@memnexus-ai/mx-agent-cli 0.1.174 → 0.1.176

package/dist/__tests__/coordination-provision.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordination-provision.test.js","sourceRoot":"","sources":["../../src/__tests__/coordination-provision.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,iFAAiF;AACjF,8EAA8E;AAC9E,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,wBAAwB,EAAE,EAAE,CAAC,EAAE,EAAE;CAClC,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAExE,MAAM,WAAW,GAAG,wBAA+D,CAAC;AAEpF,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AACpC,IAAI,MAAgB,CAAC;AAErB,UAAU,CAAC,GAAG,EAAE;IACd,WAAW,CAAC,SAAS,EAAE,CAAC;IACxB,MAAM,GAAG,EAAE,CAAC;IACZ,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAU,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAU,CAAC,CAAC;IAC1H,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACxC,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,OAAO,CAAC,CAAC,6BAA6B;AAC3E,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACrB,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;AAChC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,8DAA8D;QAC9D,WAAW,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxH,IAAI,MAAoD,CAAC;QACzD,MAAM,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,WAAW,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC,CAAC;QAC5G,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,WAAW,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAC7E,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,gDAAgD,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,QAAQ,GAAG,EAAE,KAAK,CAAC,OAAO,KAAK,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAW,CAAC;QAC/F,MAAM,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,uBAAuB,CAAC;QAC3D,WAAW,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACvG,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1D,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,uBAAuB,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,WAAW,CAAC,CAAC,wBAAwB;QACxE,WAAW,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACvG,aAAa,EAAE,CAAC;QAChB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/coordination-token.test.d.ts

@@ -0,0 +1,11 @@
+/**
+ * coordination-token -- self-provisioning the coordination service token.
+ *
+ * Verifies the CLI reproduces the coordination-brief hook's isolation properties:
+ * marker-authoritative slug (MF-2), roster-gate before any az call (SF-2),
+ * slug-bound per-worktree cache (MF-1), born-0600 cache write (SF-3),
+ * fail-OPEN on infra errors, fail-CLOSED on a roster mismatch, and no token
+ * logging.
+ */
+export {};
+//# sourceMappingURL=coordination-token.test.d.ts.map

package/dist/__tests__/coordination-token.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordination-token.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/coordination-token.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/__tests__/coordination-token.test.js

@@ -0,0 +1,166 @@
+/**
+ * coordination-token -- self-provisioning the coordination service token.
+ *
+ * Verifies the CLI reproduces the coordination-brief hook's isolation properties:
+ * marker-authoritative slug (MF-2), roster-gate before any az call (SF-2),
+ * slug-bound per-worktree cache (MF-1), born-0600 cache write (SF-3),
+ * fail-OPEN on infra errors, fail-CLOSED on a roster mismatch, and no token
+ * logging.
+ */
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import { mkdtempSync, rmSync, writeFileSync, readFileSync, statSync, existsSync } from 'fs';
+import { join } from 'path';
+import { tmpdir } from 'os';
+// Mock the config store so we can simulate getConfigValue throwing (mkdirSync
+// EACCES on an unwritable HOME) for the SF-A belt-and-suspenders test. Default
+// returns undefined (no configured token) so the other tests reach the marker path.
+vi.mock('../lib/config.js', () => ({ getConfigValue: vi.fn(() => undefined) }));
+import { resolveCoordinationToken, KEYVAULT_NAME } from '../lib/coordination-token.js';
+import { getConfigValue } from '../lib/config.js';
+const mockGetConfigValue = getConfigValue;
+let dir;
+beforeEach(() => {
+    dir = mkdtempSync(join(tmpdir(), 'coord-token-'));
+    mockGetConfigValue.mockReset();
+    mockGetConfigValue.mockReturnValue(undefined);
+});
+afterEach(() => {
+    rmSync(dir, { recursive: true, force: true });
+    vi.restoreAllMocks();
+});
+/** In-memory readFileText backed by a path→contents map. */
+function reader(files) {
+    return (p) => (p in files ? files[p] : undefined);
+}
+describe('resolveCoordinationToken', () => {
+    it('uses an already-set env token and never calls Key Vault', () => {
+        const fetchSecret = vi.fn();
+        const res = resolveCoordinationToken({
+            env: { MX_COORD_SERVICE_TOKEN: 'env-tok', CLAUDE_WORKTREE_PATH: dir },
+            fetchSecret,
+        });
+        expect(res.status).toBe('already-configured');
+        expect(res.token).toBe('env-tok');
+        expect(fetchSecret).not.toHaveBeenCalled();
+    });
+    it('uses the per-worktree cache when present and never calls Key Vault', () => {
+        const fetchSecret = vi.fn();
+        const marker = join(dir, '.mx-coordination-team');
+        const cache = join(dir, '.mx-coordination-token-eval');
+        const res = resolveCoordinationToken({
+            env: { CLAUDE_WORKTREE_PATH: dir },
+            readFileText: reader({ [marker]: 'eval\n', [cache]: 'cached-eval-tok\n' }),
+            fetchSecret,
+        });
+        expect(res.status).toBe('resolved');
+        expect(res.source).toBe('cache');
+        expect(res.token).toBe('cached-eval-tok');
+        expect(fetchSecret).not.toHaveBeenCalled();
+    });
+    it('fetches from Key Vault on a cache miss, caches born-0600, and returns it', () => {
+        // Real fs so we can assert the on-disk cache mode.
+        writeFileSync(join(dir, '.mx-coordination-team'), 'eval\n');
+        const fetchSecret = vi.fn((_vault, name) => {
+            expect(name).toBe('coordination-token-eval');
+            return 'kv-fetched-tok';
+        });
+        const res = resolveCoordinationToken({ env: { CLAUDE_WORKTREE_PATH: dir }, fetchSecret });
+        expect(res.status).toBe('resolved');
+        expect(res.source).toBe('keyvault');
+        expect(res.token).toBe('kv-fetched-tok');
+        expect(fetchSecret).toHaveBeenCalledWith(KEYVAULT_NAME, 'coordination-token-eval');
+        const cachePath = join(dir, '.mx-coordination-token-eval');
+        expect(existsSync(cachePath)).toBe(true);
+        expect(readFileSync(cachePath, 'utf-8')).toBe('kv-fetched-tok');
+        // SF-3: born 0600 — no group/other bits.
+        expect(statSync(cachePath).mode & 0o777).toBe(0o600);
+    });
+    it('fails CLOSED on an unknown-slug marker — no Key Vault fetch', () => {
+        const fetchSecret = vi.fn();
+        const marker = join(dir, '.mx-coordination-team');
+        const res = resolveCoordinationToken({
+            env: { CLAUDE_WORKTREE_PATH: dir },
+            readFileText: reader({ [marker]: 'not-a-real-team\n' }),
+            fetchSecret,
+        });
+        expect(res.status).toBe('not-on-roster');
+        expect(res.slug).toBe('not-a-real-team');
+        expect(res.token).toBeUndefined();
+        expect(fetchSecret).not.toHaveBeenCalled();
+    });
+    it('MF-1: a stale cross-team cache is never read — marker=marketing ignores eval cache', () => {
+        // The worktree was recycled from eval to marketing: eval's cache lingers, but
+        // the marketing marker must fetch marketing's token, never reuse eval's.
+        const marker = join(dir, '.mx-coordination-team');
+        const evalCache = join(dir, '.mx-coordination-token-eval');
+        const fetchSecret = vi.fn(() => 'marketing-tok');
+        const res = resolveCoordinationToken({
+            env: { CLAUDE_WORKTREE_PATH: dir },
+            readFileText: reader({ [marker]: 'marketing\n', [evalCache]: 'STALE-EVAL-TOKEN' }),
+            fetchSecret,
+        });
+        expect(res.slug).toBe('marketing');
+        expect(res.token).toBe('marketing-tok');
+        expect(res.token).not.toBe('STALE-EVAL-TOKEN');
+        // It fetched marketing's secret, never touched eval's.
+        expect(fetchSecret).toHaveBeenCalledWith(KEYVAULT_NAME, 'coordination-token-marketing');
+    });
+    it('fails OPEN when Key Vault / az errors — reports unprovisioned, never throws', () => {
+        const marker = join(dir, '.mx-coordination-team');
+        // Mock az failure: fetchSecret returns undefined (az not logged in / KV down).
+        const fetchSecret = vi.fn(() => undefined);
+        const res = resolveCoordinationToken({
+            env: { CLAUDE_WORKTREE_PATH: dir },
+            readFileText: reader({ [marker]: 'eval\n' }),
+            fetchSecret,
+        });
+        expect(res.status).toBe('unprovisioned');
+        expect(res.slug).toBe('eval');
+        expect(res.token).toBeUndefined();
+        expect(res.detail).toMatch(/Key Vault/);
+    });
+    it('fails OPEN when the marker is missing', () => {
+        const res = resolveCoordinationToken({
+            env: { CLAUDE_WORKTREE_PATH: dir },
+            readFileText: reader({}),
+            fetchSecret: vi.fn(),
+        });
+        expect(res.status).toBe('unprovisioned');
+        expect(res.detail).toMatch(/no coordination marker/);
+    });
+    it('fails OPEN when CLAUDE_WORKTREE_PATH is unset (no marker to read)', () => {
+        const res = resolveCoordinationToken({ env: {}, fetchSecret: vi.fn() });
+        expect(res.status).toBe('unprovisioned');
+        expect(res.detail).toMatch(/CLAUDE_WORKTREE_PATH/);
+    });
+    it('SF-A: never throws when the config read throws (unwritable HOME) — continues to the marker path', () => {
+        mockGetConfigValue.mockImplementation(() => { throw new Error("EACCES: permission denied, mkdir '/home/nobody/.mx-agent'"); });
+        const marker = join(dir, '.mx-coordination-team');
+        const cache = join(dir, '.mx-coordination-token-eval');
+        let res;
+        expect(() => {
+            res = resolveCoordinationToken({
+                env: { CLAUDE_WORKTREE_PATH: dir },
+                readFileText: reader({ [marker]: 'eval\n', [cache]: 'cached-eval-tok' }),
+                fetchSecret: vi.fn(),
+            });
+        }).not.toThrow();
+        // The config throw was swallowed → resolution proceeded to the cache.
+        expect(res?.status).toBe('resolved');
+        expect(res?.token).toBe('cached-eval-tok');
+    });
+    it('never logs the token to the console', () => {
+        const logSpy = vi.spyOn(console, 'log').mockImplementation(() => { });
+        const errSpy = vi.spyOn(console, 'error').mockImplementation(() => { });
+        const marker = join(dir, '.mx-coordination-team');
+        const cache = join(dir, '.mx-coordination-token-eval');
+        resolveCoordinationToken({
+            env: { CLAUDE_WORKTREE_PATH: dir },
+            readFileText: reader({ [marker]: 'eval\n', [cache]: 'secret-token-value' }),
+            fetchSecret: vi.fn(() => 'secret-token-value'),
+        });
+        const all = [...logSpy.mock.calls, ...errSpy.mock.calls].flat().join(' ');
+        expect(all).not.toContain('secret-token-value');
+    });
+});
+//# sourceMappingURL=coordination-token.test.js.map

package/dist/__tests__/coordination-token.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordination-token.test.js","sourceRoot":"","sources":["../../src/__tests__/coordination-token.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC5F,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAE5B,8EAA8E;AAC9E,+EAA+E;AAC/E,oFAAoF;AACpF,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;AAEhF,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AACvF,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,MAAM,kBAAkB,GAAG,cAAqD,CAAC;AAEjF,IAAI,GAAW,CAAC;AAEhB,UAAU,CAAC,GAAG,EAAE;IACd,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IAClD,kBAAkB,CAAC,SAAS,EAAE,CAAC;IAC/B,kBAAkB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,EAAE,CAAC,eAAe,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,4DAA4D;AAC5D,SAAS,MAAM,CAAC,KAA6B;IAC3C,OAAO,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC5D,CAAC;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,wBAAwB,CAAC;YACnC,GAAG,EAAE,EAAE,sBAAsB,EAAE,SAAS,EAAE,oBAAoB,EAAE,GAAG,EAAE;YACrE,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,wBAAwB,CAAC;YACnC,GAAG,EAAE,EAAE,oBAAoB,EAAE,GAAG,EAAE;YAClC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAC;YAC1E,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC1C,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,mDAAmD;QACnD,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE;YACzD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC7C,OAAO,gBAAgB,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,wBAAwB,CAAC,EAAE,GAAG,EAAE,EAAE,oBAAoB,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAE1F,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACzC,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;QAEnF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;QAC3D,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAChE,yCAAyC;QACzC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,wBAAwB,CAAC;YACnC,GAAG,EAAE,EAAE,oBAAoB,EAAE,GAAG,EAAE;YAClC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC;YACvD,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;QAClC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,8EAA8E;QAC9E,yEAAyE;QACzE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,wBAAwB,CAAC;YACnC,GAAG,EAAE,EAAE,oBAAoB,EAAE,GAAG,EAAE;YAClC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,SAAS,CAAC,EAAE,kBAAkB,EAAE,CAAC;YAClF,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/C,uDAAuD;QACvD,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAClD,+EAA+E;QAC/E,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,wBAAwB,CAAC;YACnC,GAAG,EAAE,EAAE,oBAAoB,EAAE,GAAG,EAAE;YAClC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC;YAC5C,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,GAAG,GAAG,wBAAwB,CAAC;YACnC,GAAG,EAAE,EAAE,oBAAoB,EAAE,GAAG,EAAE;YAClC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC;YACxB,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,GAAG,GAAG,wBAAwB,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,GAAG,EAAE;QACzG,kBAAkB,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/H,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;QACvD,IAAI,GAA4D,CAAC;QACjE,MAAM,CAAC,GAAG,EAAE;YACV,GAAG,GAAG,wBAAwB,CAAC;gBAC7B,GAAG,EAAE,EAAE,oBAAoB,EAAE,GAAG,EAAE;gBAClC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,iBAAiB,EAAE,CAAC;gBACxE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;aACrB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACjB,sEAAsE;QACtE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;QACvD,wBAAwB,CAAC;YACvB,GAAG,EAAE,EAAE,oBAAoB,EAAE,GAAG,EAAE;YAClC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,oBAAoB,EAAE,CAAC;YAC3E,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC;SAC/C,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1E,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;AAEhE,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAuCD,wBAAgB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAgFtD"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;AAEhE,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA8CD,wBAAgB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAuFtD"}

package/dist/commands/config.js

@@ -18,6 +18,12 @@ const KNOWN_KEYS = {
     'coordination-service-url': 'MX Agent Coordination Service base URL (https://...)',
     'coordination-service-token': 'Per-team bearer token for the MX Agent Coordination Service',
     'coordination-brief-enabled': 'Run `mx-agent coordination brief` at session start (true to opt in; default off)',
+    'coordination-mode': 'Coordination backend: queue | memory (default memory; `queue` routes escalate/brief to the coordination service)',
+    'coordination-team': 'Sender team for memory-mode coordination when no .mx-coordination-team marker is present',
+};
+/** Config keys constrained to a fixed set of values, validated on `set`. */
+const ENUM_KEYS = {
+    'coordination-mode': ['queue', 'memory'],
 };
 /** Keys whose value is a secret and must never be echoed in the clear. */
 const SECRET_KEYS = new Set(['observability-api-token', 'coordination-service-token']);
@@ -55,6 +61,12 @@ export function runConfig(options) {
                 process.exit(1);
             }
             validateKey(key);
+            // Validate enum-constrained keys (e.g. coordination-mode).
+            const allowed = ENUM_KEYS[key];
+            if (allowed && !allowed.includes(value)) {
+                console.error(chalk.red(`Error: ${key} must be one of: ${allowed.join(', ')} (got "${value}").`));
+                process.exit(1);
+            }
             // Validate HTTPS for webhook URLs
             if (key === 'slack-webhook') {
                 try {

package/dist/commands/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAUjG,MAAM,UAAU,GAA2B;IACzC,eAAe,EAAc,oDAAoD;IACjF,uBAAuB,EAAM,0EAA0E;IACvG,yBAAyB,EAAI,uFAAuF;IACpH,0BAA0B,EAAG,sDAAsD;IACnF,4BAA4B,EAAC,6DAA6D;IAC1F,4BAA4B,EAAC,kFAAkF;CAChH,CAAC;AAEF,0EAA0E;AAC1E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,yBAAyB,EAAE,4BAA4B,CAAC,CAAC,CAAC;AAEvF,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,GAAG,4CAA4C,KAAK,EAAE,CAAC,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,4EAA4E;QAC5E,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,MAAM,CAAC;QACtD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,KAAa;IAC9C,mCAAmC;IACnC,IAAI,GAAG,KAAK,eAAe;QAAE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAsB;IAC9C,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAE3C,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC;gBACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,CAAC;YAEjB,kCAAkC;YAClC,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;wBACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,KAAK,uBAAuB,CAAC,CAAC,CAAC;oBAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;YAED,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,CAAC;YAC7D,MAAM;QACR,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC,CAAC;gBAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YACD,MAAM;QACR,CAAC;QAED,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC,CAAC;gBACpG,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;gBACtC,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;oBAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrE,CAAC;gBACD,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,MAAM;QACR,CAAC;QAED,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,CAAC;gBAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,MAAM;QACR,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAUjG,MAAM,UAAU,GAA2B;IACzC,eAAe,EAAc,oDAAoD;IACjF,uBAAuB,EAAM,0EAA0E;IACvG,yBAAyB,EAAI,uFAAuF;IACpH,0BAA0B,EAAG,sDAAsD;IACnF,4BAA4B,EAAC,6DAA6D;IAC1F,4BAA4B,EAAC,kFAAkF;IAC/G,mBAAmB,EAAU,kHAAkH;IAC/I,mBAAmB,EAAU,0FAA0F;CACxH,CAAC;AAEF,4EAA4E;AAC5E,MAAM,SAAS,GAAsC;IACnD,mBAAmB,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;CACzC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,yBAAyB,EAAE,4BAA4B,CAAC,CAAC,CAAC;AAEvF,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,GAAG,4CAA4C,KAAK,EAAE,CAAC,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,4EAA4E;QAC5E,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,MAAM,CAAC;QACtD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,KAAa;IAC9C,mCAAmC;IACnC,IAAI,GAAG,KAAK,eAAe;QAAE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAsB;IAC9C,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAE3C,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC;gBACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,CAAC;YAEjB,2DAA2D;YAC3D,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC;gBAClG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,kCAAkC;YAClC,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;wBACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,KAAK,uBAAuB,CAAC,CAAC,CAAC;oBAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;YAED,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,CAAC;YAC7D,MAAM;QACR,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC,CAAC;gBAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YACD,MAAM;QACR,CAAC;QAED,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC,CAAC;gBACpG,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;gBACtC,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;oBAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrE,CAAC;gBACD,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,MAAM;QACR,CAAC;QAED,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,CAAC;gBAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,MAAM;QACR,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/coordination.d.ts

@@ -10,6 +10,37 @@
  * only a local durable fallback file and flushes it on the next success.
  */
 import { type CoordinationClient } from '../lib/coordination-client.js';
+import { type MemoryStore } from '../lib/coordination-memory.js';
+/**
+ * Build the HTTP client, self-provisioning the coordination token from Key Vault
+ * when none is configured. This ports the coordination-brief hook's KV-fetch into
+ * the CLI so a bare `mx-agent coordination brief` (and drain/escalate/history)
+ * works standalone with the SAME isolation the security review required (marker
+ * authoritative, roster-gated, slug-bound per-worktree 0600 cache, no global-
+ * config clobber, no token logging).
+ *
+ * Returns null — never throws — when a token cannot be provisioned, so the caller
+ * degrades cleanly (falls back to the manual channel) instead of crashing:
+ *   - roster mismatch → fail-CLOSED (no KV fetch), one-line notice.
+ *   - infra/no-marker  → fail-OPEN, one-line notice.
+ * When a client IS injected (tests), provisioning is skipped entirely.
+ *
+ * The resolved token is set in-memory (process env for the request) and is NEVER
+ * written to the global ~/.mx-agent config (the MF-2 cross-worktree-clobber
+ * defect) and NEVER logged.
+ */
+export declare function prepareClient(deps?: {
+    client?: CoordinationClient;
+}): CoordinationClient | null;
+/**
+ * Injectable dependencies for the coordination commands. `client` stubs the
+ * queue service (queue mode); `memoryStore` stubs the named-memory backend
+ * (memory mode). Tests inject one or both; production uses the real defaults.
+ */
+export interface CoordinationDeps {
+    client?: CoordinationClient;
+    memoryStore?: MemoryStore;
+}
 export interface EscalateOptions {
     to: string;
     priority: string;
@@ -22,9 +53,7 @@ export interface EscalateOptions {
  * (exit 0, non-lossy). On success, any previously queued-locally entries are
  * flushed first.
  */
-export declare function runEscalate(opts: EscalateOptions, deps?: {
-    client?: CoordinationClient;
-}): Promise<void>;
+export declare function runEscalate(opts: EscalateOptions, deps?: CoordinationDeps): Promise<void>;
 export interface DrainOptions {
     all?: boolean;
     limit?: string;
@@ -44,9 +73,7 @@ export interface DrainOptions {
  * flushed to stdout, the batch is confirmed (MAJOR-2); a mid-render crash leaves
  * it pending for re-queue. `--no-confirm` leaves the batch unconfirmed.
  */
-export declare function runDrain(opts: DrainOptions, deps?: {
-    client?: CoordinationClient;
-}): Promise<void>;
+export declare function runDrain(opts: DrainOptions, deps?: CoordinationDeps): Promise<void>;
 export interface BriefOptions {
     limit?: number;
     /**
@@ -65,9 +92,7 @@ export interface BriefOptions {
  * (a mid-render crash leaves it pending → re-queued). Bodies are truncated to
  * keep the block under the token ceiling for any backlog.
  */
-export declare function runBrief(opts?: BriefOptions, deps?: {
-    client?: CoordinationClient;
-}): Promise<void>;
+export declare function runBrief(opts?: BriefOptions, deps?: CoordinationDeps): Promise<void>;
 export interface WatchOptions {
     intervalMs?: number;
     limit?: number;
@@ -98,14 +123,11 @@ export declare function redactSecrets(s: string): string;
  * hint. Full harness onInject + the Redis blocking-read server push stay OUT of
  * scope (see README).
  */
-export declare function runWatch(opts?: WatchOptions, deps?: {
-    client?: CoordinationClient;
+export declare function runWatch(opts?: WatchOptions, deps?: CoordinationDeps & {
     sleep?: (ms: number) => Promise<void>;
 }): Promise<void>;
 /** FR-7 ack. */
-export declare function runAck(messageId: string, deps?: {
-    client?: CoordinationClient;
-}): Promise<void>;
+export declare function runAck(messageId: string, deps?: CoordinationDeps): Promise<void>;
 export interface HistoryOptions {
     /** Page size (service default 50, cap 200). */
     limit?: string;
@@ -120,7 +142,5 @@ export interface HistoryOptions {
  * payload in a body stays inside the fence and is never emitted raw. `--all`
  * follows the `nextBefore` cursor to page the full history (most-recent-first).
  */
-export declare function runHistory(opts?: HistoryOptions, deps?: {
-    client?: CoordinationClient;
-}): Promise<void>;
+export declare function runHistory(opts?: HistoryOptions, deps?: CoordinationDeps): Promise<void>;
 //# sourceMappingURL=coordination.d.ts.map

package/dist/commands/coordination.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coordination.d.ts","sourceRoot":"","sources":["../../src/commands/coordination.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAKL,KAAK,kBAAkB,EAExB,MAAM,+BAA+B,CAAC;AAwEvC,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,kBAAkB,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAiC9G;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,4EAA4E;IAC5E,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED;;;;;;;GAOG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,kBAAkB,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBxG;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAAC,IAAI,GAAE,YAAiB,EAAE,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,kBAAkB,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA2C7G;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,kFAAkF;AAClF,qBAAa,cAAe,SAAQ,KAAK;;CAKxC;AAQD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,QAAQ,CAC5B,IAAI,GAAE,YAAiB,EACvB,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,GAC5E,OAAO,CAAC,IAAI,CAAC,CAoCf;AAED,gBAAgB;AAChB,wBAAsB,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,kBAAkB,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAIrG;AAED,MAAM,WAAW,cAAc;IAC7B,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAKD;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAAC,IAAI,GAAE,cAAmB,EAAE,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,kBAAkB,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBjH"}
+{"version":3,"file":"coordination.d.ts","sourceRoot":"","sources":["../../src/commands/coordination.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAML,KAAK,kBAAkB,EAExB,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,+BAA+B,CAAC;AAiCvC;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAAC,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,kBAAkB,CAAA;CAAE,GAAG,kBAAkB,GAAG,IAAI,CAqC/F;AAkCD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AASD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAkDD;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqC/F;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,4EAA4E;IAC5E,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED;;;;;;;GAOG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BzF;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAAC,IAAI,GAAE,YAAiB,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA+C9F;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,kFAAkF;AAClF,qBAAa,cAAe,SAAQ,KAAK;;CAKxC;AAQD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,QAAQ,CAC5B,IAAI,GAAE,YAAiB,EACvB,IAAI,CAAC,EAAE,gBAAgB,GAAG;IAAE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,GAClE,OAAO,CAAC,IAAI,CAAC,CAyCf;AAED,gBAAgB;AAChB,wBAAsB,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAStF;AAED,MAAM,WAAW,cAAc;IAC7B,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAKD;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAAC,IAAI,GAAE,cAAmB,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBlG"}

package/dist/commands/coordination.js

@@ -9,9 +9,11 @@
  * `escalate` degrades safely when the service is unreachable (FR-8): it writes
  * only a local durable fallback file and flushes it on the next success.
  */
-import { HttpCoordinationClient, resolveClientConfig, ServiceUnreachableError, ServiceHttpError, } from '../lib/coordination-client.js';
+import { HttpCoordinationClient, resolveClientConfig, resolveCoordinationMode, ServiceUnreachableError, ServiceHttpError, } from '../lib/coordination-client.js';
+import { resolveCoordinationToken } from '../lib/coordination-token.js';
 import { appendFallbackEntry, flushFallback } from '../lib/coordination-fallback.js';
 import { renderMessages } from '../lib/coordination-render.js';
+import { escalateToOutbox, readEscalationsForTeam, renderEscalationBlocks, resolveMemoryTeam, resolveProductSlug, } from '../lib/coordination-memory.js';
 const VALID_PRIORITIES = new Set(['p0', 'p1', 'p2', 'p3']);
 /** Truncate each body to this many chars in the brief (token-ceiling control). */
 const BRIEF_BODY_MAX_CHARS = 500;
@@ -38,9 +40,60 @@ function flushStdout() {
         process.stdout.write('', () => resolve());
     });
 }
-/** Build the default HTTP client from config/env. Overridable in tests. */
-function defaultClient() {
-    return new HttpCoordinationClient(resolveClientConfig());
+/**
+ * Build the HTTP client, self-provisioning the coordination token from Key Vault
+ * when none is configured. This ports the coordination-brief hook's KV-fetch into
+ * the CLI so a bare `mx-agent coordination brief` (and drain/escalate/history)
+ * works standalone with the SAME isolation the security review required (marker
+ * authoritative, roster-gated, slug-bound per-worktree 0600 cache, no global-
+ * config clobber, no token logging).
+ *
+ * Returns null — never throws — when a token cannot be provisioned, so the caller
+ * degrades cleanly (falls back to the manual channel) instead of crashing:
+ *   - roster mismatch → fail-CLOSED (no KV fetch), one-line notice.
+ *   - infra/no-marker  → fail-OPEN, one-line notice.
+ * When a client IS injected (tests), provisioning is skipped entirely.
+ *
+ * The resolved token is set in-memory (process env for the request) and is NEVER
+ * written to the global ~/.mx-agent config (the MF-2 cross-worktree-clobber
+ * defect) and NEVER logged.
+ */
+export function prepareClient(deps) {
+    if (deps?.client)
+        return deps.client;
+    // SF-A never-crash contract: resolveCoordinationToken is documented never-throws,
+    // but its config read can still touch the filesystem (mkdirSync on an unwritable/
+    // read-only HOME → EACCES/EROFS). Keep the WHOLE resolve+build inside the
+    // try/catch so ANY throw degrades to the null fall-back path — a coordination
+    // hiccup must never crash `mx-agent coordination brief` (breaks session start).
+    let res = { status: 'unprovisioned', detail: 'token resolution failed' };
+    try {
+        res = resolveCoordinationToken();
+        if (res.status === 'resolved' && res.token) {
+            // In-memory only: resolveClientConfig reads MX_COORD_SERVICE_TOKEN in
+            // preference to the global config, so we never touch the shared config file.
+            process.env.MX_COORD_SERVICE_TOKEN = res.token;
+            // SF-B: arm the SF-1 verify-before-confirm interlock on the bare
+            // self-provisioned path, matching the hook (which set MX_COORD_EXPECT_TEAM).
+            // `??=` so an explicit hook-set value is never overwritten.
+            if (res.slug)
+                process.env.MX_COORD_EXPECT_TEAM ??= res.slug;
+        }
+        return new HttpCoordinationClient(resolveClientConfig());
+    }
+    catch (err) {
+        // No usable token/URL (or a resolve-time throw). Report a non-secret, one-line
+        // fall-back notice and return null; the caller returns cleanly so the agent
+        // uses the old channel.
+        if (res.status === 'not-on-roster') {
+            process.stderr.write(`coordination: team "${res.slug}" is not on the coordination roster — falling back to the manual channel\n`);
+        }
+        else {
+            const why = res.detail ?? (err instanceof Error ? err.message : String(err));
+            process.stderr.write(`coordination: could not provision a service token (${why}) — falling back to the manual channel\n`);
+        }
+        return null;
+    }
 }
 /**
  * Opportunistically flush any queued-locally entries. Surfaces a flush FAILURE
@@ -74,6 +127,52 @@ function writeFallbackOrFail(entry) {
         throw err;
     }
 }
+/** One-line note printed when a queue-only subcommand runs in memory mode. */
+function memoryModeQueueOnlyNote(subcommand) {
+    console.log(`coordination-mode=memory: ${subcommand} is queue-only; use \`mx-agent coordination brief\` to read the shared escalations doc`);
+}
+/**
+ * memory-mode escalate: append the entry to the sender's outbox memory
+ * `<slug>-escalations-<from-team>-outbox` via fetch-edit-verify. No token, no
+ * queue service. A failed byte-verify is a hard error (exit 1) so a clobbered
+ * or dropped write is never silently reported as success.
+ */
+async function runEscalateMemory(opts, deps) {
+    const team = resolveMemoryTeam(opts.team);
+    const slug = resolveProductSlug();
+    let res;
+    try {
+        res = escalateToOutbox({ fromTeam: team, to: opts.to, priority: opts.priority, body: opts.body, productSlug: slug }, deps?.memoryStore);
+    }
+    catch (err) {
+        // A MemNexus write failure is surfaced (not swallowed) — the message is not
+        // queued, so the operator must see it. Exit non-zero.
+        console.error(`Error: memory-mode escalate failed to write the outbox: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+        return;
+    }
+    if (!res.verified) {
+        console.error(`Error: memory-mode escalate could not verify the outbox write (${res.name}) — the entry may not have persisted. Not marking as sent.`);
+        process.exit(1);
+        return;
+    }
+    console.log(`escalated to ${res.name} (memory mode) -> ${opts.to} [${opts.priority}]${res.created ? ' (outbox created)' : ''}`);
+}
+/**
+ * memory-mode brief: read the shared escalations doc and render entries
+ * addressed to this team inside the provenance fence. Read-only — there is no
+ * drain/confirm in memory mode.
+ */
+async function runBriefMemory(opts, deps) {
+    const team = opts.expectedTeam ?? resolveMemoryTeam();
+    const slug = resolveProductSlug();
+    const { present, entries } = readEscalationsForTeam(team, slug, deps?.memoryStore);
+    if (!present || entries.length === 0) {
+        console.log('no cross-team coordination pending');
+        return;
+    }
+    console.log(renderEscalationBlocks(entries));
+}
 /**
  * FR-7 enqueue + FR-8 degraded fallback. On a transport failure the message is
  * written to the local durable fallback file and reported as queued-locally
@@ -85,16 +184,17 @@ export async function runEscalate(opts, deps) {
         console.error(`Error: --priority must be one of p0, p1, p2, p3 (got "${opts.priority}").`);
         process.exit(1);
     }
+    // Backend routing (PO one-interface design). memory mode requires NO token.
+    if (resolveCoordinationMode() === 'memory') {
+        return runEscalateMemory(opts, deps);
+    }
     const team = resolveTeam(opts.team);
     const entry = { team, to: opts.to, priority: opts.priority, body: opts.body, from: team };
-    let client;
-    try {
-        client = deps?.client ?? defaultClient();
-    }
-    catch (err) {
-        // No config at all — still degrade to the local fallback so nothing is lost.
+    const client = prepareClient(deps);
+    if (!client) {
+        // No token/URL could be provisioned (prepareClient already printed the reason).
+        // Degrade to the local fallback so the message is never lost.
         writeFallbackOrFail(entry);
-        console.error(err instanceof Error ? err.message : String(err));
         console.log('queued locally, will flush on reconnect');
         return;
     }
@@ -123,7 +223,13 @@ export async function runEscalate(opts, deps) {
  * it pending for re-queue. `--no-confirm` leaves the batch unconfirmed.
  */
 export async function runDrain(opts, deps) {
-    const client = deps?.client ?? defaultClient();
+    if (resolveCoordinationMode() === 'memory') {
+        memoryModeQueueOnlyNote('drain');
+        return; // exit 0 — no crash
+    }
+    const client = prepareClient(deps);
+    if (!client)
+        return; // could not provision — fall back (prepareClient printed why)
     // Flush any queued-locally entries now that the service is reachable.
     await opportunisticFlush(client);
     const limit = opts.all ? undefined : opts.limit ? parseInt(opts.limit, 10) : undefined;
@@ -152,7 +258,12 @@ export async function runDrain(opts, deps) {
  * keep the block under the token ceiling for any backlog.
  */
 export async function runBrief(opts = {}, deps) {
-    const client = deps?.client ?? defaultClient();
+    if (resolveCoordinationMode() === 'memory') {
+        return runBriefMemory(opts, deps);
+    }
+    const client = prepareClient(deps);
+    if (!client)
+        return; // could not provision — fall back (prepareClient printed why)
     await opportunisticFlush(client);
     const limit = opts.limit ?? envInt('MX_COORD_BRIEF_LIMIT', 10);
     const res = await client.drain({ limit });
@@ -226,7 +337,13 @@ export function redactSecrets(s) {
  * scope (see README).
  */
 export async function runWatch(opts = {}, deps) {
-    const client = deps?.client ?? defaultClient();
+    if (resolveCoordinationMode() === 'memory') {
+        memoryModeQueueOnlyNote('watch');
+        return; // exit 0 — no crash
+    }
+    const client = prepareClient(deps);
+    if (!client)
+        return; // could not provision — fall back (prepareClient printed why)
     const intervalMs = opts.intervalMs ?? envInt('MX_COORD_PRIORITY_POLL_MS', 15_000);
     const limit = opts.limit ?? envInt('MX_COORD_BRIEF_LIMIT', 10);
     const sleep = deps?.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
@@ -266,7 +383,13 @@ export async function runWatch(opts = {}, deps) {
 }
 /** FR-7 ack. */
 export async function runAck(messageId, deps) {
-    const client = deps?.client ?? defaultClient();
+    if (resolveCoordinationMode() === 'memory') {
+        memoryModeQueueOnlyNote('ack');
+        return; // exit 0 — no crash
+    }
+    const client = prepareClient(deps);
+    if (!client)
+        return; // could not provision — fall back (prepareClient printed why)
     await client.ack(messageId);
     console.log(`acked: ${messageId}`);
 }
@@ -281,7 +404,13 @@ const HISTORY_MAX_PAGES = 500;
  * follows the `nextBefore` cursor to page the full history (most-recent-first).
  */
 export async function runHistory(opts = {}, deps) {
-    const client = deps?.client ?? defaultClient();
+    if (resolveCoordinationMode() === 'memory') {
+        memoryModeQueueOnlyNote('history');
+        return; // exit 0 — no crash
+    }
+    const client = prepareClient(deps);
+    if (!client)
+        return; // could not provision — fall back (prepareClient printed why)
     const limit = opts.limit ? parseInt(opts.limit, 10) : undefined;
     const collected = [];
     let before;