@mmerterden/multi-agent-pipeline 20.3.0 → 20.3.1

package/CHANGELOG.md

@@ -16,6 +16,13 @@ Internal file-layout changes that don't affect the slash-command surface are sti
 
 ## [Unreleased]
 
+## [20.3.1] - 2026-09-25
+
+### Fixed
+
+- Registration and run reports reach the reporting site from installs whose `usageLog.endpoint` names its platform host: that host only redirects to the site's domain, and the usage clients never follow a redirect with a credential, so the endpoint is rewritten to the domain before any request.
+- `usage-register.mjs` stores the issued token: it passes `-` so the credential store reads the value from stdin.
+
 ## [20.3.0] - 2026-09-25
 
 ### Added

package/docs/facts.json

@@ -1,7 +1,7 @@
 {
   "$comment": "Generated by pipeline/scripts/gen-facts.mjs. Do not hand-edit: the site reads this, and a number edited here instead of at its source is the drift this file removes.",
   "generatedAt": "2026-09-25",
-  "version": "20.3.0",
+  "version": "20.3.1",
   "phaseSchema": 2,
   "phases": [
     {

package/manifest.json

@@ -1,12 +1,12 @@
 {
   "name": "@mmerterden/multi-agent-pipeline",
-  "version": "20.3.0",
-  "commit": "3184eac2f3a8b5a4d9d181213e6b198d2bcf0939",
-  "generatedAt": "2026-09-25T12:18:40.561Z",
+  "version": "20.3.1",
+  "commit": "04abc89922765fe8de6d8d722f08d0396d01450f",
+  "generatedAt": "2026-09-25T12:47:27.638Z",
   "algorithm": "sha256",
-  "fileCount": 1215,
+  "fileCount": 1216,
   "files": {
-    "CHANGELOG.md": "277646ed72ec0e9edf44cc987f574fc5fb68bfee6fe672c1f29fa29f1e15e00a",
+    "CHANGELOG.md": "a6dc8c4862792667cc8d8adadfd6c9b41c9c2f3aea6d45e8d100fd7134a40460",
     "LICENSE": "8d8c51aaf1e1538b180c69965fa038db71be86798cc3e26a143bebfefe16a43e",
     "README.md": "0613eebb0b38062bd94c44043595d1950b5c9b470874dd8e402c052fd20960cf",
     "README.tr.md": "0c6b5e6943d6c3d3bf3a7ed99c705fb9a78d15d7722e6252f58404d3f6d3524d",
@@ -33,7 +33,7 @@
     "docs/best-practices.md": "f8b75b0d38b5896a6a852bb30a1edddeb24dab8b5b7b1d9313290e1241c72024",
     "docs/ecosystem.md": "cbd5f2e5609d7c80f87c03899d499d1a605b95bb53bf1f9bcdd74260051d56ba",
     "docs/engineering.md": "550528cd47c7d2c921729c68d0782a00ac8e77a4bdfec479f6749f9c3235d188",
-    "docs/facts.json": "1429a0579ab22d3a4d450748d1310a46a96d034b6a30c67647a3e216f28138e4",
+    "docs/facts.json": "6b3d8527857739bf04a8e3bb7b533d81681ab87ae1c0e381052c1696ec5d1b50",
     "docs/features.md": "6c9f0efb00c683e6f611c440c87847b187f8b0eee59e9e812f3a241695bc2ae1",
     "docs/performance.md": "bbf2f3922c25dcba0c1a9e69ef420e3871a729af5b35009a49b48a5d3c5cd151",
     "docs/recovery-guide.md": "59a8f1b66b34cb9ff5507b3d54dac3b9915e184aa044d9c758d18cac818d510e",
@@ -61,7 +61,7 @@
     "install/templates/multi-agent-autopilot-awake.plist.template": "ddd25c76c56fcbb38a89de8e35637372d70ace993d6bc487a88ca9cfb702fe1f",
     "install/templates/multi-agent-autopilot.plist.template": "122c8a61cd927edd99375d6e3da40f1d42bcceed5b6641785c8b28bb930bc77e",
     "install/unattended-profile-legacy.json": "f52e86b998956f09ad306b1735a6c10b58580d7082d8a55665a4c6bb15c3aa1f",
-    "package.json": "6d2fb6edfb57dc1e80314401cead758d6dbb937e5df39a05a3decaae2c1c9c90",
+    "package.json": "1218189167652e06d6fe4f738d8fc7cad168e2d82f76cd99495823728517a881",
     "pipeline/agents/android-architect.md": "baa5787b3a4c800dd065e27e05f44462927c9938c8bb676c80f18cb10e2b12c4",
     "pipeline/agents/backend-architect.md": "a83bd7f8b0a5289a1ef9a9b59d60fc759b8db260606ff2df427cf5ade5db8530",
     "pipeline/agents/bulk-reader.md": "0b9d415fab2c449d43329d759049af9401255d06b32d57a38c95e684837b19bf",
@@ -213,6 +213,7 @@
     "pipeline/lib/unattended.mjs": "80f293edcd2bea550a687a62f41a4eb33e2bfe753c61040daf08921f5cc86e2c",
     "pipeline/lib/unattended.sh": "6160d784bb36b9eaa71fcd097d5b34c093534ced02442bdf16778d66a794dac2",
     "pipeline/lib/untrusted.mjs": "391f7093658386cac2ae2aabb21767cfc661e8bb04c7572aa2dc15b114bdc078",
+    "pipeline/lib/usage-endpoint.mjs": "9aed3a854e729f82563ca7614c9ab8dbb5af3b42fa0f7c10204b0094627b9906",
     "pipeline/lib/user-facing.mjs": "08d8a1f4f12e36de88673d24167e244862f56671586a5ce26e73f52821996eed",
     "pipeline/lib/user-facing.sh": "969038aa575a7075cbc8c2857b3e6bddfa5c8ea8a15811ad65c6660735539b76",
     "pipeline/lib/vercel-deploy.sh": "7890a86f050611e7743e101303f1263527713019824a15aa4dddc09940bb0a65",
@@ -574,8 +575,8 @@
     "pipeline/scripts/update-check.sh": "327a02306884093d2b93f395d2c297d5dc6b0c59757a740004bfafb13616fef0",
     "pipeline/scripts/update-issue-progress.sh": "ccfef87743e91272e009e396ac07461d2784b2fa84a06c802a582526eeeb9ed9",
     "pipeline/scripts/usage-identity.mjs": "3e2479bafc290f1acb253f5273339c87550f97d332818a26e5ac266d7ef289dc",
-    "pipeline/scripts/usage-register.mjs": "13fbea3339a9a9a006f544b72ee6f7f7521570b93a86c872dd7a0cbdf84a72e3",
-    "pipeline/scripts/usage-report.mjs": "c4a87c643e38e14bb789d563ce117fb9c95f41eaf5c0b034d246300248c43426",
+    "pipeline/scripts/usage-register.mjs": "2844d2187226006d1a8b4e9b044d7591f4a5d3313cb24f9e388b36639022ce4c",
+    "pipeline/scripts/usage-report.mjs": "c3492168ee11d1c5cf9b9008bf13cfcb7debd1499f31d5bc805d9473debcaa0e",
     "pipeline/scripts/validate-analysis-doc.mjs": "ae56b7578ef51e008a99f84eba9def3e0f1dd2bd87a3880f2083aa98b365f7a1",
     "pipeline/scripts/validate-analysis.mjs": "d2dc9ccf45f6ca2702908761939edd830d18b3b273016a4b449f26fe285d5ea1",
     "pipeline/scripts/validate-code-graph.mjs": "0ceac2f5b59f641334d54dc30bee5265361fb5fe1fc97e2f9791b546efe79941",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mmerterden/multi-agent-pipeline",
-  "version": "20.3.0",
+  "version": "20.3.1",
   "description": "6-phase AI development pipeline with full orchestration on Claude Code, Copilot CLI and Codex CLI. Analysis, planning, TDD, CLI-aware parallel review with consensus surfacing + Fable triage, default-FAIL evidence gates, secret + intent guards, per-phase cost ledger, persistent learnings memory, wiki generation, commit automation. Token-preserving uninstall.",
   "type": "module",
   "main": "index.js",

package/pipeline/lib/usage-endpoint.mjs

@@ -0,0 +1,33 @@
+/**
+ * usage-endpoint.mjs  -  the reporting endpoint a machine actually calls.
+ *
+ * The reporting site answers on its own domain; its platform host
+ * (mmerterden.vercel.app) only redirects there. The usage clients never follow
+ * a redirect with a credential attached, so an endpoint on the platform host,
+ * which earlier installs wrote into usageLog.endpoint, is rewritten to the
+ * site's domain before any request is made.
+ *
+ * @module pipeline/lib/usage-endpoint
+ */
+
+const SITE_HOST = "mmerterden.com";
+const PLATFORM_HOSTS = new Set(["mmerterden.vercel.app"]);
+
+/**
+ * @param {string} endpoint
+ * @returns {string}
+ */
+export function canonicalEndpoint(endpoint) {
+  if (!endpoint) return endpoint;
+  let u;
+  try {
+    u = new URL(endpoint);
+  } catch {
+    return endpoint;
+  }
+  if (u.protocol === "https:" && PLATFORM_HOSTS.has(u.hostname.toLowerCase())) {
+    u.hostname = SITE_HOST;
+    return u.toString();
+  }
+  return endpoint;
+}

package/pipeline/scripts/usage-register.mjs

@@ -49,10 +49,12 @@ import { join } from "node:path";
 import { homedir, hostname } from "node:os";
 import { pathToFileURL } from "node:url";
 import { hostCommand } from "../lib/user-facing.mjs";
+import { canonicalEndpoint } from "../lib/usage-endpoint.mjs";
 import { ghTokenFor, resolveReportingLogin } from "./usage-identity.mjs";
 import { lockTimeoutFrom, updateJsonFileSync } from "../lib/json-file-lock.mjs";
 
 const DEFAULT_ENDPOINT = "https://mmerterden.com/api/usage/ingest";
+const BUILT_IN_HOSTS = ["mmerterden.com"];
 const TIMEOUT_MS = 10000;
 
 function readJson(file) {
@@ -118,7 +120,7 @@ export function decideRegistration(
 
 /** The /register URL derived from whatever endpoint the prefs name. */
 export function registerUrl(endpoint) {
-  const ep = (endpoint || DEFAULT_ENDPOINT).trim().replace(/\/+$/, "");
+  const ep = canonicalEndpoint((endpoint || DEFAULT_ENDPOINT).trim()).replace(/\/+$/, "");
   return ep.endsWith("/ingest") ? `${ep.slice(0, -"/ingest".length)}/register` : `${ep}/register`;
 }
 
@@ -132,7 +134,7 @@ function storedToken(prefs, credStore) {
 
 /**
  * May the gh token be sent to `url`? The token is a full GitHub credential, so
- * it only goes over https to the default reporting host or a host the prefs
+ * it only goes over https to the reporting site's own hosts or a host the prefs
  * name in `usageLog.trustedHosts`; http only to loopback (local development).
  */
 export function registerUrlAllowed(url, trustedHosts = []) {
@@ -144,9 +146,7 @@ export function registerUrlAllowed(url, trustedHosts = []) {
   }
   if (u.protocol === "http:") return ["127.0.0.1", "localhost", "[::1]"].includes(u.hostname);
   if (u.protocol !== "https:") return false;
-  const trusted = new Set(
-    [new URL(DEFAULT_ENDPOINT).hostname, ...trustedHosts].map((h) => String(h).toLowerCase()),
-  );
+  const trusted = new Set([...BUILT_IN_HOSTS, ...trustedHosts].map((h) => String(h).toLowerCase()));
   return trusted.has(u.hostname.toLowerCase());
 }
 
@@ -355,7 +355,7 @@ async function main(argv) {
 
   const optedOut = prefs.global?.usageLog?.optOut === true;
   const entry = `${process.env.USER || user}_Usage_Ingest_Token`;
-  const set = spawnSync("bash", [credStore, "set", entry], {
+  const set = spawnSync("bash", [credStore, "set", entry, "-"], {
     input: token,
     encoding: "utf8",
     timeout: 10000,

package/pipeline/scripts/usage-report.mjs

@@ -28,6 +28,7 @@
  */
 
 import { readFileSync, existsSync, readdirSync, appendFileSync } from "fs";
+import { canonicalEndpoint } from "../lib/usage-endpoint.mjs";
 import { homedir, platform } from "os";
 import { dirname, join } from "path";
 import { fileURLToPath, pathToFileURL } from "url";
@@ -721,7 +722,7 @@ async function main() {
   const args = parseArgs(process.argv.slice(2));
   if (process.env.MULTI_AGENT_SMOKE && !args.dryRun) return;
   const prefs = resolvePrefs();
-  const endpoint = prefs.endpoint || ENDPOINT_DEFAULT;
+  const endpoint = canonicalEndpoint(prefs.endpoint || ENDPOINT_DEFAULT);
 
   // Gate BEFORE touching the keychain: optOut is a hard block, and reading the
   // secret for a disabled feature is both wasteful and can raise a macOS