[daily-report] 2026-07-02 pipeline summary #495

Summary

60 proposals tracked across 11 repos. 51 merged, 4 proposed (awaiting implementation), 5 rejected, 0 in-progress. Four proposals have been stuck in proposed state for 28–38 days (all over the 7-day threshold) and need attention. Today was an active human-driven day in mctl-gitops: 20+ commits landed, including Loki/Argo R2 migration, CNPG duplicate-key fix, ArgoCD CPU tuning, and the new validate-manifests.yml CI workflow. No bot commits in the last 24h. Action required: ArgoCD token in Vault is expired — service sync state is unavailable until rotated (Vault path: platform/mctl-api/argocd-token).

This is the first daily-report run — no previous baseline exists. All diffs are relative to the current snapshot.

Proposal Pipeline State

Pipeline Diff (vs yesterday)

First run — no previous baseline. Full current state recorded above.

• Still proposed (no PR): mctl-pairdesk/issue-52 (28d), mctl-pairdesk/issue-53 (28d), mctl-telegram/issue-213 (38d), mctl-telegram/issue-214 (38d)
• In-progress: none
• Merged (all time): 51
• Rejected (all time): 5

Recent Merged PRs (24h)

Bot Commits (24h)

No mctl-agents-authored commits in the last 26 hours. The mctl-gitops repo had 20+ commits today, all by @mashkovd (human).

Notable human commits to mctl-gitops today:

• feat(gitops): migrate Loki and Argo Workflows artifact storage to R2
• fix(gitops): stop ignoring managedFields diff on argo-workflows ExternalSecret
• chore(gitops): remove stale argo-workflows-logs bucket from MinIO
• fix(gitops): raise argocd controller CPU request, slow openclaw s3-sync interval
• fix(data): remove duplicate inherit key in CNPG managed roles
• ci: validate rendered manifests on PRs

Detected Problems

Stuck Proposals (>7 days in proposed state)

1. mctl-telegram/issue-213 — proposed 2026-05-25 (38 days). No PR opened yet.
   → Stand-alone issue: [stuck-proposal] mctl-telegram/issue-213 still proposed after 7d #491

2. mctl-telegram/issue-214 — proposed 2026-05-25 (38 days). No PR opened yet.
   → Stand-alone issue: [stuck-proposal] mctl-telegram/issue-214 still proposed after 7d #492

3. mctl-pairdesk/issue-52 — proposed 2026-06-04 (28 days). No PR opened yet.
   → Stand-alone issue: [stuck-proposal] mctl-pairdesk/issue-52 still proposed after 7d #493

4. mctl-pairdesk/issue-53 — proposed 2026-06-04 (28 days). No PR opened yet.
   → Stand-alone issue: [stuck-proposal] mctl-pairdesk/issue-53 still proposed after 7d #494

Stale Open PRs (>7 days without activity)

48 open PRs across the org have had no activity in >7 days. High-priority subset:

Security:

• mctl-portal#24: fix(security): require auth on custom-domains endpoints — 20 days
• mctl-portal#25: fix(security): derive OAuth state key from full key hash — 20 days
• mctl-agents#43: fix: run agent container as non-root user — 20 days

Feature/infra (>30 days):

• mctl-agents#15: feat(orchestrator): Tier 2 implementer agents — 54 days
• mctl-agents#16: feat(orchestrator): rotate mentor digests older than 8 weeks — 54 days
• mctl-agents#17: feat(mctl-docs): fallback to GitHub API when sibling clones fail — 54 days
• mctl-api#47: feat(mcp): mctl_create_preview — build from branch support — 53 days
• mctl-gitops#217: feat(argo): add incident responder CronWorkflow — 47 days
• mctl-agent#20: feat(skills): add statefulset-replicas-mismatch YAML skill — 47 days
• mctl-telegram#248: feat: add edit/delete/forward/search/react message tools — 33 days

Possibly superseded (review recommended):

• mctl-gitops#415: fix: remove ad-hoc vault workflows with plaintext secrets — 20 days (may be superseded by chore: remove stale ad hoc vault-fix Argo Workflows #490)
• mctl-gitops#416: ci: add yamllint and helm lint — 20 days (may be superseded by ci: validate rendered manifests on PRs #487)
• mctl-gitops#417: fix: require image.tag in base-service — 20 days

Cluster Health

api.mctl.ai MCP connector is attached. Partial data available.

Resource usage:

Labs CPU at ~80% of limit — monitor before adding new services.

ArgoCD sync state: UNAVAILABLE — token expired. Rotate at Vault path platform/mctl-api/argocd-token to restore per-service health visibility.

Deployed services (16): mctl-telegram 0.41.9, mctl-pairdesk 0.14.0, mctl-loyalty 0.12.0, mctl-telegram-preview main-0166fca, openclaw 2026.5.14-beta.1 (×3), mctl-web 7.1.1, mctl-docs 0.1.20, mctl-design 1df4a279, claude-remote 0.9.2, kuptsi-app 0.2.17, instruments-proxy 0.8.0, pelican-proxy 0.17.0, pfeifenpatenschaft-backend 0.7.0, trading-data 0.2.4.

Agent workflow runs (last 50): No mctl-agents-implement/investigate/shepherd runs in last 24h. Last agent activity: 2026-06-04 (28 days ago). Last deploy: 2026-06-30.

Errors During Run

• GitHub MCP scope mismatch: Session scoped to mctlhq/mctl-gitops only — all writes targeting mctlhq/mctl-agents denied. Issues filed in mctl-gitops as fallback. Fix: add mctlhq/mctl-agents to the GitHub MCP session scope.
• ArgoCD token expired: mctl_get_service_status cannot return ArgoCD detail — rotate token at platform/mctl-api/argocd-token.

TODO

1. Rotate ArgoCD token — Vault path platform/mctl-api/argocd-token. Restores ArgoCD sync state in MCP tools and unlocks per-service health checks.
2. Review mctl-gitops#415/416/417 — likely superseded by ci: validate rendered manifests on PRs #487/chore: remove stale ad hoc vault-fix Argo Workflows #490 merged today; close if so.
3. Kick stuck proposals — mctl-telegram/issue-213, issue-214 (38d), mctl-pairdesk/issue-52, issue-53 (28d) need implementer runs or explicit rejection.
4. Add mctlhq/mctl-agents to GitHub MCP scope — so daily-report issues land in the right repo.
5. Attach the api.mctl.ai MCP connector scope for: per-service restart counts (mctl_get_service_status ArgoCD detail), MinIO PVC % (mctl_get_resource_usage), Argo Workflow run status (mctl_get_workflow_status) — all blocked by the expired ArgoCD token above.