@mnemom/mnemom 0.17.39-next.0 → 0.17.39-next.2

package/dist/commands/agent-run.js

@@ -72,6 +72,8 @@ export async function agentRunCommand(flags, deps) {
             apiUrl: deps.apiUrl,
             requestUrl: plan.credential.requestUrl,
             requestToken: plan.credential.requestToken,
+            // Amendment 66: set by the action from the wake-up's adopt-ticket input; empty sends none.
+            adoptTicket: deps.env.MNEMOM_ADOPT_TICKET?.trim() || null,
         });
         if (!ex.ok) {
             // No job is held yet: fail closed whatever --fail-mode says (34.12 (6)).

package/dist/commands/auth.d.ts

@@ -1,5 +1,50 @@
+/**
+ * `mnemom whoami --json`: who is logged in, and which org is active, as ONE
+ * JSON object for a program to read. It carries identity only, never a
+ * credential: no access or refresh token, no API key, no scope string.
+ *
+ *   {"logged_in": bool, "user_id": str|null, "email": str|null,
+ *    "key_id": str|null, "org_id": str|null,
+ *    "active_org": {"org_id", "slug", "name"}|null, "expires_at": ISO|null,
+ *    "api_url": the API origin this identity was resolved against}
+ *
+ * A person (an OAuth login) is user_id + email, read from GET /v1/auth/session.
+ * An API key is key_id + org_id (its own org), read from GET
+ * /v1/api-keys/whoami; its user_id is always null, because a key's owning
+ * person is not the caller and a reader must key a key on key_id, never on
+ * that person. When the identity read fails, user_id, email, key_id and org_id
+ * are null: never a stale stored value.
+ *
+ * api_url is getApiUrl() in this process (--api / MNEMOM_API_URL > MNEMOM_RING
+ * > MNEMOM_ENV). Identities never cross environments (test, us-1 and
+ * production each have their own), so a reader pins one origin and refuses a
+ * whoami whose api_url is not it.
+ *
+ * A reader beside the CLI must never read ~/.mnemom/auth.json or call the API
+ * with the stored token itself: the CLI refreshes and rotates its tokens under
+ * a lock (MNE-9232), and a second token handler would race that refresh. This
+ * is the read such a reader uses instead (develop's install and every acting
+ * develop verb, which take their operator and tenant from the login).
+ */
+export interface WhoamiJson {
+    logged_in: boolean;
+    user_id: string | null;
+    email: string | null;
+    key_id: string | null;
+    org_id: string | null;
+    active_org: {
+        org_id: string;
+        slug: string;
+        name: string | null;
+    } | null;
+    expires_at: string | null;
+    api_url: string;
+}
+export declare function whoamiJson(): Promise<WhoamiJson>;
 export declare function loginCommand(options?: {
     noBrowser?: boolean;
 }): Promise<void>;
 export declare function logoutCommand(): Promise<void>;
-export declare function whoamiCommand(): Promise<void>;
+export declare function whoamiCommand(options?: {
+    json?: boolean;
+}): Promise<void>;

package/dist/commands/auth.js

@@ -1,6 +1,51 @@
 import { getAuthInfo, clearAuthTokens, loginWithBrowser, loginWithDeviceFlow, resolveAuth, } from "../lib/auth.js";
-import { getMe } from "../lib/api.js";
+import { getApiKeyWhoami, getMe, getSession } from "../lib/api.js";
+import { getActiveOrg } from "../lib/cli-config.js";
+import { getApiUrl } from "../lib/config.js";
 import { fmt } from "../lib/format.js";
+export async function whoamiJson() {
+    const active = getActiveOrg();
+    const active_org = active
+        ? { org_id: active.org_id, slug: active.slug, name: active.name ?? null }
+        : null;
+    const out = {
+        logged_in: false,
+        user_id: null,
+        email: null,
+        key_id: null,
+        org_id: null,
+        active_org,
+        expires_at: null,
+        api_url: getApiUrl(),
+    };
+    const cred = await resolveAuth();
+    if (cred.type === "none")
+        return out;
+    if (cred.type === "api-key") {
+        // A key is keyed on its own id and org, never on its owner's user id.
+        const key = await getApiKeyWhoami().catch(() => null);
+        return { ...out, logged_in: true, key_id: key?.key_id ?? null, org_id: key?.org_id ?? null };
+    }
+    if (!getAuthInfo())
+        return out;
+    // The OAuth token carries no identity: ask the API (GET /v1/auth/session, a
+    // pure read, unlike /v1/auth/me's billing and SSO JIT writes), which goes
+    // through the CLI's own refresh. A failed read leaves the identity null: a
+    // stored legacy value could belong to another session or environment.
+    const session = await getSession().catch(() => null);
+    const me = session ? { user_id: session.user.id, email: session.user.email ?? null } : null;
+    // Read the grant after that call: a refresh inside it moves expiresAt.
+    const auth = getAuthInfo();
+    if (!auth)
+        return out;
+    return {
+        ...out,
+        logged_in: true,
+        user_id: me?.user_id ?? null,
+        email: me?.email ?? null,
+        expires_at: new Date(auth.expiresAt * 1000).toISOString(),
+    };
+}
 export async function loginCommand(options = {}) {
     try {
         // --no-browser → RFC 8628 device flow (headless / SSH / no local browser).
@@ -53,7 +98,11 @@ export async function logoutCommand() {
     clearAuthTokens();
     console.log(fmt.success("Logged out."));
 }
-export async function whoamiCommand() {
+export async function whoamiCommand(options = {}) {
+    if (options.json) {
+        console.log(JSON.stringify(await whoamiJson()));
+        return;
+    }
     const cred = await resolveAuth();
     if (cred.type === "none") {
         console.log("\nNot logged in. Run `mnemom login` to authenticate.\n");

package/dist/durable/turn-chain.js

@@ -86,7 +86,9 @@ export function entryProducer(e) {
     return typeof p === "string" && TURN_PRODUCER_RE.test(p) ? p : undefined;
 }
 /** Claude Code's open tag for a bracketed paste, which may lead a pasted prompt's text. */
-const PASTE_OPEN_RE = /^<pasted_content id="[^"\n]{0,128}">\n?/;
+// Claude Code may record the paste after blank lines ("\n\n<pasted_content id=...>"); a delivery the marker
+// misses there is never confirmed and gets pasted again (seen live: 4 pastes of one message).
+const PASTE_OPEN_RE = /^\n*<pasted_content id="[^"\n]{0,128}">\n?/;
 /**
  * The inbox sha an entry answers (S1 amendment 60): the `[mnemom inbox <sha>]` marker on the first
  * line of the entry's first text (after Claude Code's paste open tag, as the host daemon delivers by

package/dist/host/inbox-delivery.js

@@ -72,7 +72,9 @@ export const HANDLED_MAX = 32;
 /** claude's input line, and the footer it shows while a turn runs. */
 const PROMPT_MARK = "❯";
 const RUNNING_RE = /esc to interrupt/i;
-const PASTE_OPEN_RE = /^<pasted_content id="[^"\n]{0,128}">\n?/;
+// Claude Code may record the paste after blank lines ("\n\n<pasted_content id=...>"); a delivery the marker
+// misses there is never confirmed and gets pasted again (seen live: 4 pastes of one message).
+const PASTE_OPEN_RE = /^\n*<pasted_content id="[^"\n]{0,128}">\n?/;
 function firstText(r) {
     const c = r.message?.content;
     if (typeof c === "string")

package/dist/index.js

@@ -1976,9 +1976,10 @@ program
 program
     .command("whoami")
     .description("Show current authentication status")
-    .action(async () => {
+    .option("--json", "Print who is logged in as one JSON object: {logged_in, user_id, email, active_org, expires_at} (never a token)")
+    .action(async (options) => {
     try {
-        await whoamiCommand();
+        await whoamiCommand({ json: options.json });
     }
     catch (error) {
         console.error("Error:", error instanceof Error ? error.message : error);

package/dist/lib/api.d.ts

@@ -426,6 +426,25 @@ export interface MeResponse {
     } | null;
 }
 export declare function getMe(): Promise<MeResponse>;
+/** Who the credential belongs to — `GET /v1/auth/session`. A pure read for a
+ *  bearer (no billing-account ensure and no SSO JIT provisioning, which
+ *  `GET /v1/auth/me` runs on every call), so an identity check changes nothing. */
+export interface SessionResponse {
+    user: {
+        id: string;
+        email?: string | null;
+    };
+    method?: string;
+}
+export declare function getSession(): Promise<SessionResponse>;
+/** What an API key is — `GET /v1/api-keys/whoami` (ADR-049). A read; the key's
+ *  own id and org, which is how a reader keys a key caller. */
+export interface ApiKeyWhoamiResponse {
+    key_id: string | null;
+    org_id: string | null;
+    auth_method?: string;
+}
+export declare function getApiKeyWhoami(): Promise<ApiKeyWhoamiResponse>;
 /**
  * The org's Mnemom Units (MU) balance — `GET /v1/billing/mu` (the frozen mu
  * v0.1 balance, values as decimal strings). Amounts come in both whole MU

package/dist/lib/api.js

@@ -440,6 +440,14 @@ export async function getMyPersonalOrg() {
 export async function getMe() {
     return gFetch("/v1/auth/me", {}, { fallback: "Could not read your identity" });
 }
+export async function getSession() {
+    return gFetch("/v1/auth/session", {}, { fallback: "Could not read your identity" });
+}
+export async function getApiKeyWhoami() {
+    return gFetch("/v1/api-keys/whoami", {}, {
+        fallback: "Could not read your API key's identity",
+    });
+}
 export async function getRecordTotals(orgId, lineageKey, signal) {
     return gFetch(`/v1/orgs/${encodeURIComponent(orgId)}/record/totals?lineage_key=${encodeURIComponent(lineageKey)}`, signal ? { signal } : {}, { notFoundLabel: "Record totals", fallback: "Could not read record totals" });
 }

package/dist/lib/runner/oidc.d.ts

@@ -30,10 +30,15 @@ export declare function actionsIdToken(fetch: FetchFn, requestUrl: string, reque
     ok: false;
     detail: string;
 }>;
-/** Fetch the ID token and exchange it for a one-lease executor key. */
+/**
+ * Fetch the ID token and exchange it for a one-lease executor key. `adoptTicket` (Amendment 66) is
+ * the ticket the api's wake-up passed this run as the adopt-ticket input; it rides in the body
+ * beside the token, and like the token it never reaches a log line or an outcome.
+ */
 export declare function exchangeOidc(opts: {
     fetch: FetchFn;
     apiUrl: string;
     requestUrl: string;
     requestToken: string;
+    adoptTicket?: string | null;
 }): Promise<OidcExchange>;

package/dist/lib/runner/oidc.js

@@ -54,7 +54,11 @@ export async function actionsIdToken(fetch, requestUrl, requestToken) {
         return { ok: false, detail: `ID token request failed: ${e.message}` };
     }
 }
-/** Fetch the ID token and exchange it for a one-lease executor key. */
+/**
+ * Fetch the ID token and exchange it for a one-lease executor key. `adoptTicket` (Amendment 66) is
+ * the ticket the api's wake-up passed this run as the adopt-ticket input; it rides in the body
+ * beside the token, and like the token it never reaches a log line or an outcome.
+ */
 export async function exchangeOidc(opts) {
     const id = await actionsIdToken(opts.fetch, opts.requestUrl, opts.requestToken);
     if (!id.ok)
@@ -65,7 +69,9 @@ export async function exchangeOidc(opts) {
         res = await opts.fetch(`${base}${routePath("exec_oidc_exchange")}`, {
             method: "POST",
             headers: { accept: "application/json", "content-type": "application/json" },
-            body: JSON.stringify({ oidc_token: id.token }),
+            body: JSON.stringify(opts.adoptTicket
+                ? { oidc_token: id.token, adopt_ticket: opts.adoptTicket }
+                : { oidc_token: id.token }),
         });
     }
     catch (e) {

package/dist/vendor/durable-contract/index.js

@@ -238,12 +238,20 @@ var WAIT_REASONS = [
   "mnemom_unavailable",
   "ci",
   "question",
-  "budget"
+  "budget",
+  "awaiting_issue_run",
+  "repo_arm_unreadable"
 ];
 var PARKED_ONLY_WAIT_REASONS = [
   "ci",
   "question",
-  "budget"
+  "budget",
+  "awaiting_issue_run",
+  "repo_arm_unreadable"
+];
+var DISPATCH_PARK_WAIT_REASONS = [
+  "awaiting_issue_run",
+  "repo_arm_unreadable"
 ];
 function isSessionState(v) {
   return typeof v === "string" && SESSION_STATES.includes(v);
@@ -1066,6 +1074,7 @@ var CLAIM_UNAVAILABLE_CAUSES = [
   "lease_cap_config"
 ];
 var SEAL_REPO_MISMATCH_CAUSES = ["no_repo_claim", "no_seal_repo", "repo_mismatch"];
+var ADOPT_REFUSED_CAUSES = ["no_parked_seal", "not_parked"];
 var UNSUPPORTED_FEATURES = [
   "tool_classes",
   "launch_spec_change",
@@ -1179,6 +1188,9 @@ var DURABLE_CODES = {
   // durable_claim_ineligible reason: the session is claimable, only not by this executor, and a
   // runner never skips past it to another session. cause is a SEAL_REPO_MISMATCH_CAUSES value.
   seal_repo_mismatch: { status: 403, surfaces: ["api"], fields: ["cause"] },
+  // S1 amendment 64 (mnemom-test#1336): exec_adopt found nothing it may unpark for this run. Nothing
+  // is written. cause is an ADOPT_REFUSED_CAUSES value.
+  adopt_refused: { status: 409, surfaces: ["api"], fields: ["cause"] },
   // ---- api journal (C10-R0 (i), (j), (k)) ----
   /** Lost CAS race on (session_id, seq). */
   durable_append_conflict: { status: 409, surfaces: ["api"], fields: ["tip_seq"] },
@@ -2372,9 +2384,62 @@ var OIDC_EXCHANGE_REFUSALS = [
   "bad_issuer",
   "repo_not_enrolled",
   "ref_not_allowed",
-  "pool_flag_off"
+  "pool_flag_off",
+  "adopt_ticket_invalid",
+  "token_replayed",
+  "run_already_exchanged"
 ];
+var OIDC_EXCHANGE_RUN_CLAIMS = ["jti", "run_id", "run_attempt"];
+var OIDC_JTI_MAX = 200;
+var OIDC_RUN_NUMBER_RE = /^[1-9][0-9]{0,15}$/;
+var OIDC_EXCHANGE_RETENTION_DAYS = 35;
+function oidcRunClaimsOk(claims) {
+  const { jti, run_id, run_attempt } = claims;
+  return typeof jti === "string" && jti.length >= 1 && jti.length <= OIDC_JTI_MAX && typeof run_id === "string" && OIDC_RUN_NUMBER_RE.test(run_id) && typeof run_attempt === "string" && OIDC_RUN_NUMBER_RE.test(run_attempt);
+}
 var OIDC_EXCHANGE_AUDIENCE = "mnemom-executor";
+var ADOPT_TICKET_INPUT = "adopt-ticket";
+var WAKEUP_SESSION_INPUT = "session-id";
+var ADOPT_TICKET_RE = /^mnm_at_[A-Za-z0-9_-]{43}$/;
+var ADOPT_TICKET_TTL_S = 900;
+var OIDC_EXCHANGE_BODY_KEYS = ["oidc_token", "adopt_ticket"];
+var OIDC_TOKEN_MAX = 8192;
+var OIDC_WORKFLOW_ENV = "DISPATCH_WAKEUP_WORKFLOW";
+var OIDC_WORKFLOW_FILE_RE = /^[A-Za-z0-9_.-]{1,100}\.ya?ml$/;
+var OIDC_WORKFLOW_SET_ENV = "DURABLE_OIDC_WORKFLOWS";
+var OIDC_WORKFLOW_SET_MAX = 8;
+function adoptTicketOk(t) {
+  return typeof t === "string" && ADOPT_TICKET_RE.test(t);
+}
+function oidcExchangeBodyOk(v) {
+  if (v === null || typeof v !== "object" || Array.isArray(v)) return false;
+  const o = v;
+  const keys = Object.keys(o);
+  if (keys.some((k) => !OIDC_EXCHANGE_BODY_KEYS.includes(k))) return false;
+  if (typeof o.oidc_token !== "string" || o.oidc_token === "" || o.oidc_token.length > OIDC_TOKEN_MAX)
+    return false;
+  return !("adopt_ticket" in o) || typeof o.adopt_ticket === "string";
+}
+function oidcPinnedWorkflow(envValue) {
+  const wf = envValue?.trim() ?? "";
+  return OIDC_WORKFLOW_FILE_RE.test(wf) ? wf : null;
+}
+function oidcWorkflowSet(setValue, pinValue) {
+  if (setValue === void 0) {
+    const pin = oidcPinnedWorkflow(pinValue);
+    return pin === null ? null : [pin];
+  }
+  const names = setValue.split(",").map((n) => n.trim());
+  if (names.some((n) => !OIDC_WORKFLOW_FILE_RE.test(n) || n.includes(".."))) return null;
+  const set = [...new Set(names)];
+  return set.length > OIDC_WORKFLOW_SET_MAX ? null : set;
+}
+function jobWorkflowRefOk(jobWorkflowRef, repository, workflowFile, defaultBranch) {
+  return typeof jobWorkflowRef === "string" && jobWorkflowRef === `${repository}/.github/workflows/${workflowFile}@refs/heads/${defaultBranch}`;
+}
+function jobWorkflowRefInSet(jobWorkflowRef, repository, workflowFiles, defaultBranch) {
+  return workflowFiles.some((f2) => jobWorkflowRefOk(jobWorkflowRef, repository, f2, defaultBranch));
+}
 var ORG_POLICY_LIMIT_KEYS = ["per_session_budget_usd", "live_lease_cap"];
 var LIVE_LEASE_CAP_MIN = 1;
 var LIVE_LEASE_CAP_MAX = 1e3;
@@ -2408,14 +2473,15 @@ var CREATE_READY_SESSION_REFUSALS = [
   // 34.10.1 (4): the api-built charter v1 or its envelope does not match the seal; nothing written
   "charter_mismatch"
 ];
-var CREATE_READY_SESSION_OUTCOMES = ["created", "existing", "refused"];
+var CREATE_READY_SESSION_OUTCOMES = ["created", "existing", "refused", "parked"];
 function isUserCreator(createdBy) {
   return typeof createdBy === "string" && createdBy !== "" && !createdBy.includes(":");
 }
 var CREATE_READY_SESSION_ANSWERS = Object.freeze({
   created: ["outcome", "session_id"],
   existing: ["outcome", "session_id"],
-  refused: ["outcome", "reason"]
+  refused: ["outcome", "reason"],
+  parked: ["outcome", "session_id", "wait_reason"]
 });
 function createReadySessionAnswerOk(v) {
   if (v === null || typeof v !== "object" || Array.isArray(v)) return false;
@@ -2424,7 +2490,11 @@ function createReadySessionAnswerOk(v) {
     return false;
   const keys = CREATE_READY_SESSION_ANSWERS[a.outcome];
   if (Object.keys(a).length !== keys.length || !keys.every((k) => k in a)) return false;
-  return a.outcome === "refused" ? CREATE_READY_SESSION_REFUSALS.includes(a.reason) : typeof a.session_id === "string" && UUID_RE.test(a.session_id);
+  if (a.outcome === "refused")
+    return CREATE_READY_SESSION_REFUSALS.includes(a.reason);
+  if (a.outcome === "parked" && !DISPATCH_PARK_WAIT_REASONS.includes(a.wait_reason))
+    return false;
+  return typeof a.session_id === "string" && UUID_RE.test(a.session_id);
 }
 function sealIdOk(sealId) {
   if (!UUID_RE.test(sealId)) throw new RangeError(`seal id must be a lowercase uuid: ${sealId}`);
@@ -2501,7 +2571,11 @@ var RUNNER_REFUSED_REASONS = [
   "oidc_ref_not_allowed",
   "oidc_pool_flag_off",
   "oidc_unavailable",
-  "api_unavailable"
+  "api_unavailable",
+  "oidc_adopt_ticket_invalid",
+  // amendment 65 (mnemom-test#1331): the two single-use exchange refusals, appended
+  "oidc_token_replayed",
+  "oidc_run_already_exchanged"
 ];
 var RUNNER_OPEN_MODE_TOLERATED = [
   "bundle_unavailable",
@@ -2747,7 +2821,9 @@ var DURABLE_EVENT_KINDS = [
   "session.waiting",
   "session.wait_cleared",
   "executor.turn_continued",
-  "inbox.acked"
+  "inbox.acked",
+  // S1 amendment 64: dispatch parked a seal (api-written; session.waiting stays executor-only)
+  "session.dispatch_parked"
 ];
 function isDurableEventKind(v) {
   return typeof v === "string" && DURABLE_EVENT_KINDS.includes(v);
@@ -2756,7 +2832,8 @@ var AMENDMENT_EVENT_GROUPS = Object.freeze({
   "session.ready": "lifecycle",
   "session.waiting": "lifecycle",
   "session.wait_cleared": "lifecycle",
-  "executor.turn_continued": "lease"
+  "executor.turn_continued": "lease",
+  "session.dispatch_parked": "lifecycle"
 });
 function eventGroupOf(kind) {
   if (Object.prototype.hasOwnProperty.call(AMENDMENT_EVENT_GROUPS, kind))
@@ -3006,10 +3083,16 @@ var KIND_REFS = {
     [
       { field: "wait_reason", equals: "ci", require: ["head_sha"], forbid: ["approval_id"] },
       { field: "wait_reason", equals: "question", require: ["approval_id"], forbid: ["head_sha"] },
-      { field: "wait_reason", equals: "budget", require: ["approval_id"], forbid: ["head_sha"] }
+      { field: "wait_reason", equals: "budget", require: ["approval_id"], forbid: ["head_sha"] },
+      // amendment 64: a dispatch park carries no commitment
+      { field: "wait_reason", equals: "awaiting_issue_run", forbid: ["head_sha", "approval_id"] },
+      { field: "wait_reason", equals: "repo_arm_unreadable", forbid: ["head_sha", "approval_id"] }
     ]
   ),
   "session.wait_cleared": obj({ wait_reason: ENUM(PARKED_ONLY_WAIT_REASONS) }),
+  // S1 amendment 64: the api's dispatch park. One writer per kind: the executor's park stays
+  // session.waiting; adopt and flip-to-runner journal session.wait_cleared + session.ready.
+  "session.dispatch_parked": obj({ wait_reason: ENUM(DISPATCH_PARK_WAIT_REASONS) }),
   // ---- lead ruling 2026-10-28: the spawn that sent the continue; a separate fact, so
   // executor.spawned's refs stay exactly {spawn_id} ----
   "executor.turn_continued": obj({ spawn_id: UUID }),
@@ -4341,12 +4424,14 @@ async function approvalSubjectHash(subject) {
   return sha256Hex(canonicalJson(subject));
 }
 var AGENT_SESSIONS_READY_CHECK = "state <> 'ready' OR (durable_mode = 'locked' AND state_reason IS NULL AND home_executor_id IS NULL AND lease_executor_id IS NULL AND lease_expires_at IS NULL AND spawn_id IS NULL AND hello_at IS NULL)";
-var AGENT_SESSIONS_WAIT_PARKED_CHECK = "CASE WHEN wait_reason IN ('ci','question','budget') THEN state = 'parked' AND wait_ref IS NOT NULL ELSE wait_ref IS NULL END";
+var AGENT_SESSIONS_WAIT_PARKED_CHECK = "CASE WHEN wait_reason IN ('ci','question','budget') THEN state = 'parked' AND wait_ref IS NOT NULL WHEN wait_reason IN ('awaiting_issue_run','repo_arm_unreadable') THEN state = 'parked' AND wait_ref IS NULL ELSE wait_ref IS NULL END";
 var AGENT_EXECUTORS_SCOPE_CHECK = "scope IN ('user','org')";
 function readyRowOk(row) {
   return row.state !== "ready" || row.durable_mode === "locked" && row.state_reason === null && row.home_executor_id === null && row.lease_executor_id === null && row.lease_expires_at === null && row.spawn_id === null && row.hello_at === null;
 }
 function waitParkedRowOk(row) {
+  if (row.wait_reason !== null && DISPATCH_PARK_WAIT_REASONS.includes(row.wait_reason))
+    return row.state === "parked" && row.wait_ref === null;
   return row.wait_reason !== null && PARKED_ONLY_WAIT_REASONS.includes(row.wait_reason) ? row.state === "parked" && row.wait_ref !== null : row.wait_ref === null;
 }
 
@@ -4852,6 +4937,16 @@ function executorStateOk(v) {
 }
 
 // ../shared/durable-contract/src/routes.ts
+var ADOPT_BODY_KEYS = ["source_ref", "nonce"];
+var ADOPT_SOURCE_REF_MAX = 500;
+function adoptBodyOk(v) {
+  if (v === null || typeof v !== "object" || Array.isArray(v)) return false;
+  const b = v;
+  if (Object.keys(b).length !== 2 || typeof b.source_ref !== "string") return false;
+  if (typeof b.nonce !== "string" || b.nonce.length === 0) return false;
+  const r = b.source_ref;
+  return r !== "" && r === r.trim() && r.length <= ADOPT_SOURCE_REF_MAX;
+}
 var fixed = (method, auth, path) => Object.freeze({ method, auth, path });
 var scoped = (method, auth, pre, post) => Object.freeze({ method, auth, pre, post });
 var EXECUTORS = "/v1/executors";
@@ -4882,8 +4977,21 @@ var ROUTES = Object.freeze({
   // ---- Doors amendment (ruling 34.03) ----
   /** The org-scope executor's claimable pool sessions, oldest first; `?limit=` (READY_SESSIONS_LIMIT_MIN..MAX) is not part of the match. */
   exec_ready_list: fixed("GET", "executor_key", "/v1/executor/ready"),
-  /** Body {oidc_token}; answers a one-lease org-scope executor key or an OIDC_EXCHANGE_REFUSALS refusal. */
+  /**
+   * Body {oidc_token, adopt_ticket?} (doors.ts oidcExchangeBodyOk, Amendment 66). adopt_ticket comes
+   * only from a ticketed wake-up; it is used up before any key is minted and binds the key to one seal.
+   * Amendment 65: single-use per token jti and per run attempt (token_replayed, run_already_exchanged).
+   */
   exec_oidc_exchange: fixed("POST", "github_oidc", "/v1/executor/oidc/exchange"),
+  // ---- S1 amendment 64 (mnemom-test#1336) ----
+  /**
+   * Body {source_ref, nonce} (adoptBodyOk). The OIDC run's key unparks the parked dispatch seal whose
+   * source_ref is this run's own issue, in its own org and repo, and claims it in one transaction,
+   * and only the seal its adopt ticket was minted for (Amendment 66; a key with no ticket adopts none),
+   * fenced on the nonce (exec_claim's rule);
+   * answers the exec_claim answer, or adopt_refused / seal_repo_mismatch, changing nothing.
+   */
+  exec_adopt: fixed("POST", "executor_key", "/v1/executor/adopt"),
   // ---- inbox, executor side (S1 amendment 60) ----
   /** Content-free summary {admitted, delivered, oldest_admitted_at} (inboxSummaryResponseOk); marks nothing. */
   exec_inbox: scoped("GET", "executor_key", EXEC_SESSION_PRE, "/inbox"),
@@ -5807,8 +5915,24 @@ var FREEZE_RECORD = Object.freeze({
   DEFAULT_LEASE_CAP_ENV,
   DISPATCH_SESSION_CID_PREFIX,
   DISPATCH_SESSION_NAME_PREFIX,
+  // amendment 66
+  ADOPT_TICKET_INPUT,
+  WAKEUP_SESSION_INPUT,
+  ADOPT_TICKET_PATTERN: ADOPT_TICKET_RE.source,
+  ADOPT_TICKET_TTL_S,
+  OIDC_TOKEN_MAX,
+  OIDC_WORKFLOW_ENV,
+  OIDC_WORKFLOW_FILE_PATTERN: OIDC_WORKFLOW_FILE_RE.source,
+  OIDC_WORKFLOW_SET_ENV,
+  OIDC_WORKFLOW_SET_MAX,
   READY_SESSIONS_LIMIT_MIN,
   READY_SESSIONS_LIMIT_MAX,
+  // amendment 64
+  ADOPT_SOURCE_REF_MAX,
+  // amendment 65
+  OIDC_JTI_MAX,
+  OIDC_RUN_NUMBER_PATTERN: OIDC_RUN_NUMBER_RE.source,
+  OIDC_EXCHANGE_RETENTION_DAYS,
   READY_USER_TEXT,
   RUNNER_FAILED_PHASE_PATTERN: RUNNER_FAILED_PHASE_RE.source,
   AGENT_SESSIONS_READY_CHECK,
@@ -5921,11 +6045,17 @@ var FREEZE_STRUCTURED = Object.freeze({
   READY_CAUSES,
   WAIT_REASONS,
   PARKED_ONLY_WAIT_REASONS,
+  // amendment 64
+  DISPATCH_PARK_WAIT_REASONS,
+  ADOPT_REFUSED_CAUSES,
+  ADOPT_BODY_KEYS,
   WAIT_REF_KEYS,
   CLEAR_WAIT_OUTCOMES,
   EXECUTOR_SCOPES,
   ORG_SCOPE_EXECUTOR_KINDS,
   OIDC_EXCHANGE_REFUSALS,
+  OIDC_EXCHANGE_BODY_KEYS,
+  OIDC_EXCHANGE_RUN_CLAIMS,
   ORG_POLICY_LIMIT_KEYS,
   POOL_CLAIM_FIELDS,
   CREATE_READY_SESSION_REFUSALS,
@@ -6234,6 +6364,12 @@ export {
   ADMISSION_STEP_CODE,
   ADMIT_SWEEP_VALUES,
   ADMIT_SWEEP_VECTORS_PATH,
+  ADOPT_BODY_KEYS,
+  ADOPT_REFUSED_CAUSES,
+  ADOPT_SOURCE_REF_MAX,
+  ADOPT_TICKET_INPUT,
+  ADOPT_TICKET_RE,
+  ADOPT_TICKET_TTL_S,
   ADOPT_WITH_YOU_TEXT,
   AGENT_CONTAINED_STATUSES,
   AGENT_EXECUTORS_SCOPE_CHECK,
@@ -6315,6 +6451,7 @@ export {
   DEVICE_STEP_VERBS,
   DEVICE_VERIFY_AAL_DEFAULT,
   DEVICE_VERIFY_AAL_VALUES,
+  DISPATCH_PARK_WAIT_REASONS,
   DISPATCH_SESSION_CID_PREFIX,
   DISPATCH_SESSION_NAME_PREFIX,
   DONE_CLAUSE,
@@ -6487,7 +6624,17 @@ export {
   NON_TTY_LOCKED_TEMPLATE,
   NO_M1_EMITTER_KINDS,
   OIDC_EXCHANGE_AUDIENCE,
+  OIDC_EXCHANGE_BODY_KEYS,
   OIDC_EXCHANGE_REFUSALS,
+  OIDC_EXCHANGE_RETENTION_DAYS,
+  OIDC_EXCHANGE_RUN_CLAIMS,
+  OIDC_JTI_MAX,
+  OIDC_RUN_NUMBER_RE,
+  OIDC_TOKEN_MAX,
+  OIDC_WORKFLOW_ENV,
+  OIDC_WORKFLOW_FILE_RE,
+  OIDC_WORKFLOW_SET_ENV,
+  OIDC_WORKFLOW_SET_MAX,
   OLD_ROUTE_BRANCH,
   OLD_ROUTE_REFRESH,
   ORG_CAP_LOCK_PREFIX,
@@ -6665,11 +6812,14 @@ export {
   UUID_RE,
   WAIT_REASONS,
   WAIT_REF_KEYS,
+  WAKEUP_SESSION_INPUT,
   admissionStatusOf,
   admissionTruthTable,
   admit,
   admitSweepDigest,
   admitSweepText,
+  adoptBodyOk,
+  adoptTicketOk,
   amendDecision,
   answerFromChoice,
   answersOk,
@@ -6797,6 +6947,8 @@ export {
   isValidSessionName,
   isValidStateReason,
   isWellFormedLeaseKey,
+  jobWorkflowRefInSet,
+  jobWorkflowRefOk,
   lagBucket,
   lintDurableOnly,
   lintFixCatalogue,
@@ -6808,6 +6960,10 @@ export {
   normalizeCellId,
   normalizeQuestions,
   normalizeSessionName,
+  oidcExchangeBodyOk,
+  oidcPinnedWorkflow,
+  oidcRunClaimsOk,
+  oidcWorkflowSet,
   openContract,
   ownerSessionViewOk,
   ownerVerbDecision,

package/dist/vendor/shared/durable-contract/codes.d.ts

@@ -15,6 +15,14 @@ export type ClaimUnavailableCause = (typeof CLAIM_UNAVAILABLE_CAUSES)[number];
  */
 export declare const SEAL_REPO_MISMATCH_CAUSES: readonly ["no_repo_claim", "no_seal_repo", "repo_mismatch"];
 export type SealRepoMismatchCause = (typeof SEAL_REPO_MISMATCH_CAUSES)[number];
+/**
+ * adopt_refused details.cause (S1 amendment 64, mnemom-test#1336; exec_adopt): no parked dispatch
+ * seal names this source_ref in the caller's own org and repo (never says whether one exists
+ * elsewhere), or the seal's session is not parked and the caller is not the OIDC run that already
+ * holds its lease. A repo or binding mismatch is seal_repo_mismatch, not this code.
+ */
+export declare const ADOPT_REFUSED_CAUSES: readonly ["no_parked_seal", "not_parked"];
+export type AdoptRefusedCause = (typeof ADOPT_REFUSED_CAUSES)[number];
 export declare const UNSUPPORTED_FEATURES: readonly ["tool_classes", "launch_spec_change", "above_limit_raise", "remote_control"];
 export type UnsupportedFeature = (typeof UNSUPPORTED_FEATURES)[number];
 export declare const CWD_KINDS: readonly ["subdirectory", "not_git", "symlink_transcript"];
@@ -273,6 +281,11 @@ export declare const DURABLE_CODES: {
         readonly surfaces: readonly ["api"];
         readonly fields: readonly ["cause"];
     };
+    readonly adopt_refused: {
+        readonly status: 409;
+        readonly surfaces: readonly ["api"];
+        readonly fields: readonly ["cause"];
+    };
     /** Lost CAS race on (session_id, seq). */
     readonly durable_append_conflict: {
         readonly status: 409;

package/dist/vendor/shared/durable-contract/codes.js

@@ -24,6 +24,13 @@ export const CLAIM_UNAVAILABLE_CAUSES = [
  * another repo than the executor's (owner/name, case-insensitive).
  */
 export const SEAL_REPO_MISMATCH_CAUSES = ["no_repo_claim", "no_seal_repo", "repo_mismatch"];
+/**
+ * adopt_refused details.cause (S1 amendment 64, mnemom-test#1336; exec_adopt): no parked dispatch
+ * seal names this source_ref in the caller's own org and repo (never says whether one exists
+ * elsewhere), or the seal's session is not parked and the caller is not the OIDC run that already
+ * holds its lease. A repo or binding mismatch is seal_repo_mismatch, not this code.
+ */
+export const ADOPT_REFUSED_CAUSES = ["no_parked_seal", "not_parked"];
 export const UNSUPPORTED_FEATURES = [
     "tool_classes",
     "launch_spec_change",
@@ -145,6 +152,9 @@ export const DURABLE_CODES = {
     // durable_claim_ineligible reason: the session is claimable, only not by this executor, and a
     // runner never skips past it to another session. cause is a SEAL_REPO_MISMATCH_CAUSES value.
     seal_repo_mismatch: { status: 403, surfaces: ["api"], fields: ["cause"] },
+    // S1 amendment 64 (mnemom-test#1336): exec_adopt found nothing it may unpark for this run. Nothing
+    // is written. cause is an ADOPT_REFUSED_CAUSES value.
+    adopt_refused: { status: 409, surfaces: ["api"], fields: ["cause"] },
     // ---- api journal (C10-R0 (i), (j), (k)) ----
     /** Lost CAS race on (session_id, seq). */
     durable_append_conflict: { status: 409, surfaces: ["api"], fields: ["tip_seq"] },