@mrrlin-dev/mcp 0.4.15 → 0.4.17

package/dist/bin.cjs

@@ -6246,7 +6246,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes4, createHash: createHash5 } = require("crypto");
+    var { randomBytes: randomBytes5, createHash: createHash5 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -6784,7 +6784,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes4(16).toString("base64");
+      const key = randomBytes5(16).toString("base64");
       const request = isSecure ? https.request : http2.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -21476,7 +21476,7 @@ var import_node_http = __toESM(require("node:http"), 1);
 var import_node_os11 = __toESM(require("node:os"), 1);
 var import_node_path24 = __toESM(require("node:path"), 1);
 var import_node_child_process15 = require("node:child_process");
-var import_node_crypto9 = __toESM(require("node:crypto"), 1);
+var import_node_crypto10 = __toESM(require("node:crypto"), 1);
 
 // src/turn-replay-buffer.ts
 var DEFAULT_MAX_EVENTS = 2e3;
@@ -41623,7 +41623,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.15";
+var PKG_VERSION = "0.4.17";
 
 // src/api-base-url-migrate.ts
 var import_node_fs3 = __toESM(require("node:fs"), 1);
@@ -42312,6 +42312,7 @@ async function emitPruneLog(stateDir, daysRemoved, reasonByDay, bytesRemoved, ol
 }
 
 // src/telemetry/turn-aggregator.ts
+var import_node_crypto3 = require("node:crypto");
 var import_promises5 = require("node:fs/promises");
 var import_node_path10 = require("node:path");
 var BRIDGE_FILE_RE = /^bridge-(\d{4}-\d{2}-\d{2})\.jsonl$/;
@@ -42322,6 +42323,25 @@ var PLUMBING_COUNTER_KEY = {
   buffer_stats: "bufferStats",
   rate_limit_status: "rateLimitStatusRecords"
 };
+function resolveOwnSlug(records) {
+  for (const rec of records) {
+    const slug = rec.projection?.projectSlug;
+    if (slug) return slug;
+  }
+  return void 0;
+}
+function inheritSlug(seeds, index) {
+  let preceding;
+  let following;
+  for (const seed of seeds) {
+    if (seed.index < index) {
+      if (!preceding || seed.index > preceding.index) preceding = seed;
+    } else if (seed.index > index) {
+      if (!following || seed.index < following.index) following = seed;
+    }
+  }
+  return (preceding ?? following)?.slug;
+}
 async function foldClosedDays(stateDir, today) {
   const logsDir = (0, import_node_path10.join)(stateDir, "logs");
   let entries;
@@ -42337,6 +42357,7 @@ async function foldClosedDays(stateDir, today) {
     if (day === today) continue;
     const raw = await (0, import_promises5.readFile)((0, import_node_path10.join)(logsDir, entry), "utf8");
     const groups = /* @__PURE__ */ new Map();
+    let groupCounter = 0;
     for (const line of raw.split("\n")) {
       const trimmed = line.trim();
       if (!trimmed) continue;
@@ -42351,13 +42372,14 @@ async function foldClosedDays(stateDir, today) {
       const key = `${sessionId === null ? 0 : 1}:${sessionId}:${turnId === null ? 0 : 1}:${turnId}`;
       let group = groups.get(key);
       if (!group) {
-        group = { sessionId, turnId, records: [], projectionFailures: 0 };
+        group = { sessionId, turnId, records: [], projectionFailures: 0, firstSeenIndex: groupCounter++ };
         groups.set(key, group);
       }
       group.records.push(rec);
       if (rec.projectionFailed === true) group.projectionFailures += 1;
     }
     const rowsByProject = /* @__PURE__ */ new Map();
+    const pending = [];
     for (const group of groups.values()) {
       if (group.sessionId === null) continue;
       const records = [...group.records].sort((a, b) => {
@@ -42368,15 +42390,7 @@ async function foldClosedDays(stateDir, today) {
         if (bSeq === void 0) return -1;
         return aSeq - bSeq;
       });
-      let projectSlug;
-      for (const rec of records) {
-        const slug = rec.projection?.projectSlug;
-        if (slug) {
-          projectSlug = slug;
-          break;
-        }
-      }
-      projectSlug ??= "_unattributed";
+      const ownSlug = resolveOwnSlug(records);
       const toolResults = records.filter((r) => r.projection?.kind === "tool_result");
       const toolSequence = [];
       for (const rec of records) {
@@ -42433,18 +42447,37 @@ async function foldClosedDays(stateDir, today) {
         plumbing,
         projectionFailures: group.projectionFailures
       };
-      const rows = rowsByProject.get(projectSlug) ?? [];
-      rows.push(row);
-      rowsByProject.set(projectSlug, rows);
+      pending.push({ sessionId: group.sessionId, firstSeenIndex: group.firstSeenIndex, ownSlug, row });
+    }
+    const seedsBySession = /* @__PURE__ */ new Map();
+    for (const item of pending) {
+      if (item.ownSlug === void 0) continue;
+      const seeds = seedsBySession.get(item.sessionId) ?? [];
+      seeds.push({ index: item.firstSeenIndex, slug: item.ownSlug });
+      seedsBySession.set(item.sessionId, seeds);
+    }
+    for (const item of pending) {
+      const slug = item.ownSlug ?? inheritSlug(seedsBySession.get(item.sessionId) ?? [], item.firstSeenIndex) ?? // Neither the turn nor any turn of its session carries project evidence. Unchanged from
+      // before this change: the partition stays `_unattributed`, and daily-uploader.ts is the one
+      // that maps that partition name to MRRLIN_TELEMETRY_DEFAULT_PROJECT at upload time.
+      "_unattributed";
+      const rows = rowsByProject.get(slug) ?? [];
+      rows.push(item.row);
+      rowsByProject.set(slug, rows);
     }
     if (rowsByProject.size === 0) continue;
     const telemetryDir = (0, import_node_path10.join)(stateDir, "telemetry");
     await (0, import_promises5.mkdir)(telemetryDir, { recursive: true });
     for (const [slug, rows] of rowsByProject) {
       const finalPath = (0, import_node_path10.join)(telemetryDir, `rows-${slug}-${day}.jsonl`);
-      const tmpPath = `${finalPath}.tmp`;
-      await (0, import_promises5.writeFile)(tmpPath, rows.map((r) => JSON.stringify(r)).join("\n") + "\n", "utf8");
-      await (0, import_promises5.rename)(tmpPath, finalPath);
+      const tmpPath = `${finalPath}.tmp-${process.pid}-${(0, import_node_crypto3.randomBytes)(6).toString("hex")}`;
+      try {
+        await (0, import_promises5.writeFile)(tmpPath, rows.map((r) => JSON.stringify(r)).join("\n") + "\n", "utf8");
+        await (0, import_promises5.rename)(tmpPath, finalPath);
+      } finally {
+        await (0, import_promises5.unlink)(tmpPath).catch(() => {
+        });
+      }
     }
   }
 }
@@ -42454,7 +42487,7 @@ var import_promises6 = require("node:fs/promises");
 var import_node_path12 = require("node:path");
 
 // src/consensus/wiring.ts
-var import_node_crypto3 = __toESM(require("node:crypto"), 1);
+var import_node_crypto4 = __toESM(require("node:crypto"), 1);
 var import_node_fs5 = __toESM(require("node:fs"), 1);
 var import_node_path11 = __toESM(require("node:path"), 1);
 var import_node_url2 = require("node:url");
@@ -43981,7 +44014,7 @@ You revise a deliverable to address the accepted issues so it satisfies the acce
         try {
           const diagnostics = Array.isArray(r["diagnostics"]) ? r["diagnostics"] : void 0;
           await client.appendExecutionArtifact(projectSlug, runId, {
-            id: `EA-${import_node_crypto3.default.randomUUID()}`,
+            id: `EA-${import_node_crypto4.default.randomUUID()}`,
             kind: "verification",
             payload: {
               source: "deliverable-gate",
@@ -44539,7 +44572,7 @@ function setSelectedProvider(value) {
 
 // src/execution-consumer.ts
 var import_node_child_process12 = require("node:child_process");
-var import_node_crypto5 = __toESM(require("node:crypto"), 1);
+var import_node_crypto6 = __toESM(require("node:crypto"), 1);
 var import_node_path15 = __toESM(require("node:path"), 1);
 var import_node_util = require("node:util");
 
@@ -44608,7 +44641,7 @@ function mapDeliverableGateResult(result) {
 }
 
 // src/async-tools/draft-spec.ts
-var import_node_crypto4 = require("node:crypto");
+var import_node_crypto5 = require("node:crypto");
 var DRAFT_SPEC_TOOL_NAME = "draft_task_spec";
 var SPECS_FOLDER = "Specs";
 var DRAFT_SPEC_TLDR_MAX_CHARS = 300;
@@ -45091,7 +45124,7 @@ function onComplete(outcome, input) {
     };
   }
   const summary = outcome.error;
-  const hash3 = (0, import_node_crypto4.createHash)("sha256").update(summary).digest("hex").slice(0, 10);
+  const hash3 = (0, import_node_crypto5.createHash)("sha256").update(summary).digest("hex").slice(0, 10);
   return {
     kind: "info",
     id: `II-sched-draft-failed-${input.taskId}-${hash3}`,
@@ -46411,7 +46444,7 @@ function isBridgeGeneratedArtifact(artifact) {
   return typeof payload === "object" && payload !== null && "event" in payload;
 }
 function newArtifactId() {
-  return `EA-${import_node_crypto5.default.randomUUID()}`;
+  return `EA-${import_node_crypto6.default.randomUUID()}`;
 }
 var BLAST_RADIUS_FLOOR_PATTERNS = [/^supabase\/migrations\//, /^packages\/db\/src\/schema\.ts$/];
 function isBlastRadiusFloorPath(path22) {
@@ -46653,7 +46686,7 @@ async function driveRun(deps, projectSlug, runId) {
   if (!claimed) return;
   if (!claimed.leaseId) {
     await deps.client.createInboxItem(projectSlug, {
-      id: `II-${import_node_crypto5.default.randomUUID()}`,
+      id: `II-${import_node_crypto6.default.randomUUID()}`,
       kind: "handoff",
       taskId: claimed.taskId,
       body: `Execution run ${runId} was claimed but returned no leaseId. This indicates DB/API corruption and requires operator attention.`
@@ -47624,7 +47657,7 @@ async function reconcileTaskAwaitingMerge(deps, projectSlug, task, runId, reason
   }
   try {
     await deps.client.createInboxItem(projectSlug, {
-      id: `II-${import_node_crypto5.default.randomUUID()}`,
+      id: `II-${import_node_crypto6.default.randomUUID()}`,
       kind: "handoff",
       taskId: task.id,
       body: `Task ${task.id} (${task.title}) still needs operator follow-up: ${reason}. Mrrlin could not move the task back to Handoff needed automatically.`
@@ -47659,7 +47692,7 @@ async function notifyOperatorHandoff(deps, projectSlug, task, runId, reason) {
   }
   try {
     await deps.client.createInboxItem(projectSlug, {
-      id: `II-${import_node_crypto5.default.randomUUID()}`,
+      id: `II-${import_node_crypto6.default.randomUUID()}`,
       kind: "handoff",
       taskId: task.id,
       body: `Execution run ${runId} for task ${task.id} (${task.title}) needs operator attention: ${reason}`
@@ -47797,7 +47830,7 @@ async function deployGateHandoff(deps, projectSlug, task, runId, reason, leaseId
   }).catch(() => {
   });
   await deps.client.createInboxItem(projectSlug, {
-    id: `II-${import_node_crypto5.default.randomUUID()}`,
+    id: `II-${import_node_crypto6.default.randomUUID()}`,
     kind: "handoff",
     taskId: task.id,
     body: `Deploy gate for run ${runId} (task ${task.id} \u2014 ${task.title}) needs operator attention: ${reason}`
@@ -47816,7 +47849,7 @@ function maxLeaseReclaims() {
 }
 
 // src/async-job-consumer.ts
-var import_node_crypto7 = __toESM(require("node:crypto"), 1);
+var import_node_crypto8 = __toESM(require("node:crypto"), 1);
 
 // src/async-tools/registry.ts
 var registry2 = /* @__PURE__ */ new Map();
@@ -47855,7 +47888,7 @@ function redact(input) {
 }
 
 // src/telemetry/projector.ts
-var import_node_crypto6 = require("node:crypto");
+var import_node_crypto7 = require("node:crypto");
 function isRecord2(x) {
   return typeof x === "object" && x !== null;
 }
@@ -47896,7 +47929,7 @@ function buildProjection(payload, type, ms, telemetry) {
       if (typeof exitCode === "number") proj.exitCode = exitCode;
       const status = tool.status;
       if (typeof status === "string" && status.trim() !== "") {
-        proj.statusHash = (0, import_node_crypto6.createHash)("sha256").update(status.trim().toLowerCase()).digest("hex").slice(0, 8);
+        proj.statusHash = (0, import_node_crypto7.createHash)("sha256").update(status.trim().toLowerCase()).digest("hex").slice(0, 8);
       }
       return proj;
     }
@@ -48211,7 +48244,7 @@ async function driveAsyncJob(deps, projectSlug, jobId) {
   const delivery = descriptor2.onComplete(outcome, input);
   if (!delivery.suppressInbox) {
     await deps.client.createInboxItem(projectSlug, {
-      id: delivery.id ?? `II-${import_node_crypto7.default.randomUUID()}`,
+      id: delivery.id ?? `II-${import_node_crypto8.default.randomUUID()}`,
       kind: delivery.kind,
       body: delivery.body,
       ...delivery.taskId ? { taskId: delivery.taskId } : {},
@@ -48229,13 +48262,13 @@ async function deriveRequestedHash(client, toolName, input) {
   if (input.requestedHash) return input.requestedHash;
   if (toolName === "run_spec_consensus" && input.pageId) {
     const page = await client.getWikiPage(input.projectSlug, input.pageId);
-    return page.contentHash ?? import_node_crypto7.default.createHash("sha256").update(page.markdownBody).digest("hex");
+    return page.contentHash ?? import_node_crypto8.default.createHash("sha256").update(page.markdownBody).digest("hex");
   }
   if (toolName === "draft_task_spec" && input.taskId) {
     const task = await client.getTask(input.projectSlug, input.taskId);
-    return task.updatedAt ?? import_node_crypto7.default.createHash("sha256").update(JSON.stringify(task)).digest("hex");
+    return task.updatedAt ?? import_node_crypto8.default.createHash("sha256").update(JSON.stringify(task)).digest("hex");
   }
-  return import_node_crypto7.default.createHash("sha256").update(JSON.stringify(input)).digest("hex");
+  return import_node_crypto8.default.createHash("sha256").update(JSON.stringify(input)).digest("hex");
 }
 async function runAsyncBackstopSweep(deps, drive = (slug, jobId) => driveAsyncJob(deps, slug, jobId)) {
   const projects = await deps.client.listProjects();
@@ -48716,7 +48749,7 @@ function createToolBusyClock(opts) {
 }
 
 // src/worker-token.ts
-var import_node_crypto8 = require("node:crypto");
+var import_node_crypto9 = require("node:crypto");
 var import_node_fs11 = require("node:fs");
 var import_node_os8 = __toESM(require("node:os"), 1);
 var import_node_path19 = __toESM(require("node:path"), 1);
@@ -48747,7 +48780,7 @@ function readOrCreateWorkerToken() {
   if (existing) return existing;
   const dir = workerDir();
   (0, import_node_fs11.mkdirSync)(dir, { recursive: true, mode: 448 });
-  const token = (0, import_node_crypto8.randomBytes)(32).toString("hex");
+  const token = (0, import_node_crypto9.randomBytes)(32).toString("hex");
   (0, import_node_fs11.writeFileSync)(workerTokenPath(), `${token}
 `, { encoding: "utf8", mode: 384 });
   return token;
@@ -48815,7 +48848,7 @@ function wrapConstructor(hashCons) {
   hashC.create = () => hashCons();
   return hashC;
 }
-function randomBytes2(bytesLength = 32) {
+function randomBytes3(bytesLength = 32) {
   if (crypto5 && typeof crypto5.getRandomValues === "function") {
     return crypto5.getRandomValues(new Uint8Array(bytesLength));
   }
@@ -48854,10 +48887,10 @@ function encodeTranscript(channelId, ephemeralPhonePub, ephemeralAgentPub) {
 
 // ../../packages/director-e2e/dist/random.js
 function generateSecret() {
-  return randomBytes2(32);
+  return randomBytes3(32);
 }
 function generateChannelId() {
-  return toBase64Url(randomBytes2(16));
+  return toBase64Url(randomBytes3(16));
 }
 
 // ../../packages/director-e2e/dist/qr.js
@@ -50026,7 +50059,7 @@ function validateOpts(curve) {
 }
 function twistedEdwards(curveDef) {
   const CURVE = validateOpts(curveDef);
-  const { Fp: Fp2, n: CURVE_ORDER, prehash, hash: cHash, randomBytes: randomBytes4, nByteLength, h: cofactor } = CURVE;
+  const { Fp: Fp2, n: CURVE_ORDER, prehash, hash: cHash, randomBytes: randomBytes5, nByteLength, h: cofactor } = CURVE;
   const MASK = _2n3 << BigInt(nByteLength * 8) - _1n4;
   const modP = Fp2.create;
   const uvRatio2 = CURVE.uvRatio || ((u, v) => {
@@ -50365,7 +50398,7 @@ function twistedEdwards(curveDef) {
   const utils = {
     getExtendedPublicKey,
     // ed25519 private keys are uniform 32b. No need to check for modulo bias, like in secp256k1.
-    randomPrivateKey: () => randomBytes4(Fp2.BYTES),
+    randomPrivateKey: () => randomBytes5(Fp2.BYTES),
     /**
      * We're doing scalar multiplication (used in getPublicKey etc) with precomputed BASE_POINT
      * values. This slows down first getPublicKey() by milliseconds (see Speed section),
@@ -50580,7 +50613,7 @@ var ed25519Defaults = {
   Gx: BigInt("15112221349535400772501151409588531511454012693041857206046113283949847762202"),
   Gy: BigInt("46316835694926478169428394003475163141307993866256225615783033603165251855960"),
   hash: sha512,
-  randomBytes: randomBytes2,
+  randomBytes: randomBytes3,
   adjustScalarBytes,
   // dom2
   // Ratio of u to v. Allows us to combine inversion and square root. Uses algo from RFC8032 5.1.3.
@@ -50615,7 +50648,7 @@ var x25519 = /* @__PURE__ */ (() => montgomery({
     return mod(pow2(pow_p_5_8, BigInt(3), P) * b2, P);
   },
   adjustScalarBytes,
-  randomBytes: randomBytes2
+  randomBytes: randomBytes3
 }))();
 function edwardsToMontgomeryPub(edwardsPub) {
   const { y } = ed25519.ExtendedPoint.fromHex(edwardsPub);
@@ -53613,9 +53646,9 @@ function readCodexFallbackModels() {
   return [...models.values()];
 }
 function selfUpdateInboxItemId(offeredVersion) {
-  if (!offeredVersion) return `II-MCPUPD-${(0, import_node_crypto9.randomUUID)()}`;
+  if (!offeredVersion) return `II-MCPUPD-${(0, import_node_crypto10.randomUUID)()}`;
   if (/^[A-Za-z0-9._-]+$/.test(offeredVersion)) return `II-MCPUPD-${offeredVersion}`;
-  const hash3 = import_node_crypto9.default.createHash("sha256").update(offeredVersion).digest("hex").slice(0, 10);
+  const hash3 = import_node_crypto10.default.createHash("sha256").update(offeredVersion).digest("hex").slice(0, 10);
   return `II-MCPUPD-${offeredVersion.replace(/[^A-Za-z0-9._-]/g, "-")}-${hash3}`;
 }
 function neutralCheckoutCwd(stateDir) {
@@ -54165,7 +54198,7 @@ function createBridgeRequestListener(opts) {
         res.end(JSON.stringify({ ok: false, error: "Origin not allowed." }));
         return;
       }
-      const nonce = import_node_crypto9.default.randomBytes(16).toString("base64url");
+      const nonce = import_node_crypto10.default.randomBytes(16).toString("base64url");
       res.writeHead(200, { "content-type": "application/json" });
       res.end(JSON.stringify({ ok: true, wsUrl: `ws://${host}:${port}/ws`, token, nonce }));
       return;
@@ -54464,7 +54497,7 @@ function createBridgeMessageHandler(deps) {
       }
     }
     socket.on("message", async (data) => {
-      const spanId = import_node_crypto9.default.randomUUID();
+      const spanId = import_node_crypto10.default.randomUUID();
       if (logCtx) {
         logCtx.span.id = spanId;
         logCtx.span.at = Date.now();
@@ -55042,7 +55075,7 @@ function createBridgeMessageHandler(deps) {
       thread.inFlight = true;
       pendingTurnSessions.delete(directorSessionId);
       thread.replay = createReplayBuffer({
-        turnId: (0, import_node_crypto9.randomUUID)(),
+        turnId: (0, import_node_crypto10.randomUUID)(),
         spanId,
         ...deps.retentionMs !== void 0 ? { retentionMs: deps.retentionMs } : {},
         ...deps.ackLingerMs !== void 0 ? { ackLingerMs: deps.ackLingerMs } : {}
@@ -55462,6 +55495,7 @@ function checkTelemetryDefaultProject(env, warn) {
 }
 async function startDirectorBridge() {
   const config2 = parseConfig();
+  let telemetryPipelineRunning = false;
   checkTelemetryDefaultProject(process.env, (m) => console.error(m));
   const turnLock = createTurnLock();
   let lastTurnEndedAt = Date.now();
@@ -55689,7 +55723,7 @@ async function startDirectorBridge() {
   };
   const sessionSinks = createSessionSinkRegistry();
   const tombstones = /* @__PURE__ */ new Map();
-  const bridgeInstanceId = (0, import_node_crypto9.randomUUID)();
+  const bridgeInstanceId = (0, import_node_crypto10.randomUUID)();
   const asyncConsumerDeps = {
     client,
     run: wrappedTurnLock.run,
@@ -55964,7 +55998,7 @@ async function startDirectorBridge() {
   const bridgeLogger = createBridgeLogger(config2.stateDir, process.env);
   let bridgeBinShaShort = "unknown00000";
   try {
-    bridgeBinShaShort = import_node_crypto9.default.createHash("sha256").update(import_node_fs17.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
+    bridgeBinShaShort = import_node_crypto10.default.createHash("sha256").update(import_node_fs17.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
   } catch {
   }
   attachBridgeWss(server, {
@@ -56141,42 +56175,54 @@ async function startDirectorBridge() {
           });
         }
       }
-      void (async () => {
-        try {
-          const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-          await foldClosedDays(config2.stateDir, today);
-          await uploadPendingDays(config2.stateDir, client, bridgeHealth, {
-            cwd: config2.codexCwd ?? process.cwd(),
-            codexExecutable: config2.codexExecutable,
-            timeoutMs: readEnvInt("MRRLIN_TELEMETRY_GATE_TIMEOUT_SECONDS", 60) * 1e3
-          });
-          const pruneResult = await prune(config2.stateDir, {
-            ageDays: readEnvInt("MRRLIN_LOG_RETENTION_AGE_DAYS", 30),
-            budgetMb: readEnvInt("MRRLIN_LOG_RETENTION_BUDGET_MB", 1024),
-            // The reconstruction window's day-files are off limits. Derived from the thread
-            // TTL so the two numbers cannot drift apart.
-            protectedSinceMs: Date.now() - config2.idleThreadTtlMs
-          });
-          if (pruneResult.budgetOvershootBytes > 0) {
+      if (telemetryPipelineRunning) {
+        bridgeLogger.logOut({
+          spanId: "gc",
+          sessionId: null,
+          type: "<telemetry-pipeline-skipped>",
+          payload: { reason: "previous run still in flight" }
+        });
+      } else {
+        telemetryPipelineRunning = true;
+        void (async () => {
+          try {
+            const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+            await foldClosedDays(config2.stateDir, today);
+            await uploadPendingDays(config2.stateDir, client, bridgeHealth, {
+              cwd: config2.codexCwd ?? process.cwd(),
+              codexExecutable: config2.codexExecutable,
+              timeoutMs: readEnvInt("MRRLIN_TELEMETRY_GATE_TIMEOUT_SECONDS", 60) * 1e3
+            });
+            const pruneResult = await prune(config2.stateDir, {
+              ageDays: readEnvInt("MRRLIN_LOG_RETENTION_AGE_DAYS", 30),
+              budgetMb: readEnvInt("MRRLIN_LOG_RETENTION_BUDGET_MB", 1024),
+              // The reconstruction window's day-files are off limits. Derived from the thread
+              // TTL so the two numbers cannot drift apart.
+              protectedSinceMs: Date.now() - config2.idleThreadTtlMs
+            });
+            if (pruneResult.budgetOvershootBytes > 0) {
+              bridgeLogger.logOut({
+                spanId: "gc",
+                sessionId: null,
+                type: "<log-budget-overshoot>",
+                payload: {
+                  overshootBytes: pruneResult.budgetOvershootBytes,
+                  reason: "protected re-seed window not pruned"
+                }
+              });
+            }
+          } catch (error51) {
             bridgeLogger.logOut({
               spanId: "gc",
               sessionId: null,
-              type: "<log-budget-overshoot>",
-              payload: {
-                overshootBytes: pruneResult.budgetOvershootBytes,
-                reason: "protected re-seed window not pruned"
-              }
+              type: "<telemetry-pipeline-error>",
+              payload: { error: error51 instanceof Error ? error51.message : String(error51) }
             });
+          } finally {
+            telemetryPipelineRunning = false;
           }
-        } catch (error51) {
-          bridgeLogger.logOut({
-            spanId: "gc",
-            sessionId: null,
-            type: "<telemetry-pipeline-error>",
-            payload: { error: error51 instanceof Error ? error51.message : String(error51) }
-          });
-        }
-      })();
+        })();
+      }
       scheduleClaimLoop();
     }, claimIntervalMs());
     claimTimer.unref?.();
@@ -56397,7 +56443,7 @@ function timingSafeTokenEqual(provided, expected) {
   const a = Buffer.from(provided);
   const b = Buffer.from(expected);
   if (a.length !== b.length) return false;
-  return import_node_crypto9.default.timingSafeEqual(a, b);
+  return import_node_crypto10.default.timingSafeEqual(a, b);
 }
 function readDispatchBody(req) {
   return new Promise((resolve, reject) => {
@@ -56426,7 +56472,7 @@ function readOrCreateBridgeToken(stateDir) {
   } catch {
   }
   import_node_fs17.default.mkdirSync(stateDir, { recursive: true, mode: 448 });
-  const token = import_node_crypto9.default.randomBytes(32).toString("base64url");
+  const token = import_node_crypto10.default.randomBytes(32).toString("base64url");
   import_node_fs17.default.writeFileSync(tokenPath, `${token}
 `, { mode: 384 });
   return token;
@@ -59811,7 +59857,7 @@ var StdioServerTransport = class {
 };
 
 // src/tools.ts
-var import_node_crypto12 = require("node:crypto");
+var import_node_crypto13 = require("node:crypto");
 var import_promises10 = require("node:fs/promises");
 var import_node_path27 = __toESM(require("node:path"), 1);
 var import_node_os12 = __toESM(require("node:os"), 1);
@@ -60501,7 +60547,7 @@ async function resolveActiveRunHead(input, deps) {
 }
 
 // src/async-tools/consensus.ts
-var import_node_crypto10 = require("node:crypto");
+var import_node_crypto11 = require("node:crypto");
 
 // src/consensus/question-similarity.ts
 var SUPPRESSION_SIMILARITY_THRESHOLD = 0.6;
@@ -60777,9 +60823,9 @@ async function handleConsensusBlocked(result, ctx, input, resolvedTaskId) {
     }
     if (taskId) {
       const scopeId = taskId;
-      const groupId = toFile.length > 1 ? `II-${scopeId}-gate-group-${(0, import_node_crypto10.createHash)("sha256").update(toFile.map((c) => c.rawQuestion).sort().join("\n")).digest("hex").slice(0, 10)}` : void 0;
+      const groupId = toFile.length > 1 ? `II-${scopeId}-gate-group-${(0, import_node_crypto11.createHash)("sha256").update(toFile.map((c) => c.rawQuestion).sort().join("\n")).digest("hex").slice(0, 10)}` : void 0;
       for (const clarification of toFile) {
-        const id = `II-${scopeId}-gate-${(0, import_node_crypto10.createHash)("sha256").update(clarification.rawQuestion).digest("hex").slice(0, 10)}`;
+        const id = `II-${scopeId}-gate-${(0, import_node_crypto11.createHash)("sha256").update(clarification.rawQuestion).digest("hex").slice(0, 10)}`;
         try {
           const questionOptions = buildGateQuestionOptions(clarification.rawQuestion, clarification.category);
           await ctx.client.createInboxItem(input.projectSlug, {
@@ -60797,9 +60843,9 @@ async function handleConsensusBlocked(result, ctx, input, resolvedTaskId) {
       filedQuestionCount = toFile.length;
     } else if (planId) {
       const scopeId = planId;
-      const groupId = toFile.length > 1 ? `II-${scopeId}-gate-group-${(0, import_node_crypto10.createHash)("sha256").update(toFile.map((c) => c.rawQuestion).sort().join("\n")).digest("hex").slice(0, 10)}` : void 0;
+      const groupId = toFile.length > 1 ? `II-${scopeId}-gate-group-${(0, import_node_crypto11.createHash)("sha256").update(toFile.map((c) => c.rawQuestion).sort().join("\n")).digest("hex").slice(0, 10)}` : void 0;
       for (const clarification of toFile) {
-        const id = `II-${scopeId}-gate-${(0, import_node_crypto10.createHash)("sha256").update(clarification.rawQuestion).digest("hex").slice(0, 10)}`;
+        const id = `II-${scopeId}-gate-${(0, import_node_crypto11.createHash)("sha256").update(clarification.rawQuestion).digest("hex").slice(0, 10)}`;
         try {
           const questionOptions = buildGateQuestionOptions(clarification.rawQuestion, clarification.category);
           await ctx.client.createInboxItem(input.projectSlug, {
@@ -60823,7 +60869,7 @@ async function handleConsensusBlocked(result, ctx, input, resolvedTaskId) {
       taskId: page.taskId ?? null
     });
     const reviewHash = domainScopedReviewHash2(page.contentHash, domain2);
-    const baseBlockItemId = `II-${taskId}-gateblock-${(0, import_node_crypto10.createHash)("sha256").update(reviewHash).digest("hex").slice(0, 10)}`;
+    const baseBlockItemId = `II-${taskId}-gateblock-${(0, import_node_crypto11.createHash)("sha256").update(reviewHash).digest("hex").slice(0, 10)}`;
     const reviewAgainAvailable = !taskInboxItems.some(
       (item) => item.id === baseBlockItemId && item.status !== "pending" && item.answer === REVIEW_AGAIN_ANSWER
     );
@@ -61545,7 +61591,7 @@ function createReportEvidenceDescriptor() {
 var reportEvidenceDescriptor = createReportEvidenceDescriptor();
 
 // src/async-tools/enqueue.ts
-var import_node_crypto11 = __toESM(require("node:crypto"), 1);
+var import_node_crypto12 = __toESM(require("node:crypto"), 1);
 async function enqueueAsyncTool(client, descriptor2, input) {
   if (descriptor2.cachedResult) {
     const cached2 = await descriptor2.cachedResult(client, input);
@@ -61558,7 +61604,7 @@ async function enqueueAsyncTool(client, descriptor2, input) {
   if (active) {
     return { status: "already_running", jobId: active.id, message: "Already running; will notify in inbox." };
   }
-  const jobId = `AJ-${import_node_crypto11.default.randomUUID()}`;
+  const jobId = `AJ-${import_node_crypto12.default.randomUUID()}`;
   try {
     await client.createAsyncJob(input.projectSlug, {
       id: jobId,
@@ -63138,7 +63184,7 @@ function createMrrlinTools(options) {
       "PRODUCED_URL_RECORD_FAILED",
       "Unable to record produced URL.",
       async (c, { projectSlug, runId, url: url2, label }) => {
-        const id = `EA-pu-${(0, import_node_crypto12.randomBytes)(4).toString("hex")}`;
+        const id = `EA-pu-${(0, import_node_crypto13.randomBytes)(4).toString("hex")}`;
         const payload = label ? { url: url2, label } : { url: url2 };
         return await c.appendExecutionArtifact(projectSlug, runId, {
           id,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.4.15",
+  "version": "0.4.17",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"