Tzamun-Arabia-IT-Co / auxly-memory-cli

来自 GitHub 依赖图的完整解析依赖集合：17 个直接依赖与 25 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 40 个包，其中也包含从不交付的开发与测试版本固定：2 个存在已知公告，1 个为直接依赖。 有 2 个无法评估——没有已解析的版本、生态系统不受支持，或不在所列包清单之内。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [
        "ai-agents",
        "cli",
        "cli-tool",
        "mcp",
        "mcp-server",
        "developer-tools",
        "llm-tools",
        "local-first",
        "open-source",
        "privacy",
        "codex",
        "codex-cli",
        "antigravity",
        "claude",
        "golang"
      ],
      "is_fork": false,
      "size_kb": 16564,
      "has_wiki": true,
      "homepage": "https://auxly.io/unified-memory",
      "languages": {
        "Go": 2562961,
        "Shell": 18215,
        "Python": 9395,
        "Makefile": 1137,
        "Dockerfile": 1288,
        "JavaScript": 9076,
        "PowerShell": 8899,
        "Go Template": 786
      },
      "pushed_at": "2026-07-27T07:28:51Z",
      "created_at": "2026-05-31T04:19:26Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-09T12:03:07Z",
      "description": "A local-first, file-based memory CLI for AI tools. Own your context in plain Markdown — auditable, versionable, and provider-agnostic.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://tzamun.sa",
      "name": "Tzamun Arabia IT Co",
      "type": "Organization",
      "login": "Tzamun-Arabia-IT-Co",
      "company": null,
      "location": "Saudi Arabia",
      "followers": 3,
      "avatar_url": "https://avatars.githubusercontent.com/u/219311239?v=4",
      "created_at": "2025-07-04T15:07:55Z",
      "is_verified": null,
      "public_repos": 6,
      "account_age_days": 388
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.4.3",
          "kind": "patch",
          "published_at": "2026-07-08T10:16:14Z"
        },
        {
          "tag": "v1.4.2",
          "kind": "patch",
          "published_at": "2026-07-07T23:56:38Z"
        },
        {
          "tag": "v1.4.1",
          "kind": "patch",
          "published_at": "2026-07-06T15:46:50Z"
        },
        {
          "tag": "v1.4.0",
          "kind": "minor",
          "published_at": "2026-07-06T15:19:16Z"
        },
        {
          "tag": "v1.3.9",
          "kind": "patch",
          "published_at": "2026-07-06T00:40:26Z"
        },
        {
          "tag": "v1.3.8",
          "kind": "patch",
          "published_at": "2026-07-06T00:04:36Z"
        },
        {
          "tag": "v1.3.7",
          "kind": "patch",
          "published_at": "2026-07-05T23:44:50Z"
        },
        {
          "tag": "v1.3.6",
          "kind": "patch",
          "published_at": "2026-07-05T03:14:29Z"
        },
        {
          "tag": "v1.3.5",
          "kind": "patch",
          "published_at": "2026-07-05T02:07:23Z"
        },
        {
          "tag": "v1.3.4",
          "kind": "patch",
          "published_at": "2026-07-05T01:15:40Z"
        },
        {
          "tag": "v1.3.3",
          "kind": "patch",
          "published_at": "2026-07-04T18:41:20Z"
        },
        {
          "tag": "v1.3.2",
          "kind": "patch",
          "published_at": "2026-07-04T16:31:56Z"
        },
        {
          "tag": "v1.3.1",
          "kind": "patch",
          "published_at": "2026-07-03T18:48:07Z"
        },
        {
          "tag": "v1.3.0",
          "kind": "minor",
          "published_at": "2026-07-03T01:56:43Z"
        },
        {
          "tag": "v1.2.0",
          "kind": "minor",
          "published_at": "2026-07-02T14:17:14Z"
        },
        {
          "tag": "v1.1.5",
          "kind": "patch",
          "published_at": "2026-06-17T03:32:51Z"
        },
        {
          "tag": "v1.1.4",
          "kind": "patch",
          "published_at": "2026-06-16T00:46:20Z"
        },
        {
          "tag": "v1.1.3",
          "kind": "patch",
          "published_at": "2026-06-15T12:43:05Z"
        },
        {
          "tag": "v1.1.2",
          "kind": "patch",
          "published_at": "2026-06-15T12:22:01Z"
        },
        {
          "tag": "v1.1.1",
          "kind": "patch",
          "published_at": "2026-06-10T01:23:40Z"
        },
        {
          "tag": "v1.1.0",
          "kind": "minor",
          "published_at": "2026-06-09T11:31:46Z"
        },
        {
          "tag": "v1.0.22",
          "kind": "patch",
          "published_at": "2026-06-06T22:06:28Z"
        },
        {
          "tag": "v1.0.21",
          "kind": "patch",
          "published_at": "2026-06-06T14:51:46Z"
        },
        {
          "tag": "v1.0.20",
          "kind": "patch",
          "published_at": "2026-06-06T13:31:42Z"
        },
        {
          "tag": "v1.0.19",
          "kind": "patch",
          "published_at": "2026-06-06T02:56:34Z"
        },
        {
          "tag": "v1.0.18",
          "kind": "patch",
          "published_at": "2026-06-06T02:09:34Z"
        },
        {
          "tag": "v1.0.17",
          "kind": "patch",
          "published_at": "2026-06-06T00:14:17Z"
        },
        {
          "tag": "v1.0.16",
          "kind": "patch",
          "published_at": "2026-06-05T23:23:00Z"
        },
        {
          "tag": "v1.0.15",
          "kind": "patch",
          "published_at": "2026-06-05T16:34:09Z"
        },
        {
          "tag": "v1.0.14",
          "kind": "patch",
          "published_at": "2026-06-05T11:27:19Z"
        },
        {
          "tag": "v1.0.13",
          "kind": "patch",
          "published_at": "2026-06-05T11:04:46Z"
        },
        {
          "tag": "v1.0.12",
          "kind": "patch",
          "published_at": "2026-06-05T09:41:42Z"
        },
        {
          "tag": "v1.0.11",
          "kind": "patch",
          "published_at": "2026-06-05T01:13:19Z"
        },
        {
          "tag": "v1.0.10",
          "kind": "patch",
          "published_at": "2026-06-04T18:46:53Z"
        },
        {
          "tag": "v1.0.9",
          "kind": "patch",
          "published_at": "2026-06-04T15:26:41Z"
        },
        {
          "tag": "v1.0.8",
          "kind": "patch",
          "published_at": "2026-06-03T23:03:44Z"
        },
        {
          "tag": "v1.0.7",
          "kind": "patch",
          "published_at": "2026-06-03T17:50:46Z"
        },
        {
          "tag": "v1.0.6",
          "kind": "patch",
          "published_at": "2026-06-03T02:38:54Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "ec273ce4690d88525a4b7b8ca4d1f0dfe0f376e6",
          "body": "…us — v1.4.3\n\n`auxly host down` reported success but left the reverse-tunnel ssh alive, so the\nbox kept serving and the TUI kept showing ● serving. Root cause: findTunnelPIDs\nran `pgrep -f \"-R <port>:localhost:<port>\"`; pgrep parses the leading `-R` as an\nunknown flag (exit 2) → matched nothing → ki\n[…]\nst down` left 10 tunnel ssh alive; after fix it\nleaves 0 and the status line flips to NOT serving. Regression guard on the `--`\nterminator (TestPgrepMatchArgs_HasDashTerminator); full cmd suite green.",
          "is_bot": false,
          "headline": "fix(host): `auxly host down` actually stops the tunnels + honest stat…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-08T10:13:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a26c20d2a2083c041c9606bc4310b88ed9613006",
          "body": "…into GitHub Copilot CLI — v1.4.2\n\nVS Code:\n  VS Code's native MCP file (<AppSupport>/Code/User/mcp.json) keys servers\n  under a top-level \"servers\", NOT \"mcpServers\" (which it silently ignores).\n  auxly had no VS Code target and only ever wrote mcpServers. Add the target\n  and emit \"servers\", pinne\n[…]\nst a scratch home writes Code/User/mcp.json\nwith the servers key + AUXLY_PROVIDER=vscode, and all 10 auxly skills into\n~/.copilot/skills/<name>/SKILL.md with correct frontmatter. Full cmd suite green.",
          "is_bot": false,
          "headline": "fix(setup): wire VS Code MCP (servers schema) + install auxly skills …",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-07T23:53:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5393d6615ae3dc004a430fa6242d845b528802ad",
          "body": "v1.4.0 made inbox/tasks Operational categories, excluded from OrderedFiles()\n(the fact-routing/profile order). The Memory browser reused that order for\nINCLUSION too, so quick-capture notes and the shared todo list were invisible\nin the dashboard. orderMemScan now ranks operational files after the fact\nfiles (taxonomy declaration order) and includes them — read-only listing at\nthe bottom of the top-level tree. Test locks the ordering.",
          "is_bot": false,
          "headline": "fix(tui): list inbox.md + tasks.md in the Memory tab — v1.4.1",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-06T15:43:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b107a1314e5c1b1d378abe2c08d4f0f26b8355c",
          "body": "…xly todo) — v1.4.0\n\nTwo zero-friction productivity surfaces, batched.\n\nQuick capture — `auxly note` / `auxly q`:\n  Append a timestamped thought to inbox.md. No category decision, no LLM,\n  offline. Args or piped stdin. Entries file themselves: the Consolidate\n  organize pass now sweeps inbox.md int\n[…]\nt clean; live CLI todo lifecycle (add/list/done\nby number and substring, hand-typed lines parse) and MCP task tools over stdio\n(add/list/done attributed, read_only rejected, require_approval allowed).",
          "is_bot": false,
          "headline": "feat(productivity): quick capture (auxly note) + shared task list (au…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-06T15:16:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f902564f2996b5cd8818d8fe982e63739ac2944d",
          "body": "…aches a remote/LAN embedder\n\nAUXLY_EMBED_ENDPOINT was env-only. The auxly MCP server is spawned by an agent\nthat usually does NOT inherit the user's interactive-shell env, so semantic\nrecall silently fell back to keyword search against a remote embedder — the\nindex was built but never used at query\n[…]\nocess resolves the endpoint from config — the MCP-server path. Tests\ncover env>config>default precedence and the cloud gate (embed tests isolate HOME\nso config reads are deterministic). Bump to 1.3.9.",
          "is_bot": false,
          "headline": "feat(embed): persist embeddings endpoint in config so agent recall re…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-06T00:37:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "26455eebb3125eedb72e04415cc5b78f01d409fa",
          "body": "…ction\n\nTwo TUI improvements:\n\n- Analytics tab gains a 3rd sub-tab \"Recall\" (←/→ cycles Activity/Usage/Recall):\n  per-file hit tables (7/30/90d), dead files, hot facts, and fallback rate —\n  the same data as `auxly stats --recall`, now live in the dashboard. DB reads\n  run off-thread in a tea.Cmd (b\n[…]\nider/Model columns. Fixes the\n  report that the modes looked like static text with no obvious way to select.\n\nTests: recall fetch+render + 3-way sub-tab cycle; ←/→ mode-switch coverage.\nBump to 1.3.8.",
          "is_bot": false,
          "headline": "feat(tui): recall analytics panel + discoverable Memory Org mode sele…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-06T00:01:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e45dd5a575289c2e866060b4feaff26aa8ccf655",
          "body": "Two organize UX fixes:\n\n- Default model haiku -> sonnet (buildAgentArgs fallback + TUI picker order;\n  sonnet marked \"(recommended)\", haiku stays as the \"(fast)\" option). haiku at\n  --effort low is fast but a weak, inconsistent reorganizer: on a near-tidy\n  vault it routinely returns zero ops, so or\n[…]\nrganized — your synced\n  facts are in place, nothing to merge or dedupe\" — accurate, since\n  auxly_skill_sync already delta-merges each fact on sync.\n\nTests updated for the new default. Bump to 1.3.7.",
          "is_bot": false,
          "headline": "fix(organize): default to sonnet + clearer \"nothing to do\" message",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-05T23:40:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b6dea048abb3e6f9e568baf03e62538332795855",
          "body": "…load everywhere\n\nPersonal ~/.claude/skills files do not reliably surface in Claude Code's skill\npicker on current builds (verified: even a minimal test skill fails to load,\nonly plugin skills do). The reliable delivery is the auxly plugin. `auxly setup`\nnow, when the claude CLI is present, runs `cl\n[…]\ninstall fails.\n\nPairs with auxly-skills 2.5.0, which now ships the /auxly-* memory skills in the\nplugin alongside council/execute.\n\nBump to 1.3.6; changelog documents the per-agent skill-delivery fix.",
          "is_bot": false,
          "headline": "feat(setup): auto-install the auxly Claude plugin so /auxly-* skills …",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-05T03:10:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "af2e9b4ae497b3ee33d2eb5d4be8e381c11059ea",
          "body": "…mini/Cursor/agy = AGENTS.md, not skill dirs)\n\nCodex, Gemini, Antigravity, and Cursor are INSTRUCTION-BASED — they read a\nglobal context file (AGENTS.md / GEMINI.md), NOT a skills/ directory. auxly was\nwriting SKILL.md into ~/.codex/skills and ~/.gemini/config/skills, which those\ntools never read, s\n[…]\nde/skills was found NOT to load on some setups\n(only plugin skills do) — the memory skills are being moved into the auxly\nplugin separately to fix that; this commit fixes the instruction-based agents.",
          "is_bot": false,
          "headline": "fix(skills): deliver skills via each agent's real mechanism (Codex/Ge…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-05T02:52:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "767ea2ba85b82e09c0d8f8b1df57a22560017062",
          "body": null,
          "is_bot": false,
          "headline": "chore(release): bump to 1.3.5 — restore dashboard category bars",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-05T02:04:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eae135b38dd738c06356b9e10001993587a0cad5",
          "body": "…ompact\n\nRegression from 1.3.4: the category breakdown vanished from the System\nDiagnostics panel. The bars were gated on `!compact`, and 1.3.4's canonical\nbodyCompact() (measuring the MAX body height for launch-stability) picks\ncompact at fit-boundary sizes — hiding bars that would fit fine.\n\nThe b\n[…]\ndCategoryBarsShowInSpareRoom (155x45, 17 cards) asserts the\nbars show AND body height <= terminal, with empty vs full feeds (feed-length\nindependent). The four existing fit/stability tests stay green.",
          "is_bot": false,
          "headline": "fix(tui): restore Memory-by-category bars — gate on spare room, not c…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-05T02:01:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f900ed8b17cff46445a4ca4d15d906cc60999429",
          "body": "…tability\n\nAuto-wire capture hooks for every installed hook-capable agent on setup\n(claude/codex settings hooks + gemini/kimi/antigravity ~/.zshrc wrappers,\nopt-out sticky), antigravity support, and a dashboard that renders the same\nway every launch. All through adversarial review.",
          "is_bot": false,
          "headline": "chore(release): bump to 1.3.4 — auto-wire capture hooks + dashboard s…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-05T01:12:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25a84e1f2ea8cc1b1ee064763bd737638f07ee50",
          "body": "…p; add antigravity\n\n`auxly setup` and `auxly connect` now wire the session-end capture hook for\nevery installed hook-capable agent, instead of requiring a manual `hooks\ninstall --agent X` per tool:\n- claude + codex → their clean settings-file hooks (silent, reversible).\n- gemini + kimi + antigravit\n[…]\nd adversarially (SHIP): shell-injection safety verified live via the\nprintf %q re-quoting under malicious payloads; idempotency, antigravity naming,\nand the local-only connect call site all confirmed.",
          "is_bot": false,
          "headline": "feat(hooks): auto-wire capture hooks for all installed agents on setu…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-05T01:12:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "46466e2766c20cfe0f899d46f392003b7e03b77a",
          "body": "…nches\n\nReported \"why not stable\": at the same terminal size, one launch showed the\nfull System Diagnostics box (real store path + category breakdown), the next\na compact box (base path, no categories). Root cause: bodyCompact() decided\nfull-vs-compact by measuring the LIVE render height, and the tw\n[…]\niginal regression. Connections panel has a separate\ndata-length dependency but its own connVisibleCap mitigation (a synthetic-fill\nfix there breaks on hostname wrap) — left untouched, noted for later.",
          "is_bot": false,
          "headline": "fix(tui): dashboard compact/full decision no longer flips between lau…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-04T20:50:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "107371216e727dd40f01d33d741e910d850c84fb",
          "body": "Optional/unconfigured features (git sync, semantic index) no longer render\nas red errors; auxly capture no longer hangs when run bare in a terminal.",
          "is_bot": false,
          "headline": "chore(release): bump to 1.3.3 — UX-clarity patch",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-04T18:37:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "194d088d12ddd016a0453a288ddf3bae9fa85c23",
          "body": "…errors; capture no longer hangs bare\n\nThree reports, one root cause on the TUI side: optional features that\naren't set up rendered as alarm-red failures.\n\n- Ops sync: \"sync not configured\" was painted danger-red and lingered on\n  screen while navigating to another hook row (j/k didn't clear it), so\n[…]\ndance, and exits instead of blocking. Piped/hook use unchanged.\n\nTests updated for the reworded sync message and the amber-vs-red rebuild\nclassification (added a real-error case that still asserts ✗).",
          "is_bot": false,
          "headline": "fix(tui,capture): stop showing optional/unconfigured features as red …",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-04T16:40:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "33b9d62fd75431e4238e27c481a0cbb33918996f",
          "body": "Ops/Settings viewport repaint, host down orphan-tunnel reaper, organize\nwhole-file fallback on delta parse failure. All fixes went through\nadversarial review (3 findings caught and fixed before cut).",
          "is_bot": false,
          "headline": "chore(release): bump to 1.3.2 — stability patch for 3 regressions",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-04T16:11:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72903f9a7ae4b9c3d9924b7c0284a6cda0391921",
          "body": "Adversarial review of the post-1.3.1 fixes flagged three real issues:\n\n1. (HIGH) Delta fallback fired on ANY !Success, so a timeout/cancel/\n   rate-limit on the default delta path triggered a second whole-file\n   model call — doubling the wait, regressing the very organize-speed fix\n   this cycle sh\n[…]\nhe\n   supervisor + ssh.exe are actually reaped there too.\n\nAdded tests: delta does NOT fall back on a non-parse (timeout/cancel)\nfailure; tunnelKillPatterns anchors the supervisor and pins both ports.",
          "is_bot": false,
          "headline": "fix(organize,host): address review findings before 1.3.2",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-04T16:11:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "23a2f5e55f89ef79c78128a128378ad50fad76e0",
          "body": "…aps orphaned tunnels\n\nTUI \"Ops panel does nothing\" + \"sections flicker/disappear\": the app.go\ncase that routes ops/vault/trust result messages to settings.Update\nregardless of screen returned WITHOUT calling syncViewport — every other\nearly-return guard refreshes it. Settings renders through the sh\n[…]\n enough to never touch an\nunrelated ssh — and reports how many it terminated.\n\norganize \"runs, no result\" was fixed separately (081721d): delta parse\nfailure now falls back to the whole-file contract.",
          "is_bot": false,
          "headline": "fix(tui,host): repaint Ops/Settings after async results; host down re…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-04T15:31:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "081721ddaded0bb4e8f761834e1dab062be123a6",
          "body": "Delta went default-on in 1.3.1, but a weaker agent-CLI model sometimes\nreturns op-JSON the delta parser can't read — which surfaced as a bare\nparse error with no proposal (the reported 'organize runs, no result').\nplanOrganizeOpts now retries that ONE failed delta call as a whole-file\nrewrite so a bad delta response never wastes the run. A valid-but-empty\ndelta response is a real 'already tidy' and correctly does not fall back.",
          "is_bot": false,
          "headline": "fix(organize): fall back to whole-file when delta JSON fails to parse",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-04T15:15:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "518b03a64c8b3044dc20149126ed8f9a1a2cb296",
          "body": "…ze-speed fix",
          "is_bot": false,
          "headline": "chore(release): bump to 1.3.1; changelog reflects the measured organi…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-03T18:42:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5fefbd72a8942b5555714ad200cdb8758be1eba",
          "body": "…ead end\n\nAfter a successful organize, the dirty-file ledger correctly reports\n\"Nothing to organize\" on the next run (0 model calls) — but that left no\nway to force a full re-organize from the TUI. Added [F] on the Memory Org\nConsolidate screen: it bypasses the ledger (OrganizeRunOpts.ForceAll) and\n\n[…]\nus the [F] hint,\nand the footer lists it. One-shot: forceRun clears after the run so the\nnext isn't silently forced. Threaded ForceAll through the Direct LLM path\ntoo via PlanOrganizeWithProviderOpts.",
          "is_bot": false,
          "headline": "feat(tui): [F] re-run everything — escape the \"Nothing to organize\" d…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-03T17:04:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "45d33b62d21047c688a8dd8eb4c7caecd1de6fb0",
          "body": "…r slow organize\n\nRoot-caused with direct timing against the real ~16k vault:\n- claude cold-start: 3s. Read 40k tokens + tiny output: 4.4s. So neither\n  I/O nor input size was the cost.\n- The whole-vault organize emitted only ~180 tokens (7 ops) yet took 80-98s\n  — the time was hidden model DELIBERA\n[…]\nrganizeDelta\n  reverts any file its fact-loss guard flags).\n\nNet on the real vault: first organize ~50-95s (was 136s, or 280s+ chunked),\nsecond run instant via the dirty-file ledger. Full suite green.",
          "is_bot": false,
          "headline": "perf(organize): --effort low + delta by default — the measured fix fo…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-03T12:03:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ae0e85caac5686499f5ef01381189255336f03b7",
          "body": "…l, not N\n\nThe real reason a ~40k-token vault stayed slow: it was over the 12k chunk\nthreshold, so it took the per-file chunked path — one CLI-agent call PER\nfile, each with its own cold-start (8 files ~= 8 cold-starts), and delta\ndidn't apply there. The 12k threshold exists to stop a huge whole-vau\n[…]\n whole-vault ceiling lifts to 80k, so a typical vault runs as\nONE whole-vault delta call (one cold-start) instead of N. An explicit\nAUXLY_ORGANIZE_CHUNK_TOKENS still wins; vaults over 80k still chunk.",
          "is_bot": false,
          "headline": "perf(organize): delta lifts the chunk ceiling — big vaults do one cal…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-03T11:01:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8f13aaf643ca702912c01ed87c0cc7175281f109",
          "body": "… bar\n\nHeader-mode split (the real fix for the user's projects.md):\n- A projects.md organized by level-2 (##) section headers now splits\n  DETERMINISTICALLY by those headers — no LLM call, so none of the\n  bold-bullet matching fragility applies. Each ## section (through the\n  next ## or EOF) moves b\n[…]\n a two-minute opaque model call — reading as \"stuck at the\n  finish line.\" Replaced with an indeterminate activity sweep + an honest\n  \"Ns elapsed\" counter, since a CLI agent streams no real progress.",
          "is_bot": false,
          "headline": "feat(organize): header-aware project split + honest organize progress…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-03T10:52:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5a692845f1e0aafb355b7de7d30678c582098fa0",
          "body": "… big single-run speedup\n\nThe whole-vault organize's latency is dominated by the model rewriting\nevery file's full content. Delta mode (organize_delta.go, already built)\nhas the model emit small move/merge/delete ops instead — 10-50x less\noutput. It shipped dark; this wires an env opt-in (AUXLY_ORGA\n[…]\nunchanged, and it covers all production paths at once. Safe to\ntry: organize is review-gated and planOrganizeDelta reverts any file its\nfact-loss guard flags, so the worst case is a rejected proposal.",
          "is_bot": false,
          "headline": "feat(organize): AUXLY_ORGANIZE_DELTA opt-in — op-based output for the…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-03T10:41:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9a0039c330f9ac2d03ec955cdec517c12dcfc5a8",
          "body": "…rity, dashboard stability",
          "is_bot": false,
          "headline": "docs: 1.3.1 changelog — organize speed, passphrase encryption, TUI pa…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-03T04:42:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72863a1b97768f8bc0d9d4ff72fcb6e0df85de85",
          "body": "…ned search\n\nNew Settings->Ops sub-tab: per-agent capture-hook status with install /\nuninstall (confirm-gated), \"Sync now\" git push (confirm-gated), and a\ndoctor report view — full parity with the CLI equivalents.\n\n- Hooks + doctor shell the real binary via a stubbable runAuxlySub var\n  (their cores\n[…]\nack regression).\n\nDeleted tui/search.go: searchModel was never wired into any screen/key —\nunreachable dead code, and redundant with the Memory tab's / keyword\nsearch and ? semantic-recall playground.",
          "is_bot": false,
          "headline": "feat(tui): close last parity gaps — hooks, sync, doctor; delete orpha…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-03T04:41:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4564695802f720c91c8c90c9bb98cc2a9b83d0f3",
          "body": "…est, join modal\n\nEvery user-facing CLI action is now reachable from the TUI (only\ninter-process plumbing — mcp-server, connect-mcp, consume, print-wrapper,\nprovision — stays CLI-only). Added:\n- Settings->Vault: live encrypt status (mode, key source, N-of-M\n  encrypted), encrypt init (keypair with o\n[…]\n; and leaving\nSettings mid-operation froze the panel and left key material in memory.\nNow gated like the customizations panel, completion msgs routed\nregardless of screen, key buffers zeroed on leave.",
          "is_bot": false,
          "headline": "feat(tui): full parity — encryption panel, index controls, trust-sugg…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-03T04:22:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6e1940efa73722f524a07aacf0b365bc4d99edf3",
          "body": "…n the Memory Org tab\n\nThe Memory Org tab ran only Consolidate; the other two organize modes\nwere CLI-only. Added an h/l mode selector (Consolidate / Split projects /\nFind contradictions). Split and contradictions run through a tea.Cmd\n(no blocking Update), queue their results to the pending queue, \n[…]\nmemory (PlanSplitProjectsRun /\nPlanContradictionsRun returning pending-write descriptors); cmd and tui\nare thin callers that do the actual WriteFrom. CLI output preserved via\na progress-hook callback.",
          "is_bot": false,
          "headline": "feat(tui): organize mode selector — split-projects & contradictions i…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-03T03:38:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f97fccca4858180cef9c9da569ba804796b5564f",
          "body": "…rase encryption, organize speed, split bold-bullet fix\n\norganize + encryption UX:\n- Memory Org no longer dead-ends on encrypted files under a CLI agent.\n  Choose [s] skip encrypted this run, or [y] decrypt temporarily —\n  re-encrypted automatically when the run finishes. A crash-recovery\n  sentinel\n[…]\nassword for passphrase\nmode deliberately deferred — a mid-operation crash is a permanent\nlockout, not worth the risk this pass.\n\nSplit: 4 Sonnet subagents on disjoint files + main-thread review/gates.",
          "is_bot": false,
          "headline": "feat(v1.3.1): organize encrypted-file UX, dashboard stability, passph…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-03T03:17:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "42d6c23488925718085bc035aff8dbb22b0670bd",
          "body": "A 200+ char single-use token is unusable if you have to select it by\nhand in a terminal. auxly host invite now copies the token to the\nclipboard automatically (pbcopy / wl-copy / xclip / xsel / clip.exe,\nfed via STDIN so the secret never rides argv; --no-copy opts out;\ndegrades to a calm 'copy manually' hint when no tool exists). In the\nTUI remotes tab, [y] yanks the last minted token while one is held —\n[c] was taken by Connect-new — and the token is dropped from memory\nwhen you leave the tab.",
          "is_bot": false,
          "headline": "feat(invite): copy token to clipboard — auto on mint, [y] in TUI",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-03T01:45:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1264af39f74c5e91851a8d0bc49947413c7d3753",
          "body": "…ease prep)",
          "is_bot": false,
          "headline": "docs: 1.3.0 changelog and README — encryption, pairing, insights (rel…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-03T01:14:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cff34e722565bb87df63c28c86fbbf880389166a",
          "body": "…print 21)\n\nHost mints a single copy-pasteable invite (auxly1-... blob that survives\nchat apps), pinned to its own SSH host-key fingerprint with a TTL and\nsingle-use semantics. Joiner runs auxly join <token>: the pin is\nenforced ON the connection that carries the secret — the verified host\nkey goes \n[…]\nith\nregression tests, injection test executes the quoted command through a\nreal shell. Split: Sonnet (wiring + fixes + review), Codex (invite\ntoken layer, prior commit), main thread (contract, gates).",
          "is_bot": false,
          "headline": "feat(remote): one-command pairing — auxly host invite / auxly join (S…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-03T01:09:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "27ce7eb778641d26787a2116381e00c0e769c70a",
          "body": "…undwork (Sprint 21 data layer)\n\nEncryption integration on the vaultcrypt core: one choke point\n(internal/memory/cryptio.go) where crypto meets file IO. State lives in\nthe file itself — an age header means every future write re-encrypts;\nno config to drift. auxly encrypt init generates the key (refu\n[…]\nmed closed; 1 critical + 2\nminor on invites — fixed, 19 tests green under -race. Split: Sonnet\n(integration + fix rounds + reviews), Codex (invite layer), main\nthread (contract, seed-race fix, gates).",
          "is_bot": false,
          "headline": "feat(memory): vault encryption at rest (Sprint 20) + invite-token gro…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-03T00:24:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c1572eeb2fda8b3fc30ea81f483a2f9ce051f502",
          "body": "…9) + hardened vault crypto core (Sprint 20 groundwork)\n\nApprovals tab: colorized unified diff (frontmatter dimmed, comments dim,\n+/- colored), TTL countdown badge, batch keys A (by agent) / F (by file)\nwith confirm + conflict-skip — never force. TUI approvals (single AND\nbatch) now write the pendin\n[…]\ntegration advisories.\n\nAdversarial reviews (2× Sonnet): 7 TUI findings + 8 crypto findings, all\nfixed. Split: Sonnet (TUI assembly + both fix rounds), Codex (crypto\ncore), main thread (briefs, gates).",
          "is_bot": false,
          "headline": "feat(tui): approvals diff+batch, live activity feed, charts (Sprint 1…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T22:56:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "92ffb8c6a9b83f856c38ad4b50e3946db5009d77",
          "body": "…) + activity data layer\n\n'?' in the Memory tab opens the playground: type a query, see the REAL\nrecall pipeline's verdict — score bars, accepted rows, above-floor hits\ntrimmed by the k-cut, and up to 20 below-floor 'would be cut' rows with\nthe floor value, so debugging recall stops being blind. Tab\n[…]\nt the tab-enter file snapshot instead of the live vault (fresh\nList() per run, mirroring the real server).\n\nSplit: Sonnet (playground + fix round), Codex (activity layer), main\nthread (briefs, gates).",
          "is_bot": false,
          "headline": "feat(tui): recall playground — see exactly what agents get (Sprint 18…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T22:09:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "07d720011bfb2f75bd52ead4350d404bab675df4",
          "body": "…18 groundwork)\n\nNew Memory tab ('=' hotkey): taxonomy-ordered file tree with per-file fact\ncounts and hot/cold recall badges, content pane with dimmed date stamps and\nsupersede traces, '/' live search over cached contents with Enter-jump,\nand inline e(dit)/d(elete)/n(ew fact) — every action queues \n[…]\ntrip the bullet marker facts-tooling depends on; the delete-flow test now\nasserts the materialized pending diff.\n\nSplit: Sonnet (browser + fix round), Codex (RecallDebug), main thread\n(briefs, gates).",
          "is_bot": false,
          "headline": "feat(tui): Memory browser tab + recall debug data layer (Sprint 17 + …",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T21:41:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d690d0108be9cb1fa9f6523991bd54930e39e433",
          "body": "…Sprint 16)\n\nApprove/reject decisions are now audit-attributed to the originating\nagent (pending_approve/pending_reject rows), and 'auxly trust suggest'\nturns 90 days of them into suggestions with the evidence shown: promote\nrequire_approval→auto at ≥50 decided and ≥95% approved; demote\nrequire_appr\n[…]\nhe dead AutoWriteCount; synthetic decision\nrows no longer claim a false trust level.\n\nSplit: Codex (stats layer + decision logging), Sonnet (rules + surfaces\n+ fix round), main thread (briefs, gates).",
          "is_bot": false,
          "headline": "feat(trust): evidence-based tuning suggestions — never auto-applied (…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T21:06:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "39abf0e5ad327b30b17d9e9dbc80fde7739ba789",
          "body": "…mi + hooks status (Sprint 15)\n\n'auxly hooks install --agent <x>' wires auto-capture for every supported\nCLI: Claude Code keeps the Stop hook; Codex gets a notify program written\ninto ~/.codex/config.toml (TOML-aware: top-level-key insertion before any\n[table], section-scoped foreign-notify detectio\n[…]\n; cooldown checked before the\nrollout walk; symlinked session dirs resolved.\n\nSplit: Codex (codex notify + TOML layer), Sonnet (shell wrappers, router,\nstatus, fix round), main thread (briefs, gates).",
          "is_bot": false,
          "headline": "feat(capture): capture parity — hooks install --agent codex/gemini/ki…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T20:42:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fdffd36597523f0d2445544db7eba24cc04056aa",
          "body": "… call (Sprint 14)\n\n'auxly organize --contradictions': embeddings pair suspiciously-similar\nbullets ACROSS files (cosine ≥0.80, cross-file only — same-file is\nsupersede's turf; caps 500 facts / 50 pairs, ErrVaultTooLarge names the\noverride instead of silently truncating), one LLM call judges\ncontrad\n[…]\nse\n'B' silently INVERTED which fact survived); duplicate findings dedup\nbefore queueing.\n\nSplit: Codex (pairing engine), Sonnet (judge + wiring + fix round), agy\n(README), main thread (briefs, gates).",
          "is_bot": false,
          "headline": "feat(memory): cross-file contradiction sweep — pending-gated, one LLM…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T19:58:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d3a27c1a930b43e991fa98e0c288aa85cc859ddd",
          "body": "…uman-gated (Sprint 13)\n\nStaleFacts flags facts that are BOTH past the age threshold (dated stamps /\nsupersede traces; undated facts age via a first-seen ledger at\n.index/review-seen.json — file mtime was useless, any organize rewrite\nreset it) AND recall-silent per Sprint 12's per-bullet hashes. Ac\n[…]\n-safe truncation; badge-aware\nclick zones; bulk exit codes; status/wording unification.\n\nSplit: Codex (decay lib), Sonnet (CLI + TUI tab + fix round), main thread\n(briefs, wiring, verification gates).",
          "is_bot": false,
          "headline": "feat(memory): fact decay + review queue — old AND unrecalled facts, h…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T19:40:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c8a7e07b00a29006646bce05141d4eddf207bc58",
          "body": "…--recall (Sprint 12)\n\nEvery recall now leaves a privacy-safe trace in audit.db: query and fact\ntext are stored ONLY as truncated sha256 hashes (the personal-leak\nregression set the bar), with per-BULLET fact hashes so the coming decay/\nreview features match at fact granularity, source/remote_host a\n[…]\nmentation split across Codex (audit layer), Sonnet (recall emission),\nagy-runner (stats CLI), main thread (MCP wiring + integration gates).\n\nVERSION → 1.3.0 (branch train; tag remains a human action).",
          "is_bot": false,
          "headline": "feat(analytics): recall analytics foundation — recall_events + stats …",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T19:05:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b041c0b04b59c15403aa9ee9267b7f844a023b21",
          "body": "binary_signs with an empty signature template registers a phantom\nsignature artifact per binary; the release publisher then fails uploading\nthe nonexistent file and dies before the raw auxly-<os>-<arch> binaries\nland (the v1.2.0 first-attempt failure — self-update and install scripts\nwould 404). A build post-hook runs the same dormant in-place SignPath\nscript before archiving/checksumming and registers nothing. Verified with\na local snapshot: all 6 raw binaries present, zero signature artifacts.",
          "is_bot": false,
          "headline": "fix(release): sign exes via build post-hook, not binary_signs",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T14:13:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05759b5fc4ba61454e9c53ec9d7666d25625f413",
          "body": "…ump VERSION\n\nCHANGELOG gains the full 1.2.0 entry (per-project memory, split migration,\nauto-capture, primer, supersede, pending UX, seamless connect, self-healing\nlinks, health surfaces, recall quality, Windows trust groundwork). README\nWhat's-New replaced with the 1.2.0 highlights and the command reference now\ncovers pending/approve/organize/capture/hooks/doctor.",
          "is_bot": false,
          "headline": "docs(release): 1.2.0 changelog + README refresh, govulncheck in CI, b…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T13:24:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "879203af21c792a11618a62564885f410a01dd66",
          "body": "… TUI health table (6.4, 5.6.4, 5.6.7)\n\norganize --split-projects: LLM groups projects.md bullets into\nprojects/<slug>.md, everything through the pending queue. Two-phase by\ndesign: run 1 queues additions only; run 2 queues the monolith cleanup\nstrictly for bullets whose sub-file copy was actually a\n[…]\niff: 6 findings, all fixed —\nnon-atomic split migration (critical), duplicate-bullet deadlock, hidden\nunwired verdict, OS wiped on method retry, stale wizard remediation text,\nbracketed-IPv6 misparse.",
          "is_bot": false,
          "headline": "feat: deferred v1.2.0 items — split migration, wizard simplification,…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T09:29:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cc259fa7bd391ddbf5611d8d193102b63b38a95a",
          "body": "…s (Sprint 5.5.7)\n\nProvisioning warns when the target box's self-reported hostname is already\nconnected under another name (second route vs duplicate). Doctor flags\nduplicate-hostname client rows and relays no client references — prompts\nonly: wiring self-heals, topology stays human-owned.",
          "is_bot": false,
          "headline": "feat(remote): machine-identity dedup warning + orphan topology prompt…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T02:00:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc075a1279cbb14a45ff9ca702cc90129642c662",
          "body": "Critical: provisionRemote errors were discarded at all three call sites (a\nbox could end up entirely unconfigured behind a green '🎉 provisioned!'\nbanner); AtomicWriteFile now creates parent dirs so the FIRST approve of a\nprojects/<slug>.md pending no longer fails ENOENT.\n\nMajor: connect-mcp --selfte\n[…]\nly\nrevoking access; supersede skips bulk diffs and caps its embed budget at 6s\nso a slow endpoint can't stall the synchronous MCP loop.\n\nMinor: approve/reject --agent X also matches capture:X entries.",
          "is_bot": false,
          "headline": "fix(review): 8 adversarial-review findings across Sprints 5.6–9",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T01:59:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1d06d78916a29dee1ece98eca5f29d0012ee620e",
          "body": "…eue (Sprint 9)\n\n`auxly capture` (stdin text, --transcript JSONL, or --stop-hook reading the\nClaude Code Stop payload itself — no jq): extracts user/assistant text (tool\ndumps skipped), tail-windows ~15K tokens, LLM fact extraction against the\ntaxonomy contract, date-stamp-insensitive dedup vs the v\n[…]\nnstall/uninstall`: read-merge-write on ~/.claude/settings.json,\nidempotent, removes exactly its own entry, refuses to touch invalid JSON.\nREADME documents the manual hook points for Codex/Gemini/Kimi.",
          "is_bot": false,
          "headline": "feat(capture): passive auto-capture — session facts to the pending qu…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T01:43:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "77a724bd8ef1bf0ded069b5efa5a0a325c6f5806",
          "body": "… (Sprint 8)\n\nskill_init and scoped skill_learn now end with a compact primer: 2 identity\nlines, top-5 preferences, THIS workspace's project facts (per-project file\nwith projects.md fallback), and the last-7-days journal. ~800-token cap,\nper-file ACL-gated for remote peers, AUXLY_PRIMER=off to disable.",
          "is_bot": false,
          "headline": "feat(mcp): session primer — auto-recall grounding on skill_init/learn…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T01:38:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "025f945f99f4a384b4e50ada442e2ba172c4097d",
          "body": "…d 'was:' trace (Sprint 7)\n\nA new fact scoring ≥0.75 cosine against an existing fact in the SAME target\nfile rewrites the append into delete-old + add-new-with-trace, before trust\nrouting: require_approval agents review the REPLACE in pending, auto trust\naudits old→new. Bails to plain append on AUXLY_SUPERSEDE=off, embeddings\ndown, recall failure, or no similar fact — never destructive without trace.",
          "is_bot": false,
          "headline": "feat(memory): write-time supersede — contradictions REPLACE with date…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T01:36:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d4f4509327c1cea90ec7da443893ac437c367b9",
          "body": "Bracket-aware IPv6 in parseHostSpec (ambiguous bare IPv6 rejected with the\nbracketed hint), curl preflight before curl|sh names the real failure,\nssh-copy-id failure falls back to the manual authorized_keys append (was a\ndead end through ProxyJump), return-path guidance leads with enabling sshd\non t\n[…]\nEP:<step>:<state> machine lines from the connect flow; the TUI bar\nsnaps on the stable contract first (fuzzy human-line matching kept for\nolder binaries) and hides the machine lines from the log pane.",
          "is_bot": false,
          "headline": "feat(remote): sharp edges + real progress contract (Sprint 5.6 part 2)",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T01:33:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "324e42217eb29ebd74a324ed9f5d84af95810472",
          "body": "…emory link + end-to-end selftest (Sprint 5.6 part 1)\n\n`auxly connect <box>` now does what the relay flow does: authorizes the\nbox's key here, records the client, and wires the box's agents to THIS\nmachine's memory over the return address checkTwoWay proved (defect D1).\nThe old standalone-vault beha\n[…]\nin|\nserver|read, 10s cap. Adopted as the single truth signal: both provisioning\nflows end with a proving read, `host clients` gains a LINK column, doctor\nprobes each remote profile (offline in tests).",
          "is_bot": false,
          "headline": "feat(remote): seamless-connect core — direct provisioning wires the m…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T01:28:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "58c21016bd5b42a23b706bfebe2d36d2a993efdc",
          "body": "…st_bin chain, link guard (Sprint 5.5 partial)\n\nsuperviseTunnel: escalating 5s→30s→2m→10m backoff (reset when a tunnel\nheld), one audit entry after 5 straight failures with the real ssh error,\none-shot stale reverse-port cleanup on the relay. selfHealKeepAlive on\nTUI/MCP start (cross-process locked)\n[…]\nhed carry a\nMEMORY LINK LOST banner; deliberate disconnects clear the history. `host\nclients` is now a probed health table and lists self-connected boxes from\nthe audit trail instead of ignoring them.",
          "is_bot": false,
          "headline": "feat(remote): self-healing core — keep-alive, reconciler, backoff, ho…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T01:18:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a83653be9c5b215e3eb88039ed99c9128d30411c",
          "body": "…rust changelog (Sprint 5)\n\nWriteFrom records the queueing agent in frontmatter (control-char gated);\nInfo parses agent/target/created/± for the new `auxly pending` table.\nSweepExpired archives >TTL entries to .pending/archive/ under the vault\nlock, invoked only from explicit surfaces — never List (\n[…]\nd archive an entry mid-apply). Bulk --all/--agent/\n--file with normalized target matching; --force is single-entry only, so a\nbulk run can never silently drop newer edits. Trust changes audit old→new.",
          "is_bot": false,
          "headline": "feat(pending): agent attribution, TTL archive, bulk approve/reject, t…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T01:18:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cacb8badd875b456a492e59fe4312a5f883400c6",
          "body": "…ct sub-files (Sprints 4+6)\n\nRecall: reused index handle (identity-checked vs on-disk DB so a rebuild\nforces reopen), vault-signature refresh skip (recorded only after a fully\nclean pass and outside the coarse-mtime guard window), raw-cosine floor 0.35\n(AUXLY_RECALL_MIN_SCORE; all-below-floor falls \n[…]\n(ranking only, clamped for future mtimes).\n\nProjects: directory-backed category — List/View/organize/index see\nprojects/<slug>.md; workspace slug routing via ProjectFile; parent dirs\ncreated on write.",
          "is_bot": false,
          "headline": "feat(memory): recall fast-path + relevance floor + recency, per-proje…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T01:18:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b4ddd956f4adefcc53f0fa644dc00b441e40da18",
          "body": "…book (Sprint 10 staging)\n\nbinary_signs no-ops until SIGNPATH_API_TOKEN exists in CI, so releases are\nunchanged until the SignPath Foundation OSS application is approved.\nRELEASING.md carries the human runbook: SignPath application, per-release\nWDSI submissions, winget manifest.",
          "is_bot": false,
          "headline": "feat(release): dormant SignPath Authenticode hook + Windows trust run…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T01:04:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47ade7c2dd76c3d3223c186d4e883f4444d61740",
          "body": "…N dedup already shipped in a prior release)",
          "is_bot": false,
          "headline": "feat(tui): windsurf brand card (Sprint 3.5 — grid cap, remote tick, ×…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T00:28:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "063bd533442a1002e52c1ced9c4ba7c4bc9868fd",
          "body": "…, truthful setup, Windsurf target (Sprint 3)\n\n- New `auxly doctor`: one-screen health check (init, vault, pending queue,\n  semantic-index freshness incl. WAL sidecars, per-agent MCP wiring, trust\n  levels, update status incl. never-checked state) with a fix hint per issue\n- New `auxly agents`: live\n[…]\nsetup never creates a phantom sibling\n  layout; detection matches exactly what wiring can reach\n- Kimi Code CLI + Trae IDE added to detection (had wiring targets but were\n  invisible to agents/doctor)",
          "is_bot": false,
          "headline": "feat(cli): onboarding UX — doctor, agents, complete help, init guards…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-02T00:22:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "699b7820bf6b62be9d90bb0e1642bdaeda26eac6",
          "body": "…rint 2)\n\n- Per-file chunked organize: vaults over ~12K est. tokens (env\n  AUXLY_ORGANIZE_CHUNK_TOKENS) run one model call PER FILE instead of one\n  whole-vault payload — organize now scales to any vault size. Cross-file\n  re-classification flows through `moves` flags + a mechanical routing pass\n  (\n[…]\ndelete the\n  fact); headless chunked organize reports per-file progress\n- cmd/write.go auto-trust path now writes under the vault lock with an\n  atomic write (was raw os.WriteFile, missed in Sprint 1)",
          "is_bot": false,
          "headline": "feat(memory): organize scale + fuzzy dedup + lazy unified compile (Sp…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-01T23:31:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0b64cf0265913d00b036000d67b8dd93f2b17295",
          "body": "…onflict detection, fact-loss guard (Sprint 1)\n\n- AtomicWriteFile (temp+fsync+rename) replaces every raw os.WriteFile of\n  vault/pending content: a kill mid-write can never truncate a memory file\n- LockVault: per-root in-process mutex + O_EXCL .lock file with mtime\n  heartbeat and 30s stale takeover\n[…]\n shows the warning during review\n- ApplyOrganizeChanges skips files edited during the LLM planning window\n  instead of silently overwriting them; bare \"-\" diff lines no longer strip\n  every blank line",
          "is_bot": false,
          "headline": "feat(memory): data-safety core — atomic writes, cross-process lock, c…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-07-01T23:08:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cab70e48c78d99994b447e90fadf27672b797938",
          "body": "…r false positives\n\nWindows Defender/SmartScreen heuristically flag the unsigned auxly.exe as\nmalware (generic Wacatac/Wacapew-style detections), scaring users off install.\nAn unsigned binary that still carries proper PE version-info (CompanyName,\nProductName, version, copyright) scores far lower on\n[…]\nhe syso embeds the metadata (UTF-16LE strings present in\nthe PE), build WITHOUT it does not. First free step ahead of Authenticode\nsigning; pairs with per-release Microsoft false-positive submissions.",
          "is_bot": false,
          "headline": "feat(windows): embed PE version-info in release exe to reduce Defende…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-23T00:31:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b5e2f7e3df16ca253c78dca30656f59107777874",
          "body": "…ON to 1.1.5\n\nMemory Organize hung or failed with CLI agents. Org code was unchanged since\n1.1.2 — newer agent CLIs changed behavior: they narrate ('Let me read the\nfiles…', 'the input was truncated, I'll use the MCP tools') instead of emitting\nJSON, breaking the parser ('invalid character L'), or r\n[…]\nise default organize timeout 600s -> 900s (AUXLY_ORGANIZE_TIMEOUT override).\n\nVerified end-to-end on the real vault: claude 353s/8 files, gemini 106s/9,\ncodex/agy/cursor valid JSON; all under timeout.",
          "is_bot": false,
          "headline": "fix(organize): make Memory Org work across all CLI agents; bump VERSI…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-17T03:29:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c9e04ff03986b9916c4bbfa8523c99c2f89067ed",
          "body": "… to 1.1.4\n\ninstallAuxlySkills wrote SKILL.md folders only for Claude/Codex/Gemini, so\nKimi got the MCP server but none of the slash commands. Kimi additionally\nrequires the skills dir to be registered in extra_skill_dirs (config.toml) —\nfiles alone aren't discovered. Setup now writes all Auxly skil\n[…]\n and auxly connect, so installs wire automatically.\n\nValidated live: kimi -p lists all 10 auxly-* skills; kimi doctor reports\nconfig.toml valid; idempotent on re-run; unit tests in setup_kimi_test.go.",
          "is_bot": false,
          "headline": "feat(kimi): auto-install Auxly skills for Kimi Code CLI; bump VERSION…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-16T00:43:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ce22db4d7540a8208e766d6ffb03ee8f1e353be5",
          "body": "….1.3\n\n`auxly update` (and the dashboard [U] update) now detect a package-manager\nvendored binary and redirect to the owning manager instead of attempting an\nin-place self-replace that the manager would clobber — and that failed with\n\"Access is denied\" on a locked Windows .exe:\n- npm: node_modules/a\n[…]\nirm .../cli.ps1 | iex` instead of the Unix `curl | sh`). Adds detection unit\ntests. Path classifier normalizes backslashes explicitly so it works regardless\nof host OS. macOS/Linux behavior unchanged.",
          "is_bot": false,
          "headline": "feat(update): npm/pip-aware update + OS-aware hint; bump VERSION to 1…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-15T12:37:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6633413f7f0d36a4f19fc977ef8c973b509be661",
          "body": null,
          "is_bot": false,
          "headline": "style: gofmt quote_test.go (fix CI gofmt gate)",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-15T12:21:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16dc8aa51369d8dc1debad3da94b117ae24ee475",
          "body": null,
          "is_bot": false,
          "headline": "docs(release): v1.1.2 — README What's New + CHANGELOG (Windows fixes)",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-15T12:12:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f59a45d6534e031fe0439f5ebc8cf159e5162a68",
          "body": null,
          "is_bot": false,
          "headline": "chore(release): bump VERSION to 1.1.2 (Windows fixes)",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-15T12:07:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a624c0311ccef8d38feb8af77f29714e058eeb3",
          "body": "Claude Code on Windows runs statusLine.command through a POSIX shell (sh/bash\nvia Git Bash), where backslashes in a Windows path (C:\\Users\\...) are escape\ncharacters that mangle the path → the command silently fails and the statusline\nrenders BLANK, even though the exe runs fine when invoked directly. Normalize\nthe exe path to forward slashes on Windows (accepted by cmd.exe, PowerShell, and\nsh alike). GOOS-gated; macOS/Linux unchanged.",
          "is_bot": false,
          "headline": "fix(windows): forward-slash exe path in statusline command",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-15T11:34:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e346f695fea80d9225b9d9be0bc86dfc1d08c15",
          "body": "… more\n\nWindows-focused fixes. All GOOS-gated or via existing cross-platform helpers,\nso macOS/Linux behavior is unchanged. Builds on host/windows/linux; vet + full\ntest suite green; adds quote + snapshot unit tests.\n\n- setup: route Windows IDE config paths through detect.AppSupportDir so an\n  empty\n[…]\n\n  (correct PATH ';' separator + PATHEXT).\n- update: SelfUpdate and dev-mode `auxly update` rename the locked running .exe\n  aside on Windows instead of os.Rename-ing over it (which fails on Windows).",
          "is_bot": false,
          "headline": "fix(windows): MCP config, statusline, MCP stability, dashboard perf +…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-15T10:51:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fcd4e1e81fbbda0d38bbc6cd2ccd11eb550ede49",
          "body": null,
          "is_bot": false,
          "headline": "chore(release): bump VERSION to 1.1.1",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-10T01:33:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "686db2681f4fb9540049f718c094e209c6b925ce",
          "body": "[r] Reconnect failed for every box with \"ssh auxly connect auto: exit\nstatus 1\" whenever this machine's reverse tunnel was down — i.e. exactly\nwhen reconnect is needed. Three causes, three fixes:\n\n- host_clients: runHostReconnect now calls ensureHostTunnelUp() first,\n  starting the keep-alive (== `a\n[…]\nl returns.\n- tui/ssh: host indicator no longer shows a false \"● serving\" over dead\n  tunnels; hostTunnelsLive() (pgrep ssh -R) drives an honest\n  \"● tunnels down\" + \"⚠ no reverse tunnel running\" hint.",
          "is_bot": false,
          "headline": "fix(host): reconnect self-heals a downed reverse tunnel",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-10T01:14:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "02521091137f29697fc2ee42340c67ffb1529e76",
          "body": null,
          "is_bot": false,
          "headline": "chore: gitignore PROPOSALS.md and auxly-installs.sh",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-09T11:38:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e40f835b72ae86bea7bd4d10bd4ab6093f39f07d",
          "body": "Semantic recall: auxly_memory_recall MCP tool finds relevant memory by\nmeaning using cosine similarity over a local SQLite BLOB vector index.\nChunks by heading, ACL-enforced at load + render, offline-safe circuit\nbreaker falls back to substring search when no embedder is available.\nCloud embedding o\n[…]\ny (~225 tokens), saving\n~100 k tokens across a typical /auxly-max session.\n\nAlso: prune orphaned chunks + WAL, gate cloud embeds on effective host,\nfix SSH connect-wizard viewport repaint on keypress.",
          "is_bot": false,
          "headline": "chore(release): v1.1.0 — semantic recall + MCP token optimization",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-09T10:22:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e2e63b277d82b4dfe3f20367b04c302003c4aa3d",
          "body": "Pre-existing bug (TestSSHWizardRepaintsInViewport, failing on the base\ncommit): the SSH connect wizard renders at the bottom of ssh.View(), but\nthe content viewport stayed pinned at the top, so a wizard keypress (e.g.\nselecting a method) updated state while the visible top rows never changed\n— a stale frame. Pin the viewport to the bottom (GotoBottom) on the wizard\nearly-return and delegation paths whenever editingHost is active.",
          "is_bot": false,
          "headline": "fix(tui): repaint SSH connect-wizard viewport on keypress",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-07T03:13:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a40c0b9e224fabe166df6c7e64417ae52ff3062c",
          "body": "Review finding (Antigravity CRITICAL): refreshIndex only iterated the files\ncurrently in List(), so a DELETED file's chunks — or a global file's chunks\nonce a workspace file of the same name SHADOWS it — were never pruned and\nkept surfacing in recall (stale/hidden content reaching a remote peer).\nre\n[…]\n.\n\nReview finding (Antigravity HIGH): per-call index writes across multiple MCP\nprocesses hit 'database is locked'. OpenIndex and OpenIndexReadOnly now set\nPRAGMA journal_mode=WAL + busy_timeout=5000.",
          "is_bot": false,
          "headline": "fix(memory): prune orphaned/shadowed chunks + enable WAL",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-07T03:10:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ca01aa8226b3ad93a9722a4dea0c8c68c2946bad",
          "body": "…-flight\n\nReview finding (Codex CRITICAL/HIGH, security LOW-1): the cloud-exfiltration\ngate keyed off llm.ResolveEndpoint().IsCloud, so AUXLY_EMBED_ENDPOINT /\nAUXLY_LLM_BASE / OLLAMA_HOST pointed at a cloud URL stayed enabled without\nopt-in and could silently upload the whole vault. Now classify the\n[…]\ny LOW): make the breaker half-open single-flight so a\nburst of concurrent callers doesn't stampede a dead endpoint — only the first\npost-cooldown caller retests; its success closes / failure re-opens.",
          "is_bot": false,
          "headline": "fix(embed): gate cloud uploads on effective URL host + breaker single…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-07T03:10:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a044d62d7de3826f691841607fd64115d51ff976",
          "body": "Add 'auxly index rebuild' (wipe + full re-embed, skips unified_memory.md)\nand 'auxly index status' (read-only: provider, model, dim, chunk count;\nreports 'not built' without creating the DB). Backed by Store.RebuildIndex\nand Store.IndexStatus, plus Index.Count and OpenIndexReadOnly (reads stored\nmeta without the reconcile-wipe). Gitignore .index/ and *.embeddings.db so\nthe derived cache is never committed.",
          "is_bot": false,
          "headline": "feat(cli): auxly index rebuild/status + gitignore the index",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-07T02:58:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5402a556740f9994cb4203ff1f81e732fd33daad",
          "body": "When the embedding provider is down, a process-global breaker short-\ncircuits recall to substring without paying the ~1.3s probe+timeout on\nevery call. Opens on a request failure (transport/timeout/non-200/decode/\nempty), auto half-opens after a 60s cooldown to retest, closes on success.\nNew() takes\n[…]\nn; Embed()\nfails fast with ErrUnavailable and records failure/success around the\nrequest. The cloud-gate path never trips the breaker (config, not outage).\nClock is injectable for deterministic tests.",
          "is_bot": false,
          "headline": "feat(embed): per-process circuit breaker for fast offline fallback",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-07T02:54:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "11595612391a4e76f59a7db0697a498546cb6d0d",
          "body": "…ak guards\n\nSemantic recall over the vault: embed the query, incrementally refresh\nthe SQLite vector index (skipping unified_memory.md), cosine top-K, and\nreturn hits. New auxly_memory_recall MCP tool — auxly_memory_search stays\nexact substring.\n\nPrivacy is triple-guarded. unified_memory.md (the all\n[…]\nmory.md never surface to a remote peer, an explicit grant\nis honored, and the offline path matches substring search. Pre-existing\nTestRemoteSearch_DoesNotLeakPersonal and the sharing suite still pass.",
          "is_bot": false,
          "headline": "feat(recall): Store.Recall + auxly_memory_recall MCP tool with ACL le…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-07T02:50:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cec9c984883e471765758802f7b8a3d2de341f13",
          "body": "TopK ranks ACL-filtered IndexedChunks by cosine similarity to a query\nvector. Dot product and norms accumulate in float64 for stability;\nquery norm computed once; zero-norm vectors score 0 (no divide-by-zero);\ndim-mismatched candidates are skipped. Deterministic tie-break by\nScopeKey then Hash. O(n) brute force — sub-ms at vault scale, no ANN dep.",
          "is_bot": false,
          "headline": "feat(memory): brute-force cosine top-K search",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-07T02:43:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e13ce2cecd355196f5f33a6a127d4316b3ae82e4",
          "body": "internal/memory.Index persists chunk embeddings in a pure-Go modernc\nSQLite sidecar. Vectors are stored as little-endian float32 BLOBs\n(encoding/binary), keyed by (scope_key, hash) for incremental upserts\nthat skip unchanged chunks. IndexMeta versions provider+model+dim+\nembed-format+chunker; any mi\n[…]\ne never scored. Load(allow) takes an ACL pre-filter hook so\nPhase 2 can avoid even loading unshared vectors. PruneExcept removes\nchunks deleted from source files. Mirrors the audit.go modernc pattern.",
          "is_bot": false,
          "headline": "feat(memory): SQLite BLOB vector index with versioned metadata",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-07T02:40:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ef601af26e21253986c796dd8090b45c6cae748b",
          "body": "ChunkMarkdown splits a vault file into heading + bullet/paragraph groups,\neach carrying File, Heading, Text, 1-based LineStart/LineEnd, and a\nsha256 Hash for incremental re-embedding. Deterministic and CRLF-safe;\nempty/whitespace groups are never emitted.",
          "is_bot": false,
          "headline": "feat(memory): markdown chunker with content hashing",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-07T02:35:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a97afbbc308524c99a3338ff201e4797465b1e0",
          "body": "…meout\n\ninternal/embed.Client embeds text via an OpenAI-compatible /v1/embeddings\nendpoint, reusing internal/llm's resolver. Strict privacy gate:\nenabled = !IsCloud || AUXLY_EMBED_ALLOW_CLOUD==1 — a cloud endpoint\n(OpenAI/Gemini) is DISABLED unless explicitly opted in, so the default\nnever uploads t\n[…]\ncallers to fall back to substring search. Embedding model defaults\nnomic-embed-text (local) / text-embedding-3-small (cloud), overridable\nvia AUXLY_EMBED_MODEL; AUXLY_EMBED_ENDPOINT overrides the URL.",
          "is_bot": false,
          "headline": "feat(embed): local-only embedding client with cloud opt-in + 500ms ti…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-07T02:35:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "668e132bc7dca2cf1c9c9305a5f3019ed62ca06b",
          "body": "Move organize.go's inline base-URL/key/model resolution + self-healing\nmodel selector into a reusable internal/llm package (ResolveEndpoint,\nEndpoint.ChatURL/EmbeddingsURL/ModelsURL, SelfHealModel). The new\nEmbeddingsURL builder + IsCloud flag are the foundation internal/embed\nwill reuse to call /v1\n[…]\nrecedence\n(OpenAI > Gemini > OLLAMA_HOST > AUXLY_LLM_BASE > probe:8000 > Ollama\ndefault), same loopback-only :8000 probe, same 300s request timeout and\njson_object response format kept in organize.go.",
          "is_bot": false,
          "headline": "feat(llm): extract shared OpenAI-compatible endpoint resolver",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-07T02:32:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9c0d33528ff3510d057fb678609d00b8e62052b0",
          "body": "The earlier commit captured only .dockerignore; add the Dockerfile itself\nso Glama can build + introspect the server.\n\n- Multi-stage golang:1.26-alpine, CGO_ENABLED=0 (pure-Go modernc sqlite)\n- non-root user, AUXLY_MEMORY_PATH=/data (boots with an empty vault)\n- ENTRYPOINT auxly mcp-server (stdio, same entry Claude Desktop uses)\n- Verified locally: container returns serverInfo + 16 tools",
          "is_bot": false,
          "headline": "chore(mcp): add Dockerfile for Glama MCP server listing",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-07T01:05:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb7306745a202895c41d20f77d36c835e0119f5f",
          "body": null,
          "is_bot": false,
          "headline": "chore(mcp): add Dockerfile for Glama MCP server listing",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-07T01:02:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "650b93a814d2add7e20ee9251cf13aa024282cb1",
          "body": "…v1.0.22)\n\nA long list of connected remote boxes pushed the dashboard into compact mode:\neach remote takes two lines in the full layout, so a handful of boxes made the\nleft column tall enough to drop the Memory-by-Category bars and the Recent\nMemory Changes feed (stripped layout with empty space bel\n[…]\nndowing, overflow affordance, bounded panel height, full layout\n  stays uncompacted with 20 remotes, and J/K + Ctrl + PgUp/PgDn scrolling.\n\nBumps VERSION + update.Current + npm/pip versions to 1.0.22.",
          "is_bot": false,
          "headline": "feat(tui): scrollable Active Connections panel; keep dashboard rich (…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-06T22:02:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "03d574aad7e39cd2e61f9a6b5c41e048cec14be2",
          "body": "Document the auxly-cli npm and pip wrapper packages (published in v1.0.21)\nin the Install section. Both notes describe the strict-by-default signature\nverification the wrappers perform and the AUXLY_ALLOW_UNSIGNED opt-out.",
          "is_bot": false,
          "headline": "docs: add npm and pip install instructions to README",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-06T15:13:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f3c066563b9f651bf898245667c98d56f0f11e3",
          "body": "The public repo's test workflow gofmt-gates, which my local checks don't run, so\nthese slipped through on v1.0.20/v1.0.21 (red X on the release commit — cosmetic,\nthe goreleaser + publish-packages jobs and the npm/PyPI publish all succeeded).\nFormatting only; no behavior change.",
          "is_bot": false,
          "headline": "style: gofmt mcp/server.go + connect_validate_test.go",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-06T15:03:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d024a388d552ea0066009ecce208adbf27208edc",
          "body": "On Apple Silicon a copied/rewritten Go binary carries an invalid ad-hoc code\nsignature and the kernel SIGKILLs it on launch ('zsh: killed', exit 137). The\ndev-mode rebuild wrote the new binary but never re-signed it, so 'auxly update'\non a Mac produced a binary that wouldn't run. Now codesign --force --sign - the\ninstalled binary on darwin (release binaries are CI-signed; this only affects the\nlocal dev rebuild).",
          "is_bot": false,
          "headline": "fix(update): re-sign the dev binary on macOS so it isn't SIGKILL'd",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-06T14:54:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ac6a8e143c5b9f21cbf668892e7fd8df46b73bf",
          "body": "Bumps VERSION, internal/update.Current (was stale 1.0.19), and the npm/pip\npackage versions to 1.0.21 so they stay in lockstep with the release the wrappers\ndownload (closes the version-drift item from the Codex review). CHANGELOG gets a\n[1.0.21] entry: npm + pip channels, non-manifest-200 staged skip, installers\nhonor AUXLY_REQUIRE_SIGNATURE, dev-mode update fix.",
          "is_bot": false,
          "headline": "chore(release): bump to 1.0.21 + CHANGELOG (npm/pip + install hardening)",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-06T14:28:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd6f2e8a0d06ee537a3979e431ee504465510636",
          "body": "…strict in installers\n\nCodex confirmed the minisign crypto is sound (not forgeable); these close the\npolicy findings:\n- npm + pip wrappers now REQUIRE verification by default (they are version-locked\n  to a signed release, so a missing/junk manifest aborts instead of silently\n  installing unverified\n[…]\nes a checksum-only install instead of proceeding.\n- pip binary cache dir is chmod 0700 so another local user can't pre-place/swap\n  the cached binary that gets exec'd without re-fetching the manifest.",
          "is_bot": false,
          "headline": "fix(dist): address Codex review — strict-by-default wrappers + honor …",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-06T14:26:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "559398114521f4349a61b9bab8b409069023475e",
          "body": null,
          "is_bot": false,
          "headline": "chore: gitignore __pycache__",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-06T14:21:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c8ad6cfa7f426fd23d9a75fcfb2c31f398649d9",
          "body": "New publish-packages job (needs: goreleaser, public-repo-guarded) sets each\npackage's version from the tag and publishes auxly-cli to npm (NPM_TOKEN) and\nPyPI (PYPI_API_TOKEN). Runs after goreleaser so the release assets + signed\nmanifest the wrappers download already exist.",
          "is_bot": false,
          "headline": "ci(release): publish npm + pip wrappers after the signed release",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-06T14:20:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb12c879779cc1f62dabcda453ca61aa46342d68",
          "body": "Thin wrappers that download the prebuilt auxly binary for the platform and\nverify it against the minisign-signed checksum manifest before use — same trust\nanchor (pinned pubkey) as the native installers + self-update.\n\n- npm/ (auxly-cli): postinstall downloads auxly-<os>-<arch> for the package\n  ver\n[…]\nested against the LIVE v1.0.20 release:\n  real signature verifies, tampered manifest + absent hash rejected, end-to-end\n  install+run reports 1.0.20. AUXLY_REQUIRE_SIGNATURE=1 hardens the staged path.",
          "is_bot": false,
          "headline": "feat(dist): npm + pip wrapper packages (Phase 7, signature-verified)",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-06T14:19:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "72f31fd48cc999a207b4b0abaf6cc948fbe141e4",
          "body": "My staged-verify design assumed a 404 for an absent manifest, but a CDN can\nanswer 200 with an SPA/HTML page (auxly.io's /dl did exactly this for the first\nsigned release, fail-closing new installs). Now verify.go + both installers\ncontent-sniff the manifest (must have a 64-hex checksum line) and th\n[…]\nmment:'); a bogus 200 is treated as absent so the\nstaged fallback applies instead of fail-closing. AUXLY_REQUIRE_SIGNATURE=1 still\nrejects it. Tests: Non404SpaPageIsStaged + LooksLikeChecksumManifest.",
          "is_bot": false,
          "headline": "fix(install): treat a non-checksum 200 as absent → staged skip",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-06T14:18:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "72de31398b1bc01d84af77fe0558d56ac64069bb",
          "body": "…g binary\n\nTwo dev-mode 'auxly update' bugs:\n- It cd'd into a hardcoded 'auxly-cli' subdir that no longer exists (main package\n  is at the repo root now) -> 'chdir .../auxly-cli: no such file or directory'.\n  Now locates go.mod across {wd, wd/auxly-cli, wd/..} and builds there.\n- It installed the re\n[…]\n~/.bun/bin/auxly) rebuilt fine but kept\n  running the stale binary. Now installs over os.Executable() (EvalSymlinks'd),\n  falling back to ~/.local/bin/auxly only if the running path can't be resolved.",
          "is_bot": false,
          "headline": "fix(update): dev-mode rebuild finds go.mod + installs over the runnin…",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-06T14:12:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4fd1c632d2dc1a4a6e209b095f9203dc63a70ee4",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump VERSION to 1.0.20",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-06T13:23:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f75028b2f95b4c90d0dbd5f3a7e78514d6f071b6",
          "body": "CHANGELOG: new [1.0.20] entry — Security section (server-side provider identity,\nhuman-only pending approval, safepath traversal/symlink guard, SSH arg+host-bin\nvalidation, minisign-signed/verified releases + self-update, tightened file\nperms) and Fixed section (persisted post-429 cooldown so the statusline usage\nmeter stops freezing).\n\nREADME: 'What's New' switched to 1.0.20 with the security highlights + the\nstatusline usage fix; prior 1.0.19 Windows content now referenced via CHANGELOG.",
          "is_bot": false,
          "headline": "docs: draft v1.0.20 release notes (security hardening + usage fix)",
          "author_name": "Wael Samoum",
          "author_login": "waeils",
          "committed_at": "2026-06-06T13:02:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 38,
      "commits_last_year": 227,
      "latest_release_at": "2026-07-08T10:16:14Z",
      "latest_release_tag": "v1.4.3",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 7,
      "days_since_latest_release": 19,
      "mean_days_between_releases": 0.4
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 87,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/Tzamun-Arabia-IT-Co/auxly-memory-cli",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/Tzamun-Arabia-IT-Co/auxly-memory-cli",
          "is_deprecated": false,
          "latest_version": "v1.4.3",
          "repository_url": "https://github.com/Tzamun-Arabia-IT-Co/auxly-memory-cli",
          "versions_count": 43,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-08T10:13:04Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 19
        },
        {
          "name": "auxly-cli",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "auxly",
            "ai",
            "memory",
            "mcp",
            "cli",
            "agents"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/auxly-cli",
          "is_deprecated": false,
          "latest_version": "1.4.3",
          "repository_url": "https://github.com/Tzamun-Arabia-IT-Co/auxly-memory-cli",
          "versions_count": 23,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 3994,
          "first_published_at": "2026-06-06T14:52:05.380000Z",
          "latest_published_at": "2026-07-08T10:16:28.742000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 19
        },
        {
          "name": "auxly-cli",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "auxly",
            "ai",
            "memory",
            "mcp",
            "cli",
            "agents"
          ],
          "ecosystem": "pypi",
          "matches_repo": true,
          "registry_url": "https://pypi.org/project/auxly-cli/",
          "is_deprecated": false,
          "latest_version": "1.4.3",
          "repository_url": "https://github.com/Tzamun-Arabia-IT-Co/auxly-memory-cli",
          "versions_count": 23,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 2199,
          "first_published_at": "2026-06-06T14:52:16.186188Z",
          "latest_published_at": "2026-07-08T10:16:38.795688Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 19
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 2,
      "watchers": 1,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": true,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 103657,
      "source_files_sampled": 316,
      "oversized_source_files": 7,
      "agent_instruction_files": [
        "templates/CLAUDE.md",
        "templates/GEMINI.md"
      ],
      "agent_instruction_max_bytes": 5971
    },
    "dependencies": {
      "manifests": [
        "go.mod",
        "npm/package.json",
        "pip/pyproject.toml"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.52.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 19
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.37.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 12
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 2
        },
        "advisory_count": 2,
        "affected_count": 2,
        "assessed_count": 40,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 2,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "go",
        "npm",
        "pypi"
      ],
      "dependencies": [
        {
          "name": "filippo.io/age",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.1"
        },
        {
          "name": "github.com/charmbracelet/bubbles",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.21.0"
        },
        {
          "name": "github.com/charmbracelet/bubbletea",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.10"
        },
        {
          "name": "github.com/charmbracelet/lipgloss",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.0"
        },
        {
          "name": "github.com/creack/pty",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.24"
        },
        {
          "name": "github.com/google/uuid",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/jedisct1/go-minisign",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20260527172527-a09352b57a22"
        },
        {
          "name": "github.com/mattn/go-runewidth",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.16"
        },
        {
          "name": "github.com/muesli/reflow",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.3.0"
        },
        {
          "name": "github.com/muesli/termenv",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.16.0"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.52.0"
        },
        {
          "name": "golang.org/x/sys",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.45.0"
        },
        {
          "name": "golang.org/x/term",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.43.0"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "modernc.org/sqlite",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.51.0"
        },
        {
          "name": "cryptography",
          "manifest": "pip/pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=3.4"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "filippo.io/age",
            "direct": true,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/bubbles",
            "direct": true,
            "version": "v0.21.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/bubbletea",
            "direct": true,
            "version": "v1.3.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/lipgloss",
            "direct": true,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/creack/pty",
            "direct": true,
            "version": "v1.1.24",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": true,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jedisct1/go-minisign",
            "direct": true,
            "version": "v0.0.0-20260527172527-a09352b57a22",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": true,
            "version": "v0.0.16",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/reflow",
            "direct": true,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/termenv",
            "direct": true,
            "version": "v0.16.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.52.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": true,
            "version": "v0.45.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": true,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": true,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/sqlite",
            "direct": true,
            "version": "v1.51.0",
            "ecosystem": "go"
          },
          {
            "name": "cryptography",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "filippo.io/hpke",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/atotto/clipboard",
            "direct": false,
            "version": "v0.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aymanbagabas/go-osc52/v2",
            "direct": false,
            "version": "v2.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/colorprofile",
            "direct": false,
            "version": "v0.2.3-0.20250311203215-f60798e515dc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/ansi",
            "direct": false,
            "version": "v0.10.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/cellbuf",
            "direct": false,
            "version": "v0.0.13-0.20250311204145-2c3ea96c31dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/term",
            "direct": false,
            "version": "v0.2.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/dustin/go-humanize",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/erikgeiser/coninput",
            "direct": false,
            "version": "v0.0.0-20211004153227-1c3628e74d0f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lucasb-eyer/go-colorful",
            "direct": false,
            "version": "v1.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-isatty",
            "direct": false,
            "version": "v0.0.20",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-localereader",
            "direct": false,
            "version": "v0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/ansi",
            "direct": false,
            "version": "v0.0.0-20230316100256-276c6243b2f6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/cancelreader",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ncruces/go-strftime",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/remyoudompheng/bigfft",
            "direct": false,
            "version": "v0.0.0-20230129092748-24d4a6f8daec",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rivo/uniseg",
            "direct": false,
            "version": "v0.4.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.9",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xo/terminfo",
            "direct": false,
            "version": "v0.0.0-20220910002029-abceb7e1c41e",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/libc",
            "direct": false,
            "version": "v1.72.3",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/mathutil",
            "direct": false,
            "version": "v1.7.1",
            "ecosystem": "go"
          },
          {
            "name": "modernc.org/memory",
            "direct": false,
            "version": "v1.11.0",
            "ecosystem": "go"
          },
          {
            "name": "setuptools",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 42,
        "direct_count": 17,
        "indirect_count": 25
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 2,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 1,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "waeils",
          "commits": 227,
          "avatar_url": "https://avatars.githubusercontent.com/u/216352563?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "metrics.yml",
        "release.yml",
        "test.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 9,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 5,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 3,
            "reason": "project has 1 contributing companies or organizations -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 8,
            "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 8,
            "reason": "2 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "ec273ce4690d88525a4b7b8ca4d1f0dfe0f376e6",
        "ran_at": "2026-07-27T17:24:04Z",
        "aggregate_score": 4.5,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-27T07:28:54Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-06-01T10:23:48Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/Tzamun-Arabia-IT-Co/auxly-memory-cli",
    "host": "github.com",
    "name": "auxly-memory-cli",
    "owner": "Tzamun-Arabia-IT-Co"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 60,
      "inputs": {
        "security": 54,
        "vitality": 75,
        "community": 46,
        "governance": 56,
        "engineering": 66
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 75,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 59,
            "inputs": {
              "commits_last_year": 227,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 7
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "7/52 weeks with commits",
                "points": 4.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "227 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 227
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "releases_count": 38,
              "latest_release_tag": "v1.4.3",
              "releases_from_tags": false,
              "days_since_latest_release": 19,
              "mean_days_between_releases": 0.4
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "38 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 38
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 19 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 19
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.4 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 46,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 2,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "2 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 63,
            "inputs": {
              "packages": [
                "github.com/Tzamun-Arabia-IT-Co/auxly-memory-cli",
                "auxly-cli",
                "auxly-cli"
              ],
              "dependents": null,
              "ecosystems": "go, npm, pypi",
              "total_downloads": null,
              "monthly_downloads": 6193
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "6,193 downloads/month across go, npm, pypi",
                "points": 50.6,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 6193,
                      "ecosystems": "go, npm, pypi"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 56,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 13,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "merged_prs": 2,
              "open_issues": 0,
              "closed_issues": 1,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "2/2 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 2,
                      "decided": 2
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 43,
            "inputs": {
              "followers": 3,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "Tzamun-Arabia-IT-Co",
              "public_repos": 6,
              "account_age_days": 388
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "3 followers of Tzamun-Arabia-IT-Co",
                "points": 4.3,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 3,
                      "login": "Tzamun-Arabia-IT-Co"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "6 public repos, account ~1 yr old",
                "points": 8.3,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 6
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 1
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/Tzamun-Arabia-IT-Co/auxly-memory-cli",
                "auxly-cli",
                "auxly-cli"
              ],
              "ecosystems": "go, npm, pypi",
              "any_deprecated": false,
              "min_days_since_publish": 19
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "3 package(s) on go, npm, pypi",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 3,
                      "ecosystems": "go, npm, pypi"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 19 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 19
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "43 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 43
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 66,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 60,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "3 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [
                "ai-agents",
                "cli",
                "cli-tool",
                "mcp",
                "mcp-server",
                "developer-tools",
                "llm-tools",
                "local-first",
                "open-source",
                "privacy",
                "codex",
                "codex-cli",
                "antigravity",
                "claude",
                "golang"
              ],
              "has_wiki": true,
              "homepage": "https://auxly.io/unified-memory",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://auxly.io/unified-memory",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "15 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 54,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 45,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.5
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "2 existing vulnerabilities detected",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 40 resolved dependencies against OSV; 2 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 40
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 2
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 89,
            "inputs": {
              "source": "osv",
              "advisories": 2,
              "affected_packages": 2,
              "assessed_packages": 40,
              "unassessed_packages": 2,
              "affected_by_severity": "unknown 2",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: golang.org/x/crypto v0.52.0 (unknown)",
                "points": 26.6,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "golang.org/x/crypto v0.52.0 (unknown)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 40,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 68,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "templates/CLAUDE.md",
                "templates/GEMINI.md"
              ],
              "agent_instruction_max_bytes": 5971
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "templates/CLAUDE.md, templates/GEMINI.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "templates/CLAUDE.md, templates/GEMINI.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 100,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 61,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 103657,
              "source_files_sampled": 316,
              "oversized_source_files": 7
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "7/316 source files over 60KB",
                "points": 53.8,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 316,
                      "oversized": 7
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "critical",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T17:24:13.581692Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/Tzamun-Arabia-IT-Co/auxly-memory-cli.svg",
  "full_name": "Tzamun-Arabia-IT-Co/auxly-memory-cli",
  "license_state": "standard",
  "license_spdx": "MIT"
}