@mmerterden/multi-agent-pipeline 20.11.1 → 20.12.0

package/CHANGELOG.md

@@ -16,6 +16,21 @@ Internal file-layout changes that don't affect the slash-command surface are sti
 
 ## [Unreleased]
 
+## [20.12.0] - 2026-10-01
+
+### Added
+
+- `usage-report.mjs` records the outcome of every send attempt in `~/.claude/logs/multi-agent/usage-last-send.json`: `accepted`, `not-accepted`, `rejected` with the status code, `redirected` with the host it pointed to, `failed`, or `skipped` with its reason. It carries the run id, the event and the endpoint host, never the token. Any outcome other than `accepted` also prints one line on stderr. Previously the response was discarded, so a failed send left no trace on the panel or the machine.
+- `/multi-agent:doctor` gains the `usage-report` check: it reads that record and turns anything but `accepted` into a WARN with the step that fixes it.
+- `lib/agent-model-sync.mjs`: the installed agents whose `preferredModel` is `fable` (code-reviewer, plan-critic, the iOS, Android and backend architects) have their `model:` line written from `modelFallback.fableEnabled`, `fable` when on and `opus` when off. `/multi-agent:model on|off` re-applies it on every flip and the installer on every install, so the one switch covers agents spawned without an explicit model as well as routed dispatches. Sources keep `model: fable`; `/multi-agent:sync` normalizes the repo copy back with `--fable-on`.
+
+### Fixed
+
+- `migrate-prefs.mjs` rewrites a `usageLog.endpoint` on `mmerterden.vercel.app` to `mmerterden.com`. The platform host answers every request with a 308, which the usage clients never follow.
+- The unattended guard resolves a directory's worktree root once per decision instead of up to three times, which cuts a program-provenance check from seven git calls to five.
+- `test/unattended-guard.test.mjs` is now `test/unattended-guard.serial.mjs` and runs after the parallel `test/*.test.mjs` pool. Inside the pool its guard decisions could outlast the guard's 5-second internal deadline, and the guard fails closed when that happens.
+- Lockfile: `brace-expansion` 5.0.12 and `fast-uri` 3.1.8 (transitive), which clears the high and moderate advisories the scorecard gates on.
+
 ## [20.11.1] - 2026-09-29
 
 ### Changed

package/docs/facts.json

@@ -1,7 +1,7 @@
 {
   "$comment": "Generated by pipeline/scripts/gen-facts.mjs. Do not hand-edit: the site reads this, and a number edited here instead of at its source is the drift this file removes.",
-  "generatedAt": "2026-09-29",
-  "version": "20.11.1",
+  "generatedAt": "2026-10-01",
+  "version": "20.12.0",
   "phaseSchema": 2,
   "phases": [
     {

package/install/claude.mjs

@@ -45,6 +45,7 @@ import {
 import { EXTERNAL_SKILLS_MANIFEST } from "./_platform-filter.mjs";
 import { DEV_ONLY_SCRIPTS, countDevOnlyFiles } from "./_dev-only-files.mjs";
 import { registerMcpServer } from "./_mcp-register.mjs";
+import { applyFableRung, fableEnabled } from "../pipeline/lib/agent-model-sync.mjs";
 
 /**
  * A matcher an older install wrote. Hook matchers only ever see the tool name,
@@ -371,6 +372,14 @@ function installAgents(pipelineSrc, dest, useSymlinks) {
   }
   copyDir(agentsSrc, target, { useSymlinks });
   console.log(`    -> ${countFiles(agentsSrc)} files copied to ${dest}`);
+  if (useSymlinks || isDryRun()) return;
+  const on = fableEnabled(join(dirname(dest), "multi-agent-preferences.json"));
+  const changed = applyFableRung(target, on);
+  if (changed.length) {
+    console.log(
+      `    -> ${changed.length} fable-tier agents on ${on ? "fable" : "opus"} (fableEnabled)`,
+    );
+  }
 }
 
 function installRules(pipelineSrc, dest, useSymlinks) {

package/manifest.json

@@ -1,12 +1,12 @@
 {
   "name": "@mmerterden/multi-agent-pipeline",
-  "version": "20.11.1",
-  "commit": "86a41de90b8af136ea964b1f0ecefbbb4e4d7fd6",
-  "generatedAt": "2026-09-29T14:46:56.105Z",
+  "version": "20.12.0",
+  "commit": "67faa4d431ba4b6d942630d6acbcfedbec220c9a",
+  "generatedAt": "2026-10-01T18:29:41.758Z",
   "algorithm": "sha256",
-  "fileCount": 1230,
+  "fileCount": 1231,
   "files": {
-    "CHANGELOG.md": "819283cb6a641af7676a5aef9ad84b97735ad0cedf23ae07ef9369cb5d7c147a",
+    "CHANGELOG.md": "787a8bd3432c3fdbbf572f8d8ef13c548291f0a46691abba28811943d516eaef",
     "LICENSE": "8d8c51aaf1e1538b180c69965fa038db71be86798cc3e26a143bebfefe16a43e",
     "README.md": "0613eebb0b38062bd94c44043595d1950b5c9b470874dd8e402c052fd20960cf",
     "README.tr.md": "0c6b5e6943d6c3d3bf3a7ed99c705fb9a78d15d7722e6252f58404d3f6d3524d",
@@ -33,7 +33,7 @@
     "docs/best-practices.md": "f8b75b0d38b5896a6a852bb30a1edddeb24dab8b5b7b1d9313290e1241c72024",
     "docs/ecosystem.md": "e6c00f30e95b5e178f77bdfbefd686c8a4164f39c03865a89ab23465d1a37acf",
     "docs/engineering.md": "550528cd47c7d2c921729c68d0782a00ac8e77a4bdfec479f6749f9c3235d188",
-    "docs/facts.json": "cd66b23dbfb820000960a20413f377280b1f9c6bb3e8c926e315434183289634",
+    "docs/facts.json": "8f5a257e848433f3c3deca22a452e5407d7853913b5c7f60a304ff5a5aab4fee",
     "docs/features.md": "6c9f0efb00c683e6f611c440c87847b187f8b0eee59e9e812f3a241695bc2ae1",
     "docs/performance.md": "bbf2f3922c25dcba0c1a9e69ef420e3871a729af5b35009a49b48a5d3c5cd151",
     "docs/recovery-guide.md": "59a8f1b66b34cb9ff5507b3d54dac3b9915e184aa044d9c758d18cac818d510e",
@@ -52,7 +52,7 @@
     "install/_telemetry.mjs": "5433d753f909beed2c8789272bba05e245482c472f83d3444f58000c4c9a634b",
     "install/_unattended-profile.mjs": "e1ed82bde35d19105ee12c2a551eb778912b0e5c93ab227fd15c993098d98de0",
     "install/catalog-history.json": "15422563f83ca98278f94ae3e34730112e65888262e1da0442768352f46a75d4",
-    "install/claude.mjs": "c7b0a6eff15e967778e6ab8c463949c79dade05309878b03836f023da704fb3a",
+    "install/claude.mjs": "6af22bb9b2594aee502c36550020d2c9c4c3222061ed8a88a0885687cd91ebec",
     "install/codex.mjs": "2c2238cd9dd2f95b4a50a505387e8e49ddc1513ae13998f05f1ed3e3a71b18e7",
     "install/copilot.mjs": "300a74f17084d1a38f16428ca7477394c29e33cd755156e19b92e457999be234",
     "install/index.mjs": "07ec26ecdd81cc983f146faf4b7095c98edce39c89a6fd83c24ce43229d2d9e7",
@@ -62,11 +62,11 @@
     "install/templates/multi-agent-autopilot-awake.plist.template": "ddd25c76c56fcbb38a89de8e35637372d70ace993d6bc487a88ca9cfb702fe1f",
     "install/templates/multi-agent-autopilot.plist.template": "122c8a61cd927edd99375d6e3da40f1d42bcceed5b6641785c8b28bb930bc77e",
     "install/unattended-profile-legacy.json": "f52e86b998956f09ad306b1735a6c10b58580d7082d8a55665a4c6bb15c3aa1f",
-    "package.json": "533c73c39b466b487bd72cd53e7f8363b228d9902a5f88a55b31597b865df5d0",
+    "package.json": "64ce800c06e8882db62e426c03d3f729ec4344f44d9c6f50602d539c319ec054",
     "pipeline/agents/android-architect.md": "11fb74543cb0ebcf9525ca6654fe95d53da7229e0bf4a1149b31fd9005abc453",
     "pipeline/agents/backend-architect.md": "b02a606c301e4714131aed70ae6d16eeb77fbc819a001e2752cff2488d4246de",
     "pipeline/agents/bulk-reader.md": "6597052cd7d205bac2b1c7633f5232fe1a40730664a913b8eb77efd5a786dc25",
-    "pipeline/agents/code-reviewer.md": "995c72b5d79bc64e45230b54e8ac5b90fbab73f187a509b331f83e5ec3493800",
+    "pipeline/agents/code-reviewer.md": "213798685e9bff10a08f0774f57bcfbab42ee15993095ec3a2c84e13a3453725",
     "pipeline/agents/dev-critic.md": "33843216b79977ce2926fc9c54f8c9eef30b91632a11ef624647229b61a9b36a",
     "pipeline/agents/explorer.md": "12564aec29d4581684bf84313b86a4add5a6989d3b8db5c35769674cab5649c6",
     "pipeline/agents/ios-architect.md": "e1fe0c034a4dfa76794ed04ba9f4bf85d5cdd3a5d6b948cc0635e8dda8baeef9",
@@ -104,7 +104,7 @@
     "pipeline/commands/multi-agent/language/SKILL.md": "4b58b25bda9449a52df005f8d3417ace2f8b3a18d84524dc021a9561f1d16b9d",
     "pipeline/commands/multi-agent/log/SKILL.md": "033bafcf4c9b8d117a892f50a3039fd11d753b4db070ed14c50e8388613482fa",
     "pipeline/commands/multi-agent/manual-test/SKILL.md": "7b81b1ff572fb4865495283c39f93d5c803fff2e8ce9008bf1a2ab51046c3d38",
-    "pipeline/commands/multi-agent/model/SKILL.md": "4d0a5a9fcea459134a8d72d0ffff32134f0762f79cbb56638a717002ccb8da3c",
+    "pipeline/commands/multi-agent/model/SKILL.md": "56b636f8ab42c24defd3d1260f1a5e4dd332f4556d9b6d1a700322cbfa6f4f3d",
     "pipeline/commands/multi-agent/prune-logs/SKILL.md": "a7b22228ec338623c386cfd3744092488eed6871c65b531bdb6a0eb8dc8c2e9b",
     "pipeline/commands/multi-agent/prune-prompts/SKILL.md": "1aefd2b737b34aaff18f3fd12090322c04dbc41c981200622d7989c9ad45e9c2",
     "pipeline/commands/multi-agent/purge/SKILL.md": "c881805f80d7db909bcf09f1a5c980ebaf0c31d9a8ee9cae4f729387ff4ca19d",
@@ -130,7 +130,7 @@
     "pipeline/commands/multi-agent/status/SKILL.md": "a2ed316434aca49f692aafe11f95873822b9b955558a53f4f6a9667ee32a3659",
     "pipeline/commands/multi-agent/steer/SKILL.md": "07e738c228ba328f717f86e97e7af207df090b16433e28e613d430c3ff0aee3e",
     "pipeline/commands/multi-agent/store-ready/SKILL.md": "2fd7a908ee84669361bded693e7af53a17eb811e27cb4aa94237c0fce80591fa",
-    "pipeline/commands/multi-agent/sync/SKILL.md": "17049e9ef98613825b0c4d074655477f033df460c9b760728c661f6c843a7276",
+    "pipeline/commands/multi-agent/sync/SKILL.md": "8d2a1d86a97cb27c4af5feba0eaa64bc937f979c3cba1e38dc1821557c243300",
     "pipeline/commands/multi-agent/test-accessibility/SKILL.md": "d62992541303a0776ca088d5f3d5475108fd3fba5e25af04efb3ea4bbbd1fe21",
     "pipeline/commands/multi-agent/test-dark-mode/SKILL.md": "6bfe158c94f76fc6f4d06454978d0c5cad6ec00645ab48c1d1cee15ad93ae095",
     "pipeline/commands/multi-agent/test-dynamic-type/SKILL.md": "c093fe1a78a4266ad4cf1e48b3cc233d9abd7e1c524d0b8e5db0c81d8b4d58fd",
@@ -162,6 +162,7 @@
     "pipeline/contract/types/index.d.ts": "5b738dd173c4946f8dae9cb926ad63b8adac68b77000085895608bfd87ac1aa9",
     "pipeline/lib/_jira-auth.sh": "fc468736057f8841d824eb1a4db527442562f8979fea333ebaef5527f4369e9f",
     "pipeline/lib/account-resolver.sh": "f7bef9beba3f839268509361651be0b1e1f319f2f23821f90ba466fdf185a8f6",
+    "pipeline/lib/agent-model-sync.mjs": "2e0264ca8d8fef761563db219d588fed9067847043f960f68f055c186c20b668",
     "pipeline/lib/analysis-jira-write.sh": "477e7b4e2aaaa8289ab0cdb315f04c3a9b22beb8f075bbb73b6fa174d6679197",
     "pipeline/lib/ask-choice.sh": "b77282645cf64d016cdebf43d1ee299874a1411f5c51b6ae3b6c580d1bbfe78a",
     "pipeline/lib/autopilot-activation.sh": "29102f7936ea8b8238fac4e9c557bdbb39e2ea5afdc3b6cdd20622593d36da9b",
@@ -193,7 +194,7 @@
     "pipeline/lib/json-file-lock.mjs": "6ff8d8d7b890fc549e07287eca1e8261b69f930ec523d08fb73786677aa0a45a",
     "pipeline/lib/md2confluence-v3.py": "3677ca47931e4b3d0fd2ce3e11299fc5f6d24799eb8332e37dd60b6c3c4653a2",
     "pipeline/lib/model-dispatch.sh": "7edd5c92d41ee3bf74972e0827ccbb671853d5410e7fb0af0b7cb020f95e05c5",
-    "pipeline/lib/model-rung.sh": "2a5e04af3c6829d4c72e5f518e668a9cc2feffe6f2abb90a68c485f52e81959a",
+    "pipeline/lib/model-rung.sh": "8cecb4d390f306270713bd162e311dee879995e393970405c9a8f9af11da1727",
     "pipeline/lib/multi-repo-pipeline.sh": "5cca6bcc4fb857448ddadb31add343952be89423a328267e56496c7b7cdc7710",
     "pipeline/lib/normalize-text.mjs": "c2eeed65ab85cdc27a12ecaadc45dfa00b49a7611250c9ad881b9e93882a51c1",
     "pipeline/lib/outbound-gate.mjs": "1ebc840e975f19b0da4699b3a37361ecc8a2be1a7a558d2b2fb39b8b64244011",
@@ -263,13 +264,13 @@
     "pipeline/multi-agent-refs/features/cost-analysis.md": "42f1b90b41ef454f29ccfd3f93c959920f0e74cbca65e140695e9a30d6d90b87",
     "pipeline/multi-agent-refs/features/design-conformance.md": "a88ca595827cafa0c87c2facfcf9190dac69485e0596e5c198c6fc1613880452",
     "pipeline/multi-agent-refs/features/dev-critic.md": "08e01edef04b5ac216f8f43332126966d33da7b95625e47a8a6cd8ac105b263f",
-    "pipeline/multi-agent-refs/features/doctor.md": "cf26e9fe4b51a47223ea0160c7c3c9c7ea177e70ec60c379271687e42fd4f594",
+    "pipeline/multi-agent-refs/features/doctor.md": "708aba37c507bf7559af816e6328a11ba0acdc6d61d023bc10afc727d068876a",
     "pipeline/multi-agent-refs/features/external-context-injection.md": "fe0373f27c3e9aae660a55a3ba9a8163df329b4d95c727d6023b6b3afaf71d66",
     "pipeline/multi-agent-refs/features/jira-context.md": "7d14802ed9ad1747e1a06dec26f22ff9e8959e03c47d7a018af45b8274aea47c",
     "pipeline/multi-agent-refs/features/maturity-followup.md": "e663e5bcf0b3b4d4d2a67f4516dbb9fb12520dfbdedb47a9c5f57c13a9a0633e",
-    "pipeline/multi-agent-refs/features/model-fallback.md": "54063d87eb5db3e17c5666fdf0e04a88b9e13255d06f3de63875c4eb0868cad2",
+    "pipeline/multi-agent-refs/features/model-fallback.md": "e6b9635124f3557013dfbfa71d414a9d9abe9ddc89f2228a5496086c8e3b0c72",
     "pipeline/multi-agent-refs/features/package-manager.md": "b9e52f798f5dcba43abff1fe5cad8d5d5374058c9a6847c993975c665acab05a",
-    "pipeline/multi-agent-refs/features/phone-api.md": "5e81290c85c4cb2cd83e3925b0fb502a19298ae3699aac351194f8ce3f21c791",
+    "pipeline/multi-agent-refs/features/phone-api.md": "817eeaffd3772b0a80811b0cd17dee3498f08f6eccf8fd7e56deb0bc24c1c434",
     "pipeline/multi-agent-refs/features/plan-critic.md": "d218c8599d893211480a412d46efdbba4aa48e3b18e8bb0ebfd66782f3b8ebc5",
     "pipeline/multi-agent-refs/features/plan-todos.md": "8780d80b4541daee2b05080759a0694ef7e6270abe9a4621deb92ec7bac94e8e",
     "pipeline/multi-agent-refs/features/prior-fix-detection.md": "9bd172fa116b0c334576ee3df2dc478810a7e282422410e045be74ac2299253d",
@@ -288,9 +289,9 @@
     "pipeline/multi-agent-refs/features/stack-adapters.md": "71e23385da872ceed35263f4838f154800aa2da55bb6688ccca74726b70a3ef5",
     "pipeline/multi-agent-refs/features/stack-skill-routing.md": "1989f7f64be6c5ee0a42d8e9962aead7cd7472d795915ab953d89d9382f317e6",
     "pipeline/multi-agent-refs/features/unattended-gates.md": "46b516cac81a4eacf5d58bc3b1613e2266c26f1559be8dac060d1dc6b7d7ca01",
-    "pipeline/multi-agent-refs/features/unattended-security.md": "eeb8656845ac78ab612b2e3352b241a6ba2d8b8f6d4a6d5c2e7cab1f6592a4d6",
+    "pipeline/multi-agent-refs/features/unattended-security.md": "18da3d51c175a42ab6312051a50b9d0339524dad2cc34e0350de62fbf0cece91",
     "pipeline/multi-agent-refs/features/url-enrichment.md": "72e01a799d9fa54b56c762ba404a9f9236adbbf98320e395a96f6b0f5917e76b",
-    "pipeline/multi-agent-refs/features/usage-reporting.md": "6c232060da49033ef2c9ccead69084dfb7cfe45333f670b407b8afada8b99007",
+    "pipeline/multi-agent-refs/features/usage-reporting.md": "095d86b839c1289c1023919da3972e561c1bbd4a32a1fc9f8e694abe887005ac",
     "pipeline/multi-agent-refs/features/verify-by-test.md": "b0735adaa7ead797167b8d9ea48a10851a138083c6e638738cc96c66b02a1e37",
     "pipeline/multi-agent-refs/features/verify.md": "1a6db5e7239eac01e51100353013abd16bf785a7fce88b40139fca27f4166be4",
     "pipeline/multi-agent-refs/features/visual-evidence.md": "2b6aa2e4ff05c7a1fbe9e0fedfa4b28b9ad01c93a64f1ca6f6cd3e02293866aa",
@@ -481,7 +482,7 @@
     "pipeline/scripts/crush-json.mjs": "303382670f8f170c8c6710202853a2de2915625813cd157185f9be4e2b27258e",
     "pipeline/scripts/diff-explain.mjs": "194d0635639607cb1af3de064453162e01c0d59dc0c2e187d21d45bae3bc559c",
     "pipeline/scripts/diff-risk-score.mjs": "b3e8da42fea1258162e40f4eb7809074831339b7563874527f7e825f7aa795ca",
-    "pipeline/scripts/doctor.mjs": "a832682b5afb5641fbae180aa9f1cf8a0678d8c8daded452b86b9d717e049b19",
+    "pipeline/scripts/doctor.mjs": "0ac54a2630fc00b39bdf430f9466f91e6b52296a23dca8694ac1a1bd894bcfea",
     "pipeline/scripts/evidence-gate.mjs": "347a8d3fa1d17d996de345585c216bd7071f4c1d687999daf6e48881720ea5df",
     "pipeline/scripts/feedback-send.mjs": "d3ed66e9dacdfb4b5eacf1b244bf66752304fb4fcb144531441b458f3ab806be",
     "pipeline/scripts/finding-fingerprint.mjs": "fa12ab10701db5d2bfff014e41d1cd4c0b2b772aee5fc69205de14b2761b0c83",
@@ -518,7 +519,7 @@
     "pipeline/scripts/maturity-followup.mjs": "531eb9578a71ea5bb2510bb24a48f264c36aaf7adceca7b4ec3dccd1c63ae412",
     "pipeline/scripts/memory-load.sh": "c6a1976372ed033c9f3b55e757e22d05b4ef0d9774bfe185453d8847525b4a89",
     "pipeline/scripts/memory-save.sh": "ab6b4c3d78707e0ac66fe56726308782568f247463d4c7edf2316b2dd399ee6b",
-    "pipeline/scripts/migrate-prefs.mjs": "bb389c2527edaa5bf317ee1be55c2f449da21100fc9660943764d2bcc757d665",
+    "pipeline/scripts/migrate-prefs.mjs": "9d38ef7dac14c48bf1c6c8053680999728d3179c598e6c9e53f5a66290fc323e",
     "pipeline/scripts/migrate-state.mjs": "b6fb42f56ea56ab10c00e947f013e3aecaeef1aa0d819493eedbef7cdf7d4370",
     "pipeline/scripts/note-session.sh": "1466d93f401c66074705635117a052a3f811ca22f928defa1ec2e4c804c19fc1",
     "pipeline/scripts/observations.mjs": "edef08a8ab8f967030da0575d83f501eb6256460c0b72c2ba377c629b3ee0674",
@@ -583,13 +584,13 @@
     "pipeline/scripts/token-budget-report.mjs": "508bbc659df478c535c0ecdd3f8611372af8fef0b0932c7b19a247af2b2b9265",
     "pipeline/scripts/triage-memory.mjs": "2d8541145f1749593ae5728fb4c9eb3001484edb5e4d37be473aeec34d1dbe7c",
     "pipeline/scripts/ui-tree-dumper.swift": "a09e42ef069eafa08c05afd8333e05b754ef6a7d8b9687712039b0f2c9801273",
-    "pipeline/scripts/unattended_policy.py": "0f5dc7284421c529368e1dcbf30e3a85e43e73076fd09909ac185cf4ba1eff90",
+    "pipeline/scripts/unattended_policy.py": "f1df6470c798bd7d4bc9f8338eaabf98bdcfab00198d98b7e2e654aab84b709c",
     "pipeline/scripts/uninstall.mjs": "880923522ef59fdd98cb7ecb1bdc85c0f15d1e2eed2d79d6d353e88712ca95fa",
     "pipeline/scripts/update-check.sh": "9c00647e7ca4249414b2e5af08f61705ab5bd2106b6f66ae8ebce8aa143dc957",
     "pipeline/scripts/update-issue-progress.sh": "ccfef87743e91272e009e396ac07461d2784b2fa84a06c802a582526eeeb9ed9",
     "pipeline/scripts/usage-identity.mjs": "47c1f907fb1ab47672687ea0cbf2d0737985ae91ec2b48b4fe260e14c3d35d70",
     "pipeline/scripts/usage-register.mjs": "cc19d7ce5efe57255ce1521d33ad4b9a75b6833385ed6edcc5e339faf3c6e06c",
-    "pipeline/scripts/usage-report.mjs": "93c3f4055592c9cf5007cccf4710d06900576ccc10d1523c631acd13ca68cf10",
+    "pipeline/scripts/usage-report.mjs": "af1672206b1fa7d6612fa70aa46fd63372552619fdba866d89819a12ba943549",
     "pipeline/scripts/validate-analysis-doc.mjs": "ae56b7578ef51e008a99f84eba9def3e0f1dd2bd87a3880f2083aa98b365f7a1",
     "pipeline/scripts/validate-analysis.mjs": "d2dc9ccf45f6ca2702908761939edd830d18b3b273016a4b449f26fe285d5ea1",
     "pipeline/scripts/validate-code-graph.mjs": "0ceac2f5b59f641334d54dc30bee5265361fb5fe1fc97e2f9791b546efe79941",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mmerterden/multi-agent-pipeline",
-  "version": "20.11.1",
+  "version": "20.12.0",
   "description": "6-phase AI development pipeline with full orchestration on Claude Code, Copilot CLI and Codex CLI. Analysis, planning, TDD, CLI-aware parallel review with consensus surfacing + Fable triage, default-FAIL evidence gates, secret + intent guards, per-phase cost ledger, persistent learnings memory, wiki generation, commit automation. Token-preserving uninstall.",
   "type": "module",
   "main": "index.js",
@@ -20,12 +20,12 @@
   },
   "scripts": {
     "start": "node index.js",
-    "test": "npm run format:check && npm run lint && node --test test/*.test.mjs && node pipeline/scripts/run-smokes.mjs && node pipeline/scripts/lint-skills.mjs && node pipeline/scripts/gen-skills-index.mjs --check && node pipeline/scripts/gen-catalog-history.mjs --check && node pipeline/scripts/lint-personas.mjs && node pipeline/scripts/lint-mcp-refs.mjs && node pipeline/scripts/eval-triage.mjs && node pipeline/scripts/eval-golden-tasks.mjs && node pipeline/scripts/eval-intent.mjs && node pipeline/scripts/eval-recall.mjs && node pipeline/scripts/eval-guard-robustness.mjs && node pipeline/scripts/validate-schemas.mjs && node pipeline/scripts/validate-prefs.mjs && node pipeline/scripts/scorecard.mjs",
-    "test:unit": "node --test test/*.test.mjs",
+    "test": "npm run format:check && npm run lint && node --test test/*.test.mjs && node --test test/*.serial.mjs && node pipeline/scripts/run-smokes.mjs && node pipeline/scripts/lint-skills.mjs && node pipeline/scripts/gen-skills-index.mjs --check && node pipeline/scripts/gen-catalog-history.mjs --check && node pipeline/scripts/lint-personas.mjs && node pipeline/scripts/lint-mcp-refs.mjs && node pipeline/scripts/eval-triage.mjs && node pipeline/scripts/eval-golden-tasks.mjs && node pipeline/scripts/eval-intent.mjs && node pipeline/scripts/eval-recall.mjs && node pipeline/scripts/eval-guard-robustness.mjs && node pipeline/scripts/validate-schemas.mjs && node pipeline/scripts/validate-prefs.mjs && node pipeline/scripts/scorecard.mjs",
+    "test:unit": "node --test test/*.test.mjs && node --test test/*.serial.mjs",
     "test:smoke": "node pipeline/scripts/run-smokes.mjs",
     "lint:skills": "node pipeline/scripts/lint-skills.mjs",
-    "test:quick": "node --test test/*.test.mjs && node pipeline/scripts/lint-skills.mjs && node pipeline/scripts/lint-personas.mjs && node pipeline/scripts/lint-mcp-refs.mjs",
-    "test:coverage": "c8 --clean --reporter=none node --test test/*.test.mjs && c8 --clean=false --check-coverage --reporter=text --reporter=lcov node pipeline/scripts/run-smokes.mjs",
+    "test:quick": "node --test test/*.test.mjs && node --test test/*.serial.mjs && node pipeline/scripts/lint-skills.mjs && node pipeline/scripts/lint-personas.mjs && node pipeline/scripts/lint-mcp-refs.mjs",
+    "test:coverage": "c8 --clean --reporter=none node --test test/*.test.mjs && c8 --clean=false --reporter=none node --test test/*.serial.mjs && c8 --clean=false --check-coverage --reporter=text --reporter=lcov node pipeline/scripts/run-smokes.mjs",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
     "format": "prettier --write \"**/*.{js,mjs,json,yml}\" --ignore-path .gitignore --ignore-path .prettierignore",

package/pipeline/agents/code-reviewer.md

@@ -1,6 +1,6 @@
 ---
 name: code-reviewer
-description: "Code reviewer for multi-agent Phase 3  -  security, architecture, quality, performance. Default model is fable (opus is the first fallback); Phase 3 orchestrator overrides to sonnet for Reviewer 3."
+description: "Code reviewer for multi-agent Phase 3  -  security, architecture, quality, performance. Model follows the fable switch (fable when on, opus when off); Phase 3 orchestrator overrides to sonnet for Reviewer 3."
 model: fable
 preferredModel: fable
 modelRationale: "Reviewer 1 tier  -  deep security + architecture review runs on fable, the top tier (opus is the first fallback). Phase 3 orchestrator overrides to sonnet for Reviewer 3 (quality/correctness focus) via CLAUDE_CODE_SUBAGENT_MODEL before dispatch. Copilot CLI adds Reviewer 2 on gpt-5.4 for cross-model diversity."

package/pipeline/commands/multi-agent/model/SKILL.md

@@ -38,6 +38,13 @@ This command sets both, together:
 Flipping one without the other is the defect this closes, so the pair moves as
 one write or not at all.
 
+The same step re-applies the installed agents (`lib/agent-model-sync.mjs`): every
+agent under `~/.claude/agents` whose `preferredModel` is `fable` gets
+`model: fable` while the switch is on and `model: opus` while it is off. An agent
+spawned without an explicit model runs on that line, so without this the switch
+would cover routed dispatches only. The installer applies the same rule on every
+install and update, so a sync never puts the agents back on a rung that is off.
+
 ## What it reports with no argument
 
 The current rung, the pricing model, and **what the switch means on this host** -

package/pipeline/commands/multi-agent/sync/SKILL.md

@@ -134,12 +134,10 @@ Step 0 gate rules and why: `features/doctor.md`.
        ~/multi-agent-pipeline/pipeline/commands/ 2>/dev/null \
        && { echo "ABORT: corporate reference leaked into pipeline/commands"; exit 1; } || true
      ```
-   - **Localized picker descriptions are an installed-tree artifact.** When
-     `outputLanguage=tr`, the installed `description:` values are Turkish and a
-     `description-en:` sidecar holds the English original (see
-     `localize-commands.mjs`). The repo must ALWAYS receive the English form:
-     after copying commands into `pipeline/commands/`, normalize the copy and
-     verify no sidecar or Turkish description leaked:
+   - **Installed-tree artifacts.** Picker descriptions are Turkish with a
+     `description-en:` sidecar when `outputLanguage=tr`, and fable-tier agents
+     carry `model: opus` while `fableEnabled` is off. The repo always gets the
+     English form and `model: fable`, so normalize after copying:
      ```bash
      # normalize: restore English descriptions, strip description-en sidecars
      node ~/multi-agent-pipeline/pipeline/scripts/localize-commands.mjs restore \
@@ -149,6 +147,7 @@ Step 0 gate rules and why: `features/doctor.md`.
      # backstop: repo description lines must be English (Turkish-diacritics proxy)
      grep -rn '^description:.*[çğıöşüÇĞİÖŞÜ]' ~/multi-agent-pipeline/pipeline/commands/ 2>/dev/null \
        && { echo "ABORT: localized description leaked into pipeline/commands"; exit 1; } || true
+     node ~/multi-agent-pipeline/pipeline/lib/agent-model-sync.mjs --dir ~/multi-agent-pipeline/pipeline/agents --fable-on
      ```
 
 6. **Cross-platform smoke gate** (final step of the REPO sync, before push):

package/pipeline/lib/agent-model-sync.mjs

@@ -0,0 +1,95 @@
+/**
+ * agent-model-sync.mjs  -  installed agents follow the fable switch.
+ *
+ * prefs.global.modelFallback.fableEnabled is the one switch for the fable rung.
+ * The router honours it for every dispatch it resolves, but an agent spawned
+ * without an explicit model runs on its frontmatter `model:`. So every installed
+ * agent whose `preferredModel` is fable has that line written from the switch:
+ * fable while it is on, opus while it is off. Sources keep `model: fable`; only
+ * installed copies change. Called by model-rung.sh on every flip and by the
+ * installer after it lays the agents down.
+ *
+ * Usage:
+ *   node agent-model-sync.mjs [--dir <agents dir>] [--prefs <prefs file>] [--fable-on]
+ *
+ * --fable-on ignores the switch and writes fable: the sync step uses it to put
+ * the repo copy back on its source form.
+ *
+ * @module pipeline/lib/agent-model-sync
+ */
+
+import { existsSync, lstatSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { pathToFileURL } from "node:url";
+
+const FRONTMATTER = /^---\n([\s\S]*?)\n---\n/;
+
+/**
+ * @param {string} dir - an installed agents directory
+ * @param {boolean} fableOn
+ * @returns {string[]} the file names whose model line changed
+ */
+export function applyFableRung(dir, fableOn) {
+  if (!existsSync(dir)) return [];
+  // A linked agents directory is the source tree itself (a maintainer's
+  // --symlink install); writing there would edit the shipped personas.
+  if (lstatSync(dir).isSymbolicLink()) return [];
+  const want = fableOn ? "fable" : "opus";
+  const changed = [];
+  for (const name of readdirSync(dir).sort()) {
+    if (!name.endsWith(".md")) continue;
+    const path = join(dir, name);
+    let text;
+    try {
+      text = readFileSync(path, "utf8");
+    } catch {
+      continue;
+    }
+    const front = FRONTMATTER.exec(text);
+    if (!front || !/^preferredModel:\s*fable\s*$/m.test(front[1])) continue;
+    const nextFront = front[1].replace(/^model:.*$/m, `model: ${want}`);
+    if (nextFront === front[1]) continue;
+    const next = text.replace(front[1], nextFront);
+    if (lstatSync(path).isSymbolicLink()) rmSync(path);
+    writeFileSync(path, next);
+    changed.push(name);
+  }
+  return changed;
+}
+
+/**
+ * @param {string} prefsPath
+ * @returns {boolean}
+ */
+export function fableEnabled(prefsPath) {
+  try {
+    const prefs = JSON.parse(readFileSync(prefsPath, "utf8"));
+    return prefs?.global?.modelFallback?.fableEnabled === true;
+  } catch {
+    return false;
+  }
+}
+
+function arg(argv, flag) {
+  const i = argv.indexOf(flag);
+  return i >= 0 ? argv[i + 1] : undefined;
+}
+
+const invokedDirectly = process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href;
+if (invokedDirectly) {
+  const argv = process.argv.slice(2);
+  const claude = join(homedir(), ".claude");
+  const dir = arg(argv, "--dir") ?? join(claude, "agents");
+  const prefs =
+    arg(argv, "--prefs") ??
+    (process.env.MULTI_AGENT_PREFS || undefined) ??
+    join(claude, "multi-agent-preferences.json");
+  const on = argv.includes("--fable-on") || fableEnabled(prefs);
+  const changed = applyFableRung(dir, on);
+  if (changed.length) {
+    process.stdout.write(
+      `agents on ${on ? "fable" : "opus"}: ${changed.map((n) => n.replace(/\.md$/, "")).join(", ")}\n`,
+    );
+  }
+}

package/pipeline/lib/model-rung.sh

@@ -128,6 +128,13 @@ fi
 mv "$TMP" "$PREFS"
 trap - EXIT
 
+# Agents spawned without an explicit model run on their frontmatter, so the
+# installed fable-tier agents follow the switch in the same step.
+if command -v node >/dev/null 2>&1 && [ -f "$_MA_MR_HERE/agent-model-sync.mjs" ]; then
+  node "$_MA_MR_HERE/agent-model-sync.mjs" --prefs "$PREFS" ||
+    echo "model-rung: installed agents could not be updated; run node $_MA_MR_HERE/agent-model-sync.mjs" >&2
+fi
+
 echo "fable rung:    $CUR -> $WANT"
 echo "cost pricing:  $PRICING -> $WANT_PRICING"
 echo ""

package/pipeline/multi-agent-refs/features/doctor.md

@@ -293,6 +293,16 @@ readiness, not correctness: a machine that fails all four still runs the
 pipeline perfectly well with someone watching it. What they catch is the
 failure mode of an unwatched run - stopping without saying so.
 
+
+### usage-report
+
+The outcome `usage-report.mjs` recorded for its last send attempt, read from
+`logs/multi-agent/usage-last-send.json`. SKIP when `usageLog.enabled` is off or
+nothing has been sent yet; OK when the last send was accepted; WARN for every
+other outcome (`redirected`, `rejected`, `not-accepted`, `failed`, `skipped`),
+with the status code or reason and the step that fixes it. The emitter runs
+detached from phase-tracker with its output discarded, so this record is the
+only surface on which a reporting path that stopped working shows up.
 ### unattended-contract
 
 Is `multi-agent-refs/unattended-contract.md` installed. It is the only place

package/pipeline/multi-agent-refs/features/model-fallback.md

@@ -132,6 +132,16 @@ evidence, and there is now one fewer of them. Triage also runs on `opus`, which
 makes it the same model as Reviewer 1; the Step 3 anonymisation requirement
 already covers that case and is not optional here.
 
+**Installed agents follow the switch.** Five personas declare
+`preferredModel: fable` (code-reviewer, plan-critic, and the iOS, Android and
+backend architects). A dispatch the router resolves passes its model explicitly,
+but an agent spawned without one runs on its frontmatter `model:`. So the
+installed copies are written from `fableEnabled`: `fable` while it is on, `opus`
+while it is off. `model-rung.sh` re-applies them on every flip and the installer
+on every install; sources keep `model: fable`, so `lint-personas.mjs` still holds
+`model === preferredModel` there. A `--symlink` install links the source tree and
+is left alone.
+
 **Commands without Phase 0 resolve it themselves.** `/multi-agent:review`,
 `/multi-agent:review-analysis` and the untracked-branch tail of
 `/multi-agent:resume` dispatch reviewers and triage without a Phase 0 Step 0, so

package/pipeline/multi-agent-refs/features/phone-api.md

@@ -303,4 +303,4 @@ Scripts: `contract-server.mjs` (phone branch, `isPhonePath`), `_phone-auth.mjs`
 `unattended-policy.json` (`publisherScripts`). Tests:
 `test/phone-api.test.mjs`, `test/contract-server.test.mjs`,
 `test/launch-request.test.mjs`, `test/redact.test.mjs`,
-`test/contract-kit.test.mjs`, `test/unattended-guard.test.mjs`.
+`test/contract-kit.test.mjs`, `test/unattended-guard.serial.mjs`.

package/pipeline/multi-agent-refs/features/unattended-security.md

@@ -35,7 +35,7 @@ the variable the same way.
 
 With the variable unset every hook behaves as it did without this feature:
 `smoke-unattended-redteam.sh` runs the same inputs both ways, and
-`test/unattended-guard.test.mjs` holds the attended verdicts.
+`test/unattended-guard.serial.mjs` holds the attended verdicts.
 
 ## The guard
 
@@ -722,7 +722,7 @@ Scripts: `agent-guard.sh`, `agent-guard.py`, `unattended_policy.py`,
 `lib/outbound-gate.mjs`, `lib/unattended-settings-location.mjs`,
 `install/_unattended-profile.mjs`. Data:
 `schemas/unattended-policy.json`, `schemas/unattended-profile.json`,
-`schemas/pr-request.schema.json`. Tests: `test/unattended-guard.test.mjs`,
+`schemas/pr-request.schema.json`. Tests: `test/unattended-guard.serial.mjs`,
 `test/pr-request.test.mjs`, `test/autopilot-publish.test.mjs`,
 the runner's tests, `test/outbound-gate.test.mjs`,
 `test/unattended-profile.test.mjs`, `test/agent-guard.test.mjs`; smokes

package/pipeline/multi-agent-refs/features/usage-reporting.md

@@ -147,6 +147,19 @@ reason, `unavailable` with the cause, `declined`, `registered`, `enabled`, `dry-
 "you turned it off" and "we could not reach the endpoint" are different facts
 about the same empty panel.
 
+Every send attempt past the on-switch overwrites
+`~/.claude/logs/multi-agent/usage-last-send.json` with its outcome: `accepted`,
+`not-accepted` (the server answered but did not keep the record), `rejected`
+(with the status code), `redirected` (with the host it pointed to; a redirect is
+never followed, because the token would ride along), `failed` (network or
+timeout), or `skipped` (`no-token`, `no-login`, `endpoint-not-allowed`). It
+carries the run id, the event and the endpoint host, never the token. The
+phase-tracker ping discards the emitter's output, so `/multi-agent:doctor`
+reads this file (check `usage-report`) and turns anything but `accepted` into a
+WARN with one step. `migrate-prefs.mjs` rewrites an endpoint on the platform
+host to the site's domain, so a stored redirecting endpoint does not outlive an
+update.
+
 `prefs.global.usageLog.endpoint` overrides where both calls go - the register URL
 is derived from it, so a self-hosted ingest gets its own registration rather than
 this one's. Absent means the shipped default, and every shipped default names the

package/pipeline/scripts/doctor.mjs

@@ -99,6 +99,7 @@ const CHECK_IDS = [
   "mcp-surface",
   "disk-space",
   "worktree-residue",
+  "usage-report",
 ];
 
 // Only under `--profile server`. Kept in their own list so `--list-checks`
@@ -883,6 +884,52 @@ function checkMcpSurface() {
   );
 }
 
+// usage-report.mjs runs detached with its output discarded, so the record it
+// writes after every send attempt is the one place a broken reporting path
+// becomes visible.
+const USAGE_STEPS = {
+  "no-login": () => `run node ${join(HERE, "usage-identity.mjs")} --refresh`,
+  "no-token": () => `run node ${join(HERE, "usage-register.mjs")}`,
+  "endpoint-not-allowed": () => "set usageLog.endpoint to an https address",
+  rejected: () => `run node ${join(HERE, "usage-register.mjs")}`,
+  "not-accepted": () => `run node ${join(HERE, "usage-identity.mjs")} --refresh`,
+  redirected: (r) =>
+    r.location
+      ? `set usageLog.endpoint to the address on ${r.location} it redirects to`
+      : `run node ${join(HERE, "migrate-prefs.mjs")}`,
+  failed: () => "re-run a phase once the reporting endpoint is reachable",
+};
+
+function checkUsageReport() {
+  const prefs = readJson(join(CLAUDE, "multi-agent-preferences.json"));
+  const usage = prefs?.global?.usageLog;
+  if (usage?.enabled !== true || usage?.optOut === true) {
+    skip("usage-report", "usage reporting is off");
+    return;
+  }
+  const last = readJson(join(CLAUDE, "logs", "multi-agent", "usage-last-send.json"));
+  if (!last || typeof last.outcome !== "string") {
+    skip("usage-report", "no report has been sent from this machine yet");
+    return;
+  }
+  if (last.outcome === "accepted") {
+    ok("usage-report");
+    return;
+  }
+  const key = last.outcome === "skipped" ? last.reason : last.outcome;
+  const stepFor = USAGE_STEPS[key] ?? USAGE_STEPS.failed;
+  const detail = [last.status, last.reason, last.location && `to ${last.location}`]
+    .filter(Boolean)
+    .join(", ");
+  const when = last.t ? ` at ${last.t}` : "";
+  report(
+    "usage-report",
+    "WARN",
+    `the last usage report${last.id ? ` for ${last.id}` : ""} was ${last.outcome}${detail ? ` (${detail})` : ""}${when}, so runs are missing from the usage panel`,
+    stepFor(last),
+  );
+}
+
 function checkDiskSpace() {
   let freeGb = null;
   try {
@@ -1175,6 +1222,7 @@ function main() {
   checkMcpSurface();
   checkDiskSpace();
   checkWorktreeResidue();
+  checkUsageReport();
   if (PROFILE === "server") checkServerProfile(resolved);
 
   const blocked = results.filter((r) => r.severity === "BLOCK");

package/pipeline/scripts/migrate-prefs.mjs

@@ -15,6 +15,7 @@ import path from "node:path";
 import os from "node:os";
 import { fileURLToPath } from "node:url";
 import { runMain } from "../lib/fatal.mjs";
+import { canonicalEndpoint } from "../lib/usage-endpoint.mjs";
 import { lockTimeoutFrom, withFileLockSync, writeJsonAtomicSync } from "../lib/json-file-lock.mjs";
 
 const DEFAULT_FILE = path.join(os.homedir(), ".claude", "multi-agent-preferences.json");
@@ -445,9 +446,22 @@ function migrate(prefs) {
   // reportContent / wikiScope structure. Idempotent  -  safe to re-run.
   migrateReportChannels(out, changes);
 
+  // 13. usageLog.endpoint on the platform host: it answers every request with a
+  // redirect, and the usage clients never follow one with a credential attached.
+  migrateUsageEndpoint(out, changes);
+
   return { out, changes, alreadyMigrated: changes.length === 0 };
 }
 
+function migrateUsageEndpoint(out, changes) {
+  const usage = out.global.usageLog;
+  if (!usage || typeof usage !== "object" || typeof usage.endpoint !== "string") return;
+  const next = canonicalEndpoint(usage.endpoint);
+  if (next === usage.endpoint) return;
+  changes.push(`usageLog.endpoint: ${usage.endpoint} → ${next}`);
+  usage.endpoint = next;
+}
+
 // v5.7+ sub-migration: legacy jiraCommentDefault / confluenceDefault / wikiDefault booleans
 // → new reportChannels {pr,jira,confluence,wiki} object + wikiScope array. Also initializes
 // reportContent + autopilotReportTimeoutSeconds with schema defaults. Old fields are removed

package/pipeline/scripts/unattended_policy.py

@@ -570,15 +570,22 @@ def _run_base_sha(env=None):
     return sha if re.match(r"^[0-9a-f]{7,40}$", sha) else None
 
 
+_TOP_CACHE = {}
+
+
 def _worktree_top(d):
+    if d in _TOP_CACHE:
+        return _TOP_CACHE[d]
     try:
         import subprocess
 
         r = subprocess.run(["git", "-C", d, "rev-parse", "--show-toplevel"],
                            capture_output=True, text=True, timeout=3)
-        return os.path.realpath(r.stdout.strip()) if r.returncode == 0 and r.stdout.strip() else None
+        top = os.path.realpath(r.stdout.strip()) if r.returncode == 0 and r.stdout.strip() else None
     except Exception:
-        return None
+        top = None
+    _TOP_CACHE[d] = top
+    return top
 
 
 def _tracked_clean(path, env=None, cwd=None):
@@ -609,11 +616,11 @@ def _tracked_clean(path, env=None, cwd=None):
 
             # The file's path relative to the worktree root, so the base lookup
             # names it correctly and a file outside this worktree is rejected.
-            top = g("rev-parse", "--show-toplevel")
+            top = _worktree_top(d)
             ls = g("ls-files", "--error-unmatch", "--", name)
             st = g("status", "--porcelain", "--untracked-files=all", "--", name)
-            in_worktree = top.returncode == 0 and bool(top.stdout.strip())
-            rel = os.path.relpath(p, os.path.realpath(top.stdout.strip())) if in_worktree else None
+            in_worktree = top is not None
+            rel = os.path.relpath(p, top) if in_worktree else None
             at_base = (
                 g("cat-file", "-e", f"{base}:{rel}").returncode == 0
                 and g("diff", "--quiet", base, "--", name).returncode == 0

package/pipeline/scripts/usage-report.mjs

@@ -27,7 +27,15 @@
  * @module pipeline/scripts/usage-report
  */
 
-import { readFileSync, existsSync, readdirSync, appendFileSync } from "fs";
+import {
+  readFileSync,
+  existsSync,
+  readdirSync,
+  appendFileSync,
+  mkdirSync,
+  renameSync,
+  writeFileSync,
+} from "fs";
 import { canonicalEndpoint } from "../lib/usage-endpoint.mjs";
 import { homedir, platform } from "os";
 import { dirname, join } from "path";
@@ -709,27 +717,78 @@ function buildEvent(state, { event = null, login = null } = {}) {
   };
 }
 
+function hostOf(url) {
+  try {
+    return new URL(url).hostname;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * The outcome of one POST. A redirect is never followed, because the ingest
+ * token would ride along to wherever it points; its target host is reported
+ * instead, so a moved endpoint is visible rather than silent.
+ */
 async function post(endpoint, token, event) {
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), TIMEOUT_MS);
   try {
-    await fetch(endpoint, {
+    const res = await fetch(endpoint, {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
         "X-Usage-Token": token,
       },
       body: JSON.stringify(event),
-      redirect: "error",
+      redirect: "manual",
       signal: ctrl.signal,
     });
-  } catch {
-    /* never break the run on a telemetry failure */
+    if (res.status >= 300 && res.status < 400) {
+      return {
+        outcome: "redirected",
+        status: res.status,
+        location: hostOf(res.headers.get("location") || ""),
+      };
+    }
+    if (!res.ok) return { outcome: "rejected", status: res.status };
+    let body = null;
+    try {
+      body = await res.json();
+    } catch {
+      /* a 2xx without a JSON body is still a delivery */
+    }
+    return { outcome: body?.accepted === false ? "not-accepted" : "accepted", status: res.status };
+  } catch (err) {
+    const reason = ctrl.signal.aborted ? "timeout" : (err?.cause?.code ?? err?.name ?? "error");
+    return { outcome: "failed", reason: codeOf(String(reason), 40) };
   } finally {
     clearTimeout(timer);
   }
 }
 
+export const LAST_SEND_FILE = "usage-last-send.json";
+
+/**
+ * Overwrites the record of the most recent send attempt. The emitter runs
+ * detached with its output discarded, so this file is the only place a broken
+ * reporting path shows up; doctor reads it. It carries no token and no path.
+ */
+function recordSend(entry) {
+  const dir = join(homedir(), ".claude", "logs", "multi-agent");
+  const target = join(dir, LAST_SEND_FILE);
+  const tmp = `${target}.${process.pid}.tmp`;
+  try {
+    mkdirSync(dir, { recursive: true });
+    writeFileSync(tmp, JSON.stringify({ t: new Date().toISOString(), ...entry }) + "\n", {
+      mode: 0o600,
+    });
+    renameSync(tmp, target);
+  } catch {
+    /* logs dir unwritable - never break the run */
+  }
+}
+
 // The write-only ingest token rides in a header; sending it over http would
 // leak it in cleartext, contradicting the setup contract ("transmitted only
 // over TLS"). Accept https anywhere, and http ONLY for loopback (local dev).
@@ -759,10 +818,16 @@ async function main() {
   if (!args.dryRun) {
     if (prefs.optOut === true) return;
     if (prefs.enabled !== true) return;
-    if (!endpointAllowed(endpoint)) return;
+    if (!endpointAllowed(endpoint)) {
+      recordSend({ id: args.taskId, outcome: "skipped", reason: "endpoint-not-allowed" });
+      return;
+    }
   }
   const token = args.dryRun ? "" : resolveToken();
-  if (!args.dryRun && !token) return;
+  if (!args.dryRun && !token) {
+    recordSend({ id: args.taskId, outcome: "skipped", reason: "no-token" });
+    return;
+  }
 
   const statePath = resolveStatePath(args);
   let state = statePath ? readJson(statePath) : null;
@@ -782,7 +847,10 @@ async function main() {
   const who = resolveReportingLogin();
   if (!who.login) {
     process.stderr.write(`usage-report: not sent - ${who.reason}\n`);
-    if (!args.dryRun) return;
+    if (!args.dryRun) {
+      recordSend({ id: runId(state), ev: kind, outcome: "skipped", reason: "no-login" });
+      return;
+    }
   }
 
   const event = buildEvent(state, { event: kind, login: who.login });
@@ -793,7 +861,14 @@ async function main() {
   }
 
   if (event.st !== "in_progress") appendErrorLedger(event);
-  await post(endpoint, token, event);
+  const result = await post(endpoint, token, event);
+  recordSend({ id: event.id, ev: event.ev, host: hostOf(endpoint), ...result });
+  if (result.outcome !== "accepted") {
+    const detail = result.status ?? result.reason;
+    const where = result.location ? ` to ${result.location}` : "";
+    const verb = result.outcome === "not-accepted" ? "not accepted" : result.outcome;
+    process.stderr.write(`usage-report: ${verb}${where} (${detail}) by ${hostOf(endpoint)}\n`);
+  }
 }
 
 // Entry-point check: compare file URLs, never string-split a path.