aismemory 0.7.5 → 0.8.2

package/dist/hydration.js.map

@@ -1 +1 @@
-{"version":3,"file":"hydration.js","sourceRoot":"","sources":["../src/hydration.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAAG,aAAa,CAAC;AAIjC,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO,OAAO;SACX,OAAO,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;SAC9C,OAAO,CAAC,wBAAwB,EAAE,2BAA2B,CAAC;SAC9D,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc;IAC3C,OAAO,MAAM,IAAI,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AACzC,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAY;IAC7C,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,CACL,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QACvB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QACrB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QACvB,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC5B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAA0B,EAC1B,OAAiE;IAEjE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;IACjE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,IAAI,GAAG,GAAG,UAAU,4BAA4B,IAAI,KAAK,UAAU,IAAI,UAAU,KAAK,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IACxI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,OAAe,EACf,KAAa,EACb,aAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,aAAa,EAAE,CAAC;QACnF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,cAAc,OAAO,gBAAgB,KAAK,EAAE,EAAE;YAC7E,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,QAAQ,GAAG,IAAI,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,6BAA6B;YAC/B,CAAC;YACD,mBAAmB,CAAC,MAAM,EAAE;gBAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO,EAAE,QAAQ;gBACjB,SAAS,EAAE,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC;aAC7C,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAqB7B,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,mBAAmB,CAAC,KAAK,EAAE;gBACzB,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,+BAA+B;gBACpG,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QAEpB,MAAM,QAAQ,GAAG;YACf,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;YACxB,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE;YAC1B,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;YAC5B,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE;YAC1C,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE;SACjC,CAAC;QAEF,MAAM,WAAW,GACf,CAAC,CAAC,WAAW,IAAI,IAAI;YACnB,CAAC,CAAC;gBACE,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE;gBAClC,kBAAkB,EAAE,CAAC,CAAC,WAAW,CAAC,kBAAkB,IAAI,EAAE;gBAC1D,eAAe,EAAE,CAAC,CAAC,WAAW,CAAC,eAAe,IAAI,EAAE;aACrD;YACH,CAAC,CAAC,IAAI,CAAC;QAEX,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxC,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC;YACzB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;SACvB,CAAC,CAAC,CAAC;QAEJ,MAAM,cAAc,GAAG,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1D,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE;YACd,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;YACxB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;YAClB,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC;YAC7B,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE;SAC7B,CAAC,CAAC,CAAC;QAEJ,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QAErE,MAAM,WAAW,GACf,CAAC,CAAC,WAAW,IAAI,IAAI;YACnB,CAAC,CAAC;gBACE,OAAO,EAAE,CAAC,CAAC,WAAW,CAAC,OAAO,IAAI,EAAE;gBACpC,YAAY,EAAE,CAAC,CAAC,WAAW,CAAC,YAAY,IAAI,EAAE;gBAC9C,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,WAAW,IAAI,EAAE;gBAC5C,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,SAAS,IAAI,EAAE;aACzC;YACH,CAAC,CAAC,IAAI,CAAC;QAEX,OAAO;YACL,QAAQ;YACR,WAAW;YACX,KAAK;YACL,cAAc;YACd,MAAM;YACN,WAAW;YACX,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;YAChC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,IAAI,CAAC;SACzC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,mBAAmB,CAAC,SAAS,EAAE;YAC7B,OAAO;YACP,SAAS,EAAE,yBAAyB,CAAC,GAAG,CAAC;SAC1C,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"hydration.js","sourceRoot":"","sources":["../src/hydration.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,MAAM,UAAU,GAAG,aAAa,CAAC;AAIjC,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO,OAAO;SACX,OAAO,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;SAC9C,OAAO,CAAC,wBAAwB,EAAE,2BAA2B,CAAC;SAC9D,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc;IAC3C,OAAO,MAAM,IAAI,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AACzC,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAY;IAC7C,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,CACL,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QACvB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QACrB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QACvB,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC5B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAA0B,EAC1B,OAAiE;IAEjE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;IACjE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,IAAI,GAAG,GAAG,UAAU,4BAA4B,IAAI,KAAK,UAAU,IAAI,UAAU,KAAK,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IACxI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,OAAe,EACf,KAAa,EACb,aAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,aAAa,EAAE,CAAC;QACnF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,cAAc,OAAO,gBAAgB,KAAK,EAAE,EAAE;YAC7E,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;YAC7C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC;SACtD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,QAAQ,GAAG,IAAI,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,6BAA6B;YAC/B,CAAC;YACD,mBAAmB,CAAC,MAAM,EAAE;gBAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO,EAAE,QAAQ;gBACjB,SAAS,EAAE,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC;aAC7C,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAsB7B,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,mBAAmB,CAAC,KAAK,EAAE;gBACzB,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,+BAA+B;gBACpG,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QAEpB,MAAM,QAAQ,GAAG;YACf,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;YACxB,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE;YAC1B,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;YAC5B,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE;YAC1C,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE;SACjC,CAAC;QAEF,MAAM,WAAW,GACf,CAAC,CAAC,WAAW,IAAI,IAAI;YACnB,CAAC,CAAC;gBACE,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE;gBAClC,kBAAkB,EAAE,CAAC,CAAC,WAAW,CAAC,kBAAkB,IAAI,EAAE;gBAC1D,eAAe,EAAE,CAAC,CAAC,WAAW,CAAC,eAAe,IAAI,EAAE;aACrD;YACH,CAAC,CAAC,IAAI,CAAC;QAEX,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxC,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC;YACzB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;SACvB,CAAC,CAAC,CAAC;QAEJ,MAAM,cAAc,GAAG,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1D,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE;YACd,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;YACxB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;YAClB,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC;YAC7B,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE;SAC7B,CAAC,CAAC,CAAC;QAEJ,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QAErE,MAAM,WAAW,GACf,CAAC,CAAC,WAAW,IAAI,IAAI;YACnB,CAAC,CAAC;gBACE,OAAO,EAAE,CAAC,CAAC,WAAW,CAAC,OAAO,IAAI,EAAE;gBACpC,YAAY,EAAE,CAAC,CAAC,WAAW,CAAC,YAAY,IAAI,EAAE;gBAC9C,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,WAAW,IAAI,EAAE;gBAC5C,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,SAAS,IAAI,EAAE;aACzC;YACH,CAAC,CAAC,IAAI,CAAC;QAEX,sEAAsE;QACtE,qEAAqE;QACrE,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;QAElC,OAAO;YACL,QAAQ;YACR,WAAW;YACX,KAAK;YACL,cAAc;YACd,MAAM;YACN,WAAW;YACX,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;YAChC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,IAAI,CAAC;YACxC,OAAO;SACR,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,mBAAmB,CAAC,SAAS,EAAE;YAC7B,OAAO;YACP,SAAS,EAAE,yBAAyB,CAAC,GAAG,CAAC;SAC1C,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/index.js

@@ -18,7 +18,7 @@ import { aisGet, aisPost, DEFAULT_AIS_URL } from './ais-http.js';
 import { CallToolRequestSchema, GetPromptRequestSchema, ListPromptsRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
 import { homedir } from 'node:os';
 import { loadOAuthCredentials, loadNonStaleDiskBearer, saveOAuthCredentials, } from './oauth-credentials.js';
-import { clearPendingDeviceFlow, loadPendingDeviceFlow, savePendingDeviceFlow, } from './pending-device-flow.js';
+import { clearPendingDeviceFlow, isResumableDeviceFlow, loadPendingDeviceFlow, savePendingDeviceFlow, } from './pending-device-flow.js';
 import { saveAgentPreference, loadAgentPreference, migrateCredentialsFileIfNeeded } from './agent-preference.js';
 import { createTokenManager, isNoRegisteredKeyFailure } from './token-manager.js';
 import { hydrateIdentity } from './hydration.js';
@@ -28,16 +28,19 @@ import { ActivityTracker, setupAutoHandoff } from './auto-handoff.js';
 import { assertEnvAgentInTenant, selectAgentForSession } from './env-agent.js';
 import { emitTelemetry, hashAgentId } from './telemetry.js';
 import { INBOX_MAX_BODY_CHARS, INBOX_MAX_TASK_ID_CHARS, INBOX_MIN_TTL_SECONDS, INBOX_MAX_TTL_SECONDS, INBOX_DEFAULT_TTL_SECONDS, INBOX_MAX_PAGE_SIZE, INBOX_DEFAULT_PAGE_SIZE, INBOX_MAX_ACK_IDS, GOAL_MAX_TITLE_CHARS, GOAL_MAX_DESCRIPTION_CHARS, GOAL_MAX_CRITERIA_ITEMS, GOAL_DEFAULT_PAGE_SIZE, GOAL_MAX_PAGE_SIZE, } from './tool-args.js';
-import { loadHarnessIdentity, installHarnessIdentity, optionValue, verifyPinnedIdentity } from './harness-identity.js';
+import { identityCredentialFingerprint, loadSessionIdentity, verifyPinnedIdentity } from './session-identity.js';
 import { runPollLoop, DeviceFlowRestartedError } from './device-poll.js';
 import { loadAgentApiKeyConfig, AgentApiKeyConfigError, } from './agent-key-mode.js';
 import { loadWorkspaceKeyConfig, WorkspaceKeyConfigError, } from './workspace-key-mode.js';
-import { createAgentKeyCallToolHandler, createOAuthCallToolHandler, createWorkspaceKeyCallToolHandler, } from './mcp/tools.js';
+import { loadRunPassConfig, RunPassConfigError, } from './run-pass-mode.js';
+import { createAgentKeyCallToolHandler, createOAuthCallToolHandler, createRunPassCallToolHandler, createWorkspaceKeyCallToolHandler, } from './mcp/tools.js';
 import { readPackageVersion, startVersionCheck } from './version-check.js';
+import { AGENT_ARCHIVE_DESCRIPTION, AGENT_ARCHIVE_INPUT_SCHEMA, AGENT_DELETE_ALIAS_DESCRIPTION } from './agent-archive.js';
 // ── Config ──────────────────────────────────────────────
 const AIS_URL = process.env['AIS_URL']?.trim() || DEFAULT_AIS_URL;
 const PACKAGE_VERSION = readPackageVersion();
-let harnessIdentity = null;
+const RUN_PASS_CONFLICTING_KEY_ENV_NAMES = ['AIS_WORKSPACE_KEY', 'AIS_API_KEY', 'AIS_AGENT_API_KEY'];
+let sessionIdentity = null;
 // ── Credential persistence ──────────────────────────────
 function loadCredentials() {
     // F5a (CORBOT-48DD2E25): migrate a legacy v1 file to v2 (ids only) BEFORE
@@ -61,6 +64,16 @@ function loadCredentials() {
 function stderr(msg) {
     process.stderr.write(`[aismemory] ${msg}\n`);
 }
+function rejectRunPassWithKeyEnv(env) {
+    if (env['AIS_RUN_PASS_FILE'] === undefined)
+        return;
+    const conflictingKeyName = RUN_PASS_CONFLICTING_KEY_ENV_NAMES.find((keyName) => env[keyName] !== undefined);
+    if (conflictingKeyName === undefined)
+        return;
+    stderr(`Refusing to start: AIS_RUN_PASS_FILE and ${conflictingKeyName} are both set. ` +
+        'Run-pass mode must not silently fall back to a long-lived key; unset one variable.');
+    process.exit(1);
+}
 function isSafeClaudeSessionId(sessionId) {
     return sessionId !== '.' && sessionId !== '..' && /^[A-Za-z0-9._-]+$/.test(sessionId);
 }
@@ -131,8 +144,8 @@ async function resolveAgentForLoad(token, query) {
  * User can override with AIS_AGENT_ID or AIS_AGENT_NAME env vars.
  */
 async function resolveAgent(token, fallbackAgentId, fallbackTenantId, preferredAgentId) {
-    // The harness pin overrides shared preferences and must belong to this tenant.
-    const envAgentId = harnessIdentity?.agentId;
+    // This session's own identity overrides shared preferences and must belong to this tenant.
+    const envAgentId = sessionIdentity?.agentId;
     if (envAgentId) {
         const agents = await listAllAgents(token);
         try {
@@ -207,14 +220,79 @@ class BondPendingError extends Error {
             `${verificationUri}\n\n` +
             `Send nothing else: not this message, not a code, not a key, not a command, not JSON. ` +
             `Your human opens the link, signs in, and presses Bond. When they say it is done, retry this tool.\n` +
-            `The link expires in 30 minutes. An agent nobody bonds is archived after 7 days, with its memories.`);
+            `The link expires in 30 minutes and is only redeemed while this tool is running — if it stops, ` +
+            `start it again before your human presses Bond and the same link still works. ` +
+            `An agent nobody bonds is archived after 7 days, with its memories.`);
         this.verificationUri = verificationUri;
         this.userCode = userCode;
         this.name = 'BondPendingError';
     }
 }
+/**
+ * Wire the poll loop onto a freshly built flow. Shared by the mint path and
+ * the resume path so a change to the poll/dead bookkeeping lands in one place.
+ */
+function attachDeviceFlowPoll(flow, interval) {
+    // flowRef points into the live flow object so auto-restart can update the
+    // surfaced URL without the caller needing to restart the MCP process.
+    const flowRef = flow;
+    const poll = pollForToken(flow.device_code, interval, flow.agent_id, flow.provisional_tenant_id, flowRef);
+    flow.poll = poll;
+    // Mark the flow dead as soon as its poll rejects so the next
+    // `ensureCredentials` call starts a fresh flow. The `.catch` here is purely
+    // for state-tracking — the original rejection is still observed by callers
+    // racing `flow.poll`. We swallow on this branch to suppress unhandled
+    // rejection warnings between rejection and the next ensureCredentials call.
+    poll.catch(() => {
+        flow.dead = true;
+    });
+    return flow;
+}
+/**
+ * Pick up the device code a previous process already minted, instead of
+ * asking the server for a new one (CORBOT-7F3EC71C).
+ *
+ * The bond link is redeemable for its full 30 minutes server-side, but
+ * `/v1/oauth/device/authorize` expires every unclaimed claim token for the
+ * agent before it issues the next one (OAuthDeviceService `tryReuseProvisional`).
+ * So the act of restarting — which an IDE does to its stdio MCP server
+ * constantly — used to kill the exact link the agent had just relayed to its
+ * human, and the human clicked a page that no longer meant anything.
+ * Resuming polls the same code and re-surfaces the same URL, so the link that
+ * left the building stays the link that works.
+ */
+function resumeDeviceFlow(saved) {
+    emitTelemetry({ event: 'auth.device_flow.resume' });
+    const remainingMin = Math.max(1, Math.round((Date.parse(saved.codeExpiresAt) - Date.now()) / 60_000));
+    stderr('');
+    stderr('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
+    stderr('  aismemory — still waiting on the bond link already sent');
+    stderr('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
+    stderr(`  Bond URL : ${saved.verificationUriComplete}`);
+    stderr(`  Code     : ${saved.userCode}`);
+    stderr(`  Same link as before — good for about ${remainingMin} more min.`);
+    stderr('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
+    return attachDeviceFlowPoll({
+        device_code: saved.deviceCode,
+        user_code: saved.userCode,
+        verification_uri_complete: saved.verificationUriComplete,
+        agent_id: saved.agentId,
+        provisional_tenant_id: saved.provisionalTenantId,
+        provisional_token: saved.provisionalToken,
+        dead: false,
+    }, saved.interval ?? DEFAULT_DEVICE_POLL_INTERVAL_S);
+}
+/** Fallback poll interval when a resumed record predates the stored field. */
+const DEFAULT_DEVICE_POLL_INTERVAL_S = 5;
 async function startDeviceFlow(priorProvisionalToken) {
     emitTelemetry({ event: 'auth.device_flow.start' });
+    // A caller that passes a prior provisional token has just watched its flow
+    // die (expired, denied, timed out), so its code is spent — mint, never
+    // resume. Only a process with no flow of its own looks on disk.
+    const resumable = priorProvisionalToken ? null : loadPendingDeviceFlow();
+    if (isResumableDeviceFlow(resumable)) {
+        return resumeDeviceFlow(resumable);
+    }
     stderr('Starting authentication...');
     // CORBOT-8F96A8EF: when this process has no in-flight flow of its own,
     // fall back to the provisional token left on disk by an earlier process.
@@ -246,32 +324,23 @@ async function startDeviceFlow(priorProvisionalToken) {
         agentId: agent_id,
         provisionalTenantId: provisional_tenant_id,
         startedAt: new Date().toISOString(),
+        deviceCode: device_code,
+        userCode: user_code,
+        verificationUriComplete: verification_uri_complete,
+        interval,
+        codeExpiresAt: new Date(Date.now() + authRes.data.expires_in * 1000).toISOString(),
     });
-    const flow = {
+    return attachDeviceFlowPoll({
         device_code,
         user_code,
         verification_uri_complete,
         agent_id,
         provisional_tenant_id,
         provisional_token,
-        // poll is assigned below after flowRef is captured so pollForToken holds
-        // a reference to the live flow object for URL updates on auto-restart.
+        // poll is assigned by attachDeviceFlowPoll, which captures the live flow
+        // object so pollForToken can update the surfaced URL on auto-restart.
         dead: false,
-    };
-    // flowRef points into the live flow object so auto-restart can update the
-    // surfaced URL without the caller needing to restart the MCP process.
-    const flowRef = flow;
-    const poll = pollForToken(device_code, interval, agent_id, provisional_tenant_id, flowRef);
-    flow.poll = poll;
-    // Mark the flow dead as soon as its poll rejects so the next
-    // `ensureCredentials` call starts a fresh flow. The `.catch` here is purely
-    // for state-tracking — the original rejection is still observed by callers
-    // racing `flow.poll`. We swallow on this branch to suppress unhandled
-    // rejection warnings between rejection and the next ensureCredentials call.
-    poll.catch(() => {
-        flow.dead = true;
-    });
-    return flow;
+    }, interval);
 }
 async function pollForToken(device_code, interval, agent_id, provisional_tenant_id, 
 /** Mutable ref so auto-restart can update the surfaced URL and provisional token in ActiveDeviceFlow */
@@ -332,6 +401,11 @@ flowRef) {
                 agentId: authRes.data.agent_id,
                 provisionalTenantId: authRes.data.provisional_tenant_id,
                 startedAt: new Date().toISOString(),
+                deviceCode: authRes.data.device_code,
+                userCode: authRes.data.user_code,
+                verificationUriComplete: authRes.data.verification_uri_complete,
+                interval: authRes.data.interval,
+                codeExpiresAt: new Date(Date.now() + authRes.data.expires_in * 1000).toISOString(),
             });
             stderr('');
             stderr('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
@@ -380,10 +454,10 @@ flowRef) {
     // reconnected silently. migrateCredentialsFileIfNeeded() (agent-preference.ts)
     // is what later removes this token from disk, once a key gets enrolled.
     if (hasEnrolledKey()) {
-        if (!harnessIdentity)
+        if (!sessionIdentity)
             saveAgentPreference({ agentId: creds.agentId, tenantId: creds.tenantId });
     }
-    else if (!harnessIdentity) {
+    else if (!sessionIdentity) {
         saveOAuthCredentials(creds);
     }
     // The flow is finished: this agent is bonded and reachable by id from the
@@ -410,6 +484,7 @@ const tools = [
                 content: { type: 'string', description: 'The memory content to store' },
                 type: { type: 'string', enum: ['fact', 'event', 'lesson', 'context', 'goal', 'task'], description: 'Memory type' },
                 importance: { type: 'number', minimum: 0, maximum: 1, description: 'Importance (0-1, default 0.5)' },
+                tags: { type: 'array', items: { type: 'string' }, description: 'Optional tags to filter on later, e.g. ["work", "acme"]. At most 20; each 1-64 characters of a-z 0-9 . _ : - (stored lower-case). Tags are a filter, not a permission — use separate agents to wall off e.g. work from personal.' },
             },
             required: ['content'],
         },
@@ -417,13 +492,17 @@ const tools = [
     {
         name: 'recall',
         description: "Search memories by natural language query. Set principalAgentId to search a DIFFERENT " +
-            "agent's memories under a 'memory:read' grant from that agent's owner." + BOND_LINK_NOTE,
+            "agent's memories under a 'memory:read' grant from that agent's owner. " +
+            "Each memory carries createdAt, updatedAt (its last edit), and tags. " +
+            "Memories superseded by a newer one are left out; to list or page through every memory, " +
+            "use the REST list route described in the aismemory README (cursor paging, sortBy=updatedAt, includeSuperseded=true)." + BOND_LINK_NOTE,
         inputSchema: {
             type: 'object',
             properties: {
                 query: { type: 'string', description: 'Search query' },
                 limit: { type: 'number', description: 'Max results (default 10)' },
                 type: { type: 'string', enum: ['fact', 'event', 'lesson', 'context', 'goal', 'task'], description: 'Filter by type' },
+                tags: { type: 'array', items: { type: 'string' }, description: 'Only memories carrying ALL of these tags. A hard filter: results are never widened past it.' },
                 principalAgentId: { type: 'string', description: "Optional: search ANOTHER agent's memories instead of your own (its agent UUID). Requires that agent's owner to have granted you the 'memory:read' scope and that you share a tenant; otherwise the call is refused with 403. Read-only — your own identity and write access are unchanged." },
             },
             required: ['query'],
@@ -431,18 +510,49 @@ const tools = [
     },
     {
         name: 'whoami',
-        description: 'Get the current agent identity — name, DID, status, description.' + BOND_LINK_NOTE,
+        description: 'Get the current agent identity — name, DID, status, description — and, when running on an API key, what that credential can and cannot do: mode, tenant, the sub-resources it may reach, its restrictions and when it expires. `selfDescribed: false` means the server predates that answer and only liveness was confirmed.'
+            + BOND_LINK_NOTE,
         inputSchema: { type: 'object', properties: {} },
     },
+    {
+        name: 'orientation_check',
+        description: 'Run the same expected-environment orientation check "aismemory doctor --orientation" runs from a local file, ' +
+            'reachable here for a filesystem-free surface. Pass an owner-approved manifest (host, account, required channels, ' +
+            'and the wider tool-server/connector surface this agent expects — names and purposes only, never a secret value) ' +
+            'plus this session\'s self-reported evidence. Returns PASS/FAIL per item; read-only, never self-healing, never grants anything.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                version: { type: 'number', enum: [1], description: 'Manifest format version. Always 1.' },
+                identity: { type: 'string', description: 'This agent\'s AIS identity (uuid).' },
+                requirements: {
+                    type: 'object',
+                    description: 'Owner-approved expectations: { host, account, channels: ["ais","mcp","inbox"], environment?: [{name, kind, purpose, required, permission?, dataEnvironment?}] }.',
+                },
+                current: { type: 'object', description: 'This session\'s observed { host, account, session } marker.' },
+                evidence: { type: 'object', description: 'This session\'s self-reported evidence: { session, host, account, credentials, credentialSource, channels: {ais,mcp,inbox}, environment?: {[name]: "pass"|"missing"|"unknown"} }.' },
+                relocation: { type: 'object', description: '{ verified, observedAction? } — whether relocation off the expected host/account is a verified, human-confirmed capability.' },
+                activationUrl: { type: 'string', description: 'Optional AIS device-flow activation door URL, echoed back as bondUrl.' },
+            },
+            required: ['version', 'identity', 'requirements', 'current', 'evidence', 'relocation'],
+        },
+    },
     {
         name: 'full_context',
-        description: 'Load the full agent context — identity, personality, goals, facts, skills, and last handoff. ' +
-            "Set principalAgentId to load ANOTHER agent's context under a 'memory:read' grant." + BOND_LINK_NOTE,
+        description: 'Load the full agent context — identity, personality, goals, facts, skills, last handoff, and the operating layer: the constitution rules that govern this agent and the index of skills it has, under one sha256 version you can compare between two machines. ' +
+            "Set principalAgentId to load ANOTHER agent's context under a 'memory:read' grant. " +
+            'Every view is bounded: the default view budgets to 6000 tokens, and anything the ceiling cut is ' +
+            "named in the response's receipt.omitted rather than dropped silently — goal titles are cut to 200 " +
+            "characters with the goal's memory id in the payload, so the whole body is one memory-by-id fetch away. " +
+            "Pass view='lean' for continuity only (last handoff first, recent memories) or view='bootstrap' " +
+            'for a cross-harness session start (adds goals and inbox). maxTokens sets the ceiling on any view.' + BOND_LINK_NOTE,
         inputSchema: {
             type: 'object',
             properties: {
                 principalAgentId: { type: 'string', description: "Optional: search ANOTHER agent's memories instead of your own (its agent UUID). Requires that agent's owner to have granted you the 'memory:read' scope and that you share a tenant; otherwise the call is refused with 403. Read-only — your own identity and write access are unchanged." },
-                memoriesLimit: { type: 'number', description: 'Number of memories to load (1-50, default 5). Lower values reduce context size.' },
+                memoriesLimit: { type: 'number', description: 'Number of memories to load (1-50, default 5). Lower values reduce context size. Governs recent memories only — on the full view that is a small share of the payload, so prefer view to bound the whole response.' },
+                view: { type: 'string', enum: ['full', 'lean', 'bootstrap'], description: "Which projection to load. 'full' (default) is everything the stores hold, bounded to 6000 tokens. 'lean' is continuity only — last handoff first, then recent memories. 'bootstrap' is lean plus goals and inbox, for starting a session in another harness. All three honour maxTokens." },
+                maxTokens: { type: 'number', description: 'Token ceiling (500-20000; default 6000 for full, 2000 for lean, 3000 for bootstrap). Content is evicted from the tail until the payload fits — assembled context sections, then facts, then goals, then recent memories on the full view — and each eviction is named in receipt.omitted. Identity, the operating layer and the last handoff are never dropped.' },
             },
         },
     },
@@ -654,6 +764,18 @@ const tools = [
             required: ['goalId', 'success'],
         },
     },
+    // Owner-only lifecycle (CORBOT-BA5AADB0): archive, plus the agent_delete
+    // alias, which archives too. Key modes refuse both (agent-key-mode.ts).
+    {
+        name: 'agent_archive',
+        description: AGENT_ARCHIVE_DESCRIPTION,
+        inputSchema: AGENT_ARCHIVE_INPUT_SCHEMA,
+    },
+    {
+        name: 'agent_delete',
+        description: AGENT_DELETE_ALIAS_DESCRIPTION,
+        inputSchema: AGENT_ARCHIVE_INPUT_SCHEMA,
+    },
 ];
 // ── MCP Server ──────────────────────────────────────────
 /**
@@ -693,7 +815,8 @@ async function runWorkspaceKeyModeServer(config) {
     server.setRequestHandler(CallToolRequestSchema, createWorkspaceKeyCallToolHandler({
         aisUrl: AIS_URL,
         activityTracker,
-        getHarnessIdentity: () => harnessIdentity,
+        getSessionIdentity: () => sessionIdentity,
+        setSessionIdentity: (next) => { sessionIdentity = next; },
         getActiveConfig: () => activeConfig,
         setActiveConfig: (next) => { activeConfig = next; },
         stderr,
@@ -702,6 +825,30 @@ async function runWorkspaceKeyModeServer(config) {
     await server.connect(transport);
     stderr(`MCP server running (workspace key mode). Tools: ${tools.map((t) => t.name).join(', ')}`);
 }
+/**
+ * MCP server entrypoint for run-pass auth mode (CORBOT-662A4B3A).
+ *
+ * The pass itself is never stored in process state: each tool request re-reads
+ * AIS_RUN_PASS_FILE and sends the current content as x-run-pass only.
+ */
+async function runPassModeServer(config) {
+    stderr(`Run-pass auth mode — agent fixed to ${config.agentId}; pass file ${config.runPassFile}`);
+    const server = new Server({ name: 'aismemory', version: PACKAGE_VERSION }, { capabilities: { tools: {}, prompts: {} } });
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools }));
+    server.setRequestHandler(ListPromptsRequestSchema, async () => ({ prompts: [] }));
+    server.setRequestHandler(GetPromptRequestSchema, async (request) => {
+        throw new Error(`Unknown prompt: ${request.params.name}`);
+    });
+    server.setRequestHandler(CallToolRequestSchema, createRunPassCallToolHandler({
+        aisUrl: AIS_URL,
+        activityTracker,
+        config,
+        getSessionIdentity: () => sessionIdentity,
+    }));
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    stderr(`MCP server running (run-pass mode). Tools: ${tools.map((t) => t.name).join(', ')}`);
+}
 /**
  * MCP server entrypoint for agent-API-key auth mode (CORBOT-B1D3244C).
  *
@@ -725,7 +872,7 @@ async function runAgentKeyModeServer(config) {
         aisUrl: AIS_URL,
         activityTracker,
         config,
-        getHarnessIdentity: () => harnessIdentity,
+        getSessionIdentity: () => sessionIdentity,
     }));
     const transport = new StdioServerTransport();
     await server.connect(transport);
@@ -733,6 +880,10 @@ async function runAgentKeyModeServer(config) {
 }
 async function main() {
     // Subcommand dispatch — CLI entrypoints exit before MCP server startup.
+    if (process.argv[2] === 'install') {
+        (await import('./cli/install.js')).main(process.argv.slice(3));
+        return;
+    }
     if (process.argv[2] === 'enable-key-auth') {
         await import('./cli/enable-key-auth.js');
         return; // CLI calls process.exit() itself
@@ -749,23 +900,17 @@ async function main() {
         await (await import('./cli/pull-memory.js')).main(process.argv.slice(3));
         return;
     }
-    if (process.argv[2] === 'install') {
-        const source = optionValue(process.argv.slice(3), '--manifest');
-        if (!source)
-            throw new Error('Usage: aismemory install --manifest <file>');
-        const pin = installHarnessIdentity(source);
-        process.stdout.write(`Installed identity pin for ${pin.harness}: ${pin.agentId}. Launch: aismemory --harness ${pin.harness}\nVerify: aismemory doctor --harness ${pin.harness}\n`);
-        return;
-    }
     // CORBOT-7B8A1D16: ask the npm registry, at most about once a day, whether a
     // newer aismemory has been published. Deliberately not awaited — startup must
     // not wait on a third-party registry, and the answer is only needed later,
     // when whoami or full_context is called. Resolves to a skip when offline.
     void startVersionCheck({ currentVersion: PACKAGE_VERSION, onUpdateAvailable: stderr });
-    harnessIdentity = loadHarnessIdentity();
-    const adapterEnv = { ...process.env, AIS_AGENT_ID: harnessIdentity?.agentId };
-    // Workspace key auth mode (CORBOT-3103ED88) — multi-agent workspace
-    // credentials. Checked FIRST: workspace key -> agent API key -> device flow.
+    sessionIdentity = loadSessionIdentity();
+    const adapterEnv = { ...process.env, AIS_AGENT_ID: sessionIdentity?.agentId };
+    rejectRunPassWithKeyEnv(adapterEnv);
+    // Explicit key auth modes keep their existing order when AIS_RUN_PASS_FILE is
+    // unset: workspace key -> agent API key -> device flow. A run pass combined
+    // with any key env var is refused above.
     let workspaceKeyConfig;
     try {
         workspaceKeyConfig = loadWorkspaceKeyConfig(adapterEnv);
@@ -800,6 +945,23 @@ async function main() {
         await runAgentKeyModeServer(agentKeyConfig);
         return;
     }
+    // Run-pass auth mode (CORBOT-662A4B3A) — short-lived per-run credential
+    // written by the launcher. It must not read or require any key env var.
+    let runPassConfig;
+    try {
+        runPassConfig = loadRunPassConfig(adapterEnv);
+    }
+    catch (err) {
+        if (err instanceof RunPassConfigError) {
+            stderr(err.message);
+            process.exit(1);
+        }
+        throw err;
+    }
+    if (runPassConfig) {
+        await runPassModeServer(runPassConfig);
+        return;
+    }
     // Lazy-auth state. We connect the MCP transport before the user has approved
     // the device flow so Claude Code's 30s connection timeout is not blocked on
     // human approval. The first tool call surfaces the bond URL via its result.
@@ -855,7 +1017,7 @@ async function main() {
             const claims = decodeJwtClaims(token);
             const tenantId = claims.tenantId ?? '';
             const resolved = await resolveAgent(token, '', tenantId, loadAgentPreference()?.agentId);
-            if (!harnessIdentity)
+            if (!sessionIdentity)
                 saveAgentPreference({ agentId: resolved.agentId, tenantId: resolved.tenantId || tenantId });
             return { agentId: resolved.agentId, tenantId: resolved.tenantId || tenantId };
         },
@@ -979,7 +1141,7 @@ async function main() {
     }
     /** Identity hydration, prompt refresh, and auto-handoff — all post-auth. */
     async function runPostAuth(credentials) {
-        const c = { ...credentials, agentId: harnessIdentity?.agentId ?? credentials.agentId };
+        const c = { ...credentials, agentId: sessionIdentity?.agentId ?? credentials.agentId };
         // Auto-enroll a DID key so re-auth stays silent after the 7-day bond
         // token expires. Without this, key enrollment was a manual opt-in step
         // (`enable-key-auth`) and every normal user was re-prompted to bond at
@@ -1007,7 +1169,7 @@ async function main() {
             setupAutoHandoff(AIS_URL, c.agentId, c.token, activityTracker, () => {
                 stopRefreshTimer();
                 stderr('Session handoff saved');
-            }, () => verifyPinnedIdentity(harnessIdentity, c.agentId, () => aisGet(`/v1/agents/${c.agentId}`, c.token)));
+            }, () => verifyPinnedIdentity(sessionIdentity, c.agentId, () => aisGet(`/v1/agents/${c.agentId}`, c.token), { credentialKey: identityCredentialFingerprint('oauth-bearer', c.token) }));
         }
         catch (e) {
             stderr(`Post-auth setup failed: ${e instanceof Error ? e.message : String(e)}`);
@@ -1035,7 +1197,8 @@ async function main() {
         aisUrl: AIS_URL,
         server,
         activityTracker,
-        getHarnessIdentity: () => harnessIdentity,
+        getSessionIdentity: () => sessionIdentity,
+        setSessionIdentity: (next) => { sessionIdentity = next; },
         getCredentials: () => creds,
         setCredentials: (next) => { creds = next; },
         setSessionAgentOverride: (next) => { sessionAgentOverride = next; },