@agfpd/iapeer 0.2.69 → 0.2.70

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agfpd/iapeer",
-  "version": "0.2.69",
+  "version": "0.2.70",
   "description": "Foundation core for the iapeer multi-agent ecosystem: identity, registry, storage, codec.",
   "type": "module",
   "bin": {

package/src/launch/invocation.test.ts

@@ -107,6 +107,46 @@ describe('buildLaunchInvocation — differential vs the verbatim pre-extraction
   })
 })
 
+// Silent-loss guard — the claude-hosting canary caught a warm-deliver false-fail: a launch INITIATED
+// from inside a claude session leaked CLAUDE_CODE_SESSION_ID + CLAUDE_CODE_CHILD_SESSION into the
+// child, which then wrote no own transcript → newestActivityMtime null → landed-confirm blind while
+// the message landed. buildLaunchInvocation must strip the claude-code-internal namespace so a
+// launched claude is always a FRESH top-level session, regardless of initiator env.
+describe('buildLaunchInvocation — strips the claude-code-internal session namespace', () => {
+  const DIRTY: LaunchAdapterConfig & { env: NodeJS.ProcessEnv } = {
+    claudeBin: '/bin/claude',
+    codexBin: '/bin/codex',
+    env: {
+      PATH: '/test/path',
+      BASE_VAR: 'base',
+      CLAUDE_CODE_SESSION_ID: 'spawner-session-uuid', // the corruptor (pins the child to the spawner's session)
+      CLAUDE_CODE_CHILD_SESSION: '1', // the corruptor (marks a child sub-session → suppresses own transcript)
+      CLAUDECODE: '1',
+      CLAUDE_CODE_ENTRYPOINT: 'cli',
+      CLAUDE_CODE_EXECPATH: '/v/2.1.177',
+      CLAUDE_EFFORT: 'xhigh', // NOT in the claude-code namespace → must survive (scoped strip, not a wipe)
+    },
+  }
+  test('claude launch: the whole CLAUDE_CODE_* namespace + CLAUDECODE is removed', () => {
+    const { env } = buildLaunchInvocation(spec({ runtime: 'claude', identity: 'claude-p' }), claudeAdapter, DIRTY)
+    expect(env.CLAUDE_CODE_SESSION_ID).toBeUndefined()
+    expect(env.CLAUDE_CODE_CHILD_SESSION).toBeUndefined()
+    expect(env.CLAUDECODE).toBeUndefined()
+    expect(env.CLAUDE_CODE_ENTRYPOINT).toBeUndefined()
+    expect(env.CLAUDE_CODE_EXECPATH).toBeUndefined()
+    // scoped: non-namespace vars (incl. a CLAUDE_-prefixed-but-not-CLAUDE_CODE_ one) survive
+    expect(env.BASE_VAR).toBe('base')
+    expect(env.CLAUDE_EFFORT).toBe('xhigh')
+    expect(env.PEER_IDENTITY).toBe('claude-p')
+  })
+  test('codex launch: same strip applies (harmless — codex ignores CLAUDE_*) and the bearer stub stays', () => {
+    const { env } = buildLaunchInvocation(spec({ runtime: 'codex', identity: 'codex-p' }), codexAdapter, DIRTY)
+    expect(env.CLAUDE_CODE_SESSION_ID).toBeUndefined()
+    expect(env.CLAUDECODE).toBeUndefined()
+    expect(env[CODEX_BEARER_ENV_VAR]).toBe(CODEX_DUMMY_BEARER)
+  })
+})
+
 // Independent contract anchors — expectations come from the CONTRACT, not from the function output.
 describe('buildLaunchInvocation — identity ABI + system-prompt swap (contract values)', () => {
   test('codex carries the non-secret IAPEER_BEARER stub; claude does NOT (identity in .mcp.json)', () => {

package/src/launch/invocation.ts

@@ -52,5 +52,20 @@ export function buildLaunchInvocation(
     PEER_IDENTITY: spec.identity,
     PATH: env.PATH ?? `${homedir()}/.bun/bin:${homedir()}/.local/bin:/opt/homebrew/bin:/usr/bin:/bin`,
   }
+  // Strip the claude-code-internal session namespace from the inherited env. When a launch is
+  // INITIATED from inside a running claude session (an operator CLI, or a claude peer shelling out),
+  // process.env carries that session's CLAUDE_CODE_SESSION_ID + CLAUDE_CODE_CHILD_SESSION. Inherited
+  // by a newly-launched claude, they make it believe it is a CHILD sub-session of the initiator → it
+  // writes NO independent ~/.claude/projects transcript → newestActivityMtime(cwd) is permanently
+  // null → the warm-deliver landed-confirm false-fails WHILE the message actually lands (a silent-
+  // loss, the class the contract forbids). Stripping the whole namespace makes a launched claude
+  // always start as a FRESH top-level session (it re-establishes its own vars), independent of who
+  // initiated the launch — the env-composition analogue of the supervisor's TMUX strip. Caught live
+  // by the claude-hosting canary. Harmless for codex (no CLAUDE_* usage). NOTE: a launch driven by
+  // the always-on daemon already has a clean env (no claude session) — this hardens the CLI / peer-
+  // initiated paths and removes the silent-loss class regardless of initiator.
+  for (const k of Object.keys(childEnv)) {
+    if (k.startsWith('CLAUDE_CODE_') || k === 'CLAUDECODE') delete childEnv[k]
+  }
   return { argv, env: childEnv }
 }