@fml-inc/fml 0.8.7 → 0.8.10-dev.1

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "fml",
-  "version": "0.8.7",
+  "version": "0.8.10-dev.1",
   "description": "FML agent tools for Claude Code",
   "mcpServers": {
     "fml": {

package/dist/{chunk-6BTC3S7C.js → chunk-2DGHAVVR.js}

@@ -1,6 +1,6 @@
 import {
   runRawSyncOnce
-} from "./chunk-5JJQWV4G.js";
+} from "./chunk-JPHN4VKM.js";
 import {
   resolvePackageRoot
 } from "./chunk-F57IFY3K.js";

package/dist/{chunk-LPSZCTTJ.js → chunk-2ZCXGYI5.js}

@@ -1,7 +1,7 @@
 import {
   FML_HOOK_CAPTURE_DISABLED_FILE,
   FML_OBSERVER_LOG_FILE
-} from "./chunk-B3H2YWPJ.js";
+} from "./chunk-HDAFEHUY.js";
 
 // src/json-file.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-4YLSKFDU.js → chunk-5PEFBQNX.js}

@@ -3,7 +3,7 @@ import {
   FML_OBSERVER_LOCK_FILE,
   FML_OBSERVER_PORT,
   FML_OBSERVER_STATE_FILE
-} from "./chunk-B3H2YWPJ.js";
+} from "./chunk-HDAFEHUY.js";
 
 // ../../packages/panopticon/src/observer/auth.ts
 import crypto from "crypto";
@@ -695,6 +695,7 @@ var MAX_HOOK_DESTINATION_IDENTITY_BYTES = 4 * 1024;
 var DEFAULT_OTLP_OUTBOX_BATCH_SIZE = 100;
 var MAX_OTLP_OUTBOX_BATCH_SIZE = 100;
 var MAX_OTLP_ENVELOPE_BYTES = 16 * 1024 * 1024;
+var DEFAULT_OTLP_SPOOL_MAX_AGE_MS = 24 * 60 * 60 * 1e3;
 var DEFAULT_OTLP_SPOOL_MAX_BYTES = 1024 * 1024 * 1024;
 var MAX_OTLP_ENVELOPE_ID_BYTES = 1024;
 var MAX_OTLP_OBSERVER_INSTANCE_ID_BYTES = 4 * 1024;
@@ -703,8 +704,6 @@ var MAX_OTLP_DROP_REASON_BYTES = 4 * 1024;
 var MAX_OTLP_DESTINATION_ORGANIZATION_ID_BYTES = 128;
 var MAX_OTLP_DESTINATION_ORGANIZATION_SLUG_BYTES = 4 * 1024;
 var OWNERLESS_OTLP_DROP_REASON = "ownerless";
-var OTLP_CAPACITY_DROP_REASON = "spool_capacity";
-var OTLP_ENTRY_TOO_LARGE_DROP_REASON = "spool_entry_too_large";
 var OTLP_ROW_FIXED_LOGICAL_BYTES = 256;
 var MAX_TIMESTAMP_MS = 864e13;
 var QUARANTINE_PRUNE_INTERVAL_MS = 5 * 60 * 1e3;
@@ -1002,15 +1001,23 @@ function enforceOwnerOnlyMode(filePath, mode) {
 function openObserverDatabase(databaseFile, options = {}) {
   const maxHookSpoolBytes = options.maxHookSpoolBytes;
   const maxOtlpSpoolBytes = options.maxOtlpSpoolBytes ?? DEFAULT_OTLP_SPOOL_MAX_BYTES;
-  const maxHookQuarantineAgeMs = options.maxHookQuarantineAgeMs;
-  if (maxHookSpoolBytes !== void 0 && (!Number.isSafeInteger(maxHookSpoolBytes) || maxHookSpoolBytes < 1)) {
+  if (!Number.isSafeInteger(maxOtlpSpoolBytes) || maxOtlpSpoolBytes < 1) {
     throw new Error(
-      "Hook spool maximum must be a positive safe integer number of bytes"
+      "OTLP spool maximum must be a positive safe integer number of bytes"
     );
   }
-  if (!Number.isSafeInteger(maxOtlpSpoolBytes) || maxOtlpSpoolBytes < 1) {
+  const otlpLowWaterBytes = Math.floor(maxOtlpSpoolBytes * 0.9);
+  let otlpCapacityCleanupActive = false;
+  const maxOtlpSpoolAgeMs = options.maxOtlpSpoolAgeMs ?? DEFAULT_OTLP_SPOOL_MAX_AGE_MS;
+  if (!Number.isSafeInteger(maxOtlpSpoolAgeMs) || maxOtlpSpoolAgeMs < 1) {
     throw new Error(
-      "OTLP spool maximum must be a positive safe integer number of bytes"
+      "OTLP spool maximum age must be a positive safe integer number of milliseconds"
+    );
+  }
+  const maxHookQuarantineAgeMs = options.maxHookQuarantineAgeMs;
+  if (maxHookSpoolBytes !== void 0 && (!Number.isSafeInteger(maxHookSpoolBytes) || maxHookSpoolBytes < 1)) {
+    throw new Error(
+      "Hook spool maximum must be a positive safe integer number of bytes"
     );
   }
   if (maxHookQuarantineAgeMs !== void 0 && (!Number.isSafeInteger(maxHookQuarantineAgeMs) || maxHookQuarantineAgeMs < 1)) {
@@ -2031,27 +2038,24 @@ function openObserverDatabase(databaseFile, options = {}) {
         last_drop_reason = ?
       WHERE singleton = 1
     `);
-    const otlpCapacityEvictionPlan = database.prepare(`
-      WITH ordered AS (
-        SELECT
-          logical_bytes,
-          length(body) AS body_bytes,
-          SUM(logical_bytes) OVER (ORDER BY id ASC) - logical_bytes
-            AS preceding_bytes
-        FROM otlp_envelope_outbox
-      )
-      SELECT
-        COUNT(*) AS record_count,
-        COALESCE(SUM(logical_bytes), 0) AS logical_bytes,
-        COALESCE(SUM(body_bytes), 0) AS body_bytes
-      FROM ordered
-      WHERE preceding_bytes < ?
+    const hasExpiredOtlpEnvelopes = database.prepare(`
+      SELECT 1 FROM otlp_envelope_outbox WHERE captured_at_ms < ? LIMIT 1
     `);
-    const evictOldestPendingOtlpEnvelopes = database.prepare(`
-      DELETE FROM otlp_envelope_outbox
-      WHERE id IN (
-        SELECT id FROM otlp_envelope_outbox ORDER BY id ASC LIMIT ?
-      )
+    const expiredOtlpEnvelopes = database.prepare(`
+      SELECT id, logical_bytes, length(body) AS body_bytes
+      FROM otlp_envelope_outbox
+      WHERE captured_at_ms < ?
+      ORDER BY captured_at_ms, id
+      LIMIT 100
+    `);
+    const oldestOtlpEnvelopes = database.prepare(`
+      SELECT id, logical_bytes, length(body) AS body_bytes
+      FROM otlp_envelope_outbox
+      ORDER BY captured_at_ms, id
+      LIMIT 100
+    `);
+    const deleteExpiredOtlpEnvelope = database.prepare(`
+      DELETE FROM otlp_envelope_outbox WHERE id = ?
     `);
     const getDestinationPendingOtlpEnvelopeAccounting = database.prepare(`
       SELECT logical_bytes, length(body) AS body_bytes
@@ -2652,42 +2656,6 @@ function openObserverDatabase(databaseFile, options = {}) {
             );
             return null;
           }
-          if (logicalBytes > maxOtlpSpoolBytes) {
-            recordOtlpDrop(
-              1,
-              logicalBytes,
-              envelope.body.byteLength,
-              capturedAtMs,
-              OTLP_ENTRY_TOO_LARGE_DROP_REASON
-            );
-            return null;
-          }
-          const retainedBytes = requireSpoolInteger(
-            getOtlpSpoolState.get(),
-            "logical_bytes"
-          );
-          const bytesToFree = retainedBytes + logicalBytes - maxOtlpSpoolBytes;
-          if (bytesToFree > 0) {
-            const plan = otlpCapacityEvictionPlan.get(bytesToFree);
-            const evictedRecords = requireSpoolInteger(plan, "record_count");
-            const evictedLogicalBytes = requireSpoolInteger(
-              plan,
-              "logical_bytes"
-            );
-            const evictedBodyBytes = requireSpoolInteger(plan, "body_bytes");
-            if (evictedRecords === 0 || evictedLogicalBytes < bytesToFree || evictOldestPendingOtlpEnvelopes.run(evictedRecords).changes !== evictedRecords) {
-              throw new Error(
-                "FML observer OTLP spool accounting could not enforce its limit"
-              );
-            }
-            recordOtlpDrop(
-              evictedRecords,
-              evictedLogicalBytes,
-              evictedBodyBytes,
-              capturedAtMs,
-              OTLP_CAPACITY_DROP_REASON
-            );
-          }
           captureOtlpEnvelope.run(
             envelopeId,
             envelope.observerInstanceId,
@@ -2885,6 +2853,80 @@ function openObserverDatabase(databaseFile, options = {}) {
           return droppedRecords;
         });
       },
+      pruneExpiredOtlpEnvelopes: (nowMs = Date.now()) => {
+        requireTimestamp(nowMs, "OTLP retention timestamp");
+        const cutoffMs = nowMs - maxOtlpSpoolAgeMs;
+        if (!hasExpiredOtlpEnvelopes.get(cutoffMs)) return 0;
+        return runImmediateTransaction(() => {
+          const rows = expiredOtlpEnvelopes.all(cutoffMs);
+          let logicalBytes = 0;
+          let bodyBytes = 0;
+          for (const row of rows) {
+            logicalBytes += requireSpoolInteger(row, "logical_bytes");
+            bodyBytes += requireSpoolInteger(row, "body_bytes");
+            if (deleteExpiredOtlpEnvelope.run(row.id).changes !== 1) {
+              throw new Error(
+                "FML observer OTLP retention deletion was incomplete"
+              );
+            }
+          }
+          recordOtlpDrop(
+            rows.length,
+            logicalBytes,
+            bodyBytes,
+            nowMs,
+            "spool_expired"
+          );
+          return rows.length;
+        });
+      },
+      pruneOtlpCapacity: (nowMs = Date.now()) => {
+        requireTimestamp(nowMs, "OTLP capacity cleanup timestamp");
+        const retainedBytes = requireSpoolInteger(
+          getOtlpSpoolState.get(),
+          "logical_bytes"
+        );
+        if (retainedBytes <= otlpLowWaterBytes)
+          otlpCapacityCleanupActive = false;
+        if (retainedBytes > maxOtlpSpoolBytes) otlpCapacityCleanupActive = true;
+        if (!otlpCapacityCleanupActive) return 0;
+        return runImmediateTransaction(() => {
+          const currentBytes = requireSpoolInteger(
+            getOtlpSpoolState.get(),
+            "logical_bytes"
+          );
+          if (currentBytes <= otlpLowWaterBytes) {
+            otlpCapacityCleanupActive = false;
+            return 0;
+          }
+          let records = 0;
+          let logicalBytes = 0;
+          let bodyBytes = 0;
+          for (const row of oldestOtlpEnvelopes.all()) {
+            logicalBytes += requireSpoolInteger(row, "logical_bytes");
+            bodyBytes += requireSpoolInteger(row, "body_bytes");
+            if (deleteExpiredOtlpEnvelope.run(row.id).changes !== 1) {
+              throw new Error(
+                "FML observer OTLP capacity deletion was incomplete"
+              );
+            }
+            records += 1;
+            if (currentBytes - logicalBytes <= otlpLowWaterBytes) break;
+          }
+          if (records === 0)
+            throw new Error(
+              "FML observer OTLP capacity accounting is inconsistent"
+            );
+          recordOtlpDrop(
+            records,
+            logicalBytes,
+            bodyBytes,
+            nowMs,
+            "spool_capacity"
+          );
+          return records;
+        });
+      },
       getOtlpSpoolStatus: () => {
         const row = getOtlpSpoolState.get();
         const lastDroppedAtMs = row?.last_dropped_at_ms;
@@ -2898,6 +2940,7 @@ function openObserverDatabase(databaseFile, options = {}) {
         return {
           unit: "logical_bytes",
           maxBytes: maxOtlpSpoolBytes,
+          maxAgeMs: maxOtlpSpoolAgeMs,
           logicalBytes: requireSpoolInteger(row, "logical_bytes"),
           bodyBytes: requireSpoolInteger(row, "body_bytes"),
           droppedRecords: requireSpoolInteger(row, "dropped_records"),

package/dist/{chunk-XFALHTDL.js → chunk-5SI6S4HW.js}

@@ -1,6 +1,6 @@
 import {
   Sentry
-} from "./chunk-B3H2YWPJ.js";
+} from "./chunk-HDAFEHUY.js";
 
 // src/bin-utils.ts
 import fs from "fs";
@@ -53,7 +53,7 @@ var PACKAGE_NAME = "@fml-inc/fml";
 var UPDATE_TIMEOUT_MS = 12e4;
 var SETUP_TIMEOUT_MS = 3e5;
 function getCurrentVersion() {
-  return true ? "0.8.7+af45d2af" : "unknown";
+  return true ? "0.8.10-dev.1+09fae5b6" : "unknown";
 }
 function parseVersion(version) {
   const match = SEMVER_PATTERN.exec(version);

package/dist/{chunk-LOJPIJZW.js → chunk-GDOXY4W2.js}

@@ -7,7 +7,7 @@ import {
   getSelectedOrg,
   getSiteUrlForConvexUrl,
   getValidToken
-} from "./chunk-B3H2YWPJ.js";
+} from "./chunk-HDAFEHUY.js";
 
 // src/fml-client.ts
 var LOGIN_EXPIRED_MESSAGE = "Authentication expired. Run `fml login` to sign in again, then restart Claude Code.";
@@ -79,7 +79,7 @@ function createFmlClient(token, options = {}) {
         const repo = resolveRepoFromCwd(process.cwd());
         if (repo) body.repo = repo.repo;
         if (isServiceToken) {
-          const { readTokens, SERVICE_TOKEN_LOGIN_USER_ID } = await import("./token-store-ORR5MIJL.js");
+          const { readTokens, SERVICE_TOKEN_LOGIN_USER_ID } = await import("./token-store-GYU3AXBK.js");
           const stored = readTokens(options.envName);
           const storedUserExternalId = stored?.tokenType === "service" && stored.user.id !== SERVICE_TOKEN_LOGIN_USER_ID ? stored.user.id : void 0;
           const userExternalId = process.env.FML_USER_EXTERNAL_ID ?? storedUserExternalId;

package/dist/{chunk-B3H2YWPJ.js → chunk-HDAFEHUY.js}

@@ -193,6 +193,7 @@ function ensureDirs() {
 
 // src/config.ts
 var DEFAULT_PROD_URL = "https://api.fml.inc";
+var DEFAULT_SYNC_URL = DEFAULT_PROD_URL;
 var DEFAULT_TARGET_NAME = "fml";
 var LEGACY_HOSTED_BACKEND_URLS = [
   "https://trustworthy-chihuahua-382.convex.site"
@@ -338,9 +339,6 @@ function getSiteUrlForConvexUrl(convexUrl) {
 var initialized = false;
 var sentry = null;
 var client = null;
-function isSentryEnabled() {
-  return process.env.SENTRY_ENABLED === "true";
-}
 async function loadSentry() {
   if (sentry) return sentry;
   try {
@@ -350,15 +348,35 @@ async function loadSentry() {
     return null;
   }
 }
-async function initSentry() {
-  if (initialized) return;
+async function initSentry(forceRefresh = false) {
+  if (initialized && !forceRefresh) return;
   initialized = true;
-  if (!isSentryEnabled()) return;
+  let config;
+  try {
+    const { resolveCliSentryConfig } = await import("./telemetry-config-HRSNDMTG.js");
+    config = process.env.SENTRY_ENABLED === "false" ? null : await resolveCliSentryConfig(
+      process.env.SENTRY_ENABLED === "true" && true ? "https://4c243521c03917c886d0bf33bc0038c8@o4510167429873664.ingest.us.sentry.io/4511078213156864" : "",
+      forceRefresh
+    );
+  } catch {
+    config = null;
+  }
+  if (client) {
+    try {
+      await client.close(2e3);
+    } catch {
+    }
+    client = null;
+  }
+  if (!config?.dsn) {
+    sentry?.getCurrentScope().setClient(void 0);
+    return;
+  }
   const mod = await loadSentry();
   if (!mod) return;
   client = new mod.ServerRuntimeClient({
-    dsn: "https://4c243521c03917c886d0bf33bc0038c8@o4510167429873664.ingest.us.sentry.io/4511078213156864",
-    environment: process.env.DEPLOYMENT_ENV ?? process.env.NODE_ENV ?? "production",
+    dsn: config.dsn,
+    environment: config.environment,
     tracesSampleRate: 0,
     integrations: [],
     stackParser: mod.createStackParser(mod.nodeStackLineParser()),
@@ -1378,7 +1396,7 @@ async function getValidToken(opts) {
     return stored.accessToken;
   }
   if (stored.tokenType === "service") {
-    return await getOrStartTokenRefresh(
+    const accessToken2 = await getOrStartTokenRefresh(
       serviceRefreshPromises,
       key,
       forceRefresh,
@@ -1424,6 +1442,12 @@ async function getValidToken(opts) {
       }),
       opts?.signal
     );
+    await refreshTelemetryConfigAfterTokenRefresh(
+      envName,
+      accessToken2,
+      opts?.signal
+    );
+    return accessToken2;
   }
   if (stored.refreshInvalidAt) {
     console.error(
@@ -1431,13 +1455,34 @@ async function getValidToken(opts) {
     );
     return null;
   }
-  return await getOrStartTokenRefresh(
+  const accessToken = await getOrStartTokenRefresh(
     oauthRefreshPromises,
     key,
     forceRefresh,
     () => refreshTokenWithLock(envName, forceRefresh, opts?.signal),
     opts?.signal
   );
+  await refreshTelemetryConfigAfterTokenRefresh(
+    envName,
+    accessToken,
+    opts?.signal
+  );
+  return accessToken;
+}
+async function refreshTelemetryConfigAfterTokenRefresh(envName, accessToken, signal) {
+  if (!accessToken || signal?.aborted) return;
+  try {
+    const current = readTokens(envName);
+    if (current?.accessToken !== accessToken) return;
+    const { refreshCliTelemetryConfig } = await import("./telemetry-config-HRSNDMTG.js");
+    await refreshCliTelemetryConfig({
+      envName,
+      accessToken,
+      siteUrl: current.siteUrl,
+      signal
+    });
+  } catch {
+  }
 }
 async function refreshTokenWithLock(envName, forceRefresh = false, signal) {
   const lock = await acquireRefreshLock(envName, signal);
@@ -1543,7 +1588,9 @@ async function refreshToken(stored, lock, envName, signal) {
       },
       orgId: stored.orgId,
       orgSlug: stored.orgSlug,
-      workosClientId: stored.workosClientId
+      workosClientId: stored.workosClientId,
+      // The backend this login belongs to does not change on rotation.
+      ...stored.siteUrl ? { siteUrl: stored.siteUrl } : {}
     };
     const pendingPath = stagePendingOAuthRefresh(
       stored.refreshToken,
@@ -1580,8 +1627,6 @@ async function refreshToken(stored, lock, envName, signal) {
 }
 
 export {
-  initSentry,
-  Sentry,
   resolveFmlDefaultDirectories,
   FML_DATA_DIR,
   FML_STATE_DIR,
@@ -1606,6 +1651,7 @@ export {
   observerOnlyOverrideWarning,
   ensureDirs,
   DEFAULT_PROD_URL,
+  DEFAULT_SYNC_URL,
   DEFAULT_TARGET_NAME,
   isHostedBackendUrl,
   isValidEnvName,
@@ -1632,5 +1678,7 @@ export {
   SERVICE_TOKEN_LOGIN_USER_ID,
   clearStoredCredentials,
   storeServiceRefreshToken,
-  getValidToken
+  getValidToken,
+  initSentry,
+  Sentry
 };

package/dist/{chunk-5JJQWV4G.js → chunk-JPHN4VKM.js}

@@ -6,7 +6,7 @@ import {
   getSiteUrlForConvexUrl,
   getSyncDestinationIdentity,
   getValidToken
-} from "./chunk-B3H2YWPJ.js";
+} from "./chunk-HDAFEHUY.js";
 
 // ../../packages/panopticon/src/artifact.ts
 import {

package/dist/{chunk-PJWMSHHZ.js → chunk-WE7MAWAW.js}

@@ -6,7 +6,7 @@ import {
   getSiteUrlForConvexUrl,
   getSyncDestinationIdentity,
   getValidToken
-} from "./chunk-B3H2YWPJ.js";
+} from "./chunk-HDAFEHUY.js";
 
 // src/hooks/sync-loop.ts
 import { createHash } from "crypto";

package/dist/cli.js

@@ -2,19 +2,19 @@
 import {
   createFmlClient,
   getAuthenticatedClient
-} from "./chunk-LOJPIJZW.js";
+} from "./chunk-GDOXY4W2.js";
 import {
   execBinSync,
   handleUpdate,
   resolveBin
-} from "./chunk-XFALHTDL.js";
+} from "./chunk-5SI6S4HW.js";
 import {
   openObserverLog,
   readJsonFile,
   setHookCaptureDisabled,
   writeJsonFile,
   writeTextFileAtomic
-} from "./chunk-LPSZCTTJ.js";
+} from "./chunk-2ZCXGYI5.js";
 import {
   CODEX_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
@@ -29,7 +29,7 @@ import {
   readObserverAuthToken,
   readObserverStateStatus,
   removeObserverStateIfOwned
-} from "./chunk-4YLSKFDU.js";
+} from "./chunk-5PEFBQNX.js";
 import "./chunk-7V7G7NVF.js";
 import {
   claudeConfigDirectory,
@@ -38,7 +38,7 @@ import {
   geminiConfigDirectory,
   initializeSyncSettings,
   runRawSyncOnce
-} from "./chunk-5JJQWV4G.js";
+} from "./chunk-JPHN4VKM.js";
 import {
   resolvePackageRoot
 } from "./chunk-F57IFY3K.js";
@@ -86,7 +86,7 @@ import {
   storeServiceRefreshToken,
   writeEnvConfig,
   writeTokens
-} from "./chunk-B3H2YWPJ.js";
+} from "./chunk-HDAFEHUY.js";
 import "./chunk-MLKGABMK.js";
 
 // src/cli.ts
@@ -132,7 +132,7 @@ var STOP_TIMEOUT_MS = 5e3;
 var FORCE_STOP_TIMEOUT_MS = 2e3;
 var POLL_INTERVAL_MS = 50;
 function expectedObserverVersion() {
-  return true ? "0.8.7+af45d2af" : "dev";
+  return true ? "0.8.10-dev.1+09fae5b6" : "dev";
 }
 function delay(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
@@ -7438,6 +7438,7 @@ async function runServiceTokenLogin(refreshToken, backendUrl) {
     throw new Error("Service token login failed.");
   }
   commitLoginEnvironment(environment);
+  await initSentry(true);
   await selectOrg(environment);
   console.log("Logged in with FML service token.");
   console.log(
@@ -7478,6 +7479,7 @@ async function runInteractiveLogin(opts = {}) {
       );
     }
     await linkGitHubIdentity(environment);
+    await initSentry(true);
     await selectOrg(environment);
     return;
   }
@@ -7492,6 +7494,7 @@ async function runInteractiveLogin(opts = {}) {
   commitLoginEnvironment(environment);
   console.log(`Logged in as ${result.name} (${result.email})`);
   await linkGitHubIdentity(environment);
+  await initSentry(true);
   await selectOrg(environment);
 }
 async function handleLogin(opts) {
@@ -8159,6 +8162,7 @@ function otlpSpoolStatus(value) {
   const logicalBytes = nonNegativeInteger("logicalBytes");
   const bodyBytes = nonNegativeInteger("bodyBytes");
   const maxBytes = nonNegativeInteger("maxBytes");
+  const maxAgeMs = nonNegativeInteger("maxAgeMs");
   const droppedRecords = nonNegativeInteger("droppedRecords");
   const droppedLogicalBytes = nonNegativeInteger("droppedLogicalBytes");
   const droppedBodyBytes = nonNegativeInteger("droppedBodyBytes");
@@ -8169,6 +8173,7 @@ function otlpSpoolStatus(value) {
     logicalBytes,
     bodyBytes,
     maxBytes,
+    ...maxAgeMs !== void 0 && maxAgeMs > 0 ? { maxAgeMs } : {},
     droppedRecords,
     droppedLogicalBytes,
     droppedBodyBytes,
@@ -8360,9 +8365,14 @@ async function handleStatus() {
       console.log(
         `  Spool:   ${formatBytes2(otlp.spool.logicalBytes)} / ${formatBytes2(otlp.spool.maxBytes)} (${usedPercent.toFixed(1)}%; ${formatBytes2(otlp.spool.bodyBytes)} encoded bodies)`
       );
+      if (otlp.spool.maxAgeMs !== void 0) {
+        console.log(
+          `  Retention: ${otlp.spool.maxAgeMs / 36e5} hour(s) (background cleanup)`
+        );
+      }
       if (usedPercent >= 80) {
         console.log(
-          `  Attention: the oldest pending telemetry is dropped when the spool reaches ${formatBytes2(otlp.spool.maxBytes)}`
+          `  Attention: background cleanup removes oldest telemetry toward 90% of the ${formatBytes2(otlp.spool.maxBytes)} byte target after overflow; checks run every 5 minutes`
         );
       }
       if (otlp.spool.droppedRecords > 0) {
@@ -8997,7 +9007,7 @@ async function handleConfigDetail(opts) {
 // src/commands/tools.ts
 import { readFileSync } from "fs";
 import path29 from "path";
-var pluginVersion = true ? "0.8.7+af45d2af" : void 0;
+var pluginVersion = true ? "0.8.10-dev.1+09fae5b6" : void 0;
 async function getApi() {
   const api = await getAuthenticatedClient();
   if (!api) {
@@ -9154,7 +9164,7 @@ if (process.argv.length <= 2 || process.argv.includes("--help") || process.argv.
   printBanner();
 }
 var program = new Command().name("fml").description("FML CLI and agent tools").version(
-  true ? "0.8.7+af45d2af" : "dev"
+  true ? "0.8.10-dev.1+09fae5b6" : "dev"
 );
 function formatCommandInventory(cmd, prefix = "") {
   const name = prefix ? `${prefix} ${cmd.name()}` : cmd.name();

package/dist/hook-handler.js

@@ -2,10 +2,10 @@
 import {
   hookCaptureIsDisabled,
   openObserverLog
-} from "./chunk-LPSZCTTJ.js";
+} from "./chunk-2ZCXGYI5.js";
 import {
   getActiveHookDestinationBinding
-} from "./chunk-PJWMSHHZ.js";
+} from "./chunk-WE7MAWAW.js";
 import {
   HookInboxCapacityError,
   OBSERVER_HEARTBEAT_STALE_MS,
@@ -19,7 +19,7 @@ import {
   readObserverAuthToken,
   readObserverState,
   recordHookInboxLoss
-} from "./chunk-4YLSKFDU.js";
+} from "./chunk-5PEFBQNX.js";
 import {
   resolveRepositoryRootFromCwd,
   resolveRepositorySlugFromCwd
@@ -35,7 +35,7 @@ import {
   FML_OBSERVER_ENDPOINT_FILE,
   FML_OBSERVER_STATE_FILE,
   getValidToken
-} from "./chunk-B3H2YWPJ.js";
+} from "./chunk-HDAFEHUY.js";
 import "./chunk-MLKGABMK.js";
 
 // src/hooks/handler.ts

package/dist/mcp/server.js

@@ -2,7 +2,7 @@
 import {
   createFmlClient,
   getAuthenticatedClient
-} from "../chunk-LOJPIJZW.js";
+} from "../chunk-GDOXY4W2.js";
 import {
   resolveRepoFromCwd
 } from "../chunk-7V7G7NVF.js";
@@ -17,7 +17,7 @@ import {
   getValidToken,
   initSentry,
   readTokens
-} from "../chunk-B3H2YWPJ.js";
+} from "../chunk-HDAFEHUY.js";
 import "../chunk-MLKGABMK.js";
 
 // src/mcp/server.ts