@mnemom/mnemom 0.17.33 → 0.17.34-next.2

package/dist/base-url-proxy.mjs

@@ -15,7 +15,10 @@
 // (> WAIT_MS) → the request is forwarded without it (the gateway then behaves as before).
 //
 // CONFIG (env, none secret)
-//   MNEMOM_AGENT_BU_DOOR         gateway door URL (required, https only), e.g. https://gateway.mnemom.ai/anthropic
+//   MNEMOM_AGENT_BU_DOOR         gateway door URL (required), e.g. https://gateway.mnemom.ai/anthropic;
+//                                https; http only with MNEMOM_AGENT_BU_HTTP_DOOR=1 and on a
+//                                loopback literal (127.0.0.1, [::1], localhost: the C17-R16 seam)
+//   MNEMOM_AGENT_BU_HTTP_DOOR    "1" allows that http door; set by the launcher (see the gate below)
 //   MNEMOM_AGENT_BU_CWD          the session cwd (Claude Code's transcript lives under its slug)
 //   MNEMOM_AGENT_BU_LOG          append log lines here instead of stderr (optional)
 //   MNEMOM_AGENT_BU_PARENT_PID   exit when this pid is gone
@@ -43,7 +46,18 @@ try {
 } catch {
   die("MNEMOM_AGENT_BU_DOOR is required and must be a URL");
 }
-if (DOOR.protocol !== "https:") die("MNEMOM_AGENT_BU_DOOR must be https");
+/** S1 LOOPBACK_HOSTS: the exact hostnames an http door may name (look-alikes such as 127.0.0.1.nip.io fail). */
+const LOOPBACK_HOSTS = new Set(["127.0.0.1", "[::1]", "localhost"]);
+// The C17-R16 http-door seam (T3). The launcher (commands/agent.ts startBaseUrlProxy) sets
+// MNEMOM_AGENT_BU_HTTP_DOOR=1 only when test-mode.mjs testSeamsHonoured / httpDoorAllowed hold, and
+// strips an inherited value otherwise; this proxy reads no test-mode env itself. A proxy spawned
+// directly trusts its parent's flag: the worst case is still http to a loopback literal only.
+const httpDoorAllowed = env.MNEMOM_AGENT_BU_HTTP_DOOR === "1" && LOOPBACK_HOSTS.has(DOOR.hostname);
+if (DOOR.protocol === "http:") {
+  if (!httpDoorAllowed)
+    die("MNEMOM_AGENT_BU_DOOR must be https (http only on a loopback literal with the door flag)");
+} else if (DOOR.protocol !== "https:") die("MNEMOM_AGENT_BU_DOOR must be https");
+const transport = DOOR.protocol === "http:" ? http : https;
 const LOGFILE = env.MNEMOM_AGENT_BU_LOG || "";
 const PARENT = Number(env.MNEMOM_AGENT_BU_PARENT_PID || 0);
 const PORT = Number(env.MNEMOM_AGENT_BU_PORT || 0);
@@ -101,7 +115,7 @@ function recordState(h) {
   }
 }
 
-const agent = new https.Agent({ keepAlive: true, maxSockets: 32 });
+const agent = new transport.Agent({ keepAlive: true, maxSockets: 32 });
 const doorPath = DOOR.pathname.replace(/\/$/, "");
 const isMessages = (u) => u === "/v1/messages" || u.startsWith("/v1/messages?");
 
@@ -123,7 +137,7 @@ function handle(req, res) {
 
   const forward = (note) => {
     const target = new URL(DOOR.origin + doorPath + req.url);
-    const up = https.request(target, { method: req.method, headers, agent }, (ur) => {
+    const up = transport.request(target, { method: req.method, headers, agent }, (ur) => {
       recordState(ur.headers);
       res.writeHead(ur.statusCode, ur.headers);
       ur.pipe(res);

package/dist/commands/agent-config.js

@@ -56,7 +56,8 @@ function listConfig(enabled) {
         out("Set one with:  mnemom agent config set <key> <value>");
         out("");
         out("Settable keys:");
-        for (const spec of CONFIG_KEYS)
+        // The durable key is listed only while `durable` is on (hidden like its verbs; C17).
+        for (const spec of CONFIG_KEYS.filter((k) => k.key !== "durable" || enabled.includes("durable")))
             out(`  ${spec.key.padEnd(22)} ${spec.describe}${configKeyMark(spec.key, undefined, enabled)}`);
         return;
     }
@@ -199,6 +200,9 @@ function deleteKey(cfg, key) {
         case "compaction_intercept":
             delete cfg.compactionIntercept;
             break;
+        case "durable":
+            delete cfg.durable;
+            break;
         case "context_profile":
             delete cfg.contextProfile;
             break;

package/dist/commands/agent-doctor.d.ts

@@ -17,6 +17,15 @@ export interface DoctorOptions {
     cli?: string;
     /** The agent slug a launch would use (--agent / launcher.toml); default agent-<handle>. */
     agent?: string;
+    /**
+     * The durable lock lines (commands/durable-doctor.ts), passed only while the experimental
+     * `durable` gate is on; absent, the doctor is exactly as before.
+     */
+    durable?: () => Promise<Array<{
+        mark: "ok" | "warn" | "info";
+        text: string;
+        hint?: string;
+    }>>;
 }
 /** Run the preflight and print the checklist. Sets process.exitCode on failure. */
 export declare function agentDoctorCommand(options?: DoctorOptions): Promise<void>;

package/dist/commands/agent-doctor.js

@@ -125,6 +125,10 @@ export async function agentDoctorCommand(options = {}) {
     // ── CLI auto-update ──
     const upd = await probeUpdateStatus();
     add(upd.mark, upd.text, upd.hint);
+    // ── durable lock preconditions (gate on only): never a MISS ──
+    if (options.durable)
+        for (const l of await options.durable())
+            add(l.mark, l.text, l.hint);
     // ── render ──
     const door = resolveAnthropicDoor(env);
     out("mnemom agent doctor");

package/dist/commands/agent-session.d.ts

@@ -12,8 +12,7 @@
  * (`x-mnemom-contract`). Implicit alignment — the goal inferred from your own
  * messages (`x-mnemom-goal-mode: implicit`, no contract) — is the experimental
  * `implicit` feature: while it is on a bare launch runs implicit, while it is off
- * (the default) a bare launch runs with alignment off. On a prerelease (`next`)
- * build a bare launch runs implicit unless it is headless `-p` (T16). `--no-implicit` (or
+ * (the default) a bare launch runs with alignment off. `--no-implicit` (or
  * launcher.toml `goal_mode = "off"`) turns it off. The mode is resolved upstream
  * (`resolveImplicit`) and announced on the launch line.
  *

package/dist/commands/agent-session.js

@@ -12,8 +12,7 @@
  * (`x-mnemom-contract`). Implicit alignment — the goal inferred from your own
  * messages (`x-mnemom-goal-mode: implicit`, no contract) — is the experimental
  * `implicit` feature: while it is on a bare launch runs implicit, while it is off
- * (the default) a bare launch runs with alignment off. On a prerelease (`next`)
- * build a bare launch runs implicit unless it is headless `-p` (T16). `--no-implicit` (or
+ * (the default) a bare launch runs with alignment off. `--no-implicit` (or
  * launcher.toml `goal_mode = "off"`) turns it off. The mode is resolved upstream
  * (`resolveImplicit`) and announced on the launch line.
  *

package/dist/commands/agent-setup.d.ts

@@ -288,6 +288,12 @@ export declare function resolvePinnedAgent(id: string): Promise<{
     id: string;
     slug: string;
 }>;
+/**
+ * The x-mnemom-agent value for a pinned agent: its stored name exactly, when that name is a
+ * header-safe token (every api-valid name is: AGENT_NAME_REGEX allows only letters, digits and
+ * hyphens); "" otherwise, which refuses the launch.
+ */
+export declare function pinnedSlugOf(name: string | null | undefined): string;
 /**
  * One line for an api failure that keeps the parts an operator can act on: the
  * message, the error code, and the scope the endpoint said it needed

package/dist/commands/agent-setup.js

@@ -696,12 +696,23 @@ export async function resolvePinnedAgent(id) {
         throw new UnclaimedAgentError(`mnemom agent: agent ${id} is not claimed, and mnemom agent never runs on an unclaimed agent. ` +
             `Claim it first: \`mnemom agent claim ${id} --key <key>\`.`);
     }
-    const slug = sanitizeAgentName(agent.name ?? "");
+    // The stored name goes out verbatim: the gateway compares the pin's name exactly
+    // (agent-identity.ts), and the api allows uppercase and hyphen runs, which sanitizeAgentName
+    // would rewrite (mnemom-test #1061). sanitizeAgentName is for new names only.
+    const slug = pinnedSlugOf(agent.name);
     if (!slug) {
         throw new UnclaimedAgentError(`mnemom agent: agent ${id} has no usable name to send as x-mnemom-agent; rename it, or launch by name.`);
     }
     return { id, slug };
 }
+/**
+ * The x-mnemom-agent value for a pinned agent: its stored name exactly, when that name is a
+ * header-safe token (every api-valid name is: AGENT_NAME_REGEX allows only letters, digits and
+ * hyphens); "" otherwise, which refuses the launch.
+ */
+export function pinnedSlugOf(name) {
+    return typeof name === "string" && /^[A-Za-z0-9-]+$/.test(name) ? name : "";
+}
 /** The refusal for a pinned launch the gateway did not (or could not) honour. */
 function pinRefusal(err, pin, slug) {
     const head = `mnemom agent: the gateway would not run this launch as ${pin}`;

package/dist/commands/agent-share-render.d.ts

@@ -1,7 +1,7 @@
 /**
  * Bridge from `mnemom agent share` to the aip verifier (`@mnemom/aip-verifier`, aip#192/#178):
  * the renderer (`renderLines`) and claim-lint (`lintRendering`) are the ONLY source of what a
- * card may say. No word lists live here. The package is a devDependency pinned to the aip
+ * card may say. No word lists live here. The package is a runtime dependency pinned to the aip
  * release tarball and is loaded lazily, so the default CLI path never touches it; if it is
  * absent at runtime the share command fails closed with a clear message.
  */

package/dist/commands/agent-share-render.js

@@ -1,7 +1,7 @@
 /**
  * Bridge from `mnemom agent share` to the aip verifier (`@mnemom/aip-verifier`, aip#192/#178):
  * the renderer (`renderLines`) and claim-lint (`lintRendering`) are the ONLY source of what a
- * card may say. No word lists live here. The package is a devDependency pinned to the aip
+ * card may say. No word lists live here. The package is a runtime dependency pinned to the aip
  * release tarball and is loaded lazily, so the default CLI path never touches it; if it is
  * absent at runtime the share command fails closed with a clear message.
  */

package/dist/commands/agent.d.ts

@@ -25,12 +25,15 @@
  * line, or the proxy's stdin under RC). It is never logged, printed, or passed as
  * an argv value.
  */
+import { type ChildProcess } from "node:child_process";
+import { type SessionKeyDeps, type SessionKeyMintArgs, type SessionKeyRenewal } from "../lib/session-key.js";
 import { type MnemomKeyDeps } from "../lib/subscription-login.js";
 import { type SessionRecord } from "../lib/agent-ledger.js";
 import { type ExperimentalId } from "../lib/experimental.js";
 import { conductReceiptFor, type ReceiptLaunch } from "../lib/conduct-receipt.js";
 import { type GovernanceOptIn } from "./agent-setup.js";
 import { type CcSettingsView, type ContextProfile, type LaunchShape, type SealedContractEnvelope } from "../lib/agent.js";
+import type { LauncherKey } from "../vendor/shared/durable-contract/fixlines.js";
 export interface AgentOptions {
     goal?: string;
     requirement?: string[];
@@ -58,6 +61,14 @@ export interface AgentOptions {
     /** launcher.toml `agent_id`: the pin when no `--agent` is given (selectLaunchAgent). */
     agentId?: string;
     conversationId?: string;
+    /**
+     * Durable launch (EXPERIMENTAL `durable`, BACKBONE C1): set only while the gate is on. Absent,
+     * the launch is exactly today's (C17).
+     */
+    durable?: {
+        launcherKey: LauncherKey;
+        newSession: boolean;
+    };
     cli?: string;
     remoteControl?: boolean;
     server?: boolean;
@@ -395,6 +406,8 @@ export declare function exemptLoopbackFromProxy(env: NodeJS.ProcessEnv): void;
 export declare function sayConductReceipt(launch: ReceiptLaunch, trigger?: "exit" | "park", receipt?: typeof conductReceiptFor): Promise<void>;
 /** Whether a terminal implicit launch runs the turn-origin proxy (MNEMOM_AGENT_TURN_HEADER=0 opts out). */
 export declare function turnProxyWanted(env: NodeJS.ProcessEnv): boolean;
+/** The flag that lets base-url-proxy.mjs use an http door on a loopback literal (C17-R16 T3). */
+export declare const BU_HTTP_DOOR_ENV = "MNEMOM_AGENT_BU_HTTP_DOOR";
 /** Test seams for startBaseUrlProxy (every real caller omits them). */
 export interface BaseUrlProxyOptions {
     /** The proxy script (default: the bundled base-url-proxy.mjs beside rc-proxy.mjs). */
@@ -447,6 +460,19 @@ export declare function rcProxyUrl(port: string, proxyCredential: string): strin
  * selectLaunchAgent). A truncated/garbled `mnm-…` throws instead of becoming a name.
  */
 export declare function resolveLaunchPin(options: Pick<AgentOptions, "agent" | "agentId">): string | undefined;
+/** The longest line the proxy sends the launcher (`remint <key id>`) is far shorter than this. */
+export declare const RC_CONTROL_LINE_MAX = 1024;
+/**
+ * Renew the Remote Control proxy's session key over its control pipe (fd 3; rc-proxy.mjs SESSION
+ * KEY RENEWAL): a `key <id> <expires> <key>` line before each expiry, a `remint <id>` line from the
+ * proxy when the gateway rejects its key, answered with a new key or `key-failed`. Renewal events
+ * go to the proxy log (the terminal belongs to Claude Code by then), as key ids and expiry times.
+ */
+export declare function startRcSessionKeyRenewal(proxy: Pick<ChildProcess, "stdio">, proxyLog: string, initial: {
+    keyId: string;
+    expiresAt: string;
+    mintArgs: SessionKeyMintArgs;
+}, makeDeps?: (say: (line: string) => void) => SessionKeyDeps): SessionKeyRenewal | undefined;
 /**
  * Locates the `handoff` MCP server (src/mcp/handoff-server.mjs in dev, dist/mcp/handoff-server.mjs
  * once built — a raw, uncompiled `.mjs` file that `copy-assets.mjs` copies verbatim, exactly like