Handbook-Enterprises / strukto-mirage-fork

Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Die Installation von pypi:mirage-ai@0.0.3 zieht 48 Pakete nach sich, direkt und transitiv: 0 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.

Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": true,
      "size_kb": 9222,
      "has_wiki": false,
      "homepage": "https://www.strukto.ai/mirage",
      "languages": {
        "Shell": 5791,
        "Python": 7945110,
        "JavaScript": 11044,
        "TypeScript": 10516812
      },
      "pushed_at": "2026-07-17T03:56:09Z",
      "created_at": "2026-05-24T19:51:53Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-17T03:55:56Z",
      "description": "A Unified Virtual Filesystem For AI Agents",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript",
        "Python"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Handbook Enterprises",
      "type": "Organization",
      "login": "Handbook-Enterprises",
      "company": null,
      "location": null,
      "followers": 1,
      "avatar_url": "https://avatars.githubusercontent.com/u/179018887?v=4",
      "created_at": "2024-08-21T14:34:16Z",
      "is_verified": null,
      "public_repos": 8,
      "account_age_days": 699
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": false
    },
    "activity": {
      "releases": [],
      "recent_commits": [
        {
          "oid": "d1bab6ef0fdb63a9640ccde8a7202affe76f3dac",
          "body": null,
          "is_bot": false,
          "headline": "feat(core): centralize Google Sheets reads (#22)",
          "author_name": "Manas Takalpati",
          "author_login": "manastm",
          "committed_at": "2026-07-17T03:55:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "762c3aeff3389110f48f50ca92f204ceca9077eb",
          "body": "* feat(js): forward scriptPath + scriptDir to JsRunArgs (0.1.0-viewengine.23)\n\nThe JS analogue of #19: handleJs now passes the entry script's path and\ndirectory to the runtime, so a JS runtime can (a) set process.argv[1] and\n(b) resolve the entry script's own relative imports from the workspace\n(`no\n[…]\ned.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Alex B <alex@spacinsider.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(js): forward scriptPath + scriptDir to JsRunArgs (.23) (#21)",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-07-01T04:13:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cc53a8198dd6e139eb2e9f4b599ec1773632d1c3",
          "body": "* fix(node): read program from stdin on `node -` (0.1.0-viewengine.22)\n\n`echo \"console.log(1)\" | node -` errored with `node: /-: No such file`:\nthe `-` positional was taken as a script *file* to read. Bare `node` already\nreads stdin as the program, so route `-` (the conventional stdin sentinel) to\nt\n[…]\n1).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Alex B <alex@spacinsider.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(node): read program from stdin on `node -` (.22) (#20)",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-07-01T03:14:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a49366fc19b33d4d6078482528ccafbd95d9f7ff",
          "body": "…nalogue) (#19)\n\nEnables a host PythonRuntime (e.g. cf-monty's import bundler) to resolve\nsibling modules from the workspace VFS. Additive + optional: PythonRunArgs\ngains scriptDir?/cwd?, populated in handlePython from the entry pathScope's\ndirectory and the shell cwd. Runtimes that don't need them ignore them.\n\nBumps @viewengine/mirage-core to 0.1.0-viewengine.21.\n\nCo-authored-by: Alex B <alex@spacinsider.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(python): forward scriptDir + cwd to PythonRunArgs (sys.path[0] a…",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-07-01T02:50:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "674c541eda6d2a5301a0dab6d66398e842d6734e",
          "body": "* feat(workspace): pluggable JS runtime + node/js commands (additive) (#16)\n\n* feat(workspace): pluggable JS runtime + node/js commands (additive)\n\nMirrors the pluggable python runtime for JavaScript. Adds a `node`/`js`\ncommand backed by an injected `JsRuntime` via `WorkspaceOptions.jsRuntimeFactory\n[…]\ned to #16's superset (STAT/MKDIR/EXISTS/DELETE/\nRMDIR/RENAME). tsc clean.\n\n---------\n\nCo-authored-by: Alex B <alex@spacinsider.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: reconcile python + JS runtimes -> 0.1.0-viewengine.20 (#18)",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-07-01T01:49:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "66773cb48300612875e1716c9562a48ea23ce202",
          "body": "Extends BridgeDispatchFn with 'MKDIR' (fs.mkdir) and 'STAT' (returns\n{size,isDir,mtime}) so a bridged python runtime can support mkdir/stat/open.\nEnforced: MKDIR is treated as a write (rejected on read-only mounts). Bumps to\n0.1.0-viewengine.19.\n\nCo-authored-by: Alex B <alex@spacinsider.com>",
          "is_bot": false,
          "headline": "feat(workspace): MKDIR + STAT bridge ops (additive) (#17)",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-07-01T01:38:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef4cd56c4912608f2bdacf118f690f6aaefff828",
          "body": "…) (#15)\n\n* feat(workspace): pluggable python runtime + enforced bridge (additive)\n\nLets a host inject a custom python runtime instead of the built-in Pyodide,\nso `python`/`python3` can be backed by e.g. a wasm interpreter — without\ntouching default behaviour.\n\n- WorkspaceOptions.pythonRuntimeFactor\n[…]\no 0.1.0-viewengine.18 (pluggable python runtime + enforced bridge + exec)\n\n---------\n\nCo-authored-by: Alex B <alex@spacinsider.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(workspace): pluggable python runtime + enforced bridge (additive…",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-07-01T00:43:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e6ad5f897400da4a33a6527ad0aab21f2653a035",
          "body": "Includes the double-quoted-newline tokenizer fix (#14): multi-line\nquoted --text values (slack-post-message / slack-reply-to-thread) now\npreserve embedded newlines.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(core): release @viewengine/mirage-core 0.1.0-viewengine.17",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-06-30T15:20:36Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2533b3fa8f17866a9e80dc9fbd54b4f9f9f9b215",
          "body": "tree-sitter-bash stores newlines inside a double-quoted string as\n\"extras\": a literal \\n (or \\r\\n) is not captured inside any\nstring_content child but sits in the gap between two adjacent children.\nThe NT.STRING expansion handler concatenated child texts with join(''),\nsilently dropping those inter-\n[…]\n expansion, CRLF preserved, and\nbackslash-newline line continuation still collapses.\n\nCo-authored-by: Alex B <alex@spacinsider.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(shell): preserve embedded newlines in double-quoted values (#14)",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-06-30T15:20:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bf5537acfe1b314293e6bcc56af591332c8d99a3",
          "body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci(publish-core): pass --tag latest (npm 11 requires it for prereleases)",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-06-29T00:14:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a821b294e660054f9ab34949bc12d76abfec1942",
          "body": "…_TOKEN\n\nThe NPM_TOKEN-based publish 404'd (token expired/unauthorized). Switch to\nnpm Trusted Publishing over the existing `id-token: write` OIDC:\n- upgrade npm to >= 11.5.1 (Node 22 ships 10.x, which lacks OIDC publish)\n- remove the NODE_AUTH_TOKEN/NPM_TOKEN env from the publish step\n\nRequires the\n[…]\ntions trusted publisher to be configured on npm for\n@viewengine/mirage-core (repo strukto-mirage-fork, workflow publish-core.yml).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci(publish-core): publish via npm Trusted Publishing (OIDC), drop NPM…",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-06-29T00:11:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8d5898d9eae1524b52e6fa373c66edcb37644c65",
          "body": "Includes since 0.1.0-viewengine.15:\n- #12 bash/sh run a script FILE + source arg-order fix\n- #13 Notion ReDoS slash-regex hardening\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(core): release @viewengine/mirage-core 0.1.0-viewengine.16",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-06-29T00:00:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bc15661b9f1e101b0f17430c24ebe40072f4b85e",
          "body": "…rs (#13)\n\nCodeQL flags the anchored-repetition slash trims (`/^\\/+|\\/+$/g`, `/\\/+$/`)\non uncontrolled path input as polynomial ReDoS. Port the upstream fix\n(strukto-ai ddf15f62 helpers + b3402f45 notion) scoped to the Notion code:\n\n- Add `utils/slash.ts` — `stripSlash` / `rstripSlash` / `lstripSlas\n[…]\n the broader monorepo slash-regex sweep\n(ddf15f62) is left for a future re-baseline.\n\nCo-authored-by: Alex B <alex@spacinsider.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(notion): replace ReDoS-prone slash trim regexes with string helpe…",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-06-28T23:55:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d1a5e168d3e14b6c0a07e7762625c9f8f65fb235",
          "body": "`bash FILE` / `sh FILE` previously treated a positional argument as the\nscript *text* (effectively `bash -c \"FILE\"`), so running an actual script\nfile from a mount failed:\n\n    bash /disk/test.sh   ->  /disk/test.sh: command not found  [exit 127]\n\nA positional arg is now read from the VFS and its co\n[…]\ne`/`.` over a mount (absolute +\nrelative paths, missing-file 127) in both languages.\n\nCo-authored-by: Alex B <alex@spacinsider.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(shell): bash/sh run a script FILE; fix source arg-order bug (#12)",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-06-28T23:51:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2f38aa28446f1f0bdd44753c553b2322cba1048f",
          "body": "The pre-commit check has been red on main for every recent commit:\n- Prettier: rg_helper.ts, gmail/messages.ts, google/drive.ts,\n  slack/users.ts needed formatting -> prettier --write.\n- ESLint: slack/users.ts flagged 3 no-unnecessary-condition errors on\n  `a.id ?? ''` / `b.id ?? ''` / `u.id ?? ''` \n[…]\n\nNo behaviour change; slack suite 170 pass. prettier --check clean\nrepo-wide.\n\nCo-authored-by: Alex B <alex@pureuniversaltruth.com>\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: clear pre-commit debt (prettier + eslint) so CI goes green (#11)",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-05-28T14:24:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a9de57590cb149c559f488b8422b5e616a6923cc",
          "body": "* feat(mount): first-class per-mount include/exclude path globs\n\nAdds path-glob visibility scoping to any mount — motivated by \"scope out\nSlack DMs\" but generic across every resource. A mount may declare\n`includeGlobs` / `excludeGlobs` (mount-relative patterns); matching paths\nare hidden from listin\n[…]\n add -A`; it's unrelated to this PR.\nUntracked here, left on disk.\n\n---------\n\nCo-authored-by: Alex B <alex@pureuniversaltruth.com>\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mount): first-class per-mount include/exclude path globs (#10)",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-05-28T14:01:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "81026017b11d212580d84ec0024cc92f6b29254c",
          "body": "…ared-drive visibility\n\nTwo related changes that together make Shared Drive content reachable\nfrom the gdrive mount:\n\n1. Always pass supportsAllDrives=true + includeItemsFromAllDrives=true on\n   every Drive API call (listFiles, listAllFiles, getFileMetadata,\n   downloadFile, downloadFileStream). Wit\n[…]\na \"pick a Shared Drive\" UI without each repo reimplementing\nthe call. GDriveResource constructor in browser package threads\n`config.rootScope` through to GDriveAccessor.\n\nBumps to 0.1.0-viewengine.14.",
          "is_bot": false,
          "headline": "feat(gdrive): per-mount rootScope (my_drive/shared_drive/folder) + sh…",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T23:01:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5d24dff218048518629707ab26e9f3d964596563",
          "body": "…TML body fallback\n\nTwo pieces of agent feedback against the cross-mount cross-ref workflow:\n\n1. Slack: resolving user_ids one at a time via cat /slack/users/<file>.json\n   was tedious when processing a participants.txt with many ids. Add\n   /slack/users.tsv at the slack mount root: TSV with header \n[…]\nnservative tag-strip + entity-decode\n   pass when no text/plain part exists. Backwards compatible — emails\n   that did have text/plain return the same content as before.\n\nBumps to 0.1.0-viewengine.13.",
          "is_bot": false,
          "headline": "feat(slack/gmail): /slack/users.tsv for bulk uid resolution + gmail H…",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T22:10:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a50f2beb7bfe8c3ddf8fcc2c2e6d40bdded64075",
          "body": "…ount prompts\n\nPer-mount prompts (the strings surfaced to the LLM at MCP connect)\nhadn't caught up to the new synthetic views:\n\n- gmail: documents both the LABEL view (existing) and the THREAD view\n  (added in v.6/v.8/v.9), including the better filename fallback\n  (from-<sender> when Subject empty) \n[…]\n\n- slack: documents per-date participants.txt (added in v.11) and the\n  cross-mount grep pattern. Also points at /slack/users/<id>.json for\n  user_id → email resolution.\n\nBumps to 0.1.0-viewengine.12.",
          "is_bot": false,
          "headline": "docs(prompts): document /gmail/threads/ + slack participants.txt in m…",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T21:21:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2d160fa80b22bd441daa551d8042d1efac1fb657",
          "body": "Each /slack/<channels|dms>/<channel>/<date>/ now also exposes a\nparticipants.txt file: unique slack user_ids that posted on that day\n(or appeared in thread reply_users), sorted, one per line. Same query\nshape as gmail/threads/<id>/participants.txt and calendar's per-event\nattendees.txt — enables cro\n[…]\nemail resolution is intentionally not done here (would require a\nusers.info call per id); agents can join via /slack/users/<id>.\n\nBumps to 0.1.0-viewengine.11. Tests updated to expect the third entry.",
          "is_bot": false,
          "headline": "feat(slack): add participants.txt sidecar to per-date dirs",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T21:18:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8e8b2827dc68179b355f2d8eb82a93fbf45485e6",
          "body": "…dir entries\n\njoinChild() in gmail/box/dropbox/gdrive find walks assumed gmailReaddir\nreturns bare child names like \"INBOX\". The actual contract returns\nmount-prefixed absolute paths like \"/gmail/INBOX\". Re-joining the parent\nproduced doubled paths like\n\n  /gmail/INBOX/2026-05-25//gmail/INBOX/2026-0\n[…]\nt\\`. Pass absolute paths\nthrough unchanged in all four backends; fall back to the join for the\nrelative-name case so any backend that does return bare names still\nworks.\n\nBumps to 0.1.0-viewengine.10.",
          "is_bot": false,
          "headline": "fix(find): stop doubling paths for backends that return absolute read…",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T21:11:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2c2e9f2e9acf81002eaef67069b25599c8ba69ce",
          "body": "detectScope was returning useNative=true for any 2-segment path, which\nincluded /gmail/threads/<dir>/. Native rg then called Gmail's\nmessages.search with labelName=\"threads\" — there's no such label, so the\nquery returned empty and rg-on-thread-dir silently produced no matches.\nSingle-file rg (depth \n[…]\neNative=false so the rg\nflow falls through to collectFiles + gmailRead, which DOES know how to\nresolve thread message paths via the IndexEntry cache populated by\nreaddir.\n\nBumps to 0.1.0-viewengine.9.",
          "is_bot": false,
          "headline": "fix(gmail): force /threads/ paths through the file-walk rg path",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T20:42:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "771030aa3c9e2e2f72522cd251c865355c859dfc",
          "body": "The threads view added in v.6 named per-message files <NN>-from-<sender>.eml,\nbut gmail's rg/grep/find collectFiles helper only picks up files ending in\n.gmail.json — so recursive search through /gmail/threads/<dir>/ silently\nreturned nothing. Match the existing convention. The file content is JSON\n\n[…]\nextension was the only thing that needed to change.\n\nBumps to 0.1.0-viewengine.8. parseThreadMessageFilename accepts both .eml\nand .gmail.json so cached sessions across the v.7 → v.8 jump don't break.",
          "is_bot": false,
          "headline": "fix(gmail): use .gmail.json (not .eml) for thread message files",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T20:22:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2c1af8636e553db5e2ebabd6562b4112c139efda",
          "body": "…TEXT\n\nThe threads view added in viewengine.6 set new IndexEntry resourceTypes\n(gmail/threads_root, gmail/thread_dir, gmail/thread_message,\ngmail/thread_participants, gmail/thread_meta) but stat.ts had no cases\nfor them — they fell through to the default `FileType.JSON` branch, so\n`ls /gmail/threads\n[…]\npath as a file and returned the dir name\ninstead of listing contents. Add explicit handlers: roots/dirs are\nDIRECTORY, participants.txt is TEXT, message + meta stay JSON.\n\nBumps to 0.1.0-viewengine.7.",
          "is_bot": false,
          "headline": "fix(gmail): stat the synthetic /threads/ resource types as DIRECTORY/…",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T20:15:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ccc202d00e6b8051f1f399a2c2e02c07a3daafe4",
          "body": "…clude noise filter (#9)\n\nThree downstream-blocking improvements landing together:\n\n1. Better gmail message filenames. The fallback for missing/empty Subject\n   was `No_Subject`, producing indistinguishable filenames like\n   `No_Subject__<id>.gmail.json` across the inbox. Fall through Subject →\n   F\n[…]\nr one-grep cross-mount queries like:\n  grep -l alice@x.com /gmail/threads/*/participants.txt\n  grep -l alice@x.com /calendar/*/2026-05-19/*.attendees.txt\n\nCo-authored-by: Alex B <alex@spacinsider.com>",
          "is_bot": false,
          "headline": "feat(gmail): better filenames + /threads/ view, rg --exclude/-P, --ex…",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-05-25T20:06:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9b1f5caaedffc5ff619e508541c61d53d7d2c504",
          "body": null,
          "is_bot": false,
          "headline": "chore(core): bump to 0.1.0-viewengine.5",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T17:49:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7bdcb2132f1eb74398d9e3b99a0ad2e1f8ac37a0",
          "body": "…on-not-in-channel\n\nfeat(slack): auto-join public channels on not_in_channel for transparent workspace-wide read",
          "is_bot": false,
          "headline": "Merge pull request #8 from Handbook-Enterprises/feat/slack-auto-join-…",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-05-25T17:48:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "338e0d55ccd28c4915e19ebd9332b3857b917565",
          "body": "…ent workspace-wide read\n\nSlack's conversations.history is membership-gated even for user tokens\nwith channels:history scope. Result: every public channel returns\n\"not_in_channel\" until the user manually /invites or /joins from the\nSlack UI. For 50+ channels that's painful.\n\nNew latestMessageProbeWi\n[…]\nMessageProbe\ndirectly (you can't be not_in your own DM).\n\nTests: 21/21 pass (3 new — pass-through when reason isn't not_in_channel,\npublic channel auto-join happy path, private channel join fallback).",
          "is_bot": false,
          "headline": "feat(slack): auto-join public channels on not_in_channel for transpar…",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T17:40:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ddc8896643031fb1c9bcf7d60fe71498bf825630",
          "body": null,
          "is_bot": false,
          "headline": "chore(core): bump to 0.1.0-viewengine.4",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T17:18:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b5e9396685d17b615f5b41b96cbbe30f42e5d91",
          "body": "…pty-and-surface-soft-errors\n\nfix(slack): don't cache empty channel dates; surface soft-error reason",
          "is_bot": false,
          "headline": "Merge pull request #7 from Handbook-Enterprises/fix/slack-no-cache-em…",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-05-25T17:17:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d3474073da4d03fe5f83fa0c6cf8e035c7aaf40",
          "body": null,
          "is_bot": false,
          "headline": "chore(lint): prettier on index.ts",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T17:12:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a5a9fe2e1d48feeaf88e160df0caebf046171b6",
          "body": "So callers can wrap SLACK_GREP with a cache-aware version (ve-brain\nPR forthcoming) without losing the native-search shortcut for\nlabel-scoped queries.\n\nExports: slackDetectScope, SlackScope, slackBuildQuery,\nslackFormatGrepResults, slackFormatFileGrepResults,\nslackSearchMessages, slackSearchFiles.\n\nMirrors the gmail* export pattern.",
          "is_bot": false,
          "headline": "export slack native-search helpers",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T17:06:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bcf8e39cf858336afbbed701a4510417b973c26b",
          "body": null,
          "is_bot": false,
          "headline": "chore(lint): prettier",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T17:05:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fbf0ae81d30561d63997ebd21bfafe984375cfb",
          "body": "When latestMessageTs returns null (channel empty / not_in_channel /\nmissing_scope / channel_not_found / is_archived / not_authed), readdir\nwas calling index.setDir with an empty entries list. That cached the\nempty state for the IndexCacheStore's TTL (typically 300-600s), so\nevery retry within that w\n[…]\n Now subsequent calls retry, and operators can\nsee \"not_in_channel\"/\"missing_scope\" in worker logs.\n\nTests: 18/18 pass (2 new — empty results don't cache; soft-error\nreason surfaces via console.warn).",
          "is_bot": false,
          "headline": "fix(slack): don't cache empty channel dates; surface soft-error reason",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T17:05:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3cbc717ec43aa5d0ced48e18e2c7e1e002417b13",
          "body": null,
          "is_bot": false,
          "headline": "chore(core): bump to 0.1.0-viewengine.3",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T16:57:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77dd2480d3c46daecc101f6f87083a85242b663c",
          "body": "…n-no-cwd-mount\n\nfix(executor): fall back to mountForCommand spec when cwd has no mount",
          "is_bot": false,
          "headline": "Merge pull request #6 from Handbook-Enterprises/fix/spec-fallback-whe…",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-05-25T16:56:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3cc0d03a5281db61cc04ff50a40de906b25467cb",
          "body": null,
          "is_bot": false,
          "headline": "chore(lint): prettier on bare_mount_path.test.ts",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T16:48:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4391788deb72014e88cf84d9e44ecdf1c0c213eb",
          "body": "When cwd doesn't map to any registered mount (cwd='/' with no root mount,\ncommon when callers expose each connector under its own top-level prefix),\ncwdMount.specFor(name) was the only path to spec lookup. With cwdMount\nnull, spec was null, classifyArgvBySpec never ran, and bare positional\nargs like\n[…]\nm and asserts `ls s3` (bare) === `ls /s3` (absolute) and `cat s3/data.txt`\n=== `cat /s3/data.txt` when cwd='/'. Test fails without the fix; passes\nwith it. Existing execute_node tests (16) still pass.",
          "is_bot": false,
          "headline": "fix(executor): fall back to mountForCommand spec when cwd has no mount",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T16:39:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "64ecef415c935d99004a9fd5e4ebb4a802300a2f",
          "body": "Includes notion search pagination cap (PR #4) and grep file-content\ncaching via onRead callback for gmail + notion (PR #5).",
          "is_bot": false,
          "headline": "chore(core): bump to 0.1.0-viewengine.2",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-25T03:27:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67441c4afb4c3cc01d9c4406ee9c1e4d3040fde7",
          "body": "…bytes\n\nperf(grep): cache file bytes via IOResult so repeat reads dedupe",
          "is_bot": false,
          "headline": "Merge pull request #5 from Handbook-Enterprises/perf/grep-cache-read-…",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-05-25T03:27:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2783650024ecf441de62c8a51d33e145abd5f3a4",
          "body": "…tion-real\n\nfix(notion): cap searchTopLevelPages pagination to avoid 30s+ timeouts",
          "is_bot": false,
          "headline": "Merge pull request #4 from Handbook-Enterprises/fix/notion-cap-pagina…",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-05-24T22:08:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dda6326004a8dd0e7ffa7d9b3cee107aa7434ae6",
          "body": "Symptom: \\`grep -r 'pattern' /brain/\\` (a notion mount with ~50 pages) took\n25 seconds on first run. Cause: grep recursive walk reads each file via\nthe backend's read.ts (which hits the Notion / Gmail API) and never\npopulates the workspace FileCache, so subsequent grep / cat / wc calls\nre-fetch ever\n[…]\nansport /\nFakeGmailTransport to count API call dedup, which is bigger than the\nfix. Manual verification on staging instead: rerun grep -r twice in\nthe same workspace; second run should be much faster.",
          "is_bot": false,
          "headline": "perf(grep): cache file bytes via IOResult so repeat reads dedupe",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-24T21:48:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "954dde853b56b8e2cfe7b5ae66279b681b4b6298",
          "body": "Symptom: \\`ls /notion/\\` on workspaces with thousands of pages hits the\nMCP request 30s timeout. Cause: searchTopLevelPages paginates ALL pages\nin the workspace via Notion's search API (which returns child pages too),\nthen filters down to \\`parent.type === 'workspace'\\`. For a 5000-page\nworkspace th\n[…]\numented in the comment. The real fix is per-path use of the\nright Notion endpoint (blocks/children for sub-page ls, databases/query\nfor DB pages, search ONLY for root-workspace listing) — separate PR.",
          "is_bot": false,
          "headline": "fix(notion): cap searchTopLevelPages pagination to avoid 30s+ timeouts",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-24T21:29:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "91304f9a25ac0b06aa6f4bef0c00392a7ff9f5ca",
          "body": "Includes the per-backend find fix for bare-name backends (gmail, gdrive,\nbox, dropbox).",
          "is_bot": false,
          "headline": "chore(release): bump @viewengine/mirage-core to 0.1.0-viewengine.1",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-24T21:28:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb682e2b6b67d6d268b94234aff046e1de7555b9",
          "body": "fix(find): emit full paths for bare-name backends (gmail, gdrive, box, dropbox)",
          "is_bot": false,
          "headline": "Merge pull request #3 from Handbook-Enterprises/fix/find-stat-and-grep",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-05-24T21:27:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "321fe66e6137cc5ecd7ce124d463954474c50013",
          "body": null,
          "is_bot": false,
          "headline": "chore(prettier): formatting tweaks (CI Prettier fix)",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-24T21:19:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "17d09064a566b48b6f274ab5c30bf862ccac13df",
          "body": "…, dropbox)\n\nThese four backends' readdir returns bare child names (e.g. 'INBOX',\n'2026-05-24'); the find walk was pushing those directly as results, so\noutput entries weren't pipeable into ls/cat and the recursive walk\nsilently failed because PathSpec({original: '2026-05-24'}) doesn't\nresolve in th\n[…]\n\nemit full paths (verified: slack, discord); leaving them alone.\n\nNo new tests yet — would need to write gmail/_test_util.ts from scratch\nto seed readdir fixtures. Will verify on staging post-publish.",
          "is_bot": false,
          "headline": "fix(find): emit full paths for bare-name backends (gmail, gdrive, box…",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-24T21:09:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8139662335223b4f8c2925ef2c099049abb1411c",
          "body": "…-files\n\nfix(ls): stat-first to make  echo the file (coreutils-compat)",
          "is_bot": false,
          "headline": "Merge pull request #2 from Handbook-Enterprises/fix/ls-stat-first-for…",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-05-24T20:54:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d194c9f0605efe414e972822de14ab300b074e23",
          "body": "Two new cases on slack/ls.test.ts cover the new stat-first behavior:\n- ls on a chat.jsonl leaf (chat log file under a date dir)\n- ls on a user JSON leaf (single user under /users/)\n\nBoth previously failed with \"not a directory\" / ENOENT. With the\nstat-first fix, ls now echoes the path matching coreu\n[…]\ne `if (listDir) { ... } let entries =\nawait Readdir(...)` flow.\n\nFollow-up: add per-backend regression tests for gmail, gdrive, notion,\ncalendar, etc. once their _test_util grows leaf-seeding helpers.",
          "is_bot": false,
          "headline": "test(slack): regression tests for ls FILE echoing leaf paths",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-24T20:46:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1a56cd76ab2cda0a408b563e512845dc0d8fdf16",
          "body": "23 backend ls implementations all called <backend>Readdir unconditionally\nwhen -d wasn't passed. For a path that resolves to a non-directory file,\nthat throws and the user sees \"ls: cannot access '<path>': not a directory\"\nor \"ls: ENOENT\". Real coreutils ls echoes the file's metadata in this\ncase.\n\n\n[…]\non, postgres, posthog,\ns3, slack, sscholar, sscholar_author, trello, vercel, email.\n\nNot patched (different file structure, already handle file case or have\ntheir own dispatch): ram, redis, ssh, disk.",
          "is_bot": false,
          "headline": "fix(ls): stat-first to make `ls FILE` echo the file (coreutils-compat)",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-24T20:46:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "67fba588c312b8bbb3d8a86439636c566e80f969",
          "body": "chore(publish): rename to @viewengine/mirage-core + publish workflow",
          "is_bot": false,
          "headline": "Merge pull request #1 from Handbook-Enterprises/viewengine/publish-setup",
          "author_name": "Alex B",
          "author_login": "alexbruf",
          "committed_at": "2026-05-24T20:46:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cef0304e812c23867b26ad824cbf7a0297058c50",
          "body": "My joinFindPath patch assumed all backends' readdir returns bare child\nnames. discord/slack tests showed that's wrong: their readdir already\nreturns full paths (e.g. readdirRoot returns [\\`\\${prefix}/channels\\`, ...]).\nJoining the parent path twice produced double-prefixed garbage,\nbreaking discord/find.test.ts and slack/find.test.ts.\n\nFind fix needs per-backend handling — keeping PR scope to publish infra\nonly so we can ship that and tackle find separately.",
          "is_bot": false,
          "headline": "revert(find): restore find.ts to upstream — patch broke existing tests",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-24T20:37:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c258ba231973b6dc6b80ab46138c2e664c20a2dd",
          "body": null,
          "is_bot": false,
          "headline": "chore(yamllint): quote on: to dodge YAML 1.1 truthy ambiguity",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-24T20:29:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a7e5c16ec9d3057fce503e7a1e77abf6617e236",
          "body": "…files\n\nCI on PR #1 (round 2) caught that .ts/.tsx/.js files across packages\n(node, agents, server, browser, cli) all import \"@struktoai/mirage-core\"\ndirectly. Bulk sed across all source files — same scope of rename,\njust bigger find target than the original package.json sweep covered.\n\nAfter: 0 remaining @struktoai/mirage-core references in source,\n709 @viewengine/mirage-core references.",
          "is_bot": false,
          "headline": "chore(publish): rename @struktoai/mirage-core imports across 709 src …",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-24T20:20:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d35098359c5e440985bae0f6aa54c0e68a252008",
          "body": "…ockfile\n\nCI on PR #1 caught:\n- typescript/package.json root devDependency on @struktoai/mirage-core\n- examples/typescript/package.json on the same\n- pnpm-lock.yaml needed regen after the rename\n\nResult: all internal workspace references now resolve to @viewengine/mirage-core,\nfrozen-lockfile install succeeds.",
          "is_bot": false,
          "headline": "chore(publish): catch two more @struktoai/mirage-core refs + update l…",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-24T20:18:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "214165b059710b0cad793fe8ad7d9c1509490fb1",
          "body": "…workflow\n\n- typescript/packages/core/package.json: renamed @struktoai → @viewengine,\n  version 0.1.0-viewengine.0, repo URL points at the fork.\n- Sibling packages (agents, browser, node, server) update their workspace\n  dep reference from @struktoai/mirage-core to @viewengine/mirage-core.\n  CLI is \n[…]\nwhy the fork exists and how it relates to\n  upstream + how to pull upstream changes back.\n\nNo source-code changes yet — those land in follow-up PRs (ls FILE,\nfind full paths, calendar shape redesign).",
          "is_bot": false,
          "headline": "chore(publish): rename core to @viewengine/mirage-core + add publish …",
          "author_name": "Alex B",
          "author_login": null,
          "committed_at": "2026-05-24T20:00:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7adc1c4ff852c5d88b12ad60e791984bb55f2fb0",
          "body": "* build: add dulwich as optional version extra\n\n* feat(version): scaffold module\n\n* feat(version): VersionStore.open inits bare repo\n\n* feat(version): blob write/read with content dedup\n\n* feat(version): nested tree write/read\n\n* feat(version): commit, head, read_commit + HEAD ref\n\n* feat(version): \n[…]\ns passed). Isolating the package didn't help (still\none continuously-blocked worker). Switch spawnSync -> async spawn so the loop\nstays responsive between calls; revert the now-unneeded CI step split.",
          "is_bot": false,
          "headline": "feat(version): workspace versioning over the server API + CLI (#90)",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-24T11:35:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0953f6e8d667bf877d272c7c9a651382d186c5ea",
          "body": null,
          "is_bot": false,
          "headline": "feat(py/databricks): add read-only volume resource (#66)",
          "author_name": "Sonny",
          "author_login": "sonhmai",
          "committed_at": "2026-05-24T07:27:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ac9cecca9072670bcbbf9527aa5064c6b06fd3a",
          "body": "…gle workspaces) (#70)\n\n* refactor(commands): consolidate s3/gdrive/gdocs/gsheets/gslides/gmail wrappers\n\nApply the same thin-wrapper + generic-dispatch pattern that landed for\nram/disk/redis in #68. Each cloud backend wrapper now does just three\nthings: glob-resolve paths, inject backend-specific c\n[…]\ninteg harness.\n\n* chore(commands): remove stray no-op expression statements\n\nDrop leftover bare statements: 'index' in email/rg.py and 'accessor.store'\nin ram/redis stat provision. No behavior change.",
          "is_bot": false,
          "headline": "refactor(commands): consolidate cloud backend wrappers (s3/gdrive/goo…",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-24T05:08:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3b966d20aaac5981e2cb157dd8d1e39ef602d3d4",
          "body": "* add resource secret redaction\n\n* dedupe gmail config",
          "is_bot": false,
          "headline": "add resource secret redaction (#85)",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-22T22:27:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38a9689afae7c4bdd99a734cdf9670ca9ed0a3b6",
          "body": "… (#77)\n\n* refactor(commands): delegate backend builtins to shared generic layer\n\nRoute per-backend basename, dirname, cut, sort and friends through the\ngeneric/*.py implementations with injected I/O callables, add exclude and\nverbose handling to generic tar, and fix core read/readdir/stat mount-pre\n[…]\nteg): regenerate truth.txt for corrected cut/ls -R/grep -l/find output\n\n* refactor: move gnu_basename/gnu_dirname to utils/path\n\n* test(utils): add unit tests for gnu_basename/gnu_dirname/resolve_path",
          "is_bot": false,
          "headline": "refactor(commands): delegate backend builtins to shared generic layer…",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-22T05:53:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5009244eb169a690a3bfff23336b12a6b93e29f0",
          "body": "…SIST_DIR (#81)\n\n* feat(snapshot): path-based workspace snapshot/load; remove MIRAGE_PERSIST_DIR\n\n* fix(integ): pass reload resource for needs_override redis backend in snapshot/load check",
          "is_bot": false,
          "headline": "feat(snapshot): path-based workspace snapshot/load; remove MIRAGE_PER…",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-22T05:44:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e316c1b639855ea9a91b945512a63245e2455d0c",
          "body": "…gn with TS) (#78)\n\n* refactor(server): move daemon entrypoint into the server package\n\nMirror the TS layout: the daemon process is now a server-package module (mirage/server/daemon.py, like server/bin/daemon.ts) that reads the daemon env vars and builds the app, replacing cli/server_factory.py.\n\nBe\n[…]\ncli/src/env.ts.\n\nSpawners updated to 'uvicorn mirage.server.daemon:app': cli client, cli test conftest, CLI CI workflow, and the auth docs.\n\n* docs(cli): add Python CLI README (basic usage + env vars)",
          "is_bot": false,
          "headline": "refactor(server): move daemon entrypoint into the server package (ali…",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-22T00:35:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "092fb20a8e03f6c8f7686ed2c2b6c187e46f459c",
          "body": "stripPort/strip_port now strip the port (and IPv6 brackets) only when the Host header matches host, host:digits, [host], or [host]:digits; any other value is returned unchanged so the allowlist comparison fails closed.\n\nTypeScript (#75): [::1]evil, [::1]:8765x, and [::1].attacker.tld normalized to :\n[…]\nn and also rejects non-digit ports.\n\nConstants split into host_validation_constants (DEFAULT_ALLOWED_HOSTS, HOST_PATTERN) and env (ENV_ALLOWED_HOSTS) modules so both implementations match.\n\nCloses #75",
          "is_bot": false,
          "headline": "fix(server): reject malformed Host headers in allowlist check (#76)",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-21T23:46:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "91be6f6c5305848ef692959f78377b5fede9fc0b",
          "body": "* refactor ts index cache\n\n* refactor(py): rename _index_ttl to index_ttl to align with ts indexTtl\n\n* ci(ts): add redis service so redis index/file cache tests run, aligning with python\n\n* ci: move redis examples into per-language test workflows with integ/ truth files\n\nReuse the integ/ + truth-fil\n[…]\nw live under examples/typescript/pyodide/ as basic/env/heredoc/script/ram/vfs.ts\ninstead of examples/typescript/python/pyodide_*.ts. Updates test_typescript.yml\nand docs/typescript/python-fs.mdx refs.",
          "is_bot": false,
          "headline": "refactor ts index cache (#73)",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-21T11:16:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c5aa6de5ac3bdf1da08db68ed667f8ecd109f257",
          "body": "Co-authored-by: Deepak kudi <deepakkudi23@adsl-172-10-9-116.dsl.sndg02.sbcglobal.net>",
          "is_bot": false,
          "headline": "fix: report read-only resource commands (#72)",
          "author_name": "Puneet Dixit",
          "author_login": "puneetdixit200",
          "committed_at": "2026-05-21T04:04:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1747921fafdc9795bd2f25b09663de0a694bee0",
          "body": null,
          "is_bot": false,
          "headline": "feat(spec): export command specs to JSON for python and typescript (#71)",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-20T01:00:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "038bb8f63357adf041ec4b7e3d21af6d3fc19850",
          "body": "…) (#69)\n\nDemonstrates running a Mirage Workspace inside a Daytona remote sandbox,\nso heavy work (long Python scripts, etc.) can be offloaded from the\nlocal agent's environment while still operating against the same\nS3-backed paths.\n\nFour examples, two modes per language:\n  * VFS  - Mirage's Python-\n[…]\nthere is one source of truth for the\nin-sandbox behavior.\n\nShared bits live in remote_env.py / remote_env.ts: the git install spec\nfor mirage-ai, AWS env-var passthrough, and base/fuse Image builders.",
          "is_bot": false,
          "headline": "feat(examples): add Daytona sandbox examples (Python + TS, VFS + FUSE…",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-19T23:56:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "deafb05bba51e0c036066753f0bacfac77d373a5",
          "body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/v4...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n  dependency-version: '\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/setup-node from 4 to 6 (#67)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-19T21:20:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "870016c5b45235bf9aa790c4ddf02825a61363fa",
          "body": "* feat(utils): add stream/bytes conversion helpers\n\n* feat(commands): add generic cat as async iterator\n\n* refactor(commands): ram cat wrapper uses generic\n\n* test(commands): expand generic cat coverage; fix $ on trailing partial line\n\nOld _number_lines_stream had loose tests that missed three POSIX\n[…]\nxed-line-ending, and trailing-whitespace hooks.\n\nAlso fix tests/core/redis/test_find.py {maxdepth, mindepth} that\nasserted the previously-buggy depth math (matches the existing\nram/disk test updates).",
          "is_bot": false,
          "headline": "refactor(commands): generic dedup + cross-backend integ harness (#68)",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-19T21:03:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9b43e45bf2169f68b1928bab5c74ffd08f77dbc9",
          "body": "* feat(s3): add key_prefix for multi-tenant resource scoping\n\nAdds an opt-in `key_prefix` (Python) / `keyPrefix` (TypeScript) config\nfield to `S3Resource`. When set, all operations (read, write, list,\nglob, stat, copy, rename, delete, etc.) transparently scope to that\nbucket subpath. Agent-facing pa\n[…]\nKey/s3Prefix/stripKeyPrefix\nbecome one-line delegations that hide the config-attribute extraction\nfrom callers. No behavior change.\n\n---------\n\nCo-authored-by: Zecheng Zhang <zechengzhang97@gmail.com>",
          "is_bot": false,
          "headline": "feat(s3): add key_prefix for multi-tenant resource scoping (#60)",
          "author_name": "Goktug Gumus",
          "author_login": "Goktug",
          "committed_at": "2026-05-18T02:33:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7e51a2cfcf5e5dcb9cb8ec7bbb7f7c9848df0eb5",
          "body": "Mirror the path filter pattern already used by test_python.yml and\ntest_typescript.yml so docs-only and unrelated PRs don't burn runner\nminutes on test_cli.yml and infra-example.yml. Each workflow now\ntriggers only when its own YAML changes, or when the code paths it\nexercises change:\n\n- test_cli.yml:   python/**, typescript/**, the workflow itself.\n- infra-example.yml: examples/**, python/**, typescript/**, itself.",
          "is_bot": false,
          "headline": "ci: skip CLI and Examples workflows on no-code changes (#65)",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-17T23:07:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "02bb3f1515cb5ef1ee07e2ea7102d078a170ad88",
          "body": "Covers the three MIRAGE_AUTH_MODE values (local, token, jwt), the env\nreference, and curl probes against the daemon at 127.0.0.1:8765. Wired\ninto the Learn group in docs.json.",
          "is_bot": false,
          "headline": "docs(home/learn): add Daemon Auth page (#64)",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-17T23:03:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3774df3ac4382b5521523b21aa13dd528bfb3b6",
          "body": "* feat(server): three-mode bearer/JWT auth (local | token | jwt)\n\nAdds server-side authentication enforcement on the Mirage daemon\n(Python + TypeScript). The CLI already sent `Authorization: Bearer\n<token>`; until now the server ignored it. Resolves the explicit\n\"out of scope\" follow-up flagged in P\n[…]\ne.py,\nand test_storage.py. Rewording/short variable rename brought them\nwithin the limit, then yapf and prettier reformatted the rest of the\nauth surface to match canonical style. No semantic changes.",
          "is_bot": false,
          "headline": "feat(server): three-mode bearer/JWT auth (local | token | jwt) (#63)",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-17T22:42:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4f863002712a4e4046cbdc9b7f8755b4adc03ccc",
          "body": null,
          "is_bot": false,
          "headline": "Update",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-17T11:05:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "37f6cf6ef2b48d4bbd1ee54afecd15b2c99368bc",
          "body": "… rebinding (#58)\n\n* fix(server): validate Host header on the daemon to defend against DNS rebinding\n\nThe Mirage daemon binds to 127.0.0.1:8765 by default and ships with no\nHost-header validation, no CORS allowlist, and no server-side\nauthentication. A page the user visits can use DNS rebinding to m\n[…]\nough of\nexamples/python/cross/README.md against both Python and TS daemons.\n\n---------\n\nCo-authored-by: aeonframework <aeon-bot@aeon.framework>\nCo-authored-by: Zecheng Zhang <zechengzhang97@gmail.com>",
          "is_bot": false,
          "headline": "fix(server): validate Host header on the daemon to defend against DNS…",
          "author_name": "@aaronjmars",
          "author_login": "aaronjmars",
          "committed_at": "2026-05-17T10:40:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e7397a1b1eb212634d7e4d57c974aeafa0ef9d9c",
          "body": "…elision (#57)\n\n* test(mongodb): seed mirage_test with BSON-rich fixtures\n\nAdds scripts/seed_mongodb_test.py creating a deterministic mirage_test DB:\n- bson_types: every BSON type (ObjectId, Date, Decimal128, Binary, Regex,\n  Timestamp, Int64, nested docs, mixed-type arrays)\n- heterogeneous: 500 doc\n[…]\nsts cache key to keep under 80 cols (flake8 E501)\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mongodb): streaming reads, schema.json, nested layout, tail -f, …",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-17T10:18:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2dce26b2dd93505c0164ce444bcf6f4e43d3810e",
          "body": "…ams) (#55)\n\n* refactor(py/discord): layered core (paginate, entry, formatters, streams)\n\nBrings Discord to parity with Slack's PR #46 refactor. Pure refactor with\nno VFS layout changes - same paths, same outputs, just cleaner internals.\n\nNew modules:\n  - core/discord/paginate.py: after_id_pages (sn\n[…]\n_Server__G1')\n\nRename to \"My Server__G1\" with a space, matching the new\npath_safe_name behavior. Full pnpm -r test now passes (mirage-core\n2644, mirage-node 1269, browser/agents/server/cli all green).",
          "is_bot": false,
          "headline": "refactor(py/discord): layered core (paginate, entry, formatters, stre…",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-17T06:07:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "51902efb3a46261df7a7ee61d0b5a80f030f857b",
          "body": "…EN hint (#50)\n\nWhen the native search push-down (search.messages / search.files) fails -\ntypically because the configured token is a bot token (xoxb-) without\nsearch:read scope - slack grep / rg now emit a stderr hint and fall back\nto per-file scanning. Mirrors the Python warn-and-fallback pattern.\n[…]\ns target (was previously messages-only).\n- search_pushdown_fallback.test.ts: 2 regression tests guarding the\n  stderr hint for both grep and rg.\n\n2635 core tests pass (+2 new). Lint + typecheck clean.",
          "is_bot": false,
          "headline": "feat(ts/slack/grep|rg): search push-down fallback with SLACK_USER_TOK…",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-16T01:12:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3bb934c141e4904909dd291c98a6943fa9be3e01",
          "body": "The fs_monkey TS test asserts exact basenames\n(fs_monkey.test.ts:76):\n\n    expect((await fs.promises.readdir('/data')).sort()).toEqual(['a.txt', 'b.txt'])\n\nThe Python equivalent only asserted len(entries) == 2, which is why\nthe basename-vs-full-path regression slept since v0.0.1-alpha.1 — the\ntest p\n[…]\names or full paths. PR #52\nfixed the implementation but kept the loose count assertion.\n\nTighten both test_listdir and test_sys_modules_listdir to assert the\nexact basenames, matching the TS contract.",
          "is_bot": false,
          "headline": "test(py): assert listdir basenames (mirror TS contract) (#54)",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-16T01:08:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f5ab3b8609156b581b62eec5d307eb1e6e1b5b05",
          "body": "…mmand (#53)\n\npython3 was hard-branched in execute_node (py & ts), bypassing the\nregular command dispatch. Move it to a registered general command\nin commands/builtin/general/python.{py,ts} so users can shadow it\nthe same way they would curl or grep (e.g. route to E2B / Modal /\nDocker / a custom run\n[…]\nhub/workflows/infra-example.yml\n  runs 1 py + 5 ts examples and greps for the exact lines that would\n  have failed during the regression (['alpha', 'beta'] is grepped in\n  three independent examples).",
          "is_bot": false,
          "headline": "refactor(py+ts): python3 from shell builtin to overridable general co…",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-15T20:07:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c1feb2f086004d3d5c9d840cb780864a3109d6cd",
          "body": "os_patch.listdir was passing through ops.readdir output verbatim, which\nis full paths by the Python convention (e.g. /slack/channels/general__...).\nThat violates the stdlib os.listdir(path) contract (returns basenames)\nand silently broke any normal caller doing os.path.join(dir, name).\n\nStrip to bas\n[…]\nfuse/fs.py:161). Internal\nOps/FUSE consumers remain unaffected.\n\nAlso fix slack_vfs.py example which assumed basenames (so the dates\nlisting came back empty and session observer paths were corrupted).",
          "is_bot": false,
          "headline": "fix(py): os.listdir patch returns basenames (stdlib parity) (#52)",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-15T20:02:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7eda06bb0548e7e3ee9b61de41c8c6e9712109df",
          "body": "…t, soft errors) (#49)\n\n* refactor(ts/slack): align with Python (layered core, nested VFS layout, soft errors)\n\nBrings the TypeScript Slack provider to parity with Python's PR #46 (layered\ncore) and PR #48 (bug fixes + regression tests).\n\nLayered core (mirrors Python):\n  - paginate.ts: cursorPages +\n[…]\n> 0.\n    Documents multi-level glob (path/*/file) as a known limitation.\n  - slack_vfs.ts / slack_fuse.ts: read /<date>/chat.jsonl instead of\n    /<date>.jsonl.\n\n* style(ts/slack): prettier formatting",
          "is_bot": false,
          "headline": "refactor(ts/slack): align with Python (layered core, nested VFS layou…",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-15T18:02:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "80ad3bba9c76de30d648a7e8be7b38dba1466ffc",
          "body": "…nel (#48)\n\nTwo bugs surfaced when running the slack example end-to-end:\n\n1. `ls` (no args) after `cd /slack/...` returned empty. The fallback\n   in `slack/ls.py` rebuilt a `PathSpec` from `cwd.original` without\n   preserving `cwd.prefix`, so readdir treated the mount-prefix segment\n   as a containe\n[…]\nern` and everything else in `directory`, so any intermediate `*`\nends up inside the directory and readdir can't expand it. The example\ndocuments this and is set up to detect if it ever starts working.",
          "is_bot": false,
          "headline": "fix(slack): preserve mount prefix on ls no-args; tolerate not_in_chan…",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-15T06:45:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "abfe6ef6478bb2b5819b6032eee1a846b3e2cddd",
          "body": "* feat(slack): cursor_pages + offset_pages generic paginator helpers\n\n* fix(slack/paginate): tighten cancellation test; simplify cursor expr\n\n* refactor(slack): channels.py uses paginate.cursor_pages; adds stream variants\n\n* refactor(slack): users.py uses paginate.cursor_pages; adds stream variant\n\n\n[…]\ns.\n\nThe vestigial _fetch_messages_for_day wrapper is removed; test patches\nupdated to target the real fetch_messages_for_day directly.\n\n* style(slack): apply yapf reformatting and tighten line lengths",
          "is_bot": false,
          "headline": "refactor(slack): layered core (paginate → fetchers → formatters) (#46)",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-15T06:11:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "14df7e7c7a4ba3f0dbeee17fd48ce4cbf18771dd",
          "body": "…3) (#47)\n\ngrep -rEn pattern / (or .) returned exitCode=1 even when matches were\npresent in stdout, because the fan-out traversal merges per-mount IOs,\nthe merged result's _stream_source pointed at the last sub-IO (typically\na non-matching descendant mount like /.sessions or /dev with exit 1),\nand a\n[…]\nsetter pair\n\nAdds regression coverage:\n  - 2 unit tests per side (explicit overwrite + chain-of-merges)\n  - 7 end-to-end tests per side (issue case, negative case,\n    if/then/fi, &&, || on grep -r /)",
          "is_bot": false,
          "headline": "fix(io): explicit exit_code wins over stream_source mirror (closes #4…",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-15T06:03:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7e9d136547852d348c10b581fab90ba079f6143e",
          "body": "* fix(slack): add --page/--count pagination and surface missing scopes (#31)\n\nslack-search returned the first 20 matches with no way to reach pages\n21..N even though Slack's response advertised them. Add --count (1..100)\nand --page (>=1) flags in both Python and TypeScript so callers can\nwalk pagina\n[…]\ncount/--page flags\n\nEmpty help table was called out in the original issue. With descriptions,\n`slack-search --help` now shows what each flag does instead of leaving\ncallers to guess from the API docs.",
          "is_bot": false,
          "headline": "fix(slack): paginate slack-search and surface missing scopes (#31) (#45)",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-14T20:41:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e469824badfedef1673e889d5b05ca29302501b2",
          "body": "… (#42)\n\n* feat(ts): snapshot+replay drift detection and revision pinning for S3\n\nPorts the Python design to TypeScript. Matches the architectural shape\nestablished in #41 — pin state lives on Mount, drift state is a\nqueued list of (mount, path, expected_fingerprint) tuples, fingerprint\nand revision\n[…]\n load serves original bytes after\n  upstream mutates.\n\nTests: +56 targeted tests; 2,569 total core tests pass.\n\n* fix(ts): satisfy eslint — optional chain, drop non-null assertion, prune unused import",
          "is_bot": false,
          "headline": "feat(ts): snapshot+replay drift detection and revision pinning for S3…",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-14T06:36:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c39b14e24243076a7f917300674a50ac21134753",
          "body": "…s (#41)\n\nTwo related changes against the snapshot+replay design landed in #32:\n\n1) Record fingerprint and revision at read time (race fix). The\n   previous capture path did a live stat per recorded read at snapshot\n   time, which races with concurrent upstream writes: if the object\n   moved between\n[…]\nests pass against mirage-ai-test\n  (versioning ON), including the race regression test\n  test_live_pin_records_agent_version_not_snapshot_time_version.\n* pre-commit --all-files: all Python hooks pass.",
          "is_bot": false,
          "headline": "refactor(snapshot): record fp/rev on OpRecord; pin via Mount.revision…",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-14T04:45:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "782ac50dbe23b27a90f1e71d3191cbe96bf76a14",
          "body": "* feat(py): snapshot drift detection + version pinning (closes #15)\n\nCaptures per-touched-path fingerprints (ETag, plus VersionId when the\nbackend supports versioning) at snapshot time. On load, paths with a\nVersionId pin reads to the exact recorded version; paths without one\neager-check live finger\n[…]\nn as 📝 TODO; that was wrong.\n\n* docs(snapshot): drop live-only section from support matrix\n\n* docs(snapshot): drop manifest-format-break caveat\n\n* docs(snapshot): plain-english first-op latency caveat",
          "is_bot": false,
          "headline": "feat(py): snapshot drift detection + version pinning (closes #15) (#32)",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-14T01:41:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9807ee8b831edc45580ef4916ad87f006e140a6e",
          "body": "…ters\n\nSplits the combined Test workflow into two so each runtime runs only\nwhen its own code changes. Path filters: python/** for the python\nworkflow, typescript/** for the typescript workflow (plus each\nworkflow file itself, so changes to the CI config still trigger).\n\nThe import-isolation matrix job is python-only and moves with the\npython workflow.\n\nNo content changes to any step; same steps, same images, same actions.",
          "is_bot": false,
          "headline": "ci: split test.yml into python and typescript workflows with path fil…",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-13T03:43:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "78fe39c68f60c39e9340dec588ab394411e399ea",
          "body": "* fix(cli): propagate inner exit code on execute and job wait/get (#29)\n\nBoth the Python and TypeScript CLIs were exiting 0 regardless of the\nwrapped command's exit code, breaking shell composition (set -e, &&, ||,\n$?). The daemon already returned the correct exit code in the JSON\npayload; only the \n[…]\node-gyp before pnpm install in CLI smoke workflow\n\n@zkochan/fuse-native has an install script that invokes node-gyp,\nwhich isn't on the default ubuntu-latest image. Mirrors the existing\ntest.yml step.",
          "is_bot": false,
          "headline": "fix(cli): propagate inner exit code on execute and job wait/get (#39)",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-13T03:41:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "181d08c7de8b97141ffe4ff3ad441823ac1998be",
          "body": null,
          "is_bot": false,
          "headline": "chore: symlink agents instructions",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-12T13:55:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c28241d054b6a4661d2f799ba0c6ddd914ab0ba",
          "body": null,
          "is_bot": false,
          "headline": "docs: add citation metadata (#38)",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-12T13:27:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea01c5bafb3c3907808b2bd53614293abc403583",
          "body": "…#12)\n\n* fix(ls): add trailing newline to output for POSIX compliance\n\n- Fix ls command output to include trailing newline\n- Ensures wc -l correctly counts all lines\n- Applies to both S3 and RAM resources\n- Follows Unix text file standard (POSIX)\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <norepl\n[…]\n routing and ls -l -1 override behavior in both\nPython and TS.\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nCo-authored-by: Zecheng Zhang <zechengzhang97@gmail.com>",
          "is_bot": false,
          "headline": "feat(ls): improve ls command with -1 parameter and POSIX compliance (…",
          "author_name": "jialin li",
          "author_login": null,
          "committed_at": "2026-05-12T13:17:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "582770544110cd16f4991d9530d2b0f4b60771ba",
          "body": "* chore(deps): bump pnpm/action-setup from 4 to 6\n\nBumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 4 to 6.\n- [Release notes](https://github.com/pnpm/action-setup/releases)\n- [Commits](https://github.com/pnpm/action-setup/compare/v4...v6)\n\n---\nupdated-dependencies:\n- dependency-n\n[…]\n------\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Zecheng Zhang <zechengzhang97@gmail.com>",
          "is_bot": true,
          "headline": "chore(deps): bump pnpm/action-setup from 4 to 6 (#37)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T12:07:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f55945511e5bdce58e4a06cc53f767100ac8c7d3",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): bump actions/setup-python from 5 to 6 (#36)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T11:35:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5b50a5c6bfa65f1d8bd41fc79bad57e07767cb8",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v4...v6)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n  dependency-version: '6'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/checkout from 4 to 6",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T11:35:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ec5a371c8554353a834f0cb71212821d7588e079",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): bump astral-sh/setup-uv from 4 to 7 (#34)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T11:34:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "613f4f38fe72c6b977ebb4ffd1e5cb63aa6a2746",
          "body": "…ents\n\nci: dependabot and bump gh actions",
          "is_bot": false,
          "headline": "Merge pull request #26 from milosveljkovic/git-workflows-nit-improvem…",
          "author_name": "Zecheng Zhang",
          "author_login": "zechengz",
          "committed_at": "2026-05-12T05:34:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 0,
      "commits_last_year": 192,
      "latest_release_at": null,
      "latest_release_tag": null,
      "releases_from_tags": false,
      "days_since_last_push": 4,
      "active_weeks_last_year": 7,
      "days_since_latest_release": null,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": false,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": null,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "mirage-ai",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "ai-agents",
            "filesystem",
            "vfs",
            "fuse",
            "s3",
            "google-drive",
            "slack",
            "agent-tools",
            "shell",
            "rag",
            "Development Status :: 3 - Alpha",
            "Intended Audience :: Developers",
            "Operating System :: MacOS :: MacOS X",
            "Operating System :: POSIX :: Linux",
            "Programming Language :: Python :: 3",
            "Programming Language :: Python :: 3.11",
            "Programming Language :: Python :: 3.12",
            "Topic :: Scientific/Engineering :: Artificial Intelligence",
            "Topic :: Software Development :: Libraries :: Python Modules",
            "Topic :: System :: Filesystems"
          ],
          "ecosystem": "pypi",
          "matches_repo": false,
          "registry_url": "https://pypi.org/project/mirage-ai/",
          "is_deprecated": false,
          "latest_version": "0.0.3",
          "repository_url": "https://github.com/strukto-ai/mirage",
          "versions_count": 7,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 3919,
          "first_published_at": "2026-05-06T17:18:34.004403Z",
          "latest_published_at": "2026-06-30T09:47:48.335411Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 21
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "examples/typescript/browser/tsconfig.json",
        "examples/typescript/tsconfig.json",
        "typescript/packages/agents/tsconfig.json",
        "typescript/packages/browser/tsconfig.json",
        "typescript/packages/cli/tsconfig.json",
        "typescript/packages/core/tsconfig.json",
        "typescript/packages/node/tsconfig.json",
        "typescript/packages/server/tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 94568,
      "source_files_sampled": 5548,
      "oversized_source_files": 2,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 5393
    },
    "dependencies": {
      "manifests": [
        "python/pyproject.toml",
        "typescript/package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 48,
        "assessed_package": "pypi:mirage-ai@0.0.3",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm",
        "pypi"
      ],
      "dependencies": [
        {
          "name": "aiofiles",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=24.1.0"
        },
        {
          "name": "aiohttp",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=3.13.3"
        },
        {
          "name": "fastapi",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.135.1"
        },
        {
          "name": "httpx",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.28.1"
        },
        {
          "name": "python-multipart",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.0.20"
        },
        {
          "name": "numpy",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=2.4.3"
        },
        {
          "name": "orjson",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=3.11"
        },
        {
          "name": "pyyaml",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=6.0.3"
        },
        {
          "name": "python-dotenv",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=1.2.2"
        },
        {
          "name": "tree-sitter",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.25.2"
        },
        {
          "name": "tree-sitter-bash",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.25.1"
        },
        {
          "name": "typer",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.12.0"
        },
        {
          "name": "uvicorn",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.41.0"
        },
        {
          "name": "pypdfium2",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=5.7.0"
        },
        {
          "name": "pillow",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=12.2.0"
        },
        {
          "name": "jq",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=1.11.0"
        },
        {
          "name": "mfusepy",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=1.0.0"
        },
        {
          "name": "pyjwt",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=2.10"
        },
        {
          "name": "dulwich",
          "manifest": "python/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=1.2.4"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 22,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "zechengz",
          "commits": 122,
          "avatar_url": "https://avatars.githubusercontent.com/u/21955420?v=4"
        },
        {
          "type": "User",
          "login": "alexbruf",
          "commits": 20,
          "avatar_url": "https://avatars.githubusercontent.com/u/2868640?v=4"
        },
        {
          "type": "User",
          "login": "milosveljkovic",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/47954575?v=4"
        },
        {
          "type": "User",
          "login": "aaronjmars",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/61592645?v=4"
        },
        {
          "type": "User",
          "login": "Goktug",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/534426?v=4"
        },
        {
          "type": "User",
          "login": "manastm",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/54597052?v=4"
        },
        {
          "type": "User",
          "login": "puneetdixit200",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/236133619?v=4"
        },
        {
          "type": "User",
          "login": "sonhmai",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/14060682?v=4"
        }
      ],
      "contributors_sampled": 8,
      "top_contributor_share": 0.808
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "pre-commit.yml",
        "publish-core.yml",
        "test_cli.yml",
        "test_integ.yml",
        "test_integ_s3.yml",
        "test_python.yml",
        "test_typescript.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        "eslint.config.js"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": true
    },
    "security_signals": {
      "lockfiles": [
        "pnpm-lock.yaml",
        "uv.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/29 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 4 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "199 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "d1bab6ef0fdb63a9640ccde8a7202affe76f3dac",
        "ran_at": "2026-07-21T21:30:34Z",
        "aggregate_score": 4.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/Handbook-Enterprises/strukto-mirage-fork",
    "host": "github.com",
    "name": "strukto-mirage-fork",
    "owner": "Handbook-Enterprises"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "at_risk",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 45,
      "inputs": {
        "security": 53,
        "vitality": 36,
        "community": 12,
        "governance": 49,
        "engineering": 72
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "at_risk",
        "name": "Vitality",
        "value": 36,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 59,
            "inputs": {
              "commits_last_year": 192,
              "human_commit_share": 0.95,
              "days_since_last_push": 4,
              "active_weeks_last_year": 7
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 4 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "7/52 weeks with commits",
                "points": 4.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "192 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 192
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "critical",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "releases_count": 0
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "no releases published",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_releases_published",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "no releases",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_releases",
                    "params": {}
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "no releases",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_releases",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 12,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "has_readme": false,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 49,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 34,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 8,
              "top_contributor_share": 0.808
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 81% of commits",
                "points": 4.3,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 81
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "8 contributors",
                "points": 10.8,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 4 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "merged_prs": 22,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "22/22 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 22,
                      "decided": 22
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/29 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 43,
            "inputs": {
              "followers": 1,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "Handbook-Enterprises",
              "public_repos": 8,
              "account_age_days": 699
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "1 followers of Handbook-Enterprises",
                "points": 2.2,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 1,
                      "login": "Handbook-Enterprises"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "8 public repos, account ~1 yr old",
                "points": 10.8,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 8
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 1
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 72,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 94,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": true
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "7 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "eslint.config.js",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.js"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 9.6,
                "status": "met",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": "https://www.strukto.ai/mirage",
              "has_readme": false,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://www.strukto.ai/mirage",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 53,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 41,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 4.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/29 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 4 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "199 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:mirage-ai@0.0.3 runtime dependency closure — what installing the published package pulls in — 48 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "pypi:mirage-ai@0.0.3",
                  "assessed": 48
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 48,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 48,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 9
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 75,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.989,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 5393
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "94 of 95 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 94,
                      "sampled": 95
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "pnpm-lock.yaml",
                "uv.lock"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "examples/typescript/browser/tsconfig.json",
                "examples/typescript/tsconfig.json",
                "typescript/packages/agents/tsconfig.json",
                "typescript/packages/browser/tsconfig.json",
                "typescript/packages/cli/tsconfig.json",
                "typescript/packages/core/tsconfig.json",
                "typescript/packages/node/tsconfig.json",
                "typescript/packages/server/tsconfig.json"
              ],
              "agent_commit_share": 0.16,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.05
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "eslint.config.js",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.js"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "examples/typescript/browser/tsconfig.json, examples/typescript/tsconfig.json, typescript/packages/agents/tsconfig.json, typescript/packages/browser/tsconfig.json, typescript/packages/cli/tsconfig.json, typescript/packages/core/tsconfig.json, typescript/packages/node/tsconfig.json, typescript/packages/server/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples/typescript/browser/tsconfig.json, examples/typescript/tsconfig.json, typescript/packages/agents/tsconfig.json, typescript/packages/browser/tsconfig.json, typescript/packages/cli/tsconfig.json, typescript/packages/core/tsconfig.json, typescript/packages/node/tsconfig.json, typescript/packages/server/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "16 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 16,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "5 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 5,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 94568,
              "source_files_sampled": 5548,
              "oversized_source_files": 2
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "2/5548 source files over 60KB",
                "points": 55,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 5548,
                      "oversized": 2
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Community profile unavailable",
    "pypi package 'mirage-ai' points at a different repository (https://github.com/strukto-ai/mirage); excluded from ecosystem scoring",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-21T21:30:51.186599Z",
  "schema_version": "0.23.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/h/Handbook-Enterprises/strukto-mirage-fork.svg",
  "full_name": "Handbook-Enterprises/strukto-mirage-fork",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}