@mnemom/mnemom 0.17.0-next.5 → 0.17.0-next.6

package/dist/commands/code-setup.d.ts

@@ -29,6 +29,14 @@
  * "user" when no email is available (API-key auth / opaque OAuth token).
  */
 export declare function defaultAgentSlug(): string;
+/**
+ * The default slug resolved from the authenticated IDENTITY: `code-<handle>` from
+ * the login email fetched via `/v1/auth/me`. The CLI's stored OAuth token carries
+ * no email, so the sync `defaultAgentSlug()` alone falls back to "code-user";
+ * this fetches the real email once a session exists. Falls back to
+ * `defaultAgentSlug()` on any failure. Call it AFTER the session is ensured.
+ */
+export declare function resolveDefaultSlug(): Promise<string>;
 export interface EnsureAgentOptions {
     /** The already-resolved final agent slug (what rides as x-mnemom-agent). */
     slug: string;

package/dist/commands/code-setup.js

@@ -23,7 +23,7 @@
  * birthThroughGateway (wrap.ts), deriveHashProof (agents.ts), claimAgent +
  * putAlignmentCard/putProtectionCard (lib/api.ts) — rather than reinventing it.
  */
-import { claimAgent, getAgentByName, getMuBalance, getMyPersonalOrg, MnemomApiError, mintProtectionCapability, putAlignmentCard, putProtectionCard, } from "../lib/api.js";
+import { claimAgent, getAgentByName, getMe, getMuBalance, getMyPersonalOrg, MnemomApiError, mintProtectionCapability, putAlignmentCard, putProtectionCard, } from "../lib/api.js";
 import { getAuthInfo, isLoggedIn, loginWithBrowser, loginWithDeviceFlow, resolveAuth, } from "../lib/auth.js";
 import { getActiveOrg } from "../lib/cli-config.js";
 import { getWebsiteUrl } from "../lib/config.js";
@@ -47,6 +47,25 @@ export function defaultAgentSlug() {
     const handle = sanitizeAgentName(local) || "user";
     return `code-${handle}`;
 }
+/**
+ * The default slug resolved from the authenticated IDENTITY: `code-<handle>` from
+ * the login email fetched via `/v1/auth/me`. The CLI's stored OAuth token carries
+ * no email, so the sync `defaultAgentSlug()` alone falls back to "code-user";
+ * this fetches the real email once a session exists. Falls back to
+ * `defaultAgentSlug()` on any failure. Call it AFTER the session is ensured.
+ */
+export async function resolveDefaultSlug() {
+    try {
+        const email = (await getMe()).email ?? "";
+        const handle = sanitizeAgentName(email.split("@")[0] ?? "");
+        if (handle)
+            return `code-${handle}`;
+    }
+    catch {
+        // fall through to the token-based best-effort
+    }
+    return defaultAgentSlug();
+}
 /**
  * Ensure `slug` is a usable governed agent in the customer's org. Returns
  * {provisioned:false} when it is already usable, when provisioning is not
@@ -190,7 +209,8 @@ export async function codeSetupCommand(opts = {}) {
         throw err;
     }
     const anthropicKey = await resolveAnthropicKey(process.env, { allowPrompt: true });
-    const slug = opts.agent?.trim() ? sanitizeAgentName(opts.agent.trim()) : defaultAgentSlug();
+    // Session exists now, so derive the real handle from /v1/auth/me (not "code-user").
+    const slug = opts.agent?.trim() ? sanitizeAgentName(opts.agent.trim()) : await resolveDefaultSlug();
     if (!slug)
         throw new Error("mnemom code setup: agent slug sanitised to empty — pass --agent <slug>.");
     const result = await ensureGovernedAgent({ slug, anthropicKey, setup: true, gatewayHost });

package/dist/commands/code.js

@@ -35,7 +35,7 @@ import { configKeySpec, loadCodeConfig, writeCodeConfig } from "../lib/code-conf
 import { fmt } from "../lib/format.js";
 import { askInput, askYesNo, isInteractive } from "../lib/prompt.js";
 import { goalAlignmentLine, resolveSessionSetup } from "./code-session.js";
-import { defaultAgentSlug, ensureGovernedAgent, ensureSessionAndBalance, isQuietPreambleExit, } from "./code-setup.js";
+import { defaultAgentSlug, ensureGovernedAgent, ensureSessionAndBalance, isQuietPreambleExit, resolveDefaultSlug, } from "./code-setup.js";
 import { assembleContract, buildCustomHeaders, isProdGateway, launchPreferenceExplicit, resolveAnthropicDoor, resolveConversationId, resolveGatewayHost, resolveLaunchShape, sanitizeAgentName, } from "../lib/code.js";
 /** The CLI's own provider-key store (zero 1Password): ~/.mnemom/code.json, 0600. */
 const CODE_STORE = join(MNEMOM_DIR, "code.json");
@@ -148,10 +148,11 @@ export async function codeCommand(scenarioArg, options = {}) {
             process.exit(1); // guidance already printed
         throw err;
     }
-    // Now that a session exists, a defaulted slug can use the real login handle
-    // (a first-ever run computed it before sign-in, when only "code-user" was known).
+    // Now that a session exists, a defaulted slug uses the real login handle from
+    // /v1/auth/me (the stored token has no email, so the pre-sign-in value was the
+    // "code-user" fallback). Only when the caller didn't name an agent.
     if (!options.agent?.trim()) {
-        const refreshed = sanitizeAgentName(defaultAgentSlug());
+        const refreshed = sanitizeAgentName(await resolveDefaultSlug());
         if (refreshed)
             agent = refreshed;
     }

package/dist/lib/api.d.ts

@@ -377,6 +377,18 @@ export declare function moveAgent(agentId: string, destOrgId: string, opts?: {
  * mnemom-api migration 161 backfill.
  */
 export declare function getMyPersonalOrg(): Promise<PersonalOrgRef>;
+/** The authenticated user's identity — `GET /v1/auth/me`. Carries the email the
+ *  stored OAuth token does not, so the CLI can derive a real `code-<handle>`. */
+export interface MeResponse {
+    user_id: string;
+    email?: string | null;
+    org?: {
+        org_id?: string;
+        name?: string;
+        slug?: string;
+    } | null;
+}
+export declare function getMe(): Promise<MeResponse>;
 /**
  * The org's Mnemom Units (MU) balance — `GET /v1/billing/mu` (the frozen mu
  * v0.1 balance, values as decimal strings). Amounts come in both whole MU

package/dist/lib/api.js

@@ -375,6 +375,9 @@ export async function moveAgent(agentId, destOrgId, opts = {}) {
 export async function getMyPersonalOrg() {
     return gFetch("/v1/auth/me/personal-org", {}, { fallback: "API request failed" });
 }
+export async function getMe() {
+    return gFetch("/v1/auth/me", {}, { fallback: "Could not read your identity" });
+}
 export async function getMuBalance(orgId) {
     const q = orgId ? `?org_id=${encodeURIComponent(orgId)}` : "";
     return gFetch(`/v1/billing/mu${q}`, {}, { fallback: "Could not read MU balance" });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mnemom/mnemom",
-  "version": "0.17.0-next.5",
+  "version": "0.17.0-next.6",
   "description": "Transparent AI agent tracing",
   "type": "module",
   "bin": {