@ak--47/dungeon-master 1.6.1 → 1.6.3

package/dungeons/vertical/fintech/fintech.verify.mjs

@@ -17,7 +17,7 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
-import { buildIdentityMap, evaluateStories, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
+import { buildIdentityMap, evaluateStories, validateDungeonConfig, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
 import config, { stories } from './fintech.js';
 
 const PREFIX = process.argv[2] || 'verify-fintech';
@@ -51,11 +51,11 @@ const runSql = async (sql) => {
 	return stdout.trim() ? JSON.parse(stdout) : [];
 };
 
-// funnels passed raw (unvalidated) — every timeToConvert story carries an
-// explicit conversionWindowMs, so no funnel-default threading is needed
 const results = await evaluateStories(stories, events, {
 	profiles,
-	funnels: config.funnels,
+	// funnel defaults (conversionWindowDays, order) resolve on the VALIDATED
+	// config — the dungeon was not run in this process, so validate here.
+	funnels: validateDungeonConfig({ ...config, token: '' }).funnels,
 	identityMap: buildIdentityMap(profiles),
 	runSql,
 });

package/dungeons/vertical/fitness/fitness.verify.mjs

@@ -17,7 +17,7 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
-import { buildIdentityMap, evaluateStories, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
+import { buildIdentityMap, evaluateStories, validateDungeonConfig, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
 import config, { stories } from './fitness.js';
 
 const PREFIX = process.argv[2] || 'verify-fitness';
@@ -51,12 +51,11 @@ const runSql = async (sql) => {
 	return stdout.trim() ? JSON.parse(stdout) : [];
 };
 
-// funnels passed raw (unvalidated) — the H9 stories carry their own explicit
-// conversion window (48h generative window × the 1.25 max stretch factor,
-// covering the stretched support), so no funnel-default threading is needed
 const results = await evaluateStories(stories, events, {
 	profiles,
-	funnels: config.funnels,
+	// funnel defaults (conversionWindowDays, order) resolve on the VALIDATED
+	// config — the dungeon was not run in this process, so validate here.
+	funnels: validateDungeonConfig({ ...config, token: '' }).funnels,
 	identityMap: buildIdentityMap(profiles),
 	runSql,
 });

package/dungeons/vertical/food-delivery/food-delivery.verify.mjs

@@ -18,7 +18,7 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
-import { buildIdentityMap, evaluateStories, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
+import { buildIdentityMap, evaluateStories, validateDungeonConfig, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
 import config, { stories } from './food-delivery.js';
 
 const PREFIX = process.argv[2] || 'verify-food-delivery';
@@ -60,7 +60,9 @@ const runSql = async (sql) => {
 // confounds a raw emulator read would inherit.
 const results = await evaluateStories(stories, events, {
 	profiles,
-	funnels: config.funnels,
+	// funnel defaults (conversionWindowDays, order) resolve on the VALIDATED
+	// config — the dungeon was not run in this process, so validate here.
+	funnels: validateDungeonConfig({ ...config, token: '' }).funnels,
 	identityMap: buildIdentityMap(profiles),
 	runSql,
 });

package/dungeons/vertical/gaming/gaming.verify.mjs

@@ -17,7 +17,7 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
-import { buildIdentityMap, evaluateStories, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
+import { buildIdentityMap, evaluateStories, validateDungeonConfig, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
 import config, { stories } from './gaming.js';
 
 const PREFIX = process.argv[2] || 'verify-gaming';
@@ -51,11 +51,11 @@ const runSql = async (sql) => {
 	return stdout.trim() ? JSON.parse(stdout) : [];
 };
 
-// funnels passed raw (unvalidated) — every timeToConvert story carries an
-// explicit conversionWindowMs, so no funnel-default threading is needed
 const results = await evaluateStories(stories, events, {
 	profiles,
-	funnels: config.funnels,
+	// funnel defaults (conversionWindowDays, order) resolve on the VALIDATED
+	// config — the dungeon was not run in this process, so validate here.
+	funnels: validateDungeonConfig({ ...config, token: '' }).funnels,
 	identityMap: buildIdentityMap(profiles),
 	runSql,
 });

package/dungeons/vertical/healthcare/healthcare.verify.mjs

@@ -17,7 +17,7 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
-import { buildIdentityMap, evaluateStories, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
+import { buildIdentityMap, evaluateStories, validateDungeonConfig, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
 import config, { stories } from './healthcare.js';
 
 const PREFIX = process.argv[2] || 'verify-healthcare';
@@ -51,13 +51,11 @@ const runSql = async (sql) => {
 	return stdout.trim() ? JSON.parse(stdout) : [];
 };
 
-// funnels passed raw (unvalidated) — the H8/H9 stories carry their own
-// explicit conversion windows (derived from the funnel's generative window
-// × the max H9 stretch factor, covering the stretched support), so no
-// funnel-default threading is needed
 const results = await evaluateStories(stories, events, {
 	profiles,
-	funnels: config.funnels,
+	// funnel defaults (conversionWindowDays, order) resolve on the VALIDATED
+	// config — the dungeon was not run in this process, so validate here.
+	funnels: validateDungeonConfig({ ...config, token: '' }).funnels,
 	identityMap: buildIdentityMap(profiles),
 	runSql,
 });

package/dungeons/vertical/insurance-application/insurance-application.verify.mjs

@@ -18,7 +18,7 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
-import { buildIdentityMap, evaluateStories, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
+import { buildIdentityMap, evaluateStories, validateDungeonConfig, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
 import config, { stories } from './insurance-application.js';
 
 const PREFIX = process.argv[2] || 'verify-insurance-application';
@@ -59,7 +59,9 @@ const runSql = async (sql) => {
 // because H5 pins approvals to firstStart + target + [0,4h) by construction.
 const results = await evaluateStories(stories, events, {
 	profiles,
-	funnels: config.funnels,
+	// funnel defaults (conversionWindowDays, order) resolve on the VALIDATED
+	// config — the dungeon was not run in this process, so validate here.
+	funnels: validateDungeonConfig({ ...config, token: '' }).funnels,
 	identityMap: buildIdentityMap(profiles),
 	runSql,
 });

package/dungeons/vertical/logistics/logistics.verify.mjs

@@ -17,7 +17,7 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
-import { buildIdentityMap, evaluateStories, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
+import { buildIdentityMap, evaluateStories, validateDungeonConfig, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
 import config, { stories } from './logistics.js';
 
 const PREFIX = process.argv[2] || 'verify-logistics';
@@ -51,14 +51,11 @@ const runSql = async (sql) => {
 	return stdout.trim() ? JSON.parse(stdout) : [];
 };
 
-// funnels passed raw (unvalidated) — the emulator stories carry their own
-// explicit conversion windows (H8: 48h Integration Setup treated arm, 336h
-// Supplier Management placebo; H10: 93.6h = 72h Onboarding generative
-// window × the 1.3 small-business stretch, covering the stretched support),
-// so no funnel-default threading is needed
 const results = await evaluateStories(stories, events, {
 	profiles,
-	funnels: config.funnels,
+	// funnel defaults (conversionWindowDays, order) resolve on the VALIDATED
+	// config — the dungeon was not run in this process, so validate here.
+	funnels: validateDungeonConfig({ ...config, token: '' }).funnels,
 	identityMap: buildIdentityMap(profiles),
 	runSql,
 });

package/dungeons/vertical/marketplace/marketplace.verify.mjs

@@ -18,7 +18,7 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
-import { buildIdentityMap, evaluateStories, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
+import { buildIdentityMap, evaluateStories, validateDungeonConfig, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
 import config, { stories } from './marketplace.js';
 
 const PREFIX = process.argv[2] || 'verify-marketplace';
@@ -59,7 +59,9 @@ const runSql = async (sql) => {
 // windows admit cross-instance chains that contaminate the fast tail.
 const results = await evaluateStories(stories, events, {
 	profiles,
-	funnels: config.funnels,
+	// funnel defaults (conversionWindowDays, order) resolve on the VALIDATED
+	// config — the dungeon was not run in this process, so validate here.
+	funnels: validateDungeonConfig({ ...config, token: '' }).funnels,
 	identityMap: buildIdentityMap(profiles),
 	runSql,
 });

package/dungeons/vertical/media/media.verify.mjs

@@ -18,7 +18,7 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
-import { buildIdentityMap, evaluateStories, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
+import { buildIdentityMap, evaluateStories, validateDungeonConfig, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
 import config, { stories } from './media.js';
 
 const PREFIX = process.argv[2] || 'verify-media';
@@ -59,7 +59,9 @@ const runSql = async (sql) => {
 // vs cross-session) and flips on sampling noise.
 const results = await evaluateStories(stories, events, {
 	profiles,
-	funnels: config.funnels,
+	// funnel defaults (conversionWindowDays, order) resolve on the VALIDATED
+	// config — the dungeon was not run in this process, so validate here.
+	funnels: validateDungeonConfig({ ...config, token: '' }).funnels,
 	identityMap: buildIdentityMap(profiles),
 	runSql,
 });

package/dungeons/vertical/real-estate/real-estate.verify.mjs

@@ -17,7 +17,7 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
-import { buildIdentityMap, evaluateStories, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
+import { buildIdentityMap, evaluateStories, validateDungeonConfig, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
 import config, { stories } from './real-estate.js';
 
 const PREFIX = process.argv[2] || 'verify-real-estate';
@@ -51,16 +51,11 @@ const runSql = async (sql) => {
 	return stdout.trim() ? JSON.parse(stdout) : [];
 };
 
-// funnels passed raw (unvalidated) — H10's emulator stories carry their own
-// conversion window: 31.2h = 24h generative Tour Funnel TTC × the 1.3
-// Standard-tier stretch, so the stretched support is fully covered. The
-// PRIMARY read is the 2-step view→tour-scheduled pair; the doc's 3-step read
-// (…→offer submitted) stays as a directional secondary because H4/H6 offer
-// clones at random timestamps collide with the greedy third-step pick and
-// attenuate the ratio toward 1 (see the H10 story narrative).
 const results = await evaluateStories(stories, events, {
 	profiles,
-	funnels: config.funnels,
+	// funnel defaults (conversionWindowDays, order) resolve on the VALIDATED
+	// config — the dungeon was not run in this process, so validate here.
+	funnels: validateDungeonConfig({ ...config, token: '' }).funnels,
 	identityMap: buildIdentityMap(profiles),
 	runSql,
 });

package/dungeons/vertical/sass/sass.verify.mjs

@@ -17,7 +17,7 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
-import { buildIdentityMap, evaluateStories, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
+import { buildIdentityMap, evaluateStories, validateDungeonConfig, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
 import config, { stories } from './sass.js';
 
 const PREFIX = process.argv[2] || 'verify-sass';
@@ -59,7 +59,9 @@ const runSql = async (sql) => {
 // a slow organic tail that dilutes the segment medians.
 const results = await evaluateStories(stories, events, {
 	profiles,
-	funnels: config.funnels,
+	// funnel defaults (conversionWindowDays, order) resolve on the VALIDATED
+	// config — the dungeon was not run in this process, so validate here.
+	funnels: validateDungeonConfig({ ...config, token: '' }).funnels,
 	identityMap: buildIdentityMap(profiles),
 	runSql,
 });

package/dungeons/vertical/social/social.verify.mjs

@@ -17,7 +17,7 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
-import { buildIdentityMap, evaluateStories, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
+import { buildIdentityMap, evaluateStories, validateDungeonConfig, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
 import config, { stories } from './social.js';
 
 const PREFIX = process.argv[2] || 'verify-social';
@@ -61,7 +61,9 @@ const runSql = async (sql) => {
 // across 1h-24h windows.
 const results = await evaluateStories(stories, events, {
 	profiles,
-	funnels: config.funnels,
+	// funnel defaults (conversionWindowDays, order) resolve on the VALIDATED
+	// config — the dungeon was not run in this process, so validate here.
+	funnels: validateDungeonConfig({ ...config, token: '' }).funnels,
 	identityMap: buildIdentityMap(profiles),
 	runSql,
 });

package/dungeons/vertical/streaming/streaming.verify.mjs

@@ -17,7 +17,7 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
-import { buildIdentityMap, evaluateStories, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
+import { buildIdentityMap, evaluateStories, validateDungeonConfig, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
 import config, { stories } from './streaming.js';
 
 const PREFIX = process.argv[2] || 'verify-streaming';
@@ -60,7 +60,9 @@ const runSql = async (sql) => {
 // campaign cohort without needing hashFloat in SQL.
 const results = await evaluateStories(stories, events, {
 	profiles,
-	funnels: config.funnels,
+	// funnel defaults (conversionWindowDays, order) resolve on the VALIDATED
+	// config — the dungeon was not run in this process, so validate here.
+	funnels: validateDungeonConfig({ ...config, token: '' }).funnels,
 	identityMap: buildIdentityMap(profiles),
 	runSql,
 });

package/dungeons/vertical/support-desk/support-desk.verify.mjs

@@ -17,7 +17,7 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
-import { buildIdentityMap, evaluateStories, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
+import { buildIdentityMap, evaluateStories, validateDungeonConfig, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
 import config, { stories } from './support-desk.js';
 
 const PREFIX = process.argv[2] || 'verify-support-desk';
@@ -60,7 +60,9 @@ const runSql = async (sql) => {
 // > 30 min) and split by role without needing hashFloat.
 const results = await evaluateStories(stories, events, {
 	profiles,
-	funnels: config.funnels,
+	// funnel defaults (conversionWindowDays, order) resolve on the VALIDATED
+	// config — the dungeon was not run in this process, so validate here.
+	funnels: validateDungeonConfig({ ...config, token: '' }).funnels,
 	identityMap: buildIdentityMap(profiles),
 	runSql,
 });

package/dungeons/vertical/travel/travel.verify.mjs

@@ -17,7 +17,7 @@ import path from 'node:path';
 import readline from 'node:readline';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
-import { buildIdentityMap, evaluateStories, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
+import { buildIdentityMap, evaluateStories, validateDungeonConfig, VERDICT_RANK } from '@ak--47/dungeon-master/verify';
 import config, { stories } from './travel.js';
 
 const PREFIX = process.argv[2] || 'verify-travel';
@@ -51,13 +51,11 @@ const runSql = async (sql) => {
 	return stdout.trim() ? JSON.parse(stdout) : [];
 };
 
-// funnels passed raw (unvalidated) — the H8/H9 emulator stories carry their
-// own explicit conversion windows (72h Onboarding; 48h Search to Book
-// generative window × the 1.25 budget/leisure stretch = 60h, covering the
-// stretched support), so no funnel-default threading is needed
 const results = await evaluateStories(stories, events, {
 	profiles,
-	funnels: config.funnels,
+	// funnel defaults (conversionWindowDays, order) resolve on the VALIDATED
+	// config — the dungeon was not run in this process, so validate here.
+	funnels: validateDungeonConfig({ ...config, token: '' }).funnels,
 	identityMap: buildIdentityMap(profiles),
 	runSql,
 });

package/index.js

@@ -20,7 +20,7 @@ import { extractComments } from './lib/core/extract-comments.js';
 
 // Orchestrators
 import { userLoop } from './lib/orchestrators/user-loop.js';
-import { sendToMixpanel, collectWrittenFiles } from './lib/orchestrators/mixpanel-sender.js';
+import { sendToMixpanel, collectWrittenFiles, releaseConnections } from './lib/orchestrators/mixpanel-sender.js';
 // Generators
 import { makeAdSpend } from './lib/generators/adspend.js';
 import { makeMirror } from './lib/generators/mirror.js';
@@ -291,6 +291,12 @@ async function runDungeon(config) {
 			eventCount: context.getStoredEventCount(),
 			userCount: context.getUserCount(),
 			profilesPushed,
+			// v1.6.2: the enriched config this run actually used. `validateDungeonConfig`
+			// no longer writes back to the caller's object, so consumers that need
+			// resolved values (`funnels[].conversionWindowDays`, `events[].isStrictEvent`,
+			// the resolved dataset window) read them here. `verifyDungeon` depends on this.
+			// Credentials are stripped — a Result is a thing hosts log.
+			validatedConfig: redactCredentials(validatedConfig),
 			...(progressSummary.updates > 0 || progressSummary.errors > 0 ? { progress: progressSummary } : {})
 		};
 
@@ -560,6 +566,26 @@ async function flushStorageToDisk(storage, config) {
 	}
 }
 
+/**
+ * Shallow copy of the validated config with every credential removed, for the
+ * `validatedConfig` field on a Result.
+ *
+ * A Result is a thing hosts log, serialize, and attach to CI artifacts. Before
+ * v1.6.2 it carried no credentials at all, and surfacing the resolved config
+ * shouldn't quietly change that: the run object holds `token`, `serviceAccount`,
+ * `serviceSecret` and `projectId` both flattened and under `credentials`.
+ * @param {import('./types').Dungeon} validated
+ * @returns {import('./types').Dungeon}
+ */
+function redactCredentials(validated) {
+	if (!validated || typeof validated !== 'object') return validated;
+	const safe = { ...validated };
+	for (const key of ['token', 'serviceAccount', 'serviceSecret', 'projectId', 'credentials']) {
+		delete safe[key];
+	}
+	return safe;
+}
+
 /**
  * Extract file information from storage containers
  * @param {import('./types').Storage} storage - Storage object
@@ -604,4 +630,7 @@ function extractStorageData(storage) {
 // ES Module exports
 export default DUNGEON_MASTER;
 export { parseJSONDungeon, validateDungeonShape, loadFromFile, loadFromText, dungeonToJSON, extractComments };
+// v1.6.2: pool teardown is automatic when the last import settles; exported for hosts
+// that drive `mixpanel-import` themselves and want the same cleanup.
+export { releaseConnections };
 

package/lib/core/config-validator.js

@@ -407,13 +407,31 @@ function resolveDevicesPerUser(config) {
 }
 
 /**
- * Validates and enriches a dungeon configuration object
+ * Validates and enriches a dungeon configuration object.
+ *
+ * **Does not mutate its input** (as of v1.6.2). Enrichment lands only on the
+ * returned object. Callers that need the enriched `events` / `funnels` must read
+ * the return value — reading them back off the object they passed in worked
+ * before v1.6.2 and no longer does.
+ *
  * @param {Partial<Dungeon>} config - Raw configuration object
  * @returns {Dungeon} Validated and enriched configuration
  */
 export function validateDungeonConfig(config) {
 	const chance = u.getChance();
 
+	// v1.6.2: own our input. Enrichment below writes through to the caller's
+	// nested objects otherwise — `isStrictEvent` onto `events[i]`,
+	// `conversionWindowDays` / `_experiment` onto `funnels[j]`. For a dungeon
+	// loaded from a file those arrays belong to the ESM module cache, so a second
+	// run in the same process was handed a config already enriched by the first:
+	// every event pre-promoted to strict, the catch-all funnel swept nothing, and
+	// event volume collapsed. Enrichment is also not idempotent — re-validating an
+	// already-validated config rebuilds the funnel set incorrectly.
+	// deepClone keeps functions by reference, so `hook`, `onProgress` and
+	// chance-bound prop thunks survive.
+	config = u.deepClone(config);
+
 	// v1.5.1 (TODO #8): merge `switches` / `identity` / `credentials`
 	// sub-objects into top-level keys. New shape is preferred; old top-level
 	// keys still honored for back-compat with a verbose-gated warning. The

package/lib/hook-helpers/_internal.js

@@ -1,3 +1,48 @@
+import { randomUUID } from 'node:crypto';
+
+/**
+ * Give a cloned event its own `insert_id`.
+ *
+ * Clones MUST NOT inherit their template's id, and stripping the id is not
+ * enough either: mixpanel-import runs with `fixData: true`, which synthesizes a
+ * missing id by content-hashing the record — so two clones that differ only in
+ * ways the hash ignores collapse into one on ingest. Mixpanel then dedupes them
+ * server-side and the engineered volume silently disappears from the project
+ * while local verification (which never looks at `insert_id`) still passes.
+ *
+ * `insert_id` is already assigned via `randomUUID()` in the event generator
+ * (`lib/generators/events.js`), so it sits outside the seeded
+ * byte-identical-output guarantee; using it here keeps clone ids consistent with
+ * engine-generated ones.
+ *
+ * @template {{insert_id?: string}} T
+ * @param {T} clone
+ * @returns {T} the same object, with a fresh `insert_id`
+ */
+export function stampFreshInsertId(clone) {
+	clone.insert_id = randomUUID();
+	return clone;
+}
+
+/**
+ * Spread a template into a new event, merge `overrides`, and give it a fresh
+ * `insert_id` — unless the caller pinned one explicitly.
+ *
+ * Every clone site should go through this so the override contract is uniform:
+ * a caller that passes `insert_id` in `overrides` keeps it, and everyone else
+ * gets a unique id rather than a duplicate of the template's.
+ *
+ * @template {Record<string, any>} T
+ * @param {T} template - Event to clone from.
+ * @param {Record<string, any>} [overrides] - Fields to merge on top.
+ * @returns {T} the new event
+ */
+export function cloneWithFreshId(template, overrides = {}) {
+	const clone = /** @type {T} */ ({ ...template, ...overrides });
+	if (!(overrides && 'insert_id' in overrides)) stampFreshInsertId(clone);
+	return clone;
+}
+
 export function toMs(t) {
 	if (typeof t === 'number') return t > 1e12 ? t : t > 1e9 ? t * 1000 : t;
 	return Date.parse(t);

package/lib/hook-helpers/inject.js

@@ -10,7 +10,7 @@
  */
 
 import { getChance } from '../utils/utils.js';
-import { toMs, writeTime } from './_internal.js';
+import { toMs, writeTime, stampFreshInsertId, cloneWithFreshId } from './_internal.js';
 
 /**
  * Splice a cloned event into `events` immediately after `sourceEvent`. Time is
@@ -29,7 +29,7 @@ export function injectAfterEvent(events, sourceEvent, templateEvent, gapMs, over
 	if (!events || !sourceEvent || !templateEvent) return null;
 	const baseT = toMs(sourceEvent.time);
 	if (!Number.isFinite(baseT)) return null;
-	const newEv = { ...templateEvent, ...overrides };
+	const newEv = cloneWithFreshId(templateEvent, overrides);
 	writeTime(newEv, baseT + gapMs);
 	const idx = events.indexOf(sourceEvent);
 	if (idx >= 0) events.splice(idx + 1, 0, newEv);
@@ -60,7 +60,7 @@ export function injectBetween(events, eventA, eventB, templateEvent, overrides =
 	const aT = toMs(a.time);
 	const bT = toMs(b.time);
 	if (!Number.isFinite(aT) || !Number.isFinite(bT)) return null;
-	const newEv = { ...templateEvent, ...overrides };
+	const newEv = cloneWithFreshId(templateEvent, overrides);
 	writeTime(newEv, (aT + bT) / 2);
 	const bIdxOrig = events.indexOf(b);
 	if (bIdxOrig >= 0) events.splice(bIdxOrig, 0, newEv);
@@ -89,7 +89,7 @@ export function injectBurst(events, templateEvent, count, anchorTime, spreadMs,
 	const created = [];
 	for (let i = 0; i < count; i++) {
 		const offset = chance.floating({ min: -spreadMs, max: spreadMs });
-		const newEv = { ...templateEvent, ...overrides };
+		const newEv = cloneWithFreshId(templateEvent, overrides);
 		writeTime(newEv, anchorMs + offset);
 		events.push(newEv);
 		created.push(newEv);
@@ -119,7 +119,8 @@ const DAY_MS = 86400000;
  *   5. Find a template event of `eventName`; if none exist for this user,
  *      return unchanged (we honor schema-first: don't fabricate events).
  *   6. Clone the template onto each picked day at a random hour within the
- *      day. `insert_id` is stripped (Mixpanel re-deduplicates on import).
+ *      day. Each clone gets a FRESH `insert_id` (inheriting or omitting it lets
+ *      Mixpanel dedupe the clones away on ingest).
  *   7. Append clones to the array. Caller's downstream sort handles ordering.
  *
  * @param {Object[]} events - Full user event array (from `everything` hook).
@@ -183,9 +184,8 @@ export function injectOnNewDays(events, eventName, targetDays, options = {}) {
 		const lo = Math.max(dayStart, minMs);
 		const hi = Math.min(dayEnd, maxMs);
 		const newMs = lo >= hi ? lo : chance.integer({ min: lo, max: hi });
-		const clone = { ...template, ...overrides };
+		const clone = cloneWithFreshId(template, overrides);
 		writeTime(clone, newMs);
-		delete clone.insert_id;
 		events.push(clone);
 	}
 

package/lib/hook-helpers/mutate.js

@@ -8,7 +8,7 @@
  * `Math.random()` — so dungeon runs stay reproducible.
  */
 
-import { toMs } from './_internal.js';
+import { toMs, stampFreshInsertId, cloneWithFreshId } from './_internal.js';
 
 import { getChance } from '../utils/utils.js';
 
@@ -25,7 +25,9 @@ import { getChance } from '../utils/utils.js';
  */
 export function cloneEvent(template, overrides = {}) {
 	if (!template) throw new Error('cloneEvent: template is required');
-	return /** @type {T} */ ({ ...template, ...overrides });
+	// A clone that keeps its template's insert_id is deduped away by Mixpanel on
+	// ingest. Callers may still pin one explicitly via overrides.
+	return /** @type {T} */ (cloneWithFreshId(template, overrides));
 }
 
 /**
@@ -57,8 +59,9 @@ export function dropEventsWhere(events, predicate) {
  *   integer = -dropped.
  * - factor === 1 or no matches: no-op, returns 0.
  *
- * Note: the `insert_id` of cloned events is removed so a downstream pass can
- * regenerate it (otherwise Mixpanel will dedupe on import).
+ * Note: cloned events get a FRESH `insert_id` — they must not inherit the
+ * source's, and leaving it blank is not safe either (the importer content-hashes
+ * missing ids, so identical clones collide and Mixpanel dedupes them away).
  *
  * @param {Array<{event:string,time:string|number,insert_id?:string}>} events
  * @param {string} eventName
@@ -78,8 +81,7 @@ export function scaleEventCount(events, eventName, factor) {
 			const newTime = Number.isFinite(baseMs)
 				? new Date(baseMs + (i + 1) * 1000).toISOString()
 				: src.time;
-			const clone = { ...src, time: newTime };
-			delete clone.insert_id;
+			const clone = stampFreshInsertId({ ...src, time: newTime });
 			events.push(clone);
 			added++;
 		}

package/lib/hook-helpers/shape.js

@@ -6,13 +6,13 @@
  * (HOOKS.md §2.16), a biased Flows path branch (§2.17), and a deterministic
  * session cadence (§2.13). All three are `everything`-hook-only — they need
  * the whole stream — and obey the schema-first rules: clones only (spread
- * from the user's own events, `insert_id` stripped), no fabricated events,
+ * from the user's own events, each given a fresh `insert_id`), no fabricated events,
  * seeded `chance` for all randomness. Timestamp rewrites are safe because
  * the engine re-derives `session_id` on the final event set (v1.6 P2.1).
  */
 
 import { getChance } from '../utils/utils.js';
-import { toMs, writeTime } from './_internal.js';
+import { toMs, writeTime, stampFreshInsertId } from './_internal.js';
 import { hashFloat } from './cohort.js';
 
 const DAY_MS = 86400000;
@@ -100,7 +100,7 @@ export function applyLifecycleWave(events, uid, opts) {
 	for (let i = 0; i < resurrectBurst; i++) {
 		const clone = { ...template };
 		writeTime(clone, t);
-		delete clone.insert_id;
+		stampFreshInsertId(clone);
 		if (!clone.user_id && uid) clone.user_id = uid;
 		kept.push(clone);
 		t += chance.integer({ min: MIN_MS, max: 10 * MIN_MS });
@@ -168,7 +168,7 @@ export function applyPathBias(events, uid, opts) {
 		t += chance.integer({ min: lo, max: hi }) * 1000;
 		const clone = { ...tpl };
 		writeTime(clone, t);
-		delete clone.insert_id;
+		stampFreshInsertId(clone);
 		if (!clone.user_id && uid) clone.user_id = uid;
 		events.push(clone);
 	}

package/lib/hook-patterns/frequency-by-frequency.js

@@ -16,8 +16,8 @@
  * - Operates on the user's full event stream — call from the `everything` hook.
  * - Does NOT add new properties; uses existing event names defined in the dungeon
  *   schema.
- * - Cloned events have their `insert_id` stripped (mutate.scaleEventCount handles
- *   that), so the engine's batch writer can re-stamp them downstream.
+ * - Cloned events get a fresh `insert_id` (mutate.scaleEventCount handles that),
+ *   so Mixpanel does not dedupe them away on ingest.
  */
 
 import { binUsersByEventCount } from '../hook-helpers/cohort.js';