@mnemom/mnemom 0.17.38-next.0 → 0.17.38-next.2

package/dist/commands/agent-doctor.d.ts

@@ -10,7 +10,7 @@
  * (200 + the x-mnemom-verdict header that proves the governance pipeline is
  * live), Remote-Control capability (node + openssl + the --remote-control flag),
  * claude.ai login (informational — Remote Control needs it), the agent's governance
- * modes (off by default for new agents), and CLI auto-update status.
+ * modes (integrity observe, Safe House off for new agents), and CLI auto-update status.
  */
 type Mark = "ok" | "warn" | "miss" | "info";
 export interface DoctorOptions {
@@ -51,7 +51,7 @@ export interface GovernanceProbe {
 /**
  * The governance line: the composed (every layer, strictest wins) integrity and
  * Safe House modes of the agent a launch would use. Signed out, no such agent,
- * or an unreadable card → info with the off-by-default note, never a MISS
+ * or an unreadable card → info with the new-agent default note, never a MISS
  * (governance never blocks a launch). On → info naming the per-turn cost; a
  * stricter layer outranks the agent's own card (any rung up the ladder off <
  * observe < nudge < enforce, MNE-8612) → warn naming the layer.

package/dist/commands/agent-doctor.js

@@ -10,7 +10,7 @@
  * (200 + the x-mnemom-verdict header that proves the governance pipeline is
  * live), Remote-Control capability (node + openssl + the --remote-control flag),
  * claude.ai login (informational — Remote Control needs it), the agent's governance
- * modes (off by default for new agents), and CLI auto-update status.
+ * modes (integrity observe, Safe House off for new agents), and CLI auto-update status.
  */
 import { spawnSync } from "node:child_process";
 import { existsSync } from "node:fs";
@@ -119,7 +119,7 @@ export async function agentDoctorCommand(options = {}) {
             add("info", "claude.ai login: could not determine");
     }
     add(gate.mark, gate.text, gate.hint);
-    // ── governance (off by default for new agents) ──
+    // ── governance (integrity observe, Safe House off for new agents) ──
     const gov = await probeGovernance(options.agent);
     add(gov.mark, gov.text, gov.hint);
     // ── CLI auto-update ──
@@ -236,7 +236,7 @@ const OPT_IN_HINT = GOVERNANCE_OPT_IN_HINT.trim();
 /**
  * The governance line: the composed (every layer, strictest wins) integrity and
  * Safe House modes of the agent a launch would use. Signed out, no such agent,
- * or an unreadable card → info with the off-by-default note, never a MISS
+ * or an unreadable card → info with the new-agent default note, never a MISS
  * (governance never blocks a launch). On → info naming the per-turn cost; a
  * stricter layer outranks the agent's own card (any rung up the ladder off <
  * observe < nudge < enforce, MNE-8612) → warn naming the layer.
@@ -244,7 +244,7 @@ const OPT_IN_HINT = GOVERNANCE_OPT_IN_HINT.trim();
 export async function probeGovernance(agent) {
     const offByDefault = {
         mark: "info",
-        text: "governance: off by default for new agents (AIP integrity analysis, Safe House screening)",
+        text: "governance: new agents get AIP integrity analysis (observe); Safe House screening is off by default",
         hint: `${OPT_IN_HINT} Agents set up before this default keep their cards.`,
     };
     if (!(await isLoggedIn()))

package/dist/commands/agent-run.d.ts

@@ -8,7 +8,9 @@
  * errors exit 2 with no outcome line; every outcome line goes to stdout, every log to stderr.
  *
  * The GitHub token (GH_TOKEN, GITHUB_TOKEN, else `gh auth token`) is the runner's own: it reaches
- * git only through GIT_CONFIG_* env (never argv) and the phases never see it (phaseEnv).
+ * git only through GIT_CONFIG_* env (never argv) and the phases never see it (phaseEnv). Under
+ * --oidc the PR is pushed and opened with the job's PR token instead (ruling 34.34): the api's
+ * Record App token for the seal's repo, fetched with the lease key, carried the same way.
  *
  * So is the Anthropic key (ruling 34.30.1): the phases' model calls are billed to the runner's own
  * ANTHROPIC_API_KEY, which only the model proxy holds and sets on each upstream request. A runner
@@ -35,7 +37,9 @@ export interface RunDeps {
     stop: AbortSignal;
     /** The text of this host's executor-state.json, or null when there is none. */
     readExecutorState?(): Promise<string | null>;
-    jobDeps(api: RunnerApi, executorId: string | null, github: GithubBases, modelKey: string): JobDeps;
+    jobDeps(api: RunnerApi, executorId: string | null, github: GithubBases, modelKey: string, 
+    /** True under --oidc: the job opens its PR with the api's PR token (ruling 34.34). */
+    prTokenFromLease: boolean): JobDeps;
 }
 /** The refusal of a runner with no ANTHROPIC_API_KEY (34.30.1); a config error, exit 2. */
 export declare const RUNNER_MODEL_KEY_MISSING = "runner_model_key_missing";
@@ -78,6 +82,10 @@ export declare function liveJobDeps(api: RunnerApi, opts: {
     executorId: string | null;
     github: GithubBases;
     modelKey: string;
+    /** The credential is the --oidc exchange: the PR uses the job's PR token (ruling 34.34). */
+    prTokenFromLease?: boolean;
+    /** The git runner for an env; tests inject one to see which credentials a push carries. */
+    makeGit?: (env: NodeJS.ProcessEnv) => Git;
 }): JobDeps;
 /** The process wiring: signals, stdout and stderr. Resolves the exit code. */
 export declare function runAgentRun(flags: RunFlags): Promise<number>;

package/dist/commands/agent-run.js

@@ -8,7 +8,9 @@
  * errors exit 2 with no outcome line; every outcome line goes to stdout, every log to stderr.
  *
  * The GitHub token (GH_TOKEN, GITHUB_TOKEN, else `gh auth token`) is the runner's own: it reaches
- * git only through GIT_CONFIG_* env (never argv) and the phases never see it (phaseEnv).
+ * git only through GIT_CONFIG_* env (never argv) and the phases never see it (phaseEnv). Under
+ * --oidc the PR is pushed and opened with the job's PR token instead (ruling 34.34): the api's
+ * Record App token for the seal's repo, fetched with the lease key, carried the same way.
  *
  * So is the Anthropic key (ruling 34.30.1): the phases' model calls are billed to the runner's own
  * ANTHROPIC_API_KEY, which only the model proxy holds and sets on each upstream request. A runner
@@ -91,7 +93,7 @@ export async function agentRunCommand(flags, deps) {
     }
     const api = runnerApi({ apiUrl: deps.apiUrl, executorKey, fetch: deps.fetch });
     const loop = { failMode: plan.failMode, stop: deps.stop, emit: deps.emit };
-    const job = deps.jobDeps(api, executorId, gh.bases, modelKey);
+    const job = deps.jobDeps(api, executorId, gh.bases, modelKey, plan.credential.kind === "oidc");
     return plan.form === "once" ? runOnce(job, loop) : runWatch(job, loop);
 }
 // ── GitHub and git, for the live driver ──────────────────────────────────────
@@ -259,7 +261,10 @@ export function runPhaseProcess(inv, ws, modelUrl, signal, parentEnv = process.e
 export function liveJobDeps(api, opts) {
     const gh = opts.github;
     const token = resolveGithubToken(opts.env);
-    const git = liveGit(gitAuthEnv(opts.env, token, gh.web));
+    const makeGit = opts.makeGit ?? liveGit;
+    const git = makeGit(gitAuthEnv(opts.env, token, gh.web));
+    // The PR token's git: a fresh env, so its header replaces the runner token's, never adds to it.
+    const gitFor = (t) => t === null ? git : makeGit(gitAuthEnv(opts.env, t, gh.web));
     return {
         api,
         executorId: opts.executorId,
@@ -272,11 +277,12 @@ export function liveJobDeps(api, opts) {
         startProxy: (state) => startModelProxy(`${getGatewayUrl()}/anthropic`, state, opts.modelKey),
         prepareWorkspace: (repo, sessionId) => prepareWorkspace(git, `${gh.web}/${repo}.git`, sessionId),
         runPhase: (inv, ws, modelUrl, signal) => runPhaseProcess(inv, ws, modelUrl, signal, opts.env),
-        openPr: (repo, ws, title, body) => openPr(git, opts.fetch, token, repo, ws, title, body, gh.api),
+        openPr: (repo, ws, title, body, prToken) => openPr(gitFor(prToken), opts.fetch, prToken ?? token, repo, ws, title, body, gh.api),
         commitsAhead: (ws) => commitsAhead(git, ws),
         headSha: (ws) => headSha(git, ws),
         commitBodies: (ws, since, lineageKey, repo) => commitBodies(git, ws, since, lineageKey, repo),
-        enableAutoMerge: (prUrl) => enableAutoMerge(opts.fetch, token, prUrl, gh),
+        enableAutoMerge: (prUrl, prToken) => enableAutoMerge(opts.fetch, prToken ?? token, prUrl, gh),
+        prTokenFromLease: opts.prTokenFromLease === true,
         cleanup: cleanupWorkspace,
     };
 }
@@ -296,7 +302,7 @@ export function runAgentRun(flags) {
         err: (line) => process.stderr.write(`${line}\n`),
         stop: stop.signal,
         readExecutorState: () => readFile(executorStatePath(homedir()), "utf8").catch(() => null),
-        jobDeps: (api, executorId, github, modelKey) => liveJobDeps(api, { fetch, env: process.env, executorId, github, modelKey }),
+        jobDeps: (api, executorId, github, modelKey, prTokenFromLease) => liveJobDeps(api, { fetch, env: process.env, executorId, github, modelKey, prTokenFromLease }),
     }).finally(() => {
         process.off("SIGTERM", onSignal);
         process.off("SIGINT", onSignal);

package/dist/commands/agent-setup.d.ts

@@ -6,12 +6,13 @@
  * governed identity `agent-<handle>`. This module makes that identity REAL in
  * their Mnemom org: it births the agent through the gateway, claims it (so the
  * customer owns it), and publishes a sane default coding posture. Governance that
- * costs a model call is OFF by default (operator 2026-10-02: AIP integrity and
- * Safe House analysis are billed, so nobody pays for them until they turn them
- * on); governance that costs none stays ON (operator 2026-10-03: autonomy is
+ * costs a model call is split (operator 2026-11-04, MNE-9728, matching the API new-agent
+ * default): AIP integrity analysis is ON (observe) for a new agent so it is analyzed and can earn
+ * a reputation rating, billed at cost; Safe House screening stays OFF until asked for (operator
+ * 2026-10-02); governance that costs none stays ON (operator 2026-10-03: autonomy is
  * rules-only verification + policy). The goal contract is what nudges (re-anchor
  * on drift). Specifically:
- *   - alignment card: autonomy_mode = observe, integrity_mode = off, the agent's
+ *   - alignment card: autonomy_mode = observe, integrity_mode = observe, the agent's
  *     org as principal (delegated_authority), Claude Code tool names as bounded
  *     actions, coding forbidden actions, defined values, grace 0, and no default
  *     escalation trigger for irreversible operations (the customer adds their own);
@@ -22,8 +23,8 @@
  *   older default's content and keeps the agent's modes.
  *   - goal-alignment: nudge — sealed per-conversation via the goal contract
  *     (--goal …), graded and re-anchored by the gateway.
- * `--governance [integrity,safe-house]` opts a setup in (observe-only, billed at
- * cost on top of the agent fee); `--no-governance` turns every card off, autonomy
+ * `--governance [integrity,safe-house]` picks exactly those features on (observe-only,
+ * billed at cost on top of the agent fee; `--governance none` opts out of both); `--no-governance` turns every card off, autonomy
  * included; a refresh of an already-claimed agent keeps the
  * modes its own cards carry unless a --governance / --no-governance flag says otherwise.
  *
@@ -40,7 +41,8 @@ import { type CardSources, type CodeEntitlement } from "../lib/api.js";
 export type GovernanceMode = "off" | "observe";
 /**
  * The governance features a setup turns on. Each is a model call per turn that
- * the customer pays for at cost, so both are off unless asked for.
+ * the customer pays for at cost. Integrity is on for a new agent (opt out with `--governance none`
+ * or `--no-governance`); Safe House is off unless asked for.
  */
 export interface GovernanceOptIn {
     /**
@@ -58,7 +60,7 @@ export interface GovernanceOptIn {
 export declare const GOVERNANCE_FEATURES: readonly ["integrity", "safe-house"];
 /**
  * Parse the `--governance [features]` / `--no-governance` flag. undefined = not
- * given (new agents get autonomy only; a refresh keeps the agent's current modes),
+ * given (new agents get autonomy + integrity; a refresh keeps the agent's current modes),
  * true = every feature, false (`--no-governance`) = everything off, autonomy
  * included, a string = a comma-separated list of `integrity`, `safe-house`, `all`
  * or `none`, each keeping autonomy on. Throws on an unknown name.
@@ -140,7 +142,7 @@ interface ExistingCards {
     align: Record<string, unknown> | null;
     prot: Record<string, unknown> | null;
 }
-/** Printed when a setup ran without --governance: how to opt in, and what it costs. */
+/** Printed when a setup ran without --governance: what is on by default, how to change it, and what it costs. */
 export declare const GOVERNANCE_OPT_IN_HINT: string;
 /**
  * The default governed-agent slug for the current customer: `agent-<handle>`,

package/dist/commands/agent-setup.js

@@ -6,12 +6,13 @@
  * governed identity `agent-<handle>`. This module makes that identity REAL in
  * their Mnemom org: it births the agent through the gateway, claims it (so the
  * customer owns it), and publishes a sane default coding posture. Governance that
- * costs a model call is OFF by default (operator 2026-10-02: AIP integrity and
- * Safe House analysis are billed, so nobody pays for them until they turn them
- * on); governance that costs none stays ON (operator 2026-10-03: autonomy is
+ * costs a model call is split (operator 2026-11-04, MNE-9728, matching the API new-agent
+ * default): AIP integrity analysis is ON (observe) for a new agent so it is analyzed and can earn
+ * a reputation rating, billed at cost; Safe House screening stays OFF until asked for (operator
+ * 2026-10-02); governance that costs none stays ON (operator 2026-10-03: autonomy is
  * rules-only verification + policy). The goal contract is what nudges (re-anchor
  * on drift). Specifically:
- *   - alignment card: autonomy_mode = observe, integrity_mode = off, the agent's
+ *   - alignment card: autonomy_mode = observe, integrity_mode = observe, the agent's
  *     org as principal (delegated_authority), Claude Code tool names as bounded
  *     actions, coding forbidden actions, defined values, grace 0, and no default
  *     escalation trigger for irreversible operations (the customer adds their own);
@@ -22,8 +23,8 @@
  *   older default's content and keeps the agent's modes.
  *   - goal-alignment: nudge — sealed per-conversation via the goal contract
  *     (--goal …), graded and re-anchored by the gateway.
- * `--governance [integrity,safe-house]` opts a setup in (observe-only, billed at
- * cost on top of the agent fee); `--no-governance` turns every card off, autonomy
+ * `--governance [integrity,safe-house]` picks exactly those features on (observe-only,
+ * billed at cost on top of the agent fee; `--governance none` opts out of both); `--no-governance` turns every card off, autonomy
  * included; a refresh of an already-claimed agent keeps the
  * modes its own cards carry unless a --governance / --no-governance flag says otherwise.
  *
@@ -55,7 +56,7 @@ const say = (line = "") => console.error(line);
 export const GOVERNANCE_FEATURES = ["integrity", "safe-house"];
 /**
  * Parse the `--governance [features]` / `--no-governance` flag. undefined = not
- * given (new agents get autonomy only; a refresh keeps the agent's current modes),
+ * given (new agents get autonomy + integrity; a refresh keeps the agent's current modes),
  * true = every feature, false (`--no-governance`) = everything off, autonomy
  * included, a string = a comma-separated list of `integrity`, `safe-house`, `all`
  * or `none`, each keeping autonomy on. Throws on an unknown name.
@@ -219,15 +220,16 @@ export function newAgentModes(governance) {
     const autonomy = modeOf(governance?.autonomy ?? true);
     return {
         autonomy,
-        integrity: modeOf(governance?.integrity ?? false),
+        integrity: modeOf(governance?.integrity ?? true),
         protection: modeOf(governance?.safeHouse ?? false),
         allowUnmappedTools: autonomy === "observe" ? true : undefined,
     };
 }
 /**
  * The plan for refreshing an EXISTING agent: an explicit --governance /
- * --no-governance wins; else it keeps the modes its own cards carry. No agent-layer
- * card → the new-agent defaults (it never had one). A card with no mode field →
+ * --no-governance wins; else it keeps the modes its own cards carry. No agent-layer card → autonomy and Safe House get the
+ * new-agent defaults but integrity stays off (an existing agent is never silently opted in to billed
+ * analysis; MNE-9728). A card with no mode field →
  * observe (the prior CLI always wrote observe). A failed read → null: skip the refresh.
  */
 async function existingAgentPlan(agentId, governance) {
@@ -252,7 +254,7 @@ async function existingAgentPlan(agentId, governance) {
     return {
         modes: {
             autonomy: align ? (modeField(align, "autonomy_mode") ?? "observe") : fresh.autonomy,
-            integrity: align ? (modeField(align, "integrity_mode") ?? "observe") : fresh.integrity,
+            integrity: align ? (modeField(align, "integrity_mode") ?? "observe") : "off", // an existing agent with no card of its own is not silently opted in to billed analysis (MNE-9728)
             protection: prot ? (modeField(prot, "mode") ?? "observe") : fresh.protection,
             allowUnmappedTools: align
                 ? typeof ownAllow === "boolean"
@@ -263,9 +265,10 @@ async function existingAgentPlan(agentId, governance) {
         existing: { align, prot },
     };
 }
-/** Printed when a setup ran without --governance: how to opt in, and what it costs. */
-export const GOVERNANCE_OPT_IN_HINT = "  Governance (AIP integrity analysis, Safe House screening) is off by default. Turn it on with " +
-    "`mnemom agent setup --governance` (or --governance integrity / safe-house); it is billed at cost on top of the agent fee.";
+/** Printed when a setup ran without --governance: what is on by default, how to change it, and what it costs. */
+export const GOVERNANCE_OPT_IN_HINT = "  AIP integrity analysis is on (observe) for new agents; Safe House screening is off by default. " +
+    "Opt out of integrity with `mnemom agent setup --governance none` (or --no-governance); turn Safe House on with " +
+    "`--governance integrity,safe-house`. Both are billed at cost on top of the agent fee.";
 /**
  * The default governed-agent slug for the current customer: `agent-<handle>`,
  * where <handle> is the local-part of their mnemom login email (sanitised), or
@@ -457,8 +460,8 @@ async function confirmClaimed(opts, anchorKey, fp) {
             const plan = await existingAgentPlan(agentId, opts.governance);
             if (plan) {
                 if (!opts.governance) {
-                    say(fmt.dim(`  Keeping its current governance (${describeModes(plan.modes)}). New agents default to off; ` +
-                        "`--governance` turns it on, `--no-governance` turns it off."));
+                    say(fmt.dim(`  Keeping its current governance (${describeModes(plan.modes)}). New agents default to integrity observe; ` +
+                        "`--governance` picks features, `--no-governance` turns everything off."));
                 }
                 // The principal is the agent's own org, which a refresh may launch from another.
                 const ownOrg = await agentOrgId(agentId);
@@ -511,7 +514,7 @@ async function confirmClaimed(opts, anchorKey, fp) {
     }
     say(fmt.success(`mnemom agent: claimed '${slug}' (${agentId}) in ${opts.orgLabel}.`));
     await noteSameNamedAgent(slug, agentId);
-    // Publish the default cards (autonomy observe; integrity + Safe House off unless
+    // Publish the default cards (autonomy + integrity observe; Safe House off unless
     // --governance). A card write that can't complete does NOT undo the claim — the agent is
     // claimed and governed on whatever landed; we warn how to finish it.
     if (opts.setup !== false) {
@@ -1443,9 +1446,11 @@ function carryForward(card, kind) {
         return card;
     return upgradeInPlace(card, kind) ?? card;
 }
-export function buildCodeAlignmentCard(agentId, modes = {
+export function buildCodeAlignmentCard(agentId, 
+// Every production caller passes modes; the fallback's integrity matches the new-agent default (MNE-9728).
+modes = {
     autonomy: "off",
-    integrity: "off",
+    integrity: "observe",
 }, principal = UNSPECIFIED_PRINCIPAL) {
     return {
         card_version: "unified/2026-04-26",

package/dist/commands/card.js

@@ -885,7 +885,7 @@ export async function cardEditCommand(agentName, options = {}) {
             card_version: "unified/2026-04-26",
             agent_id: agentId,
             autonomy_mode: "observe",
-            integrity_mode: "off",
+            integrity_mode: "observe", // new-agent default (MNE-9728); set to off to opt out
             enforcement: { allow_unmapped_tools: true },
             principal: { type: "agent", identifier: agentId, relationship: "delegated_authority" },
             values: { declared: ["transparency", "safety", "honesty"] },

package/dist/commands/onboard.js

@@ -45,6 +45,7 @@ import { isInteractive, askInput, askYesNo } from "../lib/prompt.js";
 import { getWebsiteUrl } from "../lib/config.js";
 import { openBrowser } from "../lib/oauth.js";
 import { fmt } from "../lib/format.js";
+import { starterIntegrityMode } from "../lib/starter-integrity.js";
 const FULL_PROOF_RE = /^[0-9a-f]{64}$/;
 /**
  * Entry point for `mnemom onboard`. Throws on a fatal error (caught by the
@@ -94,7 +95,7 @@ export async function onboardCommand(options = {}) {
     say();
     say(`${fmt.badge("alignment", "cyan")} Declaring your alignment card…`);
     try {
-        await putAlignmentCard(agentId, JSON.stringify(buildStarterAlignmentCard(agentId)), "application/json", 
+        await putAlignmentCard(agentId, JSON.stringify(buildStarterAlignmentCard(agentId, await starterIntegrityMode(agentId))), "application/json", 
         // A STABLE key so a re-run replays the same server-side reservation
         // (idempotent no-op) rather than writing a divergent duplicate card.
         { idempotencyKey: `onboard-alignment-${agentId}` });
@@ -353,16 +354,16 @@ async function earnRating(agentId, steps, say) {
 // ── starter alignment card ──────────────────────────────────────────────────────
 /**
  * A starter alignment card: autonomy observe (rules only, no model call), integrity
- * `off` (alignment analysis is billed; the user turns it on) — the honest, minimal declaration
+ * as the agent's own card has it (observe for a new agent, MNE-9728; see lib/starter-integrity.ts) — the honest, minimal declaration
  * of intent for a freshly-onboarded agent. Mirrors the shape `wrap` seeds so the
  * two skill-runners produce a consistent first card.
  */
-function buildStarterAlignmentCard(agentId) {
+function buildStarterAlignmentCard(agentId, integrityMode) {
     return {
         card_version: "unified/2026-04-26",
         agent_id: agentId,
         autonomy_mode: "observe",
-        integrity_mode: "off",
+        integrity_mode: integrityMode, // the agent's own mode; observe for a new agent (MNE-9728)
         // No capability mappings here, so unmapped tools must pass or every turn fails.
         enforcement: { allow_unmapped_tools: true },
         principal: { type: "agent", identifier: agentId, relationship: "delegated_authority" },

package/dist/commands/scan.d.ts

@@ -10,10 +10,9 @@ import { selectSpend } from "../lib/scan/spend/spend-tiers.js";
 import { type AnthropicUsageDeps, type MeasuredUsage } from "../lib/scan/spend/anthropic-usage.js";
 import { type WifDeps } from "../lib/scan/spend/anthropic-wif.js";
 import { type RecordDeps, type RecordOutcome } from "../lib/scan/record.js";
-import { type CostSpend } from "../lib/scan/cost-per-pr.js";
+import type { CostSpend } from "../lib/scan/cost-per-pr.js";
 import { type ReportEmailDeps } from "../lib/scan/report-email.js";
 import { type RepoListDeps } from "../lib/scan/repo-picker.js";
-import { type ReportRecipients } from "../lib/scan/share.js";
 export interface ScanCommandOptions {
     repos: string[];
     period?: {
@@ -21,8 +20,10 @@ export interface ScanCommandOptions {
         end: string;
     };
     share?: string;
-    /** Report recipient. Required unless the runner is the CTO (asked when omitted). */
+    /** Alias of one --email (kept for older scripts). */
     ctoEmail?: string;
+    /** Extra recipients of the report (repeatable; comma-separated accepted). The runner and every org admin always get it. */
+    email?: string[];
     /** Tier 2: the CTO's own monthly figure, as typed. Needs MNEMOM_ORG_SCAN_MODE=true. */
     monthlySpend?: string;
     /** Tier 2 without a figure on the command line: ask for one on the terminal. */
@@ -71,11 +72,24 @@ export interface ScanCommandOptions {
 /** Parses repeated/comma-separated `--repo owner/name`. Returns null on any invalid slug. */
 export declare function parseRepoFlags(raw: string[] | undefined): string[] | null;
 export declare const isEmail: (v: unknown) => v is string;
-/** The runner's email (mnemom login, else asked) and the CTO's (flag, else "are you the CTO?"). */
-export declare function resolveRecipients(o: {
-    runnerEmail?: string;
+export declare const DELETE_CONTACT = "privacy@mnemom.ai";
+export declare const EMAIL_ONE_MSG = "Enter one email address, like you@company.com.";
+export declare const EMAIL_LIST_MSG = "Enter email addresses like you@company.com, separated by commas.";
+export declare const MAX_EXTRA_EMAILS = 10;
+/**
+ * The people to add to the report email (the runner and every org admin always get it). Comes from the
+ * repeatable --email flag (and its alias --cto-email), each value one address or a comma-separated list;
+ * on a terminal with none given, asks once (blank to skip). Plain-language errors; the value is never echoed.
+ */
+export declare function resolveExtraEmails(o: {
+    email?: string[];
     ctoEmail?: string;
-}): Promise<ReportRecipients>;
+    isTty?: boolean;
+}): Promise<string[]>;
+/** The runner's own address from the Mnemom login, or undefined (the server resolves it for the email either way). */
+export declare function runnerEmailFromLogin(o: {
+    runnerEmail?: string;
+}): string | undefined;
 /** The CTO's figure in USD, or null for none. Throws fixed text only; the input is never echoed. */
 export declare function resolveSelfReportedSpend(o: ScanCommandOptions): Promise<number | null>;
 /**