@thehammer/danx-dashboard-mcp 0.1.197 → 0.1.199

package/dist/bridge.js

@@ -73,6 +73,7 @@ import { oneLine } from "./one-line.js";
 import { credentialFingerprint, describeCredentialSource, readCredential, } from "./credential.js";
 import { readSessionConnection, sessionConnectionPath } from "./session-connection.js";
 import { capResumeIds, DELIVERED_ID_MEMORY, HEALTHY_CONNECTION_MS, READ_IDLE_TIMEOUT_MS, runListener, } from "./listen.js";
+import { isClaimState } from "@thehammer/danx-session-telemetry";
 import { OperatorSessionStats, transcriptPathFromEnv, } from "./session-stats.js";
 /**
  * DX-2730 D4 — WHICH EVENTS WAKE THE SESSION, NOW THAT EVERY ONE OF THEM CAN.
@@ -600,7 +601,13 @@ async function sendHeartbeat(options, deps, connection, stats) {
     // rather than treat them as the answer to its write.
     const applied = ok && isRecord(outcome.body) && outcome.body.statsError === undefined;
     const statsBody = applied && isRecord(outcome.body) && isRecord(outcome.body.stats) ? outcome.body.stats : null;
-    const answered = statsBody !== null && isRecord(statsBody.sourceCursors) && isRecord(statsBody.totals)
+    // DX-3962: an answer from a server that predates attribution stores cursors with no `claims`. Treated exactly like
+    // an answer with no stats (the older-server path): the collector never starts, the heartbeat still lands, and
+    // nothing is recorded until the server is deployed. Handing it on would crash the collector at attach.
+    const answered = statsBody !== null &&
+        isRecord(statsBody.sourceCursors) &&
+        isRecord(statsBody.totals) &&
+        Object.values(statsBody.sourceCursors).every((cursor) => isRecord(cursor) && isClaimState(cursor.claims))
         ? statsBody
         : null;
     return { landed: true, status: outcome.status, stats: answered };
@@ -691,6 +698,10 @@ export async function runBridge(options, deps) {
             // PROCESS reconnecting, never an external watchdog and never a second
             // process racing the first.
             forceReconnect?.();
+        }).catch((err) => {
+            // DX-3962: a stats failure must never take the bridge down. `heartbeatTick` is fired without being awaited, so
+            // a throw here would be an unhandled rejection that kills the process and with it the session's plan events.
+            process.stderr.write(`operator session stats: heartbeat tick failed: ${err instanceof Error ? err.message : String(err)}\n`);
         });
     };
     const heartbeat = deps.scheduleInterval(heartbeatTick, HEARTBEAT_INTERVAL_MS);

package/dist/session-stats.js

@@ -59,10 +59,17 @@ export function transcriptPathFromEnv(env) {
 const realWatcher = (options) => new SessionLogWatcher(options);
 /** The collector's dispatch-id argument; the heartbeat is addressed by session, not dispatch. */
 const OPERATOR_DISPATCH_REF = "operator-session";
+/**
+ * DX-3962 - the bridge's collector. `"operator-bridge"` is the ONE mode that credits a sub-agent's replies to the card
+ * it claimed (from its own transcript's pickup); a worker builds its collector with attribution off.
+ */
+function newCollector() {
+    return new DispatchUsage("operator-bridge");
+}
 export class OperatorSessionStats {
     transcriptPath;
     makeWatcher;
-    usage = new DispatchUsage();
+    usage = newCollector();
     watcher = null;
     stopped = false;
     constructor(transcriptPath, makeWatcher = realWatcher) {
@@ -153,7 +160,7 @@ export class OperatorSessionStats {
                 return;
             watcher.stop();
             this.watcher = null;
-            this.usage = new DispatchUsage();
+            this.usage = newCollector();
         })
             .catch((err) => {
             process.stderr.write(`operator session stats: transcript watcher failed: ${err.message}\n`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thehammer/danx-dashboard-mcp",
-  "version": "0.1.197",
+  "version": "0.1.199",
   "description": "Stdio MCP server fronting danxbot's dashboard API for agents (operator sessions and dispatched workers alike): the generic danxbot_api/danxbot_api_list/danxbot_api_spec tools reach any route the caller's credential may call, plus dedicated agent-specific tools (plan_connect, danxbot_complete, and other per-dispatch lifecycle callbacks) (DX-3465, PLN-11 R-25).",
   "license": "MIT",
   "type": "module",
@@ -31,7 +31,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.29.0",
-    "@thehammer/danx-session-telemetry": "0.1.19",
+    "@thehammer/danx-session-telemetry": "0.1.22",
     "zod": "^3.25.76"
   },
   "devDependencies": {