aismemory 0.5.1 → 0.5.3

package/dist/__tests__/resolve-agent-preference.test.js

@@ -0,0 +1,83 @@
+/**
+ * CORBOT-B0FA4A79: resolveAgent() silently reconnects to a different agent
+ * after re-auth.
+ *
+ * After a silent re-auth (or a re-bond), the client picked the FIRST active
+ * agent in the tenant instead of the agent the user was previously bonded
+ * to. A multi-agent user could be reconnected to a different agent with
+ * different memories — to the user this looks like their agent forgot
+ * everything.
+ *
+ * Fix under test: selectAgentForSession() prefers the previously bonded
+ * agentId (recovered from the saved credentials file) over first-active,
+ * and reports an explicit switch when that agent is gone. Env overrides
+ * keep their existing priority.
+ */
+import { describe, it, expect } from 'vitest';
+import { selectAgentForSession } from '../env-agent.js';
+const AGENT_A = { id: 'agent-a', name: 'MyAgent', status: 'active' };
+const AGENT_B = { id: 'agent-b', name: 'OtherAgent', status: 'active' };
+describe('selectAgentForSession', () => {
+    it('prefers the previously bonded agent over the first active agent', () => {
+        const selection = selectAgentForSession({
+            agents: [AGENT_B, AGENT_A], // previously bonded agent listed second
+            preferredAgentId: 'agent-a',
+            fallbackAgentId: 'agent-new',
+        });
+        expect(selection.agentId).toBe('agent-a');
+        expect(selection.reason).toBe('preferred');
+    });
+    it('falls back to first-active and reports the switch when the preferred agent is gone', () => {
+        const selection = selectAgentForSession({
+            agents: [AGENT_B],
+            preferredAgentId: 'agent-a',
+            fallbackAgentId: 'agent-new',
+        });
+        expect(selection.agentId).toBe('agent-b');
+        expect(selection.reason).toBe('first-active');
+        // The switch must be loud enough to log: it explains apparent memory loss.
+        expect(selection.notes.join(' ')).toMatch(/agent-a/);
+        expect(selection.notes.join(' ')).toMatch(/switch/i);
+    });
+    it('lets AIS_AGENT_NAME win over the previously bonded agent', () => {
+        const selection = selectAgentForSession({
+            agents: [AGENT_B, AGENT_A],
+            envAgentName: 'otheragent',
+            preferredAgentId: 'agent-a',
+            fallbackAgentId: 'agent-new',
+        });
+        expect(selection.agentId).toBe('agent-b');
+        expect(selection.reason).toBe('env-name');
+    });
+    it('keeps existing behavior with no preference: first active agent', () => {
+        const selection = selectAgentForSession({
+            agents: [AGENT_B, AGENT_A],
+            fallbackAgentId: 'agent-new',
+        });
+        expect(selection.agentId).toBe('agent-b');
+        expect(selection.reason).toBe('first-active');
+        expect(selection.notes).toHaveLength(0);
+    });
+    it('uses the fallback (fresh provisional) agent when the tenant has no active agents', () => {
+        const selection = selectAgentForSession({
+            agents: [],
+            preferredAgentId: 'agent-a',
+            fallbackAgentId: 'agent-new',
+        });
+        expect(selection.agentId).toBe('agent-new');
+        expect(selection.reason).toBe('fallback');
+    });
+    it('warns but continues when AIS_AGENT_NAME matches nothing', () => {
+        const selection = selectAgentForSession({
+            agents: [AGENT_B, AGENT_A],
+            envAgentName: 'nosuchagent',
+            preferredAgentId: 'agent-a',
+            fallbackAgentId: 'agent-new',
+        });
+        // Name miss falls through to the bonded-agent preference.
+        expect(selection.agentId).toBe('agent-a');
+        expect(selection.reason).toBe('preferred');
+        expect(selection.notes.join(' ')).toMatch(/nosuchagent/);
+    });
+});
+//# sourceMappingURL=resolve-agent-preference.test.js.map

package/dist/__tests__/resolve-agent-preference.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-agent-preference.test.js","sourceRoot":"","sources":["../../src/__tests__/resolve-agent-preference.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,qBAAqB,EAA2B,MAAM,iBAAiB,CAAC;AAEjF,MAAM,OAAO,GAAuB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACzF,MAAM,OAAO,GAAuB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAE5F,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,SAAS,GAAG,qBAAqB,CAAC;YACtC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,wCAAwC;YACpE,gBAAgB,EAAE,SAAS;YAC3B,eAAe,EAAE,WAAW;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,SAAS,GAAG,qBAAqB,CAAC;YACtC,MAAM,EAAE,CAAC,OAAO,CAAC;YACjB,gBAAgB,EAAE,SAAS;YAC3B,eAAe,EAAE,WAAW;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9C,2EAA2E;QAC3E,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,SAAS,GAAG,qBAAqB,CAAC;YACtC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;YAC1B,YAAY,EAAE,YAAY;YAC1B,gBAAgB,EAAE,SAAS;YAC3B,eAAe,EAAE,WAAW;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,SAAS,GAAG,qBAAqB,CAAC;YACtC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;YAC1B,eAAe,EAAE,WAAW;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9C,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,SAAS,GAAG,qBAAqB,CAAC;YACtC,MAAM,EAAE,EAAE;YACV,gBAAgB,EAAE,SAAS;YAC3B,eAAe,EAAE,WAAW;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,SAAS,GAAG,qBAAqB,CAAC;YACtC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;YAC1B,YAAY,EAAE,aAAa;YAC3B,gBAAgB,EAAE,SAAS;YAC3B,eAAe,EAAE,WAAW;SAC7B,CAAC,CAAC;QAEH,0DAA0D;QAC1D,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/ais-http-error.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Typed error for non-2xx responses from the Agent Identity Service.
+ *
+ * Why this exists: aisPost/aisGet previously returned `res.json()` even on a
+ * non-2xx status, so a failed memory write (422 flagged content, 429 quota,
+ * 409 duplicate, 5xx) was handed back to the agent as an ordinary tool result
+ * — and `remember` recorded it as "stored" regardless. The agent believed it
+ * had remembered something it had not, which is the worst possible failure
+ * mode for a memory product. Throwing this error routes the failure through
+ * the MCP catch handler, which marks the tool response `isError: true` so the
+ * agent sees an unmistakable failure.
+ *
+ * Token-rejection bodies (TOKEN_EXPIRED / INVALID_TOKEN) are deliberately NOT
+ * thrown by the callers — those feed the silent re-auth-and-retry loop
+ * (see isAuthErrorResult in auth-staleness.ts).
+ */
+/** Pull a human-readable message out of an AIS error body, if present. */
+export declare function extractServerMessage(body: unknown): string | null;
+/** Build the agent-facing message for a failed AIS request. */
+export declare function formatAisHttpError(status: number, path: string, body: unknown): string;
+export declare class AisHttpError extends Error {
+    readonly status: number;
+    readonly path: string;
+    readonly body: unknown;
+    constructor(status: number, path: string, body: unknown);
+}

package/dist/ais-http-error.js

@@ -0,0 +1,75 @@
+/**
+ * Typed error for non-2xx responses from the Agent Identity Service.
+ *
+ * Why this exists: aisPost/aisGet previously returned `res.json()` even on a
+ * non-2xx status, so a failed memory write (422 flagged content, 429 quota,
+ * 409 duplicate, 5xx) was handed back to the agent as an ordinary tool result
+ * — and `remember` recorded it as "stored" regardless. The agent believed it
+ * had remembered something it had not, which is the worst possible failure
+ * mode for a memory product. Throwing this error routes the failure through
+ * the MCP catch handler, which marks the tool response `isError: true` so the
+ * agent sees an unmistakable failure.
+ *
+ * Token-rejection bodies (TOKEN_EXPIRED / INVALID_TOKEN) are deliberately NOT
+ * thrown by the callers — those feed the silent re-auth-and-retry loop
+ * (see isAuthErrorResult in auth-staleness.ts).
+ */
+/** Pull a human-readable message out of an AIS error body, if present. */
+export function extractServerMessage(body) {
+    if (typeof body !== 'object' || body === null) {
+        return typeof body === 'string' && body.trim() !== '' ? body : null;
+    }
+    const b = body;
+    if (typeof b.error === 'string' && b.error.trim() !== '')
+        return b.error;
+    if (typeof b.error === 'object' && b.error !== null) {
+        const e = b.error;
+        const parts = [];
+        if (typeof e.message === 'string' && e.message.trim() !== '')
+            parts.push(e.message);
+        if (typeof e.code === 'string' && e.code.trim() !== '')
+            parts.push(`(${e.code})`);
+        if (parts.length > 0)
+            return parts.join(' ');
+    }
+    if (typeof b.message === 'string' && b.message.trim() !== '')
+        return b.message;
+    return null;
+}
+/** A status-specific hint so the agent understands WHY the request failed. */
+function statusHint(status) {
+    switch (status) {
+        case 409:
+            return 'duplicate — this memory already exists';
+        case 422:
+            return 'content rejected (validation/safety) — try plain ASCII, no smart quotes or arrows';
+        case 429:
+            return 'quota or rate limit exceeded';
+        case 401:
+        case 403:
+            return 'not authorized';
+        default:
+            if (status >= 500)
+                return 'AIS server error — retry later';
+            return 'request rejected';
+    }
+}
+/** Build the agent-facing message for a failed AIS request. */
+export function formatAisHttpError(status, path, body) {
+    const serverMsg = extractServerMessage(body);
+    const detail = serverMsg ? `: ${serverMsg}` : '';
+    return `AIS request to ${path} failed — HTTP ${status} (${statusHint(status)})${detail}. The operation did NOT succeed.`;
+}
+export class AisHttpError extends Error {
+    status;
+    path;
+    body;
+    constructor(status, path, body) {
+        super(formatAisHttpError(status, path, body));
+        this.name = 'AisHttpError';
+        this.status = status;
+        this.path = path;
+        this.body = body;
+    }
+}
+//# sourceMappingURL=ais-http-error.js.map

package/dist/ais-http-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ais-http-error.js","sourceRoot":"","sources":["../src/ais-http-error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,0EAA0E;AAC1E,MAAM,UAAU,oBAAoB,CAAC,IAAa;IAChD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,CAAC;IACD,MAAM,CAAC,GAAG,IAA8C,CAAC;IACzD,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IACzE,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,CAAC,KAA8C,CAAC;QAC3D,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACpF,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAClF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,SAAS,UAAU,CAAC,MAAc;IAChC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG;YACN,OAAO,wCAAwC,CAAC;QAClD,KAAK,GAAG;YACN,OAAO,mFAAmF,CAAC;QAC7F,KAAK,GAAG;YACN,OAAO,8BAA8B,CAAC;QACxC,KAAK,GAAG,CAAC;QACT,KAAK,GAAG;YACN,OAAO,gBAAgB,CAAC;QAC1B;YACE,IAAI,MAAM,IAAI,GAAG;gBAAE,OAAO,gCAAgC,CAAC;YAC3D,OAAO,kBAAkB,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAAY,EAAE,IAAa;IAC5E,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,OAAO,kBAAkB,IAAI,kBAAkB,MAAM,KAAK,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,kCAAkC,CAAC;AAC3H,CAAC;AAED,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,MAAM,CAAS;IACf,IAAI,CAAS;IACb,IAAI,CAAU;IAEvB,YAAY,MAAc,EAAE,IAAY,EAAE,IAAa;QACrD,KAAK,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/device-poll.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Device-flow poll loop — extracted for testability.
+ *
+ * S2 improvements over the original inline loop:
+ *  - Throttled heartbeat so the human knows polling is active (one line per
+ *    HEARTBEAT_INTERVAL_MS, not every 5-second poll).
+ *  - Coaching message when pending_reason === 'page_open' ("you're on the
+ *    bond page — click Complete bonding").
+ *  - Auto-restart on expired_token: re-invokes startDeviceFlow and throws
+ *    DeviceFlowRestartedError so the caller can update the surfaced URL.
+ */
+/** Minimum milliseconds between heartbeat stderr lines during pending polls. */
+export declare const HEARTBEAT_INTERVAL_MS = 30000;
+/** Thrown when the device code expires and a fresh flow has been initiated. */
+export declare class DeviceFlowRestartedError extends Error {
+    readonly newVerificationUri: string;
+    readonly newUserCode: string;
+    readonly isDeviceFlowRestarted = true;
+    constructor(newVerificationUri: string, newUserCode: string);
+}
+export interface PollTokenResponse {
+    access_token?: string;
+    expires_in?: number;
+    error?: string;
+    pending_reason?: string;
+}
+export interface DeviceFlowHandle {
+    device_code: string;
+    verification_uri_complete: string;
+    user_code: string;
+}
+export interface PollLoopDeps {
+    /** Calls the AIS token endpoint and returns the parsed response. */
+    pollOnce: (deviceCode: string) => Promise<PollTokenResponse>;
+    /** Initiates a fresh device flow and returns the new handle. */
+    startNewFlow: () => Promise<DeviceFlowHandle>;
+    /** Writes a line to stderr (the existing `stderr` helper in index.ts). */
+    emitStderr: (msg: string) => void;
+    /** Returns the current wall-clock time in milliseconds (injectable for tests). */
+    nowMs?: () => number;
+    /** Overrides the poll sleep duration (injectable for tests). */
+    pollIntervalMs?: number;
+}
+/**
+ * Poll the AIS token endpoint until the device is approved, expired, or denied.
+ *
+ * Returns the raw token response on success (access_token present).
+ * Throws DeviceFlowRestartedError on expired_token (after auto-restart).
+ * Throws Error on access_denied or hard deadline.
+ */
+export declare function runPollLoop(handle: DeviceFlowHandle, deps: PollLoopDeps): Promise<PollTokenResponse>;

package/dist/device-poll.js

@@ -0,0 +1,77 @@
+/**
+ * Device-flow poll loop — extracted for testability.
+ *
+ * S2 improvements over the original inline loop:
+ *  - Throttled heartbeat so the human knows polling is active (one line per
+ *    HEARTBEAT_INTERVAL_MS, not every 5-second poll).
+ *  - Coaching message when pending_reason === 'page_open' ("you're on the
+ *    bond page — click Complete bonding").
+ *  - Auto-restart on expired_token: re-invokes startDeviceFlow and throws
+ *    DeviceFlowRestartedError so the caller can update the surfaced URL.
+ */
+/** Minimum milliseconds between heartbeat stderr lines during pending polls. */
+export const HEARTBEAT_INTERVAL_MS = 30_000;
+/** Thrown when the device code expires and a fresh flow has been initiated. */
+export class DeviceFlowRestartedError extends Error {
+    newVerificationUri;
+    newUserCode;
+    isDeviceFlowRestarted = true;
+    constructor(newVerificationUri, newUserCode) {
+        super(`Device code expired. A new code has been issued.\n` +
+            `Visit: ${newVerificationUri}\n` +
+            `Code: ${newUserCode}`);
+        this.newVerificationUri = newVerificationUri;
+        this.newUserCode = newUserCode;
+        this.name = 'DeviceFlowRestartedError';
+    }
+}
+/**
+ * Poll the AIS token endpoint until the device is approved, expired, or denied.
+ *
+ * Returns the raw token response on success (access_token present).
+ * Throws DeviceFlowRestartedError on expired_token (after auto-restart).
+ * Throws Error on access_denied or hard deadline.
+ */
+export async function runPollLoop(handle, deps) {
+    const { pollOnce, startNewFlow, emitStderr, nowMs = () => Date.now(), pollIntervalMs = 5_000, } = deps;
+    const deadline = nowMs() + 30 * 60 * 1000; // 30 min
+    let lastHeartbeatAt = 0;
+    const device_code = handle.device_code;
+    while (nowMs() < deadline) {
+        await new Promise((r) => setTimeout(r, pollIntervalMs));
+        const resp = await pollOnce(device_code);
+        if (resp.access_token) {
+            return resp;
+        }
+        if (resp.error === 'authorization_pending') {
+            // Throttled heartbeat
+            const now = nowMs();
+            if (now - lastHeartbeatAt >= HEARTBEAT_INTERVAL_MS) {
+                lastHeartbeatAt = now;
+                if (resp.pending_reason === 'page_open') {
+                    emitStderr("you're on the bond page — click Complete bonding");
+                }
+                else {
+                    emitStderr('Waiting for approval...');
+                }
+            }
+            continue;
+        }
+        if (resp.error === 'slow_down') {
+            await new Promise((r) => setTimeout(r, pollIntervalMs));
+            continue;
+        }
+        if (resp.error === 'expired_token') {
+            // Auto-restart: fetch a fresh device code and surface the new URL.
+            const newFlow = await startNewFlow();
+            throw new DeviceFlowRestartedError(newFlow.verification_uri_complete, newFlow.user_code);
+        }
+        if (resp.error === 'access_denied') {
+            throw new Error('Authorization denied by user');
+        }
+        // Unknown error — surface it and stop
+        throw new Error(`Unexpected poll response: ${resp.error ?? '(no error field)'}`);
+    }
+    throw new Error('Authentication timed out');
+}
+//# sourceMappingURL=device-poll.js.map

package/dist/device-poll.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-poll.js","sourceRoot":"","sources":["../src/device-poll.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAE5C,+EAA+E;AAC/E,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAG/B;IACA;IAHT,qBAAqB,GAAG,IAAI,CAAC;IACtC,YACkB,kBAA0B,EAC1B,WAAmB;QAEnC,KAAK,CACH,oDAAoD;YAClD,UAAU,kBAAkB,IAAI;YAChC,SAAS,WAAW,EAAE,CACzB,CAAC;QAPc,uBAAkB,GAAlB,kBAAkB,CAAQ;QAC1B,gBAAW,GAAX,WAAW,CAAQ;QAOnC,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AA4BD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAwB,EACxB,IAAkB;IAElB,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,KAAK,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAChC,cAAc,GAAG,KAAK,GACvB,GAAG,IAAI,CAAC;IAET,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;IACpD,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IAEvC,OAAO,KAAK,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;QAE9D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEzC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;YAC3C,sBAAsB;YACtB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;YACpB,IAAI,GAAG,GAAG,eAAe,IAAI,qBAAqB,EAAE,CAAC;gBACnD,eAAe,GAAG,GAAG,CAAC;gBACtB,IAAI,IAAI,CAAC,cAAc,KAAK,WAAW,EAAE,CAAC;oBACxC,UAAU,CAAC,kDAAkD,CAAC,CAAC;gBACjE,CAAC;qBAAM,CAAC;oBACN,UAAU,CAAC,yBAAyB,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;YAC9D,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;YACnC,mEAAmE;YACnE,MAAM,OAAO,GAAG,MAAM,YAAY,EAAE,CAAC;YACrC,MAAM,IAAI,wBAAwB,CAChC,OAAO,CAAC,yBAAyB,EACjC,OAAO,CAAC,SAAS,CAClB,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,sCAAsC;QACtC,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,KAAK,IAAI,kBAAkB,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAC9C,CAAC"}

package/dist/env-agent.d.ts

@@ -8,3 +8,30 @@ export interface TenantAgentSummary {
  * Throws with a message suitable for stderr when the id is missing or unknown.
  */
 export declare function assertEnvAgentInTenant(envAgentId: string, agents: TenantAgentSummary[]): TenantAgentSummary;
+export interface AgentSelection {
+    agentId: string;
+    reason: 'env-name' | 'preferred' | 'first-active' | 'fallback';
+    /** Human-readable warnings for the caller to log (name misses, silent-switch alerts). */
+    notes: string[];
+}
+/**
+ * Pick which agent this session connects to (CORBOT-B0FA4A79).
+ *
+ * Priority: AIS_AGENT_NAME match > previously bonded agent > first active >
+ * fallback (fresh provisional agent when the tenant has none). The bonded
+ * preference is the load-bearing part: without it, a re-auth reconnected a
+ * multi-agent user to whichever agent the server listed first — a different
+ * agent with different memories, which reads as memory loss. When the bonded
+ * agent is gone, the switch is reported in `notes` so it is never silent.
+ * (AIS_AGENT_ID is asserted separately by the caller and wins over all of
+ * these.)
+ */
+export declare function selectAgentForSession(opts: {
+    /** Active agents in the tenant, in server order. */
+    agents: TenantAgentSummary[];
+    envAgentName?: string;
+    /** Agent id from the previous bond (saved credentials), if any. */
+    preferredAgentId?: string;
+    /** Fresh provisional agent id to use when the tenant has no active agents. */
+    fallbackAgentId: string;
+}): AgentSelection;

package/dist/env-agent.js

@@ -11,4 +11,37 @@ export function assertEnvAgentInTenant(envAgentId, agents) {
     throw new Error(`AIS_AGENT_ID="${envAgentId}" is not a valid agent in this tenant. ` +
         `Available: ${available || '(none)'}`);
 }
+/**
+ * Pick which agent this session connects to (CORBOT-B0FA4A79).
+ *
+ * Priority: AIS_AGENT_NAME match > previously bonded agent > first active >
+ * fallback (fresh provisional agent when the tenant has none). The bonded
+ * preference is the load-bearing part: without it, a re-auth reconnected a
+ * multi-agent user to whichever agent the server listed first — a different
+ * agent with different memories, which reads as memory loss. When the bonded
+ * agent is gone, the switch is reported in `notes` so it is never silent.
+ * (AIS_AGENT_ID is asserted separately by the caller and wins over all of
+ * these.)
+ */
+export function selectAgentForSession(opts) {
+    const notes = [];
+    if (opts.agents.length === 0) {
+        return { agentId: opts.fallbackAgentId, reason: 'fallback', notes };
+    }
+    if (opts.envAgentName) {
+        const match = opts.agents.find((a) => a.name.toLowerCase() === opts.envAgentName.toLowerCase());
+        if (match) {
+            return { agentId: match.id, reason: 'env-name', notes };
+        }
+        notes.push(`AIS_AGENT_NAME="${opts.envAgentName}" not found. Available: ${opts.agents.map((a) => a.name).join(', ')}`);
+    }
+    if (opts.preferredAgentId) {
+        const match = opts.agents.find((a) => a.id === opts.preferredAgentId);
+        if (match) {
+            return { agentId: match.id, reason: 'preferred', notes };
+        }
+        notes.push(`Previously bonded agent ${opts.preferredAgentId} is no longer active — switching to "${opts.agents[0].name}" (${opts.agents[0].id}).`);
+    }
+    return { agentId: opts.agents[0].id, reason: 'first-active', notes };
+}
 //# sourceMappingURL=env-agent.js.map

package/dist/env-agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-agent.js","sourceRoot":"","sources":["../src/env-agent.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAkB,EAClB,MAA4B;IAE5B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;IAC9D,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,MAAM,IAAI,KAAK,CACb,iBAAiB,UAAU,yCAAyC;QAClE,cAAc,SAAS,IAAI,QAAQ,EAAE,CACxC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"env-agent.js","sourceRoot":"","sources":["../src/env-agent.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAkB,EAClB,MAA4B;IAE5B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;IAC9D,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,MAAM,IAAI,KAAK,CACb,iBAAiB,UAAU,yCAAyC;QAClE,cAAc,SAAS,IAAI,QAAQ,EAAE,CACxC,CAAC;AACJ,CAAC;AASD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAQrC;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,YAAa,CAAC,WAAW,EAAE,CAAC,CAAC;QACjG,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,IAAI,CACR,mBAAmB,IAAI,CAAC,YAAY,2BAA2B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3G,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACtE,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAC3D,CAAC;QACD,KAAK,CAAC,IAAI,CACR,2BAA2B,IAAI,CAAC,gBAAgB,wCAAwC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,EAAE,IAAI,CACzI,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;AACxE,CAAC"}