Scheduled Maintenance Report — 2026-03-20

[github-actions]

Scheduled Maintenance Report

Date: 2026-03-20 08:37 UTC
Checks run: 16
Errors: 0

Status Summary

• Audit: 1 critical/high vulnerabilities
• Dependencies: 9 safe updates, 2 major updates
• Dep changes: 13 added, 1 removed
• Duplicates: clean
• Lock file: in sync
• Install size: 1200.8 MB
• Versions: aligned | Protocol: ok (npm — * is correct)
• Engine: Node.js 20 (LTS)
• Lint: clean
• TypeScript: clean
• Markers: 4 total (0 urgent: FIXME/HACK/WORKAROUND)
• Bundle: within limits (no files over 500 KB)
• Build: all passing (39.6s total)
• Coverage: 2 package(s) below 70%
• Branches: 6 merged, 0 stale updates, 0 stale
• CI: see trends above

Action Items

6 total: 2 automatable (🤖 auto), 2 need review (👀 review), 2 dedicated effort (📋 project)

• 🤖 auto Fix 1 critical/high security vulnerabilities — run npm audit fix
• 🤖 auto Update 9 safe dependencies — run npm update
• 📋 project Review 2 major dependency updates — requires dedicated effort per package
• 👀 review Review 13 new dependencies — check for bloat or supply-chain risk
• 📋 project Improve test coverage — add tests to packages below 70% threshold
• 👀 review Delete 6 merged branches — run git push origin --delete <branch>

---

Security Vulnerabilities (npm audit)

1 vulnerabilities found across ? packages.

Severity	Count
High	1

Action items (critical + high):

• flatted (high) — fix available

Status: Audit: 1 critical/high vulnerabilities

Check: npm audit
Fix: npm audit fix — or npm audit fix --force for breaking major updates

---

Dependency Freshness

11 packages not on latest (9 safe updates, 2 major).

Safe updates — patch/minor (9) — run `npm update`

Package	Current	Wanted	Latest
@anthropic-ai/sdk	0.78.0	0.78.0	0.80.0
@supabase/supabase-js	2.99.1	2.99.3	2.99.3
@tailwindcss/postcss	4.2.1	4.2.2	4.2.2
eslint-plugin-playwright	2.10.0	2.10.1	2.10.1
eslint-plugin-react-hooks	7.1.0-canary-e0cc7202-20260227	7.1.0-canary-fd524fe0-20251121	7.0.1
tailwindcss	4.2.1	4.2.2	4.2.2
typescript-eslint	8.57.0	8.57.1	8.57.1
vite-plugin-electron	0.29.0	0.29.1	0.29.1
zustand	5.0.11	5.0.12	5.0.12

Major updates (2) — review carefully

Package	Current	Latest
electron	40.8.2	41.0.3
jsdom	28.1.0	29.0.1

Status: Dependencies: 9 safe updates, 2 major updates

Check: npm outdated
Fix (patch/minor): npm update — safe, respects semver ranges
Fix (major): npm install <package>@latest — test thoroughly after upgrade

---

Dependency Changes (last 7 days)

13 added, 1 removed since 22d4973.

Added (13)

• @electron/windows-sign
• @electron/windows-sign/node_modules/fs-extra
• @electron/windows-sign/node_modules/jsonfile
• @electron/windows-sign/node_modules/universalify
• cross-dirname
• electron-builder-squirrel-windows
• electron-winstaller
• electron-winstaller/node_modules/fs-extra
• mkdirp
• postject
• postject/node_modules/commander
• rimraf
• temp

Removed (1)

• app-builder-lib/node_modules/ci-info

Status: Dep changes: 13 added, 1 removed

Review: Check unexpected additions for bloat or supply-chain risk
Check: diff <(git show HEAD~N:package-lock.json | jq '.packages | keys') <(jq '.packages | keys' package-lock.json)

---

Duplicate Dependencies (npm dedupe)

No duplicates found — dependency tree is clean.

Status: Duplicates: clean

---

Lock File Integrity

package-lock.json is in sync with package.json.

Status: Lock file: in sync

---

Package Install Size

Total node_modules: 1200.8 MB

Direct dependencies: 24

Per-package dist output (10 packages)

Package	Dist Size
electron	1.1 MB
frontend	1.1 MB
core	0.5 MB
shared	0.4 MB
agent-manager	0.0 MB
agent-core	0.0 MB
agent-runtime	0.0 MB
server	0.0 MB
agent-registry	0.0 MB
agent-from-md	0.0 MB

Status: Install size: 1200.8 MB

Check: du -sh node_modules/
Fix: Remove unused dependencies, use npm dedupe, consider lighter alternatives

---

Workspace Version Alignment

All 11 workspace packages are at version 2.1.40.

Cross-workspace references use * — this is correct for npm workspaces (npm does not support the workspace:* protocol).

Status: Versions: aligned | Protocol: ok (npm — * is correct)

---

Engine Versions

Engine	Current	Required
Node.js	v20.20.1	>=20.0.0
npm	10.8.2	>=10.0.0

Newer LTS available: Node.js 24. Current: 20.

Status: Engine: Node.js 20 (LTS)

Check: node --version && npm --version
Fix: Update Node.js via nvm install --lts or update the CI workflow / Dockerfile base image

---

Lint Health

All 9 packages pass linting.

Package	Errors	Status
@agentage/agent-core	0	passing
@agentage/agent-from-md	0	passing
@agentage/agent-registry	0	passing
@agentage/agent-runtime	0	passing
@agentage/core	0	passing
@agentage/electron	0	passing
@agentage/frontend	0	passing
@agentage/server	0	passing
@agentage/shared	0	passing

Status: Lint: clean

---

TypeScript Health

Clean — no @ts-ignore or as any found (excluding tests).

Pattern	Count	Severity
as unknown	14	info
// eslint-disable	31	info

Status: TypeScript: clean

Check: grep -rn 'as any' packages/ --include='*.ts' --include='*.tsx' | grep -v test
Fix: Replace as any with proper types; replace @ts-ignore with @ts-expect-error

---

Code Markers (TODO / FIXME / HACK)

4 markers found across the codebase.

Marker	Count
TODO	4

Status: Markers: 4 total (0 urgent: FIXME/HACK/WORKAROUND)

Check: grep -rn 'TODO\|FIXME\|HACK' packages/ --include='*.ts' --include='*.tsx'
Fix: Address each marker — resolve FIXMEs and HACKs first, then TODOs

---

Bundle Size

Total bundle: 1135.4 KB (JS: 1069.2 KB, CSS: 65.3 KB, Other: 0.9 KB)

No individual JS/CSS files exceed 500 KB.

Top 10 JS chunks

File	Size
assets/react-DbLBISqE.js	277.5 KB
assets/hljs-BMQziimY.js	144.4 KB
assets/main-BKq2z7c1.js	126.4 KB
assets/markdown-_Dy2zPzC.js	100.8 KB
assets/shared-08FBB6BC.js	75.6 KB
assets/lucide-C0CiQCXA.js	44.7 KB
assets/ProjectsPage-B_OQAADR.js	44.5 KB
assets/ProjectDetailsPage-Jkpo3YJn.js	43.9 KB
assets/index-D8FKfwKw.js	34.7 KB
assets/agentage-shared-BlQsDl5B.js	31.3 KB

Status: Bundle: within limits (no files over 500 KB)

Check: du -sh packages/frontend/dist/
Fix: Code-split large chunks, lazy-load routes, tree-shake unused imports

---

Build Time

Total build time: 39.6s across 10 packages.

Package	Time	Status
@agentage/shared	3.1s	ok
@agentage/agent-core	1.7s	ok
@agentage/agent-from-md	1.1s	ok
@agentage/agent-runtime	1.4s	ok
@agentage/agent-registry	1.3s	ok
@agentage/agent-manager	1.3s	ok
@agentage/core	3.2s	ok
@agentage/frontend	12.1s	ok
@agentage/server	1.4s	ok
@agentage/electron	13.0s	ok

Status: Build: all passing (39.6s total)

Check: time npm run build -w <package>
Fix: Enable incremental TypeScript builds, reduce barrel exports, check for circular deps

---

Test Coverage

Overall: Lines 70.85% | Branches 48.75% | Functions 64.7% | Statements 70.13%
Threshold: 70%

Below threshold: Branches (48.75%), Functions (64.7%)

Per-package line coverage (8 packages)

Package	Line Coverage	Status
agent-runtime	59.1%	below
shared	59.3%	below
core	79.9%	ok
frontend	81.3%	ok
agent-registry	90.0%	ok
agent-manager	97.7%	ok
agent-core	100.0%	ok
agent-from-md	100.0%	ok

Status: Coverage: 2 package(s) below 70%

Check: npm run test:coverage
Fix: Add unit tests for uncovered packages, focus on packages below threshold

---

Stale Branches

6 merged branches can be deleted:

• origin/chore/maintenance-2026-02-27
• origin/claude/fix-all-github-issues-ijI6K
• origin/claude/rebase-download-artifact-7YJoI
• origin/fix/ci-auto-20260301
• origin/release/auto-v2.1.35
• origin/release/auto-v2.1.40

Check: git branch -r --merged origin/master and git for-each-ref --sort=committerdate refs/remotes/
Fix (merged): git push origin --delete <branch-name> for each merged branch
Fix (stale): Confirm with the author, then git push origin --delete <branch-name>

Status: Branches: 6 merged, 0 stale updates, 0 stale

---

CI Pipeline Trends (4 weeks)

Master CI Pass/Fail & Duration:

Week	Runs	Pass	Fail	Rate	Avg Duration
2026-02-15	14	14	0	100%	11.9m
2026-02-22	20	17	3	85%	10.0m
2026-03-01	14	14	0	100%	10.4m
2026-03-08	14	12	2	86%	10.0m
2026-03-15	1	1	0	100%	9.8m

PR Merge Velocity:

Week	PRs Merged	Avg Time-to-Merge
2026-02-15	1	1.8h
2026-02-22	8	5.1h
2026-03-01	14	2.5h
2026-03-08	14	4.7h
2026-03-15	1	2.8h

Release Cadence:

Week	Releases	Tags
2026-02-15	1	v2.1.31
2026-02-22	4	v2.1.35, v2.1.34, v2.1.33, v2.1.32
2026-03-01	3	v2.1.38, v2.1.37, v2.1.36
2026-03-08	1	v2.1.39
2026-03-15	1	v2.1.40

Status: CI: see trends above

Source: GitHub Actions API + Pull Requests API + Releases API
Fix (low pass rate): Investigate flaky tests, improve pre-merge checks
Fix (slow merges): Reduce review bottlenecks, automate more checks

---

Expected Outcome

1. Create a draft PR implementing all 🤖 auto items
2. Add a PR comment mapping each action item with status icons:
   • ✅ Done — with verification command output
   • 🟡 Partial — with explanation of what remains
   • ⏳ Not done — with reason (needs review / dedicated effort / author input)
   • ⛔ Not applicable — with explanation
3. Ensure CI passes on the PR
4. Items tagged 👀 review and 📋 project should be listed as "not done" with context, not attempted

Generated by scripts/maintenance/run-all.js