Lemonade Dashboard

Generated: 2026-08-29 22:26 UTC · Auto-refreshes every 5 min

Human Action Required

21

Agent work is blocked — needs human dev action to unblock. Click a row for details.

RepoFeatureStageAgeWhat's NeededRelated PRsSeverity
lemonade-backendHUMAN ACTION: Add CROSS_REPO_PAT repo secret to lemonade-backendSTAGINGnewCROSS_REPO_PAT secret in lemonade-backend is required for CI to fetch private @lemonade/connectors dependency (AI-plugins repo) via git URL. be#1949 CI 3/4 FAILING: yarn install → Repository not found. PAT needs read access to lemonadesocial/AI-plugins. Track A connector merges blocked until resolved. Checklist R9.be#1949 (open, CI BLOCKED)CRITICAL
lemonade-backendHUMAN ACTION: Provision Anthropic + Google API keysSTAGINGnewMulti-LLM model factory deployed to staging but cannot route to Anthropic/Google models without API keys in Secrets Manager. OpenAI routing works (key exists).be#1929 + ai#73 (merged)HIGH
lemonade-backendConnector Architecture — Track A (Audit Gap Closure)PR: APPROVED / CI BLOCKEDnewBLOCKER: CROSS_REPO_PAT repo secret missing in lemonade-backend — be#1949 CI 3/4 FAILINGbe#1912 (Karen: comment-APPROVE, CI green), be#1949 (CI BLOCKED — CROSS_REPO_PAT), AI-plugins#2 (Karen: comment-APPROVE), AI-plugins#3 (Karen: comment-APPROVE), ai#67 (Karen: comment-APPROVE), web-new#941 (Karen: APPROVED formal)
Remove ignoreBuildErrors (HIGH-006)IMPL: BLOCKEDnewweb-new#969 (Web3 lib reduction)—
web-newAgent E: Provision Sentry env varsSTAGINGnewPhase 1 code uses NEXT_PUBLIC_SENTRY_DSN (falls back to empty string = Sentry disabled). For full observability on staging, Agent E must add 4 env vars. DSN value: https://136a7ae901625d8fa9c8aa3bda0313a5@o415373.ingest.us.sentry.io/4508968908947456web-new#977 (open, Karen APPROVED)MEDIUM
lemonade-backendMulti-LLM ProviderSTAGINGnewHuman dev: provision Anthropic + Google API keys (see Staging Blockers)be#1929 (merged 7152856f), ai#73 (merged a61fe52a)
Rich AI Chat Responses (Phase 2: Actions + MCP)IMPL: NOT_STARTEDnewPhase 1 merged + verified on staging—
Sentry Observability — Phase 2 (P2)IMPL: NOT_STARTEDnewPhase 1 merged + verified on staging—
lemonade-backendSubscription Feature GapsPR: OPENnewStripe Price IDs (placeholders — replace before deploy)be#1960
Auth → httpOnly Cookies (HIGH-002/003, MED-005/006, INFO-002)PRDnewBridge + Agent C—
lemonade-backendConnector Architecture — Track B (Capability Expansion)PR: APPROVED (4/5 merge-ready)newTrack B merge independent of Track Aclaude#9 (spec — OPEN), AI-plugins#7 (Karen: APPROVE, merge-ready), AI-plugins#8 (Karen: APPROVE, blocked on #7), be#1950 (Karen: APPROVE, CI green, merge-ready), web-new#983 (Karen: APPROVE, lint pass, Playwright fail pre-existing)
Date Library ConsolidationPRDnewBridge review—
Error Handling + Logger ServicePRDnewBridge review—
GraphQL Client Error Rejection (MED-013)PRDnewNeeds regression testing plan—
Input Sanitization (CRIT-001/002/003)PRDnewBridge + Agent A/C—
Redirect + Hostname Hardening (MED-001, MED-003)PRDnewBridge + Agent C/E—
web-newSentry Observability — Phase 1 (P0+P1)PR: APPROVEDnewAgent E: provision env vars (soft — graceful degradation if unset)web-new#977
Split Oversized Components (HIGH-012)PRDnewNeeds architecture design—
tRPC Auth Hardening (CRIT-005)PRDnewBridge + Agent C—
Validation Consolidation (Zod/Yup)PRDnewBridge review—
Web3 Library Consolidation (INFO-004)PRDnewBridge review—

Pending Agent Review

0

Human PRs awaiting Karen (AI code reviewer) — tell KC to activate

RepoPRTitleAuthorCreatedAge
No PRs pending review

Implementation Pipeline

58 features tracked
PRD / Bridge10
IMPL14
PR Open21
Staging7
Production0
Infrastructure & Platform (3)
PriorityFeatureStage ProgressPRsReviewBlocked By
CRITICALEKS Upgrade 1.31→1.33STAGING1/3 (K8s version done)cdk#303 (merged)—
—RDS PostgreSQL MigrationsSTAGINGCompletebe#1906 (merged), cdk#305 (merged), be#1928 (merged — partition PK fix)—
—RDS Platform (FE)PR: APPROVED~1/5web-new#968 (open, based on master)ApprovedAgent E needs to provision the RDS database for the FE dashboard reads
Credit System & Billing (8)
PriorityFeatureStage ProgressPRsReviewBlocked By
3Multi-LLM ProviderSTAGING14/14be#1929 (merged 7152856f), ai#73 (merged a61fe52a)—Human dev: provision Anthropic + Google API keys (see Staging Blockers)
5Subscription Feature GapsPR: OPEN8/8be#1960PendingStripe Price IDs (placeholders — replace before deploy)
2Credit Pricing v2STAGING7/7ai#74 (merged 2026-02-27), be#1930 (merged 2026-02-27)—
1Credit System (BE + AI)STAGING5/5be#1904 (merged 2026-02-24), ai#64 (merged), be#1934 (merged 2026-02-27), ai#75 (merged 2026-02-27)—
1bCredit System field renameSTAGING—be#1911 (merged 2026-02-27)—
—Subscription Tiers (BE)STAGINGCompletebe#1902 (merged 2026-02-24), be#1933 (merged 2026-02-27 e33e3aba)—
4BYOK + Admin ConfigIMPL: IN_PROGRESS0/15——MERGE GATE (4 conditions): (1) Human provisions Anthropic + Google API keys, (2) Multi-LLM verified on staging (all 3 providers), (3) Agent E provisions BYOK_ENCRYPTION_KEY for both repos, (4) Agent E provisions LEMONADE_AI_URL for BE
1aCredit System FE adaptationPR: MERGED—web-new#953 (merged 2026-02-27)—
API Key Management (1)
PriorityFeatureStage ProgressPRsReviewBlocked By
—API Key ManagementPR: MERGED5/5be#1901 (merged 2026-02-27)—
Admin Panel (2)
PriorityFeatureStage ProgressPRsReviewBlocked By
—Admin Panel (BE)PR: MERGED20/20be#1905 (merged), be#1931 (merged ea2f1250), be#1932 (DUPLICATE — close), cdk#306 (Karen: APPROVED w/ notes),#307 (Karen: APPROVED),#309 (Karen: APPROVED)—
—Admin Panel (FE)PR: MERGED10/28admin-panel#11 (merged 2026-02-27)—
Apple Platform Apps (5)
PriorityFeatureStage ProgressPRsReviewBlocked By
—Apple Blockers (BE+DevOps)PR: CHANGES_REQUESTED1/2ai#66 (open), cdk#310 (open)Changes Req.
—iOS App (Agent H)IMPL: IN_PROGRESS~5/79 commits on lemonade-ios main (not yet PR'd)—
—iOS App (BE)IMPL: NOT_STARTED0/1——Merge Apple Blocker PRs (ai#66, cdk#310) to unblock iOS/macOS backend work
—macOS App (Agent I)IMPL: IN_PROGRESS~1/14lemonade-macos (initial commit pushed)—
—macOS App (BE)IMPL: NOT_STARTED0/2——Merge Apple Blocker PRs (ai#66, cdk#310) to unblock iOS/macOS backend work
AI Chat UX (2)
PriorityFeatureStage ProgressPRsReviewBlocked By
—Rich AI Chat Responses (Phase 2: Actions + MCP)IMPL: NOT_STARTED0/64——Phase 1 merged + verified on staging
—Rich AI Chat Responses (Phase 1: Cards)PR: APPROVED (3/3)73/73be#1942 (CI green, Karen APPROVED ×2, 4 smoke tests), ai#78 (Karen APPROVED ×2, 14 tests), web-new#978 (Karen APPROVED — 16 tests pass, 0 findings)Approved
MCP Server & Claude Desktop Integration (3)
PriorityFeatureStage ProgressPRsReviewBlocked By
—MCP Prompts + Resources (AI)PR: MERGED10/10 (6 prompts + 4 resources)ai#72 (merged)—
—MCP Server Expansion (BE)PR: MERGED24/24 — all resolvers mergedbe#1940 (merged a6890cdc)—
—MCP Tool Seeding (BE)PR: MERGED43/43 — all resolvers seededbe#1958 (merged 2026-03-03)—
Connectors & Plugins (2)
PriorityFeatureStage ProgressPRsReviewBlocked By
—Connector Architecture — Track A (Audit Gap Closure)PR: APPROVED / CI BLOCKED7/10 audit items resolvedbe#1912 (Karen: comment-APPROVE, CI green), be#1949 (CI BLOCKED — CROSS_REPO_PAT), AI-plugins#2 (Karen: comment-APPROVE), AI-plugins#3 (Karen: comment-APPROVE), ai#67 (Karen: comment-APPROVE), web-new#941 (Karen: APPROVED formal)ApprovedBLOCKER: CROSS_REPO_PAT repo secret missing in lemonade-backend — be#1949 CI 3/4 FAILING
—Connector Architecture — Track B (Capability Expansion)PR: APPROVED (4/5 merge-ready)5 execution PRs openclaude#9 (spec — OPEN), AI-plugins#7 (Karen: APPROVE, merge-ready), AI-plugins#8 (Karen: APPROVE, blocked on #7), be#1950 (Karen: APPROVE, CI green, merge-ready), web-new#983 (Karen: APPROVE, lint pass, Playwright fail pre-existing)ApprovedTrack B merge independent of Track A
Page Builder (12)
PriorityFeatureStage ProgressPRsReviewBlocked By
PR: APPROVEDApproved
PR: APPROVEDApproved
PR: APPROVEDApproved
PR: APPROVEDApproved
—
—
—
—
—
—
—Page Builder (BE)PR: FIXES_PUSHED~5.6K lines (28 files)be#1946 (open, branch: feature/page-builder-backend-clean)—
—Page Builder (FE)PR: FIXES_PUSHED489 files, 23K linesweb-new#921 (open, branch: feature/page-builder-frontend)—
QA & Testing (1)
PriorityFeatureStage ProgressPRsReviewBlocked By
HIGHE2E QA PipelinePR: APPROVED—web-new#985 (open, by namho102 — supersedes #975)Approved
Codebase Health (Audit-Driven) (19)
PriorityFeatureStage ProgressPRsReviewBlocked By
HIGHRemove ignoreBuildErrors (HIGH-006)IMPL: BLOCKED0/1——web-new#969 (Web3 lib reduction)
HIGHAuth → httpOnly Cookies (HIGH-002/003, MED-005/006, INFO-002)PRD0/5——Bridge + Agent C
—Date Library ConsolidationPRD0/7——Bridge review
—Error Handling + Logger ServicePRD0/15——Bridge review
MEDIUMGraphQL Client Error Rejection (MED-013)PRD0/1——Needs regression testing plan
CRITICALInput Sanitization (CRIT-001/002/003)PRD0/3——Bridge + Agent A/C
MEDIUMRedirect + Hostname Hardening (MED-001, MED-003)PRD0/2——Bridge + Agent C/E
HIGHSentry Observability — Phase 1 (P0+P1)PR: APPROVED10/14web-new#977ApprovedAgent E: provision env vars (soft — graceful degradation if unset)
HIGHSentry Observability — Phase 2 (P2)IMPL: NOT_STARTED0/4——Phase 1 merged + verified on staging
HIGHSplit Oversized Components (HIGH-012)PRD0/33——Needs architecture design
CRITICALtRPC Auth Hardening (CRIT-005)PRD0/1——Bridge + Agent C
—Validation Consolidation (Zod/Yup)PRD0/7——Bridge review
—Web3 Library Consolidation (INFO-004)PRD0/8——Bridge review
HIGHDynamic Imports (HIGH-019)IMPL: NOT_STARTED0/1—
MEDIUMMedium Batch (MED-002/004/008-011/015/017/018)IMPL: NOT_STARTED0/9—
LOWMiddleware Caching (LOW-002)IMPL: NOT_STARTED0/1—
HIGHNon-null Assertions (HIGH-010)IMPL: NOT_STARTED0/1—
LOWPlaceholder Strings (LOW-008)IMPL: NOT_STARTED0/1—
MEDIUMQuery Error States (MED-014)IMPL: NOT_STARTED0/1—

Active Work (Non-PRD)

13 items
FeatureStagePRsAuthor
TypeScript Build SafetyIMPL: BLOCKED—senior-fe-web-dev
Web3 Library ReductionPR: OPENweb-new#969 (open)namho102
Community VaultsPR: MERGEDweb-new#951 (merged), web-new#952 (tests, open)nooblemon-eth
Upgrade to Pro UIPR: OPENweb-new#941 (open)gnuzd
Manage Event Layout RefinePR: APPROVEDweb-new#980 (open, branch: feat/update-layout-manage-event)gnuzd
Security/a11y audit (FE-only)STAGINGweb-new #922,#923,#924,#926,#927,#930,#932,#934,#935,#939 (10 merged) + 6 PRs closednooblemon-eth
NEXT_PUBLIC_ env audit + request type fixPR: MERGEDweb-new#971 (merged 2026-02-27)senior-fe-web-dev
DX: .env.example documentationPR: APPROVEDweb-new#973 (open)senior-fe-web-dev
Dev tooling (Codex)STAGINGweb-new #943-#950,#962 (7 merged)harley, namho102
Gas limit fixSTAGINGweb-new#961 (merged 2026-02-26)namho102
AI chat URL fixSTAGINGweb-new#963 (merged 2026-02-26)namho102
K8s deploy reliabilitySTAGINGcdk#316 (merged), cdk#317 (merged)Agent E
Thanos OOM fixPR: CLOSEDcdk#302 (closed)Agent E

Agent & Author Workload

19 active contributors
AI Agents
Agent E
Infrastructure & observability
BlockedDevOps
0Open PRs
5Features
  • K8s deploy reliability STAGING
  • Thanos OOM fix PR: CLOSED
  • RDS Platform (FE) PR: APPROVED
  • BYOK + Admin Config IMPL: IN_PROGRESS
  • Sentry Observability — Phase 1 (P0+P1) PR: APPROVED
  • Blocked: Agent E RDS database creation
  • Blocked: MERGE GATE (4 conditions): (1) Human provisions Anthropic + Google API keys, (2) Multi-LLM verified on staging (all 3 providers), (3) Agent E provisions BYOK_ENCRYPTION_KEY for both repos, (4) Agent E provisions LEMONADE_AI_URL for BE
  • Blocked: Agent E: provision env vars (soft — graceful degradation if unset)
Agent C
Security audits & hardening
BlockedSecurity
0Open PRs
3Features
  • tRPC Auth Hardening (CRIT-005) PRD
  • Auth → httpOnly Cookies (HIGH-002/003, MED-005/006, INFO-002) PRD
  • Redirect + Hostname Hardening (MED-001, MED-003) PRD
  • Blocked: Bridge + Agent C
  • Blocked: Bridge + Agent C/E
Agent A
Backend data layer & resolvers
BlockedBackend Data
0Open PRs
2Features
  • BYOK + Admin Config IMPL: IN_PROGRESS
  • Input Sanitization (CRIT-001/002/003) PRD
  • Blocked: MERGE GATE (4 conditions): (1) Human provisions Anthropic + Google API keys, (2) Multi-LLM verified on staging (all 3 providers), (3) Agent E provisions BYOK_ENCRYPTION_KEY for both repos, (4) Agent E provisions LEMONADE_AI_URL for BE
  • Blocked: Bridge + Agent A/C
Agent B
AI service & LangChain
BlockedAI Platform
0Open PRs
1Features
  • BYOK + Admin Config IMPL: IN_PROGRESS
  • Blocked: MERGE GATE (4 conditions): (1) Human provisions Anthropic + Google API keys, (2) Multi-LLM verified on staging (all 3 providers), (3) Agent E provisions BYOK_ENCRYPTION_KEY for both repos, (4) Agent E provisions LEMONADE_AI_URL for BE
Lead Agent
Orchestration & coordination
IdleLead
0Open PRs
0Features
Agent D
Test coverage & QA
IdleTesting
0Open PRs
0Features
Agent F
Connectors & integrations
IdlePlugins
0Open PRs
0Features
Agent G
PRDs & product strategy
IdleProduct
0Open PRs
0Features
Agent H
iOS app development
IdleiOS
0Open PRs
0Features
Agent I
macOS app development
IdlemacOS
0Open PRs
0Features
Karen
AI code review
IdlePR Review
0Open PRs
0Features
Bridge Agent
Cross-team coordination
IdleBridge
0Open PRs
0Features
Human Contributors
nooblemon-eth
Activehuman
19Open PRs
2Features
  • Community Vaults PR: MERGED
  • Security/a11y audit (FE-only) STAGING
thongxuan
Activehuman
13Open PRs
0Features
gnuzd
Activehuman
3Open PRs
2Features
  • Upgrade to Pro UI PR: OPEN
  • Manage Event Layout Refine PR: APPROVED
—
Activecontributor
5Open PRs
0Features
senior-fe-web-dev
Activecontributor
0Open PRs
3Features
  • TypeScript Build Safety IMPL: BLOCKED
  • NEXT_PUBLIC_ env audit + request type fix PR: MERGED
  • DX: .env.example documentation PR: APPROVED
namho102
Activehuman
0Open PRs
3Features
  • Web3 Library Reduction PR: OPEN
  • Gas limit fix STAGING
  • AI chat URL fix STAGING
harley, namho102
Activecontributor
0Open PRs
1Features
  • Dev tooling (Codex) STAGING

Karen Review Queue

AI code reviewer — reviews all agent PRs before merge
RepoPRTitleAuthorStatusReviewed
lemonade-backend#1960Subscription Feature GapsCredit System & BillingQueued
web-new#969Web3 Library ReductionActive WorkQueued
web-new#941Upgrade to Pro UIActive WorkQueued
lemonade-ai#66Apple Blockers (BE+DevOps)Apple Platform AppsChanges Req.
lemonade-cdk#310Apple Blockers (BE+DevOps)Apple Platform AppsChanges Req.
admin-panel#51feat: add staff-side hostname management and verification UInooblemon-ethChanges Req.2026-04-23
web-new#968RDS Platform (FE)Infrastructure & PlatformApproved
Page BuilderApproved
Page BuilderApproved
Page BuilderApproved
Page BuilderApproved
web-new#985E2E QA PipelineQA & TestingApproved
web-new#977Sentry Observability — Phase 1 (P0+P1)Codebase Health (Audit-Driven)Approved
lemonade-backend#1950feat: add connector sync scaffolding for Track B mapping/syncnooblemon-ethApproved2026-03-02
web-new#983feat: add connectors Track B mapping UI skeletonnooblemon-ethApproved2026-03-02
lemonade-ai#67feat: add space-scoped tool filtering for connector actionsnooblemon-ethApproved2026-03-02
AI-plugins#8feat: add Track B contract extensions for mapping/upsert/dry-runnooblemon-ethApproved2026-03-02
AI-plugins#7chore: make @lemonade/connectors consumable by backend via git refnooblemon-ethApproved2026-03-02
lemonade-backend#2156chore(atlas): clean up typecheck errors and over-broad lint suppressionsnooblemon-ethMerged2026-04-30
lemonade-backend#2155refactor(atlas): replace inlined Atlas server primitives with @atlas/server-sdknooblemon-ethMerged2026-04-30
lemonade-backend#2151feat: add /admin/geo-regions create + sync-events endpointsnooblemon-ethMerged2026-04-23
lemonade-backend#2150feat: add /admin/username-reservations import + airdrop endpointsnooblemon-ethMerged2026-04-23
lemonade-backend#2149feat: add 4 /admin CSV multipart import endpointsnooblemon-ethMerged2026-04-23
lemonade-backend#2148feat: add /admin/users/payment-verification + notifications endpointsnooblemon-ethMerged2026-04-23
lemonade-backend#2147feat: add /admin/events/:id/tickets + payments/export endpointsnooblemon-ethMerged2026-04-23
lemonade-backend#2145feat: add DNS-TXT domain verification for tenant hostnames and gate CORS on itnooblemon-ethMerged2026-04-22
lemonade-backend#2143fix: constrain CORS to env-driven origin allowlist on main public appnooblemon-ethMerged2026-04-22
lemonade-backend#2141feat: scaffold /admin/* router + helper endpoints for forest-migration phase 1nooblemon-ethMerged2026-04-22
web-new#921feat: Page Builder frontend — full implementationnooblemon-ethReviewed2026-02-28
web-new#1150feat(connector): add locked-status UI + friendly rate-limit/lockout toasts (PR-1nooblemon-ethMerged2026-04-16
web-new#1148fix(session): migrate inline documents to codegen imports; fix 6 runtime bugs onnooblemon-ethMerged2026-04-16
web-new#1147fix(gql): align session.gql with backend schema (unblocks codegen on master)nooblemon-ethMerged2026-04-16
web-new#1146feat(connector): update disconnectPlatform consumer for DisconnectResult schemanooblemon-ethMerged2026-04-15
lemonade-cdk#347chore: wire CORS_ALLOWED_ORIGINS env var into backend stack for staging and prodnooblemon-ethMerged2026-04-22
lemonade-cdk#343chore(runbook): add CREDENTIAL_ENCRYPTION_KEY provisioning runbooknooblemon-ethMerged2026-04-14
lemonade-cdk#303feat(k8s): upgrade cluster version to 1.33thongxuanMerged2026-02-26
lemonade-ai#130chore(atlas): correct boundary-cast comments to cite ESM/CJS dual-package hazardnooblemon-ethMerged2026-04-30
lemonade-ai#129refactor(atlas): replace inlined Atlas tooling with @atlas/agent-toolsnooblemon-ethMerged2026-04-30
lemonade-ai#86feat: add atlas mcp tools and langchain integrationnooblemon-ethMerged2026-03-19
lemonade-ai#83fix: forward authorization header to backend for mobile AI chatnooblemon-ethMerged2026-03-13
lemonade-ai#78feat: add rich card metadata and system prompt formatting rules (Phase 1)nooblemon-ethMerged2026-02-28
lemonade-ai#75fix: karen credit callback remediationnooblemon-ethMerged2026-02-27
lemonade-ai#73feat: add multi-LLM model factory (Phase 2)nooblemon-ethMerged2026-02-27
lemonade-ai#72feat: add MCP prompts and resourcesnooblemon-ethMerged2026-02-26
lemonade-ai#64feat: add LangChain usage callback for credit systemnooblemon-ethMerged2026-02-26
lemonade-ios#94feat(notifications): Phase 5 — Notification Service Extension for rich pushnooblemon-ethMerged2026-04-20
lemonade-ios#92feat(notifications): WebSocket subscription + live inbox + badge managernooblemon-ethMerged2026-04-20
lemonade-ios#91feat(notifications): typed filter + channel preference CRUDnooblemon-ethMerged2026-04-20
lemonade-ios#90feat(push): single-seam device-token registration servicenooblemon-ethMerged2026-04-20
lemonade-ios#87feat: add missing ConnectionStatus cases and displayLabelnooblemon-ethMerged2026-04-19
lemonade-ios#56feat: add XMTP push notifications via APNSnooblemon-ethMerged2026-04-01
0Open PRs
1Merged (14d)
36Stale
—Latest
lemonade-backend 13 open
13Open PRs
0Merged (14d)
0Stale
—Latest
web-new 10 open
10Open PRs
0Merged (14d)
0Stale
—Latest
lemonade-cdk 6 open
6Open PRs
0Merged (14d)
0Stale
—Latest
lemonade-ai 6 open
6Open PRs
0Merged (14d)
0Stale
—Latest
admin-panel 2 open
2Open PRs
0Merged (14d)
0Stale
—Latest
AI-plugins 2 open
2Open PRs
0Merged (14d)
0Stale
2026-03-02Latest
lemonade-ios 1 open
1Open PRs
0Merged (14d)
0Stale
2026-04-03Latest
40 Open PRs
33 Pending Review
2 Approved
1 Merged (14d)
36 Stale (>7d)
22 Blocked Features

Recent Activity

2 events
RepoPRActionTitleAuthorDate
———No changes in the last 24 hours——
—MergedNo recently merged PRs——
lemonade-backend (13 human PRs)
PRTitleAuthorCreatedReview
#2046 fix: make EventTicketPrice.payment_accounts_expanded items nullable thongxuan 2026-04-01 PENDING
#1951 fix: delete expired MemoryCache entries on read and add size gauges nooblemon-eth 2026-03-03 PENDING
#1950 feat: add connector sync scaffolding for Track B mapping/sync nooblemon-eth 2026-03-02 PENDING
#1947 fix: harden AI tool bridge page-builder mutations with service-layer validation nooblemon-eth 2026-02-28 PENDING
#1830 feat(space-insight): improve queries thongxuan 2025-12-23 PENDING
#1818 fix(space): fix slow insight queries thongxuan 2025-12-12 PENDING
#1801 fix(event): process value 0 of event ticket limit per thongxuan 2025-11-17 PENDING
#1795 feat(smart-account): allow user to create smart accounts thongxuan 2025-11-14 PENDING
#1768 feat(self-xyz): validate included countries thongxuan 2025-10-22 PENDING
#1767 fix(token-gate): fix token gate message thongxuan 2025-10-21 PENDING
#1726 feat(space): attach payment accounts thongxuan 2025-09-18 PENDING
#1709 feat(payment-account): group payment account thongxuan 2025-09-11 PENDING
— *+ 19 bot PRs (dependabot/renovate) hidden* — — —
web-new (10 human PRs)
PRTitleAuthorCreatedReview
#1008 feat: add subscription & credits management to space settings thongxuan 2026-03-06 PENDING
#983 feat: add connectors Track B mapping UI skeleton nooblemon-eth 2026-03-02 PENDING
#979 feat(page-builder): add AI draft/apply/revert preview flow nooblemon-eth 2026-02-28 PENDING
#968 feat: RDS platform dashboard reads — Prisma 7 + tRPC analytics nooblemon-eth 2026-02-27 PENDING
#921 feat: Page Builder frontend — full implementation nooblemon-eth 2026-02-22 APPROVED
#767 feat!: hub music player gnuzd 2025-12-10 PENDING
#752 Feat/smart account thongxuan 2025-12-02 PENDING
#702 feat: update address field application form gnuzd 2025-11-08 APPROVED
#279 fix: optimize event listeners gnuzd 2025-06-17 PENDING
— *+ 16 bot PRs (dependabot/renovate) hidden* — — —
lemonade-cdk (6 human PRs)
PRTitleAuthorCreatedReview
#349 feat: add lemonade platform stack thongxuan 2026-04-24 PENDING
#323 chore: set NODE_OPTIONS max-old-space-size to 75% of memory limit nooblemon-eth 2026-03-03 PENDING
#322 docs: add page-builder feature flag contract and operator runbook nooblemon-eth 2026-02-28 PENDING
#311 docs: add new stack/repo checklist to CLAUDE.md thongxuan 2026-02-25 PENDING
#310 feat: add releases stack for Sparkle CDN and AASA file hosting nooblemon-eth 2026-02-25 PENDING
— *+ 5 bot PRs (dependabot/renovate) hidden* — — —
lemonade-ai (6 human PRs)
PRTitleAuthorCreatedReview
#95 feat: add mcp schema export script nooblemon-eth 2026-03-30 PENDING
#80 fix: bound cachedToolInfo LRU, close leaked change streams, add metrics nooblemon-eth 2026-03-03 PENDING
#79 feat: add tool-call allowlist, redacted audit logging, and metadata hardening nooblemon-eth 2026-02-28 PENDING
#67 feat: add space-scoped tool filtering for connector actions nooblemon-eth 2026-02-25 PENDING
#66 feat: add contextId to langchain.run() for Apple app context scoping nooblemon-eth 2026-02-25 PENDING
— *+ 16 bot PRs (dependabot/renovate) hidden* — — —
lemonade-ios (1 human PRs)
PRTitleAuthorCreatedReview
#73 fix: phrase recovery PIN + rate limit parsing + address delete nooblemon-eth 2026-04-03 PENDING
admin-panel (2 human PRs)
PRTitleAuthorCreatedReview
#51 feat: add staff-side hostname management and verification UI nooblemon-eth 2026-04-23 PENDING
— *+ 15 bot PRs (dependabot/renovate) hidden* — — —
AI-plugins (2 human PRs)
PRTitleAuthorCreatedReview
#8 feat: add Track B contract extensions for mapping/upsert/dry-run nooblemon-eth 2026-03-02 PENDING
#7 chore: make @lemonade/connectors consumable by backend via git ref nooblemon-eth 2026-03-02 PENDING

Stale PRs

Human PRs with no activity > 7 days
36
Critical (90+ days) (35 PRs)
RepoPRTitleAuthorLast UpdatedDays
#1709feat(payment-account): group payment accountthongxuan2025-09-11352d
#1726feat(space): attach payment accountsthongxuan2025-09-29334d
#1767fix(token-gate): fix token gate messagethongxuan2025-10-21312d
#1768feat(self-xyz): validate included countriesthongxuan2025-10-25308d
#1795feat(smart-account): allow user to create smart accountsthongxuan2025-11-14288d
#1801fix(event): process value 0 of event ticket limit perthongxuan2025-11-17285d
#1818fix(space): fix slow insight queriesthongxuan2025-12-12260d
#1830feat(space-insight): improve queriesthongxuan2025-12-23249d
#767feat!: hub music playergnuzd2026-02-23187d
#752Feat/smart accountthongxuan2026-02-23187d
#702feat: update address field application formgnuzd2026-02-23187d
#279fix: optimize event listenersgnuzd2026-02-23187d
#311docs: add new stack/repo checklist to CLAUDE.mdthongxuan2026-02-25185d
#310feat: add releases stack for Sparkle CDN and AASA file hostingnooblemon-eth2026-02-25185d
#66feat: add contextId to langchain.run() for Apple app context scopingnooblemon-eth2026-02-25185d
#1947fix: harden AI tool bridge page-builder mutations with service-layer validationnooblemon-eth2026-02-28182d
#979feat(page-builder): add AI draft/apply/revert preview flownooblemon-eth2026-02-28182d
#322docs: add page-builder feature flag contract and operator runbooknooblemon-eth2026-02-28182d
#79feat: add tool-call allowlist, redacted audit logging, and metadata hardeningnooblemon-eth2026-02-28182d
#67feat: add space-scoped tool filtering for connector actionsnooblemon-eth2026-03-02180d
#8feat: add Track B contract extensions for mapping/upsert/dry-runnooblemon-eth2026-03-02180d
#7chore: make @lemonade/connectors consumable by backend via git refnooblemon-eth2026-03-02180d
#1951fix: delete expired MemoryCache entries on read and add size gaugesnooblemon-eth2026-03-03179d
#1950feat: add connector sync scaffolding for Track B mapping/syncnooblemon-eth2026-03-02179d
#983feat: add connectors Track B mapping UI skeletonnooblemon-eth2026-03-02179d
#968feat: RDS platform dashboard reads — Prisma 7 + tRPC analyticsnooblemon-eth2026-03-03179d
#323chore: set NODE_OPTIONS max-old-space-size to 75% of memory limitnooblemon-eth2026-03-03179d
#80fix: bound cachedToolInfo LRU, close leaked change streams, add metricsnooblemon-eth2026-03-03179d
#921feat: Page Builder frontend — full implementationnooblemon-eth2026-03-04178d
#1008feat: add subscription & credits management to space settingsthongxuan2026-03-06176d
#95feat: add mcp schema export scriptnooblemon-eth2026-03-30152d
#2046fix: make EventTicketPrice.payment_accounts_expanded items nullablethongxuan2026-04-01150d
#73fix: phrase recovery PIN + rate limit parsing + address deletenooblemon-eth2026-04-03148d
#51feat: add staff-side hostname management and verification UInooblemon-eth2026-04-23128d
#349feat: add lemonade platform stackthongxuan2026-04-24127d
Warning (7–30 days) (1 PRs)
RepoPRTitleAuthorLast UpdatedDays
—*+ 71 bot PRs (dependabot/renovate) hidden*——0d

Pending Releases

Release-please PRs gating production deploy
RepoRelease PRIncludesStatus
lemonade-backend#1899 (release 34.61.0)Credit System, Subscription Tiers, Admin Panel BE, RDS Migrations, model conventions, ~~MCP Expansion~~ (reverted), + be#1911 (field rename), be#1930 (Credit Pricing v2), be#1933 (subscription tiers fix), be#1934 (credit fix), be#1935 (deploy revert), be#1940 (MCP expansion 24 resolvers), be#1929 (Multi-LLM provider schema), be#1919 (MCP seed workflow)Merged 2026-02-28 — staging deploy inferred. Production: Unknown.
lemonade-ai#65 (release 1.25.0)Credit usage callback, RDS logging, + ai#74 (dynamic credit pricing v2), ai#73 (Multi-LLM model factory)Merged 2026-02-28 — staging deploy inferred. Production: Unknown.
lemonade-cdk#304 (release 5.41.0)EKS 1.33, AdminPanelStack, pg-migrate init container, Kratos admin URLs, SSM fixOpen

Staging Blockers

IssuePRImpactSeverity
HUMAN ACTION: Provision Anthropic + Google API keysbe#1929 + ai#73 (merged)Multi-LLM model factory deployed to staging but cannot route to Anthropic/Google models without API keys in Secrets Manager. OpenAI routing works (key exists).HIGH
HUMAN ACTION: Add CROSS_REPO_PAT repo secret to lemonade-backendbe#1949 (open, CI BLOCKED)CROSS_REPO_PAT secret in lemonade-backend is required for CI to fetch private @lemonade/connectors dependency (AI-plugins repo) via git URL. be#1949 CI 3/4 FAILING: yarn install → Repository not found. PAT needs read access to lemonadesocial/AI-plugins. Track A connector merges blocked until resolved. Checklist R9.CRITICAL
Agent E: Provision Sentry env varsweb-new#977 (open, Karen APPROVED)Phase 1 code uses NEXT_PUBLIC_SENTRY_DSN (falls back to empty string = Sentry disabled). For full observability on staging, Agent E must add 4 env vars. DSN value: https://136a7ae901625d8fa9c8aa3bda0313a5@o415373.ingest.us.sentry.io/4508968908947456MEDIUM

Codebase Audit Findings

64 findings from web-new v10.7.0 audit
Merged33
Needs re-PR14
Blocked4
Skipped2
Pending11
IDSeverityDescriptionScopeStatusPR
CRIT-001CriticalSanitize NFT `image_data` with DOMPurifyFE+BEPending—
CRIT-002CriticalSanitize `event.description` with DOMPurifyFE+BEPending—
CRIT-003CriticalSanitize `event.terms_text` with DOMPurifyFE+BEPending—
CRIT-005CriticalAdd tRPC auth middleware + replace `z.any()`FE+BEPending—
HIGH-002HighRemove `dummyWalletPassword`, implement SIWEFE+BEPending—
HIGH-003HighReplace localStorage with cookie authFE+BEPending—
MED-001MediumValidate redirect domains in `useSignIn`FE+BEPending—
MED-005MediumRemove sessionStorage auth tokensFE+BEPending—
MED-006MediumSend auth tokens in headers, not bodyFE+BEPending—
INFO-002InfoConsume auth from httpOnly cookiesFE+BEPending—
MED-003MediumAdd hostname allowlist in middlewareFE+BEPending—
CRIT-004CriticalAdd error boundaries to 5 key route segmentsFE-onlyMerged#922
CRIT-006CriticalAdd try/catch to 5 unprotected API routesFE-onlyMerged#922
CRIT-007CriticalRemove stack trace exposure from error UI and API responsesFE-onlyMerged#922
CRIT-008CriticalAdd alt attributes to 30 images across 14 filesFE-onlyMerged#922
CRIT-009CriticalAdd aria-labels to 22 icon-only buttons across 14 filesFE-onlyMerged#922
CRIT-010CriticalAdd dialog a11y to modal, drawer, bottomsheetFE-onlyMerged#922
HIGH-001HighSanitize marked() output with DOMPurifyFE-onlyMerged#923
HIGH-004HighAdd SSRF protection to /api/og/extractorFE-onlyMerged#923
HIGH-005HighRemove hardcoded Thirdweb client ID fallbackFE-onlyMerged#923
HIGH-006HighRemove `ignoreBuildErrors`/`ignoreDuringBuilds`FE-onlyBlocked—
HIGH-007HighAdd `'use client'` to 25 hook filesFE-onlyMerged#923
HIGH-008HighPush `'use client'` down from payments layoutFE-onlyMerged#923
HIGH-009HighReplace ~140 explicit `any` typesFE-onlyMerged#924
HIGH-010HighReplace non-null assertions with safe alternatives (43 files)FE-onlyNeeds re-PR#925
HIGH-011HighEliminate double-assertion patternsFE-onlyMerged#926
HIGH-012HighSplit 33 oversized components (max 1,090 lines)FE-onlyBlocked—
HIGH-013HighAdd global focus-visible styles for keyboard a11yFE-onlyMerged#923
HIGH-014HighReplace non-semantic `<div onClick>` with `<button>`FE-onlyMerged#923
HIGH-015HighFix label/input associations for a11yFE-onlyMerged#923
HIGH-016HighAdd `role="alert"` and `aria-live` to ErrorTextFE-onlyMerged#923
HIGH-017HighAdd `role="dialog"` to modalsFE-onlyMerged#923
HIGH-018HighReplace console.log/error with SentryFE-onlyMerged#927
HIGH-019HighAdd next/dynamic imports for heavy librariesFE-onlyNeeds re-PR#928
HIGH-020HighRemove unused dependenciesFE-onlyMerged#923
HIGH-021HighDelete legacy directories (15 dead files)FE-onlyMerged#923
HIGH-022HighMove lodash to dependenciesFE-onlyMerged#923
MED-002MediumStrip authCookie param from URL after readingFE-onlyNeeds re-PR#929
MED-004MediumRemove stack trace from passport API error responseFE-onlyNeeds re-PR#929
MED-007MediumVerify Google Maps/Giphy API key restrictionsFE-onlySkipped—
MED-008MediumSanitize passport intro title with DOMPurifyFE-onlyNeeds re-PR#929
MED-009MediumAdd skip-to-content link in root layoutFE-onlyNeeds re-PR#929
MED-010MediumFix heading hierarchy (h1→h3 skip)FE-onlyNeeds re-PR#929
MED-011MediumIncrease quaternary text color contrastFE-onlyNeeds re-PR#929
MED-012MediumReplace `catch(error: any)` with `catch(error: unknown)`FE-onlyMerged#930
MED-013MediumFix GraphQL client to reject on errorFE-onlyBlocked—
MED-014MediumAdd error/loading states to 23 useQuery callsFE-onlyNeeds re-PR#931
MED-015MediumConfigure QueryClient staleTime and gcTimeFE-onlyNeeds re-PR#929
MED-016MediumExtract inline arrow functions (509 instances)FE-onlySkipped—
MED-017MediumReplace silent `.catch(() => 0n)` with error loggingFE-onlyNeeds re-PR#929
MED-018MediumDelete commented-out imports across 12 filesFE-onlyNeeds re-PR#929
LOW-001Low(finding description not captured)FE-onlyMerged#932
LOW-002LowAdd middleware cache for space hostname lookupsFE-onlyNeeds re-PR#933
LOW-003Low(finding description not captured)FE-onlyMerged#932
LOW-004LowAdd `aria-hidden` to 518 decorative iconsFE-onlyMerged#934
LOW-005LowAdd `lang="en"` to global-error.tsxFE-onlyMerged#932
LOW-006LowRename duplicate function definitionsFE-onlyMerged#932
LOW-007LowDelete duplicate `.lintstagedrc.js` configFE-onlyMerged#935
LOW-008LowReplace XXXXXXXX placeholder stringsFE-onlyNeeds re-PR#936
LOW-009LowReplace `div role="button"` with semantic `<button>`FE-onlyMerged#932
LOW-010LowRemove unnecessary `'use client'` from skeleton/radialFE-onlyMerged#932
INFO-004InfoConsolidate 4 overlapping Web3 librariesFE-onlyBlocked—
ENV-001AdditionalAudit all `NEXT_PUBLIC_` env vars for leaked secretsFE-onlyMerged#971
ENV-002AdditionalFix `request.ts body?: any` typeFE-onlyMerged#971

Sentry Error Tracking

Production errors from web-new
Unresolved0
Investigating0
Fix in PR0
Resolved0
Ignored0
IDLevelTitleCulpritOccurrencesUsersLast SeenAgent Status