@mrrlin-dev/mcp 0.4.50 → 0.4.52

package/dist/bin.cjs

@@ -21963,6 +21963,70 @@ var CodexJsonRpcClient = class {
 
 // ../../packages/agent-client/dist/providers/codex/server-manager.js
 var import_node_child_process3 = require("node:child_process");
+
+// ../../packages/agent-client/dist/providers/codex/stderr-diagnostics.js
+var AUTH_DIAGNOSTIC = [
+  /could not be refreshed/i,
+  /refresh token/i,
+  /\brefreshing token\b/i,
+  /reloading auth/i,
+  /guarded reload/i,
+  /refresh lock/i,
+  /auth (?:lock|storage) is (?:poisoned|unavailable)/i,
+  /no more recovery steps/i,
+  /oauth token exchange/i,
+  /invalid_grant/i,
+  /\bnot logged in\b/i,
+  /\b401\b(?!\d)/
+];
+var MAX_LINE_CHARS = 500;
+var MAX_BUFFERED_CHARS = MAX_LINE_CHARS * 4;
+var SECRET_SHAPES = [
+  // A JWT: three base64url segments. codex's id_token and access_token are both this shape.
+  [/\b[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g, "<jwt>"],
+  // Any long opaque run — codex's refresh_token is ~211 chars of this. 40 is comfortably above the
+  // longest ordinary word, an ISO timestamp, or a UUID (36, and a UUID is not a secret).
+  [/\b[A-Za-z0-9_-]{40,}\b/g, "<redacted>"]
+];
+function scrubSecrets(line) {
+  let out = line;
+  for (const [pattern, replacement] of SECRET_SHAPES)
+    out = out.replace(pattern, replacement);
+  return out;
+}
+var MAX_DIAGNOSTIC_LINES = 200;
+function isAuthDiagnostic(line) {
+  const flat = line.trim();
+  if (!flat)
+    return false;
+  return AUTH_DIAGNOSTIC.some((pattern) => pattern.test(flat));
+}
+function createStderrDiagnosticFilter(emit, maxLines = MAX_DIAGNOSTIC_LINES) {
+  let buffered = "";
+  let emitted = 0;
+  return (chunk) => {
+    buffered += chunk.toString();
+    const lines2 = buffered.split(/\r?\n/);
+    buffered = lines2.pop() ?? "";
+    if (buffered.length > MAX_BUFFERED_CHARS)
+      buffered = buffered.slice(0, MAX_LINE_CHARS);
+    for (const line of lines2) {
+      if (emitted >= maxLines)
+        return;
+      if (!isAuthDiagnostic(line))
+        continue;
+      emitted += 1;
+      const cleaned = scrubSecrets(line.trim()).slice(0, MAX_LINE_CHARS);
+      if (emitted === maxLines) {
+        emit(`${cleaned} [codex auth diagnostics capped at ${maxLines} lines]`);
+        return;
+      }
+      emit(cleaned);
+    }
+  };
+}
+
+// ../../packages/agent-client/dist/providers/codex/server-manager.js
 var CodexServerManager = class {
   client = null;
   process = null;
@@ -22021,8 +22085,12 @@ var CodexServerManager = class {
       throw new Error("Failed to spawn codex app-server: stdio not available");
     }
     const rpcClient = new CodexJsonRpcClient(child.stdin, child.stdout);
-    child.stderr?.on("data", () => {
+    const emitDiagnostic = config2?.onStderrDiagnostic ?? ((line) => {
+      process.stderr.write(`[codex-stderr] ${line}
+`);
     });
+    const consumeStderr = createStderrDiagnosticFilter(emitDiagnostic);
+    child.stderr?.on("data", consumeStderr);
     child.on("exit", () => {
       rpcClient.close();
       this.process = null;
@@ -42369,7 +42437,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.50";
+var PKG_VERSION = "0.4.52";
 
 // src/api-base-url-migrate.ts
 var import_node_fs4 = __toESM(require("node:fs"), 1);
@@ -45096,6 +45164,12 @@ function resolveInstallationId(stateDir) {
 // src/telemetry/daily-uploader.ts
 var ROWS_FILE_RE = /^rows-(.+)-(\d{4}-\d{2}-\d{2})\.jsonl$/;
 var GATE_FILE_RE = /^gate-(.+)-(\d{4}-\d{2}-\d{2})\.jsonl$/;
+var MAX_CAUSE_CHARS = 512;
+function truncateCause(err) {
+  const message = err instanceof Error ? err.message : String(err);
+  if (message.length <= MAX_CAUSE_CHARS) return message;
+  return `${message.slice(0, MAX_CAUSE_CHARS - 3)}...`;
+}
 async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
   const telemetryDir = (0, import_node_path16.join)(stateDir, "telemetry");
   let files;
@@ -45153,6 +45227,7 @@ async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
       continue;
     }
     let success2 = false;
+    let lastError = null;
     try {
       let raw = "";
       if (cur.rowsPath !== null) {
@@ -45208,7 +45283,8 @@ async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
       }
       await client.postTelemetry(targetProject, gateResult.artifact);
       success2 = true;
-    } catch {
+    } catch (err) {
+      lastError = truncateCause(err);
       success2 = false;
     }
     if (success2) {
@@ -45244,7 +45320,8 @@ async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
       const nextAttemptAt = now + delayMs2;
       const newFailureState = {
         failureCount: newFailureCount,
-        nextAttemptAt
+        nextAttemptAt,
+        lastError
       };
       const tmpFailurePath = `${failurePath}.tmp-${process.pid}-${Math.random().toString(36).slice(2)}`;
       try {
@@ -45254,7 +45331,9 @@ async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
         console.error(`uploadPendingDays: failed to write failure state for ${cur.projectSlug}/${cur.day}`, writeErr);
       }
       if (!failureState) {
-        console.error(`uploadPendingDays: partition ${cur.projectSlug}/${cur.day} entering backoff after first failure`);
+        console.error(
+          `uploadPendingDays: partition ${cur.projectSlug}/${cur.day} entering backoff after first failure: ${lastError ?? "cause unavailable"}`
+        );
       }
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.4.50",
+  "version": "0.4.52",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"
@@ -21,9 +21,9 @@
     "@types/ws": "^8.18.1",
     "esbuild": "^0.24.0",
     "tsx": "^4.22.3",
+    "@mrrlin/director-e2e": "0.0.0",
     "@mrrlin/agent-client": "0.0.0",
     "@mrrlin/client": "0.0.0",
-    "@mrrlin/director-e2e": "0.0.0",
     "@mrrlin/schemas": "0.0.0",
     "@mrrlin/tsconfig": "0.0.0",
     "@mrrlin/wiki": "0.0.0"