@mnemom/mnemom 0.17.34-next.2 → 0.17.34-next.4

package/dist/durable/launch-spec.js

@@ -270,7 +270,7 @@ export async function compareWithCommitted(built, committed) {
 export function launchSpecChangeFixLines(ctx) {
     const render = {
         launcherKey: ctx.launcherKey,
-        nameHeld: true,
+        nameHeld: ctx.nameHeld ?? true,
         params: { name: ctx.name, flags: ctx.flags },
     };
     const lines = [renderFixLine("launch_spec_change", render)];

package/dist/durable/test-mode.mjs

@@ -6,7 +6,8 @@
 // is a loopback literal; an unset URL counts as non-loopback. Otherwise a seam env is ignored.
 //
 // The CLI seams (closed list): T1 DURABLE_BOOT_ID_FILE, T2 DURABLE_HOST_TEST_PAUSE_AT, T3 the
-// credential proxy's http door on a loopback host.
+// credential proxy's http door on a loopback host, and `agent run`'s GitHub base, read from the
+// api's own T4 variable DURABLE_TEST_GITHUB_API_BASE (Durable lead, Doors W-L13).
 
 const TEST_MODE = "DURABLE_SESSIONS_TEST_MODE";
 /** S1 GUARD_LISTS.cli, in order. */
@@ -40,6 +41,29 @@ export function bootIdFileOverride(env = process.env) {
   return { file, ignored: false };
 }
 
+/**
+ * `agent run`'s GitHub base on a lane: the same fake GitHub the api uses (T4,
+ * DURABLE_TEST_GITHUB_API_BASE), serving git and REST from one origin. Honoured only under the seam
+ * guard and only for an http(s) loopback URL with no credentials, query or fragment; anything else
+ * is null, and `ignored` says a value was set but not used (the caller warns).
+ */
+export function testGithubBase(env = process.env) {
+  const raw = env.DURABLE_TEST_GITHUB_API_BASE;
+  if (typeof raw !== "string" || raw === "") return { base: null, ignored: false };
+  if (!testSeamsHonoured(env) || !isLoopbackUrl(raw)) return { base: null, ignored: true };
+  const u = new URL(raw);
+  if (
+    (u.protocol !== "http:" && u.protocol !== "https:") ||
+    u.username ||
+    u.password ||
+    u.search ||
+    u.hash
+  ) {
+    return { base: null, ignored: true };
+  }
+  return { base: `${u.origin}${u.pathname.replace(/\/+$/, "")}`, ignored: false };
+}
+
 /** S1 T2_PAUSE_POINTS. */
 export const PAUSE_POINTS = Object.freeze([
   "after_claim_before_spawn",

package/dist/host/client.d.ts

@@ -1,4 +1,6 @@
 import { type ClaimOutcome, type ClaimUnavailableCause } from "../vendor/shared/durable-contract/codes.js";
+import { type ExecAppendBody } from "./s1-names.js";
+export type { ExecAppendBody };
 /** The S1 claim outcomes that grant the lease (CLAIM_OUTCOME_STATUS 200). */
 export type ClaimSuccess = Extract<ClaimOutcome, "acquired" | "reclaimed" | "epoch_bump">;
 /** The header that carries the executor key (ruling 33.28(1); S1 EXECUTOR_KEY_HEADER once frozen). */
@@ -64,7 +66,7 @@ export interface ExecutorApi {
     }>;
     attest(sessionId: string, nonce: string): Promise<HttpResult>;
     claim(sessionId: string, body: ClaimBody): Promise<HttpResult>;
-    append(sessionId: string, body: Record<string, unknown>): Promise<HttpResult>;
+    append(sessionId: string, body: ExecAppendBody): Promise<HttpResult>;
     hello(sessionId: string, body: {
         epoch: number;
         nonce: string;

package/dist/host/daemon.d.ts

@@ -1,10 +1,9 @@
-import type { ClaimUnavailableCause } from "../vendor/shared/durable-contract/codes.js";
+import type { ClaimUnavailableCause, CwdCheckCause } from "../vendor/shared/durable-contract/codes.js";
 import { type ExecutorApi, type SessionItem } from "./client.js";
 import { type SeatPane } from "./tmux.js";
 export declare const TICK_MS = 1000;
 export declare const ADOPT_RETRY_MS = 2000;
-export { SPAWNED_KIND } from "./s1-names.js";
-export declare const spawnIdempotencyKey: (sessionId: string, epoch: number, spawnId: string) => string;
+export { SPAWNED_KIND, spawnIdempotencyKey } from "./s1-names.js";
 export type PausePoint = "after_claim_before_spawn" | "after_spawn_before_register" | "after_register_before_hello" | "after_first_batch";
 /** One seat this daemon holds (spawned or adopted). */
 export interface Seat {
@@ -71,6 +70,11 @@ export interface DaemonDeps {
     }>;
     /** Transcript guard: refresh for an item; returns the transcript path now on disk (or null). */
     readonly guard: (item: SessionItem) => string | null;
+    /**
+     * The spawn-time cwd check (C14-R04, mnemom-test #1002) of the session's committed cwd: null
+     * when it is a work tree's top level, else the S1 CWD_CHECK_CAUSES value.
+     */
+    readonly cwdCheck: (cwd: string | null) => CwdCheckCause | null;
     /** Before --resume: present, restored from the guard, or lost. */
     readonly ensureTranscript: (item: SessionItem) => {
         kind: "present" | "restored";

package/dist/host/daemon.js

@@ -19,11 +19,10 @@ import { TERMINAL_STATES } from "../vendor/shared/durable-contract/states.js";
 import { IDLE_LOG } from "./gate.js";
 import { classifyClaim, errorCode, } from "./client.js";
 import { seatTmuxSession } from "./tmux.js";
-import { CODE, SEAT_UNKNOWN, SPAWNED_KIND } from "./s1-names.js";
+import { CODE, SEAT_UNKNOWN, SPAWNED_KIND, spawnIdempotencyKey } from "./s1-names.js";
 export const TICK_MS = 1000;
 export const ADOPT_RETRY_MS = 2000;
-export { SPAWNED_KIND } from "./s1-names.js";
-export const spawnIdempotencyKey = (sessionId, epoch, spawnId) => `spawn:${sessionId}:${epoch}:${spawnId}`;
+export { SPAWNED_KIND, spawnIdempotencyKey } from "./s1-names.js";
 /** S1 claim backoff: 2 s doubling to 60 s, scaled by 1 + jitter in [0, CLAIM_BACKOFF_JITTER) (R31). */
 export function backoffMs(count, random) {
     const base = Math.min(CLAIM_BACKOFF_MAX_S, CLAIM_BACKOFF_BASE_S * 2 ** Math.max(0, count - 1));
@@ -417,6 +416,11 @@ export class HostDaemon {
         const tokens = at.status === 200 && at.body && typeof at.body === "object"
             ? at.body.tokens
             : undefined;
+        // mnemom-test #1002 (lead ruling 20:00Z): the cwd check runs right before the claim, with no
+        // other work in between, and a failure rides on the claim as cwd_failure. The API suspends the
+        // session attestation_failed {check: cwd, cause} (after its own checks 2 and 7, before 12) and
+        // acquires nothing, so the claim answers ineligible and nothing is spawned.
+        const cwdFailure = this.d.cwdCheck(item.cwd);
         // mnemom-test #1001 (lead ruling, consistent with 33.28.5): a daemon with no local lease key
         // for the session asks for one on its first claim. It never holds one here: a session it
         // seats is not claimable, and the seat takes the key once. A bare claim and then a new_key
@@ -426,8 +430,14 @@ export class HostDaemon {
             nonce: this.d.nonce,
             ...(tokens !== undefined ? { tokens } : {}),
             new_key: true,
+            ...(cwdFailure !== null ? { cwd_failure: cwdFailure } : {}),
         });
         const c = classifyClaim(r, now);
+        // An API that did not apply the reported failure still never gets a seat in a bad cwd.
+        if (cwdFailure !== null && c.kind === "ok") {
+            did.push(`cwd_failure_unheeded:${item.id}:${cwdFailure}`);
+            return false;
+        }
         if (c.kind === "ok" && c.claim.leaseKey === null) {
             did.push(`claim_none:${item.id}:no_lease_key`);
             return false;

package/dist/host/owner.d.ts

@@ -38,6 +38,9 @@ export interface EnrollStart {
     readonly expiresIn: number;
     readonly interval: number;
     readonly pollSecret: string;
+    /** The org the machine will join (mnemom-test #972); null when the api names none. */
+    readonly orgId: string | null;
+    readonly orgName: string | null;
 }
 export declare function parseEnrollStart(body: unknown): EnrollStart | null;
 export type PollOutcome = {

package/dist/host/owner.js

@@ -97,6 +97,8 @@ export function parseEnrollStart(body) {
         expiresIn: typeof o.expires_in === "number" ? o.expires_in : 900,
         interval: typeof o.interval === "number" && o.interval > 0 ? o.interval : 2,
         pollSecret: secret,
+        orgId: typeof o.org_id === "string" && o.org_id ? o.org_id : null,
+        orgName: typeof o.org_name === "string" && o.org_name ? o.org_name : null,
     };
 }
 export function classifyPoll(r) {

package/dist/host/run.d.ts

@@ -1,6 +1,7 @@
 import { type HostPaths, type HostInstance } from "./instance.js";
 import { type LoadedState } from "./state.js";
 import { type AutoContinueDeps } from "./auto-continue.js";
+import { resolveClaudeBin } from "../lib/claude-bin.js";
 export interface RunIo {
     readonly env: Readonly<Record<string, string | undefined>>;
     readonly home: string;
@@ -8,8 +9,7 @@ export interface RunIo {
 }
 /** A tag that names this HOME on a shared tmux server (not secret: a hash of the path). */
 export declare const homeTag: (home: string) => string;
-/** The pinned claude: MNEMOM_AGENT_CLI when absolute, else `claude` on PATH, else null. */
-export declare function resolveClaudeBin(env: Readonly<Record<string, string | undefined>>): string | null;
+export { resolveClaudeBin };
 /** The argv that runs this CLI again: node + the real entry script. */
 export declare function cliExec(): string[];
 type Startup = {
@@ -63,4 +63,3 @@ export declare function writeRuntimeOrLog(write: () => void, log: (line: string)
  * exit, since a normal exit would unlink that daemon's socket.
  */
 export declare function exitIfSocketLeft(released: "closed" | "left", exit: (code: number) => void): void;
-export {};

package/dist/host/run.js

@@ -26,28 +26,11 @@ import { writeRuntime } from "./runtime.js";
 import { autoContinue, interruptedTurnId, turnContinuedJournal, } from "./auto-continue.js";
 import { hostTestPauseAt } from "../durable/test-mode.mjs";
 import { resolvePluginDir } from "../lib/claude-plugin.js";
+import { liveCwdDeps, spawnCwdCause } from "../durable/cwd-rule.js";
+import { resolveClaudeBin } from "../lib/claude-bin.js";
 /** A tag that names this HOME on a shared tmux server (not secret: a hash of the path). */
 export const homeTag = (home) => createHash("sha256").update(path.resolve(home)).digest("hex").slice(0, 16);
-/** The pinned claude: MNEMOM_AGENT_CLI when absolute, else `claude` on PATH, else null. */
-export function resolveClaudeBin(env) {
-    const v = (env.MNEMOM_AGENT_CLI ?? "").trim();
-    if (v.startsWith("/"))
-        return v;
-    const name = v || "claude";
-    for (const dir of (env.PATH ?? "").split(":")) {
-        if (!dir)
-            continue;
-        const p = path.join(dir, name);
-        try {
-            fs.accessSync(p, fs.constants.X_OK);
-            return p;
-        }
-        catch {
-            /* next */
-        }
-    }
-    return null;
-}
+export { resolveClaudeBin };
 /** The argv that runs this CLI again: node + the real entry script. */
 export function cliExec() {
     const entry = process.argv[1] ? fs.realpathSync(process.argv[1]) : "";
@@ -133,6 +116,7 @@ export async function hostRun(io) {
     const procs = defaultProcDeps();
     const tag = homeTag(io.home);
     const projects = ccProjectsDir(env, io.home);
+    const cwdDeps = liveCwdDeps(env);
     const sockDir = socketDir(paths.runDir, io.home);
     ensureSocketDir(sockDir);
     const control = controlSocketPath(sockDir);
@@ -207,6 +191,7 @@ export async function hostRun(io) {
                 guardMode = g.mode;
             return orig;
         },
+        cwdCheck: (cwd) => spawnCwdCause(cwd, cwdDeps),
         ensureTranscript: (item) => ensureTranscript(io.home, item.id, projects, item.cwd, item.cc_session_id ?? "", lastKnown.get(item.id) ?? null),
         removeGuard: (id) => removeGuard(io.home, id),
         guardedIds: () => guardedSessionIds(io.home),

package/dist/host/s1-names.d.ts

@@ -15,6 +15,7 @@ export declare const CODE: {
 export declare const SPAWNED_KIND: "executor.spawned";
 /** The executor.turn_continued kind: S1 EXECUTOR_WRITABLE_KINDS[2] (lead ruling 2026-10-28). */
 export declare const TURN_CONTINUED_KIND: "executor.turn_continued";
+export { spawnIdempotencyKey, type ExecAppendBody } from "../lib/runner/exec-append.js";
 /**
  * The control socket's answer when no registered seat has the relayed spawn id. It is local to the
  * daemon and its seat proxy, never a wire code, so it is not a durable_* code (S1 owns those).

package/dist/host/s1-names.js

@@ -14,6 +14,7 @@ export const CODE = Object.freeze(Object.fromEntries(Object.keys(DURABLE_CODES).
 export const SPAWNED_KIND = EXECUTOR_WRITABLE_KINDS[0];
 /** The executor.turn_continued kind: S1 EXECUTOR_WRITABLE_KINDS[2] (lead ruling 2026-10-28). */
 export const TURN_CONTINUED_KIND = EXECUTOR_WRITABLE_KINDS[2];
+export { spawnIdempotencyKey } from "../lib/runner/exec-append.js";
 /**
  * The control socket's answer when no registered seat has the relayed spawn id. It is local to the
  * daemon and its seat proxy, never a wire code, so it is not a durable_* code (S1 owns those).

package/dist/host/verbs.d.ts

@@ -38,6 +38,8 @@ export type Liveness = {
 export declare function executorLiveness(io: VerbIo, executorId: string): Promise<Liveness>;
 /** The S1 risk line (BACKBONE amendment 27): human text, or a JSON event in --json mode. Recorded nowhere. */
 export declare function printRiskLine(io: VerbIo): void;
+/** "<org name> (<org_id>)", or the bare id when the api sent no name. */
+export declare function joinTarget(orgId: string, orgName: string | null): string;
 /** The device step: start, show the code, poll, write the state file. Returns an exit code. */
 export declare function enrollDevice(io: VerbIo, opts?: {
     label?: string;

package/dist/host/verbs.js

@@ -59,6 +59,10 @@ export function printRiskLine(io) {
     else
         io.out(RISK_LINE_TEXT);
 }
+/** "<org name> (<org_id>)", or the bare id when the api sent no name. */
+export function joinTarget(orgId, orgName) {
+    return orgName ? `${orgName} (${orgId})` : orgId;
+}
 /** The device step: start, show the code, poll, write the state file. Returns an exit code. */
 export async function enrollDevice(io, opts = {}) {
     const { paths } = ctx(io);
@@ -85,6 +89,13 @@ export async function enrollDevice(io, opts = {}) {
             return 1;
         }
         printRiskLine(io);
+        // mnemom-test #972: name the org the machine will join before the device step. The human
+        // line is on stderr in every mode, so --json stdout stays JSON; --json adds one stdout event.
+        if (start.orgId) {
+            io.err(`This machine will join ${joinTarget(start.orgId, start.orgName)}`);
+            if (io.json)
+                io.out(JSON.stringify({ event: "enroll_org", org_id: start.orgId, org_name: start.orgName }));
+        }
         if (io.json)
             io.out(JSON.stringify({
                 event: "enroll_started",

package/dist/index.js

@@ -15,7 +15,7 @@ import { protectionShowCommand, protectionPublishCommand, protectionValidateComm
 import { agentsListCommand, agentsClaimCommand, agentsMoveCommand } from "./commands/agents.js";
 import { agentExportCommand, liveExportDeps } from "./commands/agent-export.js";
 import { agentShareCommand, liveAgentShareDeps } from "./commands/agent-share.js";
-import { agentShareFixtureEnabled, fixtureAgentShareParts, } from "./commands/agent-share-fixture.js";
+import { selectAgentShareDeps } from "./commands/agent-share-test-issuer.js";
 import { agentSessionsCommand, agentShowCommand, liveSessionDeps, } from "./commands/agent-sessions.js";
 import { agentGoalPinCommand, agentGoalResetCommand, agentGoalShowCommand, liveGoalDeps, } from "./commands/agent-goal.js";
 import { agentFuelCommand, liveFuelDeps } from "./commands/agent-fuel.js";
@@ -37,7 +37,7 @@ import { agentDoctorCommand } from "./commands/agent-doctor.js";
 import { agentSetupCommand, parseGovernanceFlag } from "./commands/agent-setup.js";
 import { agentInviteCommand, runAgentInvocation } from "./commands/agent-invite.js";
 import { agentFirstRunCommand, offerFirstRunOnLaunch } from "./commands/agent-first-run.js";
-import { applyConfigToEnv, launcherEntries, loadLauncherConfig, withoutDisabledExperimental, } from "./lib/launcher-config.js";
+import { applyConfigToEnv, durableLauncherKey, launcherEntries, loadLauncherConfig, withoutDisabledExperimental, } from "./lib/launcher-config.js";
 import { loadCliConfig, loadExperimentalState } from "./lib/cli-config.js";
 import { isSeatProxyArgv, runSeatProxyEntry } from "./durable/seat-proxy-entry.js";
 import { assertEnabled, EXPERIMENTAL_CONTRACT, gateCheck, ignoredSettingLines, reportCliError, } from "./lib/experimental.js";
@@ -355,6 +355,7 @@ const agentCmd = program
             await agentSetupCommand({
                 ...selectLaunchAgent({
                     flag: program.opts().agent,
+                    env: process.env.MNEMOM_AGENT,
                     configAgent: cfg.agent,
                     configAgentId: cfg.agentId,
                 }),
@@ -387,7 +388,8 @@ const agentCmd = program
         // Durable (gate on only, BACKBONE C1): refusals decided before any registry call or spawn
         // (nested launch, --server, the S1 name grammar); the registry plan runs in agentCommand.
         const durableOn = experimental.includes("durable");
-        const durableKey = cfg.durable ?? "off";
+        // MNEMOM_AGENT_DURABLE wins over launcher.toml `durable` for this launch.
+        const durableKey = durableLauncherKey(process.env, cfg.durable);
         if (durableOn) {
             const refusal = durablePreflight({
                 name: scenario,
@@ -413,9 +415,10 @@ const agentCmd = program
             maxTurns: opts.maxTurns ?? (contractIntended ? numToStr(cfg.guardrails?.maxTurns) : undefined),
             stall: opts.stall ?? (contractIntended ? numToStr(cfg.guardrails?.stallTurns) : undefined),
             mode: opts.mode,
-            // --agent wins; else launcher.toml agent_id (a pin) over agent (a name).
+            // --agent wins, then MNEMOM_AGENT; else launcher.toml agent_id (a pin) over agent (a name).
             ...selectLaunchAgent({
                 flag: parentOpts.agent,
+                env: process.env.MNEMOM_AGENT,
                 configAgent: cfg.agent,
                 configAgentId: cfg.agentId,
             }),
@@ -946,10 +949,11 @@ agentCmd
     .action(async (idOrName, opts) => {
     process.exitCode = await agentExportCommand(idOrName, opts, liveExportDeps);
 });
-// Hidden until MNEMOM_AGENT_SHARE=1 (MNE-9037): with the flag off the command behaves as unknown.
+// Hidden from help; runnable only with MNEMOM_AGENT_SHARE=1 (MNE-9037) or when the CLI targets the
+// test cell (MNEMOM_RING=test / test API + website): otherwise it behaves as unknown.
 agentCmd
     .command("share", { hidden: true })
-    .description("Build a shareable card from lines of your signed statements and print the share-page link (card in the URL fragment; nothing is posted). Needs MNEMOM_AGENT_SHARE=1")
+    .description("Build a shareable card from lines of your signed statements and print the share-page link (card in the URL fragment; nothing is posted). Needs MNEMOM_AGENT_SHARE=1 (not needed on the test ring)")
     .option("--lines <ids>", "Comma-separated line ids to include (skips the picker)")
     .option("--period", "Period card: always include reverts (refused if none are available)")
     .option("--list", "List the lines available to share and exit")
@@ -957,9 +961,9 @@ agentCmd
     .action(async (opts) => {
     // MNEMOM_AGENT_SHARE_FIXTURE=1 (with MNEMOM_AGENT_SHARE=1) swaps in the test-only fixture
     // source/issuer; otherwise the not-yet-connected live deps are used, unchanged.
-    const deps = agentShareFixtureEnabled()
-        ? { ...liveAgentShareDeps, ...fixtureAgentShareParts }
-        : liveAgentShareDeps;
+    // Against the TEST cell the test-key issuer is selected by the target, not a flag; the
+    // fixture flag is refused anywhere else (agent-share-test-issuer.ts).
+    const deps = selectAgentShareDeps(liveAgentShareDeps, process.env);
     process.exitCode = await agentShareCommand(opts, deps);
 });
 const agentSessionsCmd = agentCmd

package/dist/lib/agent.d.ts

@@ -171,13 +171,15 @@ export type AgentRef = {
  */
 export declare function parseAgentRef(raw: string): AgentRef;
 /**
- * Which agent a launch asks for, from the three places it can be named. `--agent` (flag) wins
+ * Which agent a launch asks for, from the four places it can be named. `--agent` (flag) wins
  * outright — an id there pins, a name there launches by name even when launcher.toml pins;
- * otherwise launcher.toml `agent_id` pins, and wins over launcher.toml `agent`. Returns the
- * `--agent`-shaped value (`agent`) and the config pin (`agentId`) for AgentOptions.
+ * then MNEMOM_AGENT (env), read exactly as the flag (the global `--agent`'s documented
+ * alternative); otherwise launcher.toml `agent_id` pins, and wins over launcher.toml `agent`.
+ * Returns the `--agent`-shaped value (`agent`) and the config pin (`agentId`) for AgentOptions.
  */
 export declare function selectLaunchAgent(sources: {
     flag?: string;
+    env?: string;
     configAgent?: string;
     configAgentId?: string;
 }): {

package/dist/lib/agent.js

@@ -150,14 +150,17 @@ export function parseAgentRef(raw) {
     return { kind: "name", name: v };
 }
 /**
- * Which agent a launch asks for, from the three places it can be named. `--agent` (flag) wins
+ * Which agent a launch asks for, from the four places it can be named. `--agent` (flag) wins
  * outright — an id there pins, a name there launches by name even when launcher.toml pins;
- * otherwise launcher.toml `agent_id` pins, and wins over launcher.toml `agent`. Returns the
- * `--agent`-shaped value (`agent`) and the config pin (`agentId`) for AgentOptions.
+ * then MNEMOM_AGENT (env), read exactly as the flag (the global `--agent`'s documented
+ * alternative); otherwise launcher.toml `agent_id` pins, and wins over launcher.toml `agent`.
+ * Returns the `--agent`-shaped value (`agent`) and the config pin (`agentId`) for AgentOptions.
  */
 export function selectLaunchAgent(sources) {
     if (sources.flag?.trim())
         return { agent: sources.flag };
+    if (sources.env?.trim())
+        return { agent: sources.env };
     if (sources.configAgentId?.trim())
         return { agentId: sources.configAgentId };
     return sources.configAgent?.trim() ? { agent: sources.configAgent } : {};

package/dist/lib/claude-bin.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Which claude to run, shared by the host (seats) and `agent run` (served phases) so both pick
+ * the same binary. Kept apart from host/run.ts so the runner does not load the host daemon.
+ */
+/** The pinned claude: MNEMOM_AGENT_CLI when absolute, else `claude` on PATH, else null. */
+export declare function resolveClaudeBin(env: Readonly<Record<string, string | undefined>>): string | null;

package/dist/lib/claude-bin.js

@@ -0,0 +1,26 @@
+/**
+ * Which claude to run, shared by the host (seats) and `agent run` (served phases) so both pick
+ * the same binary. Kept apart from host/run.ts so the runner does not load the host daemon.
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+/** The pinned claude: MNEMOM_AGENT_CLI when absolute, else `claude` on PATH, else null. */
+export function resolveClaudeBin(env) {
+    const v = (env.MNEMOM_AGENT_CLI ?? "").trim();
+    if (v.startsWith("/"))
+        return v;
+    const name = v || "claude";
+    for (const dir of (env.PATH ?? "").split(":")) {
+        if (!dir)
+            continue;
+        const p = path.join(dir, name);
+        try {
+            fs.accessSync(p, fs.constants.X_OK);
+            return p;
+        }
+        catch {
+            /* next */
+        }
+    }
+    return null;
+}

package/dist/lib/commit-report.d.ts

@@ -19,8 +19,9 @@
  * reported, trailer or not: a commit is bound when the index holds its sha or
  * patch-id, never by its trailer alone.
  *
- * PRERELEASE DEFAULT. On for a prerelease build (`next`), off for stable;
- * MNEMOM_AGENT_COMMIT_REPORT=on|off overrides, and any other value reads off.
+ * ON BY DEFAULT, stable and prerelease alike, so a PR from any `mnemom agent`
+ * session gets its commits bound in the record. MNEMOM_AGENT_COMMIT_REPORT=off
+ * (or 0, false, no) turns it off; any other value reads on.
  *
  * FAIL OPEN. Nothing here throws into the launch or changes its exit code. A
  * dark route (404) stops reporting for the session; a failed POST is retried on
@@ -36,8 +37,8 @@ export declare const CC_DEFAULT_COMMIT_ATTRIBUTION = "Co-Authored-By: Claude <no
 export declare const COMMIT_POLL_MS = 5000;
 /** The final sweep at exit shares W1.3's 2 s exit budget with the conduct receipt. */
 export declare const COMMIT_FINAL_DEADLINE_MS = 1500;
-/** on | off | unset (prerelease default); any other value reads off. */
-export declare function commitReportEnabled(raw: string | undefined, version: string): boolean;
+/** On unless MNEMOM_AGENT_COMMIT_REPORT says off (off, 0, false, no). */
+export declare function commitReportEnabled(raw: string | undefined): boolean;
 /**
  * The `--settings` fragment carrying the trailer. `user` is the commit attribution
  * the user's settings files give (highest precedence first; `false` hides all

package/dist/lib/commit-report.js

@@ -19,8 +19,9 @@
  * reported, trailer or not: a commit is bound when the index holds its sha or
  * patch-id, never by its trailer alone.
  *
- * PRERELEASE DEFAULT. On for a prerelease build (`next`), off for stable;
- * MNEMOM_AGENT_COMMIT_REPORT=on|off overrides, and any other value reads off.
+ * ON BY DEFAULT, stable and prerelease alike, so a PR from any `mnemom agent`
+ * session gets its commits bound in the record. MNEMOM_AGENT_COMMIT_REPORT=off
+ * (or 0, false, no) turns it off; any other value reads on.
  *
  * FAIL OPEN. Nothing here throws into the launch or changes its exit code. A
  * dark route (404) stops reporting for the session; a failed POST is retried on
@@ -31,7 +32,6 @@
 import { spawnSync } from "node:child_process";
 import { postRecordCommit } from "./api.js";
 import { readLineage } from "./statusline-feed.js";
-import { isPrerelease } from "./update/semver.js";
 export const COMMIT_REPORT_ENV = "MNEMOM_AGENT_COMMIT_REPORT";
 export const TRAILER_KEY = "Mnemom-Conversation";
 /** Claude Code's own commit attribution when none is configured (settings reference, `attribution`). */
@@ -43,12 +43,9 @@ export const COMMIT_FINAL_DEADLINE_MS = 1_500;
 const HEX40 = /^[0-9a-f]{40}$/;
 const REPO_SLUG = /^[A-Za-z0-9_.-]{1,100}\/[A-Za-z0-9_.-]{1,100}$/;
 const BRANCH_MAX = 255;
-/** on | off | unset (prerelease default); any other value reads off. */
-export function commitReportEnabled(raw, version) {
-    const v = (raw ?? "").trim().toLowerCase();
-    if (v === "")
-        return isPrerelease(version);
-    return ["on", "1", "true", "yes"].includes(v);
+/** On unless MNEMOM_AGENT_COMMIT_REPORT says off (off, 0, false, no). */
+export function commitReportEnabled(raw) {
+    return !["off", "0", "false", "no"].includes((raw ?? "").trim().toLowerCase());
 }
 /**
  * The `--settings` fragment carrying the trailer. `user` is the commit attribution

package/dist/lib/config.d.ts

@@ -30,7 +30,7 @@ export declare class RetiredEnvironmentError extends Error {
  * Defaults to production. `staging` throws (see RetiredEnvironmentError).
  */
 export declare function getEnvironment(): Environment;
-export type CellRing = "us-1";
+export type CellRing = "us-1" | "test";
 /** Explicitly select a ring for this process (clears on undefined). Wins over MNEMOM_RING. */
 export declare function setRing(ring: CellRing | undefined): void;
 /**
@@ -45,3 +45,10 @@ export declare function setApiUrlOverride(url: string | undefined): void;
 export declare function getApiUrl(): string;
 export declare function getGatewayUrl(): string;
 export declare function getWebsiteUrl(): string;
+/**
+ * Website base for links the CLI PRINTS (e.g. `agent share`). Same as getWebsiteUrl(), except
+ * when the CLI targets the test cell through its API alone (MNEMOM_API_URL / `--api`) and no
+ * website was chosen explicitly: then the link points at test.mnemom.ai, never www. An explicit
+ * MNEMOM_WEBSITE_URL or ring always wins; prod output is unchanged.
+ */
+export declare function getShareWebsiteUrl(): string;

package/dist/lib/config.js

@@ -60,6 +60,13 @@ const RING_URLS = {
         gateway: "https://gateway-us1.mnemom.ai",
         website: "https://preview.mnemom.ai",
     },
+    // The durable Azure TEST cell (tools/gateway-tester/README.md: api-az-test / gateway-az-test;
+    // test.mnemom.ai serves the website). Never a prod host.
+    test: {
+        api: "https://api-az-test.mnemom.ai",
+        gateway: "https://gateway-az-test.mnemom.ai",
+        website: "https://test.mnemom.ai",
+    },
 };
 function isCellRing(value) {
     return Object.prototype.hasOwnProperty.call(RING_URLS, value);
@@ -115,3 +122,24 @@ export function getGatewayUrl() {
 export function getWebsiteUrl() {
     return envBase("MNEMOM_WEBSITE_URL") ?? ringUrls()?.website ?? WEBSITE_URLS[getEnvironment()];
 }
+const TEST_CELL_API_HOST = "api-az-test.mnemom.ai";
+/**
+ * Website base for links the CLI PRINTS (e.g. `agent share`). Same as getWebsiteUrl(), except
+ * when the CLI targets the test cell through its API alone (MNEMOM_API_URL / `--api`) and no
+ * website was chosen explicitly: then the link points at test.mnemom.ai, never www. An explicit
+ * MNEMOM_WEBSITE_URL or ring always wins; prod output is unchanged.
+ */
+export function getShareWebsiteUrl() {
+    const website = getWebsiteUrl();
+    if (envBase("MNEMOM_WEBSITE_URL") || getRing())
+        return website;
+    try {
+        if (new URL(getApiUrl()).hostname.toLowerCase() === TEST_CELL_API_HOST) {
+            return RING_URLS.test.website;
+        }
+    }
+    catch {
+        /* unparseable API base: keep the default */
+    }
+    return website;
+}

package/dist/lib/durable/launch.d.ts

@@ -130,25 +130,42 @@ export declare function preReadRegistry(d: RegistryReads, name: string): Promise
 export declare function explicitCidRefusal(rows: RegistryRow[], explicitCid: string | null, name: string): DurableRefusal | null;
 export declare function planDurableLaunch(i: PlanInput, deps: PlanDeps): Promise<DurableLaunchPlan>;
 /**
- * What a launcher does after its lock attempt refused: a durable-only agent gets the
- * durable_only_agent refusal and exit 1, never a tracked spawn (C02-R24, final F02); any other
- * agent prints the lock refusal and its fix, then spawns tracked (exit null).
+ * The one stderr line a gate-on launch prints before its tracked Claude Code spawn when stdin is
+ * not a TTY and the passthrough has no -p/--print: Claude Code started that way waits forever and
+ * draws nothing. The spawn itself stays as today (C02-R23 a, b, f fallback); gate off prints
+ * nothing (C17-R11). No command line in it, so no placeholder (C11-R27). Null: print nothing.
+ */
+export declare function trackedNoTtyLine(i: {
+    name: string;
+    gateOn: boolean;
+    stdinIsTTY: boolean;
+    cliName: string;
+    passthrough: readonly string[];
+}): string | null;
+/**
+ * What a launcher does after its lock attempt refused: it exits non-zero with the refusal's own fix
+ * line and never falls back to an attended (tracked) spawn, for every agent (Durable lead ruling
+ * 2026-10-30 on C02-R23 c, e). A durable-only agent gets the durable_only_agent refusal (C02-R24,
+ * final F02); any other agent prints the lock refusal itself.
  */
 export declare function afterLockRefusal(refusal: DurableRefusal, durableOnly: boolean, launcherKey: LauncherKey, name: string): {
     print: DurableRefusal;
-    exit: number | null;
+    exit: number;
 };
 /**
- * A lock on a NEW Claude Code session (no transcript yet) waits for the session's first turn: the
- * seat resumes the transcript, so a lock before it exists fails transcript_lost. The launcher
- * spawns claude attended and locks once that turn has completed (lib/durable/first-turn.ts). A
- * continued session already has its transcript and locks instead of spawning, as before.
+ * A lock on a NEW Claude Code session (no transcript yet) is a create-and-lock (ruling A, which
+ * widens B5a to every agent): the session is born locked and its seat starts the transcript, so no
+ * attended claude ever runs first. A continued session already has its transcript and locks its
+ * registered row instead of spawning, as before.
  */
-export declare function locksAfterFirstTurn(plan: Extract<DurableLaunchPlan, {
+export declare function locksAtCreate(plan: Extract<DurableLaunchPlan, {
     kind: "spawn";
 }>): boolean;
-/** The row the first-turn lock commits: the registered row, naming the CC session this launch pins. */
-export declare function firstTurnRow(row: RegistryRow, plan: Extract<DurableLaunchPlan, {
+/**
+ * The registered row of a tracked launch, naming the CC session this launch pins: what a later lock
+ * from another terminal hands over (C02-R26).
+ */
+export declare function launchRow(row: RegistryRow, plan: Extract<DurableLaunchPlan, {
     kind: "spawn";
 }>): RegistryRow;
 /** The create body the CLI sends (A2 owns the route; see notes-c1.md). */