atxp-dev / sdk

Der aufgelöste Abhängigkeitssatz konnte für diesen Bericht nicht erhoben werden: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 3350,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "HTML": 18778,
        "JavaScript": 39057,
        "TypeScript": 1339761
      },
      "pushed_at": "2026-07-02T17:40:27Z",
      "created_at": "2025-08-18T21:45:27Z",
      "owner_type": "Organization",
      "updated_at": "2026-06-30T21:04:48Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": null,
      "name": "ATXP",
      "type": "Organization",
      "login": "atxp-dev",
      "company": null,
      "location": null,
      "followers": 49,
      "avatar_url": "https://avatars.githubusercontent.com/u/226535901?v=4",
      "created_at": "2025-08-14T14:01:43Z",
      "is_verified": null,
      "public_repos": 17,
      "account_age_days": 346
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.11.12",
          "kind": "patch",
          "published_at": "2026-06-02T16:03:39Z"
        },
        {
          "tag": "v0.11.11",
          "kind": "patch",
          "published_at": "2026-06-02T14:31:37Z"
        },
        {
          "tag": "v0.11.10",
          "kind": "patch",
          "published_at": "2026-05-29T00:16:28Z"
        },
        {
          "tag": "v0.11.9",
          "kind": "patch",
          "published_at": "2026-05-28T22:05:11Z"
        },
        {
          "tag": "v0.11.8",
          "kind": "patch",
          "published_at": "2026-04-15T22:19:24Z"
        },
        {
          "tag": "v0.10.10",
          "kind": "patch",
          "published_at": "2026-03-31T23:17:45Z"
        },
        {
          "tag": "v0.10.9",
          "kind": "patch",
          "published_at": "2026-03-31T23:04:57Z"
        },
        {
          "tag": "v0.10.8",
          "kind": "patch",
          "published_at": "2026-03-31T22:40:38Z"
        },
        {
          "tag": "v0.10.7",
          "kind": "patch",
          "published_at": "2026-03-16T19:31:11Z"
        },
        {
          "tag": "v0.10.6",
          "kind": "patch",
          "published_at": "2026-03-04T18:53:51Z"
        },
        {
          "tag": "v0.10.5",
          "kind": "patch",
          "published_at": "2026-01-14T23:35:27Z"
        },
        {
          "tag": "v0.10.4",
          "kind": "patch",
          "published_at": "2026-01-12T20:47:08Z"
        },
        {
          "tag": "v0.10.3",
          "kind": "patch",
          "published_at": "2025-12-18T23:08:44Z"
        },
        {
          "tag": "v0.10.2",
          "kind": "patch",
          "published_at": "2025-12-17T21:35:48Z"
        },
        {
          "tag": "v0.10.1",
          "kind": "patch",
          "published_at": "2025-12-17T17:16:23Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2025-12-17T16:28:53Z"
        },
        {
          "tag": "v0.9.2",
          "kind": "patch",
          "published_at": "2025-12-12T23:06:21Z"
        },
        {
          "tag": "v0.9.1",
          "kind": "patch",
          "published_at": "2025-12-11T19:18:15Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2025-12-09T15:10:37Z"
        },
        {
          "tag": "v0.8.3",
          "kind": "patch",
          "published_at": "2025-12-08T20:02:07Z"
        },
        {
          "tag": "v0.8.2",
          "kind": "patch",
          "published_at": "2025-10-31T23:50:17Z"
        },
        {
          "tag": "v0.8.1",
          "kind": "patch",
          "published_at": "2025-10-31T22:34:02Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2025-10-31T15:36:14Z"
        },
        {
          "tag": "v0.7.4",
          "kind": "patch",
          "published_at": "2025-10-06T19:53:47Z"
        },
        {
          "tag": "v0.7.3",
          "kind": "patch",
          "published_at": "2025-10-02T02:08:40Z"
        },
        {
          "tag": "v0.7.2",
          "kind": "patch",
          "published_at": "2025-10-01T19:13:21Z"
        },
        {
          "tag": "v0.7.1",
          "kind": "patch",
          "published_at": "2025-09-26T22:53:38Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2025-09-26T18:55:25Z"
        },
        {
          "tag": "v0.6.4",
          "kind": "patch",
          "published_at": "2025-09-24T18:43:34Z"
        },
        {
          "tag": "v0.6.3",
          "kind": "patch",
          "published_at": "2025-09-22T18:17:31Z"
        },
        {
          "tag": "v0.6.2",
          "kind": "patch",
          "published_at": "2025-09-22T12:24:07Z"
        },
        {
          "tag": "v0.6.1",
          "kind": "patch",
          "published_at": "2025-09-22T00:38:54Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2025-09-21T20:02:36Z"
        },
        {
          "tag": "v0.5.1",
          "kind": "patch",
          "published_at": "2025-09-19T19:46:16Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2025-09-19T16:20:00Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2025-09-18T16:17:29Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2025-09-16T21:10:01Z"
        },
        {
          "tag": "v0.2.22",
          "kind": "patch",
          "published_at": "2025-09-04T21:42:12Z"
        },
        {
          "tag": "v0.2.21",
          "kind": "patch",
          "published_at": "2025-09-04T15:18:27Z"
        },
        {
          "tag": "v0.2.20",
          "kind": "patch",
          "published_at": "2025-09-02T17:56:08Z"
        },
        {
          "tag": "v0.2.19",
          "kind": "patch",
          "published_at": "2025-08-30T21:01:09Z"
        },
        {
          "tag": "v0.2.18",
          "kind": "patch",
          "published_at": "2025-08-29T21:27:14Z"
        },
        {
          "tag": "v0.2.17",
          "kind": "patch",
          "published_at": "2025-08-28T21:25:11Z"
        },
        {
          "tag": "v0.2.16",
          "kind": "patch",
          "published_at": "2025-08-28T18:06:35Z"
        },
        {
          "tag": "v0.2.15",
          "kind": "patch",
          "published_at": "2025-08-27T18:12:55Z"
        },
        {
          "tag": "v0.2.14",
          "kind": "patch",
          "published_at": "2025-08-26T19:28:33Z"
        },
        {
          "tag": "v0.2.13",
          "kind": "patch",
          "published_at": "2025-08-26T01:49:40Z"
        },
        {
          "tag": "v0.2.12",
          "kind": "patch",
          "published_at": "2025-08-22T20:06:05Z"
        },
        {
          "tag": "v0.2.11",
          "kind": "patch",
          "published_at": "2025-08-21T21:21:01Z"
        },
        {
          "tag": "v0.2.10",
          "kind": "patch",
          "published_at": "2025-08-20T15:03:40Z"
        },
        {
          "tag": "v0.2.9",
          "kind": "patch",
          "published_at": "2025-08-19T21:08:45Z"
        },
        {
          "tag": "v0.2.8",
          "kind": "patch",
          "published_at": "2025-08-19T19:39:02Z"
        },
        {
          "tag": "v0.2.7",
          "kind": "patch",
          "published_at": "2025-08-18T21:56:56Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "1f83d6590b9e97424b9c0c98296439d7ac292076",
          "body": "…se 4b) (#184)\n\nomniChallenge: fetchMppSupported now returns { tempo, solana } from auth's GET /mpp/supported\n(was Tempo-only); buildMppChallenges advertises a solana intent=session challenge alongside\nthe solana charge when auth exposes a Solana authorizedSigner. methodDetails carries only the\nauth\n[…]\nhrough.\n\nClient/metering/settle paths are already chain-agnostic (challenge.method drives accounts).\nomniChallenge tests green (39); tsc clean.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mpp): advertise Solana MPP session challenges (@atxp/server, Pha…",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-06-30T21:04:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d16e880dbcde4083c03b9817ad5363629008ba92",
          "body": "…rides (#183)\n\n* feat(mpp): advertise Tempo MPP session intent + thread settlementOverrides\n\nPhase 4 SDK wire contract for TIP-1034 Tempo MPP sessions. Backwards-compatible:\nthe session intent is advertised only when the auth server exposes a settler, and\ncharge stays the default.\n\n- omniChallenge.t\n[…]\nrotocol.ts and paymentSession.ts so both classify a credential identically.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mpp): advertise Tempo MPP session intent + thread settlementOver…",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-06-25T23:50:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2064c6cc1b9de1e3129ccd0e2a47afe4e90c93a9",
          "body": "* feat(x402): advertise upto + send settlementOverrides for metered settle\n\n- omniChallenge buildX402Requirements advertises scheme=upto for EVM (Base) x402\n  options (SVM stays exact; Solana upto not implemented). The deployed SDK version\n  thus selects exact vs upto.\n- ProtocolSettlement.buildRequ\n[…]\nmbed accepted\" comment (createPaymentPayload\n  does embed accepted for v2).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(x402): advertise upto scheme + send settlementOverrides (#182)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-06-18T18:14:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "868f331c50f8266e27ca2207db0e4e2d6d295743",
          "body": "…o) — Phase 2 (#181)\n\n* feat(payments): settle the metered actual at session close (atxp up-to)\n\nAt session close, settle the accumulated `session.spent` (the metered\n\"up-to\" actual) instead of the credential's full cap. `ProtocolSettlement.settle`\ngains an optional `actualAmount` that, for ATXP, ov\n[…]\nlied to the settled amount (no exponential notation for\n  sub-1e-6 values).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(payments): settle the metered actual at session close (ATXP up-t…",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-06-17T22:53:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5787827ddabc28a3b79f4aeb0be6969d371d5149",
          "body": "* feat(payments): relocate settlement to session close (phase 1)\n\nIntroduce an implicit, request-scoped PaymentSession and move payment\nsettlement off the inbound express middleware and onto session close at\nthe end of the response.\n\n- @atxp/server: new PaymentSession (cap/spent/charge); ALS context\n[…]\nker flags genuinely stuck settles,\nwhile still bounding a hung auth server.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(payments): relocate settlement to session close (phase 1) (#177)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-06-17T20:55:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "73bbf2de08f47d193511dcd7df6ab2c37b139590",
          "body": null,
          "is_bot": false,
          "headline": "fix: propagate lifecycle id through ATXP account retries (#176)",
          "author_name": "R-M-Naveen",
          "author_login": "R-M-Naveen",
          "committed_at": "2026-06-02T16:02:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2827140f70cd7b140f9badb4f4699636657b3ad3",
          "body": null,
          "is_bot": false,
          "headline": "Propagate payment lifecycle id through retries (#175)",
          "author_name": "R-M-Naveen",
          "author_login": "R-M-Naveen",
          "committed_at": "2026-06-02T14:19:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f7300d669b3bdb17f231798eb5cbd1a86015f174",
          "body": null,
          "is_bot": false,
          "headline": "chore: sync published 0.11.10 package versions (#174)",
          "author_name": "R-M-Naveen",
          "author_login": "R-M-Naveen",
          "committed_at": "2026-06-01T16:23:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b9cd38195a1da3a7428a9182beb042d2a37c0b8",
          "body": null,
          "is_bot": false,
          "headline": "fix: avoid workspace installs during release version bump (#173)",
          "author_name": "R-M-Naveen",
          "author_login": "R-M-Naveen",
          "committed_at": "2026-05-29T00:00:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de138c0ca25755161ea89d019a5a19efa701865a",
          "body": null,
          "is_bot": false,
          "headline": "test: serialize release-flaky package test files (#172)",
          "author_name": "R-M-Naveen",
          "author_login": "R-M-Naveen",
          "committed_at": "2026-05-28T23:21:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1cb74e67973bdf9a1399294010941c0fb86684b5",
          "body": "* test: run workspace vitest files serially\n\n* test: isolate express fetch stubs",
          "is_bot": false,
          "headline": "Fix express fetch stub isolation (#171)",
          "author_name": "R-M-Naveen",
          "author_login": "R-M-Naveen",
          "committed_at": "2026-05-28T22:51:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a11c6629cb010c049fbc1707ec01cfff5e9b644",
          "body": null,
          "is_bot": false,
          "headline": "Carry resource metadata in MPP challenges (#170)",
          "author_name": "R-M-Naveen",
          "author_login": "R-M-Naveen",
          "committed_at": "2026-05-28T21:56:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89e9a6361d309ff27a50e65650fe29ebea2c0db5",
          "body": "…dis/sqlite/memory) (#169)\n\n* fix(redis): bound default TTL for access tokens without expiry\n\nRedisOAuthDb.saveAccessToken stored access tokens with no expiry (plain SET) whenever the token had no expiresAt and no ttl was configured. The ATXP server middleware (atxpContext.withATXPContext) saves the\n[…]\nrkspace common. Per CLAUDE.md guidance (line 73).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(oauth): bound OAuth access-token lifetime across all backends (re…",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-05-27T00:28:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e4656a080885990433e123a9b2e3b30bbc348c3e",
          "body": "* feat: ProtocolSettlement sends X-ATXP-App-Name header to /settle/* and /verify/*\n\nLets auth (see circuitandchisel/auth#254) attribute settlement\nobservability events to the calling service — so Honeycomb/PostHog\ndashboards can slice revenue by llm / music / search / etc. Companion\nto the auth-side\n[…]\n. The docstring flags this so operators debugging absent\nobservability know where to look.\n\nNo runtime behavior change.\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: ProtocolSettlement sends X-ATXP-App-Name header to auth (#167)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-20T22:24:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a44df5820ab1935d23c2b61590dd2f498e975a21",
          "body": "…(#166)\n\nThe release workflow bumps versions of atxp-mpp and atxp-tempo but never\nupdates cross-package dependencies onto them. Result: 0.11.8 was published\nwith atxp-client/atxp-server still pinning @atxp/mpp@0.11.7, and\natxp-tempo still pinning @atxp/client@0.11.7 and @atxp/common@0.11.7.\n\nAdd the 4 missing `npm pkg set` lines and sync the current package.jsons\nto 0.11.8 so the source tree is internally consistent.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: update @atxp/mpp and @atxp/tempo cross-deps in release workflow …",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-17T18:56:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3ac565a566aacdaada4d08047be151db78f7e134",
          "body": "…165)\n\nAuth is adding a carve-out on /settle/x402 that returns 200 with\n{ alreadySettled: true, txHash: null, ... } when the CDP facilitator\nrejects a retry with \"duplicate transaction\" (see auth PR for details).\nThe SDK's SettleResult.txHash was typed as string (non-nullable), which\nwould be a lie \n[…]\nnder \"<already-settled>\" when txHash is null instead of the word\n\"null\". Behavior on the happy path (txHash: string) is unchanged.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: allow null txHash in SettleResult for already-settled retries (#…",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-16T19:50:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d94c96a8ed8828bd373351bf6a78b0070be2eb8f",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.11.8 [skip ci]",
          "author_name": "GitHub Action",
          "author_login": "actions-user",
          "committed_at": "2026-04-15T22:26:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6a2ff7c41f8ae71cc25127ae7e0d5c12938ead9",
          "body": "Clean dist/node_modules and dist/_virtual from atxp-server and atxp-x402\ntarballs via prepack script to prevent Node module resolution conflicts\nin consumers.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v0.11.7",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-04-15T02:33:36Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "07fcde8c0c8f7322dec11c0855402fe2baebfb08",
          "body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v0.11.6",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-04-15T02:24:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d6827b9722eb174ef28f440162fd03c091b8d3cf",
          "body": "* fix: move payment settlement from requirePayment() to middleware\n\nSettlement now happens in the atxpExpress middleware before route code\nruns. This eliminates footguns where tool handlers call requirePayment()\nmultiple times (e.g., pre-flight balance check + post-generation charge)\nand the first c\n[…]\nectedCredential() returns null in route handlers.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: move payment settlement from requirePayment() to middleware (#164)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-15T02:21:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "edb6d841e57f88e356b6c0fedea3657d08d13628",
          "body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v0.11.5",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-04-14T23:18:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4f2f7993eaaa4ff72cfddf178c55b56d4bbfc23e",
          "body": "* fix: only advertise protocols with actual challenge data in authorize\n\nATXPAccountHandler was hardcoding protocols: ['atxp', 'x402', 'mpp']\nregardless of what the MCP server's challenge actually contained. When\nthe server only sent a paymentRequestUrl (no x402 accepts or mpp\nchallenges), /authoriz\n[…]\natxp-base: remove unused eslint-disable directive\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: only advertise protocols with actual challenge data (#162)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-14T23:14:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8be1a72205eb25056cb84f1c989d2c12d76f778c",
          "body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v0.11.4",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-04-14T18:51:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5a2e9c95efd7a9d9758a2501ce0d8bbe41ca1dd1",
          "body": "parseBody logs error-level on non-JSON bodies (SSE GETs), which is\nnormal operation. Replace with a comment; the undefined return already\nsignals \"no body\" to callers.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: silence expected parse error on SSE GET requests",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-04-14T18:48:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "db4976d7014fdbec650f7b8599fa48a89d29b855",
          "body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "v0.11.3",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-04-14T18:17:46Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c55311bfcef44588f73dd8a5cda30f4513da0d05",
          "body": "…rewriter (#161)\n\n* fix: defer writeHead in payment response rewriter to prevent Content-Length truncation\n\n@hono/node-server's responseViaCache sets Content-Length from the\noriginal body size and calls writeHead before res.end. When the payment\nresponse rewriter intercepts res.end and swaps in a la\n[…]\nlPaymentResponseRewriter for direct unit testing.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: defer writeHead to prevent Content-Length truncation in payment …",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-14T18:12:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ab410f0c6b43561fc810b5f5f701ee574fd1b31b",
          "body": null,
          "is_bot": false,
          "headline": "v0.11.2",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-04-13T21:43:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f24b5f652f5cdfe5be58c765228d227dc1f2786",
          "body": "* fix: unwrap JSON-RPC error envelope for MCP payment challenges\n\nWhen an MCP server returns a 402 payment challenge, the challenge data\n(chargeAmount, x402, mpp) is nested inside a JSON-RPC error envelope\nat error.data, not at the top level. The ATXPAccountHandler was parsing\nthe top level, finding\n[…]\n>\n\n* chore: remove debug logging from atxpFetcher\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: unwrap JSON-RPC error envelope for MCP payment challenges (#160)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-13T21:08:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9c9f3d4f66410723eed57c34e81447e654bda5fb",
          "body": "* feat: response rewriting to preserve omni-challenge data through McpServer\n\nMcpServer wraps McpError(-30402) into a CallToolResult, discarding error.data\n(which carries x402 accepts and mpp challenges). This breaks X402 and MPP\nprotocols over MCP transport while keeping ATXP working (text extracti\n[…]\nlient to abort before the credential is\nreturned.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: preserve omni-challenge data through McpServer wrapping (#159)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-13T18:46:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "550a1951388c2f26d0c135873e7c8ba2477d559f",
          "body": "Documents the issue where @modelcontextprotocol/sdk's McpServer wraps\npayment McpErrors into CallToolResult, stripping structured error data\n(x402 accepts, MPP challenges). Includes reproduction steps, what works\nvs what's broken, debug logging instructions, and key file references.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: MCP SDK payment error wrapping issue + testing guide",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-04-11T02:36:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bf16267ca63a3d1e028738e7ba296575d61531c5",
          "body": null,
          "is_bot": false,
          "headline": "v0.11.1",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-04-11T00:46:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c01bd75a6bbc964290febc1d341d8ef15ebebca",
          "body": "The omni-challenge server was sending MPP_ERROR_CODE (-32042) which\nbroke clients prior to v0.11.0 that only check for -30402.\n\nServer change:\n- omniChallengeMcpError now sends PAYMENT_REQUIRED_ERROR_CODE (-30402)\n  instead of MPP_ERROR_CODE (-32042)\n\nClient change (both codes accepted):\n- mppProtoc\n[…]\n accepts -32042 OR -30402\n\nTODO: Once clients prior to v0.11.0 are phased out, servers can switch\nback to MPP_ERROR_CODE (-32042).\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: restore legacy error code -30402 for backwards compatibility (#158)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-11T00:41:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3401837e0ffac388a8ed44ee6a8e00047deb22ea",
          "body": "…tion (#157)\n\n* fix: address X402 Solana SDK review — tests, dedup, routing\n\n1. Add 4 tests for Solana X402: accept generation, feePayer field,\n   invalid address filtering, EVM vs Solana extra fields\n2. Remove duplicated SOLANA_USDC_MINT constants — use USDC_ADDRESSES\n   from constants.ts (single s\n[…]\nst scripts in CI, not the root\nvitest invocation.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: X402 Solana SDK review — tests, dedup, server-driven chain selec…",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-10T22:18:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "10c99d9938b9e26ab74eef3c1b981419cb033412",
          "body": "- Add Solana USDC addresses and CAIP-2 networks to constants\n- buildX402Requirements includes Solana SVM options alongside EVM,\n  with CDP facilitator fee payer in extra field\n- Client prefers Solana X402 when available (lower fees)\n- Settlement routing detects SVM payloads (has 'transaction' field)\n  and selects the matching solana: accept option\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: X402 Solana support in SDK — omni-challenge + settlement routing",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-04-10T21:04:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "460f34fee88f1acf370e3b724a4bd5834ea5f715",
          "body": "* fix: MPP challenge expires + Tempo human-readable amount\n\n- Add expires field (5 min TTL) to all MPP challenges — required by\n  mppx's verify() for Tempo settlement\n- Add expires to MppChallengeData type\n- Tempo challenges use human-readable amount (\"0.01\") instead of\n  micro-units (\"10000\") — mpp\n[…]\nithout an index signature for caller type safety.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: MPP challenge expires + Tempo human-readable amount (#156)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-10T15:54:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "34a0c275802d180d7386c2f0bd7bbc4f50e99dd7",
          "body": "* feat: multi-chain MPP support (Solana + Tempo)\n\nServer now emits an array of MPP challenges (one per supported chain)\ninstead of a single Tempo-only challenge. Client extracts all challenges\nand forwards the array to accounts, which picks the chain via feature\nflag. Uses X-MPP-Payment header to ca\n[…]\n mainnet now uses USDC as the default stablecoin.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: multi-chain MPP support (Solana + Tempo) (#155)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-09T02:08:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7659c1f14443bb729e60a589f88fed6de1f57d1e",
          "body": "… (#154)\n\n* feat: add context field to AuthorizeResult for settlement context passthrough\n\nEnable services like the LLM gateway to pass X402 paymentRequirements from\nthe authorize step to the settle step without bundling them into the credential\n(which must remain the raw payment header for HTTP ret\n[…]\ntency: PAYMENT-SIGNATURE / X-PAYMENT (both valid)\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add context field to AuthorizeResult for settlement passthrough…",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-08T16:26:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "13249383cc743dab6f4cb1bc7b82f7cef50e6e2d",
          "body": "* feat: upgrade x402 v1 → v2 (@x402/core + @x402/evm)\n\nReplace x402/client with @x402/core and @x402/evm across client, base,\nand x402 packages. selectPaymentRequirements inlined (v2 doesn't export it).\nBaseAccount uses ExactEvmScheme + x402Client for signing.\nHandles both v1 (maxAmountRequired) and\n[…]\ninfo takes single string arg (no structured data)\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: x402 v2 upgrade + unit/identity fixes (#153)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-07T23:48:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "791e5d490cc6336109229dd314ed079e75aab15d",
          "body": "…02) (#151)\n\n* feat: move settlement from middleware to requirePayment (stateless design)\n\nSettlement now happens inside requirePayment() instead of the Express\nmiddleware. This is the correct design because:\n\n1. requirePayment has the pricing context (amount, options, destination)\n   needed to rege\n[…]\nling inconsistency\n- Remove temp cli-base-temp.ts\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: move settlement from middleware to requirePayment (stateless X4…",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-07T20:48:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ee00c699791a319e2c4916fb4b8a8aad8d9596f5",
          "body": "ATXPDestinationMaker.parseDestinationsResponse now filters out\ndestinations with chains or currencies this SDK version doesn't\nrecognize, instead of throwing. This ensures server-side chain\nadditions don't break older SDK clients.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: skip unrecognized chains/currencies instead of throwing (#152)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-07T20:42:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "75ec9e049962a01dd8b0510d539e516dc7812d8d",
          "body": "* fix: protocol handler retries use OAuth-authenticated fetch\n\nProtocol handlers (ATXPAccountHandler, X402, MPP) retry requests using\nfetchFn from ProtocolConfig. Previously this was the raw fetch, so retries\nwere missing the OAuth Bearer token. MCP servers require both the payment\ncredential header\n[…]\nX-ATXP-PAYMENT and\nAuthorization: Bearer headers.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: protocol handler retries use OAuth-authenticated fetch (#150)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-07T18:38:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0c585e67041f6ce5cdd2a5df6270bbdeda3604fb",
          "body": "* feat: ATXPAccountHandler, settle-at-start, X402 fixes for Phase 3.9\n\nPhase 3.9 SDK changes:\n\nClient:\n- ATXPAccountHandler: exclusive handler for ATXPAccount, delegates to /authorize/auto\n- ATXPAccount never falls back to push mode (errors instead)\n- Handler guard: tryProtocolHandlers only runs on \n[…]\nsesAccountsAuthorize, tests, settle-at-start docs\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Phase 3.9: ATXPAccountHandler, settle-at-start, X402 fixes (#149)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-07T17:45:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0acd5ed47d41fdbad3f38f02c6e5172e35f20855",
          "body": "…lenge (#147)\n\n* feat: add MPP support to server protocol detection, settlement, and omni-challenge\n\n- detectProtocol() now detects Authorization: Payment header as MPP\n- ProtocolSettlement.buildRequestBody() handles MPP credential format\n  (parses base64/JSON MppCredential, extracts amount for sett\n[…]\n\nMPP_ERROR_CODE at runtime, which resolves fine).\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add MPP to server protocol detection, settlement, and omni-chal…",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-02T23:14:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "55713720bfb0c23fbdd80c6e7961279800ef9390",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.10.13 [skip ci]",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-04-01T21:37:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "950c7df97ab72b75129edba2df63f9b02f2e3cb1",
          "body": "… via flag (#146)\n\n* feat: authorize() takes protocols[] array instead of single protocol\n\nEach account implementation picks the first protocol it supports from\nthe array. ATXPAccount calls /authorize/auto — accounts resolves the\nprotocol via feature flag server-side. Local accounts (Base, Solana,\ne\n[…]\nuthorize/mpp log message in mppProtocolHandler.ts\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: authorize() takes protocols[] array — accounts decides protocol…",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-04-01T21:31:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5b5737f2a09ef363e89e26f621c53faa6808f34f",
          "body": "…mpo [skip ci]",
          "is_bot": false,
          "headline": "bump version to 0.10.12 — fix stale cross-deps in client (mpp) and te…",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-04-01T00:23:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51b21a2742a99e9d705fe36a8f8763c2fe45004c",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.10.11 [skip ci]",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-04-01T00:02:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d7b8aab9bcb0e4d35545649843afd415ef2b45ab",
          "body": "@atxp/server had its own PaymentProtocol = 'atxp' | 'x402' which didn't\ninclude 'mpp'. @atxp/common has the canonical type that includes all\nprotocols. Import and re-export from common for type consistency.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: unify PaymentProtocol type",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-03-31T23:49:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9d16ea1dc99910b053108941c9f9dbfd6d4fbe26",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.10.10 [skip ci]",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-03-31T23:31:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "642e77f602261947d71bcd5a4268b984df1a8d80",
          "body": "The old order (install → build → test → version bump → publish) failed\nbecause test resolved @atxp/common from npm (stale version) instead of\nthe local workspace. Moving version bump + npm install before build/test\nensures all workspace deps resolve to the new version.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: reorder release workflow — version bump before build/test",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-03-31T23:17:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "082683647b065d426b04fc9bff1d3c96ce709bdd",
          "body": "- --ignore-existing makes re-runs safe when some packages are already\n  published (e.g. after a partial failure)\n- Add @atxp/mpp and @atxp/tempo to version bump and publish steps\n  (new packages from Phase 1/3)\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: add --ignore-existing to publish, add mpp + tempo packages",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-03-31T22:58:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e6bc1aff16e4731f320b4e02c9146f6e44c75430",
          "body": null,
          "is_bot": false,
          "headline": "revert: remove as Account cast (no longer needed after 0.10.9 publish)",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-03-31T22:57:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "df28a1d874ea996eb5523f6ce139f8ffa1d689c7",
          "body": "Project references typecheck may run before common's .d.ts is built,\ncausing 'authorize does not exist in type Account'. The cast is safe\nsince this is a test helper.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: cast mock Account in serverTestHelpers to fix typecheck",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2026-03-31T22:50:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "afb9149160722d04732acf41992a3ffc8c4be434",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.10.8 [skip ci]",
          "author_name": "GitHub Action",
          "author_login": "actions-user",
          "committed_at": "2026-03-31T22:46:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c63f537124d6bc19b80323d1a15ffbd24436efc",
          "body": "* feat: add PaymentClient + buildPaymentHeaders, refactor handlers\n\nAdd PaymentClient class with authorize() method that centralizes the\n/authorize/{protocol} call pattern. Resolves protocol via protocolFlag,\nbuilds connection token auth headers, constructs protocol-specific\nrequest bodies, returns \n[…]\nus 4.6 (1M context) <noreply@anthropic.com>\n\n* fix: remove unused FetchLike, Logger, createPaymentHeader imports (lint)\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: PaymentClient + buildPaymentHeaders (Phase 2) (#144)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-03-31T22:36:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "37a54ab5d9c8be7cab1442f4ce37084d67c86d6b",
          "body": "…e 1) (#143)\n\n* feat: add multi-protocol support with feature flags and strategy pattern\n\nTask 1.5: Add PaymentProtocol, ProtocolFlag, and ChainFlag types to @atxp/common.\nTask 1.6: Refactor ATXPFetcher with strategy pattern for protocol handlers.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.\n[…]\n: Claude Opus 4.6 <noreply@anthropic.com>\nCo-authored-by: dave <dave_accounts@squads.email>\nCo-authored-by: Dave (Overseer) <dave_overseer@squads.email>\nCo-authored-by: eve <eve_accounts@squads.email>",
          "is_bot": false,
          "headline": "feat: multi-protocol support — unified fetcher + omni-challenge (Phas…",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-03-31T17:02:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a35b1213765231e0855777f81c3bbb1e6b9cd176",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.10.7 [skip ci]",
          "author_name": "Emilio Amaya",
          "author_login": "emilioacc",
          "committed_at": "2026-03-16T19:30:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87555876915f49a83361f193ec6c1613c99a4e2d",
          "body": "Add a getBalance() function to @atxp/server that allows MCP servers to\ncheck a user's available balance without charging. This calls the auth\nserver's new POST /balance endpoint.\n\nChanges:\n- Add BalanceRequest type and getBalance to PaymentServer interface\n- Implement getBalance in ATXPPaymentServer\n[…]\nt like requirePayment)\n- Update serverTestHelpers mock to include getBalance\n- Add tests for ATXPPaymentServer.getBalance and getBalance() helper\n- Bump @atxp/server to 0.10.7\n\nLinear-issue: ATXP-1712",
          "is_bot": false,
          "headline": "feat(server): add getBalance() for balance lookups (#141)",
          "author_name": "emilioacc",
          "author_login": "emilioacc",
          "committed_at": "2026-03-16T18:23:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5279cc33952a9ba1d72dbbd9d34fafd1fb59a11d",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.10.6 [skip ci]",
          "author_name": "GitHub Action",
          "author_login": "actions-user",
          "committed_at": "2026-03-04T18:59:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01a216d00cf16ab54f329ee9689f974cf8e9468e",
          "body": "* feat: add getProfile() to ATXPAccount\n\n- Add MeResponse type with account profile fields\n- Cache full /me response in ATXPAccount\n- Add getProfile() that returns cached profile data\n- Works whether account_id is in connection string or not\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@ant\n[…]\nequests when getProfile() is called\nconcurrently.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add getProfile() to ATXPAccount (#139)",
          "author_name": "emilioacc",
          "author_login": "emilioacc",
          "committed_at": "2026-03-04T18:53:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "36069fdc2fedf6cbcf0d405abd3e6c70843d9c74",
          "body": "* fix(server): Use tsconfig.json for serverTestHelpers rollup build\n\nThe serverTestHelpers rollup config was using `tsconfig: false` with inline\ncompiler options, which bypassed TypeScript project references. During npm\nworkspace publishing, this caused the build to fail to resolve the updated\n`@atx\n[…]\nng @atxp/common@0.10.4\nwhich doesn't have the createSpendPermission method.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(server): Use tsconfig.json for serverTestHelpers rollup build (#138)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-01-15T01:01:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bbb08e4c284539c636b4ac31c0bcd2becfc0c60e",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.10.5 [skip ci]",
          "author_name": "GitHub Action",
          "author_login": "actions-user",
          "committed_at": "2026-01-14T23:40:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "863cfbeb4c0c676dbc46858f0cf9b52e39004ba5",
          "body": "The auth service now returns HTTP 202 for async payments that are accepted\nbut still processing. This change treats 202 the same as 200 (success).\n\n- 200 = synchronous payment completed\n- 202 = async payment accepted (balance checked, executing in background)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Handle 202 Accepted from /charge endpoint (#137)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-01-14T19:02:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "23c5db382f0bbd64f82295b1aaa382d1a03a2b6d",
          "body": "* feat: Add scoped spend token support to SDK\n\nEnables SDK clients to use scoped spend tokens during authorization,\nallowing async charging instead of blocking on payment before each operation.\n\nChanges:\n- Add ScopedSpendConfig type with spendLimit field\n- Add scopedSpendConfig option to ClientConfi\n[…]\n for future account types to support\nspend permissions without duck-typing.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Use resource_url-based spend permissions (#133)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2026-01-14T18:02:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ea7a1a58cd7b7aaeb96b92b06ab207d2ad23a78a",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.10.4 [skip ci]",
          "author_name": "GitHub Action",
          "author_login": "actions-user",
          "committed_at": "2026-01-12T20:52:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e3aae3a5630ab07bd49043fbc0c16c814e47777",
          "body": "* Fix: Use iss field for payment memo instead of payeeName\n\nResolves ATXP-1204 - Bad memo for proxy transactions\n\nWhen making payments through the MCP proxy, the transaction memo was\nbeing set to the MCP server name (e.g., \"Image\") instead of the auth\nserver ID (e.g., \"auth.atxp.ai\"), causing the au\n[…]\nt, fall back to payeeName for backward compatibility\n\nThese tests ensure the proxy transaction memo issue is properly resolved\nand that backward compatibility is maintained for older payment requests.",
          "is_bot": false,
          "headline": "Fix: Use iss field for payment memo instead of payeeName (#135)",
          "author_name": "Rob Di Marco",
          "author_login": "robdimarco-atxp",
          "committed_at": "2026-01-12T20:46:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "db7df518ac693d088ecdd56e3df267559cce0c0f",
          "body": "Major Version Upgrades:\n- @types/node: 22.13.0 → 25.0.3 (across all packages)\n- vitest: 3.0.9 → 4.0.16 (across all packages)\n- @rollup/plugin-commonjs: 28.0.6 → 29.0.0\n- x402: 0.6.1 → 1.1.0\n- jsdom: 25.0.1 → 27.4.0 (dev dependency)\n- dotenv: 16.5.0 → 17.2.3\n- react-native-url-polyfill: 2.0.0 → 3.0.0\n[…]\ng 4 are Solana bigint-buffer issues with no fix available\n\nUpdated all workspace package.json files with new version ranges.\nAll packages build successfully, tests pass, and package validation passes.",
          "is_bot": false,
          "headline": "chore: upgrade dependencies and fix security vulnerabilities (#131)",
          "author_name": "Rob Di Marco",
          "author_login": "robdimarco-atxp",
          "committed_at": "2025-12-30T22:37:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a30213cde7ab0296c521d5e2af250311f44dc27d",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.10.3 [skip ci]",
          "author_name": "GitHub Action",
          "author_login": "actions-user",
          "committed_at": "2025-12-18T23:13:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9604648f5c19d93676e169b0e147b824da64f3be",
          "body": "* Support multi-tenant PRM (PRM URLs not at the domain root)\n\n* Fix tests for multi-tenant PRM URL format\n\n- Fix double-slash bug in PRM URL construction by stripping trailing slashes\n- Update mockResourceServer to use RFC 9728 compliant PRM URL format\n- Update test assertions to match new PRM URL p\n[…]\nefer-const)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Support multi-tenant PRM (PRM URLs not at the domain root) (#130)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2025-12-18T23:07:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9e8b2cc6a7046d9abb4e583e915096970a91da40",
          "body": "ChatGPT's MCP app platform expects authentication challenges to be\nreturned as MCP tool results with `_meta[\"mcp/www_authenticate\"]`\nrather than HTTP 401 responses. This differs from the standard ATXP\nmiddleware which blocks unauthenticated requests at the HTTP level.\n\nThis commit adds:\n- examples/c\n[…]\nted_data: Auth required, no payment\n- premium_greeting: Auth + payment required\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add ChatGPT-compatible authentication example and documentation (#129)",
          "author_name": "David N",
          "author_login": "napoleond",
          "committed_at": "2025-12-18T21:19:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b7cc597e9a38efe50cddb51e4cfa54dc5cc83f45",
          "body": null,
          "is_bot": false,
          "headline": "Use new accountId-only destination in dev:resource",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2025-12-18T17:59:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "376f12787724f1d2442f10ae1b6c2783ad8ca7a6",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.10.2 [skip ci]",
          "author_name": "GitHub Action",
          "author_login": "actions-user",
          "committed_at": "2025-12-17T21:41:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94901f4eb2e5e33cdb623173660d49d3a1db574d",
          "body": "…(#128)\n\nIntroduces a minimal PaymentDestination interface that only requires\ngetAccountId() and getSources() - the bare minimum needed for server\nmiddleware destinations. This allows sprites and other services to\noperate without a full connection_token.\n\nChanges:\n- Add PaymentDestination interface \n[…]\nXPAccount continues to work unchanged since\nAccount extends PaymentDestination.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add PaymentDestination interface for lightweight server destinations …",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2025-12-17T21:34:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cc2e14905b670ca73111b672af349288869105f7",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.10.1 [skip ci]",
          "author_name": "GitHub Action",
          "author_login": "actions-user",
          "committed_at": "2025-12-17T17:22:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5316d2506fa9ebc95fc69e6058fd14f55a620a4b",
          "body": "The accounts server returns `accountId` but the SDK was expecting\n`account_id` (snake_case). This fixes the mismatch so getAccountId()\nworks correctly when fetching from the /me endpoint.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix /me endpoint to expect accountId (camelCase) (#127)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2025-12-17T17:15:30Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ccff8609b80a71f22e65ce7d6fbab101bd47d343",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.10.0 [skip ci]",
          "author_name": "GitHub Action",
          "author_login": "actions-user",
          "committed_at": "2025-12-17T16:34:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80f9fed89382b4b30494f26add53562dd81e0a85",
          "body": "…ction strings (#125)\n\nThis is a breaking change to the Account interface.\n\nChanges:\n- Changed Account interface from `accountId: AccountId` to `getAccountId(): Promise<AccountId>`\n- ATXPAccount now supports connection strings with only `connection_token` (without `account_id`)\n- When `account_id` i\n[…]\nnts in tests need `getAccountId: async () => 'id'` instead of `accountId: 'id'`\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "BREAKING: Make accountId async to support connection_token-only conne…",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2025-12-17T16:27:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7130b36dfbcf9398d58f23b789a80007e7a59fda",
          "body": "This reverts commit 553d1aab094564a0cf8c252ee9a1454decd0cc58.",
          "is_bot": false,
          "headline": "Revert \"feat: Add X-ATXP-Token header fallback for auth (#126)\"",
          "author_name": "Emilio Amaya",
          "author_login": "emilioacc",
          "committed_at": "2025-12-17T01:09:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "553d1aab094564a0cf8c252ee9a1454decd0cc58",
          "body": "* feat: Add X-ATXP-Token header fallback for auth\n\nSome proxies (like Daytona) intercept the Authorization header before\nit reaches the target server. This adds support for X-ATXP-Token as\na fallback header that gets converted to Bearer format.\n\nAlso improves error logging for client registration fa\n[…]\n.9.3-beta.1\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add X-ATXP-Token header fallback for auth (#126)",
          "author_name": "emilioacc",
          "author_login": "emilioacc",
          "committed_at": "2025-12-16T22:01:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3b1d735bca3e6e4c9980b44fb4d32a3a8182e99d",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.9.2 [skip ci]",
          "author_name": "GitHub Action",
          "author_login": "actions-user",
          "committed_at": "2025-12-12T23:11:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec54071ffbdd52ea317c937eff294292a2530aa7",
          "body": null,
          "is_bot": false,
          "headline": "Pick up dependency security fixes (#124)",
          "author_name": "Rob Di Marco",
          "author_login": "robdimarco-atxp",
          "committed_at": "2025-12-12T22:47:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05a3b53fd2b81b944eef49ad191dbb6a2f3effaa",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.9.1 [skip ci]",
          "author_name": "GitHub Action",
          "author_login": "actions-user",
          "committed_at": "2025-12-11T19:23:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "56c69eb11ec082a459d082b589e18aa882430790",
          "body": "When ALCHEMY_API_KEY and ALCHEMY_GAS_POLICY_ID environment variables\nare set, the SDK will use Alchemy's bundler and paymaster infrastructure\ninstead of Coinbase. Falls back to Coinbase if either env var is missing.\n\n- Add @account-kit/infra dependency for official Alchemy transport\n- Add isAlchemyC\n[…]\n configuration\n- Add comprehensive unit tests for provider selection (15 tests)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add Alchemy bundler/paymaster support as alternative to Coinbase (#122)",
          "author_name": "David N",
          "author_login": "napoleond",
          "committed_at": "2025-12-11T19:16:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c48ce55f686ceba0ab4ce6aa09340cadcc33fa81",
          "body": "…guidance (#123)\n\n## What Changed\n\n### 1. Structured Error Classes\n- Added `ATXPPaymentError` base class with error codes, retry flags, and actionable messages\n- Created specific error types: `TransactionRevertedError`, `UnsupportedCurrencyError`,\n  `GasEstimationError`, `RpcError`, `UserRejectedErr\n[…]\n Better user experience with specific, actionable error messages\n- Programmatic error handling via error codes\n- Improved debugging with structured telemetry\n- Clear retry guidance based on error type",
          "is_bot": false,
          "headline": "Improve payment error handling with structured errors and actionable …",
          "author_name": "Rob Di Marco",
          "author_login": "robdimarco-atxp",
          "committed_at": "2025-12-11T19:02:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8f7949a029d1076eefe00c417424228fd4c3c6bf",
          "body": null,
          "is_bot": false,
          "headline": "Update dev: scripts so they can still be used for testing",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2025-12-09T23:34:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a55d7c181ed92ffbc0e235f2563f2335f516188",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.9.0 [skip ci]",
          "author_name": "GitHub Action",
          "author_login": "actions-user",
          "committed_at": "2025-12-09T15:15:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "328838b79f831a695957a01133763485c1e45164",
          "body": "…120)\n\nBREAKING CHANGE: Blockchain-specific code has been moved to separate packages\n\n- Created @atxp/solana package for all Solana wallet/payment code\n- Moved all Base chain code to @atxp/base (both Mini App and generic implementations)\n- Removed Solana peer dependencies from @atxp/client\n- @atxp/c\n[…]\nrom packages not using Solana\n- Clear package boundaries and separation of concerns\n- Users only install blockchain dependencies they need\n- No confusing peer dependency flags required\n\nFixes ATXP-867",
          "is_bot": false,
          "headline": "Make blockchain dependencies optional via modular exports (v0.9.0) (#…",
          "author_name": "Rob Di Marco",
          "author_login": "robdimarco-atxp",
          "committed_at": "2025-12-09T14:30:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fbd926d407496588ef7cc674788d1808966a4ef5",
          "body": "Replace secure_data tool with interactive tic-tac-toe game demonstrating\nMCP Apps interactivity:\n\nServer-side:\n- Game state management with per-user state storage\n- tictactoe_move tool: make a move, AI responds automatically\n- tictactoe_new_game tool: reset the game\n- Simple AI that tries to win, bl\n[…]\ncalls\n- Requests size via ui-size-change (both MCP Apps SEP and MCP-UI formats)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "WIP: Interactive tic-tac-toe MCP App demo (#119)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2025-12-08T23:19:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "55c900722b96c2888b829c964bc93975258b3c30",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.8.3 [skip ci]",
          "author_name": "GitHub Action",
          "author_login": "actions-user",
          "committed_at": "2025-12-08T20:07:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0d1707e8c3828b41e6c3fa49c21774801541d32",
          "body": "…esource",
          "is_bot": false,
          "headline": "Configurable port for testing multiple MCP servers with npm run dev:r…",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2025-12-03T00:20:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c31f8682d9c68f6e67f407d88951fa0c2682ca81",
          "body": null,
          "is_bot": false,
          "headline": "Use prod auth",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2025-12-02T01:15:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75a8e000df111046244a5bf62bb7234b32b547ab",
          "body": "* Server: submit OAuth token to /charge endpoint\n\n* Update tests",
          "is_bot": false,
          "headline": "Server: submit OAuth token to /charge endpoint (#118)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2025-12-01T23:06:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60d9782e0e0e28525a23248dfe802158da30c042",
          "body": null,
          "is_bot": false,
          "headline": "Add UI to dev:resource MCP server (#117)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2025-12-01T22:15:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b320a5cd3eeb137cdf66f219406dac8cd0a4e80",
          "body": "* Update types to reflect PaymentRequest current state\n\n* Update codebase for PaymentRequest type changes\n\nUpdates all code to use the new PaymentRequest type structure:\n- Rename PaymentRequestData to PaymentRequest throughout\n- Change destinations array to options array\n- Remove deprecated source f\n[…]\ncharge() to return a boolean.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Update codebase for PaymentRequest type changes (#116)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2025-12-01T17:49:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1087f90ca251b8c909d6927759631b0f116da8ce",
          "body": "…d clients! (#112)\n\n* Developer Mode | Add atxpConnectionToken to various configurations and clients\n\n* Developer Mode | Remove atxpConnectionToken from various configurations and tests\n\n* Developer Mode | Update server URL to use HTTPS for ATXP Express\n\n* Developer Mode | Add registrationType to OAuthResourceClient and OAuthClient configurations\n\n* Making Brian Happy! | Moving connection-token to header instead of body!",
          "is_bot": false,
          "headline": "Developer Mode | Add atxpConnectionToken to various configurations an…",
          "author_name": "R-M-Naveen",
          "author_login": "R-M-Naveen",
          "committed_at": "2025-11-20T23:25:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b34cbaec0c9ae2290881bd489e1f86d1c1eb13e7",
          "body": "Previously, when an empty string, undefined, or null was passed to\nATXPAccount constructor, it would throw a generic \"Invalid URL\" error.\nThis was not helpful for debugging.\n\nNow, the parseConnectionString function checks for empty/null/undefined\nconnection strings upfront and throws a clear error m\n[…]\nalue\n- Malformed URL\n- Missing connection_token parameter\n- Missing account_id parameter\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Improve ATXPAccount error message for empty connection strings (#114)",
          "author_name": "Brian DeJong",
          "author_login": "badjer",
          "committed_at": "2025-11-18T20:31:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b43df2ea3fd638a0b82604d444f04b417a2cbae5",
          "body": null,
          "is_bot": false,
          "headline": "Cleared unused env variables check that fails cli invocation (#113)",
          "author_name": "Henry Tsai",
          "author_login": "thehenrytsai",
          "committed_at": "2025-11-18T20:29:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4573ed838e0e80163175a74f785dcbf023c1951a",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.8.2 [skip ci]",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2025-11-01T00:07:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "afff13ffdfa2e396fbc88b603dd1fbd3b2ad83f2",
          "body": "The npm install step was creating additional file changes after the initial\ncommit, causing 'unstaged changes' error during rebase. Now using git add -A\nto capture all changes, and making the push non-fatal since publishing is\nthe critical operation.",
          "is_bot": false,
          "headline": "Fix git pull rebase failure by adding all changes before commit",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2025-11-01T00:00:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b3ab6053cd93164d0b95b90ab4be9aec4c3e78c",
          "body": "The rebuild after version bump was trying to resolve dependencies from NPM\nbefore they were published, causing TypeScript errors for workspace dependencies.\nThe packages are already built correctly at the start of the workflow.",
          "is_bot": false,
          "headline": "Remove unnecessary rebuild step that causes publish failures",
          "author_name": "bdj",
          "author_login": "badjer",
          "committed_at": "2025-10-31T23:46:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 53,
      "commits_last_year": 249,
      "latest_release_at": "2026-06-02T16:03:39Z",
      "latest_release_tag": "v0.11.12",
      "releases_from_tags": false,
      "days_since_last_push": 24,
      "active_weeks_last_year": 27,
      "days_since_latest_release": 54,
      "mean_days_between_releases": 10
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 37,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@atxp/mpp",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@atxp/mpp",
          "is_deprecated": false,
          "latest_version": "0.11.11",
          "repository_url": "https://github.com/atxp-dev/sdk",
          "versions_count": 17,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 6,
          "monthly_downloads": 3072,
          "first_published_at": "2026-03-31T23:11:18.022000Z",
          "latest_published_at": "2026-06-02T14:39:28.773000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 54
        },
        {
          "name": "@atxp/base",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@atxp/base",
          "is_deprecated": false,
          "latest_version": "0.11.11",
          "repository_url": "https://github.com/atxp-dev/sdk",
          "versions_count": 54,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 6,
          "monthly_downloads": 321,
          "first_published_at": "2025-08-27T16:29:53.704000Z",
          "latest_published_at": "2026-06-02T14:39:53.331000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 54
        },
        {
          "name": "@atxp/x402",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@atxp/x402",
          "is_deprecated": false,
          "latest_version": "0.11.11",
          "repository_url": "https://github.com/atxp-dev/sdk",
          "versions_count": 39,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 6,
          "monthly_downloads": 239,
          "first_published_at": "2025-09-21T23:53:19.516000Z",
          "latest_published_at": "2026-06-02T14:40:35.538000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 54
        },
        {
          "name": "@atxp/redis",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@atxp/redis",
          "is_deprecated": false,
          "latest_version": "0.11.11",
          "repository_url": "https://github.com/atxp-dev/sdk",
          "versions_count": 60,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 6,
          "monthly_downloads": 348,
          "first_published_at": "2025-08-21T17:28:52.841000Z",
          "latest_published_at": "2026-06-02T14:39:24.439000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 54
        },
        {
          "name": "@atxp/tempo",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@atxp/tempo",
          "is_deprecated": false,
          "latest_version": "0.11.11",
          "repository_url": "https://github.com/atxp-dev/sdk",
          "versions_count": 16,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 6,
          "monthly_downloads": 195,
          "first_published_at": "2026-03-31T23:28:22.998000Z",
          "latest_published_at": "2026-06-02T14:40:20.306000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 54
        },
        {
          "name": "@atxp/client",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@atxp/client",
          "is_deprecated": false,
          "latest_version": "0.11.12",
          "repository_url": "https://github.com/atxp-dev/sdk",
          "versions_count": 65,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 6,
          "monthly_downloads": 3485,
          "first_published_at": "2025-08-18T20:36:40.385000Z",
          "latest_published_at": "2026-06-02T16:04:07.853000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 54
        },
        {
          "name": "@atxp/common",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@atxp/common",
          "is_deprecated": false,
          "latest_version": "0.11.11",
          "repository_url": "https://github.com/atxp-dev/sdk",
          "versions_count": 65,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 6,
          "monthly_downloads": 3275,
          "first_published_at": "2025-08-18T20:36:24.236000Z",
          "latest_published_at": "2026-06-02T14:39:15.322000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 54
        },
        {
          "name": "@atxp/server",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@atxp/server",
          "is_deprecated": false,
          "latest_version": "0.11.11",
          "repository_url": "https://github.com/atxp-dev/sdk",
          "versions_count": 64,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 6,
          "monthly_downloads": 475,
          "first_published_at": "2025-08-18T20:36:34Z",
          "latest_published_at": "2026-06-02T14:39:34.449000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 54
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 5,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2025-09-29",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 5
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "examples/basic/tsconfig.json",
        "examples/batch-payments/tsconfig.json",
        "examples/chatgpt-server/tsconfig.json",
        "examples/mastra/tsconfig.json",
        "examples/multichain/tsconfig.json",
        "examples/server/tsconfig.json",
        "examples/vercel-sdk/tsconfig.json",
        "examples/x402/tsconfig.json",
        "packages/atxp-base/tsconfig.json",
        "packages/atxp-client/tsconfig.json",
        "packages/atxp-cloudflare/tsconfig.json",
        "packages/atxp-common/tsconfig.json",
        "packages/atxp-express/tsconfig.json",
        "packages/atxp-mpp/tsconfig.json",
        "packages/atxp-polygon/tsconfig.json",
        "packages/atxp-redis/tsconfig.json",
        "packages/atxp-server/tsconfig.json",
        "packages/atxp-solana/tsconfig.json",
        "packages/atxp-sqlite/tsconfig.json",
        "packages/atxp-tempo/tsconfig.json",
        "packages/atxp-worldchain/tsconfig.json",
        "packages/atxp-x402/tsconfig.json",
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 37681,
      "source_files_sampled": 248,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 2447
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "dotenv",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^17.2.3"
        },
        {
          "name": "@account-kit/infra",
          "manifest": "packages/atxp-base/package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.81.3"
        },
        {
          "name": "@atxp/client",
          "manifest": "packages/atxp-base/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "@atxp/common",
          "manifest": "packages/atxp-base/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "@x402/core",
          "manifest": "packages/atxp-base/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.9.0"
        },
        {
          "name": "@x402/evm",
          "manifest": "packages/atxp-base/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.9.0"
        },
        {
          "name": "bignumber.js",
          "manifest": "packages/atxp-base/package.json",
          "ecosystem": "npm",
          "version_constraint": "^9.3.0"
        },
        {
          "name": "viem",
          "manifest": "packages/atxp-base/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.34.0"
        },
        {
          "name": "@atxp/common",
          "manifest": "packages/atxp-client/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.11"
        },
        {
          "name": "@atxp/mpp",
          "manifest": "packages/atxp-client/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.11"
        },
        {
          "name": "@modelcontextprotocol/sdk",
          "manifest": "packages/atxp-client/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.15.0"
        },
        {
          "name": "@x402/core",
          "manifest": "packages/atxp-client/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.9.0"
        },
        {
          "name": "@x402/evm",
          "manifest": "packages/atxp-client/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.9.0"
        },
        {
          "name": "bignumber.js",
          "manifest": "packages/atxp-client/package.json",
          "ecosystem": "npm",
          "version_constraint": "^9.3.0"
        },
        {
          "name": "oauth4webapi",
          "manifest": "packages/atxp-client/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.8.3"
        },
        {
          "name": "@atxp/common",
          "manifest": "packages/atxp-cloudflare/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "@atxp/server",
          "manifest": "packages/atxp-cloudflare/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "bignumber.js",
          "manifest": "packages/atxp-common/package.json",
          "ecosystem": "npm",
          "version_constraint": "^9.3.0"
        },
        {
          "name": "jose",
          "manifest": "packages/atxp-common/package.json",
          "ecosystem": "npm",
          "version_constraint": "^6.0.11"
        },
        {
          "name": "oauth4webapi",
          "manifest": "packages/atxp-common/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.8.3"
        },
        {
          "name": "tweetnacl",
          "manifest": "packages/atxp-common/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.0.3"
        },
        {
          "name": "tweetnacl-util",
          "manifest": "packages/atxp-common/package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.15.1"
        },
        {
          "name": "@atxp/server",
          "manifest": "packages/atxp-express/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "@atxp/client",
          "manifest": "packages/atxp-polygon/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "@atxp/common",
          "manifest": "packages/atxp-polygon/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "bignumber.js",
          "manifest": "packages/atxp-polygon/package.json",
          "ecosystem": "npm",
          "version_constraint": "^9.3.0"
        },
        {
          "name": "viem",
          "manifest": "packages/atxp-polygon/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.34.0"
        },
        {
          "name": "@atxp/common",
          "manifest": "packages/atxp-redis/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "ioredis",
          "manifest": "packages/atxp-redis/package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.7.0"
        },
        {
          "name": "@atxp/common",
          "manifest": "packages/atxp-server/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "@atxp/mpp",
          "manifest": "packages/atxp-server/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "@modelcontextprotocol/sdk",
          "manifest": "packages/atxp-server/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.15.0"
        },
        {
          "name": "bignumber.js",
          "manifest": "packages/atxp-server/package.json",
          "ecosystem": "npm",
          "version_constraint": "^9.3.0"
        },
        {
          "name": "oauth4webapi",
          "manifest": "packages/atxp-server/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.8.3"
        },
        {
          "name": "@atxp/client",
          "manifest": "packages/atxp-solana/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "@atxp/common",
          "manifest": "packages/atxp-solana/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "@solana/pay",
          "manifest": "packages/atxp-solana/package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.2.5"
        },
        {
          "name": "@solana/web3.js",
          "manifest": "packages/atxp-solana/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.98.1"
        },
        {
          "name": "bignumber.js",
          "manifest": "packages/atxp-solana/package.json",
          "ecosystem": "npm",
          "version_constraint": "^9.3.0"
        },
        {
          "name": "bs58",
          "manifest": "packages/atxp-solana/package.json",
          "ecosystem": "npm",
          "version_constraint": "^6.0.0"
        },
        {
          "name": "@atxp/common",
          "manifest": "packages/atxp-sqlite/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "better-sqlite3",
          "manifest": "packages/atxp-sqlite/package.json",
          "ecosystem": "npm",
          "version_constraint": "^12.2.0"
        },
        {
          "name": "@atxp/client",
          "manifest": "packages/atxp-tempo/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "@atxp/common",
          "manifest": "packages/atxp-tempo/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "bignumber.js",
          "manifest": "packages/atxp-tempo/package.json",
          "ecosystem": "npm",
          "version_constraint": "^9.3.0"
        },
        {
          "name": "viem",
          "manifest": "packages/atxp-tempo/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.34.0"
        },
        {
          "name": "@atxp/client",
          "manifest": "packages/atxp-worldchain/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "@atxp/common",
          "manifest": "packages/atxp-worldchain/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "@worldcoin/minikit-js",
          "manifest": "packages/atxp-worldchain/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.9.6"
        },
        {
          "name": "bignumber.js",
          "manifest": "packages/atxp-worldchain/package.json",
          "ecosystem": "npm",
          "version_constraint": "^9.3.0"
        },
        {
          "name": "viem",
          "manifest": "packages/atxp-worldchain/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.34.0"
        },
        {
          "name": "@atxp/base",
          "manifest": "packages/atxp-x402/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "@atxp/client",
          "manifest": "packages/atxp-x402/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "@atxp/common",
          "manifest": "packages/atxp-x402/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.11.10"
        },
        {
          "name": "@x402/core",
          "manifest": "packages/atxp-x402/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.9.0"
        },
        {
          "name": "@x402/evm",
          "manifest": "packages/atxp-x402/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.9.0"
        },
        {
          "name": "bignumber.js",
          "manifest": "packages/atxp-x402/package.json",
          "ecosystem": "npm",
          "version_constraint": "^9.1.2"
        },
        {
          "name": "viem",
          "manifest": "packages/atxp-x402/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.21.54"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 2,
        "merged_prs": 155,
        "open_issues": 3,
        "closed_ratio": 0.5,
        "closed_issues": 3,
        "closed_unmerged_prs": 21
      },
      "bus_factor": 2,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "badjer",
          "commits": 102,
          "avatar_url": "https://avatars.githubusercontent.com/u/159024?v=4"
        },
        {
          "type": "User",
          "login": "robdimarco-atxp",
          "commits": 81,
          "avatar_url": "https://avatars.githubusercontent.com/u/214184701?v=4"
        },
        {
          "type": "User",
          "login": "actions-user",
          "commits": 45,
          "avatar_url": "https://avatars.githubusercontent.com/u/65916846?v=4"
        },
        {
          "type": "User",
          "login": "R-M-Naveen",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/243160589?v=4"
        },
        {
          "type": "User",
          "login": "emilioacc",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/240322964?v=4"
        },
        {
          "type": "User",
          "login": "napoleond",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/1054155?v=4"
        },
        {
          "type": "User",
          "login": "zachwick",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/406510?v=4"
        },
        {
          "type": "User",
          "login": "thehenrytsai",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/17891086?v=4"
        },
        {
          "type": "User",
          "login": "naveen-rm",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/236294277?v=4"
        }
      ],
      "contributors_sampled": 9,
      "top_contributor_share": 0.41
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "github-releases-to-discord.yaml",
        "package-manager-integration.yml",
        "release.yaml",
        "test.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "21 out of 21 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 4 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "13 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 2,
            "reason": "dependency not pinned by hash detected -- score normalized to 2",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "197 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "1f83d6590b9e97424b9c0c98296439d7ac292076",
        "ran_at": "2026-07-27T07:16:29Z",
        "aggregate_score": 4.3,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-06-30T21:10:25Z",
      "oldest_open_prs": [
        {
          "number": 168,
          "created_at": "2026-05-07T03:16:46Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 185,
          "created_at": "2026-06-30T23:25:36Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-06-30T21:04:42Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 178,
          "created_at": "2026-06-17T20:18:11Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 179,
          "created_at": "2026-06-17T20:30:43Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 180,
          "created_at": "2026-06-17T20:30:44Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/atxp-dev/sdk",
    "host": "github.com",
    "name": "sdk",
    "owner": "atxp-dev"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 61,
      "inputs": {
        "security": 43,
        "vitality": 86,
        "community": 38,
        "governance": 66,
        "engineering": 63
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 86,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 76,
            "inputs": {
              "commits_last_year": 249,
              "human_commit_share": 1,
              "days_since_last_push": 24,
              "active_weeks_last_year": 27
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 24 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 24
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "27/52 weeks with commits",
                "points": 18.7,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 27
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "249 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 249
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "13 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 53,
              "latest_release_tag": "v0.11.12",
              "releases_from_tags": false,
              "days_since_latest_release": 54,
              "mean_days_between_releases": 10
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "53 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 53
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 54 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 54
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~10 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 10
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 26,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 26 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 26
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 38,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "forks": 1,
              "stars": 5,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "5 stars",
                "points": 9.8,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 68,
            "inputs": {
              "packages": [
                "@atxp/mpp",
                "@atxp/base",
                "@atxp/x402",
                "@atxp/redis",
                "@atxp/tempo",
                "@atxp/client",
                "@atxp/common",
                "@atxp/server"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 11410
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "11,410 downloads/month across npm",
                "points": 54.1,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 11410,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 66,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 61,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 9,
              "top_contributor_share": 0.41
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 41% of commits",
                "points": 13.3,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 41
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "9 contributors",
                "points": 12.2,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 4 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "merged_prs": 155,
              "open_issues": 3,
              "closed_issues": 3,
              "issue_closed_ratio": 0.5,
              "closed_unmerged_prs": 21
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "50% of issues closed",
                "points": 23.4,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 50
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "155/176 decided PRs merged",
                "points": 33.7,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 155,
                      "decided": 176
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "followers": 49,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "atxp-dev",
              "public_repos": 17,
              "account_age_days": 346
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "49 followers of atxp-dev",
                "points": 12.2,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 49,
                      "login": "atxp-dev"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "17 public repos, account ~0 yr old",
                "points": 11,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 17
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "@atxp/mpp",
                "@atxp/base",
                "@atxp/x402",
                "@atxp/redis",
                "@atxp/tempo",
                "@atxp/client",
                "@atxp/common",
                "@atxp/server"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 54
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "8 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 8,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 54 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 54
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "65 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 65
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 63,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "21 out of 21 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 43,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 43,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 4.3
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "21 out of 21 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 4 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "13 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 2",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "197 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 71,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "good",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 83,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.71,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 2447
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "71 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 37.9,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 71,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "examples/basic/tsconfig.json",
                "examples/batch-payments/tsconfig.json",
                "examples/chatgpt-server/tsconfig.json",
                "examples/mastra/tsconfig.json",
                "examples/multichain/tsconfig.json",
                "examples/server/tsconfig.json",
                "examples/vercel-sdk/tsconfig.json",
                "examples/x402/tsconfig.json",
                "packages/atxp-base/tsconfig.json",
                "packages/atxp-client/tsconfig.json",
                "packages/atxp-cloudflare/tsconfig.json",
                "packages/atxp-common/tsconfig.json",
                "packages/atxp-express/tsconfig.json",
                "packages/atxp-mpp/tsconfig.json",
                "packages/atxp-polygon/tsconfig.json",
                "packages/atxp-redis/tsconfig.json",
                "packages/atxp-server/tsconfig.json",
                "packages/atxp-solana/tsconfig.json",
                "packages/atxp-sqlite/tsconfig.json",
                "packages/atxp-tempo/tsconfig.json",
                "packages/atxp-worldchain/tsconfig.json",
                "packages/atxp-x402/tsconfig.json",
                "tsconfig.json"
              ],
              "agent_commit_share": 0.54,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "examples/basic/tsconfig.json, examples/batch-payments/tsconfig.json, examples/chatgpt-server/tsconfig.json, examples/mastra/tsconfig.json, examples/multichain/tsconfig.json, examples/server/tsconfig.json, examples/vercel-sdk/tsconfig.json, examples/x402/tsconfig.json, packages/atxp-base/tsconfig.json, packages/atxp-client/tsconfig.json, packages/atxp-cloudflare/tsconfig.json, packages/atxp-common/tsconfig.json, packages/atxp-express/tsconfig.json, packages/atxp-mpp/tsconfig.json, packages/atxp-polygon/tsconfig.json, packages/atxp-redis/tsconfig.json, packages/atxp-server/tsconfig.json, packages/atxp-solana/tsconfig.json, packages/atxp-sqlite/tsconfig.json, packages/atxp-tempo/tsconfig.json, packages/atxp-worldchain/tsconfig.json, packages/atxp-x402/tsconfig.json, tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples/basic/tsconfig.json, examples/batch-payments/tsconfig.json, examples/chatgpt-server/tsconfig.json, examples/mastra/tsconfig.json, examples/multichain/tsconfig.json, examples/server/tsconfig.json, examples/vercel-sdk/tsconfig.json, examples/x402/tsconfig.json, packages/atxp-base/tsconfig.json, packages/atxp-client/tsconfig.json, packages/atxp-cloudflare/tsconfig.json, packages/atxp-common/tsconfig.json, packages/atxp-express/tsconfig.json, packages/atxp-mpp/tsconfig.json, packages/atxp-polygon/tsconfig.json, packages/atxp-redis/tsconfig.json, packages/atxp-server/tsconfig.json, packages/atxp-solana/tsconfig.json, packages/atxp-sqlite/tsconfig.json, packages/atxp-tempo/tsconfig.json, packages/atxp-worldchain/tsconfig.json, packages/atxp-x402/tsconfig.json, tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "54 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 54,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 2",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 37681,
              "source_files_sampled": 248,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/248 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 248,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "moderate",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "Could not fetch npm package '@atxp/atxp-monorepo' from its registry",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T07:16:50.338677Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/atxp-dev/sdk.svg",
  "full_name": "atxp-dev/sdk",
  "license_state": "standard",
  "license_spdx": "MIT"
}