@agfpd/iapeer 0.2.76 → 0.2.77

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agfpd/iapeer",
-  "version": "0.2.76",
+  "version": "0.2.77",
   "description": "Foundation core for the iapeer multi-agent ecosystem: identity, registry, storage, codec.",
   "type": "module",
   "bin": {

package/src/init/index.ts

@@ -75,8 +75,15 @@ interface McpHttpServer {
  * Idempotently wire the foundation HTTP-MCP server into the peer's project-scope
  * `<cwd>/.mcp.json` (claude-specific). MERGE, not clobber: existing mcpServers are
  * preserved; only the `iapeer` entry is (re)written. The X-IAPeer-Identity header
- * carries `claude-<personality>` so the daemon resolves the caller per request. The
- * caller is authenticated by that header (the same proof live-verified at cold-start).
+ * carries `${PEER_IDENTITY:-claude-<personality>}`: claude expands it from the session
+ * env PEER_IDENTITY (set by the launch — invocation.ts), so the caller identity follows
+ * the SESSION, not the cwd file. This closes a cross-identity bug — a peer that `cd`s into
+ * ANOTHER peer's project dir + reloads used to pick up THAT dir's `.mcp.json` identity
+ * literal and assume its identity (the daemon trusts the header). With env-expansion the
+ * value resolves from the reader's own session env regardless of which `.mcp.json` is read.
+ * The `:-claude-<personality>` fallback keeps a manually-launched session (no PEER_IDENTITY
+ * env) from failing config parse — it resolves to this peer's own literal, correct in its
+ * OWN dir. The daemon resolves the caller per request from this header.
  * Returns the written path. Re-running init is a no-op-equivalent (same bytes).
  */
 export function writeClaudeMcpConfig(cwd: string, personality: string, daemonUrl: string): string {
@@ -100,7 +107,7 @@ export function writeClaudeMcpConfig(cwd: string, personality: string, daemonUrl
   const server: McpHttpServer = {
     type: 'http',
     url: daemonUrl,
-    headers: { 'X-IAPeer-Identity': `claude-${personality}` },
+    headers: { 'X-IAPeer-Identity': `\${PEER_IDENTITY:-claude-${personality}}` },
   }
   doc.mcpServers = { ...(doc.mcpServers ?? {}), [IAPEER_MCP_SERVER_NAME]: server }
   writeFileAtomic(path, `${JSON.stringify(doc, null, 2)}\n`, 0o644)

package/src/init/init.test.ts

@@ -58,7 +58,9 @@ describe('writeClaudeMcpConfig', () => {
     expect(doc.mcpServers[IAPEER_MCP_SERVER_NAME]).toEqual({
       type: 'http',
       url: 'http://127.0.0.1:8765/mcp',
-      headers: { 'X-IAPeer-Identity': 'claude-boris' },
+      // env-expanded by claude from the session PEER_IDENTITY; literal fallback for
+      // a manual (no-env) session — identity follows the SESSION, not the cwd file.
+      headers: { 'X-IAPeer-Identity': '${PEER_IDENTITY:-claude-boris}' },
     })
   })
   test('MERGES — preserves other mcpServers, only (re)writes iapeer', () => {
@@ -66,7 +68,7 @@ describe('writeClaudeMcpConfig', () => {
     writeClaudeMcpConfig(cwd, 'boris', 'http://127.0.0.1:8765/mcp')
     const doc = JSON.parse(readFileSync(join(cwd, '.mcp.json'), 'utf8'))
     expect(doc.mcpServers.other).toEqual({ type: 'http', url: 'https://x/mcp' })
-    expect(doc.mcpServers.iapeer.headers['X-IAPeer-Identity']).toBe('claude-boris')
+    expect(doc.mcpServers.iapeer.headers['X-IAPeer-Identity']).toBe('${PEER_IDENTITY:-claude-boris}')
   })
   test('idempotent — re-running yields the same bytes', () => {
     const p = writeClaudeMcpConfig(cwd, 'boris', 'http://127.0.0.1:8765/mcp')
@@ -154,7 +156,7 @@ describe('initPeer orchestration', () => {
     // .mcp.json wired to the daemon with the per-peer identity header
     expect(r.mcpConfigPaths.length).toBe(1)
     const mcp = JSON.parse(readFileSync(join(cwd, '.mcp.json'), 'utf8'))
-    expect(mcp.mcpServers.iapeer.headers['X-IAPeer-Identity']).toBe('claude-mypeer')
+    expect(mcp.mcpServers.iapeer.headers['X-IAPeer-Identity']).toBe('${PEER_IDENTITY:-claude-mypeer}')
     expect(mcp.mcpServers.iapeer.url).toBe('http://127.0.0.1:8765/mcp')
     // doctrine template created
     expect(r.doctrineCreated).toBe(true)