@mnemom/mnemom 0.17.3-next.6 → 0.17.3

package/dist/commands/agent-doctor.js

@@ -14,7 +14,8 @@
 import { spawnSync } from "node:child_process";
 import { existsSync } from "node:fs";
 import { anthropicKeySource, checkRcCapability, resolveCliBin } from "./agent.js";
-import { isProdGateway, resolveAnthropicDoor, resolveGatewayHost } from "../lib/agent.js";
+import { isProdGateway, resolveAnthropicDoor, resolveGatewayHost, singleCellError, } from "../lib/agent.js";
+import { getApiUrl, getGatewayUrl } from "../lib/config.js";
 import { LAUNCHER_CONFIG_PATH } from "../lib/launcher-config.js";
 import { getCodeEntitlement, MnemomApiError } from "../lib/api.js";
 import { isLoggedIn } from "../lib/auth.js";
@@ -52,6 +53,14 @@ export async function agentDoctorCommand(options = {}) {
         add("ok", "Anthropic key: found in ~/.mnemom/launcher.json");
     else
         add("miss", "Anthropic key: none found", "export MNEMOM_AGENT_ANTHROPIC_KEY=sk-ant-… (or ANTHROPIC_API_KEY), or run `mnemom agent` once and accept the save prompt");
+    // ── one cell: the launch door must be the CLI's own cell ──
+    const cellError = singleCellError({
+        door: resolveAnthropicDoor(env),
+        apiUrl: getApiUrl(),
+        cellGateway: getGatewayUrl(),
+    });
+    if (cellError)
+        add("miss", "cell: mixed — a launch would be refused", cellError);
     // ── gateway health ──
     const host = resolveGatewayHost(env);
     const cell = isProdGateway(env) ? "us-2/prod" : "custom";

package/dist/commands/agent-sessions.d.ts

@@ -26,6 +26,11 @@ export interface SessionCommandDeps {
      * one `live goal` line an implicit session gets. Optional: absent ⇒ no line.
      */
     fetchGoal?: (record: SessionRecord) => Promise<GoalShowResponse>;
+    /**
+     * The gateway of the cell this CLI reads live state from. A session that ran on another
+     * cell is not looked up there (it would always read as "no sealed contract"). Absent ⇒ no check.
+     */
+    cellGateway?: () => string;
     out: (line: string) => void;
     err: (line: string) => void;
 }

package/dist/commands/agent-sessions.js

@@ -14,7 +14,8 @@
  * only the server's hash is shown, labelled "sealed hash".
  */
 import { readSessionRecords } from "../lib/agent-ledger.js";
-import { MNEMOM_DIR } from "../lib/config.js";
+import { getGatewayUrl, MNEMOM_DIR } from "../lib/config.js";
+import { sameOrigin } from "../lib/agent.js";
 import { getAgentSession, MnemomApiError } from "../lib/api.js";
 import { fmt, formatRelativeAge } from "../lib/format.js";
 import { goalControlFetch } from "../lib/goal-api.js";
@@ -31,6 +32,7 @@ export const liveSessionDeps = {
         const creds = await resolveLaunchCreds();
         return goalControlFetch(record, "show", { thread: "main" }, { fetch, creds });
     },
+    cellGateway: () => getGatewayUrl(),
     out: (line) => console.log(line),
     err: (line) => console.error(line),
 };
@@ -318,9 +320,13 @@ export async function agentShowCommand(ref, opts, deps) {
     const { record, others } = resolved;
     let remote = null;
     let reason;
+    const cell = deps.cellGateway?.();
     if (record.agent_id === null) {
         reason = "agent id was not resolved at launch";
     }
+    else if (cell !== undefined && !sameOrigin(record.gateway_host, cell)) {
+        reason = `this session ran on ${record.gateway_host}, not this CLI's cell (${cell}) — point the CLI at that cell to read it`;
+    }
     else {
         try {
             remote = await deps.fetchSession(record.conversation_id, record.agent_id, record.org_id);

package/dist/commands/agent-setup.js

@@ -26,10 +26,10 @@
 import { claimAgent, getAgentByName, getMe, getMuBalance, getMyPersonalOrg, MnemomApiError, mintProtectionCapability, putAlignmentCard, putProtectionCard, } from "../lib/api.js";
 import { getAuthInfo, isLoggedIn, loginWithBrowser, loginWithDeviceFlow, resolveAuth, } from "../lib/auth.js";
 import { getActiveOrg } from "../lib/cli-config.js";
-import { getWebsiteUrl } from "../lib/config.js";
+import { getApiUrl, getGatewayUrl, getWebsiteUrl } from "../lib/config.js";
 import { fmt } from "../lib/format.js";
 import { askYesNo, isInteractive } from "../lib/prompt.js";
-import { resolveGatewayHost, sanitizeAgentName } from "../lib/agent.js";
+import { resolveAnthropicDoor, resolveGatewayHost, sanitizeAgentName, singleCellError, } from "../lib/agent.js";
 import { configKeySpec, loadLauncherConfig, writeLauncherConfig } from "../lib/launcher-config.js";
 import { deriveHashProof } from "./agents.js";
 import { birthThroughGateway } from "./wrap.js";
@@ -273,6 +273,13 @@ async function publishDefaultCards(agentId) {
 /** `mnemom agent setup [--agent <slug>]` — the explicit provisioning entry point. */
 export async function agentSetupCommand(opts = {}) {
     const gatewayHost = resolveGatewayHost(process.env);
+    const cellError = singleCellError({
+        door: resolveAnthropicDoor(process.env),
+        apiUrl: getApiUrl(),
+        cellGateway: getGatewayUrl(),
+    });
+    if (cellError)
+        throw new Error(cellError.replace("mnemom agent:", "mnemom agent setup:"));
     // Sign in (offer sign-up) and enforce the MU balance before any account write.
     try {
         await ensureSessionAndBalance({});

package/dist/commands/agent.js

@@ -31,7 +31,7 @@ import { randomUUID } from "node:crypto";
 import { tmpdir, homedir } from "node:os";
 import { basename, join, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
-import { MNEMOM_DIR } from "../lib/config.js";
+import { getApiUrl, getGatewayUrl, MNEMOM_DIR } from "../lib/config.js";
 import { getAgentByName } from "../lib/api.js";
 import { LEDGER_FILE, appendSessionRecord, resolveRetentionDays, toLedgerContract, } from "../lib/agent-ledger.js";
 import { loadCliConfig } from "../lib/cli-config.js";
@@ -41,7 +41,7 @@ import { fmt } from "../lib/format.js";
 import { askInput, askYesNo, isInteractive } from "../lib/prompt.js";
 import { goalAlignmentLine, resolveSessionSetup } from "./agent-session.js";
 import { AgentIdentityMismatchError, defaultAgentSlug, ensureGovernedAgent, ensureSessionAndBalance, isQuietPreambleExit, resolveDefaultSlug, resolvePreflightedAccount, } from "./agent-setup.js";
-import { assembleContract, buildGoalModeHeader, buildCustomHeaders, buildHandoffMcpConfigJson, buildSessionConfig, buildSessionConfigB64, resolveContextHandoff, resolveContextProfile, resolveHandoffGatewayHost, HANDOFF_RC_KEY_ENV_NAME, isProdGateway, launchPreferenceExplicit, launchPreflighted, remoteControlAllowed, resolveAnthropicDoor, resolveConversationId, resolveGatewayHost, resolveLaunchShape, resolveRemoteControlShape, passthroughName, sanitizeAgentName, sessionDisplayName, SESSION_NAME_ENV, SESSION_CONFIG_HEADER, } from "../lib/agent.js";
+import { assembleContract, buildGoalModeHeader, buildCustomHeaders, buildHandoffMcpConfigJson, buildSessionConfig, buildSessionConfigB64, resolveContextHandoff, resolveContextProfile, resolveHandoffGatewayHost, HANDOFF_RC_KEY_ENV_NAME, isProdGateway, launchPreferenceExplicit, launchPreflighted, remoteControlAllowed, resolveAnthropicDoor, resolveConversationId, resolveGatewayHost, singleCellError, resolveLaunchShape, resolveRemoteControlShape, passthroughName, sanitizeAgentName, sessionDisplayName, SESSION_NAME_ENV, SESSION_CONFIG_HEADER, } from "../lib/agent.js";
 import { LAUNCHER_STORE_PATH, mergeStore } from "../lib/launcher-store.js";
 import { slackChannelArgs } from "../lib/slack-launch.js";
 /** The CLI's own provider-key store (zero 1Password): ~/.mnemom/launcher.json, 0600. */
@@ -109,6 +109,9 @@ export async function agentCommand(scenarioArg, options = {}) {
     // ── door ──
     const gatewayHost = resolveGatewayHost(env);
     const door = resolveAnthropicDoor(env);
+    const cellError = singleCellError({ door, apiUrl: getApiUrl(), cellGateway: getGatewayUrl() });
+    if (cellError)
+        throw new Error(cellError);
     const cellNote = isProdGateway(env) ? "us-2/prod" : `custom (${gatewayHost})`;
     const yolo = options.yolo !== false; // default ON
     const contextHint = options.contextHint !== false; // default ON

package/dist/index.js

@@ -100,8 +100,8 @@ program
 // CONTRACT the gateway seals on the first turn. Three launch shapes — terminal
 // (default), --remote-control (interactive RC in this terminal), --server
 // (headless RC dispatcher) — with yolo on by default. `--cli` selects the
-// executable (name or full path; default claude). The us-2/prod door is the
-// DEFAULT; set MNEMOM_AGENT_GATEWAY (or --gateway) to point elsewhere. The
+// executable (name or full path; default claude). The door is the gateway of the
+// cell the CLI uses (prod by default); a door on another cell is refused. The
 // Anthropic key is resolved with zero 1Password dependency (env → ~/.mnemom store
 // → interactive prompt) inside the launched process and never logged. See
 // commands/code.ts.
@@ -139,7 +139,7 @@ const agentCmd = program
     .option("--no-implicit", "Turn implicit goal alignment OFF for this launch (overrides launcher.toml goal_mode = implicit)")
     .option("--conversation-id <id>", "x-mnemom-conversation-id (default: auto-generated)")
     .option("--cli <name|path>", "Coding-agent CLI to launch: a name or full path (default: claude)")
-    .option("--gateway <url>", "Gateway host override (default: https://gateway.mnemom.ai; or MNEMOM_AGENT_GATEWAY)")
+    .option("--gateway <url>", "Gateway host override — must be the same cell as the rest of the CLI (default: that cell's gateway; or MNEMOM_AGENT_GATEWAY)")
     .option("--remote-control", "Interactive Remote Control session in THIS terminal (behind a local proxy)")
     .option("--server", "Headless `claude remote-control` dispatcher (behind a local proxy)")
     .option("--model <alias|id>", "Model to launch (CLI alias or concrete id)")

package/dist/lib/agent.d.ts

@@ -63,11 +63,27 @@ export interface ContractFlags {
 export type LaunchShape = "terminal" | "remote-control" | "server";
 /**
  * Resolve the gateway HOST (scheme + host, no path). An explicit, non-empty
- * `MNEMOM_AGENT_GATEWAY` wins verbatim; otherwise the us-2/prod host. The default
- * is PROD — an unset var resolves to prod, and any other cell is reached only by
- * NAMING it. Trailing slash trimmed so door concatenation is clean.
- */
-export declare function resolveGatewayHost(env?: NodeJS.ProcessEnv): string;
+ * `MNEMOM_AGENT_GATEWAY` wins verbatim; otherwise the gateway of the cell the rest
+ * of the CLI uses (`getGatewayUrl()`: prod unless MNEMOM_ENV / MNEMOM_RING /
+ * MNEMOM_GATEWAY_URL name another). An override on a different cell is refused at
+ * launch — see `singleCellError`. Trailing slash trimmed so door concatenation is clean.
+ */
+export declare function resolveGatewayHost(env?: NodeJS.ProcessEnv, cellGateway?: string): string;
+/** Same scheme+host+port. An unparseable URL never matches. */
+export declare function sameOrigin(a: string, b: string): boolean;
+/**
+ * A launch must use ONE cell: the Anthropic `door` its traffic goes to must be the
+ * gateway of the cell the CLI signs in, resolves the agent and reads sessions on
+ * (`cellGateway`, paired with `apiUrl`). A mixed launch records one cell's agent
+ * and runs as another cell's, so `sessions`/`show` never find its goal state.
+ * Returns the refusal message, or null. A loopback door is a local dev gateway and
+ * is exempt.
+ */
+export declare function singleCellError(opts: {
+    door: string;
+    apiUrl: string;
+    cellGateway: string;
+}): string | null;
 /**
  * The Anthropic door the CLI points Claude Code at:
  * `${MNEMOM_AGENT_GATEWAY}/anthropic`, or the full-door override

package/dist/lib/agent.js

@@ -20,19 +20,56 @@
  * NAMED), but prod is never selected silently — see `resolveGatewayHost`.
  */
 import { createHash, randomUUID } from "node:crypto";
+import { getGatewayUrl } from "./config.js";
 /** The us-2/prod gateway host. The default door — never any other cell silently. */
 export const PROD_GATEWAY_HOST = "https://gateway.mnemom.ai";
 /**
  * Resolve the gateway HOST (scheme + host, no path). An explicit, non-empty
- * `MNEMOM_AGENT_GATEWAY` wins verbatim; otherwise the us-2/prod host. The default
- * is PROD — an unset var resolves to prod, and any other cell is reached only by
- * NAMING it. Trailing slash trimmed so door concatenation is clean.
+ * `MNEMOM_AGENT_GATEWAY` wins verbatim; otherwise the gateway of the cell the rest
+ * of the CLI uses (`getGatewayUrl()`: prod unless MNEMOM_ENV / MNEMOM_RING /
+ * MNEMOM_GATEWAY_URL name another). An override on a different cell is refused at
+ * launch — see `singleCellError`. Trailing slash trimmed so door concatenation is clean.
  */
-export function resolveGatewayHost(env = process.env) {
+export function resolveGatewayHost(env = process.env, cellGateway = getGatewayUrl()) {
     const raw = (env.MNEMOM_AGENT_GATEWAY ?? "").trim();
-    const host = raw.length > 0 ? raw : PROD_GATEWAY_HOST;
+    const host = raw.length > 0 ? raw : cellGateway;
     return host.replace(/\/+$/, "");
 }
+const LOOPBACK_HOSTS = new Set(["localhost", "127.0.0.1", "[::1]"]);
+/** Same scheme+host+port. An unparseable URL never matches. */
+export function sameOrigin(a, b) {
+    try {
+        return new URL(a).origin === new URL(b).origin;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * A launch must use ONE cell: the Anthropic `door` its traffic goes to must be the
+ * gateway of the cell the CLI signs in, resolves the agent and reads sessions on
+ * (`cellGateway`, paired with `apiUrl`). A mixed launch records one cell's agent
+ * and runs as another cell's, so `sessions`/`show` never find its goal state.
+ * Returns the refusal message, or null. A loopback door is a local dev gateway and
+ * is exempt.
+ */
+export function singleCellError(opts) {
+    let doorUrl;
+    try {
+        doorUrl = new URL(opts.door);
+    }
+    catch {
+        return `mnemom agent: the gateway '${opts.door}' is not a valid URL.`;
+    }
+    if (LOOPBACK_HOSTS.has(doorUrl.hostname))
+        return null;
+    if (sameOrigin(opts.door, opts.cellGateway))
+        return null;
+    return (`mnemom agent: the gateway ${doorUrl.origin} is on a different cell from the one this CLI uses ` +
+        `(API ${opts.apiUrl}, gateway ${opts.cellGateway}). A launch must use one cell. Point the whole ` +
+        "CLI at that cell (MNEMOM_API_URL + MNEMOM_GATEWAY_URL, or MNEMOM_RING) and drop the gateway " +
+        "override (--gateway, MNEMOM_AGENT_GATEWAY, MNEMOM_AGENT_ANTHROPIC_GATEWAY, or `gateway` in launcher.toml).");
+}
 /**
  * The Anthropic door the CLI points Claude Code at:
  * `${MNEMOM_AGENT_GATEWAY}/anthropic`, or the full-door override

package/dist/lib/launcher-config.js

@@ -86,7 +86,7 @@ function ensureGuardrails(cfg) {
 export const CONFIG_KEYS = [
     {
         key: "gateway",
-        describe: "Gateway host (default https://gateway.mnemom.ai — the us-2/prod cell)",
+        describe: "Gateway host (default: the gateway of the cell the CLI uses — prod unless MNEMOM_ENV/MNEMOM_RING/MNEMOM_GATEWAY_URL say otherwise; a different cell is refused)",
         get: (c) => c.gateway,
         set: (c, v) => {
             c.gateway = coerceNonEmpty("gateway", v);

package/dist/lib/slack-router.js

@@ -53,7 +53,9 @@ export function ensureRouter(argv = [process.execPath, process.argv[1] ?? "mnemo
 }
 /** Run the router until the process is killed. Reconnects on disconnect. */
 export async function runRouter(opts) {
-    const log = opts.log ?? ((l) => console.error(`[slack-router] ${l}`));
+    // Lines carry Slack-supplied values (channel, handles, disconnect reason);
+    // strip CR/LF so a crafted message cannot forge extra log lines.
+    const log = opts.log ?? ((l) => console.error(`[slack-router] ${l.replace(/\n|\r/g, "")}`));
     const fetchImpl = opts.fetchImpl ?? fetch;
     const WS = globalThis.WebSocket;
     if (!WS)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mnemom/mnemom",
-  "version": "0.17.3-next.6",
+  "version": "0.17.3",
   "description": "Transparent AI agent tracing",
   "type": "module",
   "bin": {