HiAi-gg / hiai-opencode

Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Die Installation von npm:@hiai-gg/hiai-opencode@0.4.10 zieht 34 Pakete nach sich, direkt und transitiv: 0 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.

Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

{
  "data": {
    "repo": {
      "topics": [
        "ai-agents",
        "multi-agent-systems",
        "opencode",
        "opencode-plugin",
        "hiai",
        "agent-browser",
        "anthropic",
        "browser-automation",
        "context7",
        "design-systems",
        "firecrawl",
        "lsp",
        "mcp",
        "model-context-protocol",
        "openai",
        "orchestration",
        "stitch",
        "typescript",
        "multi-agent",
        "caveman"
      ],
      "is_fork": false,
      "size_kb": 15722,
      "has_wiki": false,
      "homepage": "https://github.com/HiAi-gg/hiai-opencode#readme",
      "languages": {
        "Shell": 13005,
        "Python": 2914,
        "JavaScript": 57455,
        "TypeScript": 849014
      },
      "pushed_at": "2026-07-18T15:54:20Z",
      "created_at": "2026-04-24T15:20:15Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-18T15:54:28Z",
      "description": "Multi-agent orchestration plugin for OpenCode. 10 configurable model slots, 30 hooks, memory search, LSP diagnostics, agent-browser integration, completion controller, auto dream/distill memory consolidation. One prompt to set up and run.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "main",
      "license_spdx_raw": "NOASSERTION",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://hiai.gg",
      "name": "HiAi.gg",
      "type": "Organization",
      "login": "HiAi-gg",
      "company": null,
      "location": null,
      "followers": 7,
      "avatar_url": "https://avatars.githubusercontent.com/u/276696408?v=4",
      "created_at": "2026-04-16T18:23:47Z",
      "is_verified": null,
      "public_repos": 10,
      "account_age_days": 98
    },
    "license": {
      "state": "custom",
      "spdx_id": null,
      "raw_spdx": "NOASSERTION",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.4.10",
          "kind": "patch",
          "published_at": "2026-07-18T15:54:57Z"
        },
        {
          "tag": "v0.4.9",
          "kind": "patch",
          "published_at": "2026-07-18T15:52:28Z"
        },
        {
          "tag": "v0.4.8",
          "kind": "patch",
          "published_at": "2026-07-18T15:42:46Z"
        },
        {
          "tag": "v0.4.7",
          "kind": "patch",
          "published_at": "2026-07-17T19:50:29Z"
        },
        {
          "tag": "v0.4.6",
          "kind": "patch",
          "published_at": "2026-07-16T17:16:12Z"
        },
        {
          "tag": "v0.4.4",
          "kind": "patch",
          "published_at": "2026-07-16T17:00:20Z"
        },
        {
          "tag": "v0.4.3",
          "kind": "patch",
          "published_at": "2026-07-14T20:37:19Z"
        },
        {
          "tag": "v0.4.2",
          "kind": "patch",
          "published_at": "2026-07-14T14:51:10Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2026-07-13T21:24:32Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-07-13T16:56:09Z"
        },
        {
          "tag": "v0.3.17",
          "kind": "patch",
          "published_at": "2026-07-13T16:47:36Z"
        },
        {
          "tag": "v0.3.16",
          "kind": "patch",
          "published_at": "2026-07-13T16:43:15Z"
        },
        {
          "tag": "v0.3.15",
          "kind": "patch",
          "published_at": "2026-07-13T16:39:30Z"
        },
        {
          "tag": "v0.3.14",
          "kind": "patch",
          "published_at": "2026-07-13T16:35:22Z"
        },
        {
          "tag": "v0.3.13",
          "kind": "patch",
          "published_at": "2026-07-13T15:34:32Z"
        },
        {
          "tag": "v0.3.12",
          "kind": "patch",
          "published_at": "2026-07-13T15:18:51Z"
        },
        {
          "tag": "v0.3.11",
          "kind": "patch",
          "published_at": "2026-07-13T15:13:19Z"
        },
        {
          "tag": "v0.3.10",
          "kind": "patch",
          "published_at": "2026-07-13T15:08:50Z"
        },
        {
          "tag": "v0.3.9",
          "kind": "patch",
          "published_at": "2026-07-13T14:57:03Z"
        },
        {
          "tag": "v0.3.8",
          "kind": "patch",
          "published_at": "2026-07-13T14:38:28Z"
        },
        {
          "tag": "v0.3.7",
          "kind": "patch",
          "published_at": "2026-07-13T14:27:43Z"
        },
        {
          "tag": "v0.3.6",
          "kind": "patch",
          "published_at": "2026-07-12T22:17:25Z"
        },
        {
          "tag": "v0.3.5",
          "kind": "patch",
          "published_at": "2026-07-12T09:12:01Z"
        },
        {
          "tag": "v0.3.4",
          "kind": "patch",
          "published_at": "2026-07-09T20:24:11Z"
        },
        {
          "tag": "v0.3.3",
          "kind": "patch",
          "published_at": "2026-07-09T20:19:21Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2026-07-09T20:00:35Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2026-07-09T19:49:41Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-07-09T19:12:25Z"
        },
        {
          "tag": "v0.2.9",
          "kind": "patch",
          "published_at": "2026-06-12T20:31:25Z"
        },
        {
          "tag": "v0.2.8",
          "kind": "patch",
          "published_at": "2026-06-10T18:23:27Z"
        },
        {
          "tag": "v0.2.7",
          "kind": "patch",
          "published_at": "2026-06-10T12:27:04Z"
        },
        {
          "tag": "v0.2.6",
          "kind": "patch",
          "published_at": "2026-06-10T10:14:44Z"
        },
        {
          "tag": "v0.2.5",
          "kind": "patch",
          "published_at": "2026-06-09T11:31:35Z"
        },
        {
          "tag": "0.2.2",
          "kind": "patch",
          "published_at": "2026-05-11T22:41:24Z"
        },
        {
          "tag": "up",
          "kind": "other",
          "published_at": "2026-04-24T16:44:21Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "6bb4cfdb6e86765aa168c4187a2aaf95475b3efb",
          "body": null,
          "is_bot": false,
          "headline": "fix: skip POSIX signal assertion on Windows",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-18T15:54:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f0a20c1b1a02130be3cbfafa5e8c11593a12d1cc",
          "body": null,
          "is_bot": false,
          "headline": "fix: make npm runner signal test portable on Windows",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-18T15:51:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc54c5b9aa3a234712c6e5e2b3c3bd8bf7ac9a24",
          "body": null,
          "is_bot": false,
          "headline": "chore(release): v0.4.8",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-18T15:33:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5e5e891bd32aa6235feb1d81aefb9dc48c5e462",
          "body": null,
          "is_bot": false,
          "headline": "fix: make npm-package-runner signal shutdown deterministic",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-18T15:02:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "277d07cfbdcfbeb34dff26d30781203ae3f969a0",
          "body": null,
          "is_bot": false,
          "headline": "fix: handle local npm package runner execution via node",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-18T14:03:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62c38b82bb3cf84a6d290c4e8e2f5ebee7d295f9",
          "body": "- patch bump 0.4.6 -> 0.4.7 (package.json)\n- CHANGELOG v0.4.7: TUI/output-leak hardening, completion-controller reason sanitization, hook error DTO, dream-distill burst guard, compaction noise reduction, CLI stderr routing, npm-package-runner JSON-RPC filtering\n- includes Phase 1 changes (src + assets)",
          "is_bot": false,
          "headline": "chore(release): v0.4.7",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-17T19:49:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b01708ee81205bdb712f34b80828a8c1d7e3dc32",
          "body": null,
          "is_bot": false,
          "headline": "fix: publish silent TUI tool output",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-16T17:15:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d3ae7d7d863b71316c46a8407c711227864303a",
          "body": null,
          "is_bot": false,
          "headline": "fix: keep tool output silent in tui",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-16T17:13:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9913dbcd5bbcd783c29adcb712b8cf56a42353e",
          "body": null,
          "is_bot": false,
          "headline": "fix: keep loop and session diagnostics out of TUI",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-16T16:57:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ffc64645ba26e4e601688c954be093d0b82c052b",
          "body": null,
          "is_bot": false,
          "headline": "fix: harden delegation and TUI logging",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-16T16:06:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca64ae753075feb3b300b7c3c8c926e497a667db",
          "body": "- Bob: DELEGATE→MUST DELEGATE, added MANDATORY COMPLETION GATE (Critic + Vision-for-UI)\n- Bob: \"delegate to Manager\" → \"MUST delegate to Manager\" (hard rule, no self-orchestration)\n- Plan config: block write/edit/apply_patch (was only bash/grep/glob/webfetch)\n- Plan prompt: write scope = .bob/plans/\n[…]\n*.md)\n- Manager: added Wave Concurrency Limits (max 7, drop to 4) + background_output pattern\n- Critic: added Mandatory Escalation Gate section\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "feat: align delegation prompts with target schema — 6 fixes",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-14T20:38:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "41324122b052d6a38b26b06870b6c619f0eeb72a",
          "body": "appendFileSync failed silently in Bun plugin context (log file stayed empty),\nand Bun's output buffering leaked the text into TUI stdout. Switched to\nopenSync + writeSync on a module-level fd — no buffering, no fallback to\nstdout. Tested: 991 pass.\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "fix(log): replace appendFileSync with raw fd — eliminates TUI leak",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-14T18:46:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bcce63a916edd28810ffccabeceb55c0e26ba7b4",
          "body": "Overrides console.log/warn/error at plugin init to catch spam from other\nplugins (e.g. opencode-dcp/DCP) that emit directly to stdout. All output\nnow routes through ~/.hiai-opencode/logs/hiai-opencode.log.\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "feat: global console guard — redirect ALL console output to file logger",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-14T17:47:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bfa84a1270b9541175ea69ae6b8bec0481bbee7c",
          "body": "…-start\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "release: v0.4.2 — file-based logger with silent fallback, bridge auto…",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-14T14:50:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba139605c8d71a65687ff6dd414122347c59efb5",
          "body": "Stderr also leaks into TUI rendering. Fall back to silent catch for file\nwrite failures. TUI sessions must be restarted to load updated plugin.\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "fix(log): remove stderr fallback, keep silent file-only logging",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-14T14:46:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4c89d7978757d9b47135b193d109b9650a67d4f",
          "body": "appendFileSync was failing inside Bun plugin context (log file remained empty)\nbut the empty catch {} masked the error. Added stderr fallback so errors\nare visible during debugging.\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "fix(log): add stderr fallback when file append fails silently",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-14T14:44:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ff636cbcb86af2190a11a6a8c141747f9392a83d",
          "body": "All spyOn(console, \"log\") → spyOn(logger, \"log\") in test files after\nswitching runtime to file-based logger. All 991 tests passing.\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "test: update console mocks to use file logger (logger.log/warn/error)",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-13T21:19:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74a185da9fad3409efc75448e2ba8cde724b03d8",
          "body": "…/logs/hiai-opencode.log)\n\nReplaced ~40 raw console.log/warn/error calls across plugin runtime code with a\nfile-based logger (src/util/log.ts). In TUI mode these were leaking through the\nrendering layer. CLI entry points (hiai-opencode CLI, up.mjs) run as separate\nprocesses and are unaffected.\n\nAlso added cline-bridge.mjs (parameterized bridge script) and bridge auto-start\nin up.mjs for headless opencode serve/web mode.\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "fix: redirect all plugin console output to file log (~/.hiai-opencode…",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-13T20:53:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b6ea6a92b86e201c0238ed7cf36cc6a27afbf5cf",
          "body": "Added a \"CLI — hiai-opencode\" section covering `up`/`down`/`restart`/\n`status` (opencode serve + web launch) with port/host overrides, plus the\ndiagnostic commands (doctor, mcp-status, export-mcp, diagnose, task-status).\nNotes that the cline bridge is an OpenCode provider, not a separate process.\n\nBumped to 0.4.0 (minor: new CLI surface).\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "docs(readme): document hiai-opencode CLI stack-management commands",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-13T16:55:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c41f9c71ebc456b09d0af8c19c4378b8416fbca1",
          "body": "hasCommand(binary) spawned the binary (e.g. pyright-langserver\nexits non-zero without --stdio), falsely reporting missing runtimes.\nAdded hasBinary() using `which` for presence checks; LSP loop\nnow uses it. Also fixes context7 check (npx -y) from prior commit.\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "fix(cli): doctor LSP check uses `which` for binary presence",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-13T16:46:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "03006f10938d8a51bf16294a7e92f1b8c337d02f",
          "body": "Added context7 (via npx -y) and agent-browser availability checks to\n`hiai-opencode doctor`, mirroring the Firecrawl auth check. context7\nships without a bin entry, so resolve through npx -y.\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "feat(cli): doctor checks context7 + agent-browser CLIs",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-13T16:42:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01ce1c411907fdbc2f76d0a3cb48c4a447e2f632",
          "body": "pyright-langserver exits non-zero on `--version` (it requires\n--stdio/--node-ipc), so the doctor falsely reported it missing.\nCheck binary presence instead.\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "fix(cli): doctor LSP check uses presence, not --version",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-13T16:38:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "069eb1d175791be231473af8a0f0d5f249fe64d6",
          "body": "loadConfig broke on the first candidate (the plugin's own bob.json at\nPLUGIN_ROOT, which shadowed the user's .opencode/bob.json due to\nan early `break`). Now it merges every user config (project + .opencode\n+ global) over DEFAULT_CONFIG, so cline-bridge model assignments in\n.opencode/bob.json actually apply on opencode restart.\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "fix(config): load ALL user bob.json files, not just plugin default",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-13T16:34:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31cbe503a84893656067eedfe14e5e4819a551b9",
          "body": "`hiai-opencode` with no args now starts opencode serve + web (same as `up`).\nAdded `restart` command (down then up). Updated usage text.\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "feat(cli): bare `hiai-opencode` launches stack + add `restart`",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-13T15:33:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a0f454534e060ce210de89eb27dca3706784807",
          "body": "The CLI entry assets/cli/hiai-opencode.mjs and up.mjs lacked the executable\nbit, causing \"Permission denied\" when invoked directly (e.g. via the\n~/.bun/bin/hiai-opencode symlink). npm preserves the git file mode, so the\npublished tarball also shipped non-executable bins.\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "chore(cli): mark bin scripts executable (chmod +x)",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-13T15:18:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8fb66eb66eb933f6b865a8aeaaf2a6707235ed3f",
          "body": "resolveOpencodeBinary uses spawnSync but only spawn was imported, causing\n\"spawnSync is not defined\" when running `hiai-opencode up` from the installed\npackage.\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "fix(cli): import spawnSync in up.mjs for opencode binary resolution",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-13T15:12:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aa88e03c6e564207f0fcd0d242243fe806b65b1f",
          "body": "New commands in the hiai-opencode CLI binary:\n- `up`   — launches `opencode serve` (headless) + `opencode web` (frontend)\n           as detached processes, tracks PIDs/ports in ~/.hiai-opencode/run\n- `down` — stops the spawned stack via saved PIDs\n- `status` — shows running serve/web processes and p\n[…]\nfrom opencode.jsonc but does\nnot mutate config. Ports default to 4096/4097 (override via --serve-port/\n--web-port or HIAI_OPENCODE_*_PORT env).\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "feat(cli): add `up`/`down`/`status` to manage opencode serve + web stack",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-13T15:10:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c5c2d5b8d07693094afe064f4da991fb3188b66f",
          "body": "…no tasks\n\nThe else-branch logged \"no incomplete tasks detected. Enable bob\ncompletion-controller...\" on every session.idle with zero incomplete tasks.\nSince opencode renders console.log as a system message at a random TUI position,\nthis flooded the interface on the common no-op path. Only log when there is\nactually something to continue.\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "fix(todo-continuation): stop logging hint on every idle session with …",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-13T14:56:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0a2c7a5f3207fae3a2655c536625b8d1dd70f41",
          "body": "Real opencode emits session.error properties.error as an object, not a string.\nCalling error.includes() threw \"error.includes is not a function\", which bubbled\nup as a session error and reset loop state. Coerce to string (JSON.stringify for\nobjects) before matching rate-limit patterns.\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "fix(model-fallback): coerce error to string before .includes check",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-13T14:37:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd0886777b65147677dd158bd76d73b632510ccd",
          "body": "Co-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "chore: bump version to 0.3.7",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-13T14:27:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61e135d8a3c6f5cfc5794b092f7d7fb10b7eb088",
          "body": "…guard against missing prompt\n\nDream/Distill prompts were loaded via readFileSync from src/features/dream-distill/*.txt at\nruntime. When the plugin ran from an npm-installed package (.txt files were not in the tarball),\nevery session.idle / session.created event threw ENOENT and flooded logs.\n\n- Con\n[…]\n are present in dist/index.js\n- Remove .txt from npm package (now bundled in JS)\n- Add regression tests for bundled prompts and interval gating\n\nCo-authored-by: CommandCodeBot <noreply@commandcode.ai>",
          "is_bot": false,
          "headline": "fix(dream-distill): bundle prompts as TS constants, persist lastRun, …",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-13T13:56:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b25f560351c771ce7af9d7d1a25b78b796b46f54",
          "body": "….md with real paths",
          "is_bot": false,
          "headline": "docs: remove stale hiai-opencode.json references, update CONTRIBUTING…",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-12T22:46:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9e976c90fcab8247aff07af48648baf0cf0ef5a",
          "body": "The plugin runtime (src/config.ts loadConfig) reads bob.json — that is the\nreal config users edit. The README/AGENTS/ARCHITECTURE previously pointed at\nhiai-opencode.json (a stale template with outdated models), and the README\nexample even shipped imaginary model IDs (anthropic/claude-sonnet-4.5,\nop\n[…]\nob.json\n- CLI candidateConfigPaths: now reads bob.json/bob.jsonc first (then falls\n  back to hiai-opencode.json for backward compat) so `hiai-opencode doctor`\n  inspects the same file the plugin loads",
          "is_bot": false,
          "headline": "fix(docs+cli): use bob.json (not hiai-opencode.json) as the config file",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-12T22:41:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "adfd4ea78dc4e8c67adaf2fbf3ef58d6a8a118cc",
          "body": null,
          "is_bot": false,
          "headline": "Update README.md",
          "author_name": "vlgalib",
          "author_login": "vlgalib",
          "committed_at": "2026-07-12T22:36:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f9263a26a27c9e624b540bff7f315f0ef70c4d6",
          "body": "Removed (18 files, ~3700 lines):\n- log.md (stale audit log from May 2026)\n- start.md (duplicated README install, outdated)\n- docs/ entire tree (quickstart, CONFIG, HOOKS, HOOK_TIMINGS, PERMISSIONS,\n  PORT-GUIDANCE, skill-discovery, migration, api, background-manager-persistence,\n  hooks-architecture\n[…]\n typecheck clean, package size 445 → 403 kB (-10%),\nfile count 225 → 209 (-16). Root docs now minimal and non-duplicative:\nREADME (product) + AGENTS (operators) + ARCHITECTURE (internals) + CHANGELOG.",
          "is_bot": false,
          "headline": "docs: rewrite README (marketing/SEO), trim AGENTS, remove redundant docs",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-12T22:28:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4474e905072d49d404c6ee1ed7fe438d44b109c2",
          "body": "…ened completion gates\n\nCLI:\n- add `bin` field so `hiai-opencode` is a real executable after npm install\n- doctor/mcp-status now exit non-zero on hard failures (CI-gateable)\n- replace jsonc-parser with native parseJsonc; lazy-load MCP SDK with fallback\n- fix agent roster in diagnostics (canonical sl\n[…]\n that actually exist\n\nRemoved dead code: mempalace.mjs, opencode_doctor.mjs, measure-prompts.ts\n\nTests: 986 pass (was 982). New: auto-export (10), circuit-breaker (7),\ncompaction gate-rehydration (4).",
          "is_bot": false,
          "headline": "v0.3.6: CLI bin, MCP cleanup, auto-export, live circuit breaker, hard…",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-12T22:16:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cd685bdc06bffebd863c27815e21dbe4310e7af0",
          "body": "…ompat",
          "is_bot": false,
          "headline": "fix(ci): path normalization via resolve().toLowerCase() for Windows c…",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-12T09:52:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b63732d6cdb9ec0529ef339142d6a9449ba76a6a",
          "body": "…n in worktree cleanup and tests",
          "is_bot": false,
          "headline": "fix(ci): use realpathSync.native for Windows 8.3 short-name resolutio…",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-12T09:43:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e36817b6b52c23cc3b63d179228013baad7aa5d8",
          "body": null,
          "is_bot": false,
          "headline": "fix(ci): align cleanup child resolution fallback with registered set",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-12T09:37:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ac0f4a4dd2e39e041f048ab66470fc86bfb6cb7",
          "body": null,
          "is_bot": false,
          "headline": "fix(ci): windows 8.3 short-name path canonicalization in worktree tests",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-12T09:28:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c0219e178d9569822c39d89bda2b62e0c2085e9e",
          "body": null,
          "is_bot": false,
          "headline": "fix(ci): windows path canonicalization in worktree and memory paths",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-12T09:11:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1967520cef84256d31a7fc8d07256afda679b1fe",
          "body": null,
          "is_bot": false,
          "headline": "fix(ci): realpathSync tmp dirs in workspace-adapter and worktree tests",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-12T09:04:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee786a185f0413aac1088575c280f5b6919f522f",
          "body": "…ry tests for macOS CI",
          "is_bot": false,
          "headline": "fix(ci): anchor /build/ in gitignore, realpathSync in worktree & memo…",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-12T00:01:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94d0728f589915f46c48ab797166cea6a904b628",
          "body": "… all clean",
          "is_bot": false,
          "headline": "fix(ci): 51 biome errors + config updates — lint/typecheck/test/build…",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-11T18:56:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c07f46964c86e00c7935de150cd21e3fc5caa8b3",
          "body": "… telemetry, docs\n\n- Schema validation fixes for hiai-opencode.schema.json\n- Hook improvements across all lifecycle hooks (closure-injector, context-window, quality-gate, etc.)\n- Constants and capabilities alignment\n- Telemetry enhancements\n- Documentation updates (CHANGELOG, ARCHITECTURE, AGENTS)\n- New features: shell-env, workspace-adapter, worktree, dream-distill\n- Comprehensive test coverage for all hooks and features\n- Workspace and worktree prompt libraries\n- Error handling module",
          "is_bot": false,
          "headline": "feat: v0.3.5 critical fixes — schema, hooks, constants, capabilities,…",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-11T17:12:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb66b4949ea275b29b53576b20f922e939b890c1",
          "body": null,
          "is_bot": false,
          "headline": "fix(release): 0.3.4 env checklist cleanup",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-09T20:23:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3524d6eec29c588b5bb8d918aaf3a3725e371a6",
          "body": null,
          "is_bot": false,
          "headline": "fix(release): 0.3.3 env config consistency",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-09T20:18:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75f2199c15cf5a1f5b9217af5aaa734d8d456268",
          "body": null,
          "is_bot": false,
          "headline": "fix(release): 0.3.2 docs and package cleanup",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-09T19:59:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a156a175392d37f8adf992a80939570627aa6a9c",
          "body": null,
          "is_bot": false,
          "headline": "fix(release): 0.3.1 docs and CI hotfix",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-09T19:49:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "acb9c034d272eb3ee621c82e75d1e400b5fa8d25",
          "body": null,
          "is_bot": false,
          "headline": "fix: post-release v0.3.0 hotfix — Windows test path + docs remediation",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-09T19:34:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f65aee7ae481a37cc02085f2e881526c8b59f99",
          "body": null,
          "is_bot": false,
          "headline": "fix(release): install sigstore module for npm --provenance",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-09T19:11:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "03b787bbab3b5ff6fae70db0ea398629f4551de1",
          "body": "- Clean-slate rewrite: unified BobPlugin orchestrator\n- 10 agents, 6 LSP tools, 14 agent-browser tools, Firecrawl, Memory, Sessions\n- 30+ hooks (loop, recovery, caveman, quality-gate, closure, compaction)\n- Caveman internal protocol\n- SQLite FTS5 BM25 memory backend\n- OpenTelemetry integration\n- OID\n[…]\nKING vs 0.2.9:\n- Data dir: ~/.hiai-bob/ → ~/.hiai-opencode/\n- Config dir: $XDG_CONFIG_HOME/hiai-bob/ → $XDG_CONFIG_HOME/hiai-opencode/\n- Removed: Playwright, design-systems/, prompt-templates/, craft/",
          "is_bot": false,
          "headline": "release: v0.3.0 — complete rewrite (plugin-bob architecture)",
          "author_name": "vlgalib",
          "author_login": null,
          "committed_at": "2026-07-09T19:10:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "eb6310bed5a669f8529b6ac08f5eb3e571631128",
          "body": "Fixes + features tested together in the working tree:\n\n- fix(reasoning): guarantee a {type:\"reasoning\"} part on every tool-call\n  assistant message so OpenAI-compatible reasoning providers (GLM/z.ai,\n  DeepSeek) stop rejecting delegated/multi-step turns with \"thinking is\n  enabled but reasoning_cont\n[…]\ner/critic/sub/researcher/writer/strategist prompt tweaks.\n- chore(build): run tsc via bun ./node_modules/typescript/bin/tsc for CI portability.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): 0.2.9",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-12T20:30:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "744bad18298e0236b449156085276e38322f6e86",
          "body": "…r routing\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(changelog): consolidate 0.2.8 — delegation completion + Sub/Code…",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-10T18:22:27Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "350ae7b7497067697b07411b935004079aa5ad3f",
          "body": "fix(bob): route simple tasks to Sub instead of always Coder",
          "is_bot": false,
          "headline": "Merge pull request #4 from HiAi-gg/fix/bob-sub-routing",
          "author_name": "vlgalib",
          "author_login": "vlgalib",
          "committed_at": "2026-06-10T18:20:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "465452a0a573de0899549cc9ba5a9c5bc62c9974",
          "body": "fix(background-agent): nested delegators (Manager) lose their delegated children",
          "is_bot": false,
          "headline": "Merge pull request #3 from HiAi-gg/fix/nested-delegation-completion",
          "author_name": "vlgalib",
          "author_login": "vlgalib",
          "committed_at": "2026-06-10T18:20:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c2d50cb449205668f4e599fd278be398e3c64f3",
          "body": "fix(delegation): stop \"Worker has been terminated\" crashes + release 0.2.8",
          "is_bot": false,
          "headline": "Merge pull request #2 from HiAi-gg/fix/delegation-stream-teardown",
          "author_name": "vlgalib",
          "author_login": "vlgalib",
          "committed_at": "2026-06-10T18:20:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f254827fd25e8c8f49a4ceff85db8dfd4bbbc43f",
          "body": "…on framing)\n\nManager already had a Sub/Coder rule but the 'NEVER default to Coder' note was a\nsoft trailing line, so it still over-routed simple tasks to Coder. Make the\nper-task classification MANDATORY, add an explicit default-bias-to-Sub, and frame\nmis-tiering as a delegation failure (consistent\n[…]\nhe system).\nWhen unsure, dispatch to Sub first and escalate to Coder only on failure.\nRegenerated manager prompt snapshot + byte/line baseline.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(manager): harden Sub-vs-Coder routing gate (prefer Sub, prohibiti…",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-10T17:39:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "814b233007f3ad923625ed4ca8f2ce5892b4e2e5",
          "body": "…atch\n\nBob's prompt had no positive rule for picking Sub on simple tasks — Sub appeared\nonly in the failover chain, while Step 3 lumped \"Coder/Sub\" together. So Bob\ndefaulted every bounded edit to Coder (Manager already has this rule; Bob did\nnot). Add an Executor selection block mirroring Manager: \n[…]\n; complex/multi-file -> Coder (category=\"deep\");\nNEVER default to Coder for simple tasks. Regenerated bob prompt snapshot +\nbyte/line baseline.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(bob): add explicit Sub-vs-Coder executor routing for initial disp…",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-10T17:34:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a24790fda06978e35d7120a9e719f691116c9281",
          "body": "… delegated children\n\nA delegating sub-agent (e.g. Manager) that itself launches background child\ntasks was torn down before those children finished, so it never received their\ncompletion notifications — \"Manager doesn't catch the ready tasks\".\n\nRoot cause: tryCompleteTask (the single completion cho\n[…]\nhe children finish (and stale children are pruned by TTL, so no\ndeadlock), letting the parent receive its children's results before completing.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(background-agent): defer sub-agent completion while it has active…",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-10T17:00:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "35fb4858b0998baf058e12de30d8cecc5750447f",
          "body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): 0.2.8",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-10T16:24:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a5ec5e06cd5147fc8a7ce24fbd4e2b79ec5ddd1e",
          "body": "Align with the OpenCode runtime (1.17.1). Unrelated to the delegation fix.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(deps): bump @opencode-ai/plugin + sdk to ^1.17.1",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-10T16:24:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d9bc7fc67e67afa9c7645c3b38af0785c5f16e19",
          "body": "…ed sessions\n\nDelegated sub-agent sessions crashed the whole parent session with\n\"Worker has been terminated\". Root cause is an OpenCode runtime teardown\nrace: on sub-agent session end/abort the runtime write()s to an already\ndestroyed stream, throwing an unhandled `Cannot call write after a stream\n\n[…]\n-throws every other rejection so genuine bugs still surface. Wire it into\nplugin init. Upstream OpenCode bug; this is a plugin-side mitigation.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(delegation): guard against runtime stream-teardown race that kill…",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-10T16:24:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6cceffa349b50b792fb539cb9c6829b0a24013c9",
          "body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): 0.2.7",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-10T12:26:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a5eb2c3c67373fe1cbab297e8cffd646859828c8",
          "body": "…ignore .opencode\n\n- Move the supabase-postgres skill from .opencode/skills/ into skills/ so\n  the plugin skill materializer (reads pluginRoot/skills) actually ships it\n  to installed users — it was previously only present in the repo's local\n  .opencode view and never reached end users (researcher/\n[…]\nerified: typecheck 0, test 1989 pass/0 fail, lint OK, bundle 2.69MB,\nnpm pack now includes skills/supabase-postgres and zero .opencode entries.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: relocate supabase-postgres into skills/, drop husky, fully …",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-10T11:39:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "54d0182c88ec720c36941635e4bf7b3886647c18",
          "body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): 0.2.6",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-10T10:13:48Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "73835d531195ec001285bc7f2fd45eb2589f9353",
          "body": "biome was installed ad-hoc but missing from package.json/bun.lock, so\n'bun install --frozen-lockfile' in CI never installed it and 'bun run\nlint' failed with 127. Also pin pack:check to --ignore-scripts.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: add @biomejs/biome devDependency (fix CI lint exit 127)",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-10T10:11:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "88ec8f8d0dfe1b393022c6ce705c0b6a338800db",
          "body": "- New VISION_CATEGORIES (browser-verification/ui-inspection/screenshot)\n  routed to the Vision agent via mode-routing; observation-only prompt\n- Prompt/permission refinements (manager, researcher, postgres-rules,\n  messages-transform, agent-tool-restrictions, permission-compat)\n- Harden scripts/db-content-update.sh; snapshots regenerated\n- Tests 1839 -> 1989 pass, 0 fail\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(delegation): add Vision browser-verification category + routing",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-10T10:11:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3cb822d0ca625d9e8e106c90825c5802962bde17",
          "body": "- Drop NODE_AUTH_TOKEN/NPM_TOKEN; auth via GitHub OIDC trusted publisher\n  configured on npmjs.com (fixes persistent EOTP from account 2FA-on-write)\n- node 22 + npm@latest (OIDC trusted publishing needs npm >= 11.5.1)\n- keeps id-token:write for provenance + auth, version-skip guard, GH release\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci(release): switch npm publish to OIDC trusted publishing (tokenless)",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-10T09:54:27Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2ad8a81af41d86c3afa0c1fae629d52e5ff28139",
          "body": "- New prioritized roadmap with phases, dependency chains, KPI targets,\n  grounded in real 0.2.5 state (BackgroundManager refactor, coverage,\n  auto-publish, telemetry) — mirrors hiai-observe's ROADMAP format\n- README: Roadmap section + enriched Documentation Map\n- Untrack todo.md (local working file; already in .gitignore)\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add docs/ROADMAP.md (observe-style); untrack todo.md",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-10T09:49:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b07f8f8eaf14854decc190d2637afe6b4c0f8d40",
          "body": "…ispatch\n\n- publish step now sets up Bun (the old job ran bun install with no Bun\n  installed, silently failing under continue-on-error)\n- single job: typecheck/test/build/bundle-size gate → npm publish\n  (skip if version already on npm) → GitHub release with tarball\n- provenance via id-token; manual workflow_dispatch added\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci(release): fix npm publish job (missing Bun), add version guard + d…",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-10T09:42:48Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5aa272bbf12cc00046255c21dbe20dc60aeca6cb",
          "body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add PRs-welcome badge; untrack local .bob draft",
          "author_name": "hiai.gg",
          "author_login": null,
          "committed_at": "2026-06-10T09:40:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "20720c0895beba082b77b57482eea8e6b7c75efc",
          "body": "Per user request: npm publish is not part of this plan.\nClean up release.yml to only build + verify + create GitHub Release.\nRemove release-process.md (was entirely npm-focused).",
          "is_bot": false,
          "headline": "chore(release): remove npm publish from release workflow",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T11:30:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c2256047f0c0dbd0b4a031644794625e48fe994",
          "body": "…t code\n\nPrevious version had a bug: the publish command was piped through tee,\nbut the if statement checked tee's exit code (always 0) instead of\nnpm's. The fallback 'npm publish --no-provenance' never actually ran.\n\nFix: add 'set -o pipefail' so the pipe propagates npm's failure exit\ncode. Also us\n[…]\ncho' for the fallback success path and '|| { ... }'\nto surface real failures.\n\nNow if --provenance fails with EOTP, the fallback retries with\n--no-provenance and the package actually publishes to npm.",
          "is_bot": false,
          "headline": "ci(release): fix EOTP fallback — use set -o pipefail to catch npm exi…",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T11:21:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c701007f7b1a388d7b33c89c5a7e45f9ee2f1f2b",
          "body": "If the user's NPM_TOKEN is a publish-type (2FA-required) and\npublish with --provenance fails with EOTP, retry without provenance.\n\nThis is a fallback for users who haven't swapped to an Automation\ntoken yet. Provenance is dropped on retry, but the package still\npublishes to npm.\n\nIssue a warning annotation explaining the tradeoff.\n\nFor full provenance support, replace NPM_TOKEN with an Automation\ntype token from https://www.npmjs.com/settings/~/tokens",
          "is_bot": false,
          "headline": "ci(release): fallback to --no-provenance when EOTP triggered",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T11:16:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0b27753dbacbecba52013575ae86c60597d576a",
          "body": null,
          "is_bot": false,
          "headline": "docs(release): add v0.2.5 release notes as standalone file",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T11:13:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca88f7a518baf7f5fd8024c2a0588096b53c5872",
          "body": "…keywords\n\nRepository metadata (GitHub UI + npm registry):\n- Add 13 new topics (agent-browser, anthropic, browser-automation, context7, design-systems, firecrawl, lsp, mcp, model-context-protocol, openai, orchestration, stitch, typescript) for npm discoverability\n- Set repo description via .github/d\n[…]\ntes-v0.2.5.md\n- New title: 'v0.2.5 — MemPalace canonical taxonomy, Manager complexity routing, mandatory Critic gate'\n- Full highlights, stats, install instructions, commit list, breaking-changes note",
          "is_bot": false,
          "headline": "docs(release): polish v0.2.5 metadata — topics, badges, description, …",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T11:13:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "227c03fe77775e62e4b5c187489ef29a6072637c",
          "body": "User's current secret triggers 'npm error EOTP' because they used\na Publish-type token (requires 2FA). Automation tokens bypass OTP.\n\nDoc update only — workflow is correct, secret just needs replacement\nin GitHub env/repo settings with an Automation token from\nhttps://www.npmjs.com/settings/~/tokens",
          "is_bot": false,
          "headline": "docs(release): warn that NPM_TOKEN must be Automation type",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T11:05:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c5aeb5883150a5ad0ad188a8ceb9d445ed9816f",
          "body": "Previous run failed with exit 127 on 'Install dependencies' because\nthe publish-npm job only set up Node.js, but the project uses bun\nfor install + build. Add oven-sh/setup-bun@v2 step.",
          "is_bot": false,
          "headline": "ci(release): add bun setup to publish-npm job",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T11:03:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d36f5035d90663bbadb47338a04202017bd48b5",
          "body": "Splits release.yml into two jobs:\n- build: lint, test, build, pack, create GitHub Release (always runs)\n- publish-npm: npm publish with continue-on-error (separate step)\n\nDrops the 'environment: npm' requirement so the workflow reads\nNPM_TOKEN as a repo-level secret (or env secret, both work now).\n\n\n[…]\nvented\nthe GitHub Release from being created. Now the release is created\nunconditionally and npm publish is a separate best-effort step.\n\nTriggered by tag push v*.*.* — workflow already on tag v0.2.5.",
          "is_bot": false,
          "headline": "ci(release): decouple build/release from npm publish",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T10:59:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0315ab0c91805d5c19243e823690fd8dadeb3df0",
          "body": "Proven that the gh CLI path works (tested with literal 'test' value\nwhich was accepted by GitHub, then deleted). Adds Option B to the\ndoc so the user can set NPM_TOKEN without the web UI if they prefer.",
          "is_bot": false,
          "headline": "docs(release): add gh CLI option for setting NPM_TOKEN",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T10:56:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05cdc7c3bd2b1f59dcd31652687b5151fa4815eb",
          "body": "Documents the one-time GitHub 'npm' environment + NPM_TOKEN secret\nconfiguration required for the release workflow to publish to npm.\n\nCovers:\n- One-time setup (get npm automation token, add to GitHub env)\n- Re-trigger options (Actions UI re-run OR re-push tag)\n- Workflow step-by-step breakdown\n- Lo\n[…]\nng (Sept 16, 2026)\n\nUnblocks v0.2.5 release: first workflow run failed with ENEEDAUTH\nbecause NPM_TOKEN was not configured. With this doc the next run\nis a single click after the user adds the secret.",
          "is_bot": false,
          "headline": "docs(release): add release-process.md with NPM_TOKEN setup steps",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T10:51:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c2a6e617e25b40a83feb6517b50436b8a40fa513",
          "body": "…ty routing, mandatory Critic gate, Postgres content rules\n\n14 atomic commits from release/0.2.5:\n- fix(scripts): update e2e-smoke-test.sh prompt size thresholds\n- style: apply biome lint:fix and format\n- chore(deps): update @opencode-ai/plugin and @opencode-ai/sdk to 1.16.2\n- fix(ci): make lint che\n[…]\ns): keep agentConfig keys lowercase (TS type compat)\n- test(prompts): update baseline to match new prompt sizes after 0.2.5 prompt additions\n\nPlan: .bob/plans/release-0.2.5.md\nCritic verdict: APPROVED",
          "is_bot": false,
          "headline": "merge: Release 0.2.5 — MemPalace canonical taxonomy, Manager complexi…",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T10:45:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9e8e732bf7156f28bfa570df09a63d5808d816b5",
          "body": "Pre-session WIP change that was left dirty in working tree at start\nof release-0.2.5 prep. The release/0.2.5 worktree independently made\nthe same fix. Committing it on main so merge can proceed cleanly.\n\nPlan: release-0.2.5",
          "is_bot": false,
          "headline": "fix(plugin-handlers): canonicalize agent names (lowercase → PascalCase)",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T10:35:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6de568c4d32ff2b41d086d4447426d5b9c5b6546",
          "body": "Captures the final state of all verification gates before tagging v0.2.5.\n\nAll 7 gates pass:\n- typecheck: tsc --noEmit, exit 0\n- tests: 496/29 files, 0 fail, 1021 expects, 1 skip\n- lint: 8 warnings, 9 infos, 0 errors\n- format: 1165 files checked, no fixes needed\n- build: 1461 modules bundled, dist/i\n[…]\nt as HEAD.\n\nNote: force-added to override .bob/ gitignore rule — this is a release\nartifact not ephemeral agent state, and the release task explicitly\nrequires it to be committed.\n\nPlan: release-0.2.5",
          "is_bot": false,
          "headline": "docs(release): final verification report for 0.2.5",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T10:30:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e5bdabdebbe991e6e0e7962a89ce2b0c6ac4981c",
          "body": "Resolves the final biome format error uncovered by format --changed --since=origin/main.\nPurely cosmetic reformatting of multi-line objects, function signatures, and import\nlists. No semantic changes.\n\nPlan: release-0.2.5",
          "is_bot": false,
          "headline": "style(agent-config): apply biome formatting",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T10:19:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "083cc43788bd1c51748e9bc265b03fc0d6bc1e2d",
          "body": "- CODEOWNERS: routes critical paths to @opencode-ai/maintainers\n- commitlint: enforces conventional commit format (feat/fix/docs/etc.)\n- husky: commit-msg hook runs commitlint on every commit\n\nThis locks in the conventional commits standard observed in 0.2.4\nand 0.2.5 history. Future commits will be auto-validated.\n\nPlan: release-0.2.5",
          "is_bot": false,
          "headline": "ci: add CODEOWNERS, commitlint, husky for conventional commits",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T10:15:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4d03018334554599c02c8ad84bb2d08ff515cf1",
          "body": "release.yml triggers on tag push (v*.*.*):\n- Runs full CI (typecheck, test, build, bundle-size, pack dry-run)\n- Publishes to npm with --provenance for attestation\n- Creates GitHub Release with auto-generated notes\n- Uses id-token for npm provenance signing\n\nci.yml: removed '|| echo \"No lint script configured\"' fallback\nto make lint failures fatal (matching other gates).\n\nPlan: release-0.2.5",
          "is_bot": false,
          "headline": "ci: add release workflow + make lint check fatal",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T10:11:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af3f458d84e9a06c9e52221df9303465e2c2fd56",
          "body": "…tic-gate)\n\nAdds 5 new sections to README:\n\n- agent-browser CLI skill in integrations table\n- MemPalace canonical taxonomy section\n- Postgres content-update rules section\n- Biome + Critic mandatory gate notes\n- Fix typo: 'platform-manager' → 'manager' in mode table\n\nPlan: release-0.2.5",
          "is_bot": false,
          "headline": "docs(readme): add 0.2.5 features (agent-browser, postgres, biome, cri…",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T10:09:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4907c3b860d01362d723379abc3f3475aaf15766",
          "body": "- 44 commits since 0.2.4\n- 5 features, 26 fixes, 4 refactors, 4 docs\n- 78 files changed\n- +2,969 / -417 lines\n\nHighlights:\n- MemPalace canonical taxonomy + auto-save hook fix\n- Manager complexity routing (5+ todos → Manager)\n- Critic mandatory completion gate\n- Postgres content-update rules + db-con\n[…]\non hook (runtime delegation enforcement)\n- 51 dead source files removed\n- 6 test failures resolved\n- 8 lint errors + 1095 format issues auto-fixed\n- Full CHANGELOG entry for 0.2.5\n\nPlan: release-0.2.5",
          "is_bot": false,
          "headline": "chore(release): bump to 0.2.5 with full changelog",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T10:09:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "86854d8eccdeef19897a1791e60b9408c21f4141",
          "body": "The 0.2.5 delegation hardening (5+ todos → Manager dispatch) needs to\nbe reflected in the request flow diagram. Updated to show:\n- Bob → Manager → Coder/Sub (complex plans, wave-based)\n- Bob → Coder/Sub directly (simple, <5 todos)\n- Bob → Strategist (for planning)\n\nAlso added Biome to the LSP/tools list.\n\nPlan: release-0.2.5",
          "is_bot": false,
          "headline": "docs(architecture): update flow diagram with Manager routing tier",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T10:08:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c30f7e238a15bdc0eb3b8aca263c01a265a0fde3",
          "body": "Actual counts from src/hooks/:\n- Session: 22 (was 24)\n- Tool guard: 13 (was 14)\n- Transform: 5 (unchanged)\n- Continuation: 9 (was 7)\n- Total: 51 (was 52)\n\nPlan: release-0.2.5",
          "is_bot": false,
          "headline": "docs(src/AGENTS): fix hook counts to match actual (52→51)",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T10:07:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "143983d238cc4d37c50e26a4d3bbac2813bfce88",
          "body": "The agent-tool-permission hook is the security gate that prevents\nagents from using tools they shouldn't (e.g., Bob using write/edit/bash).\nIt was added in 0.2.4 with 0 tests, a blocker for 0.2.5.\n\nTests cover:\n- normalizeToolName (case-insensitivity, whitespace)\n- isToolDenied (matches restrictions correctly)\n- Hook behavior (blocks denied, allows permitted, no-ops on unknown)\n\nPlan: release-0.2.5",
          "is_bot": false,
          "headline": "test(hooks): add tests for agent-tool-permission hook (7 cases)",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T10:04:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b52212bc288f7867b6248099dc4ac6ed93d2bfc",
          "body": "The mempalace-auto-save handler is responsible for session\npersistence to MemPalace (plan/review/design/work events). It was\nrefactored in 0.2.4 to use add_drawer (fixing CRITICAL data loss) but\nhad 0 tests.\n\nTests cover debounce timing, save state tracking, event processing,\nand per-session state isolation.\n\nPlan: release-0.2.5",
          "is_bot": false,
          "headline": "test(hooks): add tests for mempalace-auto-save handler (6 cases)",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T10:01:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5bb8a6ea833e97f68811aac0083e116067600d8b",
          "body": "The buildSaveChecklist() function in mempalace-taxonomy.ts is\nimported by Bob, Coder, and Strategist agent prompts. Previously\ncovered only indirectly by snapshot tests (which were failing).\nDirect unit tests verify output is correct and deterministic.\n\nPlan: release-0.2.5",
          "is_bot": false,
          "headline": "test(prompts): add unit tests for buildSaveChecklist() (3 cases)",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T10:00:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de0d9ef316b91fb4a8ec5f455f77e32fd5c4e2d9",
          "body": "Previously, 'bun run lint || echo \"No lint script configured\"' would\nsilently pass on lint failures. Now lint is a hard gate, matching\ntypecheck/test/build. Lint failures block PRs.\n\nThe 'No lint script configured' fallback was added when biome\nwasn't yet integrated. Now it's misleading.\n\nPlan: release-0.2.5",
          "is_bot": false,
          "headline": "fix(ci): make lint check fatal in CI (remove || fallback)",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T09:57:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4166202f732b7faf09455c1ac3e5ef9707c2399",
          "body": "Both deps were 1.4.6, 12 minor versions behind. Update addresses API\ndrift and missing features in current 1.16.2 release line.\n\nVerified: bun test, bun run typecheck, bun run build all pass.\nIf verification had failed, this commit was prepared to be reverted\nvia `git checkout`.\n\nPlan: release-0.2.5",
          "is_bot": false,
          "headline": "chore(deps): update @opencode-ai/plugin and @opencode-ai/sdk to 1.16.2",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T09:56:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "34b1eb2c648ce7dd942c7ca3ba981deb48c0d9ee",
          "body": "All auto-fixable. Fixes the BLOCKING B2 lint issue for 0.2.5 release.\n\nPlan: release-0.2.5",
          "is_bot": false,
          "headline": "style: apply biome lint:fix and format (8 errors + 1095 format issues)",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T09:49:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af07e550481a5d4ce69212e58942b4447ca415eb",
          "body": "…h 0.2.5 reality\n\nOld thresholds (12,500 for bob, 9,500 for coder) were stale and\nblocking 0.2.5 release. Updated to 120% of measured actual size:\n- bob: 23,052 * 1.2 = 27,662 (was 12,500)\n- coder: 16,703 * 1.2 = 20,044 (was 9,500)\n\n20% headroom allows normal prompt growth without false failures.\n\nPlan: release-0.2.5",
          "is_bot": false,
          "headline": "fix(scripts): update e2e-smoke-test.sh prompt size thresholds to matc…",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T09:35:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d0bd3828e06358041a019e8d0079a8f79edf56c9",
          "body": "… commits)\n\nPlan: .bob/plans/manager-routing-postgres-fix.md\nCritic verdict: APPROVED WITH MINOR (chmod bit fixed in amend)\n\n3 atomic commits:\n- fix(prompts): add explicit Pre-Implementation Trigger for Manager dispatch in Bob\n- fix(prompts): add explicit Routing Gate section to Manager prompt (Sub \n[…]\npts/db-content-update.sh with\n   always-return-result behavior\n\nFound by: user request (2026-06-08).\nExecuted by: Manager subagent (bg_fbe674b2) in 3 waves.\n\nPer user instruction: merge only, no push.",
          "is_bot": false,
          "headline": "merge: Manager routing hardening + Postgres content-update wrapper (3…",
          "author_name": "HiAi-gg",
          "author_login": null,
          "committed_at": "2026-06-09T08:54:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 35,
      "commits_last_year": 253,
      "latest_release_at": "2026-07-18T15:54:57Z",
      "latest_release_tag": "v0.4.10",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 9,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 0.6
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 87,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@hiai-gg/hiai-opencode",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "opencode",
            "opencode-plugin",
            "plugin",
            "ai-agents",
            "agents",
            "multi-agent",
            "multi-agent-systems",
            "orchestration",
            "mcp",
            "context7",
            "firecrawl",
            "agent-browser",
            "browser-automation",
            "lsp",
            "skills",
            "llm",
            "openai",
            "anthropic",
            "typescript",
            "hiai",
            "bun",
            "caveman"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@hiai-gg/hiai-opencode",
          "is_deprecated": false,
          "latest_version": "0.4.10",
          "repository_url": "https://github.com/HiAi-gg/hiai-opencode",
          "versions_count": 49,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 4742,
          "first_published_at": "2026-04-24T15:59:12.707000Z",
          "latest_published_at": "2026-07-18T15:54:51.676000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 10,
      "watchers": 2,
      "fork_history": {
        "days": [
          {
            "date": "2026-04-27",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 34019,
      "source_files_sampled": 177,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md"
      ],
      "agent_instruction_max_bytes": 12172
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 34,
        "malicious_count": 0,
        "assessed_package": "npm:@hiai-gg/hiai-opencode@0.4.10",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@opencode-ai/plugin",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.18.2"
        },
        {
          "name": "@opentelemetry/api",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.9.1"
        },
        {
          "name": "drizzle-orm",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.45.2"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 4,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "vlgalib",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/72434411?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "release.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        "biome.json"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 3,
            "reason": "project has 1 contributing companies or organizations -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 9,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 4,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "6bb4cfdb6e86765aa168c4187a2aaf95475b3efb",
        "ran_at": "2026-07-24T00:15:50Z",
        "aggregate_score": 4.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-18T15:55:00Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-06-10T18:20:46Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/HiAi-gg/hiai-opencode",
    "host": "github.com",
    "name": "hiai-opencode",
    "owner": "HiAi-gg"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 63,
      "inputs": {
        "security": 53,
        "vitality": 78,
        "community": 52,
        "governance": 53,
        "engineering": 74
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 78,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "commits_last_year": 253,
              "human_commit_share": 1,
              "days_since_last_push": 5,
              "active_weeks_last_year": 9
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "9/52 weeks with commits",
                "points": 6.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 9
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "253 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 253
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 35,
              "latest_release_tag": "v0.4.10",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 0.6
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "35 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 35
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.6 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 52,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 16,
            "inputs": {
              "forks": 1,
              "stars": 10,
              "watchers": 2,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "10 stars",
                "points": 15.5,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "2 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 86,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file present, not a recognized license",
                "points": 16.9,
                "status": "partial",
                "details": [
                  {
                    "code": "license_custom",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 61,
            "inputs": {
              "packages": [
                "@hiai-gg/hiai-opencode"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 4742
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "4,742 downloads/month across npm",
                "points": 49,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 4742,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 53,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 13,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "merged_prs": 4,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "4/4 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 4,
                      "decided": 4
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 45,
            "inputs": {
              "followers": 7,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "HiAi-gg",
              "public_repos": 10,
              "account_age_days": 98
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "7 followers of HiAi-gg",
                "points": 6.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 7,
                      "login": "HiAi-gg"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "10 public repos, account ~0 yr old",
                "points": 8.1,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 10
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "@hiai-gg/hiai-opencode"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "49 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 49
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 74,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 80,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "biome.json",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [
                "ai-agents",
                "multi-agent-systems",
                "opencode",
                "opencode-plugin",
                "hiai",
                "agent-browser",
                "anthropic",
                "browser-automation",
                "context7",
                "design-systems",
                "firecrawl",
                "lsp",
                "mcp",
                "model-context-protocol",
                "openai",
                "orchestration",
                "stitch",
                "typescript",
                "multi-agent",
                "caveman"
              ],
              "has_wiki": false,
              "homepage": "https://github.com/HiAi-gg/hiai-opencode#readme",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://github.com/HiAi-gg/hiai-opencode#readme",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "20 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 20
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 53,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 41,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@hiai-gg/hiai-opencode@0.4.10 runtime dependency closure — what installing the published package pulls in — 34 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:@hiai-gg/hiai-opencode@0.4.10",
                  "assessed": 34
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 34,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 34,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 71,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.99,
              "agent_instruction_files": [
                "AGENTS.md"
              ],
              "agent_instruction_max_bytes": 12172
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "99 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 99,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0.17,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "biome.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "17 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 17,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 34019,
              "source_files_sampled": 177,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/177 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 177,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "moderate",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-24T00:15:57.419335Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/h/HiAi-gg/hiai-opencode.svg",
  "full_name": "HiAi-gg/hiai-opencode",
  "license_state": "custom",
  "license_spdx": null
}