@agfpd/iapeer 0.2.53 → 0.2.54

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agfpd/iapeer",
-  "version": "0.2.53",
+  "version": "0.2.54",
   "description": "Foundation core for the iapeer multi-agent ecosystem: identity, registry, storage, codec.",
   "type": "module",
   "bin": {

package/src/launch/canary.test.ts

@@ -79,6 +79,22 @@ describe('canary script (pure)', () => {
     expect(s).toContain('/r/logs/iapeer/server-deaths/claude-bob') // forensics file
     expect(s).toContain('vm_stat') // memory evidence (OOM hypothesis)
     expect(s).toContain(`'/opt/homebrew/bin/tmux' -S '/tmp/x.sock'`) // abs tmux, quoted
+    expect(s).not.toContain('cmdlog-tail') // no cmdLogDir → no cmdlog capture line
+  })
+
+  test('with cmdLogDir → forensics tail the dead server cmdlog (client-COMMAND kill attribution)', () => {
+    const s = canaryScript({
+      identity: 'claude-bob',
+      sock: '/tmp/x.sock',
+      tmuxBin: '/opt/homebrew/bin/tmux',
+      exitLogFile: '/r/logs/iapeer/exits.log',
+      forensicsDir: '/r/logs/iapeer/server-deaths',
+      cmdLogDir: '/r/logs/iapeer/tmux-cmdlog/claude-bob',
+    })
+    expect(s).toContain('cmdlog-tail') // the kill-server/kill-session witness
+    // tails the dead server's own -v log by its captured pid, greps the command lines
+    expect(s).toContain(`'/r/logs/iapeer/tmux-cmdlog/claude-bob/tmux-server-'"$SPID"'.log'`)
+    expect(s).toContain(`grep -aE 'command:'`)
   })
 
   test('ensureServerCanary without exitLogDir → skipped (observability off)', () => {

package/src/launch/canary.ts

@@ -49,6 +49,7 @@ import { spawn, spawnSync } from 'child_process'
 import { mkdirSync } from 'fs'
 import { join } from 'path'
 import { resolveExecutable } from './launchd.ts'
+import { cmdLogDirFor } from './cmdlog.ts'
 
 /** The exit-cause log file inside `exitLogDir` (sibling to lifecycle.log).
  *  Lives here (not index.ts) so canary ⇆ launch never import-cycle; index.ts
@@ -74,6 +75,12 @@ export interface CanaryScriptOptions {
   tmuxBin: string
   exitLogFile: string
   forensicsDir: string
+  /** The identity's tmux-cmdlog dir (<exitLogDir>/tmux-cmdlog/<identity>). When set,
+   *  the death forensics tail the dead server's `tmux-server-<SPID>.log` — the ONLY
+   *  witness of a client-COMMAND kill (`kill-server`/`kill-session`), which leaves zero
+   *  signals (so signal forensics see nothing) and is otherwise wiped by the respawn's
+   *  prepareCmdLogDir before anyone reads it. Best-effort: absent log → grep no-ops. */
+  cmdLogDir?: string
 }
 
 /**
@@ -129,6 +136,17 @@ export function canaryScript(o: CanaryScriptOptions): string {
     `  echo '--- ps-top-rss'; ps axo pid,ppid,rss,etime,command | sort -rn -k3 | head -25`,
     `  echo '--- diagnosticreports-user'; ls -t "$HOME/Library/Logs/DiagnosticReports" 2>/dev/null | head`,
     `  echo '--- diagnosticreports-system'; ls -t /Library/Logs/DiagnosticReports 2>/dev/null | head`,
+    // The death-class discriminator signal-forensics structurally cannot see: a tmux
+    // server killed by a CLIENT COMMAND (`kill-server`/`kill-session`) leaves zero
+    // signals. Its only witness is the dead server's own -v cmdlog, which the respawn
+    // wipes seconds later — captured HERE (canary fires ~+2 s, respawn ~+7 s) so the
+    // killer's `client-<pid> command: …` survives into the forensics.
+    ...(o.cmdLogDir
+      ? [
+          `  echo '--- cmdlog-tail (last client commands; a kill-server/kill-session here IS the killer)'`,
+          `  tail -c 131072 '${o.cmdLogDir}/tmux-server-'"$SPID"'.log' 2>/dev/null | grep -aE 'command:' | tail -30`,
+        ]
+      : []),
     `} > "$f" 2>&1`,
     `printf 'ts=%s ev=server-exit identity=${o.identity} server_pid=%s wait_rc=%s cause=%s forensics=%s\\n' "$ts" "$SPID" "$rc" "$cause" "$f" >> '${o.exitLogFile}'`,
   ].join('\n')
@@ -172,6 +190,7 @@ export function ensureServerCanary(o: EnsureCanaryOptions): CanaryEnsureState {
       tmuxBin,
       exitLogFile: exitLogPath(o.exitLogDir),
       forensicsDir,
+      cmdLogDir: cmdLogDirFor(o.exitLogDir, o.identity),
     })
     const child = spawn('/bin/sh', ['-c', script], { detached: true, stdio: 'ignore', env })
     child.unref()