@mmerterden/multi-agent-pipeline 15.1.0 → 15.2.0

package/CHANGELOG.md

@@ -16,6 +16,23 @@ Internal file-layout changes that don't affect the slash-command surface are sti
 
 ## [Unreleased]
 
+## [15.2.0] - 2026-08-15
+
+### Added
+
+- **`/multi-agent:update` auto-enables usage logging when a token is onboarded.**
+  The private dashboard stays opt-in and off by default, but once the shared
+  ingest token exists on a machine, an update flips `usageLog.enabled` on so the
+  admin's trusted group does not each have to toggle it by hand. It NEVER
+  fabricates or ships a secret: it activates only when a token resolves from
+  `MULTI_AGENT_USAGE_TOKEN`, `usageLog.token`, or the Keychain item named by the
+  new generic `keychainMapping.usage_ingest` slot - a machine that was never
+  given the token stays silent.
+- **`usage-report.mjs` reads the ingest token from the Keychain** (via
+  `credential-store.sh`, resolved through `keychainMapping.usage_ingest`) as a
+  fallback after env and `usageLog.token`, so the secret never has to live in a
+  synced or plaintext file for logging to work.
+
 ## [15.1.0] - 2026-08-14
 
 Opt-in run telemetry to a private dashboard, and a refactor band that mines it.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mmerterden/multi-agent-pipeline",
-  "version": "15.1.0",
+  "version": "15.2.0",
   "description": "8-phase AI development pipeline with full orchestration on Claude Code, Copilot CLI and Codex CLI. Analysis, planning, TDD, CLI-aware parallel review with consensus surfacing + Fable triage, default-FAIL evidence gates, secret + intent guards, per-phase cost ledger, persistent learnings memory, wiki generation, commit automation. Token-preserving uninstall.",
   "type": "module",
   "main": "index.js",

package/pipeline/commands/multi-agent/update/SKILL.md

@@ -71,6 +71,33 @@ Update the pipeline in one command. Existing preferences are preserved; only ski
    fi
    ```
 
+5b. **Auto-enable usage logging when a token is already onboarded.** The private
+   usage dashboard is opt-in and off by default. This step flips it ON only when a
+   token can be resolved - it NEVER fabricates a secret or ships one, so a machine
+   that was never given the token stays silent. Resolution order: env
+   `MULTI_AGENT_USAGE_TOKEN`, then `usageLog.token`, then the Keychain item named by
+   `keychainMapping.usage_ingest`. Endpoint is left to the emitter's default.
+   ```bash
+   PREFS="$HOME/.claude/multi-agent-preferences.json"
+   if [ -f "$PREFS" ] && command -v jq >/dev/null 2>&1; then
+     ENABLED=$(jq -r '.global.usageLog.enabled // false' "$PREFS" 2>/dev/null)
+     if [ "$ENABLED" != "true" ]; then
+       TOK="${MULTI_AGENT_USAGE_TOKEN:-}"
+       [ -z "$TOK" ] && TOK=$(jq -r '.global.usageLog.token // empty' "$PREFS" 2>/dev/null)
+       if [ -z "$TOK" ]; then
+         KNAME=$(jq -r '.global.keychainMapping.usage_ingest // empty' "$PREFS" 2>/dev/null)
+         [ -n "$KNAME" ] && TOK=$(bash "$HOME/.claude/lib/credential-store.sh" get "$KNAME" 2>/dev/null)
+       fi
+       if [ -n "$TOK" ]; then
+         node -e 'const fs=require("fs"),p=process.argv[1];const j=JSON.parse(fs.readFileSync(p,"utf8"));j.global=j.global||{};j.global.usageLog=j.global.usageLog||{};j.global.usageLog.enabled=true;fs.writeFileSync(p,JSON.stringify(j,null,2)+"\n");' "$PREFS"
+         echo "  -> usage logging activated (ingest token found)"
+       else
+         echo "  -> usage logging left off (no ingest token onboarded)"
+       fi
+     fi
+   fi
+   ```
+
 6. **Show the new version**:
    ```bash
    NEW_VERSION=$(node -p "require('$PIPE_DIR/package.json').version" 2>/dev/null || echo "unknown")

package/pipeline/preferences-template.json

@@ -12,6 +12,7 @@
       "figma_mcp": null,
       "fortify": null,
       "graylog": null,
+      "usage_ingest": null,
       "firebase": null,
       "jenkins": null
     },

package/pipeline/schemas/prefs.schema.json

@@ -188,6 +188,13 @@
                 "null"
               ]
             },
+            "usage_ingest": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "description": "Keychain item holding the shared ingest token for the private usage dashboard. When set, usage-report.mjs reads the token from here (never from a synced file), and /multi-agent:update auto-enables usageLog once the token is onboarded. Absent = usage logging stays off."
+            },
             "figma_pat": {
               "type": [
                 "string",

package/pipeline/scripts/usage-report.mjs

@@ -32,6 +32,7 @@ import { readFileSync, existsSync, readdirSync, appendFileSync } from "fs";
 import { homedir, platform } from "os";
 import { dirname, join } from "path";
 import { fileURLToPath } from "url";
+import { execFileSync } from "child_process";
 import { costUsd } from "./_cost.mjs";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
@@ -70,6 +71,36 @@ function resolvePrefs() {
   return resolveGlobalPrefs().usageLog ?? {};
 }
 
+/**
+ * Resolve the ingest token without ever storing it in a synced file.
+ * Order: env, then prefs.usageLog.token, then the Keychain entry mapped by
+ * prefs.global.keychainMapping.usage_ingest (via credential-store.sh). This
+ * lets update flip usageLog.enabled on while the secret stays in the Keychain.
+ */
+function resolveToken() {
+  if (process.env.MULTI_AGENT_USAGE_TOKEN) return process.env.MULTI_AGENT_USAGE_TOKEN;
+  const g = resolveGlobalPrefs();
+  const inline = g.usageLog?.token;
+  if (typeof inline === "string" && inline.trim()) return inline.trim();
+  const name = g.keychainMapping?.usage_ingest;
+  if (typeof name === "string" && name.trim()) {
+    const store = join(homedir(), ".claude", "lib", "credential-store.sh");
+    if (existsSync(store)) {
+      try {
+        const out = execFileSync("bash", [store, "get", name.trim()], {
+          encoding: "utf-8",
+          timeout: 4000,
+          stdio: ["ignore", "pipe", "ignore"],
+        }).trim();
+        if (out) return out;
+      } catch {
+        /* keychain unavailable - stay silent */
+      }
+    }
+  }
+  return "";
+}
+
 function enabledPlugins(state) {
   const root = state.projectRoot || process.cwd();
   const settings = readJson(join(root, ".claude", "settings.json"));
@@ -393,7 +424,7 @@ async function post(endpoint, token, event) {
 async function main() {
   const args = parseArgs(process.argv.slice(2));
   const prefs = resolvePrefs();
-  const token = process.env.MULTI_AGENT_USAGE_TOKEN || prefs.token || "";
+  const token = resolveToken();
   const endpoint = prefs.endpoint || ENDPOINT_DEFAULT;
 
   if (!args.dryRun && (prefs.enabled !== true || !token)) return;