@twinsearth/w2m-dsh-plugin 0.10.2 → 0.10.3

package/CHANGELOG.md

@@ -4,6 +4,33 @@ All notable changes to this project are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
 adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.10.3] — 2026-10-15
+
+**Fix: the macOS health check walked a user's home directory, and timed out instead of reporting.**
+
+Found on a real machine, not by reading the code.
+
+`sample()` on macOS was scanning `/Users` for files that grow. On a developer machine that is hundreds of
+thousands of files, and the symptom was not "slow" but **total failure**: the health suite exceeded the
+fleet's own ~50-second lease ceiling and the task expired with `exit_code: null` and no result at all.
+
+A monitoring tool that times out because it is too expensive to monitor is worse than no monitoring,
+because **the timeout looks like a machine problem**. The contrast that identified it, measured on the same
+host minutes apart:
+
+| Command | Time | Result |
+|---|---|---|
+| `node -e "process.exit(1)"` | 8 s | `exit_code: 1` — the machinery was fine |
+| `health.test.mjs` (before) | > 50 s | expired, no result |
+| the same suite (authoring host) | 280 ms | pass |
+
+`/Users` is replaced by `/Library/Logs`, which is where an unbounded system writer actually writes. The rule
+this file already stated — that a health check must not be a load source — was written in the module header
+while the path list violated it, which is the useful part of the lesson: the principle was written down and
+still not applied to the one line that needed it.
+
+Sampling now costs 53 ms. 20 tests, 0 failures.
+
 ## [0.10.2] — 2026-10-15
 
 **Tiered storage — temporary, compressed, permanent, and the two kinds of knowledge that persist forever.**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "0.10.2",
+  "version": "0.10.3",
   "description": "DSH: Windows2MacOS — drive the same project on online Windows and macOS machines from one DeepSeek account, across networks and regions. P2P hole punching is the default path (relay + shared server as rendezvous, ledger and fallback), with a bundled STUN responder, Tailscale/public-VPS/tunnel shapes, Rabbit relay + per-machine Localside + eight DSH tools (replicate / split), nine aggregate verdicts and signed requests.",
   "type": "module",
   "main": "lib/index.js",

package/src/agent/health.mjs

@@ -48,13 +48,20 @@ export const LOG_GROWTH_WARN_BYTES_PER_DAY = 1 * GB;
 /**
  * Which paths are worth checking for growth, by platform.
  *
- * Deliberately short. A health check that walks a whole filesystem is itself a load source, and the
- * incident was caused by *two* files rather than by a general untidiness — so the check names the places
- * where an unbounded writer has actually been observed.
+ * Deliberately short, and deliberately **not including a user's home directory**.
+ *
+ * A health check that walks a whole filesystem is itself a load source, and this list got that wrong on the
+ * first attempt: macOS was given `/Users`, and on a developer machine that is hundreds of thousands of files.
+ * The symptom appeared on a real machine as a health check that **exceeded the fleet's own ~50-second lease
+ * ceiling** and expired with no result at all — a monitoring tool timing out because it was too expensive to
+ * monitor. On the machine that wrote it, the same suite runs in 280 ms.
+ *
+ * So each entry is a place where an unbounded writer has actually been observed, which is what the 14.7
+ * GB/day incident was: two files in `/var/log`, not a general untidiness.
  */
 export const LOG_PATHS = Object.freeze({
   linux: ['/var/log', '/var/lib/w2m', '/tmp'],
-  darwin: ['/var/log', '/tmp', '/Users'],
+  darwin: ['/var/log', '/Library/Logs', '/tmp'],
   win32: ['C:\\Windows\\Logs', 'C:\\Windows\\Temp'],
 });
 

package/src/plugin/tools.mjs

@@ -185,7 +185,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '0.10.2';
+const PLUGIN_VERSION = '0.10.3';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;