re-cinq/wave має індекс здоров’я 54 зі 100, що відповідає смузі «Помірний». Найвищий показник — Engineering Quality (86/100), найнижчий — Security (27/100). Останнє оновлення було 93 дні тому. Більшість нещодавньої роботи виконує один учасник.
54
загалом / 100
Помірний
Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє зважене середнє, відкаліброване за розподілом публічного реєстру, тож діапазони мають перцентильний зміст; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 34 («У зоні ризику»).
54
Винятковий93-100Верхній щабель реєстру (≈ топ-5%); відповідає практично всім перевіреним критеріям
Відмінний80-92Сильний за всіма напрямами; незначні прогалини
Добрий65-79Здоровий; прогалини обмежені та керовані
Помірний50-64Прийнятний, але з помітними прогалинами; рекомендовано перевірку
Слабкий35-49Суттєві недоліки в кількох сферах
У зоні ризику20-34Суттєві слабкі місця; впровадження потребує обережності
Критичний1-19Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Зважений загальний бал 53 калібровано до 54 за шкалою опублікованого індексу (калібрування реєстру 2026-08-02).
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Має свідомо малу вагу (4%): агентний інструментарій — реальний сигнал супроводу, але репозиторій без нього все одно може отримати 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Could not fetch go package 'github.com/recinq/wave' from its registry
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Докладніше
Історія зірок і форків 0 ★ / 3 ⇿
0Зірки
3Форки
100Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 0Мінорні 36Патчі 64
OpenSSF Scorecard 2.7 / 10
2.7сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-08-05 09:22 UTC
Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Звіт у форматі JSON машиночитний
{
"data": {
"icon": {
"bytes": 394,
"width": 32,
"height": 32,
"rejected": [],
"collected": true,
"media_type": "image/svg+xml",
"source_url": "https://re-cinq.github.io/wave/favicon.svg",
"source_type": "homepage",
"content_hash": "9cdc08ed38bba6c56d0fd239d020848fc378cef4ea00d71b4368c18552770353",
"candidates_considered": 1
},
"repo": {
"topics": [
"ai-as-code",
"agentic-workflow",
"multi-agent-systems"
],
"is_fork": false,
"size_kb": 17482,
"has_wiki": false,
"homepage": "https://re-cinq.github.io/wave/",
"languages": {
"Go": 7486071,
"CSS": 187781,
"Nix": 11676,
"Vue": 9269,
"HTML": 365402,
"Shell": 78254,
"Makefile": 2902,
"JavaScript": 126990,
"TypeScript": 9788
},
"pushed_at": "2026-05-03T20:03:21Z",
"created_at": "2026-02-02T14:54:11Z",
"owner_type": "Organization",
"updated_at": "2026-07-23T14:28:53Z",
"description": "Multi-agent pipelines for AI-assisted development",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://re-cinq.com",
"name": "re:cinq",
"type": "Organization",
"login": "re-cinq",
"company": null,
"location": "Denmark",
"followers": 16,
"avatar_url": "https://avatars.githubusercontent.com/u/141229953?v=4",
"created_at": "2023-08-02T10:07:31Z",
"is_verified": null,
"public_repos": 43,
"account_age_days": 1098
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.273.1",
"kind": "patch",
"published_at": "2026-04-30T11:36:18Z"
},
{
"tag": "v0.273.0",
"kind": "minor",
"published_at": "2026-04-30T11:35:33Z"
},
{
"tag": "v0.272.0",
"kind": "minor",
"published_at": "2026-04-30T11:14:49Z"
},
{
"tag": "v0.271.0",
"kind": "minor",
"published_at": "2026-04-30T11:13:08Z"
},
{
"tag": "v0.270.0",
"kind": "minor",
"published_at": "2026-04-30T10:48:15Z"
},
{
"tag": "v0.269.0",
"kind": "minor",
"published_at": "2026-04-30T09:33:41Z"
},
{
"tag": "v0.268.0",
"kind": "minor",
"published_at": "2026-04-30T09:24:55Z"
},
{
"tag": "v0.267.0",
"kind": "minor",
"published_at": "2026-04-30T09:24:08Z"
},
{
"tag": "v0.266.0",
"kind": "minor",
"published_at": "2026-04-30T08:18:56Z"
},
{
"tag": "v0.265.1",
"kind": "patch",
"published_at": "2026-04-30T07:40:12Z"
},
{
"tag": "v0.265.0",
"kind": "minor",
"published_at": "2026-04-30T01:40:50Z"
},
{
"tag": "v0.264.0",
"kind": "minor",
"published_at": "2026-04-30T01:37:58Z"
},
{
"tag": "v0.263.0",
"kind": "minor",
"published_at": "2026-04-30T01:16:42Z"
},
{
"tag": "v0.262.0",
"kind": "minor",
"published_at": "2026-04-30T00:51:59Z"
},
{
"tag": "v0.261.0",
"kind": "minor",
"published_at": "2026-04-30T00:43:40Z"
},
{
"tag": "v0.260.1",
"kind": "patch",
"published_at": "2026-04-30T00:37:03Z"
},
{
"tag": "v0.260.0",
"kind": "minor",
"published_at": "2026-04-30T00:13:24Z"
},
{
"tag": "v0.259.0",
"kind": "minor",
"published_at": "2026-04-30T00:13:09Z"
},
{
"tag": "v0.258.2",
"kind": "patch",
"published_at": "2026-04-30T00:05:10Z"
},
{
"tag": "v0.258.1",
"kind": "patch",
"published_at": "2026-04-29T23:52:05Z"
},
{
"tag": "v0.258.0",
"kind": "minor",
"published_at": "2026-04-29T23:52:36Z"
},
{
"tag": "v0.257.1",
"kind": "patch",
"published_at": "2026-04-29T23:06:58Z"
},
{
"tag": "v0.257.0",
"kind": "minor",
"published_at": "2026-04-29T21:55:55Z"
},
{
"tag": "v0.256.0",
"kind": "minor",
"published_at": "2026-04-29T21:55:46Z"
},
{
"tag": "v0.255.0",
"kind": "minor",
"published_at": "2026-04-29T20:20:07Z"
},
{
"tag": "v0.254.0",
"kind": "minor",
"published_at": "2026-04-29T19:55:38Z"
},
{
"tag": "v0.253.0",
"kind": "minor",
"published_at": "2026-04-29T19:47:59Z"
},
{
"tag": "v0.252.0",
"kind": "minor",
"published_at": "2026-04-29T19:38:42Z"
},
{
"tag": "v0.251.6",
"kind": "patch",
"published_at": "2026-04-29T19:22:40Z"
},
{
"tag": "v0.251.5",
"kind": "patch",
"published_at": "2026-04-29T18:46:44Z"
},
{
"tag": "v0.251.4",
"kind": "patch",
"published_at": "2026-04-29T18:16:54Z"
},
{
"tag": "v0.251.3",
"kind": "patch",
"published_at": "2026-04-29T17:02:35Z"
},
{
"tag": "v0.251.2",
"kind": "patch",
"published_at": "2026-04-29T16:42:57Z"
},
{
"tag": "v0.251.1",
"kind": "patch",
"published_at": "2026-04-29T16:20:38Z"
},
{
"tag": "v0.251.0",
"kind": "minor",
"published_at": "2026-04-29T15:20:26Z"
},
{
"tag": "v0.250.1",
"kind": "patch",
"published_at": "2026-04-29T15:18:38Z"
},
{
"tag": "v0.250.0",
"kind": "minor",
"published_at": "2026-04-29T15:10:19Z"
},
{
"tag": "v0.249.0",
"kind": "minor",
"published_at": "2026-04-29T15:09:46Z"
},
{
"tag": "v0.248.0",
"kind": "minor",
"published_at": "2026-04-29T15:04:43Z"
},
{
"tag": "v0.247.3",
"kind": "patch",
"published_at": "2026-04-29T14:31:09Z"
},
{
"tag": "v0.247.2",
"kind": "patch",
"published_at": "2026-04-29T14:24:22Z"
},
{
"tag": "v0.247.1",
"kind": "patch",
"published_at": "2026-04-29T14:18:06Z"
},
{
"tag": "v0.247.0",
"kind": "minor",
"published_at": "2026-04-29T14:14:33Z"
},
{
"tag": "v0.246.2",
"kind": "patch",
"published_at": "2026-04-29T13:29:27Z"
},
{
"tag": "v0.246.1",
"kind": "patch",
"published_at": "2026-04-29T13:12:47Z"
},
{
"tag": "v0.246.0",
"kind": "minor",
"published_at": "2026-04-29T13:12:34Z"
},
{
"tag": "v0.245.42",
"kind": "patch",
"published_at": "2026-04-29T12:56:26Z"
},
{
"tag": "v0.245.41",
"kind": "patch",
"published_at": "2026-04-29T12:50:27Z"
},
{
"tag": "v0.245.40",
"kind": "patch",
"published_at": "2026-04-29T12:50:32Z"
},
{
"tag": "v0.245.39",
"kind": "patch",
"published_at": "2026-04-29T10:34:24Z"
},
{
"tag": "v0.245.38",
"kind": "patch",
"published_at": "2026-04-29T10:18:40Z"
},
{
"tag": "v0.245.37",
"kind": "patch",
"published_at": "2026-04-29T09:54:30Z"
},
{
"tag": "v0.245.36",
"kind": "patch",
"published_at": "2026-04-29T09:50:33Z"
},
{
"tag": "v0.245.35",
"kind": "patch",
"published_at": "2026-04-29T09:46:48Z"
},
{
"tag": "v0.245.34",
"kind": "patch",
"published_at": "2026-04-29T09:16:13Z"
},
{
"tag": "v0.245.33",
"kind": "patch",
"published_at": "2026-04-29T01:08:01Z"
},
{
"tag": "v0.245.32",
"kind": "patch",
"published_at": "2026-04-29T00:56:03Z"
},
{
"tag": "v0.245.31",
"kind": "patch",
"published_at": "2026-04-29T00:54:15Z"
},
{
"tag": "v0.245.30",
"kind": "patch",
"published_at": "2026-04-29T00:35:59Z"
},
{
"tag": "v0.245.29",
"kind": "patch",
"published_at": "2026-04-29T00:31:55Z"
},
{
"tag": "v0.245.28",
"kind": "patch",
"published_at": "2026-04-29T00:06:39Z"
},
{
"tag": "v0.245.27",
"kind": "patch",
"published_at": "2026-04-29T00:04:03Z"
},
{
"tag": "v0.245.26",
"kind": "patch",
"published_at": "2026-04-28T23:54:25Z"
},
{
"tag": "v0.245.25",
"kind": "patch",
"published_at": "2026-04-28T23:15:03Z"
},
{
"tag": "v0.245.24",
"kind": "patch",
"published_at": "2026-04-28T23:01:54Z"
},
{
"tag": "v0.245.23",
"kind": "patch",
"published_at": "2026-04-28T22:22:22Z"
},
{
"tag": "v0.245.22",
"kind": "patch",
"published_at": "2026-04-28T22:22:01Z"
},
{
"tag": "v0.245.21",
"kind": "patch",
"published_at": "2026-04-28T21:49:53Z"
},
{
"tag": "v0.245.20",
"kind": "patch",
"published_at": "2026-04-28T21:42:19Z"
},
{
"tag": "v0.245.19",
"kind": "patch",
"published_at": "2026-04-28T21:27:06Z"
},
{
"tag": "v0.245.18",
"kind": "patch",
"published_at": "2026-04-28T21:25:15Z"
},
{
"tag": "v0.245.17",
"kind": "patch",
"published_at": "2026-04-28T21:23:07Z"
},
{
"tag": "v0.245.16",
"kind": "patch",
"published_at": "2026-04-28T20:51:00Z"
},
{
"tag": "v0.245.15",
"kind": "patch",
"published_at": "2026-04-28T20:46:10Z"
},
{
"tag": "v0.245.14",
"kind": "patch",
"published_at": "2026-04-28T20:46:02Z"
},
{
"tag": "v0.245.13",
"kind": "patch",
"published_at": "2026-04-28T20:38:09Z"
},
{
"tag": "v0.245.12",
"kind": "patch",
"published_at": "2026-04-28T20:16:31Z"
},
{
"tag": "v0.245.11",
"kind": "patch",
"published_at": "2026-04-28T19:44:55Z"
},
{
"tag": "v0.245.10",
"kind": "patch",
"published_at": "2026-04-28T19:14:52Z"
},
{
"tag": "v0.245.9",
"kind": "patch",
"published_at": "2026-04-28T18:59:25Z"
},
{
"tag": "v0.245.8",
"kind": "patch",
"published_at": "2026-04-28T18:41:33Z"
},
{
"tag": "v0.245.7",
"kind": "patch",
"published_at": "2026-04-28T18:24:05Z"
},
{
"tag": "v0.245.6",
"kind": "patch",
"published_at": "2026-04-28T18:14:35Z"
},
{
"tag": "v0.245.5",
"kind": "patch",
"published_at": "2026-04-28T18:12:35Z"
},
{
"tag": "v0.245.4",
"kind": "patch",
"published_at": "2026-04-28T17:37:57Z"
},
{
"tag": "v0.245.3",
"kind": "patch",
"published_at": "2026-04-28T17:07:10Z"
},
{
"tag": "v0.245.2",
"kind": "patch",
"published_at": "2026-04-28T16:55:32Z"
},
{
"tag": "v0.245.1",
"kind": "patch",
"published_at": "2026-04-28T16:29:47Z"
},
{
"tag": "v0.245.0",
"kind": "minor",
"published_at": "2026-04-28T16:10:31Z"
},
{
"tag": "v0.244.1",
"kind": "patch",
"published_at": "2026-04-28T15:50:37Z"
},
{
"tag": "v0.244.0",
"kind": "minor",
"published_at": "2026-04-28T15:47:01Z"
},
{
"tag": "v0.243.1",
"kind": "patch",
"published_at": "2026-04-28T15:31:45Z"
},
{
"tag": "v0.243.0",
"kind": "minor",
"published_at": "2026-04-28T15:27:27Z"
},
{
"tag": "v0.242.0",
"kind": "minor",
"published_at": "2026-04-28T15:08:33Z"
},
{
"tag": "v0.241.1",
"kind": "patch",
"published_at": "2026-04-28T14:55:59Z"
},
{
"tag": "v0.241.0",
"kind": "minor",
"published_at": "2026-04-28T13:55:48Z"
},
{
"tag": "v0.240.0",
"kind": "minor",
"published_at": "2026-04-28T13:48:32Z"
},
{
"tag": "v0.239.0",
"kind": "minor",
"published_at": "2026-04-28T13:41:49Z"
},
{
"tag": "v0.238.1",
"kind": "patch",
"published_at": "2026-04-28T13:33:32Z"
},
{
"tag": "v0.238.0",
"kind": "minor",
"published_at": "2026-04-28T13:31:41Z"
}
],
"recent_commits": [
{
"oid": "6b82c89e95546829f93693d2f451afbb01e5df4f",
"body": "…docs (#1623)\n\n- cli.md: add wave proposals subcommands (list/show/approve/reject)\n- cli.md: add proposals to quick reference table\n- web-dashboard.md: add /proposals section + API endpoints\n- state-resumption.md: add rework (test guard) failure mode\n- webhooks-worksource-overlap.md: F4 analysis (informational)",
"is_bot": false,
"headline": "docs: add proposals CLI reference, webui /proposals, contract rework …",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T11:30:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae6c3d07591a505b0c263414adf6e424071d796b",
"body": "…(#1621)\n\n* feat(contract): add test_count_baseline post-commit guard\n\nCloses #1584. Defense-in-depth alongside test_diff (#1583) + llm_judge\n(#1582). Compares COMMITTED tree counts of test declarations: HEAD vs\nBaseRef (default HEAD~1). Catches deletions slipping past diff\ninspection — file moves, \n[…]\nry impl-issue run now checks for test deletions (test_diff) and\nenforces test count baseline (test_count_baseline) as rework gates.\nCloses #1583, #1584 wiring gap — contracts existed but were unwired.",
"is_bot": false,
"headline": "feat(contract): wire test_diff + test_count_baseline into impl-issue …",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T11:29:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e3d5eed8468c6894629118d0e8ce24ffeb00d74b",
"body": "* feat(contract): add test_count_baseline post-commit guard\n\nCloses #1584. Defense-in-depth alongside test_diff (#1583) + llm_judge\n(#1582). Compares COMMITTED tree counts of test declarations: HEAD vs\nBaseRef (default HEAD~1). Catches deletions slipping past diff\ninspection — file moves, force-push\n[…]\n on Project\n\nWithout these fields the wave.yaml entries from the same PR fail YAML\nunmarshal in TestLoadWaveYAML_PersonaPermissions. Mirrors the contract\nfields added in internal/contract/contract.go.",
"is_bot": false,
"headline": "feat(contract): test_count_baseline post-commit guard (#1584) (#1619)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T11:09:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a14861480f026bb0b07957907fd2038244b07c3b",
"body": "`wave proposals rollback <pipeline_name>` and POST\n/pipelines/{pipelineName}/rollback flip the active pipeline_version\nto the highest version below the active one. Reuses the existing\nstate.ActivateVersion atomic flip — no schema changes.\n\n- `internal/proposals/rollback.go` PriorVersion helper + sen\n[…]\nname}/rollback to avoid mux conflict with\n the existing /proposals/{id}/{approve,reject} wildcards.\n- Tests cover prior-found, gap-aware rollback, no-active, no-prior.\n\nPart of epic #1565 follow-ups.",
"is_bot": false,
"headline": "feat(proposals): evolution auto-rollback CLI + webui (F3) (#1620)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T11:07:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8be20ed56942880d5ea26151284b1de4b7c56542",
"body": "* feat(contract): add test_diff guard against persona test-deletion\n\nCloses #1583. Net deletions of `func Test*` lines in `*_test.go` diff\nbeyond MaxTestDeletions (default 0) fail the contract. Renames net to\nzero. No HEAD / no git → silent skip (companion source_diff catches).\n\n* refactor(contract)\n[…]\nvior. Pipelines override per\nproject ecosystem (Python `def test_*`, JS `it(/test(`, etc.). Two new\ntests cover Python + TypeScript configs.\n\n* fix(contract): test_diff error string staticcheck ST1005",
"is_bot": false,
"headline": "feat(contract): test_diff guard against test-deletion (#1583) (#1618)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T10:42:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "71a8db8d539708ab90a1660da03918862158f85d",
"body": "* feat(webui,cli): proposals approval UI for evolution gate (#1613)\n\nAdd human-approval gate for evolution proposals via webui /proposals\n(list/detail/approve/reject) and CLI `wave proposals` (list/show/approve/\nreject). Approve calls EvolutionStore.DecideProposal then\nCreatePipelineVersion(active=t\n[…]\ns the proposal decided. Diff render uses escaped <pre> with\nclass spans, no new chroma dep. Webui reuses per-session CSRF middleware.\n\n* fix(proposals): atomic ApproveProposalAndActivate via single tx",
"is_bot": false,
"headline": "feat(webui,cli): proposals approval UI for evolution gate (#1614)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T09:28:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4de0e1cc87664d6bae6f6ee6661d8accfcba4554",
"body": "* feat(evolution): trigger heuristics for pipeline-evolve (#1612)\n\nShouldEvolve(pipelineName) decides when accumulated pipeline_eval rows\nwarrant firing pipeline-evolve. Three heuristics evaluated as OR:\n\n- every-N: median judge_score dropped >=0.1 over 2x10-row window\n (filtered to rows after last\n[…]\nver block finalize.\n\nLastProposalAt(name) added to EvolutionStore to anchor the every-N\nwindow's \"since last evolution\" semantics.\n\n* fix(evolution): allocate combined slice to avoid appendAssign lint",
"is_bot": false,
"headline": "feat(evolution): trigger heuristics for pipeline-evolve (#1616)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T09:18:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1cee68a5f82d26411533b6f0bcae7aa5dd1ebed3",
"body": "…k (#1615)\n\nThe \"step wrote N file(s) outside declared output_artifacts\" warning\nwalked the entire workspace dir and flagged every pre-existing file as\n\"unexpected\". For worktree workspaces this meant ~2477 files (the full\nproject checkout) showed up on every step, swamping signal with noise.\n\nReal-\n[…]\n, __pycache__, .venv, venv, .tox, .pytest_cache, .bundle,\n.cache, .gradle, .mvn, .next, .nuxt, .turbo. Keeps build-output names\n(dist, build, out, bin, obj) UNpruned because some projects commit them.",
"is_bot": false,
"headline": "fix(pipeline): use git status for artifact warning, not workspace wal…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T09:18:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ac460901babdaac86911fa424d8964dd5a02ec4e",
"body": "* feat(pipelines): add pipeline-evolve meta-pipeline (#1607)\n\nShip the four-step pipeline-evolve.yaml that ingests pipeline_eval\nhistory for a target pipeline and proposes an improved v+1 (yaml +\npersona-prompt diffs) via LLM, recording the candidate as a 'proposed'\nrow in evolution_proposal for the\n[…]\nSchemaSync, and covers gather-eval + record + skip\nbranches with direct bash-script tests against a real on-disk SQLite.\n\n* fix(pipeline-evolve): drop pipefail (sh-incompat) + bump analyze to balanced",
"is_bot": false,
"headline": "feat(pipelines): add pipeline-evolve meta-pipeline (#1611)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T08:18:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "efab2520a238db3277b5f0822bf6ddfd32213c20",
"body": "Phase 3.1 of Epic #1565 evolution loop: define typed EvalSignal contract\ntypes and emit per-step + per-run signals from the executor into the\npipeline_eval table via state.EvolutionStore.RecordEval.\n\n- internal/contract/eval_signal.go: SignalKind enum (success, failure,\n contract_failure, judge_sco\n[…]\nty. RecordEval failures never\n bubble up.\n- Wired into executor_steps.go terminal branches and into\n executor_lifecycle.go finalizePipelineExecution + scheduling-loop\n failure/rejection exit paths.",
"is_bot": false,
"headline": "feat(evolution): EvalSignal types + post-run hook (#1606) (#1610)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T08:13:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fef4e9618ecbffa590e49ace11e21e1e72067eb5",
"body": "… (#1609)\n\nCheapest (Haiku) tier produced shallow / lazy outputs on judgment-shaped\nwork — most visibly the test deletion in #1582 and forbidigo-panic\npatterns in #1585. Real-world signal from Epic #1565 Phase 1 dispatch:\nHaiku is fine for summary/distill/format steps but not for any persona\nthat sc\n[…]\nfetch-only steps\n\nAlso adds golangci-lint to flake.nix devShell so the same lint that gates\nCI runs locally without manual install (CI uses v2.10, nixpkgs ships v2.8 —\nminor skew, acceptable for now).",
"is_bot": false,
"headline": "chore(pipelines): raise judgment-step model from cheapest to balanced…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T07:34:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d00be0856fb3f5bc081c987865749b936a2c3f25",
"body": "Replace empty fixture structs in preview_fixtures.go with five per-route\nservice interfaces (PreviewLandingSource, PreviewOnboardSession,\nPreviewWorkSource, PreviewWorkItemSource, PreviewProposalSource), typed\nview-model structs, deterministic stub implementations, and a package-level\npreviewService\n[…]\nservices\".\nBuild remains gated by webui_preview tag; default build keeps zero preview\nfootprint.\n\nAdds preview_stubs_test.go covering per-stub determinism, no-error guarantee,\nand registry population.",
"is_bot": false,
"headline": "feat(webui): phase B preview stub services (#1600) (#1605)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T01:35:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "111657f17370b35f68f8959061d67908f6c644b3",
"body": "Replace runtime cdn.tailwindcss.com script in templates/work/{board,detail}.html\nwith a build-time-compiled, embedded /static/tailwind.css. The compiled file is\ncommitted so plain go build still works without Node or the Tailwind CLI.\n\n- internal/webui/tailwind.{input.css,config.js}: Tailwind v3 sou\n[…]\nwind_test.go: asserts CSS embedded, non-empty, contains\n --tw- custom props + bg-slate-50 utility; guards templates against CDN\n regression\n- docs/build.md: front-end build steps + npx fallback path",
"is_bot": false,
"headline": "feat(webui): vendor Tailwind via go:embed (#1601) (#1604)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T01:32:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "18534967e2c93381ad1350682e976b815ca7b587",
"body": "…ests (#1603)\n\nPipeline runs on PRs #1596, #1600, #1601 each got stuck in fix-implement\nre-running this test trying to chase its intermittent failure (httptest\nserver + goroutine sequencing). The unit-level coverage in\nhandlers_onboard_test.go already exercises the same code paths.\n\nSkipped pending a rebuild that doesn't depend on httptest goroutine\ntiming.",
"is_bot": false,
"headline": "chore(test): skip flaky TestOnboardSSEPostRoundTrip; cover via unit t…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T01:11:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aedad94f7426b9fdd6a62491081dab3a8bacd86a",
"body": "…1602)\n\nReplace static GET /{$} -> /runs redirect with sentinel-aware handler.\nIf .agents/.onboarding-done exists under repoDir, redirect / -> /work;\notherwise redirect / -> /onboard. Stat errors fall through to /onboard\nas the safer default. Reuses onboarding.SentinelFile and the existing\nserverRuntime.repoDir populated from git rev-parse --show-toplevel.\n\nAdds handlers_root_test.go with t.TempDir fixtures covering both\nbranches plus an empty-repoDir fallback case.",
"is_bot": false,
"headline": "feat(webui): smart-redirect / based on onboarding sentinel (#1599) (#…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T01:06:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "828f28ba59f6d102312ee337d4fda5d4a73f49f3",
"body": "* feat(webui): wire run-on-this-issue dispatch (#1595)\n\nAdd POST /work/{forge}/{owner}/{repo}/{number}/dispatch handler that resolves\nmatching worksource bindings, picks a pipeline (409 on zero, 400 on ambiguous,\nexplicit pipeline form value disambiguates), serializes the work_item_ref\nshared schema\n[…]\nrge param from dispatch test helpers (unparam lint)\n\n* fix(test): drop owner/repoPattern params (unparam) — hardcode in helpers\n\n* fix(test): drop unused labels param from seedBinding (unparam, final)",
"is_bot": false,
"headline": "feat(webui): wire run-on-this-issue dispatch (#1595) (#1598)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T00:46:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f4a04a275f804b20b02edba711cbba4ccf878506",
"body": "Add unified /work board listing all worksource bindings + a\n/work/{forge}/{owner}/{repo}/{number} detail view backed by the\nworksource.Service from #1591. Two self-contained Tailwind CDN\ntemplates render board + detail without extending layout.html so\nutility classes don't collide with the project s\n[…]\ns; round-trip tests for both handlers\n (Empty / WithBindings / NoMatch / OneMatch / BadNumber)\n- specs/1594-work-board/: spec + plan + tasks\n\nRefs #1594, depends on #1591 (MERGED) and #1590 (MERGED).",
"is_bot": false,
"headline": "feat(webui): implement #1594 /work board + detail templates (#1597)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T00:38:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b03d0df10b49a88d58fbb8864069fa6c18ce6c3e",
"body": "…(#1596)\n\n* feat(pipeline): reject net test deletions in impl-issue via llm_judge\n\nAdds a navigator step `judge-test-deletion` between `implement` and\n`create-pr` in both `.agents/pipelines/impl-issue.yaml` and the embedfs\ndefault. The step captures the diff of `_test.go` files into\n`.agents/output/\n[…]\nhe embedfs/ timeout regression that re-introduced\n120s/90s contract bounds (PR #1589 already bumped them to 300s).\n\n* fix(defaults): also revert impl-issue.yaml — embedfs untouched, project-only guard",
"is_bot": false,
"headline": "fix(pipeline): reject net test deletions in impl-issue via llm_judge …",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T00:31:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b8f4e01ac212e51219c3bf364033599424f90ae2",
"body": "Phase 2.2 of epic #1565 — WorkSourceService over the existing\nstate.WorksourceStore (PRE-5). Six ctx-first methods (Create/List/Get/\nUpdate/Delete/Match), typed BindingSpec validation (forge, repo glob,\nlabel filter, pipeline name, trigger enum), and an in-memory MatchBindings\nfilter against a WorkI\n[…]\n by golden test.\n\nNo webui (#2.3) and no executor wiring (#2.4) in this issue.\nWorkItemRef is a Go struct mirror of the #2.1 schema and is ready for a\none-line registry wire-up once that schema lands.",
"is_bot": false,
"headline": "feat(worksource): add domain service + bindings CRUD (#1591) (#1592)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T00:07:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7b6aadc9b486f64b07f7c98da8a605e21d7db150",
"body": "Phase 2.1 of Epic #1565 (work-source dispatch). Adds a draft-07 JSON\nschema at internal/contract/schemas/shared/work_item_ref.json so future\nWorkSourceService, /work board, and dispatch wiring share a validated\nshape for forge issues/PRs, scheduled jobs, and manual triggers.\n\nSchema details:\n- $id w\n[…]\npo,\n kind/id -> number + state).\n\n.agents/contracts/ deliberately not mirrored: that registry holds\nstep-output contracts validated by sync_test.go, not pipeline-I/O\ntyped schemas (different system).",
"is_bot": false,
"headline": "feat(contract): add work_item_ref shared schema (#1590) (#1593)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-30T00:07:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bf39994590514ec2d15343309a9a56036fc5985f",
"body": "…1589)\n\n* chore(timeouts): loosen aggressive defaults causing canceled steps\n\nReal-world signal: impl-issue runs on the Wave codebase that exercise\n\\`go test ./...\\` routinely take 6-10 minutes; the prior 5-minute\nStepDefault forced a \"canceled\" failure class even when the step was\nmaking clear prog\n[…]\nll values stay overridable per-step in pipeline yaml or per-runtime\nin wave.yaml; this only loosens the fallback floor.\n\n* test(pipeline): bump GatePollTimeout assertion 30m → 60m to match new default",
"is_bot": false,
"headline": "chore(timeouts): loosen aggressive defaults causing canceled steps (#…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T23:59:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c44433d787da5b5f649555d26239bb818dde497f",
"body": "Wire cmd/wave init to onboarding.BaselineService.StartSession instead of\nthe legacy RunWizard machinery. Delete the wizard step types\n(WizardConfig, WizardResult, WizardStep, DependencyStep,\nTestConfigStep, PipelineSelectionStep, AdapterConfigStep,\nModelSelectionStep, SkillSelectionStep, WaveCommand\n[…]\nure.\n\nInteractive prompts are deliberately removed pending the follow-up UI\nwork in the parent epic — non-interactive --yes / --reconfigure /\n--merge behaviour remains intact.\n\nRefs #1578, epic #1565.",
"is_bot": false,
"headline": "refactor(onboarding): replace RunWizard with BaselineService (#1588)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T23:46:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "719503e189de1a0d06df8928719a6c68d3f1750e",
"body": "Add /onboard chat-style web UI driving internal/onboarding.Service via\nSSE-streamed conversation and form-encoded answer POSTs. Covers Phase 1\nof Epic #1565: GET /onboard creates a session and redirects to\n/onboard/{id}; the page subscribes to /onboard/{id}/stream and renders\nprompts as HTML forms; POST /onboard/{id}/answer unblocks the agent's\nPromptString/PromptChoice. Last-Event-ID ring buffer replay survives\nreload. In-memory session registry on Server (mirrors activeRuns).",
"is_bot": false,
"headline": "feat(webui): implement #1577 onboarding driver chat shell (#1587)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T23:46:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "033ed1cb0e2b9eabcb940b44ee1e4eaa1c01dda9",
"body": "…s (#1586)\n\n* fix(cli): unblock cold-start bootstrap pipelines + materialise outputs\n\nThe 1.1 onboarder pipeline (PR #1581) merged with three latent\nchicken-and-egg gates that prevented `wave run onboard-project` from\never executing on a fresh repo — the exact scenario it was designed for.\n\nFixes:\n\n\n[…]\nootstrap embedded-pipeline\n fallback now reads via embedfs\n\nTest path updates for sync_test.go + impl_finding_workspace_test.go +\nall_pipelines_load_test.go to point at the new embedfs/* directories.",
"is_bot": false,
"headline": "fix(cli): unblock cold-start bootstrap pipelines + materialise output…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T23:01:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2f6a9425028868fac53a7d91ad41b6f641e7931c",
"body": "* feat(webui): /preview/* phase A (build tag, fixtures only)\n\nAdds a build-tag-gated /preview/* route group rendering five fixture-\nbacked mockup pages ported from docs/scope/mockups/. Default builds\nship zero preview footprint; the webui_preview tag activates routes,\ntemplates, css, fixtures, and s\n[…]\nd test runs.\n\nCI matrix in lint.yml builds, lints, and runs preview smoke tests\nunder both tag modes.\n\nIssue #1580 (epic #1565).\n\n* fix(webui): replace panics with init-time error sentinel (forbidigo)",
"is_bot": false,
"headline": "feat(webui): /preview/* phase A (build tag, fixtures only) (#1585)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T21:50:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5065e2871708f0a05daeae065d2b71134242bf70",
"body": "…ne (1.1) (#1581)\n\nPhase 1.1 of Epic #1565. Ships the first user-facing artefact of the\nonboarding-as-session vision: a four-step meta-pipeline that surveys an\nexisting project, proposes a tailored .agents/* overlay, writes it, and\nmarks the project as onboarded.\n\n- internal/defaults/personas/onboar\n[…]\netect, non_empty_file\n contracts elsewhere\n- Tests: schema validates valid + invalid fixtures, registry load checks\n for the persona / pipeline / prompts, persona-count bumped 31 -> 32\n\nIssue: #1576",
"is_bot": false,
"headline": "feat(onboarding): add onboarder persona + onboard-project meta-pipeli…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T21:50:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f9f3f1bd16f4b52c6f68656dd06db03654dc4c29",
"body": "* feat(forge): add Gitea HTTP adapter (PRE-3)\n\nImplement forge.Client against the Gitea v1 HTTP API. Works with vanilla\nGitea, Forgejo (same /api/v1 surface), and Codeberg (hosted Forgejo).\nAuth via the Authorization: token <TOKEN> header, sourced from\nGITEA_TOKEN (or CODEBERG_TOKEN with GITEA_TOKEN\n[…]\n.\nVerified end-to-end: codeberg.org/forgejo/forgejo returns issues + PRs\nincluding the merged-state override (state=closed && merged=true →\nexposed as State=\"merged\" in the forge-neutral PullRequest).",
"is_bot": false,
"headline": "feat(forge): Gitea HTTP adapter (PRE-3) (#1575)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T20:13:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "798c81f4e1056a04514d7aa9c167de830cb96f53",
"body": "New bounded context for cron-driven recurring runs. Reads schedule rows\nwritten via state.ScheduleStore (PRE-5 #1568), fires due jobs through a\ncaller-supplied Dispatcher, advances next_fire_at via the cron parser.\n\nComponents:\n\n- internal/scheduler/cron.go — 5-field cron parser supporting *, N, N-M\n[…]\n(every-min/top-of-hour/weekday/range-step),\nNextFire correctness (incl. impossible-expression error), tick loop\n(due-only, future-skip, bad-cron, dispatch-err, Start fires immediately).\n\nCloses #1571.",
"is_bot": false,
"headline": "feat(scheduler): add cron parser + in-process tick loop (PRE-6) (#1574)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T19:50:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a470e81f2199ed3ccf904efd9eaff75f56d640b9",
"body": "…E-2) (#1573)\n\nSkeleton for ADR-016 D2 onboarding-as-session: a Domain Service that\nboth the CLI driver (cmd/wave/commands/init.go) and the upcoming webui\ndriver (internal/webui/handlers_onboard.go, Phase 1) consume so the\nonboarding logic — flavour detection, manifest scaffolding, sentinel\nwrite — \n[…]\ners RunWizard removal and CLI driver migration to Phase 1 children\n(1.3 and 1.4) so this PR stays purely additive — `wave init` and\n`wave init --yes` continue producing the same output.\n\nCloses #1569.",
"is_bot": false,
"headline": "feat(onboarding): add Service + UI interfaces and BaselineService (PR…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T19:42:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a13220d9c40b39b372b341e4379f2957c8c538c0",
"body": "…5) (#1572)\n\nAdd the persistence surface that Phase 2 (work-source dispatch) and Phase 3\n(evolution loop) of the onboarding-as-session epic depend on:\n\n- pipeline_eval — per-run signal aggregation (judge_score, contract\n pass, retry count, failure class, duration, cost\n[…]\nigrations 29-33, additive only. Indexes target the access patterns:\nListDueSchedules (active+next_fire_at), GetActiveVersion (active=1),\nListProposalsByStatus (status+proposed_at DESC).\n\nCloses #1568.",
"is_bot": false,
"headline": "feat(state): add 5 tables for evolution + worksource + schedule (PRE-…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T19:33:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "54a5669d29bb2d141fc84056c3f8cfec81316ef8",
"body": "…Registry drop (#1570)\n\n* refactor(runner): extract shared executor option builder + LaunchForeground\n\nAdd runner.BuildExecutorOptions as the single source of truth for assembling\npipeline.ExecutorOption lists, and runner.LaunchForeground for CLI-shaped\nsynchronous runs. Both LaunchInProcess (webui)\n[…]\nts this.\n- Add coverage for MockOverride=true: confirms manifest-declared adapters\n are rerouted through the supplied runner so pipelines pinning a\n non-mock adapter still hit the mock under --mock.",
"is_bot": false,
"headline": "refactor(runner): unify CLI + webui executor option builder, fix With…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T19:17:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b6b59022147616dad8d37bcfa799715d55c4f244",
"body": "* docs(scope): plan onboarding-as-session feature\n\nAdds planning docs and UI mockups for the onboarding-as-session\nexperiment: reproducible Docker VM clones a project, Claude-Code-driven\nonboarding tailors `.agents/*` to it, work-source dispatch hides\npipelines from the user, and pipelines self-evol\n[…]\n\n* fix(mockups): tighten discover box right padding\n\n* feat(mockups): remove self-evolution diagram card (unreadable)\n\n* feat(mockups): use real install script + adapter/model sub-pills in audit table",
"is_bot": false,
"headline": "docs(scope): plan onboarding-as-session feature (#1431)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T18:41:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ddd0f1664bbc18573c76afb4752b11902f3020d4",
"body": "chore: remove ontology feature entirely",
"is_bot": false,
"headline": "Merge pull request #1564 from re-cinq/chore/remove-ontology",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T18:10:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3079bb58e9bfc10f927a6bdac72e488c731b5670",
"body": "The ontology feature (bounded-context injection, decision lineage\ntracking, wave analyze/evolve commands) was behind a build tag but\nleaked into 157 unconditional files: executor dependency injection,\nmanifest types, DB migrations, TUI views, onboarding wizard, and\nadapter config.\n\nRemoved:\n- intern\n[…]\npped + .agents pipelines\n- Schemas: ontology property nodes removed from wave-manifest + wave-pipeline schemas\n- Docs: vv-paradigm layers renumbered; validation.md rewritten; AGENTS.md section removed",
"is_bot": false,
"headline": "chore: remove ontology feature entirely",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T18:01:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2566fb36b8ed332a54b026d001e537fa8bf8520e",
"body": "refactor(config): add EffectiveConfig merge layer (manifest+env+runtime)",
"is_bot": false,
"headline": "Merge pull request #1562 from re-cinq/refactor/config-effective-pr2",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T16:57:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "775c832c3787a96f89cd83eff5732109177232bf",
"body": "Introduces config.Effective + config.Resolve, a single resolved per-run\nconfiguration view that collapses manifest defaults, the env snapshot,\nand runtime overrides with explicit precedence rules:\n manifest < env < runtime\nZero-valued higher-precedence fields defer to lower layers so an unset\nCLI f\n[…]\nceeds\n wave run --pipeline wave-smoke-contracts --adapter claude\n (no --model) succeeds, defaults to manifest tier\n\nFollow-up to PR #1561 (PR-1: runner.Options -> config.RuntimeConfig).",
"is_bot": false,
"headline": "refactor(config): add EffectiveConfig merge layer (manifest+env+runtime)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T16:55:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5e78b123f4ab03e7bc8ac73ab748fdb844107c09",
"body": "refactor(config): lift runner.Options to config.RuntimeConfig",
"is_bot": false,
"headline": "Merge pull request #1561 from re-cinq/refactor/config-runtime-pr1",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T16:37:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b5d6be955362452383bfa29e852581407f2a1fe",
"body": "Move the per-run flag bag from internal/runner into internal/config so\nruntime configuration lives next to the env snapshot in a single home.\nThis is a rename + relocation only — no semantics change.\n\nWhat moved:\n internal/runner/options.go → internal/config/runtime.go\n runner.Options \n[…]\nunner/doc.go.\n\nPR-1 of #61. PR-2 will add a config.Effective merge layer that overlays\nmanifest defaults with config.RuntimeConfig and config.Env to produce\nthe resolved view consumed by the executor.",
"is_bot": false,
"headline": "refactor(config): lift runner.Options to config.RuntimeConfig",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T16:35:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "546c26b06e9e387ea17aec24931505b1dbfc6b62",
"body": "refactor(metrics): extract internal/metrics package from state",
"is_bot": false,
"headline": "Merge pull request #1560 from re-cinq/refactor/extract-metrics-package",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T16:14:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7d073b16dc53e48c8c3a34c5346ecc0234e5347",
"body": "Carve performance-metric and retrospective persistence out of internal/state\ninto a dedicated internal/metrics sibling package. State stays focused on\nrun/step lifecycle; metrics owns the performance_metric and retrospective\ntables. Schema migrations remain in state's migration runner since there is\n[…]\nage.\n\nTests: go build ./...; go test -race ./... all green. New\nmetrics/store_test.go covers record + read-back, list-by-run, retro save/get\nround-trip, smoothness/status updates, and cleanup pruning.",
"is_bot": false,
"headline": "refactor(metrics): extract internal/metrics package from state",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T16:12:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2423466130cedbec2ed272dd6f766efd03e9c8ac",
"body": "feat(state,webui,cmd): distinguish design-rejection from runtime failure",
"is_bot": false,
"headline": "Merge pull request #1559 from re-cinq/feat/run-state-design-rejection",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T15:14:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4da480ed3fb44dffde8a114b1e6e8d2048bd19a5",
"body": "…interface\n\nrefactor(webui): drop direct internal/pipeline import via narrow interface",
"is_bot": false,
"headline": "Merge pull request #1553 from re-cinq/refactor/webui-narrow-pipeline-…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T15:12:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62a06fe14192043065ba1527d3a232a7b4d699cc",
"body": "A pipeline that halts because a gating contract reported the work is\nnon-actionable (e.g. fetch-assess setting `implementable: false` for\nan already-implemented or superseded issue) is no longer rendered as\na generic red `failed` run. It now lands in a dedicated `rejected`\nterminal state with non-re\n[…]\n) now uses `on_failure: rejected` for the\n issue-assessment contract, fixing the inception-bugfix UX gap.\n- Regression tests cover both the rejection path and the unchanged\n `on_failure: fail` path.",
"is_bot": false,
"headline": "feat(state,webui,cmd): distinguish design-rejection from runtime failure",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T15:08:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "aaea813f6f27690e008d3078c33032616132aea3",
"body": "…rface\n\nRoutes the executor's gate and fork contracts through new runner-side\nadapters so internal/webui no longer depends on internal/pipeline in the\nfive files originally listed under #1498 sub-task B.\n\nNew runner surface:\n- WebUIGate / WebUIGateChoice / WebUIGateDecision: transport types webui\n \n[…]\nace unchanged: /api/runs, /api/runs/<id>, /api/compose,\n/api/runs/<id>/fork, /api/runs/<id>/rewind, /api/runs/<id>/fork-points,\n/api/runs/<id>/gates/<step>/approve verified live with curl.\n\nRefs #1498",
"is_bot": false,
"headline": "refactor(webui): drop direct internal/pipeline import via narrow inte…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T15:06:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ab63f9e35abba52042f49054ba7ce6f0460f9621",
"body": "…-link\n\nfeat(webui): link composition children to parent in /runs and detail pages",
"is_bot": false,
"headline": "Merge pull request #1558 from re-cinq/feat/webui-composition-children…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T15:03:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02536b657e1af018cf850b889c452ea94e93ba69",
"body": "…t-propagation\n\nfeat(pipeline): propagate parent artifacts to sub-pipeline children",
"is_bot": false,
"headline": "Merge pull request #1557 from re-cinq/feat/sub-pipeline-cross-artifac…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T15:03:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9eaa59e5fc66241bb2b35d77fe350e796faa9856",
"body": "…e-outcome\n\nfeat(pipelines/wave-self): every wave-* pipeline ends with visible outcome (PR or report)",
"is_bot": false,
"headline": "Merge pull request #1556 from re-cinq/feat/wave-self-pipelines-visibl…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T14:59:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4732b1c38e634a090cdaada07993f238c2cf0226",
"body": "…pages\n\nMirrors the resume linkage UI from #1548 for composition children\n(iterate / sub-pipeline / branch / loop / aggregate). Composition\nchildren have had `parent_run_id` populated since #1450, but the\nvisualisation surface only handled resumes — parent run pages had no\ninline link list to their \n[…]\nn the parent row is the discoverability\nhook. top_level_only=false continues to expose every child row inline\nunder nestChildRuns.\n\nRefs #1548 (resume pattern), #1450 (composition children DB schema).",
"is_bot": false,
"headline": "feat(webui): link composition children to parent in /runs and detail …",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T14:58:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8171e182485008e8051159cc67fb34590f9cf848",
"body": "Plumb the parent pipeline's already-produced output_artifacts into\nthe child executor's crossPipelineArtifacts map at sub-pipeline\nlaunch time, mirroring the semantics that SequenceExecutor uses for\nsequence-pipeline boundaries.\n\nBefore: a child sub-pipeline's `inject_artifacts` ref of the form\n`pip\n[…]\nion: existing sequence-pipeline cross-pipeline flow keeps\n populating the captured map shape.\n\nRefs #1551 (the optional: true workaround in impl-finding.yaml that\nshipped via #1546 is now removable).",
"is_bot": false,
"headline": "feat(pipeline): propagate parent artifacts to sub-pipeline children",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T14:54:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6cada9f5d07aff6afcad8e211dcc8bd337925db4",
"body": "…tcome (PR or report)\n\nEvery wave-* self-evolution pipeline now terminates in one tangible,\noperator-clickable deliverable so a run no longer ends with files sitting\nsilently in a workspace.\n\nPer-pipeline outcomes:\n\n- wave-test-hardening: modifies the project tree, so the harden + run-tests\n steps \n[…]\noutputs.\n- wave-smoke-contracts, wave-smoke-gates: smoke-only, untouched per spec.\n\nPipelines wave-evolve, wave-bugfix, and wave-review do not exist in this\nrepository and were therefore not modified.",
"is_bot": false,
"headline": "feat(pipelines/wave-self): every wave-* pipeline ends with visible ou…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T14:53:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5d6ddaa0e71038f448c69b0c2fd5e8fba4207c26",
"body": "fix(pipeline): add prepare to wave-smoke-gates verify dependencies",
"is_bot": false,
"headline": "Merge pull request #1551 from re-cinq/fix/wave-smoke-gates-verify-deps",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T14:25:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "552dfcb6335d3c13caeb3b7982fd4db1707946c8",
"body": "The verify step listed only approval-gate as a dependency, so the\nauto-injected dep artifacts mechanism (#1452) didn't propagate\nprepare's gate-marker.json into verify's workspace. The pre-#1542\nbehaviour masked this by collapsing both command steps to the project\nroot via resolveCommandWorkDir's em\n[…]\ne artifact lands at\n.agents/output/gate-marker.json (back-compat alias) and\n.agents/artifacts/prepare/gate-marker.json (canonical).\n\nVerified: pipeline now completes in 5.1s with both contracts green.",
"is_bot": false,
"headline": "fix(pipeline): add prepare to wave-smoke-gates verify dependencies",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T14:20:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d79922ea00dd44a53f3a2813640e1813cbd96f6b",
"body": "refactor(tui): route pipeline_launcher detach through internal/runner",
"is_bot": false,
"headline": "Merge pull request #1550 from re-cinq/refactor/tui-launcher-via-runner",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T14:18:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e0ec56d0c6a4d7b42856124b1e616ffd8d0a943b",
"body": "…inal-sites\n\nrefactor(config): migrate remaining os.Getenv sites to internal/config",
"is_bot": false,
"headline": "Merge pull request #1549 from re-cinq/refactor/config-env-migration-f…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T14:12:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34c85fda2b16ce286e10f6132d3c2c7e93116b5c",
"body": "The TUI launcher carried its own copy of the detach + spawn dance:\nexec.Command(os.Args[0], ...) with Setsid, hand-rolled env passthrough,\nlog-file routing, and PID record. PR #1527 extracted that logic into\ninternal/runner so cmd/wave/commands and internal/webui share one\ncanonical detach contract \n[…]\n go vet ./...: clean\n- golangci-lint run ./...: 0 issues\n- Full repo go test ./...: clean (one webui test flake unrelated to\n this change, passes on retry)\n\nCloses the TUI follow-up note in PR #1527.",
"is_bot": false,
"headline": "refactor(tui): route pipeline_launcher detach through internal/runner",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T14:10:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "875760cb0bbf7bf9c888237715d3dcc97662766f",
"body": "feat(state,webui): link resumed runs to parent failed run (#1510)",
"is_bot": false,
"headline": "Merge pull request #1548 from re-cinq/worktree-agent-ae1bde83",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T14:08:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6705943be02283bd2ff4aed5f48d4b20f2d760ba",
"body": "Centralise the remaining four scattered env-reader call clusters behind\nthe internal/config typed surface introduced in #1531. After this commit\ngit grep -nE 'os\\.Getenv\\(' across the migrated paths returns zero hits.\n\n- internal/scope/introspect.go (3 sites): GitHub/GitLab/Gitea token\n introspecto\n[…]\nprocessHomePath() (home, path string), and LoadMigrationEnv() with\nthe typed MigrationEnv struct (pointer fields distinguish \"unset\" from\n\"explicitly set to false\"). All new accessors have unit tests.",
"is_bot": false,
"headline": "refactor(config): migrate remaining os.Getenv sites to internal/config",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T14:07:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1a5b7b617a2530e4a3a0ab5f6460f32bc904fca6",
"body": "Wire `wave resume` and the WebUI POST /api/runs/{id}/resume endpoint to\nrecord `parent_run_id`, `parent_step_id`, and `run_kind=\"resume\"` on the\nnew run row, mirroring the composition-children pattern (#1450).\n\nThe /runs page gains a `top_level_only` query param (default true) that\nhides resume/comp\n[…]\nl page renders a \"Resumed by\" pill linking to each\nresume attempt; the resumed run detail page already shows a parent\nbreadcrumb that is now labelled \"resumed from\" when run_kind=resume.\n\nCloses #1510",
"is_bot": false,
"headline": "feat(state,webui): link resumed runs to parent failed run (#1510)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T14:03:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "57b294315b4633875aecf53ebd4823c16ab26f3a",
"body": "…utput-path\n\nfix(pipeline): align ops-issue-quality enhance output to .agents/output/ convention",
"is_bot": false,
"headline": "Merge pull request #1547 from re-cinq/fix/ops-issue-quality-enhance-o…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T13:23:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf9105e3afd86604cdfbc06f886f06265ea0c956",
"body": "…ut/ convention\n\nFollow-up to #1543 which fixed the same path-convention bug on the scan\nstep. The enhance step's enhancement-summary output and its handover\ncontract still pointed at .agents/artifacts/, which is reserved for\nframework-injected upstream files. Producers must write under\n.agents/output/.",
"is_bot": false,
"headline": "fix(pipeline): align ops-issue-quality enhance output to .agents/outp…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T13:14:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "133950090b6295a91600872a8f9fd6bb411c7b75",
"body": "fix(pipeline): wire impl-finding apply-fix through memory.inject_artifacts",
"is_bot": false,
"headline": "Merge pull request #1546 from re-cinq/fix/impl-finding-inject-artifacts",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T13:06:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52230dd03f697ae0839b36f104302d5eee8ffd57",
"body": "feat(pipeline): auto-escalate model tier on retry; opt-out via retry.no_escalate",
"is_bot": false,
"headline": "Merge pull request #1545 from re-cinq/feat/retry-model-escalation",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T13:06:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "838919449a07f158188c996572dceeda75a7ae3a",
"body": "…opt-out",
"is_bot": false,
"headline": "docs(retry): document model tier escalation on retry and no_escalate …",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T13:01:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "793446f47a891cad125841da8730e6a74a6b2c24",
"body": "The previous commit on this branch declared\nmemory.inject_artifacts with `step: fetch-pr`, but `fetch-pr` lives\nin the parent `ops-pr-respond` pipeline, not in `impl-finding`. The\ndryrun validator (internal/pipeline/dryrun.go) flags any `step:`\nreference that does not resolve to an in-pipeline step \n[…]\nnal mechanism that places `pr-context` in the\nchild workspace; the inject_artifacts block is the declarative\ncontract that earns the auto-emitted `## Input Artifacts` prompt\nblock and the audit trail.",
"is_bot": false,
"headline": "fix(pipeline): use pipeline: ref for cross-pipeline pr-context inject",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T12:56:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c7df15510fa21e8cf5b8c27ae41355e00ffcfd7f",
"body": "…t-injection\n\nfix(pipeline): isolate command-step workspaces; auto-inject input artifact paths",
"is_bot": false,
"headline": "Merge pull request #1542 from re-cinq/fix/workspace-pollution-artifac…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T12:50:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d04e3dcd96c7910a4fccbdad98a2e5f7d3970543",
"body": "…facts\n\nThe apply-fix step previously read pr-context directly from\n.agents/artifacts/pr-context via inline shell (jq + git checkout),\nrelying on an undocumented side-effect of the parent ops-pr-respond\npipeline's resolve-each config.inject. That bypassed the framework's\nartifact-injection contract:\n[…]\nlives. The prompt now describes\n semantic intent only (\"pr-context carries the PR head branch\") —\n no paths, no schema fields.\n\nFound by audit sweep (broad pipeline injection audit, this session).",
"is_bot": false,
"headline": "fix(pipeline): wire impl-finding apply-fix through memory.inject_arti…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T12:48:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ae56a463b9adcb112f5dce814cb11c590f5cb85b",
"body": "…no_escalate\n\nWhen a step is retried (attempt > 1) the executor now resolves a model one tier\nstronger than the originally configured tier:\n\n cheapest -> balanced -> strongest\n\nIf the configured model is already strongest, retries stay at strongest.\nLiteral model names (e.g. \"claude-opus-4-7\") neve\n[…]\nmpt model resolver\n- executor_dispatch.go: threads attempt index through to the resolver\n- routing_test.go: covers escalate cheapest->balanced->strongest, no-escalate\n flag, literal-name preservation",
"is_bot": false,
"headline": "feat(pipeline): auto-escalate model tier on retry; opt-out via retry.…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T12:47:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4f753ba980af6413f2c98ff4158e827b4e407697",
"body": "…t-artifacts\n\nfix(pipeline): wire inject_artifacts on ops-pr-review-publish publish step",
"is_bot": false,
"headline": "Merge pull request #1544 from re-cinq/fix/ops-pr-review-publish-injec…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T12:45:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e4c0518f08c143955bad4c41667b8da60747eb6",
"body": "fix(pipeline): align ops-issue-quality scan output to .agents/output/ convention",
"is_bot": false,
"headline": "Merge pull request #1543 from re-cinq/fix/ops-issue-quality-output-path",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T12:45:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46715500e53c32fa2e12f3b7070ee2c5377ad989",
"body": "…ifact paths\n\nThree coordinated fixes for silent workspace-pollution + false-positive smoke contract:\n\n1. createStepWorkspace pre-creates .agents/output/ in the default workspace.\n Without it, resolveCommandWorkDir saw the workspace as bare and silently\n fell back to project root, causing comman\n[…]\nes both flags to be true.\n\nVerified end-to-end: smoke-contracts now passes only when content is actually\nvalid (data_valid=true, schema_valid=true with real 16/81-byte payloads,\nno project-root leak).",
"is_bot": false,
"headline": "fix(pipeline): isolate command-step workspaces; auto-inject input art…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T12:42:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0eb902d4960ebb4556cc60bf68b3e729a5f3d00b",
"body": "… step\n\nThe publish step referenced .agents/output/review-verdict.json and\n.agents/output/diff-analysis.json directly in its prompt body, but had\nno dependencies block and no memory.inject_artifacts entries. As a\nsub-pipeline launched from ops-pr-review's profile-gated branch, its\nworkspace is isola\n[…]\ne) and remove the\nhand-written .agents/output/* paths from the prompt. The framework\nauto-injects an Input Artifacts block listing actual paths, so the\nprompt now describes only what each input means.",
"is_bot": false,
"headline": "fix(pipeline): wire inject_artifacts on ops-pr-review-publish publish…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T12:38:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5475837a44617014a9c260d37d3ebfb6cbe7e528",
"body": "… convention\n\nThe scan step declared its quality-report.json output under .agents/artifacts/,\nwhich is the framework's INTERNAL injection target populated by\nmemory.inject_artifacts — not where pipelines should write outputs. Wave\nconvention is .agents/output/<name>.<ext> for declared pipeline outpu\n[…]\nts/output/quality-report.json. The artifact name (quality-report) is\nunchanged, so the enhance step's inject_artifacts reference continues to\nresolve correctly (consumers reference by name, not path).",
"is_bot": false,
"headline": "fix(pipeline): align ops-issue-quality scan output to .agents/output/…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T12:34:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fca4d7de3e554b3344f39a9f436307622ad313f5",
"body": "refactor(state): retire StateStore umbrella; narrow consumer ifaces (#1496 P2)",
"is_bot": false,
"headline": "Merge pull request #1541 from re-cinq/refactor/1496-statestore-retire",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T10:28:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4129ef90ba48363d8e6da69dfa558875bb8ee86f",
"body": "- StateStore is now the sum of its sub-interfaces (RunStore, EventStore,\n OntologyStore, WebhookStore, ChatStore + Close); the ~93 inline\n duplicate methods are gone. Methods that only lived on the umbrella\n (GetMostRecentRunID, RunExists, GetRunStatus, ListPipelineNamesByStatus,\n BackfillRunTok\n[…]\n internal/state store.go (runningRunsLister for WaitForConcurrencySlot)\n- Concrete *stateStore satisfies every sub-interface unchanged.\n- Build, vet, and go test -race ./... all green.\n\nCloses #1496.",
"is_bot": false,
"headline": "refactor(state): retire StateStore umbrella; narrow consumer ifaces",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T10:21:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "421ff05e4d60376f5bb17dd15e53bcb57e73b066",
"body": "refactor(webui): split Server struct into composed sub-structs (#1498 D)",
"is_bot": false,
"headline": "Merge pull request #1540 from re-cinq/refactor/1498-server-struct-split",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T10:12:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "853003c27a5132fb3cbad05380bfd7d3f1cb0102",
"body": "- 27 fields grouped into transport/auth/runtime/realtime/assets\n composed sub-structs. Top-level Server now has 6 fields\n (5 sub-structs + sync.Mutex).\n- Handlers updated to s.transport.X, s.auth.X, s.runtime.X,\n s.realtime.X, s.assets.X across 40 files in internal/webui/.\n- No behaviour change; HTTP API contracts and NewServer signature\n preserved.\n\nPartial of #1498 (sub-task D — Server struct split).",
"is_bot": false,
"headline": "refactor(webui): split Server struct into composed sub-structs",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T10:06:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3bba68791b8aa9a54b7c76f9cb16b1663b84074",
"body": "refactor: extract internal/persona; resolve adapter<->manifest cycle (#1507.13.5)",
"is_bot": false,
"headline": "Merge pull request #1539 from re-cinq/refactor/1507-extract-persona-pkg",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T09:49:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08b1e2fd4492b649bd3f13ec3c7fcdd8f2de9adc",
"body": "refactor(webui): split control + runs handlers (#1498 P2 partial)",
"is_bot": false,
"headline": "Merge pull request #1538 from re-cinq/refactor/1498-webui-thin-handlers",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T09:44:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1340d745566f7f4edf98e2339a3f9ef809869358",
"body": "- New internal/persona package owns the agent-compiler input type.\n- internal/adapter.PersonaSpec is now a type alias for persona.Persona;\n adapter no longer carries its own mirror struct. Call sites that use\n adapter.PersonaSpec{} keep working unchanged.\n- cmd/wave/commands consumes persona.Perso\n[…]\nAML tags, and behaviour are unchanged. The full\nmanifest.Persona stays in internal/manifest; aliasing it to a smaller\nneutral type would have broken its 9-field shape.\n\nPartial of #1507 (subset 13.5).",
"is_bot": false,
"headline": "refactor: extract internal/persona; resolve adapter cycle",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T09:43:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b26ff688fb00ae358ebf5d57c90d3010a9f69572",
"body": "…uting\n\nrefactor(adapter): close adapter-bypass sites in webui+tui (#1501)",
"is_bot": false,
"headline": "Merge pull request #1537 from re-cinq/refactor/1501-adapter-bypass-ro…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T09:41:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "141a7163d594625c67fb594ea9c646fea928c5f8",
"body": "- New internal/git package wraps git command invocations needed\n by TUI providers; tests fake via exec runner hook.\n- webui/handlers_skills.go skill install routes through\n internal/sandbox.RunShell so it inherits sandbox+audit policy.\n- internal/tui/{header,pipeline_detail}_provider.go consume\n internal/git instead of exec.Command.\n\nCloses #1501.",
"is_bot": false,
"headline": "refactor(adapter): close adapter-bypass sites in webui+tui",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T09:35:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5130408a483ad6387cbe93ad9e42006624671f78",
"body": "handlers_control.go (821 -> 381 LOC) by extracting fork/rewind\nhandlers, adapter/model meta endpoints, run-launcher methods,\nloadPipelineYAML and option-projection helpers into dedicated\nfiles (handlers_fork.go, handlers_meta.go, server_launcher.go,\nserver_helpers.go).\n\nhandlers_runs.go (1352 -> 319\n[…]\nferred to a\nfollow-up: gate types, fork manager, and gate registry still\nrequire pipeline types in DTOs and handler bodies, so a clean\nbreak needs a new narrow-interface layer rather than a file\nmove.",
"is_bot": false,
"headline": "refactor(webui): split control + runs handlers",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T09:30:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0ccec71241aa5080659d81b7735c95f082169e22",
"body": "refactor(cmd): split runRun god function into stages (#1499 close)",
"is_bot": false,
"headline": "Merge pull request #1536 from re-cinq/refactor/1499-runrun-split",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T09:10:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58908438379360dc0f17fa7cc357fb70e1be5ffb",
"body": null,
"is_bot": false,
"headline": "fix(cmd): drop unused p param in assembleExecutorOptions (lint)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T09:06:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85481aafd19fce3003f88fafd729f83587edf8e0",
"body": "- runRun becomes thin orchestrator (~74 LOC).\n- Stages extracted: validateFlags, setupSignalHandling,\n loadManifestAndPipeline, buildStateStore, autoRecoverResumeInput,\n resolveOrGenerateRunID, buildExecutor, assembleExecutorOptions,\n runOnce, runContinuous, formatRecoveryError, printSummary.\n- r\n[…]\nmDryRun) keep run.go under the size budget.\n- Each stage <= 150 LOC.\n- run.go: 953 -> 375 LOC.\n- No behaviour change; CLI flags, signals, output formats, and\n exit codes are unchanged.\n\nCloses #1499.",
"is_bot": false,
"headline": "refactor(cmd): split runRun god function into stages",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T09:04:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ca7df2ab59635f9fec2d6ba63dfe7ebcffbec8b4",
"body": "refactor(adapter,pipeline): Resolver iface + explicit ontology (#1504 close)",
"is_bot": false,
"headline": "Merge pull request #1535 from re-cinq/fix/1504-resolver-ontology",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T01:02:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c72fbbbdab817acf6f3bde933ec12c11a5e3412",
"body": null,
"is_bot": false,
"headline": "fix(pipeline): replace ontology nil panic with NoOp default (lint)",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T00:58:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb0d456a145bbf03a521054f69e32e769cfbf629",
"body": "Add adapter.Resolver, a one-method interface satisfied by\n*AdapterRegistry via ResolveStrict. FallbackRunner.registry is now\ntyped as Resolver so tests can mock the single method instead of\nspinning up a real registry.\n\nMake the ontology service a required constructor argument for\nDefaultPipelineExe\n[…]\nfest declares ontology contexts.\n\nAll production call sites (cmd/wave/commands, internal/runner,\nsub-pipeline propagation) and ~150 test sites are updated to pass\nthe option explicitly.\n\nCloses #1504.",
"is_bot": false,
"headline": "refactor(adapter,pipeline): Resolver iface + explicit ontology",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T00:54:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "578f52e120fdc25609702ae1971f6ede12c8b05f",
"body": "refactor(cmd): move compose logic to internal/pipeline (#1502 partial)",
"is_bot": false,
"headline": "Merge pull request #1534 from re-cinq/refactor/compose-relocation-1502",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T00:50:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72307ee0b13e7960bd82f9b44fb137a96e6f930d",
"body": "refactor: centralize HTTP client in internal/httpx (#1503 partial 8.3)",
"is_bot": false,
"headline": "Merge pull request #1533 from re-cinq/refactor/1503-httpx",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T00:49:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29b794083b0d9eed2032ecb32b0721b766695f49",
"body": "- BuildExecutionPlan and ValidateComposeSpec moved from\n cmd/wave/commands/compose.go to internal/pipeline/composition.go.\n- Now testable without cobra; reusable from webui/tui.\n- compose.go reduced from 496 to 403 LOC; cobra wiring, validation\n formatting, and execution wiring only. setupComposeR\n[…]\nm a list of named pipelines.\n- CLI behaviour unchanged; flags, validation rules, output schemas,\n and 'wave compose --help' output all preserved byte-for-byte.\n\nPartial of #1502 (compose.go portion).",
"is_bot": false,
"headline": "refactor(cmd): move compose logic to internal/pipeline",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T00:44:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0d8d392927e4ad9d3a1bfd25297b2cea8d1e7acd",
"body": "- New internal/httpx package: shared Client with timeout, retry, and\n audit hook configuration. Single network policy across the codebase.\n- Migrate contract/llm_judge, forge/detect, github, onboarding to consume\n httpx.Client. forge probes and github use single-shot mode (their\n callers handle r\n[…]\nwebui/embed, webui/handlers_runs all use internal/humanize. Only\n audit/logger keeps a private formatDuration (\"%.3fs\" trace format) by\n design — different output shape from humanize.\n\nCloses #1503.",
"is_bot": false,
"headline": "refactor: centralize HTTP client in internal/httpx",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T00:44:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3974e550b5c41a3f1fe66c53e4b3946d26b1a2d1",
"body": "…tracts\n\nrefactor: extract internal/uitheme; onboarding no longer imports tui (#1497 residual)",
"is_bot": false,
"headline": "Merge pull request #1532 from re-cinq/refactor/1497-uitheme-smoke-con…",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T00:30:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45bec3217e64b84caa9b6e3a67539f616cb08d91",
"body": "refactor(config): centralize env reads in internal/config (#1507 partial 13.3)",
"is_bot": false,
"headline": "Merge pull request #1531 from re-cinq/refactor/1507-config-persona",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T00:26:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7159c91fd52f318e80fccf067b75048c102bbdfb",
"body": "- New internal/uitheme package owns WaveTheme, SelectionStyle,\n WaveLogo. Lightweight, free of bubbletea-specific deps so\n non-TUI callers (notably internal/onboarding) can consume it\n without pulling the full TUI runtime.\n- internal/onboarding/{steps,ontology_step}.go imports\n internal/uitheme \n[…]\ni retains thin alias shim for existing consumers\n (theme.go); migration to internal/uitheme is opt-in and\n non-breaking.\n\nCloses #1497 (residual). Smoke-contracts pipeline fix deferred\nto follow-up.",
"is_bot": false,
"headline": "refactor: extract internal/uitheme; onboarding no longer imports tui",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T00:26:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "21f67bd9fa2c582553444432a68ec3f8facc8fda",
"body": "New internal/config package consolidates env var reads. Migrated\n4 sites: contract/llm_judge (ANTHROPIC_API_KEY), adapter/github\n(GITHUB_TOKEN), display/capability (NO_COLOR/TERM/CI), hooks/env\n(WAVE_HOOK_ENABLED/etc).\n\nPartial of #1507. Persona extract (13.5) and remaining 4 sites\n(scope/introspect, webui/handlers_admin, state/migration_config,\nrunner/detach passthrough) deferred to follow-up.",
"is_bot": false,
"headline": "refactor(config): centralize env reads in internal/config",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T00:16:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43c388fac5efe3ff1e77ea040c22b7aefd87889b",
"body": "refactor(cmd): relocate misplaced infra types out of run.go (#1499 partial)",
"is_bot": false,
"headline": "Merge pull request #1530 from re-cinq/refactor/1499-relocations",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-29T00:00:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f1858c238864ecd2e27fbfe537dc7a35e1ede63",
"body": "refactor(state): physically split store.go (3386 LOC) into per-domain files (#1496 partial)",
"is_bot": false,
"headline": "Merge pull request #1529 from re-cinq/refactor/1496-split-state-store",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-28T23:58:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64cd747d361559c3aa52ed6426eaa4ba778fdc2c",
"body": "- DBLoggingEmitter -> internal/event (deletes webui duplicate\n loggingEmitter; unified semantics preserve stream_activity tool\n calls and PipelineID-as-runID precedence)\n- AdapterCompactionRunner -> internal/relay (was relayCompactionAdapter)\n- RunHeartbeatLoop + HeartbeatInterval -> internal/stat\n[…]\n() replaces magic-string skill paths in\n run/resume/compose/do/meta\n\nDrops cmd/wave/commands/run.go from 1116 to 953 LOC (-163).\n\nPartial of #1499. runRun god-function split deferred to follow-up PR.",
"is_bot": false,
"headline": "refactor(cmd): relocate misplaced infra types out of run.go",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-28T23:54:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "05ff91c02b5781814ddef59f2d11afd359514b4d",
"body": "Carves the 3386-LOC umbrella into 14 domain-scoped files: runs,\nevents, artifacts, cancellation, metrics, progress, chat, ontology,\nforks, retros, decisions, webhooks, outcomes, orchestration. store.go\nnow retains only types, constants, the StateStore interface, the\nconstructor, migration init, pipe\n[…]\ngnature changes, no interface changes,\nno behaviour change. StateStore umbrella retained — consumer\nmigration to narrow interfaces deferred to Part 2.\n\nPartial of #1496. Closes the file-split portion.",
"is_bot": false,
"headline": "refactor(state): split store.go into per-domain files",
"author_name": "Michael Czechowski",
"author_login": "nextlevelshit",
"committed_at": "2026-04-28T23:53:33Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 2470,
"latest_release_at": "2026-04-30T11:36:18Z",
"latest_release_tag": "v0.273.1",
"releases_from_tags": false,
"days_since_last_push": 93,
"active_weeks_last_year": 14,
"days_since_latest_release": 96,
"mean_days_between_releases": 0
},
"artifacts": {
"collected": true,
"structure": [
"tree.go_importable",
"tree.go_main",
"tree.goreleaser"
],
"declarations": []
},
"community": {
"has_readme": true,
"has_license": true,
"readme_badges": {
"hosts": [
"shields.io"
],
"total": 2,
"header": 2,
"collected": true,
"has_inspect_badge": false
},
"has_description": true,
"has_contributing": true,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 3,
"stars": 20,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-03-24",
"count": 1
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-07-03",
"count": 1
}
],
"complete": true,
"collected": 3,
"total_forks": 3
},
"star_history": null,
"open_issues_and_prs": 253
},
"ai_readiness": {
"has_nix": true,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 232035,
"source_files_sampled": 872,
"oversized_source_files": 6,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"GEMINI.md"
],
"agent_instruction_max_bytes": 20451
},
"dependencies": {
"manifests": [
"docs/package.json",
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go",
"npm"
],
"dependencies": [
{
"name": "github.com/charmbracelet/bubbles",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/charmbracelet/bubbletea",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.10"
},
{
"name": "github.com/charmbracelet/huh",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.8.0"
},
{
"name": "github.com/charmbracelet/lipgloss",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.0"
},
{
"name": "github.com/charmbracelet/x/exp/teatest",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20260316093931-f2fb44ab3145"
},
{
"name": "github.com/chromedp/cdproto",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20250803210736-d308e07a266d"
},
{
"name": "github.com/chromedp/chromedp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.14.2"
},
{
"name": "github.com/santhosh-tekuri/jsonschema/v6",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v6.0.2"
},
{
"name": "github.com/spf13/cobra",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "golang.org/x/sync",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.19.0"
},
{
"name": "golang.org/x/term",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.39.0"
},
{
"name": "golang.org/x/text",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.28.0"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
},
{
"name": "modernc.org/sqlite",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.3"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 5,
"merged_prs": 521,
"open_issues": 248,
"closed_ratio": 0.755,
"closed_issues": 764,
"closed_unmerged_prs": 106
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "nextlevelshit",
"commits": 2469,
"avatar_url": "https://avatars.githubusercontent.com/u/10194510?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"docs.yml",
"lint.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 1,
"reason": "dependency not pinned by hash detected -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "35 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "6b82c89e95546829f93693d2f451afbb01e5df4f",
"ran_at": "2026-08-05T09:22:23Z",
"aggregate_score": 2.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 0,
"decided_7d": 0,
"merged_30d": 0,
"authors_30d": 0,
"decided_30d": 0,
"sample_size": 60,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 0,
"newcomer_merged_30d": 0,
"bot_prs_excluded_30d": 0,
"newcomer_authors_30d": 0,
"newcomer_decided_30d": 0
},
"ci_last_run_at": "2026-04-30T12:06:22Z",
"oldest_open_prs": [
{
"number": 1439,
"created_at": "2026-04-27T19:33:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1468,
"created_at": "2026-04-28T09:25:51Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1472,
"created_at": "2026-04-28T11:37:30Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1617,
"created_at": "2026-04-30T09:31:15Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1643,
"created_at": "2026-05-02T13:06:51Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-04-30T13:20:32Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 991,
"created_at": "2026-04-12T00:51:00Z",
"last_comment_at": "2026-04-17T14:59:31Z",
"last_comment_author": "nextlevelshit"
},
{
"number": 992,
"created_at": "2026-04-12T00:51:02Z",
"last_comment_at": "2026-04-17T14:59:43Z",
"last_comment_author": "nextlevelshit"
},
{
"number": 993,
"created_at": "2026-04-12T00:51:03Z",
"last_comment_at": "2026-04-17T14:59:56Z",
"last_comment_author": "nextlevelshit"
},
{
"number": 1041,
"created_at": "2026-04-12T14:27:55Z",
"last_comment_at": "2026-04-24T20:47:20Z",
"last_comment_author": "nextlevelshit"
},
{
"number": 1106,
"created_at": "2026-04-13T21:44:07Z",
"last_comment_at": "2026-04-14T09:19:43Z",
"last_comment_author": "nextlevelshit"
},
{
"number": 1123,
"created_at": "2026-04-14T18:12:07Z",
"last_comment_at": "2026-04-17T15:58:40Z",
"last_comment_author": "nextlevelshit"
},
{
"number": 1133,
"created_at": "2026-04-17T14:19:26Z",
"last_comment_at": "2026-04-22T11:19:51Z",
"last_comment_author": "nextlevelshit"
},
{
"number": 1141,
"created_at": "2026-04-20T11:38:51Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1148,
"created_at": "2026-04-21T22:22:37Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1149,
"created_at": "2026-04-22T05:45:12Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1150,
"created_at": "2026-04-22T05:45:13Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1151,
"created_at": "2026-04-22T05:45:15Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1152,
"created_at": "2026-04-22T05:45:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1153,
"created_at": "2026-04-22T05:45:18Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1154,
"created_at": "2026-04-22T05:45:19Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1155,
"created_at": "2026-04-22T05:45:21Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1156,
"created_at": "2026-04-22T05:48:34Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1157,
"created_at": "2026-04-22T05:48:40Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1160,
"created_at": "2026-04-22T06:03:44Z",
"last_comment_at": "2026-04-27T00:21:47Z",
"last_comment_author": "nextlevelshit"
},
{
"number": 1161,
"created_at": "2026-04-22T06:03:45Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/re-cinq/wave",
"host": "github.com",
"name": "wave",
"owner": "re-cinq"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 53 is calibrated to 54 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 53,
"calibrated": 54,
"calibration": "2026-08-02"
}
}
],
"value": 54,
"inputs": {
"security": 27,
"vitality": 55,
"community": 45,
"governance": 43,
"calibration": "2026-08-02",
"engineering": 86,
"ai_readiness": 76,
"weighted_overall_raw": 53
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 55,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "weak",
"name": "Development activity",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"commits_last_year": 2470,
"human_commit_share": 1,
"days_since_last_push": 93,
"active_weeks_last_year": 14
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 93 days ago",
"points": 9.9,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 93
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "14/52 weeks with commits",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 14
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "2470 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 2470
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 81,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v0.273.1",
"releases_from_tags": false,
"days_since_latest_release": 96,
"mean_days_between_releases": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 96 days ago",
"points": 27,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 96
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~0 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 0
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 96,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 96 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 96
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 45,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 23,
"inputs": {
"forks": 3,
"stars": 20,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "20 stars",
"points": 20.7,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 20
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "3 forks",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 3
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": 2,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [
"shields.io"
],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "weak",
"name": "Sustainability & Governance",
"value": 43,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 65,
"inputs": {
"merged_prs": 521,
"open_issues": 248,
"closed_issues": 764,
"prs_merged_7d": 0,
"prs_decided_7d": 0,
"prs_merged_30d": 0,
"prs_decided_30d": 0,
"issue_closed_ratio": 0.755,
"closed_unmerged_prs": 106,
"first_time_authors_30d": 0,
"first_time_prs_merged_30d": 0,
"first_time_prs_decided_30d": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "76% of issues closed",
"points": 31.7,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 76
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "521/627 decided PRs merged",
"points": 24.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 521,
"decided": 627
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"followers": 16,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "re-cinq",
"public_repos": 43,
"account_age_days": 1098
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "16 followers of re-cinq",
"points": 8.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 16,
"login": "re-cinq"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "43 public repos, account ~3 yr old",
"points": 18,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 43
}
},
{
"code": "account_age_years",
"params": {
"years": 3
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 86,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"ai-as-code",
"agentic-workflow",
"multi-agent-systems"
],
"has_wiki": false,
"homepage": "https://re-cinq.github.io/wave/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://re-cinq.github.io/wave/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "3 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 3
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 27,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": null,
"notes": [],
"value": 27,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 2.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "35 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 76,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"GEMINI.md"
],
"agent_instruction_max_bytes": 20451
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md, GEMINI.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md, GEMINI.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 100,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 73,
"inputs": {
"has_nix": true,
"has_tests": true,
"lockfiles": [
"go.sum",
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Nix, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Nix, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 232035,
"source_files_sampled": 872,
"oversized_source_files": 6
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "6/872 source files over 60KB",
"points": 54.6,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 872,
"oversized": 6
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "weak",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"application"
],
"labels": [
"cli",
"tui"
],
"scores": {
"cli": 4,
"tui": 4,
"library": 3,
"application": 9
},
"primary": "cli",
"evidence": [
{
"tier": "structure",
"label": "application",
"source": "tree.go_main",
"weight": 5
},
{
"tier": "structure",
"label": "application",
"source": "tree.goreleaser",
"weight": 4
},
{
"tier": "dependencies",
"label": "cli",
"source": "dep:github.com/spf13/cobra",
"weight": 4
},
{
"tier": "dependencies",
"label": "tui",
"source": "dep:github.com/charmbracelet/bubbletea",
"weight": 4
},
{
"tier": "structure",
"label": "library",
"source": "tree.go_importable",
"weight": 3
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": false
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch go package 'github.com/recinq/wave' from its registry",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-08-05T09:22:43.207810Z",
"schema_version": "0.31.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/re-cinq/wave.svg",
"full_name": "re-cinq/wave",
"license_state": "standard",
"license_spdx": "MIT"
}
Пов’язані записи
Перевірені репозиторії, що мають спільні каталожні теги або екосистеми з re-cinq/wave. Читати поруч →
Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v2.5.0, схема v0.31.0 — повна методологія · вікі метрик.
Як окремий результат виглядає на тлі всього реєстру: сукупна статистика.
