@mmerterden/multi-agent-pipeline 15.6.0 → 15.6.1

package/CHANGELOG.md

@@ -16,6 +16,17 @@ Internal file-layout changes that don't affect the slash-command surface are sti
 
 ## [Unreleased]
 
+## [15.6.1] - 2026-08-19
+
+### Changed
+- **`/multi-agent:update` installs from npm, not from a git clone**: the registry is the single update channel - latest published release resolved with a direct registry read (never `npm view`'s cache), downloaded via `npm pack` with the registry pinned, installed with `install.js --all`, changes rendered from the packaged CHANGELOG, smokes run from the tarball. A pipeline repo clone is now purely a maintainer workspace (synced by `/multi-agent:sync`); consumers need no git access at all, so collaborator grants on the private repo can stay read-only or be dropped.
+
+### Fixed
+- **`node --test` runs stop pinging the live dashboard**: the tracker-entities suite calls `phase-tracker.sh init` outside run-smokes' `MULTI_AGENT_SMOKE` guard, so every test run left a phantom "probe" row on the timeline. The suite now sets the flag itself, and `usage-report.mjs` refuses to emit under it as the last line of defense for any caller.
+- **Usage report reads the tracker as it is actually written**: `tracker-state.json` stores `phases` as an array, but the reporter iterated it with `Object.entries`, so dashboard phase ids were array indexes - every phase after a skipped one was mislabeled (Commit id "6" reported as Faz 5). Failed-phase error tags carried the same wrong ids.
+- **Run duration and terminal timestamp resolve from the tracker**: nothing stamps `state.finishedAt`, so every run reported `du=null` and a terminal emit was stamped with the reporter's wall clock (wrong for backfills). Both now fall back to the tracker's phase span (earliest start to latest completion).
+- **Version and user fields stop reporting null**: the reporter reads the installer's `~/.claude/.pipeline-version` marker (installed trees have no adjacent `package.json`) and falls back to `identity.name` when `identity.username` is absent.
+
 ## [15.6.0] - 2026-08-18
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mmerterden/multi-agent-pipeline",
-  "version": "15.6.0",
+  "version": "15.6.1",
   "description": "8-phase AI development pipeline with full orchestration on Claude Code, Copilot CLI and Codex CLI. Analysis, planning, TDD, CLI-aware parallel review with consensus surfacing + Fable triage, default-FAIL evidence gates, secret + intent guards, per-phase cost ledger, persistent learnings memory, wiki generation, commit automation. Token-preserving uninstall.",
   "type": "module",
   "main": "index.js",

package/pipeline/commands/multi-agent/update/SKILL.md

@@ -1,43 +1,49 @@
 ---
-description: "Update the pipeline to the latest version: git pull, install, migrate. Use when the installed pipeline is behind and should be brought to the latest version."
-description-tr: "Pipeline'ı son sürüme günceller: git pull, install, migrate."
+description: "Update the pipeline to the latest published npm release: registry check, npm pack, install, migrate. Use when the installed pipeline is behind and should be brought to the latest version."
+description-tr: "Pipeline'ı npm'deki son yayına günceller: registry kontrolü, npm pack, install, migrate."
 allowed-tools: Bash, Read, Write, AskUserQuestion
 ---
 
 # multi-agent update
 
-Update the pipeline in one command. Existing preferences are preserved; only skill / script / schema files are refreshed.
+Update the pipeline in one command. The npm registry is the single update channel: the latest published release is downloaded and installed. Existing preferences are preserved; only skill / script / schema files are refreshed.
+
+A git clone of the pipeline repo is a maintainer workspace, kept in sync by `/multi-agent:sync` - it is never consulted here. A fix that only exists on `main` reaches users when a release is published, not before.
 
 ## Steps
 
-1. **Find the pipeline repo**:
+1. **Resolve the package and both versions** (run steps 1-3 in ONE shell block so the variables survive):
    ```bash
-   PIPE_DIR=""
-   for candidate in "$HOME/multi-agent-pipeline" "$HOME/dev/multi-agent-pipeline" "$HOME/projects/multi-agent-pipeline"; do
-     [ -d "$candidate/.git" ] && PIPE_DIR="$candidate" && break
-   done
-   if [ -z "$PIPE_DIR" ]; then
-     echo "Pipeline repo not found. Clone it:"
-     echo "  git clone git@github.com:{owner}/multi-agent-pipeline.git"
+   PKG="@{npm-scope}/multi-agent-pipeline"
+   REG="https://registry.npmjs.org"
+   CUR=$(tr -d '[:space:]' < "$HOME/.claude/.pipeline-version" 2>/dev/null)
+   [ -n "$CUR" ] || CUR="unknown"
+   # Read the registry directly - `npm view` can answer from a stale local cache.
+   LATEST=$(curl -fsS "$REG/$(printf '%s' "$PKG" | sed 's|/|%2F|')/latest" \
+     | node -pe 'JSON.parse(require("fs").readFileSync(0,"utf8")).version' 2>/dev/null)
+   if [ -z "$LATEST" ]; then
+     echo "Registry unreachable ($REG) - check your network and retry."
      exit 1
    fi
+   echo "Current: v$CUR   Latest: v$LATEST"
    ```
 
-2. **Capture the current version**:
+2. **Stop early when already current** (still refresh the marketplace, step 4b):
    ```bash
-   OLD_VERSION=$(node -p "require('$PIPE_DIR/package.json').version" 2>/dev/null || echo "unknown")
-   echo "Current: v$OLD_VERSION"
+   [ "$CUR" = "$LATEST" ] && echo "✓ Already up to date: v$LATEST"
    ```
 
-3. **Pull latest**:
+3. **Download the release and install**:
    ```bash
-   cd "$PIPE_DIR" && git pull origin main
+   UPD_DIR="${TMPDIR:-/tmp}/multi-agent-update"
+   rm -rf "$UPD_DIR" && mkdir -p "$UPD_DIR"
+   # --registry pinned: an ambient .npmrc must not reroute the scope elsewhere.
+   npm pack "$PKG@$LATEST" --registry "$REG" --pack-destination "$UPD_DIR" --silent >/dev/null
+   tar -xzf "$UPD_DIR"/*.tgz -C "$UPD_DIR"
+   node "$UPD_DIR/package/install.js" --all
    ```
 
-4. **Install (copy the files)**:
-   ```bash
-   node "$PIPE_DIR/install.js" --all
-   ```
+   The installer refreshes every configured CLI target (Claude Code, Copilot CLI, Codex CLI) and writes the new version to `$HOME/.claude/.pipeline-version`.
 
 4b. **Update the stack-plugin marketplace** (pulls the latest plugin versions):
    ```bash
@@ -98,44 +104,41 @@ Update the pipeline in one command. Existing preferences are preserved; only ski
    fi
    ```
 
-6. **Show the new version**:
+6. **Show the new version and its changes** (from the packaged CHANGELOG - there is no git history on this channel):
    ```bash
-   NEW_VERSION=$(node -p "require('$PIPE_DIR/package.json').version" 2>/dev/null || echo "unknown")
+   NEW=$(tr -d '[:space:]' < "$HOME/.claude/.pipeline-version" 2>/dev/null)
    echo ""
-   if [ "$OLD_VERSION" = "$NEW_VERSION" ]; then
-     echo "✓ Already up to date: v$NEW_VERSION"
-   else
-     echo "✓ Updated: v$OLD_VERSION → v$NEW_VERSION"
-     echo ""
-     echo "Changes:"
-     cd "$PIPE_DIR" && git log --oneline "v$OLD_VERSION..v$NEW_VERSION" 2>/dev/null | head -15
-   fi
+   echo "✓ Updated: v$CUR → v$NEW"
+   echo ""
+   echo "Changes:"
+   awk -v new="## [$NEW]" -v cur="## [$CUR]" \
+     'index($0,new){on=1} on&&index($0,cur){exit} on' \
+     "$UPD_DIR/package/CHANGELOG.md" | head -40
    ```
 
-7. **Smoke test (optional)**:
+7. **Smoke test (optional)** - the release tarball ships exactly two smokes for this purpose:
    ```bash
    echo ""
    echo "Verification:"
-   # Repo-relative on purpose: these are maintainer smokes, excluded from installs.
-   # Both lines name $PIPE_DIR rather than relying on the cd from the line above,
-   # so neither can be read - or copied - as an installed-tree invocation.
-   bash "$PIPE_DIR/pipeline/scripts/smoke-schema-validation.sh" 2>&1 | tail -1
-   bash "$PIPE_DIR/pipeline/scripts/smoke-cross-cli-behavior.sh" 2>&1 | tail -1
+   bash "$UPD_DIR/package/pipeline/scripts/smoke-schema-validation.sh" 2>&1 | tail -1
+   bash "$UPD_DIR/package/pipeline/scripts/smoke-cross-cli-behavior.sh" 2>&1 | tail -1
+   rm -rf "$UPD_DIR"
    ```
 
 ## Output
 
 ```
-Current: v14.2.2
-  -> git pull origin main
+Current: v15.6.0   Latest: v15.6.1
+  -> npm pack @{npm-scope}/multi-agent-pipeline@15.6.1
   -> node install.js --all (51 commands, 228 scripts, 205 skills)
   -> migrate-prefs.mjs (0 changes  -  already v2.6.0)
 
-✓ Updated: v14.2.2 → v15.0.0
+✓ Updated: v15.6.0 → v15.6.1
 
 Changes:
-  e3f883e fix(dev): Phase 6 must show local test prompt
-  59617aa fix(setup): first-run guard
+  ## [15.6.1] - 2026-08-19
+  ### Fixed
+  - Usage report reads the tracker as it is actually written
   ...
 
 Verification:

package/pipeline/scripts/usage-report.mjs

@@ -212,6 +212,12 @@ function resolveStatePath({ state, taskId }) {
 }
 
 function packageVersion() {
+  try {
+    const marker = readFileSync(join(homedir(), ".claude", ".pipeline-version"), "utf-8").trim();
+    if (marker) return marker;
+  } catch {
+    /* marker absent */
+  }
   const candidates = [
     join(__dirname, "..", "..", "package.json"),
     join(homedir(), ".claude", "multi-agent-pipeline", "package.json"),
@@ -260,10 +266,25 @@ function phaseDurationSec(p) {
 }
 
 function trackerSummary(state) {
+  const empty = {
+    tk: null,
+    cost: null,
+    phs: null,
+    failed: [],
+    models: [],
+    startedAt: null,
+    endedAt: null,
+  };
   const path = resolveTracker(state);
-  if (!path) return { tk: null, cost: null, phs: null, failed: [], models: [] };
+  if (!path) return empty;
   const tracker = readJson(path);
-  if (!tracker?.phases) return { tk: null, cost: null, phs: null, failed: [], models: [] };
+  const raw = tracker?.phases;
+  const list = Array.isArray(raw)
+    ? raw
+    : raw && typeof raw === "object"
+      ? Object.entries(raw).map(([id, p]) => ({ id, ...(p ?? {}) }))
+      : null;
+  if (!list || list.length === 0) return empty;
 
   let tin = 0;
   let tout = 0;
@@ -271,7 +292,10 @@ function trackerSummary(state) {
   const phs = [];
   const failed = [];
   const models = new Set();
-  for (const [id, p] of Object.entries(tracker.phases)) {
+  let startedAt = typeof tracker?.started_at === "string" && tracker.started_at ? tracker.started_at : null;
+  let endedAt = null;
+  for (const p of list) {
+    const id = p?.id != null && String(p.id) !== "" ? String(p.id) : "?";
     if (p?.status === "failed") failed.push(id);
     if (p?.model) models.add(String(p.model));
     const pin = Number(p?.tokens_in || 0);
@@ -280,6 +304,10 @@ function trackerSummary(state) {
     tin += pin;
     tout += pout;
     tcache += pcache;
+    const ps = p?.started_at || p?.startedAt || null;
+    const pf = p?.completed_at || p?.finished_at || p?.finishedAt || null;
+    if (ps && (!startedAt || ps < startedAt)) startedAt = ps;
+    if (pf && (!endedAt || pf > endedAt)) endedAt = pf;
     phs.push({
       p: Number.isNaN(Number(id)) ? id : Number(id),
       st: p?.status || null,
@@ -300,6 +328,8 @@ function trackerSummary(state) {
     phs: phs.length ? phs : null,
     failed,
     models: Array.from(models).slice(0, 10),
+    startedAt,
+    endedAt,
   };
 }
 
@@ -312,11 +342,18 @@ function deriveErrors(state, failedPhases) {
   return Array.from(errs).slice(0, 20);
 }
 
-function durationSec(state) {
+function durationSec(state, spend) {
   const s = state.startedAt ? Date.parse(state.startedAt) : NaN;
   const f = state.finishedAt ? Date.parse(state.finishedAt) : NaN;
-  if (Number.isNaN(s) || Number.isNaN(f) || f < s) return null;
-  return Math.round((f - s) / 1000);
+  if (!Number.isNaN(s) && !Number.isNaN(f) && f >= s) {
+    return Math.round((f - s) / 1000);
+  }
+  const ts = spend?.startedAt ? Date.parse(spend.startedAt) : NaN;
+  const tf = spend?.endedAt ? Date.parse(spend.endedAt) : NaN;
+  if (!Number.isNaN(ts) && !Number.isNaN(tf) && tf >= ts) {
+    return Math.round((tf - ts) / 1000);
+  }
+  return null;
 }
 
 function runId(state) {
@@ -324,8 +361,10 @@ function runId(state) {
   return base == null ? null : String(base);
 }
 
-function eventTimestamp(state) {
-  return state.finishedAt || state.updatedAt || new Date().toISOString();
+function eventTimestamp(state, spend) {
+  if (state.finishedAt) return state.finishedAt;
+  if (isTerminalStatus(state) && spend?.endedAt) return spend.endedAt;
+  return state.updatedAt || new Date().toISOString();
 }
 
 const TERMINAL_STATUSES = ["complete", "completed", "failed", "paused", "halted", "error"];
@@ -360,8 +399,8 @@ function buildEvent(state) {
   const ctx = deriveContext(state);
   return {
     id: runId(state),
-    t: eventTimestamp(state),
-    u: state.identity?.username || null,
+    t: eventTimestamp(state, spend),
+    u: state.identity?.username || state.identity?.name || null,
     c: commandOf(state),
     m: state.mode || null,
     ap: Boolean(state.autopilot),
@@ -376,7 +415,7 @@ function buildEvent(state) {
       ? state.reviewIterations.length
       : 0,
     pr: Boolean(state.pr && (state.pr.url || state.pr.number)),
-    du: durationSec(state),
+    du: durationSec(state, spend),
     tk: spend.tk,
     cost: spend.cost,
     phs: spend.phs,
@@ -416,6 +455,7 @@ async function post(endpoint, token, event) {
 
 async function main() {
   const args = parseArgs(process.argv.slice(2));
+  if (process.env.MULTI_AGENT_SMOKE && !args.dryRun) return;
   const prefs = resolvePrefs();
   const token = resolveToken();
   const endpoint = prefs.endpoint || ENDPOINT_DEFAULT;