chore(deps): bump the minor-and-patch group with 50 updates

[dependabot]

Bumps the minor-and-patch group with 50 updates:

Package	From	To
@ai-sdk/react	3.0.205	3.0.210
@openrouter/ai-sdk-provider	2.9.0	2.9.1
ai	6.0.203	6.0.208
ox	0.13.2	0.14.29
@gitlawb/openclaude	0.14.0	0.19.0
turbo	2.9.14	2.9.18
@base-org/account	2.5.5	2.5.6
@base-ui/react	1.4.1	1.5.0
@coinbase/cdp-sdk	1.49.2	1.51.0
@opentelemetry/api-logs	0.57.2	0.219.0
@react-email/render	2.0.8	2.0.9
@sentry/nextjs	10.55.0	10.58.0
@tanstack/react-query	5.100.6	5.101.0
@upstash/redis	1.37.0	1.38.0
@vercel/blob	2.3.3	2.4.0
@vercel/sdk	1.19.40	1.27.0
@workflow/core	4.2.4	4.5.0
@worldcoin/agentkit	0.1.8	0.2.0
@x402/core	2.14.0	2.15.0
@x402/evm	2.14.0	2.15.0
@x402/express	2.11.0	2.15.0
@x402/extensions	2.12.0	2.15.0
@x402/next	2.14.0	2.15.0
ethers	5.7.2	5.8.0
geist	1.7.0	1.7.2
mppx	0.4.12	0.7.0
next	16.2.7	16.2.9
next-auth	4.24.12	4.24.14
pg	8.20.0	8.21.0
react-email	6.6.0	6.6.3
resend	6.12.4	6.14.0
shadcn	4.6.0	4.11.0
svix	1.95.1	1.95.2
tailwind-merge	3.5.0	3.6.0
three	0.183.2	0.184.0
viem	2.50.4	2.52.2
wagmi	3.6.16	3.6.17
workflow	4.2.4	4.5.0
zod	4.3.6	4.4.3
zustand	5.0.12	5.0.14
@playwright/test	1.59.1	1.61.0
@typescript-eslint/eslint-plugin	8.60.1	8.61.1
@typescript-eslint/parser	8.60.1	8.61.1
eslint-config-next	16.2.7	16.2.9
jest-environment-jsdom	30.3.0	30.4.1
postcss	8.5.10	8.5.15
@openrouter/sdk	0.10.2	0.13.7
@sentry/node	10.55.0	10.58.0
ts-jest	29.4.9	29.4.11
ws	8.20.1	8.21.0

Updates @ai-sdk/react from 3.0.205 to 3.0.210

Release notes

Sourced from @​ai-sdk/react's releases.

@​ai-sdk/react@​3.0.210

Patch Changes

• Updated dependencies [8261640]
• Updated dependencies [f994df3]
  • ai@6.0.208

@​ai-sdk/react@​3.0.209

Patch Changes

• Updated dependencies [779f5cd]
  • @​ai-sdk/provider-utils@​4.0.30
  • ai@6.0.207

Changelog

Sourced from @​ai-sdk/react's changelog.

3.0.210

Patch Changes

• Updated dependencies [8261640]
• Updated dependencies [f994df3]
  • ai@6.0.208

3.0.209

Patch Changes

• Updated dependencies [779f5cd]
  • @​ai-sdk/provider-utils@​4.0.30
  • ai@6.0.207

3.0.208

Patch Changes

• ai@6.0.206

3.0.207

Patch Changes

• ai@6.0.205

3.0.206

Patch Changes

• ai@6.0.204

Commits

• 3270146 Version Packages (#16243)
• caebb44 Version Packages (#16157)
• 5623117 Version Packages (#16134)
• 5548672 Version Packages (#16097)
• 63b3f60 Version Packages (#16086)
• See full diff in compare view

Updates @openrouter/ai-sdk-provider from 2.9.0 to 2.9.1

Release notes

Sourced from @​openrouter/ai-sdk-provider's releases.

2.9.1

What's Changed

• fix: send null content for tool-only assistant messages by @​robert-j-y in OpenRouterTeam/ai-sdk-provider#506
• Version Packages by @​github-actions[bot] in OpenRouterTeam/ai-sdk-provider#507

Full Changelog: OpenRouterTeam/ai-sdk-provider@2.9.0...2.9.1

Changelog

Sourced from @​openrouter/ai-sdk-provider's changelog.

2.9.1

Patch Changes

• #506 e9cff3a Thanks @​robert-j-y! - Send content: null instead of content: "" for assistant messages that contain only tool calls. Fixes AWS Bedrock Nova rejecting requests with "The text field in the ContentBlock object is blank."

Commits

• 07a98d6 Version Packages (#507)
• e9cff3a fix: send null content for tool-only assistant messages (#506)
• See full diff in compare view

Updates ai from 6.0.203 to 6.0.208

Release notes

Sourced from ai's releases.

ai@6.0.208

Patch Changes

• 8261640: fix(ai): handle partial unicode escapes in fixJson
• f994df3: Serialize undefined tool output to null in UI message chunks

ai@6.0.207

Patch Changes

• 779f5cd: fix(provider-utils): cancel response body on download rejection to prevent socket leak

  When a download was rejected early — because the Content-Length header exceeded the size limit, the response status was not ok, or a redirect resolved to a blocked URL — the fetch response body was left unconsumed and uncancelled. With WHATWG Fetch/undici this leaves the underlying TCP socket open instead of returning it to the connection pool, allowing an attacker-controlled origin to exhaust file descriptors and cause a denial of service. The body is now cancelled on all early-rejection paths in readResponseWithSizeLimit, download, and downloadBlob, and fetchWithValidatedRedirects cancels each redirect hop's body before following or rejecting the next hop.

• Updated dependencies [5bfde36]

• Updated dependencies [779f5cd]

  • @​ai-sdk/gateway@​3.0.133
  • @​ai-sdk/provider-utils@​4.0.30

Changelog

Sourced from ai's changelog.

6.0.208

Patch Changes

• 8261640: fix(ai): handle partial unicode escapes in fixJson
• f994df3: Serialize undefined tool output to null in UI message chunks

6.0.207

Patch Changes

• 779f5cd: fix(provider-utils): cancel response body on download rejection to prevent socket leak

  When a download was rejected early — because the Content-Length header exceeded the size limit, the response status was not ok, or a redirect resolved to a blocked URL — the fetch response body was left unconsumed and uncancelled. With WHATWG Fetch/undici this leaves the underlying TCP socket open instead of returning it to the connection pool, allowing an attacker-controlled origin to exhaust file descriptors and cause a denial of service. The body is now cancelled on all early-rejection paths in readResponseWithSizeLimit, download, and downloadBlob, and fetchWithValidatedRedirects cancels each redirect hop's body before following or rejecting the next hop.

• Updated dependencies [5bfde36]

• Updated dependencies [779f5cd]

  • @​ai-sdk/gateway@​3.0.133
  • @​ai-sdk/provider-utils@​4.0.30

6.0.206

Patch Changes

• Updated dependencies [e962dda]
  • @​ai-sdk/gateway@​3.0.132

6.0.205

Patch Changes

• Updated dependencies [6160ced]
• Updated dependencies [c9b8abd]
  • @​ai-sdk/gateway@​3.0.131

6.0.204

Patch Changes

• Updated dependencies [c5d4716]
  • @​ai-sdk/gateway@​3.0.130

Commits

• 3270146 Version Packages (#16243)
• f994df3 Backport: Serialize undefined tool output to null in UI message chunks (#16240)
• 8261640 Backport: fix(ai): handle partial unicode escapes in fixJson (#16233)
• caebb44 Version Packages (#16157)
• 779f5cd Backport: fix(provider-utils): cancel response body on download rejection to ...
• 5623117 Version Packages (#16134)
• 5548672 Version Packages (#16097)
• 63b3f60 Version Packages (#16086)
• See full diff in compare view

Updates ox from 0.13.2 to 0.14.29

Release notes

Sourced from ox's releases.

ox@0.14.29

Patch Changes

• #268 ed93945 Thanks @​jxom! - viem/tempo: Added genesisConfig shorthand to TIP-1061 multisig helpers and renamed configId → genesisConfigId on the typed SignatureEnvelope.Multisig.

ox@0.14.28

Patch Changes

• #265 f5328d2 Thanks @​jxom! - viem/tempo: Added support for TIP-1061 native multisig accounts.

ox@0.14.27

Patch Changes

• #263 451a442 Thanks @​jxom! - ox/tempo: Added the ReceivePolicyReceipt module for encoding/decoding TIP-1028 receive-policy claim receipts (ClaimReceiptV1 witnesses) with decode, encode, from, fromLog, and fromTransactionReceipt (returns one receipt per TransferBlocked log).

ox@0.14.26

Patch Changes

• #262 b1ac8c8 Thanks @​jxom! - ox/tempo: Added support for TIP-1049 (admin access keys) via optional isAdmin and account fields on KeyAuthorization that bind into the signing hash.

• #260 581ccee Thanks @​jxom! - ox/tempo: Added support for TIP-1053 (witnesses in key authorizations) via an optional 32-byte witness field on KeyAuthorization that is included in the signing hash.

ox@0.14.25

Patch Changes

• #256 ad7610b Thanks @​jxom! - Renamed ChannelDescriptor.from to Channel.from, made Channel.Channel the descriptor type, and changed Channel.computeId to receive channel and options separately.

ox@0.14.24

Patch Changes

• #254 d837628 Thanks @​jxom! - Added ChannelDescriptor.from for normalizing TIP-20 channel reserve descriptors.

ox@0.14.23

Patch Changes

• #252 19cd833 Thanks @​jxom! - Added TIP-20 channel reserve constants, channel id computation, and voucher signing helpers.

ox@0.14.22

Patch Changes

• #227 ffa64c0 Thanks @​Genmin! - Fixed Secp256k1.verify narrowing signature branches before address recovery.

ox@0.14.21

Patch Changes

• #246 32cf459 Thanks @​0xrusowsky! - Added TxEnvelopeTempo.encodeForSigning to expose the raw Tempo sender-signing preimage bytes.

• #248 e0474e9 Thanks @​jxom! - Added blockTimestamp support to transaction RPC conversions.

ox@0.14.20

... (truncated)

Commits

• 58ca601 chore: version packages (#269)
• ed93945 feat(tempo): add genesisConfig shorthand to multisig helpers (#268)
• ad3330f chore: version packages (#267)
• 4b3fe3e chore: version packages (#266)
• ef64a52 ci(tempo): use edge image (tracks main) instead of latest
• b8a0714 test(tempo): skip TIP-1049 admin e2e until tempo release ships PR #4265
• f5328d2 feat(tempo): native multisig (#265)
• ae54345 ci: bump vitest hookTimeout to 60s for tempo localnet cold start
• 7bb96ea chore: version packages (#264)
• 451a442 feat(tempo): add ReceivePolicyReceipt module for TIP-1028 claim receipts (#263)
• Additional commits viewable in compare view

Updates @gitlawb/openclaude from 0.14.0 to 0.19.0

Release notes

Sourced from @​gitlawb/openclaude's releases.

v0.19.0

0.19.0 (2026-06-16)

Features

• add NEAR AI provider integration (#1594) (eacc7d8)
• add redacted diagnostic issue reports (#1647) (7c034c5)
• add Vietnamese i18n for slash command descriptions (#1431) (89d0531)
• agent-routing: model-only agent routes (set the verifier or any agent's model on the current provider) (#1617) (9e902db)
• compact: auto-compact prompt on /resume + determinate progress bar (#1386) (716c1d4)
• config: add compactModel option to use a separate model for compaction (#1445) (#1629) (0c45e16)
• ctx: add /ctx context window visualization and token bars to /cost (#1610) (c2cf603)
• gemini-vertex: native Gemini Vertex client and auth helpers (1/3) (#1607) (b9c65de)
• provider: add Fireworks AI as official OpenAI-compatible provider (#1590) (0b24b60)
• web: rebuild landing as Astro static site with gitlawb theme and full docs (#1606) (d08593d)

Bug Fixes

• avoid file suggestion OOM on large repos (#1074) (8f92346)
• copilot: limit sub-agent concurrency to reduce Premium Request usage (#678) (#1534) (822eff3)
• gitDiff: keep hunk content lines beginning with -- or ++ (#1646) (241d52a)
• mcp: demote successful stdio startup stderr (#1622) (9fbcd75)
• Ollama max output token override (#1659) (bac74aa)
• ollama: parse text-based tool calls as fallback (#1053) (#1076) (a3f144b)
• plugins: prevent ENOENT on Windows marketplace cache finalization (#1500) (#1531) (a7d6580)
• read: improve oversized file guidance (#1626) (5fd4a09)
• rename "Claude" to "OpenClaude" in feedback survey prompt (#1598) (d00b105)
• sandbox temp dir fallback (#1662) (c3db798)
• security: bundle real sandbox runtime in open CLI (#1641) (bd3ad89)
• session: filter Anthropic-only params from 3P provider requests (#248) (#1533) (db2d093)
• startup provider validation fallback (#1658) (b036e9f)
• suggestions: stop slash-command dropdown freezing on a throwing getter (#1657) (00ff6de)
• tool-search: enable MCP tool deferral on converted-wire providers (#1608) (614a8d9)
• typecheck: correct fetch mock type casts in test files (#1592) (794ccd4)
• typecheck: expand cachedMicrocompact stub exports (#1591) (bb19392)
• typecheck: recreate missing CLI Transport interface (#1581) (3752dfe)
• typecheck: reduce error baseline by 89 across 8 files (#1595) (9db9427)
• vision handling for OpenAI-compatible models (#1663) (7be9dce)

Performance Improvements

• cli: restore --version fast path with dynamic provider imports (#1611) (a3a3c36)

v0.18.0

0.18.0 (2026-06-10)

... (truncated)

Changelog

Sourced from @​gitlawb/openclaude's changelog.

0.19.0 (2026-06-16)

Features

• add NEAR AI provider integration (#1594) (eacc7d8)
• add redacted diagnostic issue reports (#1647) (7c034c5)
• add Vietnamese i18n for slash command descriptions (#1431) (89d0531)
• agent-routing: model-only agent routes (set the verifier or any agent's model on the current provider) (#1617) (9e902db)
• compact: auto-compact prompt on /resume + determinate progress bar (#1386) (716c1d4)
• config: add compactModel option to use a separate model for compaction (#1445) (#1629) (0c45e16)
• ctx: add /ctx context window visualization and token bars to /cost (#1610) (c2cf603)
• gemini-vertex: native Gemini Vertex client and auth helpers (1/3) (#1607) (b9c65de)
• provider: add Fireworks AI as official OpenAI-compatible provider (#1590) (0b24b60)
• web: rebuild landing as Astro static site with gitlawb theme and full docs (#1606) (d08593d)

Bug Fixes

• avoid file suggestion OOM on large repos (#1074) (8f92346)
• copilot: limit sub-agent concurrency to reduce Premium Request usage (#678) (#1534) (822eff3)
• gitDiff: keep hunk content lines beginning with -- or ++ (#1646) (241d52a)
• mcp: demote successful stdio startup stderr (#1622) (9fbcd75)
• Ollama max output token override (#1659) (bac74aa)
• ollama: parse text-based tool calls as fallback (#1053) (#1076) (a3f144b)
• plugins: prevent ENOENT on Windows marketplace cache finalization (#1500) (#1531) (a7d6580)
• read: improve oversized file guidance (#1626) (5fd4a09)
• rename "Claude" to "OpenClaude" in feedback survey prompt (#1598) (d00b105)
• sandbox temp dir fallback (#1662) (c3db798)
• security: bundle real sandbox runtime in open CLI (#1641) (bd3ad89)
• session: filter Anthropic-only params from 3P provider requests (#248) (#1533) (db2d093)
• startup provider validation fallback (#1658) (b036e9f)
• suggestions: stop slash-command dropdown freezing on a throwing getter (#1657) (00ff6de)
• tool-search: enable MCP tool deferral on converted-wire providers (#1608) (614a8d9)
• typecheck: correct fetch mock type casts in test files (#1592) (794ccd4)
• typecheck: expand cachedMicrocompact stub exports (#1591) (bb19392)
• typecheck: recreate missing CLI Transport interface (#1581) (3752dfe)
• typecheck: reduce error baseline by 89 across 8 files (#1595) (9db9427)
• vision handling for OpenAI-compatible models (#1663) (7be9dce)

Performance Improvements

• cli: restore --version fast path with dynamic provider imports (#1611) (a3a3c36)

0.18.0 (2026-06-10)

Features

... (truncated)

Commits

• 5c0e661 chore(main): release 0.19.0 (#1596)
• 7be9dce fix: vision handling for OpenAI-compatible models (#1663)
• bac74aa fix: Ollama max output token override (#1659)
• 0c45e16 feat(config): add compactModel option to use a separate model for compaction ...
• c3db798 fix: sandbox temp dir fallback (#1662)
• a36ef46 docs(readme): add social links and clarify license line (#1660)
• 241d52a fix(gitDiff): keep hunk content lines beginning with -- or ++ (#1646)
• bd3ad89 fix(security): bundle real sandbox runtime in open CLI (#1641)
• 7c034c5 feat: add redacted diagnostic issue reports (#1647)
• b036e9f fix: startup provider validation fallback (#1658)
• Additional commits viewable in compare view

Updates turbo from 2.9.14 to 2.9.18

Release notes

Sourced from turbo's releases.

Turborepo v2.9.18

What's Changed

Changelog

• release(turborepo): 2.9.17 by @​github-actions[bot] in vercel/turborepo#13047
• ci: Fetch version.txt via API in docs alias failure notification by @​anthonyshew in vercel/turborepo#13050
• fix: Harden cache archive symlink restore by @​anthonyshew in vercel/turborepo#13051
• chore: Remove web UI mode by @​anthonyshew in vercel/turborepo#13052
• fix: Harden query server file access by @​anthonyshew in vercel/turborepo#13053
• fix: Confine prune patch paths by @​anthonyshew in vercel/turborepo#13054
• fix: Prevent git argument injection in SCM refs by @​anthonyshew in vercel/turborepo#13055
• fix: Strip special mode bits from cache restore by @​anthonyshew in vercel/turborepo#13056
• fix: Contain incremental cache outputs by @​anthonyshew in vercel/turborepo#13057
• fix(turborepo): Normalize Windows daemon path hash by @​Balance8 in vercel/turborepo#13020
• fix: Preserve vt100 cell byte counts by @​anthonyshew in vercel/turborepo#13058
• fix: Separate artifact signature fields by @​anthonyshew in vercel/turborepo#13059
• fix: Validate OidHash hex buffers by @​anthonyshew in vercel/turborepo#13060
• fix: Block self-hosted login URLs from attempting to use Vercel's SSO by @​anthonyshew in vercel/turborepo#13061

New Contributors

• @​Balance8 made their first contribution in vercel/turborepo#13020

Full Changelog: vercel/turborepo@v2.9.17...v2.9.18

Turborepo v2.9.17

What's Changed

Changelog

• fix: Keep non-PTY stdin alive for persistent tasks by @​anthonyshew in vercel/turborepo#12972
• release(turborepo): 2.9.16 by @​github-actions[bot] in vercel/turborepo#12970
• release(turborepo): 2.9.17-canary.1 by @​github-actions[bot] in vercel/turborepo#12973
• fix: Add auth HTTP timeouts by @​anthonyshew in vercel/turborepo#12976
• fix: Detect affected root tasks in query by @​anthonyshew in vercel/turborepo#12977
• fix: Wait for Windows graceful shutdown by @​anthonyshew in vercel/turborepo#12979
• release(turborepo): 2.9.17-canary.2 by @​github-actions[bot] in vercel/turborepo#12980
• test: Skip installs for JSON output fixtures by @​anthonyshew in vercel/turborepo#12981
• feat: Add Rsbuild examples by @​Nsttt in vercel/turborepo#12942
• test: Skip installs for single package dry runs by @​anthonyshew in vercel/turborepo#12982
• test: Skip Corepack setup without installs by @​anthonyshew in vercel/turborepo#12983
• test: Skip installs for metadata-only Rust tests by @​anthonyshew in vercel/turborepo#12985
• test: Skip remaining unnecessary fixture installs by @​anthonyshew in vercel/turborepo#12986
• test: Add final hash contract snapshots by @​anthonyshew in vercel/turborepo#12984
• test: Trim run logging integration matrix by @​anthonyshew in vercel/turborepo#12987
• test: Trim affected query integration matrix by @​anthonyshew in vercel/turborepo#12988
• test: Narrow Windows integration test group by @​anthonyshew in vercel/turborepo#12989
• test: Trim task dependency integration coverage by @​anthonyshew in vercel/turborepo#12990
• test: Trim affected integration coverage by @​anthonyshew in vercel/turborepo#12991
• test: Collapse integration test matrices by @​anthonyshew in vercel/turborepo#12992

... (truncated)

Commits

• 3bdce32 publish 2.9.18 to registry
• 2a76556 fix: Block self-hosted login URLs from attempting to use Vercel's SSO (#13061)
• da8e348 fix: Validate OidHash hex buffers (#13060)
• 3018717 fix: Separate artifact signature fields (#13059)
• 34514e2 fix: Preserve vt100 cell byte counts (#13058)
• 24e2d34 fix(turborepo): Normalize Windows daemon path hash (#13020)
• 16dc881 fix: Contain incremental cache outputs (#13057)
• 92e1f8e fix: Strip special mode bits from cache restore (#13056)
• f46f896 fix: Prevent git argument injection in SCM refs (#13055)
• 7f353ca fix: Confine prune patch paths (#13054)
• Additional commits viewable in compare view

Updates @base-org/account from 2.5.5 to 2.5.6

Release notes

Sourced from @​base-org/account's releases.

account: v2.5.6

2.5.6 (2026-05-08)

Bug Fixes

• BAFB-166: bump @​coinbase/cdp-sdk to ^1.48.3 to fix missing bs58 dep (#292) (001530b)

Commits

• 24ab30c chore(master): release account 2.5.6 (#293)
• 001530b fix(BAFB-166): bump @​coinbase/cdp-sdk to ^1.48.3 to fix missing bs58 dep (#292)
• 0971520 feat(testapp): add COOP simulation toggle (#290)
• 5c9c044 ci: rename release-account-manual.yml to release-account.yml (#289)
• See full diff in compare view

Updates @base-ui/react from 1.4.1 to 1.5.0

Release notes

Sourced from @​base-ui/react's releases.

v1.5.0

General changes

• Improve mount performance with interaction splitting, including closed popup mount performance by up to 50% and unmounting performance by up to 85% (#4661) by @​atomiks
• Use local document for virtual arrow (#4662) by @​lyzno1
• Fix macOS Safari and Firefox minimizing fullscreen when closing popups with Esc (#4695) by @​arturbien
• Drop unnecessary memoization (#4693) by @​flaviendelangle
• Do not use Math.random() in useStableCallback() (#4732) by @​michaldudak
• Fix return focus when reference disconnects (#4655) by @​atomiks
• Don't steal initial focus if focus already moved inside a popup (#4775) by @​stefee

Alert Dialog

• Fix handle defaults (#4834) by @​atomiks

Autocomplete

• Fix native FormData for popup inputs (#4725) by @​lunaxislu

Checkbox

• Submit the associated form when pressing Enter (#4713) by @​michaldudak

Combobox

• Expose clear visibility state (#4664) by @​atomiks
• Fix popup input form submit (#4687) by @​atomiks
• Preserve closeQuery when closing multiple input-inside-popup combobox (#4715) by @​mj12albert
• Fix RTL component behavior (#4840) by @​atomiks
• Ignore hidden-input changes while readonly or disabled (#4810) by @​lunaxislu

Dialog

• Consider the controlled open prop for open state detection (#4712) by @​michaldudak

Drawer

• Forward style prop in <Drawer.Viewport> (#4841) by @​atomiks

Field

• Avoid flushSync during validation (#4685) by @​atomiks

Form

• Avoid flushSync during validation (#4685) by @​atomiks

Menu

• Fix submenu pointer-events scope for keepMounted portals (#4723) by @​twillhorn

... (truncated)

Changelog

Sourced from @​base-ui/react's changelog.

v1.5.0

May 19, 2026

General changes

• Improve mount performance with interaction splitting, including closed popup mount performance by up to 50% and unmounting performance by up to 85% (#4661) by @​atomiks
• Use local document for virtual arrow (#4662) by @​lyzno1
• Fix macOS Safari and Firefox minimizing fullscreen when closing popups with Esc (#4695) by @​arturbien
• Drop unnecessary memoization (#4693) by @​flaviendelangle
• Do not use Math.random() in useStableCallback() (#4732) by @​michaldudak
• Fix return focus when reference disconnects (#4655) by @​atomiks
• Don't steal initial focus if focus already moved inside a popup (#4775) by @​stefee

Alert Dialog

• Fix handle defaults (

[ecc-tools]

Analyzing 200 commits...

[ecc-tools]

Analysis Complete

Generated ECC bundle from 1 commits | Confidence: 50%

View Pull Request #129

Repository Profile

Attribute	Value
Language	TypeScript
Framework	Next.js
Commit Convention	conventional
Test Directory	separate

Changed Files (5)

Metric	Value
Files changed	5
Additions	17689
Deletions	15239

Top hotspots

Path	Status	+/-
package-lock.json	modified	+17635 / -15185
web/package.json	modified	+42 / -42
package.json	modified	+6 / -6
agentbot-backend/package.json	modified	+5 / -5
gateway/package.json	modified	+1 / -1

Top directories

Directory	Files	Total changes
.	2	32832
web	1	84
agentbot-backend	1	10
gateway	1	2

Analysis Depth Readiness (commit-history, 7%)

ECC Tools uses this to decide whether recommendations should stay at commit-history/setup guidance or expand into CI, security, harness, reference-set, AI-routing, and team backlog work.

Area	Status	Evidence / Next Step
Commit history	Partial	1 commits sampled
CI/CD signals	Missing	Add workflow files or CI troubleshooting evidence so ECC Tools can reason about pipeline setup.
Security evidence	Missing	Add AgentShield, audit, SARIF, SBOM, or security review evidence so recommendations can cover security posture.
Harness configuration	Missing	Add Claude, Codex, OpenCode, Zed, dmux, MCP, plugin, or cross-harness config evidence for harness-agnostic recommendations.
Reference/eval evidence	Missing	Add fixtures, golden traces, reference sets, or evaluator benchmarks so deeper recommendations have regression evidence.
AI routing and cost controls	Missing	Add model-routing, budget, usage, or cost-control files before relying on AI-heavy automation recommendations.
Team handoff and project tracking	Missing	Add roadmap, runbook, project, Linear, or follow-up tracking docs so generated work can land in a team queue.

Reference Set Readiness (0/7, 0%)

Area	Status	Evidence / Next Step
Deep analyzer corpus	Missing	Add analyzer fixture, golden, benchmark, or reference-set files that can catch analyzer regressions.
RAG/evaluator comparison	Missing	Add retrieval or evaluator reference-set comparison fixtures with expected ranking behavior.
PR salvage/review corpus	Missing	Add stale-PR, review-thread, reopen-flow, or salvage reference cases for queue cleanup automation.
Discussion triage corpus	Missing	Add public discussion triage fixtures, golden cases, or reference sets for informational, answered, and no-response classifications.
Harness compatibility	Missing	Add cross-harness, adapter-compliance, or harness-audit evidence for Claude, Codex, OpenCode, Zed, dmux, and agent surfaces.
Security evidence	Missing	Attach security evidence such as SBOMs, SARIF, audit reports, or AgentShield evidence packs.
CI failure-mode evidence	Missing	Add captured CI failure logs, dry-run fixtures, or troubleshooting docs for common workflow failure modes.

Detected Workflows (1)

Workflow	Description
dependency-update-batch	Batch updating multiple dependencies (npm packages) across the monorepo, typically using an automated tool like Dependabot.

Generated Instincts (17)

Domain	Count
git	4
code-style	9
testing	2
workflow	2

After merging, import with:

/instinct-import .claude/homunculus/instincts/inherited/agentbot-opensource-instincts.yaml

Files

• .claude/ecc-tools.json
• .claude/skills/agentbot-opensource/SKILL.md
• .agents/skills/agentbot-opensource/SKILL.md
• .agents/skills/agentbot-opensource/agents/openai.yaml
• .claude/identity.json
• .codex/config.toml
• .codex/AGENTS.md
• .codex/agents/explorer.toml
• .codex/agents/reviewer.toml
• .codex/agents/docs-researcher.toml
• .claude/homunculus/instincts/inherited/agentbot-opensource-instincts.yaml
• .claude/commands/dependency-update-batch.md

---

_{ECC Tools | Everything Claude Code}