@mnemom/mnemom 0.17.13 → 0.17.14

package/dist/commands/agent-setup.d.ts

@@ -5,11 +5,13 @@
  * If a customer names no agent, `mnemom agent` launches under a per-customer
  * governed identity `agent-<handle>`. This module makes that identity REAL in
  * their Mnemom org: it births the agent through the gateway, claims it (so the
- * customer owns it), and publishes a sane default coding posture. The CARDS are
- * OFF by default (operator 2026-10-02: alignment and protection analysis are
- * billed, so nobody pays for them until they turn them on); the goal contract is
- * what nudges (re-anchor on drift). Specifically:
- *   - alignment card: autonomy_mode + integrity_mode = off,
+ * customer owns it), and publishes a sane default coding posture. Governance that
+ * costs a model call is OFF by default (operator 2026-10-02: AIP integrity and
+ * Safe House analysis are billed, so nobody pays for them until they turn them
+ * on); governance that costs none stays ON (operator 2026-10-03: autonomy is
+ * rules-only verification + policy). The goal contract is what nudges (re-anchor
+ * on drift). Specifically:
+ *   - alignment card: autonomy_mode = observe, integrity_mode = off,
  *     principal.relationship = delegated_authority, coding bounded/forbidden
  *     actions, escalate-on-irreversible;
  *   - protection card: mode = off, thresholds 0.60/0.80/0.95 and all four
@@ -17,7 +19,8 @@
  *   - goal-alignment: nudge — sealed per-conversation via the goal contract
  *     (--goal …), graded and re-anchored by the gateway.
  * `--governance [integrity,safe-house]` opts a setup in (observe-only, billed at
- * cost on top of the agent fee); a refresh of an already-claimed agent keeps the
+ * cost on top of the agent fee); `--no-governance` turns every card off, autonomy
+ * included; a refresh of an already-claimed agent keeps the
  * modes its own cards carry unless a --governance / --no-governance flag says otherwise.
  *
  * A launch never runs on an unclaimed agent (operator 2026-10-03): an unclaimed agent lands in
@@ -36,6 +39,12 @@ export type GovernanceMode = "off" | "observe";
  * the customer pays for at cost, so both are off unless asked for.
  */
 export interface GovernanceOptIn {
+    /**
+     * Autonomy verification + policy (alignment card autonomy_mode). Rules only, no
+     * model call, so it is on by default and under every `--governance` choice; only
+     * an explicit `--no-governance` turns it off.
+     */
+    autonomy: boolean;
     /** AIP integrity analysis (alignment card integrity_mode). */
     integrity: boolean;
     /** Safe House screening (protection card mode). */
@@ -45,9 +54,10 @@ export interface GovernanceOptIn {
 export declare const GOVERNANCE_FEATURES: readonly ["integrity", "safe-house"];
 /**
  * Parse the `--governance [features]` / `--no-governance` flag. undefined = not
- * given (new agents get none; a refresh keeps the agent's current modes),
- * true = every feature, false = none, a string = a comma-separated list of
- * `integrity`, `safe-house`, `all` or `none`. Throws on an unknown name.
+ * given (new agents get autonomy only; a refresh keeps the agent's current modes),
+ * true = every feature, false (`--no-governance`) = everything off, autonomy
+ * included, a string = a comma-separated list of `integrity`, `safe-house`, `all`
+ * or `none`, each keeping autonomy on. Throws on an unknown name.
  */
 export declare function parseGovernanceFlag(value: boolean | string | undefined): GovernanceOptIn | undefined;
 /**
@@ -55,14 +65,25 @@ export declare function parseGovernanceFlag(value: boolean | string | undefined)
  * whatever an existing agent's own cards already carry (kept as-is on a refresh).
  */
 export interface CardModes {
-    /** autonomy_mode — verification + policy. No model call, so not billed; kept as-is on a refresh. */
+    /** autonomy_mode — verification + policy. No model call, so not billed: observe by default, kept as-is on a refresh. */
     autonomy: string;
     integrity: string;
     protection: string;
+    /**
+     * enforcement.allow_unmapped_tools. A new observe agent gets true: its card maps no
+     * tools to capabilities, so under the deny default every Claude Code tool is an
+     * `unmapped_denied` violation (a "fail" verdict every turn, plus an awaited
+     * grace-period read). Forbidden-tool and tool_matches escalation rules still apply.
+     * A refresh keeps the agent's own value; undefined = write none.
+     */
+    allowUnmappedTools?: boolean;
 }
 /** One phrase for the posture line: "integrity off, Safe House off". */
 export declare function describeModes(m: Pick<CardModes, "integrity" | "protection">): string;
-/** The modes for a NEW agent: off unless --governance asks for a feature. */
+/**
+ * The modes for a NEW agent: autonomy observe (rules only, no model call) unless
+ * --no-governance; integrity and Safe House off unless --governance asks for them.
+ */
 export declare function newAgentModes(governance?: GovernanceOptIn): CardModes;
 /** Printed when a setup ran without --governance: how to opt in, and what it costs. */
 export declare const GOVERNANCE_OPT_IN_HINT: string;
@@ -234,5 +255,5 @@ export declare function resolvePreflightedAccount(): Promise<{
     orgLabel: string;
     entitlement: CodeEntitlement | null;
 }>;
-export declare function buildCodeAlignmentCard(agentId: string, modes?: Pick<CardModes, "autonomy" | "integrity">): Record<string, unknown>;
+export declare function buildCodeAlignmentCard(agentId: string, modes?: Pick<CardModes, "autonomy" | "integrity" | "allowUnmappedTools">): Record<string, unknown>;
 export declare function buildCodeProtectionCard(agentId: string, mode?: string): Record<string, unknown>;

package/dist/commands/agent-setup.js

@@ -5,11 +5,13 @@
  * If a customer names no agent, `mnemom agent` launches under a per-customer
  * governed identity `agent-<handle>`. This module makes that identity REAL in
  * their Mnemom org: it births the agent through the gateway, claims it (so the
- * customer owns it), and publishes a sane default coding posture. The CARDS are
- * OFF by default (operator 2026-10-02: alignment and protection analysis are
- * billed, so nobody pays for them until they turn them on); the goal contract is
- * what nudges (re-anchor on drift). Specifically:
- *   - alignment card: autonomy_mode + integrity_mode = off,
+ * customer owns it), and publishes a sane default coding posture. Governance that
+ * costs a model call is OFF by default (operator 2026-10-02: AIP integrity and
+ * Safe House analysis are billed, so nobody pays for them until they turn them
+ * on); governance that costs none stays ON (operator 2026-10-03: autonomy is
+ * rules-only verification + policy). The goal contract is what nudges (re-anchor
+ * on drift). Specifically:
+ *   - alignment card: autonomy_mode = observe, integrity_mode = off,
  *     principal.relationship = delegated_authority, coding bounded/forbidden
  *     actions, escalate-on-irreversible;
  *   - protection card: mode = off, thresholds 0.60/0.80/0.95 and all four
@@ -17,7 +19,8 @@
  *   - goal-alignment: nudge — sealed per-conversation via the goal contract
  *     (--goal …), graded and re-anchored by the gateway.
  * `--governance [integrity,safe-house]` opts a setup in (observe-only, billed at
- * cost on top of the agent fee); a refresh of an already-claimed agent keeps the
+ * cost on top of the agent fee); `--no-governance` turns every card off, autonomy
+ * included; a refresh of an already-claimed agent keeps the
  * modes its own cards carry unless a --governance / --no-governance flag says otherwise.
  *
  * A launch never runs on an unclaimed agent (operator 2026-10-03): an unclaimed agent lands in
@@ -47,22 +50,23 @@ const say = (line = "") => console.error(line);
 export const GOVERNANCE_FEATURES = ["integrity", "safe-house"];
 /**
  * Parse the `--governance [features]` / `--no-governance` flag. undefined = not
- * given (new agents get none; a refresh keeps the agent's current modes),
- * true = every feature, false = none, a string = a comma-separated list of
- * `integrity`, `safe-house`, `all` or `none`. Throws on an unknown name.
+ * given (new agents get autonomy only; a refresh keeps the agent's current modes),
+ * true = every feature, false (`--no-governance`) = everything off, autonomy
+ * included, a string = a comma-separated list of `integrity`, `safe-house`, `all`
+ * or `none`, each keeping autonomy on. Throws on an unknown name.
  */
 export function parseGovernanceFlag(value) {
     if (value === undefined)
         return undefined;
     if (typeof value === "boolean")
-        return { integrity: value, safeHouse: value };
-    const choice = { integrity: false, safeHouse: false };
+        return { autonomy: value, integrity: value, safeHouse: value };
+    const choice = { autonomy: true, integrity: false, safeHouse: false };
     const names = value
         .split(",")
         .map((s) => s.trim().toLowerCase())
         .filter(Boolean);
     if (names.length === 0)
-        return { integrity: true, safeHouse: true };
+        return { autonomy: true, integrity: true, safeHouse: true };
     for (const name of names) {
         if (name === "all") {
             choice.integrity = true;
@@ -102,15 +106,23 @@ async function existingAgentCard(kind, agentId) {
     const sources = await getCardSources(kind, agentId);
     return sources?.agent?.card_json ?? null;
 }
-/** The modes for a NEW agent: off unless --governance asks for a feature. */
+/**
+ * The modes for a NEW agent: autonomy observe (rules only, no model call) unless
+ * --no-governance; integrity and Safe House off unless --governance asks for them.
+ */
 export function newAgentModes(governance) {
-    const integrity = modeOf(governance?.integrity ?? false);
-    return { autonomy: integrity, integrity, protection: modeOf(governance?.safeHouse ?? false) };
+    const autonomy = modeOf(governance?.autonomy ?? true);
+    return {
+        autonomy,
+        integrity: modeOf(governance?.integrity ?? false),
+        protection: modeOf(governance?.safeHouse ?? false),
+        allowUnmappedTools: autonomy === "observe" ? true : undefined,
+    };
 }
 /**
  * The modes for refreshing an EXISTING agent: an explicit --governance /
  * --no-governance wins; else it keeps the modes its own cards carry. No agent-layer
- * card → off (it never had one; new setups are off). A card with no mode field →
+ * card → the new-agent defaults (it never had one). A card with no mode field →
  * observe (the prior CLI always wrote observe). A failed read → null: skip the refresh.
  */
 async function existingAgentModes(agentId, governance) {
@@ -129,11 +141,18 @@ async function existingAgentModes(agentId, governance) {
         say(fmt.dim("  Re-run `mnemom agent setup`, or pass --governance / --no-governance to set them."));
         return null;
     }
-    const integrity = align ? (modeField(align, "integrity_mode") ?? "observe") : "off";
+    const fresh = newAgentModes();
+    const ownAllow = align?.enforcement
+        ?.allow_unmapped_tools;
     return {
-        autonomy: align ? (modeField(align, "autonomy_mode") ?? "observe") : "off",
-        integrity,
-        protection: prot ? (modeField(prot, "mode") ?? "observe") : "off",
+        autonomy: align ? (modeField(align, "autonomy_mode") ?? "observe") : fresh.autonomy,
+        integrity: align ? (modeField(align, "integrity_mode") ?? "observe") : fresh.integrity,
+        protection: prot ? (modeField(prot, "mode") ?? "observe") : fresh.protection,
+        allowUnmappedTools: align
+            ? typeof ownAllow === "boolean"
+                ? ownAllow
+                : undefined
+            : fresh.allowUnmappedTools,
     };
 }
 /** Printed when a setup ran without --governance: how to opt in, and what it costs. */
@@ -335,9 +354,9 @@ async function confirmClaimed(opts, anchorKey, fp) {
     }
     say(fmt.success(`mnemom agent: claimed '${slug}' (${agentId}) in ${opts.orgLabel}.`));
     await noteSameNamedAgent(slug, agentId);
-    // Publish the default cards (off unless --governance). A card write that can't complete does
-    // NOT undo the claim — the agent is claimed and governed on whatever landed; we warn how to
-    // finish it.
+    // Publish the default cards (autonomy observe; integrity + Safe House off unless
+    // --governance). A card write that can't complete does NOT undo the claim — the agent is
+    // claimed and governed on whatever landed; we warn how to finish it.
     if (opts.setup !== false) {
         await publishDefaultCards(agentId, newAgentModes(opts.governance));
         if (!opts.governance)
@@ -714,15 +733,21 @@ export async function resolvePreflightedAccount() {
     return { orgId: active?.org_id ?? entitlement?.org_id ?? "", orgLabel, entitlement };
 }
 // ── The default coding posture (cards off; goal contracts nudge) ─────────────
-export function buildCodeAlignmentCard(agentId, modes = { autonomy: "off", integrity: "off" }) {
+export function buildCodeAlignmentCard(agentId, modes = {
+    autonomy: "off",
+    integrity: "off",
+}) {
     return {
         card_version: "unified/2026-04-26",
         agent_id: agentId,
         // Integrity off ⇒ the gateway skips the AIP checkpoint and the observer skips
-        // its trace analysis: no model call, no charge. A new agent's autonomy
-        // (verification + policy) follows it; a refresh keeps the agent's own.
+        // its trace analysis: no model call, no charge. Autonomy (verification +
+        // policy) is rules only: observe for a new agent; a refresh keeps the agent's own.
         autonomy_mode: modes.autonomy,
         integrity_mode: modes.integrity,
+        ...(modes.allowUnmappedTools === undefined
+            ? {}
+            : { enforcement: { allow_unmapped_tools: modes.allowUnmappedTools } }),
         principal: { type: "agent", identifier: agentId, relationship: "delegated_authority" },
         values: {
             declared: ["transparency", "safety", "honesty", "user_control", "harm_prevention"],

package/dist/commands/card.js

@@ -884,8 +884,9 @@ export async function cardEditCommand(agentName, options = {}) {
         cardYaml = yaml.dump({
             card_version: "unified/2026-04-26",
             agent_id: agentId,
-            autonomy_mode: "off",
+            autonomy_mode: "observe",
             integrity_mode: "off",
+            enforcement: { allow_unmapped_tools: true },
             principal: { type: "agent", identifier: agentId, relationship: "delegated_authority" },
             values: { declared: ["transparency", "safety", "honesty"] },
             autonomy: {

package/dist/commands/onboard.js

@@ -352,8 +352,8 @@ async function earnRating(agentId, steps, say) {
 }
 // ── starter alignment card ──────────────────────────────────────────────────────
 /**
- * A starter alignment card, `off` by default (alignment analysis is billed; the
- * user turns it on) — the honest, minimal declaration
+ * A starter alignment card: autonomy observe (rules only, no model call), integrity
+ * `off` (alignment analysis is billed; the user turns it on) — the honest, minimal declaration
  * of intent for a freshly-onboarded agent. Mirrors the shape `wrap` seeds so the
  * two skill-runners produce a consistent first card.
  */
@@ -361,8 +361,10 @@ function buildStarterAlignmentCard(agentId) {
     return {
         card_version: "unified/2026-04-26",
         agent_id: agentId,
-        autonomy_mode: "off",
+        autonomy_mode: "observe",
         integrity_mode: "off",
+        // No capability mappings here, so unmapped tools must pass or every turn fails.
+        enforcement: { allow_unmapped_tools: true },
         principal: { type: "agent", identifier: agentId, relationship: "delegated_authority" },
         values: { declared: ["transparency", "safety", "honesty"] },
         autonomy: {

package/dist/commands/wrap.js

@@ -256,8 +256,10 @@ function buildStarterAlignmentCard(agentId) {
     return {
         card_version: "unified/2026-04-26",
         agent_id: agentId,
-        autonomy_mode: "off",
+        autonomy_mode: "observe",
         integrity_mode: "off",
+        // No capability mappings here, so unmapped tools must pass or every turn fails.
+        enforcement: { allow_unmapped_tools: true },
         principal: { type: "agent", identifier: agentId, relationship: "delegated_authority" },
         values: { declared: ["transparency", "safety", "honesty"] },
         autonomy: {

package/dist/index.js

@@ -173,8 +173,8 @@ const agentCmd = program
     .option("--invite <token>", "Redeem a Mnemom Agent invitation (pinv_…): unlocks Mnemom Agent for you + credits your starter µ; launches too when a session name is given")
     .option("--setup", "Re-check the served agent and refresh its default cards before launch")
     .option("--no-setup", "Skip the default-card writes (the agent is still confirmed and claimed)")
-    .option("--governance [features]", "Turn governance ON for the agent's cards: AIP integrity analysis + Safe House screening, observe-only (default: off for new agents). Pick features with a comma list: integrity, safe-house. Billed at cost on top of the agent fee")
-    .option("--no-governance", "Turn governance OFF for the agent's cards (a card refresh otherwise keeps an existing agent's modes)")
+    .option("--governance [features]", "Turn governance ON for the agent's cards: AIP integrity analysis + Safe House screening, observe-only (default: off for new agents; autonomy policy checks are rules only and on either way). Pick features with a comma list: integrity, safe-house. Billed at cost on top of the agent fee")
+    .option("--no-governance", "Turn governance OFF for the agent's cards, autonomy policy checks included (by default new agents run autonomy observe, rules only; a card refresh otherwise keeps an existing agent's modes)")
     .option("--no-yolo", "Do NOT pass --dangerously-skip-permissions (yolo is on by default)")
     .option("--no-context-hint", "Do NOT seed Claude Code's context-hint feature flag before launch")
     .addOption(new Option("--slack", "EXPERIMENTAL (`mnemom experimental enable slack`): attach the Slack channel — messages addressed to this session arrive in it, and it can reply (see `mnemom agent slack`)").hideHelp(hiddenUnless("slack")))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mnemom/mnemom",
-  "version": "0.17.13",
+  "version": "0.17.14",
   "description": "Transparent AI agent tracing",
   "type": "module",
   "bin": {