0x666c6f / berth

Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 15621,
      "has_wiki": true,
      "homepage": "https://0x666c6f.github.io/berth/",
      "languages": {
        "Go": 1601732,
        "CSS": 410,
        "HTML": 375,
        "Shell": 52986,
        "Makefile": 1220,
        "Dockerfile": 15907,
        "TypeScript": 166192
      },
      "pushed_at": "2026-07-10T08:37:44Z",
      "created_at": "2026-04-07T08:49:15Z",
      "owner_type": "User",
      "updated_at": "2026-07-09T09:37:38Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Florian",
      "type": "User",
      "login": "0x666c6f",
      "company": "@morpho-org  ",
      "location": null,
      "followers": 17,
      "avatar_url": "https://avatars.githubusercontent.com/u/4120347?v=4",
      "created_at": "2013-04-10T23:09:24Z",
      "is_verified": null,
      "public_repos": 36,
      "account_age_days": 4851
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.6.0",
          "kind": "minor",
          "published_at": "2026-07-09T09:40:45Z"
        },
        {
          "tag": "v1.5.3",
          "kind": "patch",
          "published_at": "2026-07-09T09:26:19Z"
        },
        {
          "tag": "v1.5.2",
          "kind": "patch",
          "published_at": "2026-07-08T23:36:11Z"
        },
        {
          "tag": "v1.5.1",
          "kind": "patch",
          "published_at": "2026-07-08T23:25:36Z"
        },
        {
          "tag": "v1.5.0",
          "kind": "minor",
          "published_at": "2026-07-08T21:41:23Z"
        },
        {
          "tag": "v1.4.3",
          "kind": "patch",
          "published_at": "2026-07-08T20:49:34Z"
        },
        {
          "tag": "v1.4.2",
          "kind": "patch",
          "published_at": "2026-07-08T16:30:41Z"
        },
        {
          "tag": "v1.4.1",
          "kind": "patch",
          "published_at": "2026-07-08T16:07:52Z"
        },
        {
          "tag": "v1.4.0",
          "kind": "minor",
          "published_at": "2026-07-08T14:55:49Z"
        },
        {
          "tag": "v1.3.0",
          "kind": "minor",
          "published_at": "2026-07-08T13:56:51Z"
        },
        {
          "tag": "v1.2.0",
          "kind": "minor",
          "published_at": "2026-07-08T13:35:43Z"
        },
        {
          "tag": "v1.1.0",
          "kind": "minor",
          "published_at": "2026-07-08T08:46:50Z"
        },
        {
          "tag": "v1.0.2",
          "kind": "patch",
          "published_at": "2026-07-07T13:31:42Z"
        },
        {
          "tag": "v1.0.1",
          "kind": "patch",
          "published_at": "2026-07-07T11:47:53Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2026-07-07T09:40:35Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2026-07-07T08:47:58Z"
        },
        {
          "tag": "v0.8.1",
          "kind": "patch",
          "published_at": "2026-07-07T08:21:11Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2026-07-07T08:05:45Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-07-04T21:05:19Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-06-24T07:55:36Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-06-23T15:21:48Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-04-14T12:54:33Z"
        },
        {
          "tag": "v0.3.4",
          "kind": "patch",
          "published_at": "2026-04-13T22:10:19Z"
        },
        {
          "tag": "v0.3.3",
          "kind": "patch",
          "published_at": "2026-04-13T21:34:21Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2026-04-13T21:28:54Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2026-04-13T14:07:26Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-04-13T09:04:19Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-04-12T21:59:49Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2026-04-10T12:35:20Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-04-10T12:26:14Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "c351b9c8c74f2e5311c7599081837bd2c8893989",
          "body": "Reverts the hook stripping from #46 and makes seeded hooks actually\nexecutable, per user request:\n\n- hooks/ is back in the support tar and the hooks key stays in the\n  seeded settings.json.\n- The ephemeral auth tmpfs (~/.claude, ~/.codex) now mounts with exec:\n  Docker's tmpfs default is noexec, and\n[…]\nd live: hook seeded 0755, PreToolUse fires with zero\npermission-denied noise, and direct execution returns\n{\"decision\": \"continue\"} with exit 0.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(spawn): seed host hooks and let them run in the sandbox (#47)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-09T09:37:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5a2c0b71e89cd0939a3effee55797045309045e7",
          "body": "* fix(spawn): accurate limits handling; stop seeding unusable hooks\n\nFollow-ups from the full-QA sweep:\n\n- --memory/--cpus can never work on Apple container machines: the\n  guest's /sys/fs/cgroup is a namespaced view of a cgroup vminitd owns\n  from outside — migrating processes out of the namespace \n[…]\ns impossible on Apple\n  container machines regardless of who starts dockerd).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(spawn): accurate limits handling; stop seeding unusable hooks (#46)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-09T09:13:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "490e8781d884f0550b2afda3a4d03ac3812c3b9a",
          "body": "Two more full-QA findings:\n\n- Fleet/pipeline agents exec'd claude/codex directly, replacing the\n  session shell — the session.end event never got written, so\n  session_exit_code fell back to 1 and every successful fleet run\n  reported failure (verified live: pane showed the correct answer,\n  contain\n[…]\nmap order (claude-opus-4 at $15/$75 could shadow\n  claude-opus-4-8 at $5/$25). Added current entries and made the\n  longest matching prefix win.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(fleet): report real exit code; price current Claude models (#45)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-08T23:33:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d3475a11c3e6e401fea2f767e89a1410583ce69e",
          "body": "* fix(vm): supervise tinyproxy under init; make diagnose honest\n\nQA findings on a rebooted host:\n\n- tinyproxy started from a machine-run session sometimes died with the\n  session teardown, so api-only spawns failed closed after a clean\n  `berth vm start`. Supervise it from /etc/inittab (::respawn: v\n[…]\nfail\n  closed against a healthy VM provisioned before the inittab supervisor.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(vm): supervise tinyproxy under init; make diagnose honest (#44)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-08T23:22:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b589b8120858d2c936ff47f61cc047e2b9f87f6f",
          "body": "…heck (#43)\n\nAdds an unconditional, read-only softnet passwordless-sudo (NOPASSWD) check to `detonate check` — the #1 detonation gotcha, caught at preflight instead of at boot. Parses `sudo -n -l` without executing softnet or prompting; conservative token/tag-aware matching avoids false-positives. Codex-reviewed, table-tested.",
          "is_bot": false,
          "headline": "feat(detonate): preflight passwordless-sudo for softnet in detonate c…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-08T21:38:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "217c03f16ae955ccd8dd344e47bc71d60981c8a6",
          "body": "…ple, window-as-success (#42)\n\nLive-verifying the full detonate lifecycle against real Tart surfaced three defects that made a real `detonate run` impossible:\n\n- inject built a UDRO .dmg that Tart's --disk rejects; now builds a read-only ISO 9660 via `hdiutil makehybrid -iso`.\n- run read the sample \n[…]\nted as completed. Genuine early failures and parent-context cancels still propagate.\n\nCodex-reviewed; verified live end to end (softnet-isolated boot, read-only sample, symlink-safe collect, destroy).",
          "is_bot": false,
          "headline": "fix(detonate): make run work end-to-end — real ISO, cross-process sam…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-08T20:46:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "56219a28c9cb0fddd3ec44593012dea7f8492c3e",
          "body": "…nt busy (#41)\n\nhdiutil create intermittently fails with 'Resource busy' on shared CI runners,\nflaking TestTartRunner_InjectOffline_RealHdiutilBuildsImage and blocking the\nrelease (it gates on macos unit tests) — which stranded the tinyproxy fix\nunreleased. Retry the build a few times and skip (not fail) if hdiutil stays\nbusy; a non-hdiutil error still fails immediately.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(test): retry the real-hdiutil InjectOffline test, skip on transie…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-08T16:27:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "cae4c58a60587e884213429d1d9f04ad66d19dd0",
          "body": "…rop (#40)\n\nv1.4.1 added a LogFile directive but the log stays root-owned while tinyproxy\ndrops to the tinyproxy user, so it died at startup with 'Could not open file\n/var/log/tinyproxy.log: Permission denied' and api-only enforcement was ✗ after\na clean 'berth vm start'. Create + chown the log to t\n[…]\nxy before launch.\nVerified live: the proxy now persists across the machine-run session and\n'berth diagnose' reports api-only enforcement active.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(vm): chown tinyproxy log so the proxy can start after privilege d…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-08T16:15:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "12eeabe12ea33c78fccad637ee841ffeb7918e78",
          "body": "Two bugs that broke a clean 'berth vm start' from a Homebrew install:\n\n1. build-root discovery used os.Executable() without resolving symlinks, so a\n   brew install (bin/berth -> Cellar/.../libexec/bin/berth) never found its\n   bundled Dockerfile/entrypoint.sh/vm/setup.sh, and 'berth vm start' faile\n[…]\ned closed) right\n   after a successful provision. Let tinyproxy self-daemonize (foreground\n   invocation), add a LogFile, and verify it came up.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: resolve brew symlink for build root; start tinyproxy reliably (#39)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-08T16:04:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "03ad55212b803f5e5be0224567a340e7fdfb3ffb",
          "body": "…(#38)\n\nDrive the full detonation lifecycle (create -> inject -> run -> collect ->\ndestroy, plus no-reuse and fresh-recreate) through the real CLI verb handlers\nand the real detonate.TartRunner, faking only the tart/hdiutil process exec.\nThis exercises the real arg construction, output parsing, the \n[…]\nexternal-package test can inject a fake tart/hdiutil; matches the existing\nnewRunner/newExecutor/lookPath test-seam pattern, no behavior change.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(detonate): end-to-end lifecycle test against a mock tart runner …",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-08T15:11:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "593180b517c4f43228dd77a17dec97eb01cd9de9",
          "body": "* feat(detonate): add 'check' environment-isolation preflight\n\nRead-only preflight that validates the detonation environment is present\nAND provably isolated without running, cloning, or booting anything. Prints\na ✓/✗ checklist and exits non-zero if any hard check fails (fail closed).\n\nChecks: tart \n[…]\nom>\n\n* test(detonate): cover check hdiutil-absent and malformed-gateway paths\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(detonate): add 'check' environment-isolation preflight (#37)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-08T14:52:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "eac75c2a27e3d16e7384528b39794c8873cf6c16",
          "body": "…ouble-v (#36)\n\nThe detonate harness was built by make build-all but never packaged into the\nrelease tarball or symlinked by the Homebrew formula, so brew users never got\nit. Build a universal detonate binary, add it to the tarball, and symlink it\nin the formula. Also strip the leading v from the injected version so\n`berth --version` prints \"berth v1.2.0\", not \"berth vv1.2.0\".\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(release): ship the detonate binary and fix the berth --version d…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-08T13:53:27Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1e6d79ef9ca23b6b61db0af7fae2309e249350f8",
          "body": "…mple attach (#35)\n\n* feat(detonate): code-enforced softnet isolation and real read-only sample attach\n\nReplace forbidden bridged networking with Tart's isolated softnet plus a\nrestrictive private-CIDR allow-list, and complete InjectOffline so the built\nread-only sample image is attached at `tart ru\n[…]\nom>\n\n* harden(detonate): reject IPv6/v4-mapped notation in softnet allow-list\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(detonate): code-enforced softnet isolation and real read-only sa…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-08T13:31:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "85381e7aa6ba5ed0510e542ac34270a69b34d50b",
          "body": "…vidence mount, detonation harness (#34)\n\n* feat(docker): add api-only managed network with bti bridge prefix\n\n* feat(policy): add api-only network mode constant\n\n* feat(risk): surface api-only network posture in spawn notices\n\n* feat(spawn): route api-only agents through the VM allowlist proxy\n\n* f\n[…]\n the start of its own\ninvocation so it still interrupts the run it targeted.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: isolated forensic workflow — api-only egress, forensic image, e…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-08T08:43:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5dcbe1b7db5000323f6195c99c70c944c7931d3d",
          "body": "- dock/app icon (appicon.png, icons.icns, icon-composer vector) and\n  menubar tray template regenerated from the b2 mark\n- docs dashboard-favicon regenerated to match (referenced as the tray\n  icon source in app/main.go)\n- wails bindings regenerated during the icon rebuild\n\nThe b2 brand set itself landed with the docs revamp (#28); this syncs\nthe app-side assets that were still on the old C mark.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(app): adopt b2 icon set across app surfaces (#30)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-07T13:33:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5374b07e626eb73be3eeb14422ca2717d9b0db2a",
          "body": "BusyBox adduser -S does not create a matching group, so dockerd's\nuserns-remap gid lookup failed on fresh Alpine VMs and setup died at\n'Configuring Docker daemon'. Provision the group explicitly and make\nit the user's primary group.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: create dockremap group before user for userns-remap (#27)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-07T13:28:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "47eeffff676dc93f155b7cc184bb536b86b92791",
          "body": "* fix: register a real --latest flag on workspace subcommands\n\nThe Use strings advertised <agent|--latest> but no flag was registered,\nso cobra rejected --latest as an unknown flag. With --latest set, all\npositional args are paths; validators account for both shapes.\n\nCo-Authored-By: Claude Fable 5 \n[…]\nropic.com>\n\n* refactor: reuse splitLatestTarget instead of a duplicate helper\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: workspace --latest support, quiet zoxide on read-only rootfs (#29)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-07T11:44:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "25953ea6dca978541e00152da66bb47c064c28fb",
          "body": "* docs: full documentation revamp — restructure, refresh, restyle\n\n- new IA: Getting Started / Guides / Reference / Concepts tabs\n- merge architecture (4 pages) and security (5 pages) into one canonical page each\n- drop usage.md and analytics.md (content folded into guides/reference)\n- new pages: in\n[…]\ntop-level table; run flags table gains --ephemeral-auth,\n  --worktree*, --yes\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: full documentation revamp — restructure, refresh, restyle (#28)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-07T11:20:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b5ca6a44a0a4fcdb3346940123e30e0fc4942a2f",
          "body": "* feat!: rename project from safe-agentic to berth\n\nRebrand: CLI safe-ag -> berth, module path, Docker labels\n(safe-agentic.* -> berth.*), env vars (SAFE_AGENTIC_* -> BERTH_*),\nVM machine name, bridge prefix (sa* -> bt*), Homebrew formula,\nconfig dir (~/.safe-ag -> ~/.berth), docs and skills.\n\nBREAK\n[…]\n@anthropic.com>\n\n* docs: migration notes for the safe-agentic -> berth rename\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat!: rename project from safe-agentic to berth (#26)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-07T09:37:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3eae0563c80ef6cd5c45442985bccaab492e3bb8",
          "body": "Destructive-action pass: Delete (was mislabeled Stop) with arm-confirm,\nconfirmations on workspace reverts, palette stop-all double-Enter,\npipeline delete confirm + dirty guard, checkpoint restore confirm.\n\nVisibility: agent prompt surfaced (sidebar tooltip, workspace header,\ninfo tab — from the spa\n[…]\nlains itself, 'agent' naming unified, a11y on\nicon buttons, poller probes throttled (state every 3rd tick, stats\nevery 5th) to cut VM exec load.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): UX study batch — guarded destructive actions, live visibility",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-07T08:45:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "23f6ed92fb538414329ff5185f65037123849ebc",
          "body": "…--repo\n\nThe spawn form allowed repo URL + --worktree together, which the CLI\nrejects — and worktree mode was meaningless from the app anyway since\nthe CLI worktrees its cwd (the app's cwd is not a checkout). Worktree\nmode now swaps the URL field for a native folder picker, the service\nruns the CLI inside the picked checkout (Runner.RunIn), and Spawn\nrefuses worktree requests without a folder.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(app): worktree spawns pick a local repo instead of clashing with …",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-07T08:18:30Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8b4628dfb9cc5c657ed4cbd563b46c92dac13425",
          "body": "Recovers the coverage-gate regression from the UX batch (67.3% vs\n67.5% baseline) by testing the new zero-coverage helpers.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: cover confirm gates, pipeline helpers, transcript extraction",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-07T08:09:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6b0c298552b2437c3d451b45201e65e14dbb022f",
          "body": "entrypoint.sh credentials write becomes a proper if-then (the\nbest-effort A && B || C form fails the shellcheck gate), and app-ci\nbuilds the frontend bundle before Go tests since the app module embeds\nfrontend/dist and a clean checkout has none.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: fix release gate — shellcheck SC2015, app-ci build order",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-07T08:02:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2198dd2fd0d5a3e06566cecdee92842136a66e49",
          "body": "# Conflicts:\n#\t.gitignore\n#\tcmd/safe-ag/fleet.go\n#\tpkg/inject/inject.go",
          "is_bot": false,
          "headline": "Merge branch 'app/desktop-v1'",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-07T07:58:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2624f2d5a95e881f3cb8b73f67570b43802b4f3e",
          "body": "Claude Code now stores MCP server OAuth grants under mcpOAuth in the\nsame keychain item, serialized before claudeAiOauth. The first-match\nsubstring scan for accessToken picked an MCP entry (often empty), so\n--seed-auth silently injected nothing and new agents started logged\nout. Parse the JSON and take claudeAiOauth.accessToken; fall back to\nthe first non-empty marker match for unparseable payloads.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(inject): seed the account token, not an MCP OAuth grant",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-07T07:54:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1b4fdbc522ebe17a88c5e3a386fec0f603d5241d",
          "body": "The VM chip moves from the sidebar to a status bar at the bottom right\nof the content column (stops at the sidebar edge). It replaces the top\nVMBanner: when the VM is unreachable the bar turns red and carries the\nerror, with the same Start/Stop/Restart/Repair controls inline.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): move VM controls to a bottom status bar",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-07T07:42:59Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8a0bfab15dc75d21248aea90ce0def0755de488d",
          "body": "Always-visible VM health chip in the sidebar (green/red dot + state,\namber pulse while an action runs) expanding to Start / Stop / Restart /\nRepair. Stop and Restart kill running agents and Repair re-runs full\nsetup, so those arm on first click and fire on the second. VM ops get\na 15-minute service timeout — vm start re-provisions and setup can\nrebuild the image, both well past the default 120s.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): VM status chip with lifecycle controls",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-07T07:39:28Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1d771ee1eb70595d4a1c013ab17b9369ffac3acd",
          "body": "The new risk gate rejected every programmatic spawn (desktop app,\nsafe-ag-claude/codex wrappers, scripts) because their stdin is not a\nterminal. Prompt humans only: non-TTY callers explicitly passed the\nrisky flags and still get the printed risk summary. Destructive ops\nkeep the strict non-TTY --yes requirement.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): don't hard-fail non-TTY risk-flag spawns",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-07T07:34:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bac2088e87f6dd1444e686a7983a9a8acfd85f99",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: document --enable-worktrees gate; ignore local artifacts",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T22:40:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5cfbd61dcdf7051b0bf7245e131aa87157da1586",
          "body": "- display-width padding (runewidth): emoji/CJK rows align\n- digit sort maps to visible columns; headers show digit + arrow\n- g/G top/bottom, Ctrl+R force refresh, Create-PR moved to P\n- one keybinding table drives footer, ? overlay, help, and dispatch\n- VM unreachable: full-width red banner with sta\n[…]\nn exit=grey\n- TUI shell-outs pass --yes where the TUI already confirmed (spawn\n  form, Ctrl-K stop --all) so the new CLI gates don't reject them\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(tui): usability batch — alignment, nav, keymap, VM banner, steer",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T22:40:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "963dfad4576963275943c5afa2ab2c2ccce17de0",
          "body": "- --notify now actually dispatches (terminal/system/slack/command) on\n  completion: foreground spawns, fleet/pipeline waits, and a detached\n  notify-wait watcher for interactive background spawns\n- destructive ops gated: stop --all, cleanup, cleanup --auth (typed\n  confirmation), risk-flag spawns ([\n[…]\n Example blocks, completions enabled\n- --max-cost help now says advisory: the value was never enforced\n  (follow-up: wire enforcement or remove)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): UX hardening — notify, gates, --latest, exit codes, help map",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T22:40:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1436ec7e0f62e45968534635a85cd54a370d397d",
          "body": "vmexec gains RunStreaming; image build and VM bootstrap output is live\ninstead of buffered-then-silent, and the build log survives failure\ninstead of being discarded. logs --follow (previously a dead flag)\ntails the newest session JSONL through the streaming relay with clean\nCtrl-C. ANSI colors are \n[…]\nand\nstarting a stopped container prints a notice instead of a silent wait.\nObserve commands' help now states each one's data source vs siblings.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): stream long-running exec, logs --follow, NO_COLOR",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T22:40:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "855cc15e91bad47014bcbd2d1d26af053d533d46",
          "body": "Remaining scroll artifact: junk in the first columns of lines. tmux\ndiffs against its model of the client screen and skips cells it\nbelieves unchanged, so one missed chunk desyncs the grid and the stale\ncells never repaint.\n\nThree layers: coalesce PTY reads (4ms lull / 256KB) so a scroll storm\nis a \n[…]\nre skipping; and on any skip, TerminalService.\nRedraw forces a full tmux repaint (one-column size nudge) so a desync\nlasts a frame, not forever.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(app): heal stale line-start cells after a lost chunk",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T21:15:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4846a5ecbe6c5dc3e8e0ec2d3efd3081c98f8cac",
          "body": "Each quota window row now ends with a compact countdown (34m, 2h05m,\n5d) to its reset; the tooltip keeps the verbose form.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): show quota reset countdown in the sidebar",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T21:02:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0707320969424db690560db1b19a0ee8f1763add",
          "body": "Wails alpha's EventProcessor.Emit dispatches every event on a fresh\ngoroutine (events.go:160), so rapid PTY chunks race to the webview and\narrive out of order — interleaved escape sequences produced the\ncharacter-soup corruption on fresh single-client sessions, worst under\nstreaming output and scrol\n[…]\nce number;\nthe frontend reassembles strict order (first-seen seq as baseline for\nmid-stream attaches, 250ms stall before skipping a lost chunk).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(app): garbled terminal root cause — order term:data chunks",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T21:02:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "684902cd9348a35c7f7fd7e58191cd354ff35cbf",
          "body": "Killing the host relay (app quit, rebuild, pane reattach) does not kill\nthe VM-side 'docker exec tmux attach', so every restart leaked an\nattached client pinning its stale size — the old-erpc session had 11\nclients at 165/150/144/71 cols, and tmux kept thrash-redrawing for all\nof them, garbling the \n[…]\nombies detach, their\ndocker execs exit, and the app's one-client-per-container multiplexing\nmeans anything else attached is stale by definition.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(app): sweep zombie tmux clients — attach with -d",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T20:56:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e56c68cf47a3623b457be830c42a93e66882882d",
          "body": "Wails alpha's EditMenu role items are empty stubs on darwin: they\nswallow ⌘C/⌘V as key equivalents and do nothing, so clipboard was dead\napp-wide. The Edit menu is now hand-built, each item sending the real\nCocoa selector (copy:, paste:, …) down the responder chain to the\nWKWebView.\n\nIn the terminal\n[…]\n xterm\nsilently drops. A parser handler now routes those payloads to the\nmacOS clipboard. Option+drag native selections copy via the fixed\nmenu.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(app): working ⌘C/⌘V — native Edit actions and OSC 52 clipboard",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T20:50:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7d0b3f5916bb79fb234d179bbced8973693e177b",
          "body": "Two panes on the same agent (second window via ⌘N, focus broadcast,\nsplits) attached two tmux clients; a tmux window has a single size, so\ndifferent-sized clients thrash-redraw each other into interleaved\ngarbage (and mangled OSC 52 payloads rendered as raw base64). The\nmanager now multiplexes: one \n[…]\ne relay was verified\nend-to-end with a probe client (initial size and live resize both land\nin tmux), so plain PTY resizes remain the mechanism.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(app): garbled terminal — one tmux client per agent, drop WebGL",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T20:40:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ccec5d54473eff476cefec6cecc0bb02fc3380d8",
          "body": "Frontend pictographs and symbol-buttons become lucide-react icons\n(nav, banners, play/close/reattach/check controls). The tray's emoji\nstatus circles become stdlib-rendered anti-aliased PNG dots via\nMenuItem.SetBitmap, matching the frontend StatusDot palette.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): replace emojis with lucide icons and rendered tray dots",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T20:29:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "334fd6f7db77efe3d31611866d8d114546e6523b",
          "body": "File → New Window (⌘N) opens extra windows on the same UI; tray\nactions raise any live window instead of holding a pointer to the\nfirst one. The workspace split becomes a list: '+ split' adds a\nterminal pane per agent, each closable, pruned when its agent stops\nor gets selected (never attach one tmux session twice).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): multiple windows and multi-agent split view",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T20:09:07Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0f5fb4ab91012513e8dc6293e74bd69c6367ce59",
          "body": "App/bundle/window/tray/title all say Safe Agentic instead of\nsafe-ag-app. Ignore the stray 'app' binary from manual go build.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(app): rename to Safe Agentic, register quota service",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T20:08:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "13b8356118de0d2ca72a3bd9e577256ece63a390",
          "body": "Attaching to a still-starting container (long clone before the agent\nlaunches) polls tmux has-session up to 45s instead of failing with\n'no sessions'. After Open resolves, re-fit and push the settled grid\nsize so a stale wider size can't leak into the agent's terminal.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(app): terminal attach waits for tmux; PTY size reconciled",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T20:07:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c1c6c2c0060a6e55685878bd059d439fa2293eb5",
          "body": "- parse the engine's nested stage schema when linear (else raw editing)\n- one PR URL input fills ${repo}/${pr} vars; repo goes via --repo\n  (reserved), empty vars are skipped\n- pipeline gains --seed-auth/--auto-trust so GUI runs match GUI spawn\n  defaults instead of starting unauthenticated\n- pipeline tree maps steps to their spawned containers\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): PR-review pipeline workflow",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T20:07:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a6ee8e83747f740e37fd0923faad84052f6ff2bb",
          "body": "store.run() wraps slow actions in a pending→ok/error toast; spawn and\ndelete show placeholder rows immediately instead of waiting for the\nnext poll. Sidebar wires quota bars in.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): live toasts, optimistic spawn and delete rows",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T20:07:35Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1338cc93c049e03f3679741938177ab8a275fe4e",
          "body": "QuotaService reads the host's Claude usage endpoint (5-minute cache;\nthe endpoint rate-limits) and Codex session files, exposing 5h/week\nwindows as used-percent. QuotaBar renders remaining quota with reset\ncountdowns.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): quota bars for Claude and Codex subscriptions",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T20:07:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0d66ca21bb0bd14f70071332c5d40752b8da221b",
          "body": "The codex TUI rendered with a duplicated statusline and dotted-garbage\nright column + bottom rows: a size mismatch. Root cause was my own\nforceTmuxSize — it ran 'tmux resize-window' to the full client height,\nignoring the 1-row status bar, and fought window-size latest, leaving the\nwindow taller tha\n[…]\nrtWithSize for a correct initial attach.\n\nVerified: app-style open(80x24)+resize(150x45) → client=150x45 window=150x44,\nconsistent, no mismatch.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: garbled codex terminal — remove forceTmuxSize (SIGWINCH works)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T14:33:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ebc3f5a2ac1b4290a9b1f38bb10e3c023e6789d1",
          "body": "Codex (a full-screen TUI) rendered garbled/unstable: the app opened the\nattach PTY at a default size, tmux attached and drew at that size, and the\nfollow-up resize's SIGWINCH didn't reliably survive the container-machine\nrelay — so tmux kept drawing at the wrong dimensions.\n\n- Open the PTY at the fi\n[…]\nnual was tried and kills detached sessions → reverted to\n  latest.)\n\nVerified: with the app attached at 137x41, tmux's window is exactly 137x41.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: unstable tmux/codex terminal — attach PTY at the real xterm size",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T14:21:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "47dd5c8bf208b103fe9c9d8f590516e000364655",
          "body": "Workspace header shows a 'PR #N ↗' pill (green open / purple merged / red\nclosed) when the agent's branch has a pull request, opening it in the\nbrowser. AgentService.PRStatus runs 'gh pr view --json' in the agent's\nworkspace (single-token args + docker exec -w to dodge the relay's\nspace-splitting); \n[…]\nears once the agent creates the PR mid-session.\n\nVerified: gh lookup returns the PR JSON when present, empty (no pill) when\nthe branch has none.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): quick-access PR link when an agent has one open",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T14:08:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b03f4f7147fcffd623c9369fd466527ddaff520c",
          "body": "Codex spawned from the app hung at 'Do you trust this directory?' — the\ncontainer config trusts /workspace but codex runs in the repo subdir, so\nit prompted and sat there, reading as 'can't attach'. Spawn all app agents\nwith --auto-trust (the container IS the sandbox), so codex/claude land in\nan interactive session immediately.\n\nVerified: codex with --auto-trust lands at its prompt in the cloned repo\ndir instead of the trust dialog.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: codex unusable in app — auto-accept directory trust prompt",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T14:02:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ffddf59878c05aad7087b4358a29bedf2bc9fb91",
          "body": "The config sanitizer rewrites codex_hooks → hooks, but a config carrying\nboth a codex_hooks and a hooks key (codex renamed the setting) produced\ntwo 'hooks = true' lines → 'duplicate key' TOML error that aborted codex\nimmediately on every spawn.\n\nDedup hooks per scope (top-level or [features] table)\n[…]\n rewrite everywhere\nbut emit at most one hooks key per scope. Verified: codex now loads config\nand runs ('Hi. What would you like to work on?').\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: codex exits on startup — duplicate hooks key in sanitized config",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T13:52:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ad003800b337b4d2df9884bff640db7da563ed5e",
          "body": "The builder was a linear step list, so parallel work was impossible to\nexpress even though the engine runs any steps without depends_on at once.\nRework the model into ordered STAGES: steps within a stage run in parallel\n(rendered side by side), stages run sequentially.\n- '⫲ + parallel step' adds a s\n[…]\no raw-YAML editing.\nVerified: 2 parallel steps + 1 dependent step → correct depends_on YAML;\nround-trip + partial-DAG fallback covered by tests.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): parallel tasks in the pipeline builder (stage-based)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T13:43:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ddce3b73cfa967e39537e953bd8c53ef719c1852",
          "body": "- statusline: the support-files tar drops the executable bit, so Claude's\n  'command: ~/.claude/statusline-command.sh' failed silently and the custom\n  status line never rendered. Restore +x on the statusline (and hooks/*.sh)\n  after extraction.\n- tmux redraw: add escape-time 0 (stale/garbled frames\n[…]\nterm.js instead\n  of the default screen terminfo), focus-events, and truecolor override.\n\nVerified: fresh container's statusline is +x and runs.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: custom statusline missing + unstable tmux redraw in app terminals",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T13:33:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "344571abce82047957c84108243e915539d62bb6",
          "body": "Form-based builder instead of a raw textarea:\n- numbered step cards: editable name, agent-type segmented control\n  (claude/codex/shell), repo field with ${repo} quick-fill + saved-project\n  dropdown, prompt, flag toggles (ssh/reuse-auth/gh-auth/auto-trust),\n  depends_on checkboxes of prior steps, re\n[…]\nSave / Dry-run / Run with run-until-saved gating; running chips inline.\n\nVerified in preview: 2-step build → YAML round-trip is clean + correct.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): rich visual pipeline builder (replaces the YAML editor)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T13:28:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c0e733e7b9b234e44883c60457c32f8b800050a3",
          "body": "The quick-run button spawned a private repo over HTTPS but had no GitHub\nauth, so git could not read a username. --reuse-gh-auth only mounted an\nempty volume; the host token was never seeded (same class as the Claude\ncredentials bug).\n\n- inject.ReadGHToken: host 'gh auth token' → GH_TOKEN/GITHUB_TOK\n[…]\ns out), so\n  all GUI paths (quick-run, projects, spawn form, clone) reach private repos.\n\nVerified: the private repo that exited 128 now clones.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: private HTTPS repo clones fail (git exit 128) — seed gh token",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T13:18:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a5a1d54a3e7e33a3006f08ca3ea7aae24c5d3804",
          "body": "New Pipelines view (replaces the Fleet launcher): list saved pipelines,\nedit their YAML in-app, create from a starter template, delete, and run.\n- state.Service: PipelineList (recursive), PipelineRead/Save/Delete with\n  name validation (no traversal).\n- AgentService.PipelineRun now takes vars + dryR\n[…]\nnd).\n- Run-until-saved gating; inline name entry (window.prompt is a no-op in\n  WKWebView); running orchestration chips fold into the same view.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): pipeline management UI",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T13:09:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "399fa38fcd30713626edf6eb100d9626c4331e08",
          "body": "- Timeline: scroll container had no bounded height so it grew off-screen;\n  now a fixed header + min-h-0 flex-1 scrollable body.\n- Sidebar: replace the cramped wrapping pill nav with a native-style\n  layout — header (brand + needs-you badge + green New chat), the agent\n  list as the focus with two-line rounded rows and clearer selected/hover\n  states, and a footer icon nav for the secondary views.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(app): timeline scroll + sidebar redesign",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T12:58:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "427133aff8ffe329dff24ab520e4f12b3dceac95",
          "body": "- Projects view (sidebar nav): list/add/remove saved projects, launch each\n  as claude or codex. Handles both repo URLs (git clone) and local folder\n  paths.\n- Local folders: native macOS directory picker (Wails dialog) → spawn a\n  blank-workspace agent → stream the folder into /workspace via a gzip\n[…]\nng); AgentService gains\n  PickFolder/SpawnFromLocal/CloneLocalFolder.\n- E2E verified: folder streamed into a live container, heavy dirs skipped.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): projects manager + clone local laptop folders into agents",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T12:50:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e80553803f7dd9bf01d786736da47605a4cf34b9",
          "body": "- tmux resized to smallest client by default, so a background-spawned\n  session stayed at 80x24 and the app's larger xterm rendered it wrapped\n  and garbled. set window-size latest + aggressive-resize on.\n- app: red 'failed to start' banner (with the entrypoint reason + Retry)\n  for agents that exit\n[…]\ncase was only\n  visible by digging into docker logs\n- spawn form: warn when the repo field isn't URL-shaped before it becomes\n  a dead container\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: tmux window-size latest (fixes garbled display in app terminals)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T12:27:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ad8d2d67a5b72ba489702c648485e44b36bf6c5d",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump Codex CLI 0.142.4 → 0.142.5 (exact pin)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T09:38:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "abfa671f1f1b7ca4899aeb82160192e45da22647",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump Claude Code 2.1.119 → 2.1.201 (installer sha unchanged)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T09:36:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2519cd1cc485097b4aea0e14b906411a6be16bf",
          "body": "Root cause: GUI-spawned agents were never logged in — the app passed\n--reuse-auth but not --seed-auth, and even with seed-auth the keychain\ntoken extraction grabbed the first (MCP server's) accessToken instead of\nclaudeAiOauth's.\n\n- app now seeds host auth by default on every spawn/clone (--no-seed-\n[…]\niOauth\n- entrypoint writes .credentials.json on every start\n\nVerified: container .credentials.json md5-matches host; hasCompletedOnboarding set.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: seed Claude login into containers (credentials + onboarding)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T09:28:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "684bab6da10898f8769b6fc0bcb9a4295b492daf",
          "body": "- delete: window.confirm is a no-op in WKWebView; replace with an inline\n  two-step confirm in the action menu\n- dock icon: 'make build' produced a bare binary (no dock icon on macOS);\n  add 'make bundle' (wails3 package) producing a signed .app with the\n  safe-agentic shield .icns; drop the stale W\n[…]\nheme/color picker;\n  new ensure_claude_onboarded merges the flag on every start. Verified:\n  fresh spawn now reports hasCompletedOnboarding=true\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: delete action, dock icon, and Claude onboarding prompt",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-06T08:29:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6fc913bffaa0790fedba806de4a52cd72d0d14eb",
          "body": "…av, richer output/diff\n\n- blocked agents: reason inline on sidebar rows (yellow) + 'Respond in\n  terminal' banner in the workspace\n- sidebar rows now two-line: name + repo · status/reason\n- keyboard: j/k selection, ⌘1..9 agent jump, ⌘T/⌘D/⌘O/⌘I tabs, ⌘F\n  terminal search (xterm search addon), termi\n[…]\n tab: side-by-side toggle, per-file stage/revert chips\n- palette: verbs for the selected agent; window title shows selection +\n  needs-you count\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): dev-UX wave — blocked fast-path, dense sidebar, keyboard n…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-05T22:04:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3391132b5809d11370a3a3506aa0612ab960ae18",
          "body": null,
          "is_bot": false,
          "headline": "docs: dev-UX review with prioritized improvement backlog",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-05T21:40:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "562da7faaf339e4e2d29fd745ded6478281a8c91",
          "body": "From the Omnigent study: surface the engine's --max-cost kill-switch in\nthe spawn form, and mirror the needs-you count as a macOS dock badge\n(Wails dock service). Skipped as YAGNI for a personal tool: multi-user,\nweb UI, co-drive, live share; policy/review-loop features already exist\nengine-side (rules.toml, pipelines, pr-review dual).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): spend-cap field on spawn + dock badge with needs-you count",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-05T21:26:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0361f528c1430a4bb6a6001891ab6a011d552a4e",
          "body": "…PR, prefs-restart\n\nRight-click (or hover ⋯) on any agent row: Open, Clone session\n(config reconstructed from container env/labels), Retry for stopped,\nCheckpoint now / Refresh prefs & restart for running, Create PR, and\nconfirmed Delete. Clone is unit-tested against the fake executor.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): sidebar quick actions — clone, delete, retry, checkpoint, …",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-05T21:13:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7062ac8ddaa8b2881fe5e0fc8a5fff7fbc309ae0",
          "body": "…art to apply\n\nStages current host settings as one-shot settings.host.json; the\nentrypoint consumes it in preference to spawn-time env on restart\n(then deletes it, so fresh spawns never inherit a stale copy). App\nInfo tab gets 'Refresh prefs' and 'Refresh prefs & restart' buttons.\nE2E verified: sync → restart → container settings match host md5,\nstaged file consumed, tmux session resumed.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: safe-ag config-sync — refresh Claude settings on demand, --rest…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-05T16:46:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0a87e39bfb70de3240660c4031474048b6cb8604",
          "body": "Spawn-time env injection freezes preferences at container creation.\nattach/resume now push the host's current settings.json (best-effort,\napplies at the agent's next in-container start), so long-lived\ncontainers pick up preference changes without a respawn.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: sync current Claude settings into containers on attach/resume",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-05T16:40:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9020cd7e5fde5c1a2093d974bd46ff6a6827a3e1",
          "body": "Seed-only settings meant --reuse-auth volumes kept their first-ever\nsettings.json forever (output style, hooks, statusline, env silently\nstale). Host is the source of truth for preferences; auth material\nremains seed-only. Verified: reused volume now matches host md5.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: refresh Claude settings.json from host on every container start",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-05T16:35:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c2f47bf4ca9b44951adb4a9135feb494294b41cc",
          "body": null,
          "is_bot": false,
          "headline": "fix(app): bolder tray glyph (binary alpha, dilated strokes)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-05T16:30:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b8384fd06d8dfc76f68cad420dc16c712267520",
          "body": "…ssages\n\n- menubar shows the shield logo as a macOS template icon (from docs/assets)\n- 'test local' → test-local instead of an engine rejection\n- Wails RuntimeError JSON blobs unwrap to just their message in toasts\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(app): safe-agentic tray logo, slugify spawn names, human error me…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-05T16:29:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "da0736e7e0e7ac1b2fc88af2aa844d2508b3ee63",
          "body": null,
          "is_bot": false,
          "headline": "fix(app): correct systray template icon symbol",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-05T16:25:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb72a2ceb74c0b714fb7696bea2cdf9aac030fb8",
          "body": null,
          "is_bot": false,
          "headline": "fix(app): icon-only menubar item, counts stay in dropdown header",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-05T16:24:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c380e659c6b81cb14438ffe156f42a173459dc51",
          "body": "Tray menu: aggregate status header, per-chat rows with status emoji and\nblocked reason, Projects section (one-click claude chat on saved repo),\nNew chat…, Open safe-ag. Projects persist in ~/.safe-ag/app-projects.json\nvia state.Service (shared by tray and spawn-form chips; replaces the\nlocalStorage store).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): tray status dropdown + projects quick-launch",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-05T16:21:33Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3f3f624c75c2ddfc5333bdaf0fa644f596a94ebf",
          "body": null,
          "is_bot": false,
          "headline": "chore(app): regenerate bindings for SpawnRequest.Name",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T22:58:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38a8b8ff3ccc05c1350d20c676bbbf418841539a",
          "body": "…ual)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(app): live E2E QA harness + full QA matrix (33 PASS, 3 human-vis…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T22:58:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f7e8768de8b0bc4708958f6187f342380a19ba74",
          "body": "…/revert paths\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(app): named spawns, saved repo list (most-used first), fix stage…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T22:58:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "982eee2d23f2a42a372ca43244b2ff06eb1a1ceb",
          "body": "… session\n\nBackground mode ran claude/codex directly and shell as foreground bash\n(instant EOF death). GUI-spawned (--background) agents were therefore\nnever attachable and steer/peek silently broken; terminal=tmux label\nlied. All agent types now use the same tmux session flow in both modes;\nheadless prompt runs still exit when the CLI does.\n\nFound by the desktop-app live QA harness.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: run background agents inside tmux; give shell agents a real tmux…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T22:58:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a2297f4a4b9683386a8868ae32879ecb62ca9535",
          "body": "…opped-agent flow\n\nSelf-tested via wails3 dev browser preview with fixture agents:\n- errText() extracts binding error messages (was bare 'Error')\n- toasts auto-dismiss (8s), dedup, cap at 5\n- Output tab renders failures in-body instead of eternal 'loading…'\n- Terminal pane: attach status line, error\n[…]\nawn agent-type selection visibly highlighted; sidebar rows get repo/state tooltips\n- dev-only window.__store hook for browser-preview UX testing\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(app): UX pass — actionable error toasts, in-body error states, st…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T22:40:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "45a773bc95c35197213a3908ae6f1b4d04bdb51e",
          "body": null,
          "is_bot": false,
          "headline": "feat(app): allow spawning without a repo (blank workspace)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T22:32:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "772d111d231ecda7f4ea701490ec09d5ddf9722e",
          "body": null,
          "is_bot": false,
          "headline": "test(app): guarded live PTY attach spike (-tags livespike)",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T22:27:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b8cb4999bd40b1791fa3af4ce874d6b5dfb54b20",
          "body": "…es, drag CSS\n\nC1: Wails alpha2.112 delivers event.data raw; drop array unwrap that\ncorrupted []Agent payloads. C2: terminal attach now routes through the\nsafe-ag-exec relay via new vmexec.BuildInteractiveArgs (+unit test).\nC3: PipelineFiles returns bare names the catalog can resolve.\nI1: remove tem\n[…]\ntine (quit deadlock). I4: CI permissions + pkg/** paths.\nMinors: CLIError short-argv guard, template-list header skip,\ntray focus switches view.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(app): final-review fixes — event unwrap, relay argv, pipeline nam…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T22:10:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a07f87a2c7a6fb840d0446567b3ba6d1798132a7",
          "body": null,
          "is_bot": false,
          "headline": "feat(app): CI smoke, docs, root integration",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:54:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca31117a2dd8c50c2875baf7d5ecc3364adaf698",
          "body": null,
          "is_bot": false,
          "headline": "feat(app): command palette and view wiring",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:52:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "45dde0ab7ecdd6d483fcc03cfa142a3330d224e9",
          "body": null,
          "is_bot": false,
          "headline": "feat(app): timeline and cost views",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:52:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "401b967b469ac85a027410810349a9ab0c348a02",
          "body": null,
          "is_bot": false,
          "headline": "feat(app): fleet view with pipeline launcher",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:52:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4287644057586db6b6cc3aa8eb7f3da823874c6",
          "body": null,
          "is_bot": false,
          "headline": "feat(app): spawn form with dry-run preview",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:52:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7072f97229fb07dba7fbef69ba51e64f0c62d495",
          "body": null,
          "is_bot": false,
          "headline": "feat(app): diff tab with stage/revert and checkpoints",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:52:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "640e73c570302cd50f5c8d40c07eaf09478c4b45",
          "body": null,
          "is_bot": false,
          "headline": "feat(app): output and info tabs with steer/retry/stop/pr actions",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:52:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42f77509ba1c921258a208893754ed4a64d96e24",
          "body": "…hell",
          "is_bot": false,
          "headline": "feat(app): embedded xterm.js terminals with split and workspace tab s…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:50:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "879b0dbb6eea7df5e81f3430082da88c378d71c2",
          "body": null,
          "is_bot": false,
          "headline": "feat(app): frontend store, sidebar, VM banner, toasts",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:49:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dad6c856f28cbec8feb21e6015c10ee75bae06b4",
          "body": null,
          "is_bot": false,
          "headline": "feat(app): wire services, systray, notifications into Wails app",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:47:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "45228622d188a5dedce758f9272fd75aaa641262",
          "body": null,
          "is_bot": false,
          "headline": "fix(app): semantic change-diffing, blocking Stop, serialized polls",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:43:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba591cd0faea4d5fd851b77c1e6e2840e0abc426",
          "body": null,
          "is_bot": false,
          "headline": "fix(app): nil-factory fallback and TERM dedup in terminal manager",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:37:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e5eb709c85350da44f5db98059e1bbf98fafb8a6",
          "body": null,
          "is_bot": false,
          "headline": "fix(app): watcher offset tracking on partial lines, blocking Stop",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:35:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ce7020cd0b3f3cf4085686905f6f370cbc981ad",
          "body": "…robe",
          "is_bot": false,
          "headline": "feat(app): poller loop with change-diffed events, stats, agentstate p…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:30:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cbef9373383e15f5c3fc9fd19bbcdb942cf4a8be",
          "body": null,
          "is_bot": false,
          "headline": "feat(app): PTY terminal manager attaching to container tmux",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:25:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "822e3e78997e58448f1122d44478a762cb45dae5",
          "body": null,
          "is_bot": false,
          "headline": "feat(app): state reader for audit, classified events, pipelines",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:24:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "852971467f6207bf649339e3d0a1e8beb5be3cd0",
          "body": null,
          "is_bot": false,
          "headline": "fix(app): sync go.sum for transitive pkg deps",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:23:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "607cc94cb2c10150ccdc8636424260d87c95554e",
          "body": "…ations",
          "is_bot": false,
          "headline": "feat(app): events.jsonl watcher with classification and macOS notific…",
          "author_name": "Florian",
          "author_login": "0x666c6f",
          "committed_at": "2026-07-04T21:23:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 30,
      "commits_last_year": 261,
      "latest_release_at": "2026-07-09T09:40:45Z",
      "latest_release_tag": "v1.6.0",
      "releases_from_tags": false,
      "days_since_last_push": 12,
      "active_weeks_last_year": 7,
      "days_since_latest_release": 13,
      "mean_days_between_releases": 0.1
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/0x666c6f/berth",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/0x666c6f/berth",
          "is_deprecated": false,
          "latest_version": "v1.6.0",
          "repository_url": "https://github.com/0x666c6f/berth",
          "versions_count": 30,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-09T09:37:32Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 13
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 3,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile",
        "app/Makefile",
        "app/Taskfile.yml",
        "app/build/Taskfile.yml",
        "app/build/darwin/Taskfile.yml",
        "tui/Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "app/frontend/tsconfig.json"
      ],
      "toolchain_manifests": [
        "app/go.mod",
        "go.mod"
      ],
      "largest_source_bytes": 169489,
      "source_files_sampled": 231,
      "oversized_source_files": 1,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 16112
    },
    "dependencies": {
      "manifests": [
        "app/go.mod",
        "go.mod",
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go",
        "npm"
      ],
      "dependencies": [
        {
          "name": "github.com/0x666c6f/berth",
          "manifest": "app/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-00010101000000-000000000000"
        },
        {
          "name": "github.com/creack/pty",
          "manifest": "app/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.24"
        },
        {
          "name": "github.com/fsnotify/fsnotify",
          "manifest": "app/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.9.0"
        },
        {
          "name": "github.com/wailsapp/wails/v3",
          "manifest": "app/go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.0-alpha2.112"
        },
        {
          "name": "github.com/BurntSushi/toml",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/gdamore/tcell/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.8.1"
        },
        {
          "name": "github.com/mattn/go-runewidth",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.16"
        },
        {
          "name": "github.com/rivo/tview",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.42.0"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "golang.org/x/term",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.28.0"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "@openai/codex",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "0.142.5"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 44,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 3
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "0x666c6f",
          "commits": 261,
          "avatar_url": "https://avatars.githubusercontent.com/u/4120347?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "app-ci.yml",
        "ci.yml",
        "claude-code-review.yml",
        "claude.yml",
        "coverage.yml",
        "docs.yml",
        "live.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum",
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "20 out of 20 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/28 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 3,
            "reason": "project has 1 contributing companies or organizations -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 3,
            "reason": "dependency not pinned by hash detected -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 2,
            "reason": "8 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "c351b9c8c74f2e5311c7599081837bd2c8893989",
        "ran_at": "2026-07-23T00:51:17Z",
        "aggregate_score": 3.9,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-22T08:26:12Z",
      "oldest_open_prs": [
        {
          "number": 48,
          "created_at": "2026-07-10T08:37:53Z",
          "last_comment_at": "2026-07-10T08:38:07Z",
          "last_comment_author": "github-actions"
        }
      ],
      "last_merged_pr_at": "2026-07-09T09:37:33Z",
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/0x666c6f/berth",
    "host": "github.com",
    "name": "berth",
    "owner": "0x666c6f"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 55,
      "inputs": {
        "security": 39,
        "vitality": 73,
        "community": 26,
        "governance": 54,
        "engineering": 73
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 73,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "commits_last_year": 261,
              "human_commit_share": 1,
              "days_since_last_push": 12,
              "active_weeks_last_year": 7
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 12 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 12
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "7/52 weeks with commits",
                "points": 4.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "261 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 261
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 30,
              "latest_release_tag": "v1.6.0",
              "releases_from_tags": false,
              "days_since_latest_release": 13,
              "mean_days_between_releases": 0.1
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "30 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 30
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 13 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 13
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.1 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 26,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 5,
            "inputs": {
              "forks": 0,
              "stars": 3,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "3 stars",
                "points": 4.9,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 54,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 13,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 67,
            "inputs": {
              "merged_prs": 44,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 3
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "44/47 decided PRs merged",
                "points": 35.8,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 44,
                      "decided": 47
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/28 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 53,
            "inputs": {
              "followers": 17,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "0x666c6f",
              "public_repos": 36,
              "account_age_days": 4851
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "17 followers of 0x666c6f",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 17,
                      "login": "0x666c6f"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "36 public repos, account ~13 yr old",
                "points": 23.4,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 36
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 13
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/0x666c6f/berth"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 13
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 13 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 13
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "30 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 30
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 73,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "8 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "20 out of 20 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": "https://0x666c6f.github.io/berth/",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://0x666c6f.github.io/berth/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 39,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 39,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 3.9
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "20 out of 20 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/28 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "8 existing vulnerabilities detected",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 76,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.99,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 16112
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "99 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 99,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum",
                "package-lock.json"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile",
                "app/Makefile",
                "app/Taskfile.yml",
                "app/build/Taskfile.yml",
                "app/build/darwin/Taskfile.yml",
                "tui/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "app/frontend/tsconfig.json"
              ],
              "agent_commit_share": 0.7,
              "toolchain_manifests": [
                "app/go.mod",
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile, app/Makefile, app/Taskfile.yml, app/build/Taskfile.yml, app/build/darwin/Taskfile.yml, tui/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile, app/Makefile, app/Taskfile.yml, app/build/Taskfile.yml, app/build/darwin/Taskfile.yml, tui/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "app/frontend/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "app/frontend/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "70 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 70,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 169489,
              "source_files_sampled": 231,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/231 source files over 60KB",
                "points": 54.8,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 231,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T00:51:30.104315Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/0/0x666c6f/berth.svg",
  "full_name": "0x666c6f/berth",
  "license_state": "standard",
  "license_spdx": "MIT"
}