@agfpd/iapeer 0.2.40 → 0.2.41

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agfpd/iapeer",
-  "version": "0.2.40",
+  "version": "0.2.41",
   "description": "Foundation core for the iapeer multi-agent ecosystem: identity, registry, storage, codec.",
   "type": "module",
   "bin": {

package/src/init/index.ts

@@ -172,6 +172,41 @@ export function writeCodexMcpConfig(daemonUrl: string, options: StorageOptions =
   return { path, added: true }
 }
 
+/**
+ * Idempotently ensure codex's startup update-check DIALOG is disabled host-wide:
+ * `check_for_update_on_startup = false` as a TOP-LEVEL key in config.toml.
+ *
+ * Why (incident 11.06, codex-linus): the interactive "✨ Update available! …
+ * Press enter to continue" dialog is a BOOT GATE — a daemon-woken codex session
+ * sits on it until a human attaches. The wake reported never-became-ready after
+ * 4+ minutes and a notifier alert of the EMERGENCY contour (mining farm) was
+ * lost; the session came alive only from a manual attach. Warm-on-demand peers
+ * must reach ready hands-free — codex updates stay operator-driven (`codex
+ * update` / brew), never a boot-time question to a headless session.
+ *
+ * Mechanics: the key is a documented top-level config.toml option (present in
+ * the binary's own config schema; suppression PROVEN LIVE 11.06 on codex 0.138
+ * with the 0.139 update pending — control boot showed the dialog, the keyed
+ * boot went straight past it). A TOML top-level key must precede the first
+ * table header, so the key is PREPENDED — appending would land it inside the
+ * last [section]. An EXISTING `check_for_update_on_startup` of either value is
+ * respected (never override an explicit operator choice).
+ */
+export function ensureCodexUpdateCheckDisabled(
+  options: StorageOptions = {},
+): { path: string; changed: boolean } {
+  const path = codexConfigPath(options)
+  let existing = ''
+  try {
+    existing = readFileSync(path, 'utf8')
+  } catch {
+    /* no config yet → create it */
+  }
+  if (/^\s*check_for_update_on_startup\s*=/m.test(existing)) return { path, changed: false }
+  writeFileAtomic(path, `check_for_update_on_startup = false\n${existing}`, 0o644)
+  return { path, changed: true }
+}
+
 // ─────────────────────────────────────────────────────────────────────────────
 // Local doctrine template (<cwd>/.iapeer/IAPEER.md — personality/role; human fills)
 // ─────────────────────────────────────────────────────────────────────────────
@@ -304,6 +339,9 @@ export async function initPeer(opts: InitPeerOptions): Promise<InitPeerResult> {
   let codexMcpConfigPath: string | undefined
   if (provisioned.runtime === 'codex' || hasCodexMarker(provisioned.cwd)) {
     codexMcpConfigPath = writeCodexMcpConfig(daemonUrl, { env }).path
+    // Boot-gate hygiene (incident 11.06): a codex peer must never sit on the
+    // interactive update dialog at wake — disable the startup check host-wide.
+    ensureCodexUpdateCheckDisabled({ env })
   }
 
   const doctrine = ensureDoctrineTemplate(provisioned.cwd)

package/src/init/init.test.ts

@@ -9,6 +9,7 @@ import {
   CODEX_BEARER_ENV_VAR,
   IAPEER_MCP_SERVER_NAME,
   codexConfigPath,
+  ensureCodexUpdateCheckDisabled,
   ensureDoctrineTemplate,
   initPeer,
   resolveDaemonMcpUrl,
@@ -169,3 +170,44 @@ describe('initPeer orchestration', () => {
     expect(readFileSync(join(cwd, '.iapeer', 'IAPEER.md'), 'utf8')).toBe('custom doctrine')
   })
 })
+
+describe('ensureCodexUpdateCheckDisabled (boot-gate hygiene — incident 11.06 codex-linus)', () => {
+  test('PREPENDS the top-level key BEFORE the first [section] (TOML top-level scope)', () => {
+    const codexHome = mkdtempSync(join(tmpdir(), 'iapeer-codexhome3-'))
+    try {
+      const env: NodeJS.ProcessEnv = { ...process.env, CODEX_HOME: codexHome }
+      writeFileSync(codexConfigPath({ env }), 'model = "gpt-5.5"\n\n[projects."/x"]\ntrust_level = "trusted"\n')
+      const { changed } = ensureCodexUpdateCheckDisabled({ env })
+      expect(changed).toBe(true)
+      const toml = readFileSync(codexConfigPath({ env }), 'utf8')
+      expect(toml.startsWith('check_for_update_on_startup = false\n')).toBe(true)
+      expect(toml).toContain('[projects."/x"]') // existing config preserved
+      // idempotent: second run is a no-op
+      expect(ensureCodexUpdateCheckDisabled({ env }).changed).toBe(false)
+      expect((toml.match(/check_for_update_on_startup/g) ?? []).length).toBe(1)
+    } finally {
+      rmSync(codexHome, { recursive: true, force: true })
+    }
+  })
+  test('respects an EXPLICIT existing value (never overrides the operator)', () => {
+    const codexHome = mkdtempSync(join(tmpdir(), 'iapeer-codexhome4-'))
+    try {
+      const env: NodeJS.ProcessEnv = { ...process.env, CODEX_HOME: codexHome }
+      writeFileSync(codexConfigPath({ env }), 'check_for_update_on_startup = true\n')
+      expect(ensureCodexUpdateCheckDisabled({ env }).changed).toBe(false)
+      expect(readFileSync(codexConfigPath({ env }), 'utf8')).toContain('check_for_update_on_startup = true')
+    } finally {
+      rmSync(codexHome, { recursive: true, force: true })
+    }
+  })
+  test('absent config → created with just the key', () => {
+    const codexHome = mkdtempSync(join(tmpdir(), 'iapeer-codexhome5-'))
+    try {
+      const env: NodeJS.ProcessEnv = { ...process.env, CODEX_HOME: codexHome }
+      expect(ensureCodexUpdateCheckDisabled({ env }).changed).toBe(true)
+      expect(readFileSync(codexConfigPath({ env }), 'utf8')).toBe('check_for_update_on_startup = false\n')
+    } finally {
+      rmSync(codexHome, { recursive: true, force: true })
+    }
+  })
+})