236bfe8ae39a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-21cf56c09f860b64", "level": "note", "message": {"text": "Unused endpoint: GET /index.html"}, "properties": {"repobilityId": "cad05510532ce23e", "scanner": "scanner-primary", "fingerprint": "21cf56c09f860b64", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-87c63478b469754a", "level": "note", "message": {"text": "Unused endpoint: GET /public.html"}, "properties": {"repobilityId": "f78b6bae0099596b", "scanner": "scanner-primary", "fingerprint": "87c63478b469754a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9998bbb70a81158c", "level": "note", "message": {"text": "Unused endpoint: GET /s/{token}"}, "properties": {"repobilityId": "1883604e7f509814", "scanner": "scanner-primary", "fingerprint": "9998bbb70a81158c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-edfd160b6b880ce4", "level": "note", "message": {"text": "Unused endpoint: POST /proactive-push"}, "properties": {"repobilityId": "258cc990d78d740e", "scanner": "scanner-primary", "fingerprint": "edfd160b6b880ce4", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-211746f96257b63f", "level": "note", "message": {"text": "Unused endpoint: GET /chats"}, "properties": {"repobilityId": "23bd649759b6854e", "scanner": "scanner-primary", "fingerprint": "211746f96257b63f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e3b68f73b58f3006", "level": "note", "message": {"text": "Unused endpoint: POST /chats"}, "properties": {"repobilityId": "567832003e9bb4a1", "scanner": "scanner-primary", "fingerprint": "e3b68f73b58f3006", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e904e461c4052fd1", "level": "note", "message": {"text": "Unused endpoint: GET /chats/{chat_id}"}, "properties": {"repobilityId": "3ccf9875b118fe9c", "scanner": "scanner-primary", "fingerprint": "e904e461c4052fd1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1a9ed7658732412d", "level": "note", "message": {"text": "Unused endpoint: DELETE /chats/{chat_id}"}, "properties": {"repobilityId": "2b233a4f0ed70e85", "scanner": "scanner-primary", "fingerprint": "1a9ed7658732412d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-62dd0a8d61c74b14", "level": "note", "message": {"text": "Unused endpoint: PATCH /chats/{chat_id}"}, "properties": {"repobilityId": "cb17b58284eae779", "scanner": "scanner-primary", "fingerprint": "62dd0a8d61c74b14", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-df9f91dbdfeaa0d1", "level": "note", "message": {"text": "Unused endpoint: GET /hub/sources"}, "properties": {"repobilityId": "ebe41d6509f0e993", "scanner": "scanner-primary", "fingerprint": "df9f91dbdfeaa0d1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a12f85b46010cb53", "level": "note", "message": {"text": "Unused endpoint: GET /{name}"}, "properties": {"repobilityId": "2c76f0989cd8ad55", "scanner": "scanner-primary", "fingerprint": "a12f85b46010cb53", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-623685132065e57c", "level": "note", "message": {"text": "Unused endpoint: GET /{name}/meta"}, "properties": {"repobilityId": "174b3fa6e054a6dc", "scanner": "scanner-primary", "fingerprint": "623685132065e57c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a0c7ef87d64dc50e", "level": "note", "message": {"text": "Unused endpoint: PUT /{name}"}, "properties": {"repobilityId": "dfd1f1eb00b8c330", "scanner": "scanner-primary", "fingerprint": "a0c7ef87d64dc50e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c562c83979dce866", "level": "note", "message": {"text": "Unused endpoint: DELETE /{name}"}, "properties": {"repobilityId": "7db8626be66d6b6e", "scanner": "scanner-primary", "fingerprint": "c562c83979dce866", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d69b208312536d0c", "level": "note", "message": {"text": "Unused endpoint: POST /reload"}, "properties": {"repobilityId": "f8efa368dc812641", "scanner": "scanner-primary", "fingerprint": "d69b208312536d0c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-693411bba75953b6", "level": "note", "message": {"text": "Unused endpoint: POST /hub/search"}, "properties": {"repobilityId": "27100604a3a0064f", "scanner": "scanner-primary", "fingerprint": "693411bba75953b6", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-193c8c08e73ed855", "level": "note", "message": {"text": "Unused endpoint: POST /hub/inspect"}, "properties": {"repobilityId": "6d80194553fe6297", "scanner": "scanner-primary", "fingerprint": "193c8c08e73ed855", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-622977edba69b6e5", "level": "note", "message": {"text": "Unused endpoint: POST /hub/install"}, "properties": {"repobilityId": "80268cd3f8f8679f", "scanner": "scanner-primary", "fingerprint": "622977edba69b6e5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a7dbd39f154e4201", "level": "note", "message": {"text": "Unused endpoint: POST /{name}/scripts/{script}/run"}, "properties": {"repobilityId": "9588bde5cab1e745", "scanner": "scanner-primary", "fingerprint": "a7dbd39f154e4201", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-194c9f6eaf55afa2", "level": "note", "message": {"text": "Unused endpoint: GET /{name}/frontend/{file_path:path}"}, "properties": {"repobilityId": "615697490866f8f7", "scanner": "scanner-primary", "fingerprint": "194c9f6eaf55afa2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d819d3b519537f66", "level": "note", "message": {"text": "Unused endpoint: GET /{name}/files/{file_path:path}"}, "properties": {"repobilityId": "762f1dac6d25bee0", "scanner": "scanner-primary", "fingerprint": "d819d3b519537f66", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1f81277b8badb469", "level": "note", "message": {"text": "Unused endpoint: GET /{name}/references/{ref_path:path}"}, "properties": {"repobilityId": "437d6c84e759293a", "scanner": "scanner-primary", "fingerprint": "1f81277b8badb469", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-23b79f138e87139c", "level": "note", "message": {"text": "Unused endpoint: GET /{platform}"}, "properties": {"repobilityId": "b4d6bdbb8dbd1e35", "scanner": "scanner-primary", "fingerprint": "23b79f138e87139c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5a7376cac47fbe8d", "level": "note", "message": {"text": "Unused endpoint: PUT /{platform}"}, "properties": {"repobilityId": "bd834f3dac05a92b", "scanner": "scanner-primary", "fingerprint": "5a7376cac47fbe8d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c61b06d973cc5bfb", "level": "note", "message": {"text": "Unused endpoint: DELETE /{platform}"}, "properties": {"repobilityId": "42337753175b0380", "scanner": "scanner-primary", "fingerprint": "c61b06d973cc5bfb", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f73139591552e13c", "level": "note", "message": {"text": "Unused endpoint: POST /{platform}/test"}, "properties": {"repobilityId": "6ab4fec9510d2b2f", "scanner": "scanner-primary", "fingerprint": "f73139591552e13c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9d730b79f283293f", "level": "note", "message": {"text": "Unused endpoint: GET /tags"}, "properties": {"repobilityId": "1b6773cd64ed2100", "scanner": "scanner-primary", "fingerprint": "9d730b79f283293f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8375156dd4caf227", "level": "note", "message": {"text": "Unused endpoint: POST /rebuild-index"}, "properties": {"repobilityId": "240f41596597d552", "scanner": "scanner-primary", "fingerprint": "8375156dd4caf227", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cbaf8511af37ea37", "level": "note", "message": {"text": "Unused endpoint: GET /attachments/{path:path}"}, "properties": {"repobilityId": "d8f10312ba02aaca", "scanner": "scanner-primary", "fingerprint": "cbaf8511af37ea37", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1f1d9a6d12d73946", "level": "note", "message": {"text": "Unused endpoint: GET /assets/{path:path}"}, "properties": {"repobilityId": "233b684fbfe7344d", "scanner": "scanner-primary", "fingerprint": "1f1d9a6d12d73946", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e6050eb68a8611df", "level": "note", "message": {"text": "Unused endpoint: GET /{kb_id}"}, "properties": {"repobilityId": "f807c5bafa74efc4", "scanner": "scanner-primary", "fingerprint": "e6050eb68a8611df", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7a009b1a56794f45", "level": "note", "message": {"text": "Unused endpoint: POST /"}, "properties": {"repobilityId": "49a67a93a5d67db6", "scanner": "scanner-primary", "fingerprint": "7a009b1a56794f45", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8119632668b0194f", "level": "note", "message": {"text": "Unused endpoint: PUT /{kb_id}"}, "properties": {"repobilityId": "42bf4edcd114fa0b", "scanner": "scanner-primary", "fingerprint": "8119632668b0194f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-60f57e4109bc7862", "level": "note", "message": {"text": "Unused endpoint: DELETE /{kb_id}"}, "properties": {"repobilityId": "6cb65fee9442dbb6", "scanner": "scanner-primary", "fingerprint": "60f57e4109bc7862", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6e5c668414aae39c", "level": "note", "message": {"text": "Unused endpoint: GET /{kb_id}/history"}, "properties": {"repobilityId": "fea8c6859ea04e29", "scanner": "scanner-primary", "fingerprint": "6e5c668414aae39c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-04d5fe8a99b4ca7e", "level": "note", "message": {"text": "Unused endpoint: GET /{kb_id}/version/{commit}"}, "properties": {"repobilityId": "a715af95ad76ea1d", "scanner": "scanner-primary", "fingerprint": "04d5fe8a99b4ca7e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cad2f5c5b136f02e", "level": "note", "message": {"text": "Unused endpoint: POST /{kb_id}/attachments"}, "properties": {"repobilityId": "5c9f3014cdb55f34", "scanner": "scanner-primary", "fingerprint": "cad2f5c5b136f02e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2bb0912a6a491130", "level": "note", "message": {"text": "Unused endpoint: DELETE /{kb_id}/attachments/{attachment_idx}"}, "properties": {"repobilityId": "666aace103da0fcc", "scanner": "scanner-primary", "fingerprint": "2bb0912a6a491130", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9ae633f1847c118b", "level": "note", "message": {"text": "Unused endpoint: PATCH /{kb_id}/attachments/{attachment_idx}"}, "properties": {"repobilityId": "d6a5c8d029078f70", "scanner": "scanner-primary", "fingerprint": "9ae633f1847c118b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0ae38010c60493f1", "level": "note", "message": {"text": "Unused endpoint: POST /webhook"}, "properties": {"repobilityId": "f7daa40db10c6928", "scanner": "scanner-primary", "fingerprint": "0ae38010c60493f1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-618721b912bad1c2", "level": "note", "message": {"text": "Unused endpoint: POST /login"}, "properties": {"repobilityId": "a2a0db9ae35ab1a1", "scanner": "scanner-primary", "fingerprint": "618721b912bad1c2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-99fc36db98c134ce", "level": "note", "message": {"text": "Unused endpoint: POST /logout"}, "properties": {"repobilityId": "cec01b3f3f78770c", "scanner": "scanner-primary", "fingerprint": "99fc36db98c134ce", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}