@agfpd/iapeer-memory 0.2.5 → 0.2.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agfpd/iapeer-memory",
-  "version": "0.2.5",
+  "version": "0.2.7",
   "description": "iapeer-memory — peer memory for the iapeer ecosystem: vault, memoryd (index/search/MCP-http), layer-5 context fragments, role doctrines. The package IS the system; the claude/codex plugins are thin session sockets (docs/10-distribution.md, ADR-009).",
   "license": "MIT",
   "type": "module",
@@ -27,7 +27,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@agfpd/iapeer-memory-core": "0.2.5"
+    "@agfpd/iapeer-memory-core": "0.2.7"
   },
   "devDependencies": {
     "@types/bun": "^1.2.0",

package/src/cli.ts

@@ -13,7 +13,7 @@
  * verify found problems, 2 usage error or not-yet-implemented stage.
  */
 
-import { isUnderProdAnchor, sandboxEnvArmed } from "@agfpd/iapeer-memory-core";
+import { sandboxBlocksProdRead } from "@agfpd/iapeer-memory-core";
 import { loadConfigFile } from "./config-env.js";
 import { liveEgress } from "./egress.js";
 import { memoryPaths } from "./paths.js";
@@ -92,7 +92,7 @@ export async function main(argv: string[]): Promise<number> {
   // process. A test must pass ITS OWN IAPEER_MEMORY_CONFIG_FILE.
   if (cmd && !["help", "--help", "-h", "version", "--version", "-V"].includes(cmd)) {
     const configFile = memoryPaths().configFile;
-    if (sandboxEnvArmed() && isUnderProdAnchor(configFile)) {
+    if (sandboxBlocksProdRead(configFile)) {
       console.error(
         `iapeer-memory: live config.env skipped under the test sandbox (${configFile}) — pass IAPEER_MEMORY_CONFIG_FILE`,
       );

package/src/commands/init.ts

@@ -14,8 +14,8 @@
  *
  * Step order: deps → vault → config → binary → templates → role peers +
  * doctrines + roles manifest → fleet map → watcher registration → direct
- * session surfaces sweep (ADR-009 v1.2) → legacy v1.1 plugin off (while the
- * old declaration is still readable) → slot declaration (v1.2 provision
+ * session surfaces sweep (ADR-009 v1.2) → legacy v1.1 manual hint (the
+ * plugin channel is removed, ADR-017) → slot declaration (v1.2 provision
  * command) → native-memory sweep (core verb, soft-skip on old cores) →
  * host-wide guide fragment. Ecosystem steps are skippable (--skip-ecosystem)
  * for sandboxed runs; the binary compile is skippable (--skip-binary) for
@@ -36,7 +36,7 @@ import { IAPEER_BIN, type Egress } from "../egress.js";
 import { memoryPaths } from "../paths.js";
 import { provisionVault, writeDefaultConfig } from "../provision.js";
 import { writeRolesManifest, type RoleEntry } from "../roles.js";
-import { applyMemoryPlugin, readSlot, writeSlot, SLOT_PROVIDER } from "../slot.js";
+import { readSlot, writeSlot, SLOT_PROVIDER } from "../slot.js";
 import { readFleetMap, writeFleetMap } from "../fleet.js";
 import { withProvisionLock } from "../surfaces/lock.js";
 import { sweepProvision } from "../surfaces/sweep.js";
@@ -470,27 +470,25 @@ export async function cmdInit(argv: string[], egress: Egress): Promise<number> {
       }
     }
 
-    // 8c. v1.1 → v1.2 migration: sweep the legacy session plugin off the
-    // fleet while the old declaration is STILL readable — and ONLY after
-    // the direct surfaces landed cleanly.
+    // 8c. v1.1 → v1.2 migration: the plugin channel is REMOVED (ADR-017) —
+    // the package no longer shells the core verb; a v1.1 host gets the
+    // manual recipe and the slot migrates ONLY after the direct surfaces
+    // landed cleanly (never strand a host with neither channel).
     let migrationBlocked = false;
     if (!flags.skipEcosystem && existingSlot?.plugin) {
       if (!surfacesOk) {
         migrationBlocked = true;
         step(
           "plugin-off",
-          "POSTPONED: direct surfaces did not land cleanly — legacy plugin and v1.1 slot kept (re-run init after fixing)",
+          "POSTPONED: direct surfaces did not land cleanly — v1.1 slot kept (re-run init after fixing)",
           false,
         );
       } else {
-        const off = applyMemoryPlugin(egress, { mode: "off", iapeerBin: flags.iapeerBin });
         step(
           "plugin-off",
-          off.suppressed
-            ? "skipped (test sandbox — core calls suppressed)"
-            : off.ok
-              ? "legacy v1.1 session plugin swept off the fleet (memory-plugin off --all)"
-              : `legacy plugin off failed (${off.detail.slice(0, 120)}) — manual: iapeer memory-plugin off --all (or per peer: claude plugin uninstall iapeer-memory@agfpd --scope project)`,
+          "legacy v1.1 session plugin is NOT auto-removed (channel removed, ADR-017) — manual, per claude peer: " +
+            "`claude plugin uninstall iapeer-memory@agfpd --scope project` from its cwd; codex (host-global): " +
+            "`codex plugin remove iapeer-memory@agfpd`. Until then it stamps in parallel (idempotent).",
         );
       }
     }

package/src/commands/uninstall.ts

@@ -21,7 +21,7 @@ import type { Egress } from "../egress.js";
 import { memoryPaths } from "../paths.js";
 import { removeBinary } from "../binary.js";
 import { readFleetMap } from "../fleet.js";
-import { applyMemoryPlugin, readSlot, removeSlot, SLOT_PROVIDER } from "../slot.js";
+import { readSlot, removeSlot, SLOT_PROVIDER } from "../slot.js";
 import { withProvisionLock } from "../surfaces/lock.js";
 import { sweepUnprovision } from "../surfaces/sweep.js";
 import { guardedUnlinkSync } from "@agfpd/iapeer-memory-core";
@@ -130,19 +130,14 @@ export function cmdUninstall(argv: string[], egress: Egress): number {
       }
     }
 
-    // Legacy v1.1 path: the slot still carries a plugin block — sweep the
-    // session plugin off via the core verb WHILE the declaration is alive
-    // (it derives the identity from it; agreed order, auto-removal).
+    // Legacy v1.1 path: the slot still carries a plugin block. The plugin
+    // channel is REMOVED (ADR-017) — no core verb is shelled; the manual
+    // recipe works without the slot.
     if (declared.plugin) {
-      const off = applyMemoryPlugin(egress, { mode: "off", iapeerBin });
       console.log(
-        `plugin    : ${
-          off.suppressed
-            ? "skipped (test sandbox — core calls suppressed)"
-            : off.ok
-              ? "legacy session plugin removed across the fleet (memory-plugin off --all; codex side is host-global)"
-              : `off not applied (${off.detail.slice(0, 160)}) — manual fallback (works without the slot): per claude peer \`claude plugin uninstall iapeer-memory@agfpd --scope project\` from its cwd; codex (host-global): \`codex plugin remove iapeer-memory@agfpd\``
-        }`,
+        "plugin    : legacy v1.1 session plugin is NOT auto-removed (channel removed, ADR-017) — manual: " +
+          "per claude peer `claude plugin uninstall iapeer-memory@agfpd --scope project` from its cwd; " +
+          "codex (host-global): `codex plugin remove iapeer-memory@agfpd`",
       );
     }
   }

package/src/commands/update.ts

@@ -16,10 +16,10 @@
  *   5. surfaces   — direct per-peer session surfaces sweep over the map
  *                   (ADR-009 v1.2: the «всё на местах у подключённых пиров»
  *                   duty — both runtimes, idempotent, repairs drift);
- *   6. plugin-off — v1.1→v1.2 migration: when the on-disk slot still
- *                   carries a plugin block, sweep the legacy plugin off the
- *                   fleet (while the old declaration is STILL readable by
- *                   the core verb) — only after surfaces landed cleanly;
+ *   6. plugin-off — v1.1→v1.2 migration: a slot still carrying a plugin
+ *                   block gets the MANUAL removal recipe (the plugin
+ *                   channel is removed, ADR-017) — the slot migrates only
+ *                   after surfaces landed cleanly;
  *   7. slot       — re-declare in the v1.2 form (provision command blocks,
  *                   new version — contract obligation);
  *   8. launcher + triggers + guide — regenerate;
@@ -44,7 +44,7 @@ import type { Egress } from "../egress.js";
 import { readFleetMap, writeFleetMap } from "../fleet.js";
 import { memoryPaths } from "../paths.js";
 import { readRolesManifest } from "../roles.js";
-import { applyMemoryPlugin, readSlot, writeSlot, SLOT_PROVIDER } from "../slot.js";
+import { readSlot, writeSlot, SLOT_PROVIDER } from "../slot.js";
 import { withProvisionLock } from "../surfaces/lock.js";
 import { sweepProvision } from "../surfaces/sweep.js";
 import { mcpPort } from "./provision-peer.js";
@@ -187,28 +187,25 @@ export function cmdUpdate(argv: string[], egress: Egress): number {
     }
   }
 
-  // 6. v1.1 → v1.2 migration (one-shot per host): the on-disk slot still
-  // carries a plugin block — sweep the legacy plugin off the fleet WHILE the
-  // old declaration is still readable (the core verb derives the identity
-  // from it), and ONLY after the direct surfaces landed cleanly.
+  // 6. v1.1 → v1.2 migration (one-shot per host): the plugin channel is
+  // REMOVED (ADR-017) — no core verb is shelled; a v1.1 host gets the
+  // manual recipe and the slot migrates ONLY after the direct surfaces
+  // landed cleanly (never strand a host with neither channel).
   let migrationBlocked = false;
   if (!slotForeign && existingSlot?.plugin) {
     if (!surfacesOk) {
       migrationBlocked = true;
       step(
         "plugin-off",
-        "POSTPONED: direct surfaces did not land cleanly — legacy plugin and v1.1 slot kept (fix and re-run update)",
+        "POSTPONED: direct surfaces did not land cleanly — v1.1 slot kept (fix and re-run update)",
         false,
       );
     } else {
-      const off = applyMemoryPlugin(egress, { mode: "off" });
       step(
         "plugin-off",
-        off.suppressed
-          ? "skipped (test sandbox — core calls suppressed)"
-          : off.ok
-            ? "legacy v1.1 session plugin swept off the fleet (memory-plugin off --all)"
-            : `legacy plugin off failed (${off.detail.slice(0, 120)}) — manual: iapeer memory-plugin off --all`,
+        "legacy v1.1 session plugin is NOT auto-removed (channel removed, ADR-017) — manual, per claude peer: " +
+          "`claude plugin uninstall iapeer-memory@agfpd --scope project` from its cwd; codex (host-global): " +
+          "`codex plugin remove iapeer-memory@agfpd`. Until then it stamps in parallel (idempotent).",
       );
     }
   }

package/src/fleet.ts

@@ -21,7 +21,7 @@
 import fs from "node:fs";
 import path from "node:path";
 import { IAPEER_BIN, type Egress } from "./egress.js";
-import { guardedWriteFileSync } from "@agfpd/iapeer-memory-core";
+import { guardedWriteFileSync, sandboxBlocksProdRead } from "@agfpd/iapeer-memory-core";
 
 export type FleetMapResult = {
   action: "written" | "failed";
@@ -48,6 +48,15 @@ export type FleetPeer = { personality: string; cwd: string; runtimes: string[] }
  *  (pre-v1.2 maps) read as `runtimes: []` — the sweep skips them until the
  *  next map re-write (init/update/verify --repair). */
 export function readFleetMap(fleetMapPath: string): FleetPeer[] | null {
+  // Read-as-egress (И4 parity): the prod fleet map NAMES live cwds — a
+  // sandboxed process must not learn them. Null = «map unreadable», every
+  // caller already reports that honestly instead of sweeping.
+  if (sandboxBlocksProdRead(fleetMapPath)) {
+    console.error(
+      `iapeer-memory: live fleet map skipped under the test sandbox (${fleetMapPath}) — set IAPEER_MEMORY_STATE_DIR/IAPEER_ROOT`,
+    );
+    return null;
+  }
   try {
     const raw = JSON.parse(fs.readFileSync(fleetMapPath, "utf-8")) as {
       peers?: Array<{ personality?: unknown; cwd?: unknown; runtimes?: unknown }>;

package/src/slot.ts

@@ -31,8 +31,11 @@
 
 import fs from "node:fs";
 import path from "node:path";
-import { IAPEER_BIN, type Egress } from "./egress.js";
-import { guardedWriteFileSync, guardedUnlinkSync } from "@agfpd/iapeer-memory-core";
+import {
+  guardedWriteFileSync,
+  guardedUnlinkSync,
+  sandboxBlocksProdRead,
+} from "@agfpd/iapeer-memory-core";
 
 export const SLOT_PROVIDER = "iapeer-memory";
 export const SLOT_PACKAGE = "@agfpd/iapeer-memory";
@@ -100,6 +103,10 @@ export type MemoryProviderSlot = {
 
 /** Never throws: missing / unreadable / malformed → null (empty slot). */
 export function readSlot(slotPath: string): MemoryProviderSlot | null {
+  // Read-as-egress (И4 parity): the PROD slot gates fleet-wide sweeps
+  // («slot is ours» is TRUE on the live host) — a sandboxed process must
+  // read it as absent and refuse/skip honestly.
+  if (sandboxBlocksProdRead(slotPath)) return null;
   try {
     const parsed = JSON.parse(fs.readFileSync(slotPath, "utf-8")) as MemoryProviderSlot;
     if (!parsed || typeof parsed.provider !== "string") return null;
@@ -165,54 +172,7 @@ export function removeSlot(slotPath: string): SlotRemoveResult {
   return "removed";
 }
 
-export type MemoryPluginApplyResult = {
-  ok: boolean;
-  detail: string;
-  /** True when the test-sandbox fuse blocked the call — callers report a
-   *  SKIP, not a failure (same contract as watcher.ts iapSend). */
-  suppressed?: boolean;
-};
-
-/**
- * Fleet-wide install/remove of the slot-declared session plugin via the core
- * verb `iapeer memory-plugin <on|off> --all` (iapeer ≥0.2.25; marketplace
- * ensure + stale-cache retry live INSIDE the verb). The verb derives the
- * plugin identity from the slot declaration — so `on` runs AFTER writeSlot
- * and `off` runs BEFORE removeSlot (agreed order, auto-removal: a dead
- * provider's plugin must not keep injecting).
- *
- * The hard fuse of incident 10.06 (`on --all` mutates the HOST fleet — no
- * sandbox env contains it) lives in the egress constructor now
- * (deny-by-default §4): a refusing handle blocks the spawn here.
- */
-export function applyMemoryPlugin(
-  egress: Egress,
-  opts: {
-    mode: "on" | "off";
-    iapeerBin?: string;
-  },
-): MemoryPluginApplyResult {
-  const bin = opts.iapeerBin ?? IAPEER_BIN;
-  const proc = egress.spawnSync([bin, "memory-plugin", opts.mode, "--all"], {
-    explicitBin: opts.iapeerBin !== undefined,
-  });
-  if (proc.refused) {
-    return {
-      ok: false,
-      suppressed: true,
-      detail: "memory-plugin call suppressed (test sandbox)",
-    };
-  }
-  if (proc.spawnError) {
-    return { ok: false, detail: `${bin} unavailable: ${proc.spawnError}` };
-  }
-  if (proc.exitCode !== 0) {
-    return {
-      ok: false,
-      detail:
-        (proc.stderr.trim() || proc.stdout.trim() || "").slice(0, 200) ||
-        `iapeer memory-plugin exited ${proc.exitCode}`,
-    };
-  }
-  return { ok: true, detail: proc.stdout.trim() };
-}
+// applyMemoryPlugin (the core verb `iapeer memory-plugin <on|off> --all`)
+// was REMOVED with the plugin channel (ADR-017): v1.1 hosts get a manual
+// recipe in init/update/uninstall instead of an auto-sweep. The `plugin`
+// field on the slot type stays — it is the v1.1 READ marker.

package/src/sync-versions.ts

@@ -1,13 +1,13 @@
 /**
  * Manifest version sync (docs/10 §Версионная синхронизация): propagate the
  * facade `package/package.json` version into every other manifest of the
- * monorepo — `core/package.json` + `adapters/{claude,codex}` plugin
- * manifests. Wired into the npm `version` lifecycle, runnable standalone:
+ * monorepo — `core/package.json` (the adapter plugin manifests left with
+ * the plugin channel, ADR-017). Wired into the npm `version` lifecycle,
+ * runnable standalone:
  *
  *     bun src/sync-versions.ts
  *
- * Missing manifests are reported and skipped (the adapters land in P2/P5 —
- * the script must not fail before they exist). The reference
+ * Missing manifests are reported and skipped. The reference
  * sync-plugin-version pattern, generalised to N manifests.
  */
 
@@ -18,11 +18,7 @@ import { guardedWriteFileSync } from "@agfpd/iapeer-memory-core";
 export type SyncOutcome = { file: string; action: "updated" | "identical" | "missing" };
 
 /** Relative (to the monorepo root) manifests that must carry one version. */
-export const SYNC_TARGETS = [
-  "core/package.json",
-  "adapters/claude/.claude-plugin/plugin.json",
-  "adapters/codex/.codex-plugin/plugin.json",
-] as const;
+export const SYNC_TARGETS = ["core/package.json"] as const;
 
 export function syncVersions(opts: {
   rootDir: string;

package/src/templates/skills.ts

@@ -1,7 +1,8 @@
 /**
  * Embedded skill files — the DIRECT-surface form of the four session skills
  * (ADR-009 v1.2: direct per-peer surfaces instead of the plugin socket).
- * Bodies are the boris-accepted plugin skills (adapters/claude/skills, spot-
+ * Bodies are the boris-accepted plugin-era skills (historical provenance:
+ * adapters/claude/skills, removed with the plugin channel — ADR-017; spot-
  * checked against the live CLI 10.06) with exactly two deltas:
  *
  *   1. names are namespaced `iapeer-memory-*` (boris design input: direct