公开记录存在风险
软件健康报告模式 0.23.0 · 指标 1.13.0 · 2026-07-21 21:30 UTC
Handbook-Enterprises / strukto-mirage-fork
A Unified Virtual Filesystem For AI Agents
Handbook-Enterprises/strukto-mirage-fork 的健康指数为 100 分中的 45 分，处于「存在风险」区间。 其得分最高的类别是AI Readiness（75/100），最低的是Community & Adoption（12/100）。 最近一次更新在 4 天前。 近期的大部分工作由 1 位贡献者完成。
45
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
45
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 | 标签 |
|---|---|---|---|---|---|---|
| PyPI | mirage-ai指向其他仓库——不计分 | 0.0.3 | 3,919 | 7 | 21 天前 | ai-agentsfilesystemvfsfuses3google-driveslackagent-toolsshellrag |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
36
开发活跃度
59中等
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 4 天前 |
| 4.8/36 | 提交节奏 — 52 周中有 7 周有提交 |
| 18/18 | 提交量 — 最近一年 192 次提交 |
| 0/10 | OpenSSF Scorecard：Maintained — project was created within the last 90 days. Please review its contents carefully |
所用输入
| commits_last_year | 192 |
| human_commit_share | 0.95 |
| days_since_last_push | 4 |
| active_weeks_last_year | 7 |
发布纪律
1危急
评分方式
| 0/27 | 有发布版本 — 未发布任何发布版本 |
| 0/36 | 发布时效 — 没有发布版本 |
| 0/27 | 发布节奏 — 没有发布版本 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 0 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
12
流行度与采用
1危急
评分方式
| 0/60 | 星标 — 0 个星标 |
| 0/25 | 复刻 — 0 个复刻 |
| 0/15 | 关注者 — 0 位关注者 |
所用输入
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
25危急
评分方式
| 0/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（Apache-2.0） |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 否 |
| has_license | 否 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
49
维护者韧性（巴士系数）
34存在风险
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 4.3/22.5 | 提交分布 — 头号贡献者编写了 81% 的提交 |
| 10.8/13.5 | 贡献者广度 — 8 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 4 contributing companies or organizations |
所用输入
| bus_factor | 1 |
| contributors_sampled | 8 |
| top_contributor_share | 0.808 |
议题与 PR 响应能力
72良好
评分方式
| 0/46.8 | 议题解决 — 没有议题或无数据 |
| 38.2/38.3 | PR 接受 — 已裁定的 PR 中 22/22 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/29 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 22 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
已排除计分（无数据或不适用）：议题解决。 其余权重已重新归一化。
所有权与托管责任
43存在风险
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 2.2/25 | 所有者影响力 — Handbook-Enterprises 有 1 位关注者 |
| 10.8/25 | 既往记录 — 8 个公开仓库，账户约 1 年 |
所用输入
| followers | 1 |
| owner_type | Organization |
| is_verified | — |
| owner_login | Handbook-Enterprises |
| public_repos | 8 |
| account_age_days | 699 |
工程质量
基础的工程与文档实践是否到位？
72
工程实践
94优秀
评分方式
| 24/24 | CI 工作流 — 7 个工作流 |
| 24/24 | 存在测试 |
| 16/16 | Linter 配置 — eslint.config.js |
| 9.6/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 15 out of 15 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 是 |
| has_precommit_config | 是 |
文档
40存在风险
评分方式
| 0/30 | README |
| 25/25 | 文档目录 |
| 15/15 | 文档 / 主页站点 — https://www.strukto.ai/mirage |
| 0/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 0/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 否 |
| homepage | https://www.strukto.ai/mirage |
| has_readme | 否 |
| has_docs_dir | 是 |
| has_description | 否 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
53
安全态势
41存在风险
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 15 out of 15 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/29 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 4 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 199 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 4.1 |
已排除计分（无数据或不适用）：packaging, signed_releases。 其余权重已重新归一化。
依赖安全公告
100优秀
评分方式
| 35/35 | 直接依赖不含已知公告 — 没有直接依赖携带已知公告 |
| 25/25 | 间接依赖不含已知公告 — 没有间接依赖携带已知公告 |
| 0/40 | 没有长期未处理的公告 — 没有公告带有发布日期 |
所用输入
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 48 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
已排除计分（无数据或不适用）：没有长期未处理的公告。 其余权重已重新归一化。 比对的是 pypi:mirage-ai@0.0.3 的运行时依赖闭包——安装已发布的软件包时真正被拉取进来的内容——共 48 个软件包。 未对可达性进行分析。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
75
AI 代理上下文与指引
85优秀
评分方式
| 45/45 | 代理指令 — AGENTS.md, CLAUDE.md |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 95 次人类提交中有 94 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.989 |
| agent_instruction_files | AGENTS.md, CLAUDE.md |
| agent_instruction_max_bytes | 5,393 |
评分方式
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 11/11 | Lint / 格式化配置 — eslint.config.js |
| 11/11 | 静态类型检查 — examples/typescript/browser/tsconfig.json, examples/typescript/tsconfig.json, typescript/packages/agents/tsconfig.json, typescript/packages/browser/tsconfig.json, typescript/packages/cli/tsconfig.json, typescript/packages/core/tsconfig.json, typescript/packages/node/tsconfig.json, typescript/packages/server/tsconfig.json |
| 10/10 | 可复现环境 — lockfile |
| 10/10 | 已体现的代理实践 — 最近 100 次提交中有 16 次由代理编写或署名代理 |
| 8/8 | 自动化维护 — 最近 100 次提交中有 5 次为自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | pnpm-lock.yaml, uv.lock |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 是 |
| typecheck_configs | examples/typescript/browser/tsconfig.json, examples/typescript/tsconfig.json, typescript/packages/agents/tsconfig.json, typescript/packages/browser/tsconfig.json, typescript/packages/cli/tsconfig.json, typescript/packages/core/tsconfig.json, typescript/packages/node/tsconfig.json, typescript/packages/server/tsconfig.json |
| agent_commit_share | 0.16 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0.05 |
面向模型的代码可读性
100优秀
评分方式
| 45/45 | 可类型检查的代码 — TypeScript（静态类型） |
| 55/55 | 可控的文件大小 — 采样的 5,548 个源文件中有 2 个超过 60KB |
所用输入
| primary_language | TypeScript |
| largest_source_bytes | 94,568 |
| source_files_sampled | 5,548 |
| oversized_source_files | 2 |
机器可读接口
40存在风险
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 0/20 | MCP 服务器 |
| 40/40 | 可运行示例 — examples |
所用输入
| example_dirs | examples |
| has_mcp_signal | 否 |
| api_schema_files | — |
关键数据
0GitHub 星标
8贡献者
192最近 12 个月提交数
4距最近推送天数
0发布版本数
1巴士系数（bus factor）
0开放议题
npm, PyPI软件包生态系统数
数据采集警告
- Community profile unavailable
- pypi package 'mirage-ai' points at a different repository (https://github.com/strukto-ai/mirage); excluded from ecosystem scoring
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
更多细节
OpenSSF Scorecard 4.1 / 10
4.1综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 15 out of 15 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/29 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 4 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 不适用 | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 10 | Security-Policy | security policy file detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 199 existing vulnerabilities detected |
直接依赖 19
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| PyPI | aiofiles | >=24.1.0 | python/pyproject.toml |
| PyPI | aiohttp | >=3.13.3 | python/pyproject.toml |
| PyPI | fastapi | >=0.135.1 | python/pyproject.toml |
| PyPI | httpx | >=0.28.1 | python/pyproject.toml |
| PyPI | python-multipart | >=0.0.20 | python/pyproject.toml |
| PyPI | numpy | >=2.4.3 | python/pyproject.toml |
| PyPI | orjson | >=3.11 | python/pyproject.toml |
| PyPI | pyyaml | >=6.0.3 | python/pyproject.toml |
| PyPI | python-dotenv | >=1.2.2 | python/pyproject.toml |
| PyPI | tree-sitter | >=0.25.2 | python/pyproject.toml |
| PyPI | tree-sitter-bash | >=0.25.1 | python/pyproject.toml |
| PyPI | typer | >=0.12.0 | python/pyproject.toml |
| PyPI | uvicorn | >=0.41.0 | python/pyproject.toml |
| PyPI | pypdfium2 | >=5.7.0 | python/pyproject.toml |
| PyPI | pillow | >=12.2.0 | python/pyproject.toml |
| PyPI | jq | >=1.11.0 | python/pyproject.toml |
| PyPI | mfusepy | >=1.0.0 | python/pyproject.toml |
| PyPI | pyjwt | >=2.10 | python/pyproject.toml |
| PyPI | dulwich | >=1.2.4 | python/pyproject.toml |
全部依赖 未采集
本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
依赖安全公告 0
安装 pypi:mirage-ai@0.0.3 会引入 48 个包（直接与传递）：其中 0 个存在已知公告，0 个为直接依赖。
没有已知公告影响已评估的依赖。
公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": true,
"size_kb": 9222,
"has_wiki": false,
"homepage": "https://www.strukto.ai/mirage",
"languages": {
"Shell": 5791,
"Python": 7945110,
"JavaScript": 11044,
"TypeScript": 10516812
},
"pushed_at": "2026-07-17T03:56:09Z",
"created_at": "2026-05-24T19:51:53Z",
"owner_type": "Organization",
"updated_at": "2026-07-17T03:55:56Z",
"description": "A Unified Virtual Filesystem For AI Agents",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript",
"Python"
]
},
"owner": {
"blog": null,
"name": "Handbook Enterprises",
"type": "Organization",
"login": "Handbook-Enterprises",
"company": null,
"location": null,
"followers": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/179018887?v=4",
"created_at": "2024-08-21T14:34:16Z",
"is_verified": null,
"public_repos": 8,
"account_age_days": 699
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": false
},
"activity": {
"releases": [],
"recent_commits": [
{
"oid": "d1bab6ef0fdb63a9640ccde8a7202affe76f3dac",
"body": null,
"is_bot": false,
"headline": "feat(core): centralize Google Sheets reads (#22)",
"author_name": "Manas Takalpati",
"author_login": "manastm",
"committed_at": "2026-07-17T03:55:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "762c3aeff3389110f48f50ca92f204ceca9077eb",
"body": "* feat(js): forward scriptPath + scriptDir to JsRunArgs (0.1.0-viewengine.23)\n\nThe JS analogue of #19: handleJs now passes the entry script's path and\ndirectory to the runtime, so a JS runtime can (a) set process.argv[1] and\n(b) resolve the entry script's own relative imports from the workspace\n(`no\n[…]\ned.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Alex B <alex@spacinsider.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(js): forward scriptPath + scriptDir to JsRunArgs (.23) (#21)",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-07-01T04:13:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "cc53a8198dd6e139eb2e9f4b599ec1773632d1c3",
"body": "* fix(node): read program from stdin on `node -` (0.1.0-viewengine.22)\n\n`echo \"console.log(1)\" | node -` errored with `node: /-: No such file`:\nthe `-` positional was taken as a script *file* to read. Bare `node` already\nreads stdin as the program, so route `-` (the conventional stdin sentinel) to\nt\n[…]\n1).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Alex B <alex@spacinsider.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(node): read program from stdin on `node -` (.22) (#20)",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-07-01T03:14:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a49366fc19b33d4d6078482528ccafbd95d9f7ff",
"body": "…nalogue) (#19)\n\nEnables a host PythonRuntime (e.g. cf-monty's import bundler) to resolve\nsibling modules from the workspace VFS. Additive + optional: PythonRunArgs\ngains scriptDir?/cwd?, populated in handlePython from the entry pathScope's\ndirectory and the shell cwd. Runtimes that don't need them ignore them.\n\nBumps @viewengine/mirage-core to 0.1.0-viewengine.21.\n\nCo-authored-by: Alex B <alex@spacinsider.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(python): forward scriptDir + cwd to PythonRunArgs (sys.path[0] a…",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-07-01T02:50:47Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "674c541eda6d2a5301a0dab6d66398e842d6734e",
"body": "* feat(workspace): pluggable JS runtime + node/js commands (additive) (#16)\n\n* feat(workspace): pluggable JS runtime + node/js commands (additive)\n\nMirrors the pluggable python runtime for JavaScript. Adds a `node`/`js`\ncommand backed by an injected `JsRuntime` via `WorkspaceOptions.jsRuntimeFactory\n[…]\ned to #16's superset (STAT/MKDIR/EXISTS/DELETE/\nRMDIR/RENAME). tsc clean.\n\n---------\n\nCo-authored-by: Alex B <alex@spacinsider.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: reconcile python + JS runtimes -> 0.1.0-viewengine.20 (#18)",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-07-01T01:49:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "66773cb48300612875e1716c9562a48ea23ce202",
"body": "Extends BridgeDispatchFn with 'MKDIR' (fs.mkdir) and 'STAT' (returns\n{size,isDir,mtime}) so a bridged python runtime can support mkdir/stat/open.\nEnforced: MKDIR is treated as a write (rejected on read-only mounts). Bumps to\n0.1.0-viewengine.19.\n\nCo-authored-by: Alex B <alex@spacinsider.com>",
"is_bot": false,
"headline": "feat(workspace): MKDIR + STAT bridge ops (additive) (#17)",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-07-01T01:38:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef4cd56c4912608f2bdacf118f690f6aaefff828",
"body": "…) (#15)\n\n* feat(workspace): pluggable python runtime + enforced bridge (additive)\n\nLets a host inject a custom python runtime instead of the built-in Pyodide,\nso `python`/`python3` can be backed by e.g. a wasm interpreter — without\ntouching default behaviour.\n\n- WorkspaceOptions.pythonRuntimeFactor\n[…]\no 0.1.0-viewengine.18 (pluggable python runtime + enforced bridge + exec)\n\n---------\n\nCo-authored-by: Alex B <alex@spacinsider.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(workspace): pluggable python runtime + enforced bridge (additive…",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-07-01T00:43:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e6ad5f897400da4a33a6527ad0aab21f2653a035",
"body": "Includes the double-quoted-newline tokenizer fix (#14): multi-line\nquoted --text values (slack-post-message / slack-reply-to-thread) now\npreserve embedded newlines.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(core): release @viewengine/mirage-core 0.1.0-viewengine.17",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-06-30T15:20:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2533b3fa8f17866a9e80dc9fbd54b4f9f9f9b215",
"body": "tree-sitter-bash stores newlines inside a double-quoted string as\n\"extras\": a literal \\n (or \\r\\n) is not captured inside any\nstring_content child but sits in the gap between two adjacent children.\nThe NT.STRING expansion handler concatenated child texts with join(''),\nsilently dropping those inter-\n[…]\n expansion, CRLF preserved, and\nbackslash-newline line continuation still collapses.\n\nCo-authored-by: Alex B <alex@spacinsider.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(shell): preserve embedded newlines in double-quoted values (#14)",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-06-30T15:20:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bf5537acfe1b314293e6bcc56af591332c8d99a3",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci(publish-core): pass --tag latest (npm 11 requires it for prereleases)",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-06-29T00:14:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a821b294e660054f9ab34949bc12d76abfec1942",
"body": "…_TOKEN\n\nThe NPM_TOKEN-based publish 404'd (token expired/unauthorized). Switch to\nnpm Trusted Publishing over the existing `id-token: write` OIDC:\n- upgrade npm to >= 11.5.1 (Node 22 ships 10.x, which lacks OIDC publish)\n- remove the NODE_AUTH_TOKEN/NPM_TOKEN env from the publish step\n\nRequires the\n[…]\ntions trusted publisher to be configured on npm for\n@viewengine/mirage-core (repo strukto-mirage-fork, workflow publish-core.yml).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci(publish-core): publish via npm Trusted Publishing (OIDC), drop NPM…",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-06-29T00:11:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8d5898d9eae1524b52e6fa373c66edcb37644c65",
"body": "Includes since 0.1.0-viewengine.15:\n- #12 bash/sh run a script FILE + source arg-order fix\n- #13 Notion ReDoS slash-regex hardening\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(core): release @viewengine/mirage-core 0.1.0-viewengine.16",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-06-29T00:00:18Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bc15661b9f1e101b0f17430c24ebe40072f4b85e",
"body": "…rs (#13)\n\nCodeQL flags the anchored-repetition slash trims (`/^\\/+|\\/+$/g`, `/\\/+$/`)\non uncontrolled path input as polynomial ReDoS. Port the upstream fix\n(strukto-ai ddf15f62 helpers + b3402f45 notion) scoped to the Notion code:\n\n- Add `utils/slash.ts` — `stripSlash` / `rstripSlash` / `lstripSlas\n[…]\n the broader monorepo slash-regex sweep\n(ddf15f62) is left for a future re-baseline.\n\nCo-authored-by: Alex B <alex@spacinsider.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(notion): replace ReDoS-prone slash trim regexes with string helpe…",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-06-28T23:55:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d1a5e168d3e14b6c0a07e7762625c9f8f65fb235",
"body": "`bash FILE` / `sh FILE` previously treated a positional argument as the\nscript *text* (effectively `bash -c \"FILE\"`), so running an actual script\nfile from a mount failed:\n\n bash /disk/test.sh -> /disk/test.sh: command not found [exit 127]\n\nA positional arg is now read from the VFS and its co\n[…]\ne`/`.` over a mount (absolute +\nrelative paths, missing-file 127) in both languages.\n\nCo-authored-by: Alex B <alex@spacinsider.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(shell): bash/sh run a script FILE; fix source arg-order bug (#12)",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-06-28T23:51:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2f38aa28446f1f0bdd44753c553b2322cba1048f",
"body": "The pre-commit check has been red on main for every recent commit:\n- Prettier: rg_helper.ts, gmail/messages.ts, google/drive.ts,\n slack/users.ts needed formatting -> prettier --write.\n- ESLint: slack/users.ts flagged 3 no-unnecessary-condition errors on\n `a.id ?? ''` / `b.id ?? ''` / `u.id ?? ''` \n[…]\n\nNo behaviour change; slack suite 170 pass. prettier --check clean\nrepo-wide.\n\nCo-authored-by: Alex B <alex@pureuniversaltruth.com>\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: clear pre-commit debt (prettier + eslint) so CI goes green (#11)",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-05-28T14:24:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a9de57590cb149c559f488b8422b5e616a6923cc",
"body": "* feat(mount): first-class per-mount include/exclude path globs\n\nAdds path-glob visibility scoping to any mount — motivated by \"scope out\nSlack DMs\" but generic across every resource. A mount may declare\n`includeGlobs` / `excludeGlobs` (mount-relative patterns); matching paths\nare hidden from listin\n[…]\n add -A`; it's unrelated to this PR.\nUntracked here, left on disk.\n\n---------\n\nCo-authored-by: Alex B <alex@pureuniversaltruth.com>\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(mount): first-class per-mount include/exclude path globs (#10)",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-05-28T14:01:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "81026017b11d212580d84ec0024cc92f6b29254c",
"body": "…ared-drive visibility\n\nTwo related changes that together make Shared Drive content reachable\nfrom the gdrive mount:\n\n1. Always pass supportsAllDrives=true + includeItemsFromAllDrives=true on\n every Drive API call (listFiles, listAllFiles, getFileMetadata,\n downloadFile, downloadFileStream). Wit\n[…]\na \"pick a Shared Drive\" UI without each repo reimplementing\nthe call. GDriveResource constructor in browser package threads\n`config.rootScope` through to GDriveAccessor.\n\nBumps to 0.1.0-viewengine.14.",
"is_bot": false,
"headline": "feat(gdrive): per-mount rootScope (my_drive/shared_drive/folder) + sh…",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T23:01:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5d24dff218048518629707ab26e9f3d964596563",
"body": "…TML body fallback\n\nTwo pieces of agent feedback against the cross-mount cross-ref workflow:\n\n1. Slack: resolving user_ids one at a time via cat /slack/users/<file>.json\n was tedious when processing a participants.txt with many ids. Add\n /slack/users.tsv at the slack mount root: TSV with header \n[…]\nnservative tag-strip + entity-decode\n pass when no text/plain part exists. Backwards compatible — emails\n that did have text/plain return the same content as before.\n\nBumps to 0.1.0-viewengine.13.",
"is_bot": false,
"headline": "feat(slack/gmail): /slack/users.tsv for bulk uid resolution + gmail H…",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T22:10:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a50f2beb7bfe8c3ddf8fcc2c2e6d40bdded64075",
"body": "…ount prompts\n\nPer-mount prompts (the strings surfaced to the LLM at MCP connect)\nhadn't caught up to the new synthetic views:\n\n- gmail: documents both the LABEL view (existing) and the THREAD view\n (added in v.6/v.8/v.9), including the better filename fallback\n (from-<sender> when Subject empty) \n[…]\n\n- slack: documents per-date participants.txt (added in v.11) and the\n cross-mount grep pattern. Also points at /slack/users/<id>.json for\n user_id → email resolution.\n\nBumps to 0.1.0-viewengine.12.",
"is_bot": false,
"headline": "docs(prompts): document /gmail/threads/ + slack participants.txt in m…",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T21:21:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2d160fa80b22bd441daa551d8042d1efac1fb657",
"body": "Each /slack/<channels|dms>/<channel>/<date>/ now also exposes a\nparticipants.txt file: unique slack user_ids that posted on that day\n(or appeared in thread reply_users), sorted, one per line. Same query\nshape as gmail/threads/<id>/participants.txt and calendar's per-event\nattendees.txt — enables cro\n[…]\nemail resolution is intentionally not done here (would require a\nusers.info call per id); agents can join via /slack/users/<id>.\n\nBumps to 0.1.0-viewengine.11. Tests updated to expect the third entry.",
"is_bot": false,
"headline": "feat(slack): add participants.txt sidecar to per-date dirs",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T21:18:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8e8b2827dc68179b355f2d8eb82a93fbf45485e6",
"body": "…dir entries\n\njoinChild() in gmail/box/dropbox/gdrive find walks assumed gmailReaddir\nreturns bare child names like \"INBOX\". The actual contract returns\nmount-prefixed absolute paths like \"/gmail/INBOX\". Re-joining the parent\nproduced doubled paths like\n\n /gmail/INBOX/2026-05-25//gmail/INBOX/2026-0\n[…]\nt\\`. Pass absolute paths\nthrough unchanged in all four backends; fall back to the join for the\nrelative-name case so any backend that does return bare names still\nworks.\n\nBumps to 0.1.0-viewengine.10.",
"is_bot": false,
"headline": "fix(find): stop doubling paths for backends that return absolute read…",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T21:11:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2c2e9f2e9acf81002eaef67069b25599c8ba69ce",
"body": "detectScope was returning useNative=true for any 2-segment path, which\nincluded /gmail/threads/<dir>/. Native rg then called Gmail's\nmessages.search with labelName=\"threads\" — there's no such label, so the\nquery returned empty and rg-on-thread-dir silently produced no matches.\nSingle-file rg (depth \n[…]\neNative=false so the rg\nflow falls through to collectFiles + gmailRead, which DOES know how to\nresolve thread message paths via the IndexEntry cache populated by\nreaddir.\n\nBumps to 0.1.0-viewengine.9.",
"is_bot": false,
"headline": "fix(gmail): force /threads/ paths through the file-walk rg path",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T20:42:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "771030aa3c9e2e2f72522cd251c865355c859dfc",
"body": "The threads view added in v.6 named per-message files <NN>-from-<sender>.eml,\nbut gmail's rg/grep/find collectFiles helper only picks up files ending in\n.gmail.json — so recursive search through /gmail/threads/<dir>/ silently\nreturned nothing. Match the existing convention. The file content is JSON\n\n[…]\nextension was the only thing that needed to change.\n\nBumps to 0.1.0-viewengine.8. parseThreadMessageFilename accepts both .eml\nand .gmail.json so cached sessions across the v.7 → v.8 jump don't break.",
"is_bot": false,
"headline": "fix(gmail): use .gmail.json (not .eml) for thread message files",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T20:22:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2c1af8636e553db5e2ebabd6562b4112c139efda",
"body": "…TEXT\n\nThe threads view added in viewengine.6 set new IndexEntry resourceTypes\n(gmail/threads_root, gmail/thread_dir, gmail/thread_message,\ngmail/thread_participants, gmail/thread_meta) but stat.ts had no cases\nfor them — they fell through to the default `FileType.JSON` branch, so\n`ls /gmail/threads\n[…]\npath as a file and returned the dir name\ninstead of listing contents. Add explicit handlers: roots/dirs are\nDIRECTORY, participants.txt is TEXT, message + meta stay JSON.\n\nBumps to 0.1.0-viewengine.7.",
"is_bot": false,
"headline": "fix(gmail): stat the synthetic /threads/ resource types as DIRECTORY/…",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T20:15:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ccc202d00e6b8051f1f399a2c2e02c07a3daafe4",
"body": "…clude noise filter (#9)\n\nThree downstream-blocking improvements landing together:\n\n1. Better gmail message filenames. The fallback for missing/empty Subject\n was `No_Subject`, producing indistinguishable filenames like\n `No_Subject__<id>.gmail.json` across the inbox. Fall through Subject →\n F\n[…]\nr one-grep cross-mount queries like:\n grep -l alice@x.com /gmail/threads/*/participants.txt\n grep -l alice@x.com /calendar/*/2026-05-19/*.attendees.txt\n\nCo-authored-by: Alex B <alex@spacinsider.com>",
"is_bot": false,
"headline": "feat(gmail): better filenames + /threads/ view, rg --exclude/-P, --ex…",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-05-25T20:06:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9b1f5caaedffc5ff619e508541c61d53d7d2c504",
"body": null,
"is_bot": false,
"headline": "chore(core): bump to 0.1.0-viewengine.5",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T17:49:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7bdcb2132f1eb74398d9e3b99a0ad2e1f8ac37a0",
"body": "…on-not-in-channel\n\nfeat(slack): auto-join public channels on not_in_channel for transparent workspace-wide read",
"is_bot": false,
"headline": "Merge pull request #8 from Handbook-Enterprises/feat/slack-auto-join-…",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-05-25T17:48:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "338e0d55ccd28c4915e19ebd9332b3857b917565",
"body": "…ent workspace-wide read\n\nSlack's conversations.history is membership-gated even for user tokens\nwith channels:history scope. Result: every public channel returns\n\"not_in_channel\" until the user manually /invites or /joins from the\nSlack UI. For 50+ channels that's painful.\n\nNew latestMessageProbeWi\n[…]\nMessageProbe\ndirectly (you can't be not_in your own DM).\n\nTests: 21/21 pass (3 new — pass-through when reason isn't not_in_channel,\npublic channel auto-join happy path, private channel join fallback).",
"is_bot": false,
"headline": "feat(slack): auto-join public channels on not_in_channel for transpar…",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T17:40:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ddc8896643031fb1c9bcf7d60fe71498bf825630",
"body": null,
"is_bot": false,
"headline": "chore(core): bump to 0.1.0-viewengine.4",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T17:18:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b5e9396685d17b615f5b41b96cbbe30f42e5d91",
"body": "…pty-and-surface-soft-errors\n\nfix(slack): don't cache empty channel dates; surface soft-error reason",
"is_bot": false,
"headline": "Merge pull request #7 from Handbook-Enterprises/fix/slack-no-cache-em…",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-05-25T17:17:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d3474073da4d03fe5f83fa0c6cf8e035c7aaf40",
"body": null,
"is_bot": false,
"headline": "chore(lint): prettier on index.ts",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T17:12:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a5a9fe2e1d48feeaf88e160df0caebf046171b6",
"body": "So callers can wrap SLACK_GREP with a cache-aware version (ve-brain\nPR forthcoming) without losing the native-search shortcut for\nlabel-scoped queries.\n\nExports: slackDetectScope, SlackScope, slackBuildQuery,\nslackFormatGrepResults, slackFormatFileGrepResults,\nslackSearchMessages, slackSearchFiles.\n\nMirrors the gmail* export pattern.",
"is_bot": false,
"headline": "export slack native-search helpers",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T17:06:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bcf8e39cf858336afbbed701a4510417b973c26b",
"body": null,
"is_bot": false,
"headline": "chore(lint): prettier",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T17:05:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fbf0ae81d30561d63997ebd21bfafe984375cfb",
"body": "When latestMessageTs returns null (channel empty / not_in_channel /\nmissing_scope / channel_not_found / is_archived / not_authed), readdir\nwas calling index.setDir with an empty entries list. That cached the\nempty state for the IndexCacheStore's TTL (typically 300-600s), so\nevery retry within that w\n[…]\n Now subsequent calls retry, and operators can\nsee \"not_in_channel\"/\"missing_scope\" in worker logs.\n\nTests: 18/18 pass (2 new — empty results don't cache; soft-error\nreason surfaces via console.warn).",
"is_bot": false,
"headline": "fix(slack): don't cache empty channel dates; surface soft-error reason",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T17:05:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3cbc717ec43aa5d0ced48e18e2c7e1e002417b13",
"body": null,
"is_bot": false,
"headline": "chore(core): bump to 0.1.0-viewengine.3",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T16:57:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77dd2480d3c46daecc101f6f87083a85242b663c",
"body": "…n-no-cwd-mount\n\nfix(executor): fall back to mountForCommand spec when cwd has no mount",
"is_bot": false,
"headline": "Merge pull request #6 from Handbook-Enterprises/fix/spec-fallback-whe…",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-05-25T16:56:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3cc0d03a5281db61cc04ff50a40de906b25467cb",
"body": null,
"is_bot": false,
"headline": "chore(lint): prettier on bare_mount_path.test.ts",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T16:48:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4391788deb72014e88cf84d9e44ecdf1c0c213eb",
"body": "When cwd doesn't map to any registered mount (cwd='/' with no root mount,\ncommon when callers expose each connector under its own top-level prefix),\ncwdMount.specFor(name) was the only path to spec lookup. With cwdMount\nnull, spec was null, classifyArgvBySpec never ran, and bare positional\nargs like\n[…]\nm and asserts `ls s3` (bare) === `ls /s3` (absolute) and `cat s3/data.txt`\n=== `cat /s3/data.txt` when cwd='/'. Test fails without the fix; passes\nwith it. Existing execute_node tests (16) still pass.",
"is_bot": false,
"headline": "fix(executor): fall back to mountForCommand spec when cwd has no mount",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T16:39:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "64ecef415c935d99004a9fd5e4ebb4a802300a2f",
"body": "Includes notion search pagination cap (PR #4) and grep file-content\ncaching via onRead callback for gmail + notion (PR #5).",
"is_bot": false,
"headline": "chore(core): bump to 0.1.0-viewengine.2",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-25T03:27:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67441c4afb4c3cc01d9c4406ee9c1e4d3040fde7",
"body": "…bytes\n\nperf(grep): cache file bytes via IOResult so repeat reads dedupe",
"is_bot": false,
"headline": "Merge pull request #5 from Handbook-Enterprises/perf/grep-cache-read-…",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-05-25T03:27:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2783650024ecf441de62c8a51d33e145abd5f3a4",
"body": "…tion-real\n\nfix(notion): cap searchTopLevelPages pagination to avoid 30s+ timeouts",
"is_bot": false,
"headline": "Merge pull request #4 from Handbook-Enterprises/fix/notion-cap-pagina…",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-05-24T22:08:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dda6326004a8dd0e7ffa7d9b3cee107aa7434ae6",
"body": "Symptom: \\`grep -r 'pattern' /brain/\\` (a notion mount with ~50 pages) took\n25 seconds on first run. Cause: grep recursive walk reads each file via\nthe backend's read.ts (which hits the Notion / Gmail API) and never\npopulates the workspace FileCache, so subsequent grep / cat / wc calls\nre-fetch ever\n[…]\nansport /\nFakeGmailTransport to count API call dedup, which is bigger than the\nfix. Manual verification on staging instead: rerun grep -r twice in\nthe same workspace; second run should be much faster.",
"is_bot": false,
"headline": "perf(grep): cache file bytes via IOResult so repeat reads dedupe",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-24T21:48:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "954dde853b56b8e2cfe7b5ae66279b681b4b6298",
"body": "Symptom: \\`ls /notion/\\` on workspaces with thousands of pages hits the\nMCP request 30s timeout. Cause: searchTopLevelPages paginates ALL pages\nin the workspace via Notion's search API (which returns child pages too),\nthen filters down to \\`parent.type === 'workspace'\\`. For a 5000-page\nworkspace th\n[…]\numented in the comment. The real fix is per-path use of the\nright Notion endpoint (blocks/children for sub-page ls, databases/query\nfor DB pages, search ONLY for root-workspace listing) — separate PR.",
"is_bot": false,
"headline": "fix(notion): cap searchTopLevelPages pagination to avoid 30s+ timeouts",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-24T21:29:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "91304f9a25ac0b06aa6f4bef0c00392a7ff9f5ca",
"body": "Includes the per-backend find fix for bare-name backends (gmail, gdrive,\nbox, dropbox).",
"is_bot": false,
"headline": "chore(release): bump @viewengine/mirage-core to 0.1.0-viewengine.1",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-24T21:28:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb682e2b6b67d6d268b94234aff046e1de7555b9",
"body": "fix(find): emit full paths for bare-name backends (gmail, gdrive, box, dropbox)",
"is_bot": false,
"headline": "Merge pull request #3 from Handbook-Enterprises/fix/find-stat-and-grep",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-05-24T21:27:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "321fe66e6137cc5ecd7ce124d463954474c50013",
"body": null,
"is_bot": false,
"headline": "chore(prettier): formatting tweaks (CI Prettier fix)",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-24T21:19:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17d09064a566b48b6f274ab5c30bf862ccac13df",
"body": "…, dropbox)\n\nThese four backends' readdir returns bare child names (e.g. 'INBOX',\n'2026-05-24'); the find walk was pushing those directly as results, so\noutput entries weren't pipeable into ls/cat and the recursive walk\nsilently failed because PathSpec({original: '2026-05-24'}) doesn't\nresolve in th\n[…]\n\nemit full paths (verified: slack, discord); leaving them alone.\n\nNo new tests yet — would need to write gmail/_test_util.ts from scratch\nto seed readdir fixtures. Will verify on staging post-publish.",
"is_bot": false,
"headline": "fix(find): emit full paths for bare-name backends (gmail, gdrive, box…",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-24T21:09:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8139662335223b4f8c2925ef2c099049abb1411c",
"body": "…-files\n\nfix(ls): stat-first to make echo the file (coreutils-compat)",
"is_bot": false,
"headline": "Merge pull request #2 from Handbook-Enterprises/fix/ls-stat-first-for…",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-05-24T20:54:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d194c9f0605efe414e972822de14ab300b074e23",
"body": "Two new cases on slack/ls.test.ts cover the new stat-first behavior:\n- ls on a chat.jsonl leaf (chat log file under a date dir)\n- ls on a user JSON leaf (single user under /users/)\n\nBoth previously failed with \"not a directory\" / ENOENT. With the\nstat-first fix, ls now echoes the path matching coreu\n[…]\ne `if (listDir) { ... } let entries =\nawait Readdir(...)` flow.\n\nFollow-up: add per-backend regression tests for gmail, gdrive, notion,\ncalendar, etc. once their _test_util grows leaf-seeding helpers.",
"is_bot": false,
"headline": "test(slack): regression tests for ls FILE echoing leaf paths",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-24T20:46:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1a56cd76ab2cda0a408b563e512845dc0d8fdf16",
"body": "23 backend ls implementations all called <backend>Readdir unconditionally\nwhen -d wasn't passed. For a path that resolves to a non-directory file,\nthat throws and the user sees \"ls: cannot access '<path>': not a directory\"\nor \"ls: ENOENT\". Real coreutils ls echoes the file's metadata in this\ncase.\n\n\n[…]\non, postgres, posthog,\ns3, slack, sscholar, sscholar_author, trello, vercel, email.\n\nNot patched (different file structure, already handle file case or have\ntheir own dispatch): ram, redis, ssh, disk.",
"is_bot": false,
"headline": "fix(ls): stat-first to make `ls FILE` echo the file (coreutils-compat)",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-24T20:46:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "67fba588c312b8bbb3d8a86439636c566e80f969",
"body": "chore(publish): rename to @viewengine/mirage-core + publish workflow",
"is_bot": false,
"headline": "Merge pull request #1 from Handbook-Enterprises/viewengine/publish-setup",
"author_name": "Alex B",
"author_login": "alexbruf",
"committed_at": "2026-05-24T20:46:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cef0304e812c23867b26ad824cbf7a0297058c50",
"body": "My joinFindPath patch assumed all backends' readdir returns bare child\nnames. discord/slack tests showed that's wrong: their readdir already\nreturns full paths (e.g. readdirRoot returns [\\`\\${prefix}/channels\\`, ...]).\nJoining the parent path twice produced double-prefixed garbage,\nbreaking discord/find.test.ts and slack/find.test.ts.\n\nFind fix needs per-backend handling — keeping PR scope to publish infra\nonly so we can ship that and tackle find separately.",
"is_bot": false,
"headline": "revert(find): restore find.ts to upstream — patch broke existing tests",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-24T20:37:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c258ba231973b6dc6b80ab46138c2e664c20a2dd",
"body": null,
"is_bot": false,
"headline": "chore(yamllint): quote on: to dodge YAML 1.1 truthy ambiguity",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-24T20:29:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a7e5c16ec9d3057fce503e7a1e77abf6617e236",
"body": "…files\n\nCI on PR #1 (round 2) caught that .ts/.tsx/.js files across packages\n(node, agents, server, browser, cli) all import \"@struktoai/mirage-core\"\ndirectly. Bulk sed across all source files — same scope of rename,\njust bigger find target than the original package.json sweep covered.\n\nAfter: 0 remaining @struktoai/mirage-core references in source,\n709 @viewengine/mirage-core references.",
"is_bot": false,
"headline": "chore(publish): rename @struktoai/mirage-core imports across 709 src …",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-24T20:20:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d35098359c5e440985bae0f6aa54c0e68a252008",
"body": "…ockfile\n\nCI on PR #1 caught:\n- typescript/package.json root devDependency on @struktoai/mirage-core\n- examples/typescript/package.json on the same\n- pnpm-lock.yaml needed regen after the rename\n\nResult: all internal workspace references now resolve to @viewengine/mirage-core,\nfrozen-lockfile install succeeds.",
"is_bot": false,
"headline": "chore(publish): catch two more @struktoai/mirage-core refs + update l…",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-24T20:18:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "214165b059710b0cad793fe8ad7d9c1509490fb1",
"body": "…workflow\n\n- typescript/packages/core/package.json: renamed @struktoai → @viewengine,\n version 0.1.0-viewengine.0, repo URL points at the fork.\n- Sibling packages (agents, browser, node, server) update their workspace\n dep reference from @struktoai/mirage-core to @viewengine/mirage-core.\n CLI is \n[…]\nwhy the fork exists and how it relates to\n upstream + how to pull upstream changes back.\n\nNo source-code changes yet — those land in follow-up PRs (ls FILE,\nfind full paths, calendar shape redesign).",
"is_bot": false,
"headline": "chore(publish): rename core to @viewengine/mirage-core + add publish …",
"author_name": "Alex B",
"author_login": null,
"committed_at": "2026-05-24T20:00:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7adc1c4ff852c5d88b12ad60e791984bb55f2fb0",
"body": "* build: add dulwich as optional version extra\n\n* feat(version): scaffold module\n\n* feat(version): VersionStore.open inits bare repo\n\n* feat(version): blob write/read with content dedup\n\n* feat(version): nested tree write/read\n\n* feat(version): commit, head, read_commit + HEAD ref\n\n* feat(version): \n[…]\ns passed). Isolating the package didn't help (still\none continuously-blocked worker). Switch spawnSync -> async spawn so the loop\nstays responsive between calls; revert the now-unneeded CI step split.",
"is_bot": false,
"headline": "feat(version): workspace versioning over the server API + CLI (#90)",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-24T11:35:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0953f6e8d667bf877d272c7c9a651382d186c5ea",
"body": null,
"is_bot": false,
"headline": "feat(py/databricks): add read-only volume resource (#66)",
"author_name": "Sonny",
"author_login": "sonhmai",
"committed_at": "2026-05-24T07:27:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ac9cecca9072670bcbbf9527aa5064c6b06fd3a",
"body": "…gle workspaces) (#70)\n\n* refactor(commands): consolidate s3/gdrive/gdocs/gsheets/gslides/gmail wrappers\n\nApply the same thin-wrapper + generic-dispatch pattern that landed for\nram/disk/redis in #68. Each cloud backend wrapper now does just three\nthings: glob-resolve paths, inject backend-specific c\n[…]\ninteg harness.\n\n* chore(commands): remove stray no-op expression statements\n\nDrop leftover bare statements: 'index' in email/rg.py and 'accessor.store'\nin ram/redis stat provision. No behavior change.",
"is_bot": false,
"headline": "refactor(commands): consolidate cloud backend wrappers (s3/gdrive/goo…",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-24T05:08:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3b966d20aaac5981e2cb157dd8d1e39ef602d3d4",
"body": "* add resource secret redaction\n\n* dedupe gmail config",
"is_bot": false,
"headline": "add resource secret redaction (#85)",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-22T22:27:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38a9689afae7c4bdd99a734cdf9670ca9ed0a3b6",
"body": "… (#77)\n\n* refactor(commands): delegate backend builtins to shared generic layer\n\nRoute per-backend basename, dirname, cut, sort and friends through the\ngeneric/*.py implementations with injected I/O callables, add exclude and\nverbose handling to generic tar, and fix core read/readdir/stat mount-pre\n[…]\nteg): regenerate truth.txt for corrected cut/ls -R/grep -l/find output\n\n* refactor: move gnu_basename/gnu_dirname to utils/path\n\n* test(utils): add unit tests for gnu_basename/gnu_dirname/resolve_path",
"is_bot": false,
"headline": "refactor(commands): delegate backend builtins to shared generic layer…",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-22T05:53:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5009244eb169a690a3bfff23336b12a6b93e29f0",
"body": "…SIST_DIR (#81)\n\n* feat(snapshot): path-based workspace snapshot/load; remove MIRAGE_PERSIST_DIR\n\n* fix(integ): pass reload resource for needs_override redis backend in snapshot/load check",
"is_bot": false,
"headline": "feat(snapshot): path-based workspace snapshot/load; remove MIRAGE_PER…",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-22T05:44:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e316c1b639855ea9a91b945512a63245e2455d0c",
"body": "…gn with TS) (#78)\n\n* refactor(server): move daemon entrypoint into the server package\n\nMirror the TS layout: the daemon process is now a server-package module (mirage/server/daemon.py, like server/bin/daemon.ts) that reads the daemon env vars and builds the app, replacing cli/server_factory.py.\n\nBe\n[…]\ncli/src/env.ts.\n\nSpawners updated to 'uvicorn mirage.server.daemon:app': cli client, cli test conftest, CLI CI workflow, and the auth docs.\n\n* docs(cli): add Python CLI README (basic usage + env vars)",
"is_bot": false,
"headline": "refactor(server): move daemon entrypoint into the server package (ali…",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-22T00:35:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "092fb20a8e03f6c8f7686ed2c2b6c187e46f459c",
"body": "stripPort/strip_port now strip the port (and IPv6 brackets) only when the Host header matches host, host:digits, [host], or [host]:digits; any other value is returned unchanged so the allowlist comparison fails closed.\n\nTypeScript (#75): [::1]evil, [::1]:8765x, and [::1].attacker.tld normalized to :\n[…]\nn and also rejects non-digit ports.\n\nConstants split into host_validation_constants (DEFAULT_ALLOWED_HOSTS, HOST_PATTERN) and env (ENV_ALLOWED_HOSTS) modules so both implementations match.\n\nCloses #75",
"is_bot": false,
"headline": "fix(server): reject malformed Host headers in allowlist check (#76)",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-21T23:46:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "91be6f6c5305848ef692959f78377b5fede9fc0b",
"body": "* refactor ts index cache\n\n* refactor(py): rename _index_ttl to index_ttl to align with ts indexTtl\n\n* ci(ts): add redis service so redis index/file cache tests run, aligning with python\n\n* ci: move redis examples into per-language test workflows with integ/ truth files\n\nReuse the integ/ + truth-fil\n[…]\nw live under examples/typescript/pyodide/ as basic/env/heredoc/script/ram/vfs.ts\ninstead of examples/typescript/python/pyodide_*.ts. Updates test_typescript.yml\nand docs/typescript/python-fs.mdx refs.",
"is_bot": false,
"headline": "refactor ts index cache (#73)",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-21T11:16:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c5aa6de5ac3bdf1da08db68ed667f8ecd109f257",
"body": "Co-authored-by: Deepak kudi <deepakkudi23@adsl-172-10-9-116.dsl.sndg02.sbcglobal.net>",
"is_bot": false,
"headline": "fix: report read-only resource commands (#72)",
"author_name": "Puneet Dixit",
"author_login": "puneetdixit200",
"committed_at": "2026-05-21T04:04:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1747921fafdc9795bd2f25b09663de0a694bee0",
"body": null,
"is_bot": false,
"headline": "feat(spec): export command specs to JSON for python and typescript (#71)",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-20T01:00:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "038bb8f63357adf041ec4b7e3d21af6d3fc19850",
"body": "…) (#69)\n\nDemonstrates running a Mirage Workspace inside a Daytona remote sandbox,\nso heavy work (long Python scripts, etc.) can be offloaded from the\nlocal agent's environment while still operating against the same\nS3-backed paths.\n\nFour examples, two modes per language:\n * VFS - Mirage's Python-\n[…]\nthere is one source of truth for the\nin-sandbox behavior.\n\nShared bits live in remote_env.py / remote_env.ts: the git install spec\nfor mirage-ai, AWS env-var passthrough, and base/fuse Image builders.",
"is_bot": false,
"headline": "feat(examples): add Daytona sandbox examples (Python + TS, VFS + FUSE…",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-19T23:56:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "deafb05bba51e0c036066753f0bacfac77d373a5",
"body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/v4...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n dependency-version: '\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump actions/setup-node from 4 to 6 (#67)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-19T21:20:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "870016c5b45235bf9aa790c4ddf02825a61363fa",
"body": "* feat(utils): add stream/bytes conversion helpers\n\n* feat(commands): add generic cat as async iterator\n\n* refactor(commands): ram cat wrapper uses generic\n\n* test(commands): expand generic cat coverage; fix $ on trailing partial line\n\nOld _number_lines_stream had loose tests that missed three POSIX\n[…]\nxed-line-ending, and trailing-whitespace hooks.\n\nAlso fix tests/core/redis/test_find.py {maxdepth, mindepth} that\nasserted the previously-buggy depth math (matches the existing\nram/disk test updates).",
"is_bot": false,
"headline": "refactor(commands): generic dedup + cross-backend integ harness (#68)",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-19T21:03:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9b43e45bf2169f68b1928bab5c74ffd08f77dbc9",
"body": "* feat(s3): add key_prefix for multi-tenant resource scoping\n\nAdds an opt-in `key_prefix` (Python) / `keyPrefix` (TypeScript) config\nfield to `S3Resource`. When set, all operations (read, write, list,\nglob, stat, copy, rename, delete, etc.) transparently scope to that\nbucket subpath. Agent-facing pa\n[…]\nKey/s3Prefix/stripKeyPrefix\nbecome one-line delegations that hide the config-attribute extraction\nfrom callers. No behavior change.\n\n---------\n\nCo-authored-by: Zecheng Zhang <zechengzhang97@gmail.com>",
"is_bot": false,
"headline": "feat(s3): add key_prefix for multi-tenant resource scoping (#60)",
"author_name": "Goktug Gumus",
"author_login": "Goktug",
"committed_at": "2026-05-18T02:33:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7e51a2cfcf5e5dcb9cb8ec7bbb7f7c9848df0eb5",
"body": "Mirror the path filter pattern already used by test_python.yml and\ntest_typescript.yml so docs-only and unrelated PRs don't burn runner\nminutes on test_cli.yml and infra-example.yml. Each workflow now\ntriggers only when its own YAML changes, or when the code paths it\nexercises change:\n\n- test_cli.yml: python/**, typescript/**, the workflow itself.\n- infra-example.yml: examples/**, python/**, typescript/**, itself.",
"is_bot": false,
"headline": "ci: skip CLI and Examples workflows on no-code changes (#65)",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-17T23:07:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02bb3f1515cb5ef1ee07e2ea7102d078a170ad88",
"body": "Covers the three MIRAGE_AUTH_MODE values (local, token, jwt), the env\nreference, and curl probes against the daemon at 127.0.0.1:8765. Wired\ninto the Learn group in docs.json.",
"is_bot": false,
"headline": "docs(home/learn): add Daemon Auth page (#64)",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-17T23:03:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3774df3ac4382b5521523b21aa13dd528bfb3b6",
"body": "* feat(server): three-mode bearer/JWT auth (local | token | jwt)\n\nAdds server-side authentication enforcement on the Mirage daemon\n(Python + TypeScript). The CLI already sent `Authorization: Bearer\n<token>`; until now the server ignored it. Resolves the explicit\n\"out of scope\" follow-up flagged in P\n[…]\ne.py,\nand test_storage.py. Rewording/short variable rename brought them\nwithin the limit, then yapf and prettier reformatted the rest of the\nauth surface to match canonical style. No semantic changes.",
"is_bot": false,
"headline": "feat(server): three-mode bearer/JWT auth (local | token | jwt) (#63)",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-17T22:42:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4f863002712a4e4046cbdc9b7f8755b4adc03ccc",
"body": null,
"is_bot": false,
"headline": "Update",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-17T11:05:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37f6cf6ef2b48d4bbd1ee54afecd15b2c99368bc",
"body": "… rebinding (#58)\n\n* fix(server): validate Host header on the daemon to defend against DNS rebinding\n\nThe Mirage daemon binds to 127.0.0.1:8765 by default and ships with no\nHost-header validation, no CORS allowlist, and no server-side\nauthentication. A page the user visits can use DNS rebinding to m\n[…]\nough of\nexamples/python/cross/README.md against both Python and TS daemons.\n\n---------\n\nCo-authored-by: aeonframework <aeon-bot@aeon.framework>\nCo-authored-by: Zecheng Zhang <zechengzhang97@gmail.com>",
"is_bot": false,
"headline": "fix(server): validate Host header on the daemon to defend against DNS…",
"author_name": "@aaronjmars",
"author_login": "aaronjmars",
"committed_at": "2026-05-17T10:40:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e7397a1b1eb212634d7e4d57c974aeafa0ef9d9c",
"body": "…elision (#57)\n\n* test(mongodb): seed mirage_test with BSON-rich fixtures\n\nAdds scripts/seed_mongodb_test.py creating a deterministic mirage_test DB:\n- bson_types: every BSON type (ObjectId, Date, Decimal128, Binary, Regex,\n Timestamp, Int64, nested docs, mixed-type arrays)\n- heterogeneous: 500 doc\n[…]\nsts cache key to keep under 80 cols (flake8 E501)\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(mongodb): streaming reads, schema.json, nested layout, tail -f, …",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-17T10:18:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2dce26b2dd93505c0164ce444bcf6f4e43d3810e",
"body": "…ams) (#55)\n\n* refactor(py/discord): layered core (paginate, entry, formatters, streams)\n\nBrings Discord to parity with Slack's PR #46 refactor. Pure refactor with\nno VFS layout changes - same paths, same outputs, just cleaner internals.\n\nNew modules:\n - core/discord/paginate.py: after_id_pages (sn\n[…]\n_Server__G1')\n\nRename to \"My Server__G1\" with a space, matching the new\npath_safe_name behavior. Full pnpm -r test now passes (mirage-core\n2644, mirage-node 1269, browser/agents/server/cli all green).",
"is_bot": false,
"headline": "refactor(py/discord): layered core (paginate, entry, formatters, stre…",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-17T06:07:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "51902efb3a46261df7a7ee61d0b5a80f030f857b",
"body": "…EN hint (#50)\n\nWhen the native search push-down (search.messages / search.files) fails -\ntypically because the configured token is a bot token (xoxb-) without\nsearch:read scope - slack grep / rg now emit a stderr hint and fall back\nto per-file scanning. Mirrors the Python warn-and-fallback pattern.\n[…]\ns target (was previously messages-only).\n- search_pushdown_fallback.test.ts: 2 regression tests guarding the\n stderr hint for both grep and rg.\n\n2635 core tests pass (+2 new). Lint + typecheck clean.",
"is_bot": false,
"headline": "feat(ts/slack/grep|rg): search push-down fallback with SLACK_USER_TOK…",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-16T01:12:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3bb934c141e4904909dd291c98a6943fa9be3e01",
"body": "The fs_monkey TS test asserts exact basenames\n(fs_monkey.test.ts:76):\n\n expect((await fs.promises.readdir('/data')).sort()).toEqual(['a.txt', 'b.txt'])\n\nThe Python equivalent only asserted len(entries) == 2, which is why\nthe basename-vs-full-path regression slept since v0.0.1-alpha.1 — the\ntest p\n[…]\names or full paths. PR #52\nfixed the implementation but kept the loose count assertion.\n\nTighten both test_listdir and test_sys_modules_listdir to assert the\nexact basenames, matching the TS contract.",
"is_bot": false,
"headline": "test(py): assert listdir basenames (mirror TS contract) (#54)",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-16T01:08:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f5ab3b8609156b581b62eec5d307eb1e6e1b5b05",
"body": "…mmand (#53)\n\npython3 was hard-branched in execute_node (py & ts), bypassing the\nregular command dispatch. Move it to a registered general command\nin commands/builtin/general/python.{py,ts} so users can shadow it\nthe same way they would curl or grep (e.g. route to E2B / Modal /\nDocker / a custom run\n[…]\nhub/workflows/infra-example.yml\n runs 1 py + 5 ts examples and greps for the exact lines that would\n have failed during the regression (['alpha', 'beta'] is grepped in\n three independent examples).",
"is_bot": false,
"headline": "refactor(py+ts): python3 from shell builtin to overridable general co…",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-15T20:07:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c1feb2f086004d3d5c9d840cb780864a3109d6cd",
"body": "os_patch.listdir was passing through ops.readdir output verbatim, which\nis full paths by the Python convention (e.g. /slack/channels/general__...).\nThat violates the stdlib os.listdir(path) contract (returns basenames)\nand silently broke any normal caller doing os.path.join(dir, name).\n\nStrip to bas\n[…]\nfuse/fs.py:161). Internal\nOps/FUSE consumers remain unaffected.\n\nAlso fix slack_vfs.py example which assumed basenames (so the dates\nlisting came back empty and session observer paths were corrupted).",
"is_bot": false,
"headline": "fix(py): os.listdir patch returns basenames (stdlib parity) (#52)",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-15T20:02:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7eda06bb0548e7e3ee9b61de41c8c6e9712109df",
"body": "…t, soft errors) (#49)\n\n* refactor(ts/slack): align with Python (layered core, nested VFS layout, soft errors)\n\nBrings the TypeScript Slack provider to parity with Python's PR #46 (layered\ncore) and PR #48 (bug fixes + regression tests).\n\nLayered core (mirrors Python):\n - paginate.ts: cursorPages +\n[…]\n> 0.\n Documents multi-level glob (path/*/file) as a known limitation.\n - slack_vfs.ts / slack_fuse.ts: read /<date>/chat.jsonl instead of\n /<date>.jsonl.\n\n* style(ts/slack): prettier formatting",
"is_bot": false,
"headline": "refactor(ts/slack): align with Python (layered core, nested VFS layou…",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-15T18:02:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "80ad3bba9c76de30d648a7e8be7b38dba1466ffc",
"body": "…nel (#48)\n\nTwo bugs surfaced when running the slack example end-to-end:\n\n1. `ls` (no args) after `cd /slack/...` returned empty. The fallback\n in `slack/ls.py` rebuilt a `PathSpec` from `cwd.original` without\n preserving `cwd.prefix`, so readdir treated the mount-prefix segment\n as a containe\n[…]\nern` and everything else in `directory`, so any intermediate `*`\nends up inside the directory and readdir can't expand it. The example\ndocuments this and is set up to detect if it ever starts working.",
"is_bot": false,
"headline": "fix(slack): preserve mount prefix on ls no-args; tolerate not_in_chan…",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-15T06:45:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "abfe6ef6478bb2b5819b6032eee1a846b3e2cddd",
"body": "* feat(slack): cursor_pages + offset_pages generic paginator helpers\n\n* fix(slack/paginate): tighten cancellation test; simplify cursor expr\n\n* refactor(slack): channels.py uses paginate.cursor_pages; adds stream variants\n\n* refactor(slack): users.py uses paginate.cursor_pages; adds stream variant\n\n\n[…]\ns.\n\nThe vestigial _fetch_messages_for_day wrapper is removed; test patches\nupdated to target the real fetch_messages_for_day directly.\n\n* style(slack): apply yapf reformatting and tighten line lengths",
"is_bot": false,
"headline": "refactor(slack): layered core (paginate → fetchers → formatters) (#46)",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-15T06:11:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "14df7e7c7a4ba3f0dbeee17fd48ce4cbf18771dd",
"body": "…3) (#47)\n\ngrep -rEn pattern / (or .) returned exitCode=1 even when matches were\npresent in stdout, because the fan-out traversal merges per-mount IOs,\nthe merged result's _stream_source pointed at the last sub-IO (typically\na non-matching descendant mount like /.sessions or /dev with exit 1),\nand a\n[…]\nsetter pair\n\nAdds regression coverage:\n - 2 unit tests per side (explicit overwrite + chain-of-merges)\n - 7 end-to-end tests per side (issue case, negative case,\n if/then/fi, &&, || on grep -r /)",
"is_bot": false,
"headline": "fix(io): explicit exit_code wins over stream_source mirror (closes #4…",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-15T06:03:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7e9d136547852d348c10b581fab90ba079f6143e",
"body": "* fix(slack): add --page/--count pagination and surface missing scopes (#31)\n\nslack-search returned the first 20 matches with no way to reach pages\n21..N even though Slack's response advertised them. Add --count (1..100)\nand --page (>=1) flags in both Python and TypeScript so callers can\nwalk pagina\n[…]\ncount/--page flags\n\nEmpty help table was called out in the original issue. With descriptions,\n`slack-search --help` now shows what each flag does instead of leaving\ncallers to guess from the API docs.",
"is_bot": false,
"headline": "fix(slack): paginate slack-search and surface missing scopes (#31) (#45)",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-14T20:41:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e469824badfedef1673e889d5b05ca29302501b2",
"body": "… (#42)\n\n* feat(ts): snapshot+replay drift detection and revision pinning for S3\n\nPorts the Python design to TypeScript. Matches the architectural shape\nestablished in #41 — pin state lives on Mount, drift state is a\nqueued list of (mount, path, expected_fingerprint) tuples, fingerprint\nand revision\n[…]\n load serves original bytes after\n upstream mutates.\n\nTests: +56 targeted tests; 2,569 total core tests pass.\n\n* fix(ts): satisfy eslint — optional chain, drop non-null assertion, prune unused import",
"is_bot": false,
"headline": "feat(ts): snapshot+replay drift detection and revision pinning for S3…",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-14T06:36:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c39b14e24243076a7f917300674a50ac21134753",
"body": "…s (#41)\n\nTwo related changes against the snapshot+replay design landed in #32:\n\n1) Record fingerprint and revision at read time (race fix). The\n previous capture path did a live stat per recorded read at snapshot\n time, which races with concurrent upstream writes: if the object\n moved between\n[…]\nests pass against mirage-ai-test\n (versioning ON), including the race regression test\n test_live_pin_records_agent_version_not_snapshot_time_version.\n* pre-commit --all-files: all Python hooks pass.",
"is_bot": false,
"headline": "refactor(snapshot): record fp/rev on OpRecord; pin via Mount.revision…",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-14T04:45:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "782ac50dbe23b27a90f1e71d3191cbe96bf76a14",
"body": "* feat(py): snapshot drift detection + version pinning (closes #15)\n\nCaptures per-touched-path fingerprints (ETag, plus VersionId when the\nbackend supports versioning) at snapshot time. On load, paths with a\nVersionId pin reads to the exact recorded version; paths without one\neager-check live finger\n[…]\nn as 📝 TODO; that was wrong.\n\n* docs(snapshot): drop live-only section from support matrix\n\n* docs(snapshot): drop manifest-format-break caveat\n\n* docs(snapshot): plain-english first-op latency caveat",
"is_bot": false,
"headline": "feat(py): snapshot drift detection + version pinning (closes #15) (#32)",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-14T01:41:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9807ee8b831edc45580ef4916ad87f006e140a6e",
"body": "…ters\n\nSplits the combined Test workflow into two so each runtime runs only\nwhen its own code changes. Path filters: python/** for the python\nworkflow, typescript/** for the typescript workflow (plus each\nworkflow file itself, so changes to the CI config still trigger).\n\nThe import-isolation matrix job is python-only and moves with the\npython workflow.\n\nNo content changes to any step; same steps, same images, same actions.",
"is_bot": false,
"headline": "ci: split test.yml into python and typescript workflows with path fil…",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-13T03:43:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78fe39c68f60c39e9340dec588ab394411e399ea",
"body": "* fix(cli): propagate inner exit code on execute and job wait/get (#29)\n\nBoth the Python and TypeScript CLIs were exiting 0 regardless of the\nwrapped command's exit code, breaking shell composition (set -e, &&, ||,\n$?). The daemon already returned the correct exit code in the JSON\npayload; only the \n[…]\node-gyp before pnpm install in CLI smoke workflow\n\n@zkochan/fuse-native has an install script that invokes node-gyp,\nwhich isn't on the default ubuntu-latest image. Mirrors the existing\ntest.yml step.",
"is_bot": false,
"headline": "fix(cli): propagate inner exit code on execute and job wait/get (#39)",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-13T03:41:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "181d08c7de8b97141ffe4ff3ad441823ac1998be",
"body": null,
"is_bot": false,
"headline": "chore: symlink agents instructions",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-12T13:55:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c28241d054b6a4661d2f799ba0c6ddd914ab0ba",
"body": null,
"is_bot": false,
"headline": "docs: add citation metadata (#38)",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-12T13:27:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea01c5bafb3c3907808b2bd53614293abc403583",
"body": "…#12)\n\n* fix(ls): add trailing newline to output for POSIX compliance\n\n- Fix ls command output to include trailing newline\n- Ensures wc -l correctly counts all lines\n- Applies to both S3 and RAM resources\n- Follows Unix text file standard (POSIX)\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <norepl\n[…]\n routing and ls -l -1 override behavior in both\nPython and TS.\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nCo-authored-by: Zecheng Zhang <zechengzhang97@gmail.com>",
"is_bot": false,
"headline": "feat(ls): improve ls command with -1 parameter and POSIX compliance (…",
"author_name": "jialin li",
"author_login": null,
"committed_at": "2026-05-12T13:17:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "582770544110cd16f4991d9530d2b0f4b60771ba",
"body": "* chore(deps): bump pnpm/action-setup from 4 to 6\n\nBumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 4 to 6.\n- [Release notes](https://github.com/pnpm/action-setup/releases)\n- [Commits](https://github.com/pnpm/action-setup/compare/v4...v6)\n\n---\nupdated-dependencies:\n- dependency-n\n[…]\n------\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Zecheng Zhang <zechengzhang97@gmail.com>",
"is_bot": true,
"headline": "chore(deps): bump pnpm/action-setup from 4 to 6 (#37)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-12T12:07:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f55945511e5bdce58e4a06cc53f767100ac8c7d3",
"body": null,
"is_bot": true,
"headline": "chore(deps): bump actions/setup-python from 5 to 6 (#36)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-12T11:35:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5b50a5c6bfa65f1d8bd41fc79bad57e07767cb8",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v4...v6)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '6'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore(deps): bump actions/checkout from 4 to 6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-12T11:35:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ec5a371c8554353a834f0cb71212821d7588e079",
"body": null,
"is_bot": true,
"headline": "chore(deps): bump astral-sh/setup-uv from 4 to 7 (#34)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-12T11:34:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "613f4f38fe72c6b977ebb4ffd1e5cb63aa6a2746",
"body": "…ents\n\nci: dependabot and bump gh actions",
"is_bot": false,
"headline": "Merge pull request #26 from milosveljkovic/git-workflows-nit-improvem…",
"author_name": "Zecheng Zhang",
"author_login": "zechengz",
"committed_at": "2026-05-12T05:34:55Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 0,
"commits_last_year": 192,
"latest_release_at": null,
"latest_release_tag": null,
"releases_from_tags": false,
"days_since_last_push": 4,
"active_weeks_last_year": 7,
"days_since_latest_release": null,
"mean_days_between_releases": null
},
"community": {
"has_readme": false,
"has_license": false,
"has_description": false,
"has_contributing": false,
"health_percentage": null,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "mirage-ai",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"ai-agents",
"filesystem",
"vfs",
"fuse",
"s3",
"google-drive",
"slack",
"agent-tools",
"shell",
"rag",
"Development Status :: 3 - Alpha",
"Intended Audience :: Developers",
"Operating System :: MacOS :: MacOS X",
"Operating System :: POSIX :: Linux",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.12",
"Topic :: Scientific/Engineering :: Artificial Intelligence",
"Topic :: Software Development :: Libraries :: Python Modules",
"Topic :: System :: Filesystems"
],
"ecosystem": "pypi",
"matches_repo": false,
"registry_url": "https://pypi.org/project/mirage-ai/",
"is_deprecated": false,
"latest_version": "0.0.3",
"repository_url": "https://github.com/strukto-ai/mirage",
"versions_count": 7,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 3919,
"first_published_at": "2026-05-06T17:18:34.004403Z",
"latest_published_at": "2026-06-30T09:47:48.335411Z",
"latest_version_yanked": null,
"days_since_latest_publish": 21
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"examples/typescript/browser/tsconfig.json",
"examples/typescript/tsconfig.json",
"typescript/packages/agents/tsconfig.json",
"typescript/packages/browser/tsconfig.json",
"typescript/packages/cli/tsconfig.json",
"typescript/packages/core/tsconfig.json",
"typescript/packages/node/tsconfig.json",
"typescript/packages/server/tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 94568,
"source_files_sampled": 5548,
"oversized_source_files": 2,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 5393
},
"dependencies": {
"manifests": [
"python/pyproject.toml",
"typescript/package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 48,
"assessed_package": "pypi:mirage-ai@0.0.3",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm",
"pypi"
],
"dependencies": [
{
"name": "aiofiles",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=24.1.0"
},
{
"name": "aiohttp",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=3.13.3"
},
{
"name": "fastapi",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.135.1"
},
{
"name": "httpx",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.28.1"
},
{
"name": "python-multipart",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.0.20"
},
{
"name": "numpy",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.4.3"
},
{
"name": "orjson",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=3.11"
},
{
"name": "pyyaml",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=6.0.3"
},
{
"name": "python-dotenv",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.2.2"
},
{
"name": "tree-sitter",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.25.2"
},
{
"name": "tree-sitter-bash",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.25.1"
},
{
"name": "typer",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.12.0"
},
{
"name": "uvicorn",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.41.0"
},
{
"name": "pypdfium2",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=5.7.0"
},
{
"name": "pillow",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=12.2.0"
},
{
"name": "jq",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.11.0"
},
{
"name": "mfusepy",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.0.0"
},
{
"name": "pyjwt",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.10"
},
{
"name": "dulwich",
"manifest": "python/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.2.4"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 22,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "zechengz",
"commits": 122,
"avatar_url": "https://avatars.githubusercontent.com/u/21955420?v=4"
},
{
"type": "User",
"login": "alexbruf",
"commits": 20,
"avatar_url": "https://avatars.githubusercontent.com/u/2868640?v=4"
},
{
"type": "User",
"login": "milosveljkovic",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/47954575?v=4"
},
{
"type": "User",
"login": "aaronjmars",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/61592645?v=4"
},
{
"type": "User",
"login": "Goktug",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/534426?v=4"
},
{
"type": "User",
"login": "manastm",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/54597052?v=4"
},
{
"type": "User",
"login": "puneetdixit200",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/236133619?v=4"
},
{
"type": "User",
"login": "sonhmai",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/14060682?v=4"
}
],
"contributors_sampled": 8,
"top_contributor_share": 0.808
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"pre-commit.yml",
"publish-core.yml",
"test_cli.yml",
"test_integ.yml",
"test_integ_s3.yml",
"test_python.yml",
"test_typescript.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.js"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"security_signals": {
"lockfiles": [
"pnpm-lock.yaml",
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/29 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 4 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "199 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d1bab6ef0fdb63a9640ccde8a7202affe76f3dac",
"ran_at": "2026-07-21T21:30:34Z",
"aggregate_score": 4.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/Handbook-Enterprises/strukto-mirage-fork",
"host": "github.com",
"name": "strukto-mirage-fork",
"owner": "Handbook-Enterprises"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 45,
"inputs": {
"security": 53,
"vitality": 36,
"community": 12,
"governance": 49,
"engineering": 72
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 36,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"commits_last_year": 192,
"human_commit_share": 0.95,
"days_since_last_push": 4,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "192 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 192
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "critical",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"releases_count": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "no releases published",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases_published",
"params": {}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 12,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": false,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 49,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 8,
"top_contributor_share": 0.808
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 81% of commits",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 81
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "8 contributors",
"points": 10.8,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 8
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 22,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "22/22 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 22,
"decided": 22
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/29 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 43,
"inputs": {
"followers": 1,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "Handbook-Enterprises",
"public_repos": 8,
"account_age_days": 699
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1 followers of Handbook-Enterprises",
"points": 2.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1,
"login": "Handbook-Enterprises"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "8 public repos, account ~1 yr old",
"points": 10.8,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 8
}
},
{
"code": "account_age_years",
"params": {
"years": 1
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 72,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "7 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 7
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.js",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 9.6,
"status": "met",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": "https://www.strukto.ai/mirage",
"has_readme": false,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.strukto.ai/mirage",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 53,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 41,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/29 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "199 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:mirage-ai@0.0.3 runtime dependency closure — what installing the published package pulls in — 48 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "pypi:mirage-ai@0.0.3",
"assessed": 48
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 48,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 48,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 9
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 75,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.989,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 5393
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "94 of 95 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 94,
"sampled": 95
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"pnpm-lock.yaml",
"uv.lock"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"examples/typescript/browser/tsconfig.json",
"examples/typescript/tsconfig.json",
"typescript/packages/agents/tsconfig.json",
"typescript/packages/browser/tsconfig.json",
"typescript/packages/cli/tsconfig.json",
"typescript/packages/core/tsconfig.json",
"typescript/packages/node/tsconfig.json",
"typescript/packages/server/tsconfig.json"
],
"agent_commit_share": 0.16,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.05
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.js",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "examples/typescript/browser/tsconfig.json, examples/typescript/tsconfig.json, typescript/packages/agents/tsconfig.json, typescript/packages/browser/tsconfig.json, typescript/packages/cli/tsconfig.json, typescript/packages/core/tsconfig.json, typescript/packages/node/tsconfig.json, typescript/packages/server/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples/typescript/browser/tsconfig.json, examples/typescript/tsconfig.json, typescript/packages/agents/tsconfig.json, typescript/packages/browser/tsconfig.json, typescript/packages/cli/tsconfig.json, typescript/packages/core/tsconfig.json, typescript/packages/node/tsconfig.json, typescript/packages/server/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "16 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 16,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "5 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 5,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 94568,
"source_files_sampled": 5548,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/5548 source files over 60KB",
"points": 55,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 5548,
"oversized": 2
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Community profile unavailable",
"pypi package 'mirage-ai' points at a different repository (https://github.com/strukto-ai/mirage); excluded from ecosystem scoring",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-21T21:30:51.186599Z",
"schema_version": "0.23.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/h/Handbook-Enterprises/strukto-mirage-fork.svg",
"full_name": "Handbook-Enterprises/strukto-mirage-fork",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}