@mnemom/mnemom 0.17.39-next.0 → 0.17.39-next.1

package/dist/commands/agent-run.js

@@ -72,6 +72,8 @@ export async function agentRunCommand(flags, deps) {
             apiUrl: deps.apiUrl,
             requestUrl: plan.credential.requestUrl,
             requestToken: plan.credential.requestToken,
+            // Amendment 66: set by the action from the wake-up's adopt-ticket input; empty sends none.
+            adoptTicket: deps.env.MNEMOM_ADOPT_TICKET?.trim() || null,
         });
         if (!ex.ok) {
             // No job is held yet: fail closed whatever --fail-mode says (34.12 (6)).

package/dist/lib/runner/oidc.d.ts

@@ -30,10 +30,15 @@ export declare function actionsIdToken(fetch: FetchFn, requestUrl: string, reque
     ok: false;
     detail: string;
 }>;
-/** Fetch the ID token and exchange it for a one-lease executor key. */
+/**
+ * Fetch the ID token and exchange it for a one-lease executor key. `adoptTicket` (Amendment 66) is
+ * the ticket the api's wake-up passed this run as the adopt-ticket input; it rides in the body
+ * beside the token, and like the token it never reaches a log line or an outcome.
+ */
 export declare function exchangeOidc(opts: {
     fetch: FetchFn;
     apiUrl: string;
     requestUrl: string;
     requestToken: string;
+    adoptTicket?: string | null;
 }): Promise<OidcExchange>;

package/dist/lib/runner/oidc.js

@@ -54,7 +54,11 @@ export async function actionsIdToken(fetch, requestUrl, requestToken) {
         return { ok: false, detail: `ID token request failed: ${e.message}` };
     }
 }
-/** Fetch the ID token and exchange it for a one-lease executor key. */
+/**
+ * Fetch the ID token and exchange it for a one-lease executor key. `adoptTicket` (Amendment 66) is
+ * the ticket the api's wake-up passed this run as the adopt-ticket input; it rides in the body
+ * beside the token, and like the token it never reaches a log line or an outcome.
+ */
 export async function exchangeOidc(opts) {
     const id = await actionsIdToken(opts.fetch, opts.requestUrl, opts.requestToken);
     if (!id.ok)
@@ -65,7 +69,9 @@ export async function exchangeOidc(opts) {
         res = await opts.fetch(`${base}${routePath("exec_oidc_exchange")}`, {
             method: "POST",
             headers: { accept: "application/json", "content-type": "application/json" },
-            body: JSON.stringify({ oidc_token: id.token }),
+            body: JSON.stringify(opts.adoptTicket
+                ? { oidc_token: id.token, adopt_ticket: opts.adoptTicket }
+                : { oidc_token: id.token }),
         });
     }
     catch (e) {

package/dist/vendor/durable-contract/index.js

@@ -238,12 +238,20 @@ var WAIT_REASONS = [
   "mnemom_unavailable",
   "ci",
   "question",
-  "budget"
+  "budget",
+  "awaiting_issue_run",
+  "repo_arm_unreadable"
 ];
 var PARKED_ONLY_WAIT_REASONS = [
   "ci",
   "question",
-  "budget"
+  "budget",
+  "awaiting_issue_run",
+  "repo_arm_unreadable"
+];
+var DISPATCH_PARK_WAIT_REASONS = [
+  "awaiting_issue_run",
+  "repo_arm_unreadable"
 ];
 function isSessionState(v) {
   return typeof v === "string" && SESSION_STATES.includes(v);
@@ -1066,6 +1074,7 @@ var CLAIM_UNAVAILABLE_CAUSES = [
   "lease_cap_config"
 ];
 var SEAL_REPO_MISMATCH_CAUSES = ["no_repo_claim", "no_seal_repo", "repo_mismatch"];
+var ADOPT_REFUSED_CAUSES = ["no_parked_seal", "not_parked"];
 var UNSUPPORTED_FEATURES = [
   "tool_classes",
   "launch_spec_change",
@@ -1179,6 +1188,9 @@ var DURABLE_CODES = {
   // durable_claim_ineligible reason: the session is claimable, only not by this executor, and a
   // runner never skips past it to another session. cause is a SEAL_REPO_MISMATCH_CAUSES value.
   seal_repo_mismatch: { status: 403, surfaces: ["api"], fields: ["cause"] },
+  // S1 amendment 64 (mnemom-test#1336): exec_adopt found nothing it may unpark for this run. Nothing
+  // is written. cause is an ADOPT_REFUSED_CAUSES value.
+  adopt_refused: { status: 409, surfaces: ["api"], fields: ["cause"] },
   // ---- api journal (C10-R0 (i), (j), (k)) ----
   /** Lost CAS race on (session_id, seq). */
   durable_append_conflict: { status: 409, surfaces: ["api"], fields: ["tip_seq"] },
@@ -2372,9 +2384,47 @@ var OIDC_EXCHANGE_REFUSALS = [
   "bad_issuer",
   "repo_not_enrolled",
   "ref_not_allowed",
-  "pool_flag_off"
+  "pool_flag_off",
+  "adopt_ticket_invalid",
+  "token_replayed",
+  "run_already_exchanged"
 ];
+var OIDC_EXCHANGE_RUN_CLAIMS = ["jti", "run_id", "run_attempt"];
+var OIDC_JTI_MAX = 200;
+var OIDC_RUN_NUMBER_RE = /^[1-9][0-9]{0,15}$/;
+var OIDC_EXCHANGE_RETENTION_DAYS = 35;
+function oidcRunClaimsOk(claims) {
+  const { jti, run_id, run_attempt } = claims;
+  return typeof jti === "string" && jti.length >= 1 && jti.length <= OIDC_JTI_MAX && typeof run_id === "string" && OIDC_RUN_NUMBER_RE.test(run_id) && typeof run_attempt === "string" && OIDC_RUN_NUMBER_RE.test(run_attempt);
+}
 var OIDC_EXCHANGE_AUDIENCE = "mnemom-executor";
+var ADOPT_TICKET_INPUT = "adopt-ticket";
+var WAKEUP_SESSION_INPUT = "session-id";
+var ADOPT_TICKET_RE = /^mnm_at_[A-Za-z0-9_-]{43}$/;
+var ADOPT_TICKET_TTL_S = 900;
+var OIDC_EXCHANGE_BODY_KEYS = ["oidc_token", "adopt_ticket"];
+var OIDC_TOKEN_MAX = 8192;
+var OIDC_WORKFLOW_ENV = "DISPATCH_WAKEUP_WORKFLOW";
+var OIDC_WORKFLOW_FILE_RE = /^[A-Za-z0-9_.-]{1,100}\.ya?ml$/;
+function adoptTicketOk(t) {
+  return typeof t === "string" && ADOPT_TICKET_RE.test(t);
+}
+function oidcExchangeBodyOk(v) {
+  if (v === null || typeof v !== "object" || Array.isArray(v)) return false;
+  const o = v;
+  const keys = Object.keys(o);
+  if (keys.some((k) => !OIDC_EXCHANGE_BODY_KEYS.includes(k))) return false;
+  if (typeof o.oidc_token !== "string" || o.oidc_token === "" || o.oidc_token.length > OIDC_TOKEN_MAX)
+    return false;
+  return !("adopt_ticket" in o) || typeof o.adopt_ticket === "string";
+}
+function oidcPinnedWorkflow(envValue) {
+  const wf = envValue?.trim() ?? "";
+  return OIDC_WORKFLOW_FILE_RE.test(wf) ? wf : null;
+}
+function jobWorkflowRefOk(jobWorkflowRef, repository, workflowFile, defaultBranch) {
+  return typeof jobWorkflowRef === "string" && jobWorkflowRef === `${repository}/.github/workflows/${workflowFile}@refs/heads/${defaultBranch}`;
+}
 var ORG_POLICY_LIMIT_KEYS = ["per_session_budget_usd", "live_lease_cap"];
 var LIVE_LEASE_CAP_MIN = 1;
 var LIVE_LEASE_CAP_MAX = 1e3;
@@ -2408,14 +2458,15 @@ var CREATE_READY_SESSION_REFUSALS = [
   // 34.10.1 (4): the api-built charter v1 or its envelope does not match the seal; nothing written
   "charter_mismatch"
 ];
-var CREATE_READY_SESSION_OUTCOMES = ["created", "existing", "refused"];
+var CREATE_READY_SESSION_OUTCOMES = ["created", "existing", "refused", "parked"];
 function isUserCreator(createdBy) {
   return typeof createdBy === "string" && createdBy !== "" && !createdBy.includes(":");
 }
 var CREATE_READY_SESSION_ANSWERS = Object.freeze({
   created: ["outcome", "session_id"],
   existing: ["outcome", "session_id"],
-  refused: ["outcome", "reason"]
+  refused: ["outcome", "reason"],
+  parked: ["outcome", "session_id", "wait_reason"]
 });
 function createReadySessionAnswerOk(v) {
   if (v === null || typeof v !== "object" || Array.isArray(v)) return false;
@@ -2424,7 +2475,11 @@ function createReadySessionAnswerOk(v) {
     return false;
   const keys = CREATE_READY_SESSION_ANSWERS[a.outcome];
   if (Object.keys(a).length !== keys.length || !keys.every((k) => k in a)) return false;
-  return a.outcome === "refused" ? CREATE_READY_SESSION_REFUSALS.includes(a.reason) : typeof a.session_id === "string" && UUID_RE.test(a.session_id);
+  if (a.outcome === "refused")
+    return CREATE_READY_SESSION_REFUSALS.includes(a.reason);
+  if (a.outcome === "parked" && !DISPATCH_PARK_WAIT_REASONS.includes(a.wait_reason))
+    return false;
+  return typeof a.session_id === "string" && UUID_RE.test(a.session_id);
 }
 function sealIdOk(sealId) {
   if (!UUID_RE.test(sealId)) throw new RangeError(`seal id must be a lowercase uuid: ${sealId}`);
@@ -2501,7 +2556,11 @@ var RUNNER_REFUSED_REASONS = [
   "oidc_ref_not_allowed",
   "oidc_pool_flag_off",
   "oidc_unavailable",
-  "api_unavailable"
+  "api_unavailable",
+  "oidc_adopt_ticket_invalid",
+  // amendment 65 (mnemom-test#1331): the two single-use exchange refusals, appended
+  "oidc_token_replayed",
+  "oidc_run_already_exchanged"
 ];
 var RUNNER_OPEN_MODE_TOLERATED = [
   "bundle_unavailable",
@@ -2747,7 +2806,9 @@ var DURABLE_EVENT_KINDS = [
   "session.waiting",
   "session.wait_cleared",
   "executor.turn_continued",
-  "inbox.acked"
+  "inbox.acked",
+  // S1 amendment 64: dispatch parked a seal (api-written; session.waiting stays executor-only)
+  "session.dispatch_parked"
 ];
 function isDurableEventKind(v) {
   return typeof v === "string" && DURABLE_EVENT_KINDS.includes(v);
@@ -2756,7 +2817,8 @@ var AMENDMENT_EVENT_GROUPS = Object.freeze({
   "session.ready": "lifecycle",
   "session.waiting": "lifecycle",
   "session.wait_cleared": "lifecycle",
-  "executor.turn_continued": "lease"
+  "executor.turn_continued": "lease",
+  "session.dispatch_parked": "lifecycle"
 });
 function eventGroupOf(kind) {
   if (Object.prototype.hasOwnProperty.call(AMENDMENT_EVENT_GROUPS, kind))
@@ -3006,10 +3068,16 @@ var KIND_REFS = {
     [
       { field: "wait_reason", equals: "ci", require: ["head_sha"], forbid: ["approval_id"] },
       { field: "wait_reason", equals: "question", require: ["approval_id"], forbid: ["head_sha"] },
-      { field: "wait_reason", equals: "budget", require: ["approval_id"], forbid: ["head_sha"] }
+      { field: "wait_reason", equals: "budget", require: ["approval_id"], forbid: ["head_sha"] },
+      // amendment 64: a dispatch park carries no commitment
+      { field: "wait_reason", equals: "awaiting_issue_run", forbid: ["head_sha", "approval_id"] },
+      { field: "wait_reason", equals: "repo_arm_unreadable", forbid: ["head_sha", "approval_id"] }
     ]
   ),
   "session.wait_cleared": obj({ wait_reason: ENUM(PARKED_ONLY_WAIT_REASONS) }),
+  // S1 amendment 64: the api's dispatch park. One writer per kind: the executor's park stays
+  // session.waiting; adopt and flip-to-runner journal session.wait_cleared + session.ready.
+  "session.dispatch_parked": obj({ wait_reason: ENUM(DISPATCH_PARK_WAIT_REASONS) }),
   // ---- lead ruling 2026-10-28: the spawn that sent the continue; a separate fact, so
   // executor.spawned's refs stay exactly {spawn_id} ----
   "executor.turn_continued": obj({ spawn_id: UUID }),
@@ -4341,12 +4409,14 @@ async function approvalSubjectHash(subject) {
   return sha256Hex(canonicalJson(subject));
 }
 var AGENT_SESSIONS_READY_CHECK = "state <> 'ready' OR (durable_mode = 'locked' AND state_reason IS NULL AND home_executor_id IS NULL AND lease_executor_id IS NULL AND lease_expires_at IS NULL AND spawn_id IS NULL AND hello_at IS NULL)";
-var AGENT_SESSIONS_WAIT_PARKED_CHECK = "CASE WHEN wait_reason IN ('ci','question','budget') THEN state = 'parked' AND wait_ref IS NOT NULL ELSE wait_ref IS NULL END";
+var AGENT_SESSIONS_WAIT_PARKED_CHECK = "CASE WHEN wait_reason IN ('ci','question','budget') THEN state = 'parked' AND wait_ref IS NOT NULL WHEN wait_reason IN ('awaiting_issue_run','repo_arm_unreadable') THEN state = 'parked' AND wait_ref IS NULL ELSE wait_ref IS NULL END";
 var AGENT_EXECUTORS_SCOPE_CHECK = "scope IN ('user','org')";
 function readyRowOk(row) {
   return row.state !== "ready" || row.durable_mode === "locked" && row.state_reason === null && row.home_executor_id === null && row.lease_executor_id === null && row.lease_expires_at === null && row.spawn_id === null && row.hello_at === null;
 }
 function waitParkedRowOk(row) {
+  if (row.wait_reason !== null && DISPATCH_PARK_WAIT_REASONS.includes(row.wait_reason))
+    return row.state === "parked" && row.wait_ref === null;
   return row.wait_reason !== null && PARKED_ONLY_WAIT_REASONS.includes(row.wait_reason) ? row.state === "parked" && row.wait_ref !== null : row.wait_ref === null;
 }
 
@@ -4852,6 +4922,16 @@ function executorStateOk(v) {
 }
 
 // ../shared/durable-contract/src/routes.ts
+var ADOPT_BODY_KEYS = ["source_ref", "nonce"];
+var ADOPT_SOURCE_REF_MAX = 500;
+function adoptBodyOk(v) {
+  if (v === null || typeof v !== "object" || Array.isArray(v)) return false;
+  const b = v;
+  if (Object.keys(b).length !== 2 || typeof b.source_ref !== "string") return false;
+  if (typeof b.nonce !== "string" || b.nonce.length === 0) return false;
+  const r = b.source_ref;
+  return r !== "" && r === r.trim() && r.length <= ADOPT_SOURCE_REF_MAX;
+}
 var fixed = (method, auth, path) => Object.freeze({ method, auth, path });
 var scoped = (method, auth, pre, post) => Object.freeze({ method, auth, pre, post });
 var EXECUTORS = "/v1/executors";
@@ -4882,8 +4962,21 @@ var ROUTES = Object.freeze({
   // ---- Doors amendment (ruling 34.03) ----
   /** The org-scope executor's claimable pool sessions, oldest first; `?limit=` (READY_SESSIONS_LIMIT_MIN..MAX) is not part of the match. */
   exec_ready_list: fixed("GET", "executor_key", "/v1/executor/ready"),
-  /** Body {oidc_token}; answers a one-lease org-scope executor key or an OIDC_EXCHANGE_REFUSALS refusal. */
+  /**
+   * Body {oidc_token, adopt_ticket?} (doors.ts oidcExchangeBodyOk, Amendment 66). adopt_ticket comes
+   * only from a ticketed wake-up; it is used up before any key is minted and binds the key to one seal.
+   * Amendment 65: single-use per token jti and per run attempt (token_replayed, run_already_exchanged).
+   */
   exec_oidc_exchange: fixed("POST", "github_oidc", "/v1/executor/oidc/exchange"),
+  // ---- S1 amendment 64 (mnemom-test#1336) ----
+  /**
+   * Body {source_ref, nonce} (adoptBodyOk). The OIDC run's key unparks the parked dispatch seal whose
+   * source_ref is this run's own issue, in its own org and repo, and claims it in one transaction,
+   * and only the seal its adopt ticket was minted for (Amendment 66; a key with no ticket adopts none),
+   * fenced on the nonce (exec_claim's rule);
+   * answers the exec_claim answer, or adopt_refused / seal_repo_mismatch, changing nothing.
+   */
+  exec_adopt: fixed("POST", "executor_key", "/v1/executor/adopt"),
   // ---- inbox, executor side (S1 amendment 60) ----
   /** Content-free summary {admitted, delivered, oldest_admitted_at} (inboxSummaryResponseOk); marks nothing. */
   exec_inbox: scoped("GET", "executor_key", EXEC_SESSION_PRE, "/inbox"),
@@ -5807,8 +5900,22 @@ var FREEZE_RECORD = Object.freeze({
   DEFAULT_LEASE_CAP_ENV,
   DISPATCH_SESSION_CID_PREFIX,
   DISPATCH_SESSION_NAME_PREFIX,
+  // amendment 66
+  ADOPT_TICKET_INPUT,
+  WAKEUP_SESSION_INPUT,
+  ADOPT_TICKET_PATTERN: ADOPT_TICKET_RE.source,
+  ADOPT_TICKET_TTL_S,
+  OIDC_TOKEN_MAX,
+  OIDC_WORKFLOW_ENV,
+  OIDC_WORKFLOW_FILE_PATTERN: OIDC_WORKFLOW_FILE_RE.source,
   READY_SESSIONS_LIMIT_MIN,
   READY_SESSIONS_LIMIT_MAX,
+  // amendment 64
+  ADOPT_SOURCE_REF_MAX,
+  // amendment 65
+  OIDC_JTI_MAX,
+  OIDC_RUN_NUMBER_PATTERN: OIDC_RUN_NUMBER_RE.source,
+  OIDC_EXCHANGE_RETENTION_DAYS,
   READY_USER_TEXT,
   RUNNER_FAILED_PHASE_PATTERN: RUNNER_FAILED_PHASE_RE.source,
   AGENT_SESSIONS_READY_CHECK,
@@ -5921,11 +6028,17 @@ var FREEZE_STRUCTURED = Object.freeze({
   READY_CAUSES,
   WAIT_REASONS,
   PARKED_ONLY_WAIT_REASONS,
+  // amendment 64
+  DISPATCH_PARK_WAIT_REASONS,
+  ADOPT_REFUSED_CAUSES,
+  ADOPT_BODY_KEYS,
   WAIT_REF_KEYS,
   CLEAR_WAIT_OUTCOMES,
   EXECUTOR_SCOPES,
   ORG_SCOPE_EXECUTOR_KINDS,
   OIDC_EXCHANGE_REFUSALS,
+  OIDC_EXCHANGE_BODY_KEYS,
+  OIDC_EXCHANGE_RUN_CLAIMS,
   ORG_POLICY_LIMIT_KEYS,
   POOL_CLAIM_FIELDS,
   CREATE_READY_SESSION_REFUSALS,
@@ -6234,6 +6347,12 @@ export {
   ADMISSION_STEP_CODE,
   ADMIT_SWEEP_VALUES,
   ADMIT_SWEEP_VECTORS_PATH,
+  ADOPT_BODY_KEYS,
+  ADOPT_REFUSED_CAUSES,
+  ADOPT_SOURCE_REF_MAX,
+  ADOPT_TICKET_INPUT,
+  ADOPT_TICKET_RE,
+  ADOPT_TICKET_TTL_S,
   ADOPT_WITH_YOU_TEXT,
   AGENT_CONTAINED_STATUSES,
   AGENT_EXECUTORS_SCOPE_CHECK,
@@ -6315,6 +6434,7 @@ export {
   DEVICE_STEP_VERBS,
   DEVICE_VERIFY_AAL_DEFAULT,
   DEVICE_VERIFY_AAL_VALUES,
+  DISPATCH_PARK_WAIT_REASONS,
   DISPATCH_SESSION_CID_PREFIX,
   DISPATCH_SESSION_NAME_PREFIX,
   DONE_CLAUSE,
@@ -6487,7 +6607,15 @@ export {
   NON_TTY_LOCKED_TEMPLATE,
   NO_M1_EMITTER_KINDS,
   OIDC_EXCHANGE_AUDIENCE,
+  OIDC_EXCHANGE_BODY_KEYS,
   OIDC_EXCHANGE_REFUSALS,
+  OIDC_EXCHANGE_RETENTION_DAYS,
+  OIDC_EXCHANGE_RUN_CLAIMS,
+  OIDC_JTI_MAX,
+  OIDC_RUN_NUMBER_RE,
+  OIDC_TOKEN_MAX,
+  OIDC_WORKFLOW_ENV,
+  OIDC_WORKFLOW_FILE_RE,
   OLD_ROUTE_BRANCH,
   OLD_ROUTE_REFRESH,
   ORG_CAP_LOCK_PREFIX,
@@ -6665,11 +6793,14 @@ export {
   UUID_RE,
   WAIT_REASONS,
   WAIT_REF_KEYS,
+  WAKEUP_SESSION_INPUT,
   admissionStatusOf,
   admissionTruthTable,
   admit,
   admitSweepDigest,
   admitSweepText,
+  adoptBodyOk,
+  adoptTicketOk,
   amendDecision,
   answerFromChoice,
   answersOk,
@@ -6797,6 +6928,7 @@ export {
   isValidSessionName,
   isValidStateReason,
   isWellFormedLeaseKey,
+  jobWorkflowRefOk,
   lagBucket,
   lintDurableOnly,
   lintFixCatalogue,
@@ -6808,6 +6940,9 @@ export {
   normalizeCellId,
   normalizeQuestions,
   normalizeSessionName,
+  oidcExchangeBodyOk,
+  oidcPinnedWorkflow,
+  oidcRunClaimsOk,
   openContract,
   ownerSessionViewOk,
   ownerVerbDecision,

package/dist/vendor/shared/durable-contract/codes.d.ts

@@ -15,6 +15,14 @@ export type ClaimUnavailableCause = (typeof CLAIM_UNAVAILABLE_CAUSES)[number];
  */
 export declare const SEAL_REPO_MISMATCH_CAUSES: readonly ["no_repo_claim", "no_seal_repo", "repo_mismatch"];
 export type SealRepoMismatchCause = (typeof SEAL_REPO_MISMATCH_CAUSES)[number];
+/**
+ * adopt_refused details.cause (S1 amendment 64, mnemom-test#1336; exec_adopt): no parked dispatch
+ * seal names this source_ref in the caller's own org and repo (never says whether one exists
+ * elsewhere), or the seal's session is not parked and the caller is not the OIDC run that already
+ * holds its lease. A repo or binding mismatch is seal_repo_mismatch, not this code.
+ */
+export declare const ADOPT_REFUSED_CAUSES: readonly ["no_parked_seal", "not_parked"];
+export type AdoptRefusedCause = (typeof ADOPT_REFUSED_CAUSES)[number];
 export declare const UNSUPPORTED_FEATURES: readonly ["tool_classes", "launch_spec_change", "above_limit_raise", "remote_control"];
 export type UnsupportedFeature = (typeof UNSUPPORTED_FEATURES)[number];
 export declare const CWD_KINDS: readonly ["subdirectory", "not_git", "symlink_transcript"];
@@ -273,6 +281,11 @@ export declare const DURABLE_CODES: {
         readonly surfaces: readonly ["api"];
         readonly fields: readonly ["cause"];
     };
+    readonly adopt_refused: {
+        readonly status: 409;
+        readonly surfaces: readonly ["api"];
+        readonly fields: readonly ["cause"];
+    };
     /** Lost CAS race on (session_id, seq). */
     readonly durable_append_conflict: {
         readonly status: 409;

package/dist/vendor/shared/durable-contract/codes.js

@@ -24,6 +24,13 @@ export const CLAIM_UNAVAILABLE_CAUSES = [
  * another repo than the executor's (owner/name, case-insensitive).
  */
 export const SEAL_REPO_MISMATCH_CAUSES = ["no_repo_claim", "no_seal_repo", "repo_mismatch"];
+/**
+ * adopt_refused details.cause (S1 amendment 64, mnemom-test#1336; exec_adopt): no parked dispatch
+ * seal names this source_ref in the caller's own org and repo (never says whether one exists
+ * elsewhere), or the seal's session is not parked and the caller is not the OIDC run that already
+ * holds its lease. A repo or binding mismatch is seal_repo_mismatch, not this code.
+ */
+export const ADOPT_REFUSED_CAUSES = ["no_parked_seal", "not_parked"];
 export const UNSUPPORTED_FEATURES = [
     "tool_classes",
     "launch_spec_change",
@@ -145,6 +152,9 @@ export const DURABLE_CODES = {
     // durable_claim_ineligible reason: the session is claimable, only not by this executor, and a
     // runner never skips past it to another session. cause is a SEAL_REPO_MISMATCH_CAUSES value.
     seal_repo_mismatch: { status: 403, surfaces: ["api"], fields: ["cause"] },
+    // S1 amendment 64 (mnemom-test#1336): exec_adopt found nothing it may unpark for this run. Nothing
+    // is written. cause is an ADOPT_REFUSED_CAUSES value.
+    adopt_refused: { status: 409, surfaces: ["api"], fields: ["cause"] },
     // ---- api journal (C10-R0 (i), (j), (k)) ----
     /** Lost CAS race on (session_id, seq). */
     durable_append_conflict: { status: 409, surfaces: ["api"], fields: ["tip_seq"] },

package/dist/vendor/shared/durable-contract/doors.d.ts

@@ -33,10 +33,73 @@ export declare const EXECUTOR_SCOPES: readonly ["user", "org"];
 export type ExecutorScope = (typeof EXECUTOR_SCOPES)[number];
 /** Only these executor kinds may enroll with scope org. */
 export declare const ORG_SCOPE_EXECUTOR_KINDS: readonly ["container", "fleet"];
-/** exec_oidc_exchange refusals (ruling 34.03's S1 changes). */
-export declare const OIDC_EXCHANGE_REFUSALS: readonly ["bad_issuer", "repo_not_enrolled", "ref_not_allowed", "pool_flag_off"];
+/**
+ * exec_oidc_exchange refusals (ruling 34.03's S1 changes), each 403, checked in this order.
+ * Amendment 65 (mnemom-test#1331) appends the two single-use codes, checked in the same transaction
+ * as the key insert so a refused or faulted exchange uses nothing up:
+ *   token_replayed         the token's jti was already exchanged;
+ *   run_already_exchanged  this repository_id + run_id + run_attempt already minted a key under
+ *                          another jti (one key per run attempt; a rerun is a new attempt).
+ */
+export declare const OIDC_EXCHANGE_REFUSALS: readonly ["bad_issuer", "repo_not_enrolled", "ref_not_allowed", "pool_flag_off", "adopt_ticket_invalid", "token_replayed", "run_already_exchanged"];
+/**
+ * The claims exec_oidc_exchange requires beyond repository, repository_id, ref and event_name
+ * (amendment 65). Each is a string; a token missing one, or with one out of shape, is bad_issuer.
+ */
+export declare const OIDC_EXCHANGE_RUN_CLAIMS: readonly ["jti", "run_id", "run_attempt"];
+/** jti: 1 to OIDC_JTI_MAX characters. */
+export declare const OIDC_JTI_MAX = 200;
+/** run_id and run_attempt: a positive decimal integer, no leading zero, at most 16 digits. */
+export declare const OIDC_RUN_NUMBER_RE: RegExp;
+/**
+ * How long the api keeps a run's exchange record (and so refuses a second mint for it): GitHub's
+ * longest workflow-run life, 35 days. The minted key's grant is far shorter; the record must not be.
+ */
+export declare const OIDC_EXCHANGE_RETENTION_DAYS = 35;
+/** True when the three run claims are present and in shape (amendment 65). */
+export declare function oidcRunClaimsOk(claims: Readonly<Record<string, unknown>>): boolean;
 /** The audience a GitHub OIDC token must name for exec_oidc_exchange (ruling 34.12 (5)). */
 export declare const OIDC_EXCHANGE_AUDIENCE = "mnemom-executor";
+/**
+ * The workflow input that carries an adopt ticket, sent beside the per-session wake-up's
+ * WAKEUP_SESSION_INPUT. Only the api's wake-up for a session parked awaiting_issue_run sends it.
+ */
+export declare const ADOPT_TICKET_INPUT = "adopt-ticket";
+/** The wake-up's per-session input (mnemom-test#1329), named here so both inputs live in S1. */
+export declare const WAKEUP_SESSION_INPUT = "session-id";
+/** An adopt ticket: the prefix, then 32 random bytes as unpadded base64url (43 characters). */
+export declare const ADOPT_TICKET_RE: RegExp;
+/** A ticket is good for 15 minutes from the wake-up that minted it, and for one exchange only. */
+export declare const ADOPT_TICKET_TTL_S = 900;
+/** exec_oidc_exchange's body keys: oidc_token always, adopt_ticket only from a ticketed wake-up. */
+export declare const OIDC_EXCHANGE_BODY_KEYS: readonly ["oidc_token", "adopt_ticket"];
+/** The longest oidc_token the exchange reads. */
+export declare const OIDC_TOKEN_MAX = 8192;
+/**
+ * The api env var naming the one workflow file (under .github/workflows, no path) that the wake-up
+ * dispatches and the exchange pins. The exchange is dark while it is unset or not a workflow file
+ * name, whatever DURABLE_OIDC_EXCHANGE_MODE says.
+ */
+export declare const OIDC_WORKFLOW_ENV = "DISPATCH_WAKEUP_WORKFLOW";
+/** A workflow file name under .github/workflows: no path, no query. */
+export declare const OIDC_WORKFLOW_FILE_RE: RegExp;
+/** True when `t` has an adopt ticket's shape. */
+export declare function adoptTicketOk(t: unknown): t is string;
+/**
+ * The exchange body: an object with exactly oidc_token (a non-empty string of at most
+ * OIDC_TOKEN_MAX) and, optionally, adopt_ticket (a string; its shape is adoptTicketOk's, and a
+ * string of the wrong shape is refused adopt_ticket_invalid, not a malformed body).
+ */
+export declare function oidcExchangeBodyOk(v: unknown): boolean;
+/** The pinned workflow file from the env value, or null (then the exchange is dark). */
+export declare function oidcPinnedWorkflow(envValue: string | undefined): string | null;
+/**
+ * The workflow pin: the token's job_workflow_ref must be exactly
+ * `<repository>/.github/workflows/<pinned file>@refs/heads/<default branch>`, with `repository`
+ * spelled as the token's own claim. Anything else (another workflow, a reusable workflow, another
+ * branch, a tag or sha ref) is refused ref_not_allowed.
+ */
+export declare function jobWorkflowRefOk(jobWorkflowRef: unknown, repository: string, workflowFile: string, defaultBranch: string): boolean;
 /** durable_org_policy.limits keys (34.05 (1)); live_lease_cap is optional. */
 export declare const ORG_POLICY_LIMIT_KEYS: readonly ["per_session_budget_usd", "live_lease_cap"];
 /** live_lease_cap and the registry default share this range. */
@@ -61,7 +124,7 @@ export declare function effectiveLeaseCap(orgLimits: {
 export declare const DISPATCH_SESSION_CID_PREFIX = "dispatch-";
 export declare const DISPATCH_SESSION_NAME_PREFIX = "job-";
 export declare const CREATE_READY_SESSION_REFUSALS: readonly ["no_dispatch_agent", "dispatch_owner_missing", "seal_not_found", "cell_unmapped", "charter_mismatch"];
-export declare const CREATE_READY_SESSION_OUTCOMES: readonly ["created", "existing", "refused"];
+export declare const CREATE_READY_SESSION_OUTCOMES: readonly ["created", "existing", "refused", "parked"];
 /**
  * Amendment 63 (ruling 34.35): the one test for whether a session creator is a user, shared by the
  * api (owner choice at dispatch, the claim's 403 not_owner, the repair) and its SQL twin
@@ -75,6 +138,7 @@ export declare const CREATE_READY_SESSION_ANSWERS: Readonly<{
     readonly created: readonly ["outcome", "session_id"];
     readonly existing: readonly ["outcome", "session_id"];
     readonly refused: readonly ["outcome", "reason"];
+    readonly parked: readonly ["outcome", "session_id", "wait_reason"];
 }>;
 /** Whether `v` is a closed answer: its outcome's keys only, a lowercase uuid session_id or a listed reason. */
 export declare function createReadySessionAnswerOk(v: unknown): boolean;
@@ -123,7 +187,7 @@ export declare const POOL_JOB_RETRIES_CONFIG_CAUSE = "pool_job_retries_config";
 /** The org's retry count from its limits.pool_job_retries: the default when absent, null when invalid. */
 export declare function poolJobRetriesOf(limit: unknown): number | null;
 /** The closed refused list (34.12 (8)). */
-export declare const RUNNER_REFUSED_REASONS: readonly ["bundle_too_large", "bundle_malformed", "bundle_wrong_typ", "bundle_schema", "bundle_unknown_key", "bundle_unusable_key", "bundle_retired_key", "bundle_bad_signature", "bundle_code_digest_mismatch", "bundle_not_yet_valid", "bundle_expired", "bundle_binding_mismatch", "bundle_unavailable", "job_unavailable", "contract_bad_sha", "contract_too_large", "contract_sha_mismatch", "contract_not_a_contract", "contract_mismatch_unrecoverable", "claim_needs_key", "claim_ineligible", "claim_unavailable", "lease_lost", "executor_revoked", "executor_unauthorized", "oidc_bad_issuer", "oidc_repo_not_enrolled", "oidc_ref_not_allowed", "oidc_pool_flag_off", "oidc_unavailable", "api_unavailable"];
+export declare const RUNNER_REFUSED_REASONS: readonly ["bundle_too_large", "bundle_malformed", "bundle_wrong_typ", "bundle_schema", "bundle_unknown_key", "bundle_unusable_key", "bundle_retired_key", "bundle_bad_signature", "bundle_code_digest_mismatch", "bundle_not_yet_valid", "bundle_expired", "bundle_binding_mismatch", "bundle_unavailable", "job_unavailable", "contract_bad_sha", "contract_too_large", "contract_sha_mismatch", "contract_not_a_contract", "contract_mismatch_unrecoverable", "claim_needs_key", "claim_ineligible", "claim_unavailable", "lease_lost", "executor_revoked", "executor_unauthorized", "oidc_bad_issuer", "oidc_repo_not_enrolled", "oidc_ref_not_allowed", "oidc_pool_flag_off", "oidc_unavailable", "api_unavailable", "oidc_adopt_ticket_invalid", "oidc_token_replayed", "oidc_run_already_exchanged"];
 /** Under --fail-mode open, only these may be ridden through, and only once a verified bundle is held (34.12 (2)). */
 export declare const RUNNER_OPEN_MODE_TOLERATED: readonly ["bundle_unavailable", "job_unavailable", "api_unavailable"];
 export declare const RUNNER_MERGE_STRATEGIES: readonly ["external", "merge_on_green"];

package/dist/vendor/shared/durable-contract/doors.js

@@ -6,6 +6,7 @@
  */
 import { ID_RE } from "./paths.js";
 import { UUID_RE } from "./canonical.js";
+import { DISPATCH_PARK_WAIT_REASONS } from "./states.js";
 // ---- Flag (ruling 34.01 (1), (2)) -----------------------------------------------------------
 /** The api env flag that gates every pool behaviour; its value is the org allowlist. */
 export const DURABLE_POOL_CLAIM_FLAG = "DURABLE_POOL_CLAIM";
@@ -44,15 +45,109 @@ export function poolClaimOrgs(flagValue) {
 export const EXECUTOR_SCOPES = ["user", "org"];
 /** Only these executor kinds may enroll with scope org. */
 export const ORG_SCOPE_EXECUTOR_KINDS = ["container", "fleet"];
-/** exec_oidc_exchange refusals (ruling 34.03's S1 changes). */
+/**
+ * exec_oidc_exchange refusals (ruling 34.03's S1 changes), each 403, checked in this order.
+ * Amendment 65 (mnemom-test#1331) appends the two single-use codes, checked in the same transaction
+ * as the key insert so a refused or faulted exchange uses nothing up:
+ *   token_replayed         the token's jti was already exchanged;
+ *   run_already_exchanged  this repository_id + run_id + run_attempt already minted a key under
+ *                          another jti (one key per run attempt; a rerun is a new attempt).
+ */
 export const OIDC_EXCHANGE_REFUSALS = [
     "bad_issuer",
     "repo_not_enrolled",
     "ref_not_allowed",
     "pool_flag_off",
+    "adopt_ticket_invalid",
+    "token_replayed",
+    "run_already_exchanged",
 ];
+/**
+ * The claims exec_oidc_exchange requires beyond repository, repository_id, ref and event_name
+ * (amendment 65). Each is a string; a token missing one, or with one out of shape, is bad_issuer.
+ */
+export const OIDC_EXCHANGE_RUN_CLAIMS = ["jti", "run_id", "run_attempt"];
+/** jti: 1 to OIDC_JTI_MAX characters. */
+export const OIDC_JTI_MAX = 200;
+/** run_id and run_attempt: a positive decimal integer, no leading zero, at most 16 digits. */
+export const OIDC_RUN_NUMBER_RE = /^[1-9][0-9]{0,15}$/;
+/**
+ * How long the api keeps a run's exchange record (and so refuses a second mint for it): GitHub's
+ * longest workflow-run life, 35 days. The minted key's grant is far shorter; the record must not be.
+ */
+export const OIDC_EXCHANGE_RETENTION_DAYS = 35;
+/** True when the three run claims are present and in shape (amendment 65). */
+export function oidcRunClaimsOk(claims) {
+    const { jti, run_id, run_attempt } = claims;
+    return (typeof jti === "string" &&
+        jti.length >= 1 &&
+        jti.length <= OIDC_JTI_MAX &&
+        typeof run_id === "string" &&
+        OIDC_RUN_NUMBER_RE.test(run_id) &&
+        typeof run_attempt === "string" &&
+        OIDC_RUN_NUMBER_RE.test(run_attempt));
+}
 /** The audience a GitHub OIDC token must name for exec_oidc_exchange (ruling 34.12 (5)). */
 export const OIDC_EXCHANGE_AUDIENCE = "mnemom-executor";
+// ---- Adopt ticket and workflow pin (Amendment 66, mnemom-test#1336) -------------------------
+/**
+ * The workflow input that carries an adopt ticket, sent beside the per-session wake-up's
+ * WAKEUP_SESSION_INPUT. Only the api's wake-up for a session parked awaiting_issue_run sends it.
+ */
+export const ADOPT_TICKET_INPUT = "adopt-ticket";
+/** The wake-up's per-session input (mnemom-test#1329), named here so both inputs live in S1. */
+export const WAKEUP_SESSION_INPUT = "session-id";
+/** An adopt ticket: the prefix, then 32 random bytes as unpadded base64url (43 characters). */
+export const ADOPT_TICKET_RE = /^mnm_at_[A-Za-z0-9_-]{43}$/;
+/** A ticket is good for 15 minutes from the wake-up that minted it, and for one exchange only. */
+export const ADOPT_TICKET_TTL_S = 900;
+/** exec_oidc_exchange's body keys: oidc_token always, adopt_ticket only from a ticketed wake-up. */
+export const OIDC_EXCHANGE_BODY_KEYS = ["oidc_token", "adopt_ticket"];
+/** The longest oidc_token the exchange reads. */
+export const OIDC_TOKEN_MAX = 8192;
+/**
+ * The api env var naming the one workflow file (under .github/workflows, no path) that the wake-up
+ * dispatches and the exchange pins. The exchange is dark while it is unset or not a workflow file
+ * name, whatever DURABLE_OIDC_EXCHANGE_MODE says.
+ */
+export const OIDC_WORKFLOW_ENV = "DISPATCH_WAKEUP_WORKFLOW";
+/** A workflow file name under .github/workflows: no path, no query. */
+export const OIDC_WORKFLOW_FILE_RE = /^[A-Za-z0-9_.-]{1,100}\.ya?ml$/;
+/** True when `t` has an adopt ticket's shape. */
+export function adoptTicketOk(t) {
+    return typeof t === "string" && ADOPT_TICKET_RE.test(t);
+}
+/**
+ * The exchange body: an object with exactly oidc_token (a non-empty string of at most
+ * OIDC_TOKEN_MAX) and, optionally, adopt_ticket (a string; its shape is adoptTicketOk's, and a
+ * string of the wrong shape is refused adopt_ticket_invalid, not a malformed body).
+ */
+export function oidcExchangeBodyOk(v) {
+    if (v === null || typeof v !== "object" || Array.isArray(v))
+        return false;
+    const o = v;
+    const keys = Object.keys(o);
+    if (keys.some((k) => !OIDC_EXCHANGE_BODY_KEYS.includes(k)))
+        return false;
+    if (typeof o.oidc_token !== "string" || o.oidc_token === "" || o.oidc_token.length > OIDC_TOKEN_MAX)
+        return false;
+    return !("adopt_ticket" in o) || typeof o.adopt_ticket === "string";
+}
+/** The pinned workflow file from the env value, or null (then the exchange is dark). */
+export function oidcPinnedWorkflow(envValue) {
+    const wf = envValue?.trim() ?? "";
+    return OIDC_WORKFLOW_FILE_RE.test(wf) ? wf : null;
+}
+/**
+ * The workflow pin: the token's job_workflow_ref must be exactly
+ * `<repository>/.github/workflows/<pinned file>@refs/heads/<default branch>`, with `repository`
+ * spelled as the token's own claim. Anything else (another workflow, a reusable workflow, another
+ * branch, a tag or sha ref) is refused ref_not_allowed.
+ */
+export function jobWorkflowRefOk(jobWorkflowRef, repository, workflowFile, defaultBranch) {
+    return (typeof jobWorkflowRef === "string" &&
+        jobWorkflowRef === `${repository}/.github/workflows/${workflowFile}@refs/heads/${defaultBranch}`);
+}
 // ---- Per-org live-lease cap (rulings 34.05, 34.05.1) ----------------------------------------
 /** durable_org_policy.limits keys (34.05 (1)); live_lease_cap is optional. */
 export const ORG_POLICY_LIMIT_KEYS = ["per_session_budget_usd", "live_lease_cap"];
@@ -99,7 +194,9 @@ export const CREATE_READY_SESSION_REFUSALS = [
     // 34.10.1 (4): the api-built charter v1 or its envelope does not match the seal; nothing written
     "charter_mismatch",
 ];
-export const CREATE_READY_SESSION_OUTCOMES = ["created", "existing", "refused"];
+// S1 amendment 64 (mnemom-test#1336): "parked", the seal's repo does not take it through the pool;
+// counted apart from created, and the wake-up never sends for it
+export const CREATE_READY_SESSION_OUTCOMES = ["created", "existing", "refused", "parked"];
 /**
  * Amendment 63 (ruling 34.35): the one test for whether a session creator is a user, shared by the
  * api (owner choice at dispatch, the claim's 403 not_owner, the repair) and its SQL twin
@@ -115,6 +212,7 @@ export const CREATE_READY_SESSION_ANSWERS = Object.freeze({
     created: ["outcome", "session_id"],
     existing: ["outcome", "session_id"],
     refused: ["outcome", "reason"],
+    parked: ["outcome", "session_id", "wait_reason"],
 });
 /** Whether `v` is a closed answer: its outcome's keys only, a lowercase uuid session_id or a listed reason. */
 export function createReadySessionAnswerOk(v) {
@@ -127,9 +225,12 @@ export function createReadySessionAnswerOk(v) {
     const keys = CREATE_READY_SESSION_ANSWERS[a.outcome];
     if (Object.keys(a).length !== keys.length || !keys.every((k) => k in a))
         return false;
-    return a.outcome === "refused"
-        ? CREATE_READY_SESSION_REFUSALS.includes(a.reason)
-        : typeof a.session_id === "string" && UUID_RE.test(a.session_id);
+    if (a.outcome === "refused")
+        return CREATE_READY_SESSION_REFUSALS.includes(a.reason);
+    if (a.outcome === "parked" &&
+        !DISPATCH_PARK_WAIT_REASONS.includes(a.wait_reason))
+        return false;
+    return typeof a.session_id === "string" && UUID_RE.test(a.session_id);
 }
 function sealIdOk(sealId) {
     if (!UUID_RE.test(sealId))
@@ -238,6 +339,10 @@ export const RUNNER_REFUSED_REASONS = [
     "oidc_pool_flag_off",
     "oidc_unavailable",
     "api_unavailable",
+    "oidc_adopt_ticket_invalid",
+    // amendment 65 (mnemom-test#1331): the two single-use exchange refusals, appended
+    "oidc_token_replayed",
+    "oidc_run_already_exchanged",
 ];
 /** Under --fail-mode open, only these may be ridden through, and only once a verified bundle is held (34.12 (2)). */
 export const RUNNER_OPEN_MODE_TOLERATED = [

package/dist/vendor/shared/durable-contract/events.d.ts

@@ -34,7 +34,7 @@ export declare const M1_EXCLUDED_KINDS: readonly ["intent.issued", "intent.commi
  * inbox ack writes it; M1_EXCLUDED_KINDS stays the frozen M1 record), appended so no existing index
  * moves. Mirrors durable_event_kinds (parity test).
  */
-export declare const DURABLE_EVENT_KINDS: readonly ["session.registered", "session.locked", "session.unlocked", "session.resumed", "session.detached", "session.parked", "session.suspended", "session.paused", "session.unpaused", "session.moved", "session.completed", "session.failed", "session.killed", "session.expired", "session.adopted", "seat.hello", "charter.sealed", "charter.amended", "charter.goal_sealed", "charter.card_drift", "profile.amended", "executor.upgraded", "attestation.passed", "attestation.failed", "lease.acquired", "lease.reclaimed", "lease.released", "lease.expired", "lease.fenced", "lease.zombie_call", "lease.stale_admit", "executor.enrolled", "executor.revoked", "executor.spawned", "executor.exited", "executor.contract_violation", "inbox.admitted", "inbox.rejected", "inbox.coalesced", "inbox.held_unsealed", "inbox.queued_for_home", "inbox.reverted", "inbox.delivered", "inbox.unmatched", "inbox.dead", "timer.set", "timer.fired", "timer.cancelled", "trigger.added", "trigger.removed", "trigger.fired", "trigger.suppressed", "trigger.over_cap", "wake.undelivered", "question.asked", "question.answered", "approval.requested", "approval.resolved", "approval.consumed", "approval.expired", "approval.superseded", "approval.single_person_override", "never.held", "chain.posture", "guard.refused", "guard.unavailable", "budget.reached", "grant.renewed", "grant.revoked", "verdict.violation", "identity.mismatch", "containment.pause", "containment.kill", "containment.auto_pause", "governance.degraded_admit", "governance.outage_mode_set", "policy.host_unattended_changed", "workspace.checkpointed", "rearm.recorded", "tip.signed", "session.ready", "session.waiting", "session.wait_cleared", "executor.turn_continued", "inbox.acked"];
+export declare const DURABLE_EVENT_KINDS: readonly ["session.registered", "session.locked", "session.unlocked", "session.resumed", "session.detached", "session.parked", "session.suspended", "session.paused", "session.unpaused", "session.moved", "session.completed", "session.failed", "session.killed", "session.expired", "session.adopted", "seat.hello", "charter.sealed", "charter.amended", "charter.goal_sealed", "charter.card_drift", "profile.amended", "executor.upgraded", "attestation.passed", "attestation.failed", "lease.acquired", "lease.reclaimed", "lease.released", "lease.expired", "lease.fenced", "lease.zombie_call", "lease.stale_admit", "executor.enrolled", "executor.revoked", "executor.spawned", "executor.exited", "executor.contract_violation", "inbox.admitted", "inbox.rejected", "inbox.coalesced", "inbox.held_unsealed", "inbox.queued_for_home", "inbox.reverted", "inbox.delivered", "inbox.unmatched", "inbox.dead", "timer.set", "timer.fired", "timer.cancelled", "trigger.added", "trigger.removed", "trigger.fired", "trigger.suppressed", "trigger.over_cap", "wake.undelivered", "question.asked", "question.answered", "approval.requested", "approval.resolved", "approval.consumed", "approval.expired", "approval.superseded", "approval.single_person_override", "never.held", "chain.posture", "guard.refused", "guard.unavailable", "budget.reached", "grant.renewed", "grant.revoked", "verdict.violation", "identity.mismatch", "containment.pause", "containment.kill", "containment.auto_pause", "governance.degraded_admit", "governance.outage_mode_set", "policy.host_unattended_changed", "workspace.checkpointed", "rearm.recorded", "tip.signed", "session.ready", "session.waiting", "session.wait_cleared", "executor.turn_continued", "inbox.acked", "session.dispatch_parked"];
 export type DurableEventKind = (typeof DURABLE_EVENT_KINDS)[number];
 export declare function isDurableEventKind(v: unknown): v is DurableEventKind;
 /**
@@ -48,6 +48,7 @@ export declare const AMENDMENT_EVENT_GROUPS: Readonly<{
     readonly "session.waiting": "lifecycle";
     readonly "session.wait_cleared": "lifecycle";
     readonly "executor.turn_continued": "lease";
+    readonly "session.dispatch_parked": "lifecycle";
 }>;
 export declare function eventGroupOf(kind: DurableEventKind): EventGroup;
 export declare const EVENT_WRITERS: readonly ["executor", "gateway", "api"];

package/dist/vendor/shared/durable-contract/events.js

@@ -22,7 +22,7 @@
  *  (m) DSR: phase user_erasure, treatment pseudonymize (nulls principal_uid, detail, refs).
  */
 import { canonicalJson, hmacSha256Hex, sha256Hex, HEX64_RE } from "./canonical.js";
-import { DETACHED_REASONS, PAUSED_REASONS, SUSPENDED_REASONS, FAILED_REASONS, PARKED_ONLY_WAIT_REASONS, } from "./states.js";
+import { DETACHED_REASONS, PAUSED_REASONS, SUSPENDED_REASONS, FAILED_REASONS, DISPATCH_PARK_WAIT_REASONS, PARKED_ONLY_WAIT_REASONS, } from "./states.js";
 import { ATTESTATION_CHECKS_M1, CWD_CHECK_CAUSES } from "./codes.js";
 import { EVENT_DETAIL_MAX_CHARS } from "./constants.js";
 import { RUNNER_FAILED_REASON_PATTERN } from "./doors.js";
@@ -246,6 +246,8 @@ export const DURABLE_EVENT_KINDS = [
     "session.wait_cleared",
     "executor.turn_continued",
     "inbox.acked",
+    // S1 amendment 64: dispatch parked a seal (api-written; session.waiting stays executor-only)
+    "session.dispatch_parked",
 ];
 export function isDurableEventKind(v) {
     return typeof v === "string" && DURABLE_EVENT_KINDS.includes(v);
@@ -261,6 +263,7 @@ export const AMENDMENT_EVENT_GROUPS = Object.freeze({
     "session.waiting": "lifecycle",
     "session.wait_cleared": "lifecycle",
     "executor.turn_continued": "lease",
+    "session.dispatch_parked": "lifecycle",
 });
 export function eventGroupOf(kind) {
     if (Object.prototype.hasOwnProperty.call(AMENDMENT_EVENT_GROUPS, kind))
@@ -500,8 +503,14 @@ const KIND_REFS = {
         { field: "wait_reason", equals: "ci", require: ["head_sha"], forbid: ["approval_id"] },
         { field: "wait_reason", equals: "question", require: ["approval_id"], forbid: ["head_sha"] },
         { field: "wait_reason", equals: "budget", require: ["approval_id"], forbid: ["head_sha"] },
+        // amendment 64: a dispatch park carries no commitment
+        { field: "wait_reason", equals: "awaiting_issue_run", forbid: ["head_sha", "approval_id"] },
+        { field: "wait_reason", equals: "repo_arm_unreadable", forbid: ["head_sha", "approval_id"] },
     ]),
     "session.wait_cleared": obj({ wait_reason: ENUM(PARKED_ONLY_WAIT_REASONS) }),
+    // S1 amendment 64: the api's dispatch park. One writer per kind: the executor's park stays
+    // session.waiting; adopt and flip-to-runner journal session.wait_cleared + session.ready.
+    "session.dispatch_parked": obj({ wait_reason: ENUM(DISPATCH_PARK_WAIT_REASONS) }),
     // ---- lead ruling 2026-10-28: the spawn that sent the continue; a separate fact, so
     // executor.spawned's refs stay exactly {spawn_id} ----
     "executor.turn_continued": obj({ spawn_id: UUID }),

package/dist/vendor/shared/durable-contract/freeze-record.d.ts

@@ -121,8 +121,19 @@ export declare const FREEZE_RECORD: Readonly<{
     DEFAULT_LEASE_CAP_ENV: "DURABLE_DEFAULT_LEASE_CAP";
     DISPATCH_SESSION_CID_PREFIX: "dispatch-";
     DISPATCH_SESSION_NAME_PREFIX: "job-";
+    ADOPT_TICKET_INPUT: "adopt-ticket";
+    WAKEUP_SESSION_INPUT: "session-id";
+    ADOPT_TICKET_PATTERN: string;
+    ADOPT_TICKET_TTL_S: 900;
+    OIDC_TOKEN_MAX: 8192;
+    OIDC_WORKFLOW_ENV: "DISPATCH_WAKEUP_WORKFLOW";
+    OIDC_WORKFLOW_FILE_PATTERN: string;
     READY_SESSIONS_LIMIT_MIN: 1;
     READY_SESSIONS_LIMIT_MAX: 50;
+    ADOPT_SOURCE_REF_MAX: 500;
+    OIDC_JTI_MAX: 200;
+    OIDC_RUN_NUMBER_PATTERN: string;
+    OIDC_EXCHANGE_RETENTION_DAYS: 35;
     READY_USER_TEXT: "waiting for a runner";
     RUNNER_FAILED_PHASE_PATTERN: string;
     AGENT_SESSIONS_READY_CHECK: string;
@@ -330,6 +341,7 @@ export declare const FREEZE_STRUCTURED: Readonly<{
         exec_heartbeat: import("./routes.js").FixedRoute;
         exec_ready_list: import("./routes.js").FixedRoute;
         exec_oidc_exchange: import("./routes.js").FixedRoute;
+        exec_adopt: import("./routes.js").FixedRoute;
         exec_inbox: import("./routes.js").ScopedRoute;
         exec_inbox_take: import("./routes.js").ScopedRoute;
         exec_inbox_ack: import("./routes.js").ScopedRoute;
@@ -724,8 +736,11 @@ export declare const FREEZE_STRUCTURED: Readonly<{
     }>;
     GATEWAY_EVENTS_BODY_KEYS: readonly ["session_id", "kind", "epoch", "idempotency_key", "refs"];
     READY_CAUSES: readonly ["dispatched", "lease_expired", "wait_cleared", "job_failed"];
-    WAIT_REASONS: readonly ["approval", "moving", "mnemom_unavailable", "ci", "question", "budget"];
-    PARKED_ONLY_WAIT_REASONS: readonly ["ci", "question", "budget"];
+    WAIT_REASONS: readonly ["approval", "moving", "mnemom_unavailable", "ci", "question", "budget", "awaiting_issue_run", "repo_arm_unreadable"];
+    PARKED_ONLY_WAIT_REASONS: readonly ["ci", "question", "budget", "awaiting_issue_run", "repo_arm_unreadable"];
+    DISPATCH_PARK_WAIT_REASONS: readonly ["awaiting_issue_run", "repo_arm_unreadable"];
+    ADOPT_REFUSED_CAUSES: readonly ["no_parked_seal", "not_parked"];
+    ADOPT_BODY_KEYS: readonly ["source_ref", "nonce"];
     WAIT_REF_KEYS: Readonly<{
         readonly ci: readonly ["repo_id", "head_sha"];
         readonly question: readonly ["approval_id"];
@@ -734,15 +749,18 @@ export declare const FREEZE_STRUCTURED: Readonly<{
     CLEAR_WAIT_OUTCOMES: readonly ["cleared", "stale_ref", "already_clear"];
     EXECUTOR_SCOPES: readonly ["user", "org"];
     ORG_SCOPE_EXECUTOR_KINDS: readonly ["container", "fleet"];
-    OIDC_EXCHANGE_REFUSALS: readonly ["bad_issuer", "repo_not_enrolled", "ref_not_allowed", "pool_flag_off"];
+    OIDC_EXCHANGE_REFUSALS: readonly ["bad_issuer", "repo_not_enrolled", "ref_not_allowed", "pool_flag_off", "adopt_ticket_invalid", "token_replayed", "run_already_exchanged"];
+    OIDC_EXCHANGE_BODY_KEYS: readonly ["oidc_token", "adopt_ticket"];
+    OIDC_EXCHANGE_RUN_CLAIMS: readonly ["jti", "run_id", "run_attempt"];
     ORG_POLICY_LIMIT_KEYS: readonly ["per_session_budget_usd", "live_lease_cap"];
     POOL_CLAIM_FIELDS: readonly ["contract_sha256", "contract_version", "cap"];
     CREATE_READY_SESSION_REFUSALS: readonly ["no_dispatch_agent", "dispatch_owner_missing", "seal_not_found", "cell_unmapped", "charter_mismatch"];
-    CREATE_READY_SESSION_OUTCOMES: readonly ["created", "existing", "refused"];
+    CREATE_READY_SESSION_OUTCOMES: readonly ["created", "existing", "refused", "parked"];
     CREATE_READY_SESSION_ANSWERS: Readonly<{
         readonly created: readonly ["outcome", "session_id"];
         readonly existing: readonly ["outcome", "session_id"];
         readonly refused: readonly ["outcome", "reason"];
+        readonly parked: readonly ["outcome", "session_id", "wait_reason"];
     }>;
     JOURNAL_APPROVAL_KINDS: readonly ["approval.resolved", "approval.consumed"];
     RUNNER_OUTCOMES: readonly ["done", "no_job", "failed", "refused"];
@@ -755,7 +773,7 @@ export declare const FREEZE_STRUCTURED: Readonly<{
         readonly refused: 3;
     }>;
     RUNNER_FAILED_REASONS: readonly ["pr_open_failed", "pr_no_changes"];
-    RUNNER_REFUSED_REASONS: readonly ["bundle_too_large", "bundle_malformed", "bundle_wrong_typ", "bundle_schema", "bundle_unknown_key", "bundle_unusable_key", "bundle_retired_key", "bundle_bad_signature", "bundle_code_digest_mismatch", "bundle_not_yet_valid", "bundle_expired", "bundle_binding_mismatch", "bundle_unavailable", "job_unavailable", "contract_bad_sha", "contract_too_large", "contract_sha_mismatch", "contract_not_a_contract", "contract_mismatch_unrecoverable", "claim_needs_key", "claim_ineligible", "claim_unavailable", "lease_lost", "executor_revoked", "executor_unauthorized", "oidc_bad_issuer", "oidc_repo_not_enrolled", "oidc_ref_not_allowed", "oidc_pool_flag_off", "oidc_unavailable", "api_unavailable"];
+    RUNNER_REFUSED_REASONS: readonly ["bundle_too_large", "bundle_malformed", "bundle_wrong_typ", "bundle_schema", "bundle_unknown_key", "bundle_unusable_key", "bundle_retired_key", "bundle_bad_signature", "bundle_code_digest_mismatch", "bundle_not_yet_valid", "bundle_expired", "bundle_binding_mismatch", "bundle_unavailable", "job_unavailable", "contract_bad_sha", "contract_too_large", "contract_sha_mismatch", "contract_not_a_contract", "contract_mismatch_unrecoverable", "claim_needs_key", "claim_ineligible", "claim_unavailable", "lease_lost", "executor_revoked", "executor_unauthorized", "oidc_bad_issuer", "oidc_repo_not_enrolled", "oidc_ref_not_allowed", "oidc_pool_flag_off", "oidc_unavailable", "api_unavailable", "oidc_adopt_ticket_invalid", "oidc_token_replayed", "oidc_run_already_exchanged"];
     RUNNER_OPEN_MODE_TOLERATED: readonly ["bundle_unavailable", "job_unavailable", "api_unavailable"];
     RUNNER_MERGE_STRATEGIES: readonly ["external", "merge_on_green"];
 }>;

package/dist/vendor/shared/durable-contract/freeze-record.js

@@ -15,15 +15,15 @@ import * as C from "./constants.js";
 import { API_CELL_ID_VECTORS_SHA256, CANONICAL_CELL_IDS } from "./cell-id.js";
 import { LEASE_KEY_PREFIX } from "./keys.js";
 import { ARM_HEADER, ARM_VERSION } from "./arm.js";
-import { CHARTER_BY_HASH_BODY_KEYS, CHARTER_BY_HASH_RESPONSE, CHARTER_SEALED_AT_RE, CLAIM_BODY_KEYS, EXEC_SESSIONS_RESPONSE, OWNER_SESSION_VIEW_FIELDS, GATEWAY_EVENTS_BODY_KEYS, EXECUTOR_KEY_HEADER, HEARTBEAT_REQUEST_KEYS, INTERNAL_KEY_HEADER, ROUTES, } from "./routes.js";
+import { CHARTER_BY_HASH_BODY_KEYS, CHARTER_BY_HASH_RESPONSE, CHARTER_SEALED_AT_RE, CLAIM_BODY_KEYS, EXEC_SESSIONS_RESPONSE, OWNER_SESSION_VIEW_FIELDS, GATEWAY_EVENTS_BODY_KEYS, EXECUTOR_KEY_HEADER, HEARTBEAT_REQUEST_KEYS, INTERNAL_KEY_HEADER, ROUTES, ADOPT_BODY_KEYS, ADOPT_SOURCE_REF_MAX, } from "./routes.js";
 import * as D from "./doors.js";
 import { JOURNAL_APPROVAL_KINDS } from "./journal-approvals.js";
-import { PARKED_ONLY_WAIT_REASONS, READY_USER_TEXT, WAIT_REASONS } from "./states.js";
+import { DISPATCH_PARK_WAIT_REASONS, PARKED_ONLY_WAIT_REASONS, READY_USER_TEXT, WAIT_REASONS, } from "./states.js";
 import { SECRET_SCOPE } from "./secret-scope.js";
 import { EXECUTOR_STATE_DIR, EXECUTOR_STATE_DIR_MODE, EXECUTOR_STATE_FILE, EXECUTOR_STATE_FILE_MODE, } from "./paths.js";
 import { ATTRIBUTE_VALUES, DEVICE_VERIFY_AAL_DEFAULT, M1_SPAN_NAMES, SPAN_ATTRIBUTE_KEYS, SPAN_DEVICE_VERIFY_WOULD_REFUSE, SPAN_DURABLE_ADMISSION, SPAN_DURABLE_CLAIM, SPAN_DURABLE_ENROLLMENT, SPAN_DURABLE_SEAT_HELLO, SPAN_DURABLE_SWEEP, SWEEP_LOG_NAME, } from "./telemetry.js";
 import { EVENT_PREIMAGE_FIELDS, EXECUTOR_WRITABLE_KINDS, GATEWAY_EVENTS_ROUTE, GATEWAY_WRITABLE_KINDS, GENESIS_PREV_HASH, READY_CAUSES, TERMINAL_EVENT_KINDS, } from "./events.js";
-import { CLAIM_INELIGIBLE_DETAILS, CLAIM_INELIGIBLE_REASONS, CLAIM_LOST_RACE_REASONS, CLAIM_OUTCOMES, DURABLE_CODES, PARK_REFUSAL_REASONS, HEARTBEAT_ENTRY_FIELDS, HEARTBEAT_RESULT_FIELDS, ENROLL_POLL_ERROR_STATUS, ENROLL_POLL_ERRORS, } from "./codes.js";
+import { CLAIM_INELIGIBLE_DETAILS, CLAIM_INELIGIBLE_REASONS, CLAIM_LOST_RACE_REASONS, CLAIM_OUTCOMES, DURABLE_CODES, ADOPT_REFUSED_CAUSES, PARK_REFUSAL_REASONS, HEARTBEAT_ENTRY_FIELDS, HEARTBEAT_RESULT_FIELDS, ENROLL_POLL_ERROR_STATUS, ENROLL_POLL_ERRORS, } from "./codes.js";
 import { DEVICE_PAGE_MARKERS, FIX_LINES, RISK_LINE_TEXT, RISK_SENTENCE_ID_HOST, STOPPED_FIX, STOPPED_REASON_TEXT, U05_CHECK_TEXT_ATTESTATION_FAILED, U05_CHECK_TEXT_RESPAWN_FAILED, U05_FIXTURE_CHECK, } from "./fixlines.js";
 import { PLUGIN_DIR, PLUGIN_MANIFEST_FAILURES, PLUGIN_MANIFEST_PATH, PLUGIN_MANIFEST_SCHEMA, } from "./spec.js";
 import { AGENT_EXECUTORS_SCOPE_CHECK, AGENT_SESSIONS_READY_CHECK, AGENT_SESSIONS_WAIT_PARKED_CHECK, DURABLE_APPROVAL_SESSIONLESS_SUBJECTS, DURABLE_APPROVAL_SUBJECTS, DURABLE_APPROVALS_TARGET_CHECK, EXECUTE_EXCEPTIONS, M1_ARBITERS, M1_COLUMNS, M1_FUNCTIONS, M1_TABLES, } from "./schema.js";
@@ -151,8 +151,22 @@ export const FREEZE_RECORD = Object.freeze({
     DEFAULT_LEASE_CAP_ENV: D.DEFAULT_LEASE_CAP_ENV,
     DISPATCH_SESSION_CID_PREFIX: D.DISPATCH_SESSION_CID_PREFIX,
     DISPATCH_SESSION_NAME_PREFIX: D.DISPATCH_SESSION_NAME_PREFIX,
+    // amendment 66
+    ADOPT_TICKET_INPUT: D.ADOPT_TICKET_INPUT,
+    WAKEUP_SESSION_INPUT: D.WAKEUP_SESSION_INPUT,
+    ADOPT_TICKET_PATTERN: D.ADOPT_TICKET_RE.source,
+    ADOPT_TICKET_TTL_S: D.ADOPT_TICKET_TTL_S,
+    OIDC_TOKEN_MAX: D.OIDC_TOKEN_MAX,
+    OIDC_WORKFLOW_ENV: D.OIDC_WORKFLOW_ENV,
+    OIDC_WORKFLOW_FILE_PATTERN: D.OIDC_WORKFLOW_FILE_RE.source,
     READY_SESSIONS_LIMIT_MIN: D.READY_SESSIONS_LIMIT_MIN,
     READY_SESSIONS_LIMIT_MAX: D.READY_SESSIONS_LIMIT_MAX,
+    // amendment 64
+    ADOPT_SOURCE_REF_MAX,
+    // amendment 65
+    OIDC_JTI_MAX: D.OIDC_JTI_MAX,
+    OIDC_RUN_NUMBER_PATTERN: D.OIDC_RUN_NUMBER_RE.source,
+    OIDC_EXCHANGE_RETENTION_DAYS: D.OIDC_EXCHANGE_RETENTION_DAYS,
     READY_USER_TEXT,
     RUNNER_FAILED_PHASE_PATTERN: D.RUNNER_FAILED_PHASE_RE.source,
     AGENT_SESSIONS_READY_CHECK,
@@ -265,11 +279,17 @@ export const FREEZE_STRUCTURED = Object.freeze({
     READY_CAUSES,
     WAIT_REASONS,
     PARKED_ONLY_WAIT_REASONS,
+    // amendment 64
+    DISPATCH_PARK_WAIT_REASONS,
+    ADOPT_REFUSED_CAUSES,
+    ADOPT_BODY_KEYS,
     WAIT_REF_KEYS: D.WAIT_REF_KEYS,
     CLEAR_WAIT_OUTCOMES: D.CLEAR_WAIT_OUTCOMES,
     EXECUTOR_SCOPES: D.EXECUTOR_SCOPES,
     ORG_SCOPE_EXECUTOR_KINDS: D.ORG_SCOPE_EXECUTOR_KINDS,
     OIDC_EXCHANGE_REFUSALS: D.OIDC_EXCHANGE_REFUSALS,
+    OIDC_EXCHANGE_BODY_KEYS: D.OIDC_EXCHANGE_BODY_KEYS,
+    OIDC_EXCHANGE_RUN_CLAIMS: D.OIDC_EXCHANGE_RUN_CLAIMS,
     ORG_POLICY_LIMIT_KEYS: D.ORG_POLICY_LIMIT_KEYS,
     POOL_CLAIM_FIELDS: D.POOL_CLAIM_FIELDS,
     CREATE_READY_SESSION_REFUSALS: D.CREATE_READY_SESSION_REFUSALS,

package/dist/vendor/shared/durable-contract/routes.d.ts

@@ -52,6 +52,16 @@ export interface ScopedRoute {
     readonly pre: string;
     readonly post: string;
 }
+/** exec_adopt's body keys, closed (S1 amendment 64): the seal's source_ref and the run's claim nonce. */
+export declare const ADOPT_BODY_KEYS: readonly ["source_ref", "nonce"];
+/** A seal's source_ref is at most this long (the api's batch-seal limit). */
+export declare const ADOPT_SOURCE_REF_MAX = 500;
+/**
+ * Whether `v` is exactly {source_ref, nonce}: source_ref a trimmed, non-empty string of at most
+ * ADOPT_SOURCE_REF_MAX, and nonce under exec_claim's rule (a non-empty string). The lease adopt
+ * creates is fenced on that nonce, so the run holds it with the nonce it sends on every later call.
+ */
+export declare function adoptBodyOk(v: unknown): boolean;
 export declare const ROUTES: Readonly<{
     /** Start an enrollment (device code). */
     exec_enroll: FixedRoute;
@@ -73,8 +83,20 @@ export declare const ROUTES: Readonly<{
     exec_heartbeat: FixedRoute;
     /** The org-scope executor's claimable pool sessions, oldest first; `?limit=` (READY_SESSIONS_LIMIT_MIN..MAX) is not part of the match. */
     exec_ready_list: FixedRoute;
-    /** Body {oidc_token}; answers a one-lease org-scope executor key or an OIDC_EXCHANGE_REFUSALS refusal. */
+    /**
+     * Body {oidc_token, adopt_ticket?} (doors.ts oidcExchangeBodyOk, Amendment 66). adopt_ticket comes
+     * only from a ticketed wake-up; it is used up before any key is minted and binds the key to one seal.
+     * Amendment 65: single-use per token jti and per run attempt (token_replayed, run_already_exchanged).
+     */
     exec_oidc_exchange: FixedRoute;
+    /**
+     * Body {source_ref, nonce} (adoptBodyOk). The OIDC run's key unparks the parked dispatch seal whose
+     * source_ref is this run's own issue, in its own org and repo, and claims it in one transaction,
+     * and only the seal its adopt ticket was minted for (Amendment 66; a key with no ticket adopts none),
+     * fenced on the nonce (exec_claim's rule);
+     * answers the exec_claim answer, or adopt_refused / seal_repo_mismatch, changing nothing.
+     */
+    exec_adopt: FixedRoute;
     /** Content-free summary {admitted, delivered, oldest_admitted_at} (inboxSummaryResponseOk); marks nothing. */
     exec_inbox: ScopedRoute;
     /** Body {epoch, nonce, limit?}: marks up to limit messages delivered at the live epoch, journals inbox.delivered, answers their delivery text. */

package/dist/vendor/shared/durable-contract/routes.js

@@ -42,6 +42,26 @@ import { HEARTBEAT_ENTRY_FIELDS } from "./codes.js";
 import { parseContract } from "./envelope.js";
 import { GATEWAY_EVENTS_ROUTE, GATEWAY_WRITABLE_KINDS, validateRefs } from "./events.js";
 import { ALL_STATE_REASONS, isSessionState, isValidStateReason } from "./states.js";
+/** exec_adopt's body keys, closed (S1 amendment 64): the seal's source_ref and the run's claim nonce. */
+export const ADOPT_BODY_KEYS = ["source_ref", "nonce"];
+/** A seal's source_ref is at most this long (the api's batch-seal limit). */
+export const ADOPT_SOURCE_REF_MAX = 500;
+/**
+ * Whether `v` is exactly {source_ref, nonce}: source_ref a trimmed, non-empty string of at most
+ * ADOPT_SOURCE_REF_MAX, and nonce under exec_claim's rule (a non-empty string). The lease adopt
+ * creates is fenced on that nonce, so the run holds it with the nonce it sends on every later call.
+ */
+export function adoptBodyOk(v) {
+    if (v === null || typeof v !== "object" || Array.isArray(v))
+        return false;
+    const b = v;
+    if (Object.keys(b).length !== 2 || typeof b.source_ref !== "string")
+        return false;
+    if (typeof b.nonce !== "string" || b.nonce.length === 0)
+        return false;
+    const r = b.source_ref;
+    return r !== "" && r === r.trim() && r.length <= ADOPT_SOURCE_REF_MAX;
+}
 const fixed = (method, auth, path) => Object.freeze({ method, auth, path });
 const scoped = (method, auth, pre, post) => Object.freeze({ method, auth, pre, post });
 const EXECUTORS = "/v1/executors";
@@ -72,8 +92,21 @@ export const ROUTES = Object.freeze({
     // ---- Doors amendment (ruling 34.03) ----
     /** The org-scope executor's claimable pool sessions, oldest first; `?limit=` (READY_SESSIONS_LIMIT_MIN..MAX) is not part of the match. */
     exec_ready_list: fixed("GET", "executor_key", "/v1/executor/ready"),
-    /** Body {oidc_token}; answers a one-lease org-scope executor key or an OIDC_EXCHANGE_REFUSALS refusal. */
+    /**
+     * Body {oidc_token, adopt_ticket?} (doors.ts oidcExchangeBodyOk, Amendment 66). adopt_ticket comes
+     * only from a ticketed wake-up; it is used up before any key is minted and binds the key to one seal.
+     * Amendment 65: single-use per token jti and per run attempt (token_replayed, run_already_exchanged).
+     */
     exec_oidc_exchange: fixed("POST", "github_oidc", "/v1/executor/oidc/exchange"),
+    // ---- S1 amendment 64 (mnemom-test#1336) ----
+    /**
+     * Body {source_ref, nonce} (adoptBodyOk). The OIDC run's key unparks the parked dispatch seal whose
+     * source_ref is this run's own issue, in its own org and repo, and claims it in one transaction,
+     * and only the seal its adopt ticket was minted for (Amendment 66; a key with no ticket adopts none),
+     * fenced on the nonce (exec_claim's rule);
+     * answers the exec_claim answer, or adopt_refused / seal_repo_mismatch, changing nothing.
+     */
+    exec_adopt: fixed("POST", "executor_key", "/v1/executor/adopt"),
     // ---- inbox, executor side (S1 amendment 60) ----
     /** Content-free summary {admitted, delivered, oldest_admitted_at} (inboxSummaryResponseOk); marks nothing. */
     exec_inbox: scoped("GET", "executor_key", EXEC_SESSION_PRE, "/inbox"),

package/dist/vendor/shared/durable-contract/schema.d.ts

@@ -114,9 +114,9 @@ export declare function approvalSubjectHash(subject: Readonly<Record<string, unk
  */
 export declare const AGENT_SESSIONS_READY_CHECK: string;
 /**
- * agent_sessions_wait_parked_ck (ruling 34.06 (1), (2)): ci, question and budget are valid only with
- * state 'parked', and wait_ref is set exactly when wait_reason is one of them. The wait_reason
- * CHECK lists WAIT_REASONS.
+ * agent_sessions_wait_parked_ck (ruling 34.06 (1), (2); amendment 64): every PARKED_ONLY_WAIT_REASONS
+ * value is valid only with state 'parked'. wait_ref is set exactly when wait_reason is ci, question
+ * or budget; the DISPATCH_PARK_WAIT_REASONS carry none. The wait_reason CHECK lists WAIT_REASONS.
  */
 export declare const AGENT_SESSIONS_WAIT_PARKED_CHECK: string;
 /** agent_executors.scope CHECK (ruling 34.03 (1)). */

package/dist/vendor/shared/durable-contract/schema.js

@@ -41,7 +41,7 @@
 import { canonicalJson, sha256Hex, UUID_RE } from "./canonical.js";
 import { CANONICAL_CELL_IDS } from "./cell-id.js";
 import { LEASE_SECONDS_DEFAULT, RESUME_RESET_SECONDS_DEFAULT } from "./constants.js";
-import { PARKED_ONLY_WAIT_REASONS } from "./states.js";
+import { DISPATCH_PARK_WAIT_REASONS, PARKED_ONLY_WAIT_REASONS } from "./states.js";
 export const M1_TABLES = [
     "agent_sessions",
     "durable_lease_keys",
@@ -430,11 +430,12 @@ export async function approvalSubjectHash(subject) {
 export const AGENT_SESSIONS_READY_CHECK = "state <> 'ready' OR (durable_mode = 'locked' AND state_reason IS NULL AND home_executor_id IS NULL" +
     " AND lease_executor_id IS NULL AND lease_expires_at IS NULL AND spawn_id IS NULL AND hello_at IS NULL)";
 /**
- * agent_sessions_wait_parked_ck (ruling 34.06 (1), (2)): ci, question and budget are valid only with
- * state 'parked', and wait_ref is set exactly when wait_reason is one of them. The wait_reason
- * CHECK lists WAIT_REASONS.
+ * agent_sessions_wait_parked_ck (ruling 34.06 (1), (2); amendment 64): every PARKED_ONLY_WAIT_REASONS
+ * value is valid only with state 'parked'. wait_ref is set exactly when wait_reason is ci, question
+ * or budget; the DISPATCH_PARK_WAIT_REASONS carry none. The wait_reason CHECK lists WAIT_REASONS.
  */
 export const AGENT_SESSIONS_WAIT_PARKED_CHECK = "CASE WHEN wait_reason IN ('ci','question','budget') THEN state = 'parked' AND wait_ref IS NOT NULL" +
+    " WHEN wait_reason IN ('awaiting_issue_run','repo_arm_unreadable') THEN state = 'parked' AND wait_ref IS NULL" +
     " ELSE wait_ref IS NULL END";
 /** agent_executors.scope CHECK (ruling 34.03 (1)). */
 export const AGENT_EXECUTORS_SCOPE_CHECK = "scope IN ('user','org')";
@@ -451,6 +452,8 @@ export function readyRowOk(row) {
 }
 /** The wait-parked CHECK as a predicate. */
 export function waitParkedRowOk(row) {
+    if (row.wait_reason !== null && DISPATCH_PARK_WAIT_REASONS.includes(row.wait_reason))
+        return row.state === "parked" && row.wait_ref === null;
     return row.wait_reason !== null &&
         PARKED_ONLY_WAIT_REASONS.includes(row.wait_reason)
         ? row.state === "parked" && row.wait_ref !== null

package/dist/vendor/shared/durable-contract/states.d.ts

@@ -31,15 +31,28 @@ export declare const STATE_REASONS: {
 export declare const ALL_STATE_REASONS: readonly StateReason[];
 /** M1 writers exist for these suspended reasons; the others are fixture-only (P0a-B / P0b writers). */
 export declare const M1_WRITTEN_SUSPENDED_REASONS: readonly ["budget_reached", "identity_mismatch", "attestation_failed", "respawn_failed", "grant_expired", "approval_expired", "approval_denied"];
-/** M1's three wait reasons, then ruling 34.06's ci, question and budget (appended). */
-export declare const WAIT_REASONS: readonly ["approval", "moving", "mnemom_unavailable", "ci", "question", "budget"];
+/**
+ * M1's three wait reasons, then ruling 34.06's ci, question and budget, then amendment 64's two
+ * dispatch parks (appended).
+ */
+export declare const WAIT_REASONS: readonly ["approval", "moving", "mnemom_unavailable", "ci", "question", "budget", "awaiting_issue_run", "repo_arm_unreadable"];
 export type WaitReason = (typeof WAIT_REASONS)[number];
 /**
  * The wait reasons valid only with state 'parked' (ruling 34.06 (1), agent_sessions_wait_parked_ck).
  * While wait_reason is one of these, every claim answers ineligible `waiting` (34.06 (3)).
  */
-export declare const PARKED_ONLY_WAIT_REASONS: readonly ["ci", "question", "budget"];
+export declare const PARKED_ONLY_WAIT_REASONS: readonly ["ci", "question", "budget", "awaiting_issue_run", "repo_arm_unreadable"];
 export type ParkedOnlyWaitReason = (typeof PARKED_ONLY_WAIT_REASONS)[number];
+/**
+ * Amendment 64 (mnemom-test#1336): the parks dispatch writes when it creates a pool session, never an
+ * executor. `awaiting_issue_run`: the seal's repo is served-arm, so only the seal's own issue run may
+ * adopt it. `repo_arm_unreadable`: the repo's arm could not be read, so the session is held visible
+ * instead of going ready. Both are PARKED_ONLY_WAIT_REASONS (state 'parked', claims answer
+ * ineligible `waiting`) and carry no wait_ref: they have no WAIT_REF_KEYS entry, so waitRefOk
+ * refuses them and the executor park body can never write one.
+ */
+export declare const DISPATCH_PARK_WAIT_REASONS: readonly ["awaiting_issue_run", "repo_arm_unreadable"];
+export type DispatchParkWaitReason = (typeof DISPATCH_PARK_WAIT_REASONS)[number];
 export declare function isSessionState(v: unknown): v is SessionState;
 export declare function isTerminalState(s: SessionState): boolean;
 /** Whether `reason` is allowed with `state` by the closed enum. */

package/dist/vendor/shared/durable-contract/states.js

@@ -92,7 +92,10 @@ export const M1_WRITTEN_SUSPENDED_REASONS = [
     "approval_expired",
     "approval_denied",
 ];
-/** M1's three wait reasons, then ruling 34.06's ci, question and budget (appended). */
+/**
+ * M1's three wait reasons, then ruling 34.06's ci, question and budget, then amendment 64's two
+ * dispatch parks (appended).
+ */
 export const WAIT_REASONS = [
     "approval",
     "moving",
@@ -100,6 +103,8 @@ export const WAIT_REASONS = [
     "ci",
     "question",
     "budget",
+    "awaiting_issue_run",
+    "repo_arm_unreadable",
 ];
 /**
  * The wait reasons valid only with state 'parked' (ruling 34.06 (1), agent_sessions_wait_parked_ck).
@@ -109,6 +114,20 @@ export const PARKED_ONLY_WAIT_REASONS = [
     "ci",
     "question",
     "budget",
+    "awaiting_issue_run",
+    "repo_arm_unreadable",
+];
+/**
+ * Amendment 64 (mnemom-test#1336): the parks dispatch writes when it creates a pool session, never an
+ * executor. `awaiting_issue_run`: the seal's repo is served-arm, so only the seal's own issue run may
+ * adopt it. `repo_arm_unreadable`: the repo's arm could not be read, so the session is held visible
+ * instead of going ready. Both are PARKED_ONLY_WAIT_REASONS (state 'parked', claims answer
+ * ineligible `waiting`) and carry no wait_ref: they have no WAIT_REF_KEYS entry, so waitRefOk
+ * refuses them and the executor park body can never write one.
+ */
+export const DISPATCH_PARK_WAIT_REASONS = [
+    "awaiting_issue_run",
+    "repo_arm_unreadable",
 ];
 export function isSessionState(v) {
     return typeof v === "string" && SESSION_STATES.includes(v);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mnemom/mnemom",
-  "version": "0.17.39-next.0",
+  "version": "0.17.39-next.1",
   "description": "Transparent AI agent tracing",
   "type": "module",
   "bin": {