@mnemom/mnemom 0.17.38-next.2 → 0.17.38

package/dist/commands/agent-run.js

@@ -92,7 +92,12 @@ export async function agentRunCommand(flags, deps) {
         executorId = executorIdFromState(await deps.readExecutorState(), executorKey) ?? executorId;
     }
     const api = runnerApi({ apiUrl: deps.apiUrl, executorKey, fetch: deps.fetch });
-    const loop = { failMode: plan.failMode, stop: deps.stop, emit: deps.emit };
+    const loop = {
+        failMode: plan.failMode,
+        stop: deps.stop,
+        emit: deps.emit,
+        ...(plan.sessionId !== undefined ? { sessionId: plan.sessionId } : {}),
+    };
     const job = deps.jobDeps(api, executorId, gh.bases, modelKey, plan.credential.kind === "oidc");
     return plan.form === "once" ? runOnce(job, loop) : runWatch(job, loop);
 }

package/dist/index.js

@@ -1220,6 +1220,7 @@ agentCmd
     .option("--fail-mode <mode>", "closed (default) or open; also MNEMOM_RUNNER_FAIL_MODE")
     .option("--json", "Print only outcome lines on stdout; logs go to stderr")
     .option("--oidc", "With --once: exchange the GitHub Actions ID token for a one-job key")
+    .option("--session <uuid>", "With --once: claim only this session (a wake-up's own); never take another from the pool")
     .hook("preAction", () => requireExperimental("`mnemom agent run`", "dispatch"))
     .action(async (opts) => {
     process.exitCode = await runAgentRun(opts);

package/dist/lib/runner/loop.d.ts

@@ -3,8 +3,11 @@
  *
  * --once: list the ready pool sessions (exec_ready_list, oldest first), try each in order, and run
  * at most one job. A lost race, or an ineligible waiting / not_pool_member, moves to the next
- * candidate; an empty list, or every candidate lost, ends no_job. --watch: the same, again and
- * again, until SIGTERM or SIGINT. Every job prints exactly one outcome line (none when stopped
+ * candidate; an empty list, or every candidate lost, ends no_job. --once --session <id> (the
+ * wake-up's own session, #1329): try exactly that session and never list the pool; a 404 attest, a
+ * lost race or a skippable ineligible ends no_job, and no other session is tried, so a wake-up
+ * dispatched for one repo's session never works another's. --watch: the same as plain --once, again
+ * and again, until SIGTERM or SIGINT. Every job prints exactly one outcome line (none when stopped
  * mid-job), and the process exit code is the --once outcome's, or 0 for --watch stopped.
  *
  * Every side effect is in `JobDeps` (plus `emit`), so each arm is tested; `liveJobDeps`
@@ -21,6 +24,8 @@ export interface LoopOptions {
     emit(line: string): void;
     /** --watch: wait between empty polls, ms. */
     idlePollMs?: number;
+    /** --once --session: the one session to try; the ready list is never read. */
+    sessionId?: string;
 }
 export declare const WATCH_IDLE_POLL_MS = 15000;
 /** --watch backs off on a ready-list the api cannot answer, up to this, ms. */

package/dist/lib/runner/loop.js

@@ -3,8 +3,11 @@
  *
  * --once: list the ready pool sessions (exec_ready_list, oldest first), try each in order, and run
  * at most one job. A lost race, or an ineligible waiting / not_pool_member, moves to the next
- * candidate; an empty list, or every candidate lost, ends no_job. --watch: the same, again and
- * again, until SIGTERM or SIGINT. Every job prints exactly one outcome line (none when stopped
+ * candidate; an empty list, or every candidate lost, ends no_job. --once --session <id> (the
+ * wake-up's own session, #1329): try exactly that session and never list the pool; a 404 attest, a
+ * lost race or a skippable ineligible ends no_job, and no other session is tried, so a wake-up
+ * dispatched for one repo's session never works another's. --watch: the same as plain --once, again
+ * and again, until SIGTERM or SIGINT. Every job prints exactly one outcome line (none when stopped
  * mid-job), and the process exit code is the --once outcome's, or 0 for --watch stopped.
  *
  * Every side effect is in `JobDeps` (plus `emit`), so each arm is tested; `liveJobDeps`
@@ -58,9 +61,18 @@ async function onePass(deps, opts) {
     }
     return { kind: "none" };
 }
+/** --once --session: that session's outcome, or none; never another session. */
+async function sessionPass(deps, opts, id) {
+    if (opts.stop.aborted)
+        return { kind: "stopped" };
+    const r = await runJob(id, { failMode: opts.failMode, stop: opts.stop }, deps);
+    return r.kind === "next" ? { kind: "none" } : r;
+}
 /** --once: at most one job. Resolves the process exit code. */
 export async function runOnce(deps, opts) {
-    const p = await onePass(deps, opts);
+    const p = opts.sessionId === undefined
+        ? await onePass(deps, opts)
+        : await sessionPass(deps, opts, opts.sessionId);
     if (p.kind === "stopped")
         return 0;
     const outcome = p.kind === "outcome" ? p.outcome : noJobOutcome();

package/dist/lib/runner/options.d.ts

@@ -16,6 +16,8 @@ export interface RunFlags {
     failMode?: string;
     json?: boolean;
     oidc?: boolean;
+    /** --session <uuid>: with --once, claim exactly this session and never list the pool. */
+    session?: string;
 }
 export type RunCredential = {
     kind: "executor_key";
@@ -34,6 +36,11 @@ export interface RunPlan {
     executorId: string | null;
     /** Warnings to print on stderr (an unknown fail mode reads as closed). */
     warnings: string[];
+    /**
+     * --session: the one session this --once run may claim (the wake-up's own, #1329). Absent: the
+     * pool's ready list, oldest first, as before.
+     */
+    sessionId?: string;
 }
 export type RunPlanResult = {
     ok: true;

package/dist/lib/runner/options.js

@@ -22,6 +22,16 @@ export function resolveRunPlan(flags, env) {
     if (flags.oidc && form === "watch") {
         return usage("mnemom agent run: --oidc is valid only with --once");
     }
+    let sessionId;
+    if (flags.session !== undefined) {
+        if (form === "watch") {
+            return usage("mnemom agent run: --session is valid only with --once");
+        }
+        if (!UUID_RE.test(flags.session)) {
+            return usage("mnemom agent run: --session is not a lowercase uuid");
+        }
+        sessionId = flags.session;
+    }
     const fail = resolveFailMode(flags.failMode, env[RUNNER_FAIL_MODE_ENV]);
     const warnings = fail.warning ? [`mnemom agent run: ${fail.warning}`] : [];
     let credential;
@@ -60,6 +70,7 @@ export function resolveRunPlan(flags, env) {
             credential,
             executorId,
             warnings,
+            ...(sessionId !== undefined ? { sessionId } : {}),
         },
     };
 }

package/dist/vendor/durable-contract/index.js

@@ -1065,6 +1065,7 @@ var CLAIM_UNAVAILABLE_CAUSES = [
   /** A pool claim with no valid registry default cap (ruling 34.05.1 (3)). */
   "lease_cap_config"
 ];
+var SEAL_REPO_MISMATCH_CAUSES = ["no_repo_claim", "no_seal_repo", "repo_mismatch"];
 var UNSUPPORTED_FEATURES = [
   "tool_classes",
   "launch_spec_change",
@@ -1173,6 +1174,11 @@ var DURABLE_CODES = {
   // The per-org claim rate limit (ruling 34.24): nothing written, no key minted. retry_after_s is
   // the number of seconds to wait (claimRateLimitedDetailsOk).
   durable_claim_rate_limited: { status: 429, surfaces: ["api"], fields: ["retry_after_s"] },
+  // An OIDC executor key (bound to the repo whose GitHub Actions token minted it) claiming a session
+  // not sealed for that repo (mnemom-test#1329; mnemom-api#4530). Its own code, not a
+  // durable_claim_ineligible reason: the session is claimable, only not by this executor, and a
+  // runner never skips past it to another session. cause is a SEAL_REPO_MISMATCH_CAUSES value.
+  seal_repo_mismatch: { status: 403, surfaces: ["api"], fields: ["cause"] },
   // ---- api journal (C10-R0 (i), (j), (k)) ----
   /** Lost CAS race on (session_id, seq). */
   durable_append_conflict: { status: 409, surfaces: ["api"], fields: ["tip_seq"] },
@@ -1670,7 +1676,8 @@ var M1_CLI_SURFACE = Object.freeze([
   entry(["agent", "pause"], ["--json"]),
   entry(["agent", "resume"], ["--json"]),
   // Doors thin runner (W-L13), ruling 34.12 (1): --watch or --once, --fail-mode, --json, --oidc.
-  entry(["agent", "run"], ["--fail-mode", "--json", "--oidc", "--once", "--watch"]),
+  // --session (#1329, approved by the Durable lead): with --once, claim only the wake-up's session.
+  entry(["agent", "run"], ["--fail-mode", "--json", "--oidc", "--once", "--session", "--watch"]),
   // BACKBONE C4 (line 147: buildDurableLaunchSpec serves 'sessions adopt'); options: C14 spec
   // (`sessions adopt --dry-run --json`, `sessions adopt --own-agent`); ruling 32.33.
   entry(["agent", "sessions", "adopt"], ["--dry-run", "--json", "--own-agent"]),
@@ -2393,12 +2400,18 @@ var DISPATCH_SESSION_CID_PREFIX = "dispatch-";
 var DISPATCH_SESSION_NAME_PREFIX = "job-";
 var CREATE_READY_SESSION_REFUSALS = [
   "no_dispatch_agent",
+  // amendment 63 (signed off by Wassim 2026-11-05): neither the seal's confirmer nor the dispatch agent's
+  // creator is a user (NULL, empty or scheme-prefixed, such as github:<login>); nothing written
+  "dispatch_owner_missing",
   "seal_not_found",
   "cell_unmapped",
   // 34.10.1 (4): the api-built charter v1 or its envelope does not match the seal; nothing written
   "charter_mismatch"
 ];
 var CREATE_READY_SESSION_OUTCOMES = ["created", "existing", "refused"];
+function isUserCreator(createdBy) {
+  return typeof createdBy === "string" && createdBy !== "" && !createdBy.includes(":");
+}
 var CREATE_READY_SESSION_ANSWERS = Object.freeze({
   created: ["outcome", "session_id"],
   existing: ["outcome", "session_id"],
@@ -4092,7 +4105,9 @@ var M1_COLUMNS = {
     "last_seen_at",
     "risk_line_version",
     "created_at",
-    "scope"
+    "scope",
+    "oidc_repo",
+    "oidc_bound"
   ],
   agent_durable_profiles: [
     "id",
@@ -6572,6 +6587,7 @@ export {
   RUNNER_OUTCOME_FIELDS,
   RUNNER_REFUSED_REASONS,
   SEALED_CONTRACT_FIELDS,
+  SEAL_REPO_MISMATCH_CAUSES,
   SEAL_VECTORS,
   SEAT_DAEMON_FLAGS,
   SEAT_MAX_ATTEMPTS_NONRETRY,
@@ -6776,6 +6792,7 @@ export {
   isTerminalState,
   isTestAllowlisted,
   isUnchainedCountTokens,
+  isUserCreator,
   isValidCommitment,
   isValidSessionName,
   isValidStateReason,

package/dist/vendor/shared/durable-contract/cli-surface.js

@@ -60,7 +60,8 @@ export const M1_CLI_SURFACE = Object.freeze([
     entry(["agent", "pause"], ["--json"]),
     entry(["agent", "resume"], ["--json"]),
     // Doors thin runner (W-L13), ruling 34.12 (1): --watch or --once, --fail-mode, --json, --oidc.
-    entry(["agent", "run"], ["--fail-mode", "--json", "--oidc", "--once", "--watch"]),
+    // --session (#1329, approved by the Durable lead): with --once, claim only the wake-up's session.
+    entry(["agent", "run"], ["--fail-mode", "--json", "--oidc", "--once", "--session", "--watch"]),
     // BACKBONE C4 (line 147: buildDurableLaunchSpec serves 'sessions adopt'); options: C14 spec
     // (`sessions adopt --dry-run --json`, `sessions adopt --own-agent`); ruling 32.33.
     entry(["agent", "sessions", "adopt"], ["--dry-run", "--json", "--own-agent"]),

package/dist/vendor/shared/durable-contract/codes.d.ts

@@ -8,6 +8,13 @@
  */
 export declare const CLAIM_UNAVAILABLE_CAUSES: readonly ["schema", "arm_probe", "entitlement_lookup", "protection_probe", "guard", "lease_cap_config"];
 export type ClaimUnavailableCause = (typeof CLAIM_UNAVAILABLE_CAUSES)[number];
+/**
+ * seal_repo_mismatch details.cause (mnemom-test#1329; mnemom-api#4530 claim.ts oidcRepoBinding): the
+ * bound executor names no repo, the session has no dispatch seal naming a repo, or the seal names
+ * another repo than the executor's (owner/name, case-insensitive).
+ */
+export declare const SEAL_REPO_MISMATCH_CAUSES: readonly ["no_repo_claim", "no_seal_repo", "repo_mismatch"];
+export type SealRepoMismatchCause = (typeof SEAL_REPO_MISMATCH_CAUSES)[number];
 export declare const UNSUPPORTED_FEATURES: readonly ["tool_classes", "launch_spec_change", "above_limit_raise", "remote_control"];
 export type UnsupportedFeature = (typeof UNSUPPORTED_FEATURES)[number];
 export declare const CWD_KINDS: readonly ["subdirectory", "not_git", "symlink_transcript"];
@@ -261,6 +268,11 @@ export declare const DURABLE_CODES: {
         readonly surfaces: readonly ["api"];
         readonly fields: readonly ["retry_after_s"];
     };
+    readonly seal_repo_mismatch: {
+        readonly status: 403;
+        readonly surfaces: readonly ["api"];
+        readonly fields: readonly ["cause"];
+    };
     /** Lost CAS race on (session_id, seq). */
     readonly durable_append_conflict: {
         readonly status: 409;

package/dist/vendor/shared/durable-contract/codes.js

@@ -18,6 +18,12 @@ export const CLAIM_UNAVAILABLE_CAUSES = [
     /** A pool claim with no valid registry default cap (ruling 34.05.1 (3)). */
     "lease_cap_config",
 ];
+/**
+ * seal_repo_mismatch details.cause (mnemom-test#1329; mnemom-api#4530 claim.ts oidcRepoBinding): the
+ * bound executor names no repo, the session has no dispatch seal naming a repo, or the seal names
+ * another repo than the executor's (owner/name, case-insensitive).
+ */
+export const SEAL_REPO_MISMATCH_CAUSES = ["no_repo_claim", "no_seal_repo", "repo_mismatch"];
 export const UNSUPPORTED_FEATURES = [
     "tool_classes",
     "launch_spec_change",
@@ -134,6 +140,11 @@ export const DURABLE_CODES = {
     // The per-org claim rate limit (ruling 34.24): nothing written, no key minted. retry_after_s is
     // the number of seconds to wait (claimRateLimitedDetailsOk).
     durable_claim_rate_limited: { status: 429, surfaces: ["api"], fields: ["retry_after_s"] },
+    // An OIDC executor key (bound to the repo whose GitHub Actions token minted it) claiming a session
+    // not sealed for that repo (mnemom-test#1329; mnemom-api#4530). Its own code, not a
+    // durable_claim_ineligible reason: the session is claimable, only not by this executor, and a
+    // runner never skips past it to another session. cause is a SEAL_REPO_MISMATCH_CAUSES value.
+    seal_repo_mismatch: { status: 403, surfaces: ["api"], fields: ["cause"] },
     // ---- api journal (C10-R0 (i), (j), (k)) ----
     /** Lost CAS race on (session_id, seq). */
     durable_append_conflict: { status: 409, surfaces: ["api"], fields: ["tip_seq"] },

package/dist/vendor/shared/durable-contract/constants.d.ts

@@ -4,7 +4,13 @@
  * freeze record" are chosen here; each carries its reason. `freeze-record.ts` copies them into
  * the JSON record the eval runner reads as `$S1.<NAME>`.
  */
-/** The contract version of this package. Any change to FREEZE.json bumps it. */
+/**
+ * The contract version of this package. The per-file hashes in FREEZE.json are the change signal
+ * for S1; this number moves only on a breaking change to the contract's shape, by ruling.
+ * Precedent: amendments 59, 60 and 34.03.4 all changed FREEZE.json at 1.0.0 (lead ruling 34.35.1,
+ * 2026-11-05: the contract version is held at 1.0.0 while FREEZE hashes carry change; a bump is a
+ * separate ruling).
+ */
 export declare const DURABLE_CONTRACT_VERSION = "1.0.0";
 /**
  * `durable_schema_version()` must return exactly this. A mismatch makes the entitlement `durable`

package/dist/vendor/shared/durable-contract/constants.js

@@ -5,7 +5,13 @@
  * freeze record" are chosen here; each carries its reason. `freeze-record.ts` copies them into
  * the JSON record the eval runner reads as `$S1.<NAME>`.
  */
-/** The contract version of this package. Any change to FREEZE.json bumps it. */
+/**
+ * The contract version of this package. The per-file hashes in FREEZE.json are the change signal
+ * for S1; this number moves only on a breaking change to the contract's shape, by ruling.
+ * Precedent: amendments 59, 60 and 34.03.4 all changed FREEZE.json at 1.0.0 (lead ruling 34.35.1,
+ * 2026-11-05: the contract version is held at 1.0.0 while FREEZE hashes carry change; a bump is a
+ * separate ruling).
+ */
 export const DURABLE_CONTRACT_VERSION = "1.0.0";
 /**
  * `durable_schema_version()` must return exactly this. A mismatch makes the entitlement `durable`

package/dist/vendor/shared/durable-contract/doors.d.ts

@@ -60,8 +60,16 @@ export declare function effectiveLeaseCap(orgLimits: {
 } | null, defaultCap: number | null): number;
 export declare const DISPATCH_SESSION_CID_PREFIX = "dispatch-";
 export declare const DISPATCH_SESSION_NAME_PREFIX = "job-";
-export declare const CREATE_READY_SESSION_REFUSALS: readonly ["no_dispatch_agent", "seal_not_found", "cell_unmapped", "charter_mismatch"];
+export declare const CREATE_READY_SESSION_REFUSALS: readonly ["no_dispatch_agent", "dispatch_owner_missing", "seal_not_found", "cell_unmapped", "charter_mismatch"];
 export declare const CREATE_READY_SESSION_OUTCOMES: readonly ["created", "existing", "refused"];
+/**
+ * Amendment 63 (ruling 34.35): the one test for whether a session creator is a user, shared by the
+ * api (owner choice at dispatch, the claim's 403 not_owner, the repair) and its SQL twin
+ * public.durable_is_user_creator. A creator is a user unless it is null, empty or scheme-prefixed
+ * (contains ':', as github:<login> does). No id shape is read: uuids, Zitadel numeric ids and
+ * test-mode harness-<x> are users, so an identity-provider change does not move it.
+ */
+export declare function isUserCreator(createdBy: unknown): boolean;
 /** durable_create_ready_session's answer keys per outcome, closed (34.10 (g)(1)). */
 export declare const CREATE_READY_SESSION_ANSWERS: Readonly<{
     readonly created: readonly ["outcome", "session_id"];

package/dist/vendor/shared/durable-contract/doors.js

@@ -91,12 +91,25 @@ export const DISPATCH_SESSION_CID_PREFIX = "dispatch-";
 export const DISPATCH_SESSION_NAME_PREFIX = "job-";
 export const CREATE_READY_SESSION_REFUSALS = [
     "no_dispatch_agent",
+    // amendment 63 (signed off by Wassim 2026-11-05): neither the seal's confirmer nor the dispatch agent's
+    // creator is a user (NULL, empty or scheme-prefixed, such as github:<login>); nothing written
+    "dispatch_owner_missing",
     "seal_not_found",
     "cell_unmapped",
     // 34.10.1 (4): the api-built charter v1 or its envelope does not match the seal; nothing written
     "charter_mismatch",
 ];
 export const CREATE_READY_SESSION_OUTCOMES = ["created", "existing", "refused"];
+/**
+ * Amendment 63 (ruling 34.35): the one test for whether a session creator is a user, shared by the
+ * api (owner choice at dispatch, the claim's 403 not_owner, the repair) and its SQL twin
+ * public.durable_is_user_creator. A creator is a user unless it is null, empty or scheme-prefixed
+ * (contains ':', as github:<login> does). No id shape is read: uuids, Zitadel numeric ids and
+ * test-mode harness-<x> are users, so an identity-provider change does not move it.
+ */
+export function isUserCreator(createdBy) {
+    return typeof createdBy === "string" && createdBy !== "" && !createdBy.includes(":");
+}
 /** durable_create_ready_session's answer keys per outcome, closed (34.10 (g)(1)). */
 export const CREATE_READY_SESSION_ANSWERS = Object.freeze({
     created: ["outcome", "session_id"],

package/dist/vendor/shared/durable-contract/freeze-record.d.ts

@@ -737,7 +737,7 @@ export declare const FREEZE_STRUCTURED: Readonly<{
     OIDC_EXCHANGE_REFUSALS: readonly ["bad_issuer", "repo_not_enrolled", "ref_not_allowed", "pool_flag_off"];
     ORG_POLICY_LIMIT_KEYS: readonly ["per_session_budget_usd", "live_lease_cap"];
     POOL_CLAIM_FIELDS: readonly ["contract_sha256", "contract_version", "cap"];
-    CREATE_READY_SESSION_REFUSALS: readonly ["no_dispatch_agent", "seal_not_found", "cell_unmapped", "charter_mismatch"];
+    CREATE_READY_SESSION_REFUSALS: readonly ["no_dispatch_agent", "dispatch_owner_missing", "seal_not_found", "cell_unmapped", "charter_mismatch"];
     CREATE_READY_SESSION_OUTCOMES: readonly ["created", "existing", "refused"];
     CREATE_READY_SESSION_ANSWERS: Readonly<{
         readonly created: readonly ["outcome", "session_id"];

package/dist/vendor/shared/durable-contract/schema.d.ts

@@ -27,6 +27,15 @@
  *  - agent_sessions.job_failures (INTEGER NOT NULL DEFAULT 0, CHECK >= 0): the pool job's accepted
  *    runner_failed count, never reset. Separate from resume_failures, so a lease lapse never spends
  *    a job retry and a job retry never counts towards respawn_failed.
+ *
+ * OIDC repo binding (mnemom-test#1329; S1 amendment approved by the Durable lead; mnemom-api#4530
+ * migration durable_m1_doors_48_w17_oidc_repo_binding), appended to its table:
+ *  - agent_executors.oidc_repo (TEXT NULL): the owner/name repo whose GitHub Actions token minted
+ *    the executor in the OIDC exchange (durable_apply_oidc_enrollment); NULL on every other row;
+ *  - agent_executors.oidc_bound (BOOLEAN NOT NULL DEFAULT false): true only on a row the OIDC
+ *    exchange wrote with oidc_repo. A bound executor claims only sessions whose dispatch seal names
+ *    that repo, else 403 seal_repo_mismatch (SEAL_REPO_MISMATCH_CAUSES); an unbound row (every
+ *    row written before the migration) is not checked.
  */
 export declare const M1_TABLES: readonly ["agent_sessions", "durable_lease_keys", "agent_session_charters", "agent_session_events", "durable_event_kinds", "agent_session_chains", "agent_executors", "agent_durable_profiles", "durable_cell_state", "durable_org_policy", "durable_user_policy", "durable_approvals", "durable_approval_attestations"];
 export type M1Table = (typeof M1_TABLES)[number];

package/dist/vendor/shared/durable-contract/schema.js

@@ -28,6 +28,15 @@
  *  - agent_sessions.job_failures (INTEGER NOT NULL DEFAULT 0, CHECK >= 0): the pool job's accepted
  *    runner_failed count, never reset. Separate from resume_failures, so a lease lapse never spends
  *    a job retry and a job retry never counts towards respawn_failed.
+ *
+ * OIDC repo binding (mnemom-test#1329; S1 amendment approved by the Durable lead; mnemom-api#4530
+ * migration durable_m1_doors_48_w17_oidc_repo_binding), appended to its table:
+ *  - agent_executors.oidc_repo (TEXT NULL): the owner/name repo whose GitHub Actions token minted
+ *    the executor in the OIDC exchange (durable_apply_oidc_enrollment); NULL on every other row;
+ *  - agent_executors.oidc_bound (BOOLEAN NOT NULL DEFAULT false): true only on a row the OIDC
+ *    exchange wrote with oidc_repo. A bound executor claims only sessions whose dispatch seal names
+ *    that repo, else 403 seal_repo_mismatch (SEAL_REPO_MISMATCH_CAUSES); an unbound row (every
+ *    row written before the migration) is not checked.
  */
 import { canonicalJson, sha256Hex, UUID_RE } from "./canonical.js";
 import { CANONICAL_CELL_IDS } from "./cell-id.js";
@@ -150,6 +159,8 @@ export const M1_COLUMNS = {
         "risk_line_version",
         "created_at",
         "scope",
+        "oidc_repo",
+        "oidc_bound",
     ],
     agent_durable_profiles: [
         "id",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mnemom/mnemom",
-  "version": "0.17.38-next.2",
+  "version": "0.17.38",
   "description": "Transparent AI agent tracing",
   "type": "module",
   "bin": {