@mnemom/mnemom 0.17.28 → 0.17.29

package/dist/commands/agent-session.js

@@ -22,7 +22,8 @@
  */
 import { basename } from "node:path";
 import { sanitizeAgentName } from "../lib/agent.js";
-export const NO_SESSION_NAME_MESSAGE = "mnemom agent: a session name is required here (e.g. `mnemom agent onboarding`). " +
+export const NO_SESSION_NAME_MESSAGE = "mnemom agent: a session name is required here: pass it before `--` (e.g. `mnemom agent onboarding`) " +
+    "or as `--name <x>` (also `-n <x>` / `--name=<x>`) after `--` (e.g. `mnemom agent -- --name onboarding -p …`). " +
     "In a terminal, plain `mnemom agent` asks for one.";
 /** Current folder name, sanitised like an agent slug; "session" when that is empty. */
 export function defaultSessionName(cwd = process.cwd()) {

package/dist/commands/agent-setup.d.ts

@@ -391,7 +391,7 @@ export declare function resolvePreflightedAccount(): Promise<{
  * absent or older, and leaves one at this version or newer as it is. Bump it whenever
  * the content below changes. (`card_version` is the schema date, not this.)
  */
-export declare const CODE_CARD_CONTENT_VERSION = "mnemom-agent-default/2.1.0";
+export declare const CODE_CARD_CONTENT_VERSION = "mnemom-agent-default/2.1.2";
 /**
  * Whether a refresh should replace this card's content with the current default: true when
  * it carries no content_version, or an older (or unparseable) `mnemom-agent-default/` one.
@@ -412,6 +412,7 @@ export interface CardPrincipal {
  * takes a role or org, not personal data. The agent is never its own principal.
  */
 export declare function orgPrincipal(orgId?: string | null): CardPrincipal;
+export declare const IN_PLACE_FLOOR: number[];
 export declare function buildCodeAlignmentCard(agentId: string, modes?: Pick<CardModes, "autonomy" | "integrity" | "allowUnmappedTools">, principal?: CardPrincipal): Record<string, unknown>;
 export declare function buildCodeProtectionCard(agentId: string, mode?: string): Record<string, unknown>;
 export {};

package/dist/commands/agent-setup.js

@@ -903,13 +903,15 @@ export function keptPrincipal(own, opts) {
  *
  * `existing` (a refresh that read the agent's own cards) decides content per card: a card
  * that is missing, carries no content_version, or an older default gets the current default
- * content; a card already at this default or a newer one keeps its own content and only has
- * its modes set. Without `existing` (a new agent, or a refresh a --governance flag decided)
+ * content, except a 2.1.x default, which is brought forward in place (upgradeInPlace) so its
+ * edits survive; a card already at this default or a newer one keeps its own content and only
+ * has its modes set. Without `existing` (a new agent, or a refresh a --governance flag decided)
  * both cards get the current default content.
  */
 async function publishDefaultCards(agentId, modes, opts = {}) {
-    const ownAlign = opts.existing?.align;
-    const ownProt = opts.existing?.prot;
+    // A 2.1.x card is brought forward in place first (upgradeInPlace), so it is then kept.
+    const ownAlign = carryForward(opts.existing?.align, "alignment");
+    const ownProt = carryForward(opts.existing?.prot, "protection");
     const keepAlign = !!ownAlign && !needsContentUpgrade(ownAlign);
     const keepProt = !!ownProt && !needsContentUpgrade(ownProt);
     // A kept card's principal follows the agent's current org (keptPrincipal).
@@ -1215,12 +1217,20 @@ export async function resolvePreflightedAccount() {
  * absent or older, and leaves one at this version or newer as it is. Bump it whenever
  * the content below changes. (`card_version` is the schema date, not this.)
  */
-export const CODE_CARD_CONTENT_VERSION = "mnemom-agent-default/2.1.0";
+export const CODE_CARD_CONTENT_VERSION = "mnemom-agent-default/2.1.2";
 const CONTENT_LINEAGE = "mnemom-agent-default/";
 function parseContentSemver(v) {
     const m = /^(\d+)\.(\d+)\.(\d+)$/.exec(v);
     return m ? [Number(m[1]), Number(m[2]), Number(m[3])] : null;
 }
+/** Negative, zero or positive as semver `a` is older than, equal to or newer than `b`. */
+function compareSemver(a, b) {
+    for (let i = 0; i < 3; i++) {
+        if (a[i] !== b[i])
+            return a[i] - b[i];
+    }
+    return 0;
+}
 /**
  * Whether a refresh should replace this card's content with the current default: true when
  * it carries no content_version, or an older (or unparseable) `mnemom-agent-default/` one.
@@ -1291,6 +1301,114 @@ const CODE_BOUNDED_ACTIONS = [
     "WebFetch",
     "WebSearch",
 ];
+// Cross-session messaging between Claude Code sessions (2.1.1). Mapped to a capability, the
+// lane-lead card's shape: the card names `converse` with its tools, and each tool is bounded
+// as "<tool>: converse" (AAP checks the part before the colon, so the observer agrees).
+const CODE_CONVERSE_TOOLS = ["SendMessage", "ListAgents"];
+// A session's own schedule (2.1.2), e.g. a seat's hourly self-check. Same shape, its own
+// capability: none of these talks to another session, and `scheduling` is the policy engine's
+// catalog name for exactly these four tools.
+const CODE_SCHEDULING_TOOLS = ["CronCreate", "CronDelete", "CronList", "ScheduleWakeup"];
+/**
+ * The capabilities the default maps, each with the version that added it. Every version
+ * since IN_PLACE_FLOOR only ADDED one of these (the capability and its "<tool>: <capability>"
+ * bounded actions), which is what lets upgradeInPlace bring a card forward without replacing
+ * it. A version that changes or removes default content (or changes the protection card)
+ * must raise IN_PLACE_FLOOR to itself, so older cards are replaced whole again.
+ */
+const CODE_CAPABILITIES = [
+    {
+        name: "converse",
+        since: [2, 1, 1],
+        description: "Message and list the other Claude Code sessions",
+        tools: CODE_CONVERSE_TOOLS,
+    },
+    {
+        name: "scheduling",
+        since: [2, 1, 2],
+        description: "Schedule, list and cancel this session's own checks",
+        tools: CODE_SCHEDULING_TOOLS,
+    },
+];
+export const IN_PLACE_FLOOR = [2, 1, 0];
+/**
+ * Whether an AAP action list names `tool`: a case-insensitive exact match, or the part before
+ * ':' of a "name: description" entry. The policy engine's own rule (shared/policy-engine
+ * src/action-list.ts actionListIncludes), mirrored because the CLI's engine dependency is the
+ * published 0.3.0, which predates it.
+ */
+function actionListNames(list, tool) {
+    const target = tool.toLowerCase();
+    return list.some((entry) => {
+        if (typeof entry !== "string")
+            return false;
+        if (entry.toLowerCase() === target)
+            return true;
+        const colon = entry.indexOf(":");
+        return colon > 0 && entry.substring(0, colon).trim().toLowerCase() === target;
+    });
+}
+/**
+ * A stamped default from IN_PLACE_FLOOR up to (not including) this version, brought forward
+ * in place: its own content kept (`mnemom card edit` round-trips the stamp, so it may carry
+ * the customer's edits), plus each capability added since its version, stamped current.
+ * A capability the card already declares is the customer's and is left as it is, with no
+ * bounded actions added for it; a tool the card already names in bounded_actions or
+ * forbidden_actions is not bound again. Null when the card is not such a default (an older
+ * one), or has no autonomy.bounded_actions list to bind into (the api requires one): either
+ * is replaced whole, as before. A forbidden_actions that is not a list of strings may hold a
+ * forbid this cannot read, so it fails closed: no capability is added and nothing is bound;
+ * the card keeps its own content and is restamped. So is a NARROWED card, one whose
+ * bounded_actions no longer names every tool its stamped version's default bounded.
+ *
+ * Called only by carryForward, after needsContentUpgrade: the stamp is then absent,
+ * unparseable, or an older default of this lineage, so only the floor needs checking.
+ */
+function upgradeInPlace(card, kind) {
+    const v = card.content_version;
+    const have = typeof v === "string" ? parseContentSemver(v.slice(CONTENT_LINEAGE.length)) : null;
+    if (!have || compareSemver(have, IN_PLACE_FLOOR) < 0)
+        return null;
+    const upgraded = { ...card, content_version: CODE_CARD_CONTENT_VERSION };
+    if (kind === "protection")
+        return upgraded;
+    const autonomy = card.autonomy;
+    if (!isRecord(autonomy) || !Array.isArray(autonomy.bounded_actions))
+        return null;
+    const forbidden = autonomy.forbidden_actions ?? [];
+    if (!Array.isArray(forbidden) || forbidden.some((entry) => typeof entry !== "string")) {
+        return upgraded;
+    }
+    const bounded = [...autonomy.bounded_actions];
+    // A card cut below its version's default bounded set was narrowed on purpose, so it gains
+    // no grant (0.17.28 would not have touched it either): restamped with its own content.
+    const stampedDefault = [
+        ...CODE_BOUNDED_ACTIONS,
+        ...CODE_CAPABILITIES.filter((cap) => compareSemver(cap.since, have) <= 0).flatMap((cap) => cap.tools),
+    ];
+    if (!stampedDefault.every((tool) => actionListNames(bounded, tool)))
+        return upgraded;
+    const capabilities = isRecord(card.capabilities) ? { ...card.capabilities } : {};
+    for (const cap of CODE_CAPABILITIES) {
+        if (compareSemver(cap.since, have) <= 0 || cap.name in capabilities)
+            continue;
+        capabilities[cap.name] = { description: cap.description, tools: [...cap.tools] };
+        for (const tool of cap.tools) {
+            if (!actionListNames(bounded, tool) && !actionListNames(forbidden, tool)) {
+                bounded.push(`${tool}: ${cap.name}`);
+            }
+        }
+    }
+    upgraded.capabilities = capabilities;
+    upgraded.autonomy = { ...autonomy, bounded_actions: bounded };
+    return upgraded;
+}
+/** An existing card as a refresh decides on it: a 2.1.x default brought forward in place. */
+function carryForward(card, kind) {
+    if (!card || !needsContentUpgrade(card))
+        return card;
+    return upgradeInPlace(card, kind) ?? card;
+}
 export function buildCodeAlignmentCard(agentId, modes = {
     autonomy: "off",
     integrity: "off",
@@ -1339,8 +1457,15 @@ export function buildCodeAlignmentCard(agentId, modes = {
                 },
             },
         },
+        capabilities: Object.fromEntries(CODE_CAPABILITIES.map((cap) => [
+            cap.name,
+            { description: cap.description, tools: [...cap.tools] },
+        ])),
         autonomy: {
-            bounded_actions: [...CODE_BOUNDED_ACTIONS],
+            bounded_actions: [
+                ...CODE_BOUNDED_ACTIONS,
+                ...CODE_CAPABILITIES.flatMap((cap) => cap.tools.map((tool) => `${tool}: ${cap.name}`)),
+            ],
             forbidden_actions: [
                 "force_push",
                 "push_protected_branch",

package/dist/commands/agent.js

@@ -45,7 +45,7 @@ import { askInput, askSelect, askYesNo, isInteractive } from "../lib/prompt.js";
 import { authConfigured, chooseAuth, detectClaudeLogin, readClaudeLoginState, } from "../lib/login-detect.js";
 import { goalAlignmentLine, resolveSessionSetup } from "./agent-session.js";
 import { defaultAgentSlug, ensureClaimedServedAgent, ensureSessionAndBalance, isQuietPreambleExit, readComposedProtection, resolveDefaultSlug, resolvePinnedAgent, resolvePreflightedAccount, } from "./agent-setup.js";
-import { assembleContract, buildGoalModeHeader, buildCustomHeaders, buildHandoffMcpConfigJson, buildSessionConfig, buildSessionConfigB64, assertCompactAtCompatible, assertOffProfileCompatible, compactAtWindowWarning, describeCompactAt, launchWindow, resolveCompactAt, applyGatewayHintHeaders, resolveCompactionIntercept, resolveContextHandoff, resolveContextProfile, resolveHandoffGatewayHost, resolveUsageSavings, HANDOFF_RC_KEY_ENV_NAME, HANDOFF_RC_MNEMOM_KEY_ENV_NAME, malformedAgentIdMessage, parseAgentRef, isProdGateway, launchPreferenceExplicit, launchPreflighted, remoteControlAllowed, applyToolSearchDefault, DISABLE_1M_ENV, readCcSettings, passthroughModel, resolveWindowModel, resolveAnthropicDoor, resolveLaunchModel, resolveConversationId, resolveGatewayHost, singleCellError, resolveLaunchShape, resolveRemoteControlShape, passthroughName, sanitizeAgentName, resumeCommand, sessionDisplayName, SESSION_NAME_ENV, SESSION_CONFIG_HEADER, } from "../lib/agent.js";
+import { assembleContract, buildGoalModeHeader, buildCustomHeaders, buildHandoffMcpConfigJson, buildSessionConfig, buildSessionConfigB64, assertCompactAtCompatible, assertOffProfileCompatible, compactAtWindowWarning, describeCompactAt, launchWindow, resolveCompactAt, applyGatewayHintHeaders, resolveCompactionIntercept, resolveContextHandoff, resolveContextProfile, resolveHandoffGatewayHost, resolveUsageSavings, HANDOFF_RC_KEY_ENV_NAME, HANDOFF_RC_MNEMOM_KEY_ENV_NAME, malformedAgentIdMessage, parseAgentRef, isProdGateway, launchPreferenceExplicit, launchPreflighted, remoteControlAllowed, applyToolSearchDefault, DISABLE_1M_ENV, readCcSettings, passthroughModel, resolveWindowModel, resolveAnthropicDoor, resolveLaunchModel, resolveConversationId, resolveGatewayHost, singleCellError, resolveLaunchShape, resolveRemoteControlShape, liftPassthroughName, passthroughName, sanitizeAgentName, resumeCommand, sessionDisplayName, SESSION_NAME_ENV, SESSION_CONFIG_HEADER, } from "../lib/agent.js";
 import { LAUNCHER_STORE_PATH, mergeStore } from "../lib/launcher-store.js";
 import { slackChannelArgs } from "../lib/slack-launch.js";
 import { appendPluginDirsEnv, applyPluginEnv, pluginEnabled, pluginPlanLine, resolvePluginDir, } from "../lib/claude-plugin.js";
@@ -163,6 +163,9 @@ function windowModelFor(options, cli) {
 }
 /** Entry point for `mnemom agent [scenario]`. Throws on fatal misconfig. */
 export async function agentCommand(scenarioArg, options = {}) {
+    // An unusable name after `--` refuses here, as a rejected launch: the RC path lifts it again
+    // in the proxy-ready timer, where a throw would be an uncaught crash, not a refusal.
+    liftPassthroughName(options.passthrough ?? []);
     // ── session name + goal ── (a bare `mnemom agent` in a terminal asks for the name;
     // goal alignment is resolved upstream: --goal seals a contract, implicit alignment
     // is on by default only while the `implicit` experimental feature is on.
@@ -1515,18 +1518,10 @@ function launchRemoteControl(ctx) {
 }
 function spawnRcCli(ctx) {
     // Session name for the claude.ai session list: "<agent>-<scenario>", unless
-    // the caller passed their own `--name <x>` after `--` (lifted out here).
-    const rawPassthrough = ctx.options.passthrough ?? [];
-    let rcName = sessionDisplayName(ctx.agent, ctx.scenario);
-    const passthrough = [];
-    for (let i = 0; i < rawPassthrough.length; i++) {
-        if (rawPassthrough[i] === "--name" && i + 1 < rawPassthrough.length) {
-            rcName = rawPassthrough[i + 1];
-            i++; // consume the value
-            continue;
-        }
-        passthrough.push(rawPassthrough[i]);
-    }
+    // the caller passed their own name after `--` (`--name x`, `--name=x`, `-n x`; lifted out here).
+    const lifted = liftPassthroughName(ctx.options.passthrough ?? []);
+    const rcName = lifted.name ?? sessionDisplayName(ctx.agent, ctx.scenario);
+    const passthrough = lifted.rest;
     const scopedOptions = { ...ctx.options, passthrough };
     // Every auth-shaped ANTHROPIC_* var is UNSET so the RC gate sees a first-party
     // OAuth setup; NO_PROXY/HTTP_PROXY unset so api.anthropic.com is not excluded.
@@ -1605,7 +1600,9 @@ function spawnRcCli(ctx) {
     else {
         // Interactive RC in THIS terminal: the CLI's own `--remote-control <name>`
         // startup flag; --model/--effort/--trim-mcp/yolo apply as in a normal launch.
-        // buildCliArgs already includes the (name-stripped) passthrough.
+        // buildCliArgs already includes the (name-stripped) passthrough. `--name` carries the
+        // same name to the session itself, so its cross-session name (what ListAgents and
+        // SendMessage address) is the seat name, not one Claude Code picks.
         const flagArgs = buildCliArgs(scopedOptions, {
             yolo: ctx.yolo,
             allowCliFlags: true,
@@ -1613,7 +1610,7 @@ function spawnRcCli(ctx) {
             handoffMcpConfigPath: ctx.handoffMcpConfigPath,
             pluginDir: ctx.plugin?.dir,
         });
-        args = ["--remote-control", rcName, ...flagArgs];
+        args = ["--remote-control", rcName, "--name", rcName, ...flagArgs];
         if (ctx.options.slack)
             args.push(...slackChannelArgs(rcName));
         say(`mnemom agent: remote-control: interactive session in THIS terminal with Remote Control on (session name '${rcName}'); it also appears under Remote Control at claude.ai/code and in the Claude app. Exit the CLI to stop everything.`);

package/dist/commands/wrap.js

@@ -20,6 +20,7 @@ import { mergeAgentConfig } from "../lib/agent-config.js";
 import { askSelect, askInput, isInteractive } from "../lib/prompt.js";
 import { getGatewayUrl } from "../lib/config.js";
 import { fmt } from "../lib/format.js";
+import { OPENAI_WRAP_DEFAULT_MODEL, openaiBirthProbeBody } from "../lib/birth-probe.js";
 const AGENT_HEADER = "x-mnemom-agent";
 const PROVIDERS = {
     anthropic: {
@@ -33,9 +34,7 @@ const PROVIDERS = {
         label: "OpenAI",
         keyEnv: "OPENAI_API_KEY",
         keyHeader: "Authorization",
-        // gpt-6-luna: the successor MNE-8754 ruled for gpt-4o-mini, which OpenAI shuts down
-        // 2027-01-14 (MNE-8755).
-        defaultModel: "gpt-6-luna",
+        defaultModel: OPENAI_WRAP_DEFAULT_MODEL,
         basePath: "/openai",
     },
     gemini: {
@@ -220,14 +219,7 @@ export async function birthThroughGateway(gatewayUrl, provider, agentName, provi
     switch (provider) {
         case "openai":
             url = `${gatewayUrl}${prov.basePath}/v1/chat/completions`;
-            // max_completion_tokens, not max_tokens: gpt-6-luna is a reasoning-profile model and
-            // OpenAI rejects max_tokens for those on Chat Completions (models-registry.ts
-            // REASONING_SUPPORTED_PARAMS). Older chat models accept max_completion_tokens too.
-            body = JSON.stringify({
-                model: prov.defaultModel,
-                max_completion_tokens: 16,
-                messages: [{ role: "user", content: "hello" }],
-            });
+            body = JSON.stringify(openaiBirthProbeBody(prov.defaultModel));
             break;
         case "gemini":
             url = `${gatewayUrl}${prov.basePath}/v1beta/models/${prov.defaultModel}:generateContent`;

package/dist/index.js

@@ -37,7 +37,7 @@ import { applyConfigToEnv, launcherEntries, loadLauncherConfig, withoutDisabledE
 import { loadExperimentalState } from "./lib/cli-config.js";
 import { assertEnabled, EXPERIMENTAL_CONTRACT, gateCheck, ignoredSettingLines, reportCliError, } from "./lib/experimental.js";
 import { experimentalDisableCommand, experimentalEnableCommand, experimentalListCommand, runExperimentalMigration, } from "./commands/experimental.js";
-import { parseCompactAt, parseContextProfile, resolveImplicit, selectLaunchAgent, } from "./lib/agent.js";
+import { parseCompactAt, parseContextProfile, resolveImplicit, selectLaunchAgent, splitSessionArg, } from "./lib/agent.js";
 import { wrapCommand } from "./commands/wrap.js";
 import { onboardCommand } from "./commands/onboard.js";
 import { skillsListCommand, skillsDescribeCommand } from "./commands/skills.js";
@@ -228,8 +228,13 @@ const agentCmd = program
     .option("--no-compaction-intercept", "Turn the compaction intercept off for this launch (it is on by default) — Claude Code's compaction goes to the model as usual. To turn it off for every launch: config key compaction_intercept = false, or env MNEMOM_AGENT_COMPACTION_INTERCEPT=0")
     .option("--dry-run", "Print the resolved launch plan and exit — no key read, no spawn")
     .option("--first-run", "Show the first-run look again: what Mnemom would have saved on your last 30 days of Claude Code (runs on this machine, read-only, nothing uploaded) — then exit")
-    .action(async (scenario, passthrough, opts) => {
+    .action(async (sessionArg, passthroughArg, opts) => {
+    let scenario;
+    let passthrough;
     try {
+        // A Claude Code flag after `--` is never the session name, and an unusable or reserved
+        // name given there refuses before any sub-verb runs (splitSessionArg).
+        ({ scenario, passthrough } = splitSessionArg(sessionArg, passthroughArg));
         // `help` is reserved: `mnemom agent help [verb]` prints help and never launches
         // (nor redeems an --invite). Without this, `help` was taken as a session name and
         // the verb passed through to Claude Code as the opening prompt.

package/dist/lib/agent.d.ts

@@ -322,8 +322,37 @@ export declare function resumeCommand(ctx: {
 }): string;
 /** The session display name: "<agent>-<scenario>" (sanitised), else the agent slug. */
 export declare function sessionDisplayName(agent: string, scenario: string): string;
-/** A caller's own `--name <x>` in the passthrough args, if any (last one wins). */
+/**
+ * A caller's own session name in the Claude Code args after `--`, in each spelling Claude Code
+ * takes (`--name <x>`, `--name=<x>`, `-n <x>`; the last one wins), and the args without them.
+ * Throws when a name is given but unusable: no value, a flag as its value (`--name -p x` would
+ * take `-p` and drop headless mode), or a name with no letters or digits (blank, `!!!`), which
+ * would share its Slack state files with every other such name (normSession is empty).
+ */
+export declare function liftPassthroughName(passthrough: readonly string[]): {
+    name: string | undefined;
+    rest: string[];
+};
+/** A caller's own session name in the passthrough args, if any (liftPassthroughName). */
 export declare function passthroughName(passthrough: readonly string[]): string | undefined;
+/**
+ * The words `mnemom agent [session]` routes to a sub-verb (or a commander subcommand), so a
+ * session can never take one through `--name`: `-- --name setup -p x` would run provisioning.
+ */
+export declare const AGENT_SUB_VERBS: ReadonlySet<string>;
+/**
+ * The session name and Claude Code args of `mnemom agent [session] [passthrough...]`, with a
+ * flag commander took as the session put back. Commander fills `[session]` with the first
+ * operand even after `--`, so `mnemom agent -- --name x -p` arrived as session "--name" and
+ * passthrough `x -p` (probe P8). A leading-dash session can only have come from after `--`
+ * (before it, commander parses a flag as an option), so it returns to the front of the
+ * passthrough; with no session left, a passthrough `--name <x>` names it. Throws on an
+ * unusable name (liftPassthroughName) or a sub-verb word (AGENT_SUB_VERBS).
+ */
+export declare function splitSessionArg(session: string | undefined, passthrough: readonly string[]): {
+    scenario: string | undefined;
+    passthrough: string[];
+};
 /** A single-line, header-safe conversation id: honour a caller value, else a uuid. */
 export declare function resolveConversationId(raw: string | undefined): string;
 /** A strictly-positive integer (rejects 0, negatives, decimals, NaN, non-numeric strings). */

package/dist/lib/agent.js

@@ -23,6 +23,7 @@ import { createHash, randomUUID } from "node:crypto";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";
 import { getGatewayUrl } from "./config.js";
+import { normSession } from "./slack-route.js";
 /** The us-2/prod gateway host. The default door — never any other cell silently. */
 export const PROD_GATEWAY_HOST = "https://gateway.mnemom.ai";
 /**
@@ -384,14 +385,80 @@ export function resumeCommand(ctx) {
 export function sessionDisplayName(agent, scenario) {
     return sanitizeAgentName(`${agent}-${scenario}`) || agent;
 }
-/** A caller's own `--name <x>` in the passthrough args, if any (last one wins). */
-export function passthroughName(passthrough) {
+/**
+ * A caller's own session name in the Claude Code args after `--`, in each spelling Claude Code
+ * takes (`--name <x>`, `--name=<x>`, `-n <x>`; the last one wins), and the args without them.
+ * Throws when a name is given but unusable: no value, a flag as its value (`--name -p x` would
+ * take `-p` and drop headless mode), or a name with no letters or digits (blank, `!!!`), which
+ * would share its Slack state files with every other such name (normSession is empty).
+ */
+export function liftPassthroughName(passthrough) {
     let name;
-    for (let i = 0; i < passthrough.length - 1; i++) {
-        if (passthrough[i] === "--name")
-            name = passthrough[i + 1];
+    const rest = [];
+    for (let i = 0; i < passthrough.length; i++) {
+        const arg = passthrough[i];
+        if (arg.startsWith("--name=")) {
+            name = arg.slice("--name=".length);
+        }
+        else if (arg === "--name" || arg === "-n") {
+            const value = passthrough[i + 1];
+            if (value === undefined || value.startsWith("-")) {
+                throw new Error(`mnemom agent: ${arg} needs a session name after it (e.g. \`${arg} onboarding\`), not ${value === undefined ? "nothing" : `the flag \`${value}\``}.`);
+            }
+            name = value;
+            i++;
+        }
+        else {
+            rest.push(arg);
+            continue;
+        }
+        if (!normSession(name)) {
+            throw new Error(`mnemom agent: '${name}' is not a usable session name: give it a letter or a digit.`);
+        }
+    }
+    return { name, rest };
+}
+/** A caller's own session name in the passthrough args, if any (liftPassthroughName). */
+export function passthroughName(passthrough) {
+    return liftPassthroughName(passthrough).name;
+}
+/**
+ * The words `mnemom agent [session]` routes to a sub-verb (or a commander subcommand), so a
+ * session can never take one through `--name`: `-- --name setup -p x` would run provisioning.
+ */
+export const AGENT_SUB_VERBS = new Set([
+    "help",
+    "invite",
+    "config",
+    "slack",
+    "doctor",
+    "setup",
+    "list",
+    "claim",
+    "move",
+    "export",
+    "sessions",
+    "show",
+    "goal",
+]);
+/**
+ * The session name and Claude Code args of `mnemom agent [session] [passthrough...]`, with a
+ * flag commander took as the session put back. Commander fills `[session]` with the first
+ * operand even after `--`, so `mnemom agent -- --name x -p` arrived as session "--name" and
+ * passthrough `x -p` (probe P8). A leading-dash session can only have come from after `--`
+ * (before it, commander parses a flag as an option), so it returns to the front of the
+ * passthrough; with no session left, a passthrough `--name <x>` names it. Throws on an
+ * unusable name (liftPassthroughName) or a sub-verb word (AGENT_SUB_VERBS).
+ */
+export function splitSessionArg(session, passthrough) {
+    if (!session?.startsWith("-"))
+        return { scenario: session, passthrough: [...passthrough] };
+    const args = [session, ...passthrough];
+    const scenario = passthroughName(args);
+    if (scenario !== undefined && AGENT_SUB_VERBS.has(scenario.trim().toLowerCase())) {
+        throw new Error(`mnemom agent: '${scenario}' is a \`mnemom agent\` sub-verb, not a session name; pass another --name.`);
     }
-    return name;
+    return { scenario, passthrough: args };
 }
 /** A single-line, header-safe conversation id: honour a caller value, else a uuid. */
 export function resolveConversationId(raw) {

package/dist/lib/birth-probe.d.ts

@@ -0,0 +1,20 @@
+/**
+ * The OpenAI half of `mnemom wrap`'s birth probe, kept free of imports so
+ * `gateway/test/providers-live/openai-live.test.ts` can send these exact bytes
+ * to OpenAI without installing the CLI's dependencies (MNE-8755).
+ */
+export declare const OPENAI_WRAP_DEFAULT_MODEL = "gpt-6-luna";
+/**
+ * Chat Completions body for the one-time birth call. max_completion_tokens, not
+ * max_tokens: gpt-6-luna is a reasoning-profile model and OpenAI rejects max_tokens
+ * for those on Chat Completions (models-registry.ts REASONING_SUPPORTED_PARAMS).
+ * Older chat models accept max_completion_tokens too.
+ */
+export declare function openaiBirthProbeBody(model: string): {
+    model: string;
+    max_completion_tokens: number;
+    messages: {
+        role: "user";
+        content: string;
+    }[];
+};

package/dist/lib/birth-probe.js

@@ -0,0 +1,21 @@
+/**
+ * The OpenAI half of `mnemom wrap`'s birth probe, kept free of imports so
+ * `gateway/test/providers-live/openai-live.test.ts` can send these exact bytes
+ * to OpenAI without installing the CLI's dependencies (MNE-8755).
+ */
+// gpt-6-luna replaces gpt-4o-mini, which OpenAI shuts down 2027-01-14. MNE-8754 ruled the
+// successor; MNE-8755 made the switch.
+export const OPENAI_WRAP_DEFAULT_MODEL = "gpt-6-luna";
+/**
+ * Chat Completions body for the one-time birth call. max_completion_tokens, not
+ * max_tokens: gpt-6-luna is a reasoning-profile model and OpenAI rejects max_tokens
+ * for those on Chat Completions (models-registry.ts REASONING_SUPPORTED_PARAMS).
+ * Older chat models accept max_completion_tokens too.
+ */
+export function openaiBirthProbeBody(model) {
+    return {
+        model,
+        max_completion_tokens: 16,
+        messages: [{ role: "user", content: "hello" }],
+    };
+}

package/dist/lib/config.d.ts

@@ -10,11 +10,17 @@ export declare const MNEMOM_DIR: string;
 export type Environment = "production" | "local";
 /**
  * Thrown for `MNEMOM_ENV=staging`: the value used to be accepted, and the ring
- * it named is gone (MNE-7968). Failing loud is deliberate — the two silent
- * alternatives are both wrong: resolving to the dead staging hostnames makes
- * every call fail with a DNS/connection error that does not say why, and
- * falling through to production would send a caller who asked for a non-prod
- * ring at real customer data.
+ * it named is gone (MNE-7968, retired 2026-10-08 by platform#2446). Failing
+ * loud is deliberate. The two silent alternatives are both wrong: resolving to
+ * the dead staging hostnames makes every call fail with a DNS/connection error
+ * that does not say why, and falling through to production would send a caller
+ * who asked for a non-prod ring at real customer data.
+ *
+ * The message is customer-facing (published CLI), so it names only the public
+ * values. No internal card ids, no internal rings (MNE-8291: the Azure test
+ * cell is not a customer surface), and no link: the staging retirement has no
+ * public changelog entry by ruling (2026-10-16), so the message carries the
+ * facts itself.
  */
 export declare class RetiredEnvironmentError extends Error {
     constructor();

package/dist/lib/config.js

@@ -23,18 +23,22 @@ const WEBSITE_URLS = {
 };
 /**
  * Thrown for `MNEMOM_ENV=staging`: the value used to be accepted, and the ring
- * it named is gone (MNE-7968). Failing loud is deliberate — the two silent
- * alternatives are both wrong: resolving to the dead staging hostnames makes
- * every call fail with a DNS/connection error that does not say why, and
- * falling through to production would send a caller who asked for a non-prod
- * ring at real customer data.
+ * it named is gone (MNE-7968, retired 2026-10-08 by platform#2446). Failing
+ * loud is deliberate. The two silent alternatives are both wrong: resolving to
+ * the dead staging hostnames makes every call fail with a DNS/connection error
+ * that does not say why, and falling through to production would send a caller
+ * who asked for a non-prod ring at real customer data.
+ *
+ * The message is customer-facing (published CLI), so it names only the public
+ * values. No internal card ids, no internal rings (MNE-8291: the Azure test
+ * cell is not a customer surface), and no link: the staging retirement has no
+ * public changelog entry by ruling (2026-10-16), so the message carries the
+ * facts itself.
  */
 export class RetiredEnvironmentError extends Error {
     constructor() {
-        super("MNEMOM_ENV=staging is no longer supported: the staging ring was retired (MNE-7968) " +
-            "and nothing serves api-staging / gateway-staging.mnemom.ai. " +
-            "Use MNEMOM_RING=us-1 for the preview cell, MNEMOM_ENV=local for a local stack, " +
-            "or set MNEMOM_API_URL / MNEMOM_GATEWAY_URL / MNEMOM_WEBSITE_URL to target another cell.");
+        super("MNEMOM_ENV=staging is no longer supported: the staging environment was retired on 2026-10-08. " +
+            "Supported MNEMOM_ENV values are production (the default) and local.");
         this.name = "RetiredEnvironmentError";
     }
 }

package/dist/lib/slack-route.d.ts

@@ -67,7 +67,12 @@ export interface PostRecord {
  */
 export type ThreadIndex = Map<string, Map<string, Map<string, string | undefined>>>;
 export declare function buildThreadIndex(posts: Iterable<PostRecord>): ThreadIndex;
-/** Normalise a session name for comparison (same shape the launcher emits). */
+/**
+ * Normalise a session name for comparison (same shape the launcher emits): the
+ * lowercase alphanumeric runs joined by single dashes. Matching the runs is one
+ * linear pass, with no trim regex (`/-+$/` backtracks quadratically on a run of
+ * dashes).
+ */
 export declare function normSession(raw: string): string;
 /**
  * The live session `name` addresses: an exact (normalised) match, else the ONE live

package/dist/lib/slack-route.js

@@ -54,12 +54,14 @@ export function buildThreadIndex(posts) {
     }
     return idx;
 }
-/** Normalise a session name for comparison (same shape the launcher emits). */
+/**
+ * Normalise a session name for comparison (same shape the launcher emits): the
+ * lowercase alphanumeric runs joined by single dashes. Matching the runs is one
+ * linear pass, with no trim regex (`/-+$/` backtracks quadratically on a run of
+ * dashes).
+ */
 export function normSession(raw) {
-    return raw
-        .toLowerCase()
-        .replace(/[^a-z0-9]+/g, "-")
-        .replace(/^-+|-+$/g, "");
+    return (raw.toLowerCase().match(/[a-z0-9]+/g) ?? []).join("-");
 }
 const HANDLE_RE = /(?:^|[\s(])@([a-z0-9][a-z0-9-]*[a-z0-9])(?=$|[\s,.:;!?)])/gi;
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mnemom/mnemom",
-  "version": "0.17.28",
+  "version": "0.17.29",
   "description": "Transparent AI agent tracing",
   "type": "module",
   "bin": {