@adhdev/daemon-core 0.9.82-rc.413 → 0.9.82-rc.415

package/dist/cli-adapters/resolve-executable.d.ts

@@ -1,3 +1,18 @@
+/**
+ * Pick the best launch target from `where`'s match list on win32.
+ *
+ * `where npm` on a typical install returns BOTH the extensionless Unix wrapper
+ * (e.g. `C:\Program Files\nodejs\npm`, a bash shell script) AND the `npm.cmd`
+ * shim. The extensionless wrapper is NOT a win32 executable — handing it to a
+ * spawn boundary ENOENTs (errno -4058). So:
+ *   1. Prefer a directly-launchable `.exe`/`.com`.
+ *   2. Otherwise take a `.cmd`/`.bat` shim (absolute → works for ConPTY, and for
+ *      execFile once wrapped via buildWin32ExecFileSpawn).
+ *   3. NEVER fall back to an extensionless match — return null so the caller can
+ *      try other resolution strategies (global-bin scan) rather than emit a
+ *      path that cannot be exec'd.
+ */
+export declare function selectWin32ExecutableMatch(matches: string[]): string | null;
 /**
  * Resolve a launch command to an absolute executable path on Windows.
  *
@@ -12,3 +27,43 @@
  * or cannot be resolved (caller keeps the original behaviour).
  */
 export declare function resolveWin32Executable(command: string): string;
+/**
+ * Quote one argument for a cmd.exe command line using the standard
+ * CommandLineToArgvW rules (the same algorithm Node uses internally): wrap in
+ * double quotes only when needed, double up the backslashes that precede a
+ * quote, and escape embedded quotes. We do per-argument quoting ourselves
+ * (rather than `{ shell: true }`) because Node's shell mode joins argv with bare
+ * spaces and applies NO quoting — any argument containing a space (a path, a
+ * test name) would split. Inputs here are repo-mesh validation/bootstrap command
+ * tokens (trusted config, not network data), so argv-quoting for spaces/quotes
+ * is sufficient; we deliberately do not attempt full cmd.exe metacharacter
+ * (& | < > ^ %) escaping.
+ */
+export declare function quoteWin32CmdArg(arg: string): string;
+export interface Win32ExecFileSpawn {
+    file: string;
+    args: string[];
+    /** Set when the args are pre-quoted for cmd.exe and must not be re-quoted. */
+    windowsVerbatimArguments?: boolean;
+}
+/**
+ * Build child_process.execFile/spawn parameters for an already-resolved command.
+ *
+ * On win32 a `.cmd`/`.bat` shim (what `npm`/`npx`/`tsc`/`vitest` resolve to)
+ * cannot be launched by execFile directly — modern Node refuses it (CVE-2024-27980
+ * mitigation) and CreateProcess cannot exec a batch file. So wrap it in
+ * `cmd.exe /d /s /c "<quoted command line>"` with `windowsVerbatimArguments` so
+ * our own per-argument quoting is preserved. `.exe`/`.com` (and every non-win32
+ * platform, and any already-cmd.exe target) pass through unchanged — this is a
+ * strict no-op off win32, guarding against regressions on linux/macOS.
+ */
+export declare function buildWin32ExecFileSpawn(resolvedCommand: string, args: string[]): Win32ExecFileSpawn;
+/**
+ * Convenience: resolve a bare command to an absolute win32 path AND build the
+ * execFile spawn parameters (cmd.exe-wrapping a .cmd/.bat shim). Returns the
+ * resolved command alongside the spawn spec so callers can still surface the
+ * resolved path in diagnostics.
+ */
+export declare function resolveWin32ExecFileSpawn(command: string, args: string[]): Win32ExecFileSpawn & {
+    resolvedCommand: string;
+};

package/dist/config/mesh-config.d.ts

@@ -6,6 +6,7 @@
  * uses this file as the single source of truth.
  */
 import type { LocalMeshEntry, LocalMeshNodeEntry, RepoMeshPolicy, RepoMeshNodePolicy, RepoMeshNodeCapabilities, RepoMeshCoordinatorConfig, RepoMeshHostMetadata, RepoMeshDaemonRole } from '../repo-mesh-types.js';
+import type { MagiPanel } from '@adhdev/mesh-shared';
 /**
  * Normalize a Git remote URL into a stable identity string.
  * e.g. "git@github.com:user/repo.git" → "github.com/user/repo"
@@ -125,3 +126,17 @@ export declare function updateNode(meshId: string, nodeId: string, opts: {
     reportedPlatform?: string;
     reportedArch?: string;
 }): LocalMeshNodeEntry | undefined;
+/** All configured MAGI panels (machine-local), keyed by name. Empty when none. */
+export declare function listMagiPanels(): Record<string, MagiPanel>;
+/** A single panel by name, or undefined when not configured. */
+export declare function getMagiPanel(name: string): MagiPanel | undefined;
+/**
+ * Upsert a named panel into meshes.json. Defaults to refusing to clobber an
+ * existing panel (overwrite=false) — mirrors the mesh_init write/overwrite
+ * precedent. Returns the normalized, persisted panel.
+ */
+export declare function upsertMagiPanel(name: string, config: unknown, opts?: {
+    overwrite?: boolean;
+}): MagiPanel;
+/** Remove a named panel. Returns true when a panel was removed. */
+export declare function removeMagiPanel(name: string): boolean;

package/dist/index.d.ts

@@ -28,8 +28,9 @@ export { appendRecentActivity, getRecentActivity } from './config/recent-activit
 export type { RecentActivityEntry } from './config/recent-activity.js';
 export { getSavedProviderSessions, upsertSavedProviderSession } from './config/saved-sessions.js';
 export type { SavedProviderSessionEntry } from './config/saved-sessions.js';
-export { listMeshes, getMesh, getMeshByRepo, createMesh, updateMesh, deleteMesh, addNode, removeNode, updateNode, normalizeRepoIdentity, } from './config/mesh-config.js';
+export { listMeshes, getMesh, getMeshByRepo, createMesh, updateMesh, deleteMesh, addNode, removeNode, updateNode, normalizeRepoIdentity, listMagiPanels, getMagiPanel, upsertMagiPanel, removeMagiPanel, } from './config/mesh-config.js';
 export type { CreateMeshOptions, UpdateMeshOptions, AddNodeOptions } from './config/mesh-config.js';
+export type { MagiPanel, MagiPanelMember, MagiPanelMap, MagiMode, MagiClaim, MagiClaimStance, MagiAgentResponse, MagiResponseSource, MagiSynthesizedResponse, MagiClusterCategory, MagiClusterMember, MagiClaimCluster, MagiSynthesis, } from '@adhdev/mesh-shared';
 export { expandDaemonIdForms, daemonIdsEquivalent, machineCoreFromDaemonId, canonicalDaemonId } from '@adhdev/mesh-shared';
 export { normalizeMeshNodeId, meshNodeIdMatches } from '@adhdev/mesh-shared';
 export { buildCoordinatorSystemPrompt } from './mesh/coordinator-prompt.js';

package/dist/index.js

@@ -389,10 +389,10 @@ function readInjected(value) {
 }
 function getDaemonBuildInfo() {
   if (cached) return cached;
-  const commit = readInjected(true ? "7a774e95a82354f5357197b3c84f63e68b5f7a5d" : void 0) ?? "unknown";
-  const commitShort = readInjected(true ? "7a774e95" : void 0) ?? (commit !== "unknown" ? commit.slice(0, 7) : "unknown");
-  const version = readInjected(true ? "0.9.82-rc.413" : void 0) ?? readInjected(typeof process !== "undefined" ? process.env?.ADHDEV_PKG_VERSION : void 0) ?? "unknown";
-  const builtAt = readInjected(true ? "2026-06-28T11:48:26.300Z" : void 0);
+  const commit = readInjected(true ? "eeb6bb4fcd32cf1844ed87bb4a7c2760e132e69d" : void 0) ?? "unknown";
+  const commitShort = readInjected(true ? "eeb6bb4f" : void 0) ?? (commit !== "unknown" ? commit.slice(0, 7) : "unknown");
+  const version = readInjected(true ? "0.9.82-rc.415" : void 0) ?? readInjected(typeof process !== "undefined" ? process.env?.ADHDEV_PKG_VERSION : void 0) ?? "unknown";
+  const builtAt = readInjected(true ? "2026-06-28T13:43:23.868Z" : void 0);
   cached = builtAt ? { commit, commitShort, version, builtAt } : { commit, commitShort, version };
   return cached;
 }
@@ -2562,15 +2562,19 @@ __export(mesh_config_exports, {
   createMesh: () => createMesh,
   createMeshHostPairingToken: () => createMeshHostPairingToken,
   deleteMesh: () => deleteMesh,
+  getMagiPanel: () => getMagiPanel,
   getMesh: () => getMesh,
   getMeshByRepo: () => getMeshByRepo,
+  listMagiPanels: () => listMagiPanels,
   listMeshes: () => listMeshes,
   markMeshHostPairingJoined: () => markMeshHostPairingJoined,
   normalizeRepoIdentity: () => normalizeRepoIdentity,
+  removeMagiPanel: () => removeMagiPanel,
   removeNode: () => removeNode,
   tokenIdForManualPairing: () => tokenIdForManualPairing,
   updateMesh: () => updateMesh,
-  updateNode: () => updateNode
+  updateNode: () => updateNode,
+  upsertMagiPanel: () => upsertMagiPanel
 });
 function getMeshConfigPath() {
   return (0, import_path3.join)(getConfigDir(), "meshes.json");
@@ -2943,7 +2947,89 @@ function updateNode(meshId, nodeId, opts) {
   saveMeshConfig(config);
   return node;
 }
-var import_fs3, import_path3, import_crypto3, mergeMeshPolicy;
+function normalizeReplicaCount(value) {
+  if (typeof value !== "number" || !Number.isFinite(value)) return void 0;
+  const n = Math.floor(value);
+  return n >= 1 ? n : void 0;
+}
+function normalizeMagiPanel(config) {
+  if (!config || typeof config !== "object" || Array.isArray(config)) {
+    throw new Error("invalid_magi_panel: config must be an object");
+  }
+  const raw = config;
+  const rawMembers = raw.members;
+  if (!Array.isArray(rawMembers) || rawMembers.length === 0) {
+    throw new Error("invalid_magi_panel: members must be a non-empty array");
+  }
+  if (rawMembers.length > MAX_MAGI_PANEL_MEMBERS) {
+    throw new Error(`invalid_magi_panel: too many members (max ${MAX_MAGI_PANEL_MEMBERS})`);
+  }
+  const members = rawMembers.map((entry, idx) => {
+    if (!entry || typeof entry !== "object" || Array.isArray(entry)) {
+      throw new Error(`invalid_magi_panel: member[${idx}] must be an object`);
+    }
+    const m = entry;
+    const provider = typeof m.provider === "string" ? m.provider.trim() : "";
+    if (!provider) {
+      throw new Error(`invalid_magi_panel: member[${idx}].provider is required`);
+    }
+    const nodeId = typeof m.nodeId === "string" && m.nodeId.trim() ? m.nodeId.trim() : void 0;
+    const capabilityTags = normalizeCapabilityTags(m.capabilityTags);
+    const n = normalizeReplicaCount(m.n);
+    return {
+      provider,
+      ...nodeId ? { nodeId } : {},
+      ...capabilityTags ? { capabilityTags } : {},
+      ...n !== void 0 ? { n } : {}
+    };
+  });
+  const description = typeof raw.description === "string" && raw.description.trim() ? raw.description.trim().slice(0, 200) : void 0;
+  const defaultN = normalizeReplicaCount(raw.defaultN);
+  return {
+    ...description ? { description } : {},
+    members,
+    ...defaultN !== void 0 ? { defaultN } : {},
+    // dedupExempt is always meaningful for a MAGI panel (intentional same-prompt
+    // fan-out). Persist it true unless the caller explicitly disables it.
+    dedupExempt: raw.dedupExempt === false ? false : true
+  };
+}
+function normalizePanelName(name) {
+  const trimmed = typeof name === "string" ? name.trim() : "";
+  if (!trimmed) throw new Error("invalid_magi_panel: panel name is required");
+  return trimmed.slice(0, 100);
+}
+function listMagiPanels() {
+  return loadMeshConfig().magiPanels ?? {};
+}
+function getMagiPanel(name) {
+  const key2 = typeof name === "string" ? name.trim() : "";
+  if (!key2) return void 0;
+  return loadMeshConfig().magiPanels?.[key2];
+}
+function upsertMagiPanel(name, config, opts = {}) {
+  const key2 = normalizePanelName(name);
+  const panel = normalizeMagiPanel(config);
+  const stored = loadMeshConfig();
+  const panels = stored.magiPanels ?? {};
+  if (panels[key2] && opts.overwrite !== true) {
+    throw new Error(`magi_panel_exists: panel '${key2}' already exists \u2014 pass overwrite=true to replace it`);
+  }
+  panels[key2] = panel;
+  stored.magiPanels = panels;
+  saveMeshConfig(stored);
+  return panel;
+}
+function removeMagiPanel(name) {
+  const key2 = typeof name === "string" ? name.trim() : "";
+  if (!key2) return false;
+  const stored = loadMeshConfig();
+  if (!stored.magiPanels || !stored.magiPanels[key2]) return false;
+  delete stored.magiPanels[key2];
+  saveMeshConfig(stored);
+  return true;
+}
+var import_fs3, import_path3, import_crypto3, mergeMeshPolicy, MAX_MAGI_PANEL_MEMBERS;
 var init_mesh_config = __esm({
   "src/config/mesh-config.ts"() {
     "use strict";
@@ -2955,6 +3041,7 @@ var init_mesh_config = __esm({
     init_repo_mesh_types();
     init_mesh_host_ownership();
     mergeMeshPolicy = mergeAndNormalizePolicy;
+    MAX_MAGI_PANEL_MEMBERS = 24;
   }
 });
 
@@ -5142,6 +5229,7 @@ function enqueueTask(meshId, message, opts) {
       requiredTags: resolvedRequiredTags,
       ...dependsOn.length > 0 ? { dependsOn } : {},
       ...typeof opts?.missionId === "string" && opts.missionId.trim() ? { missionId: opts.missionId.trim() } : {},
+      ...typeof opts?.consensusGroupId === "string" && opts.consensusGroupId.trim() ? { consensusGroupId: opts.consensusGroupId.trim() } : {},
       ...typeof opts?.sourceCoordinatorSessionId === "string" && opts.sourceCoordinatorSessionId.trim() ? { sourceCoordinatorSessionId: opts.sourceCoordinatorSessionId.trim() } : {},
       createdAt: (/* @__PURE__ */ new Date()).toISOString(),
       updatedAt: (/* @__PURE__ */ new Date()).toISOString()
@@ -8451,6 +8539,14 @@ function resolveWin32GlobalBin(trimmed) {
   }
   return null;
 }
+function selectWin32ExecutableMatch(matches) {
+  const cleaned = matches.map((m) => m.trim()).filter(Boolean);
+  const direct = cleaned.find((m) => DIRECT_EXEC_EXT.has(path10.extname(m).toLowerCase()));
+  if (direct) return direct;
+  const shim = cleaned.find((m) => SHIM_EXEC_EXT.has(path10.extname(m).toLowerCase()));
+  if (shim) return shim;
+  return null;
+}
 function resolveWin32Executable(command) {
   if (process.platform !== "win32") return command;
   const trimmed = (command || "").trim();
@@ -8463,8 +8559,8 @@ function resolveWin32Executable(command) {
     }).trim();
     if (out) {
       const matches = out.split(/\r?\n/).map((s2) => s2.trim()).filter(Boolean);
-      const direct = matches.find((m) => DIRECT_EXEC_EXT.has(path10.extname(m).toLowerCase()));
-      return direct || matches[0] || command;
+      const selected = selectWin32ExecutableMatch(matches);
+      if (selected) return selected;
     }
   } catch {
   }
@@ -8472,7 +8568,38 @@ function resolveWin32Executable(command) {
   if (globalBin) return globalBin;
   return command;
 }
-var import_child_process, import_fs8, path10, DIRECT_EXEC_EXT, WIN_EXEC_EXT;
+function quoteWin32CmdArg(arg) {
+  if (arg.length > 0 && !/[ \t"]/.test(arg)) return arg;
+  let result = '"';
+  let backslashes = 0;
+  for (const ch of arg) {
+    if (ch === "\\") {
+      backslashes += 1;
+      continue;
+    }
+    if (ch === '"') {
+      result += "\\".repeat(backslashes * 2 + 1) + '"';
+      backslashes = 0;
+      continue;
+    }
+    result += "\\".repeat(backslashes) + ch;
+    backslashes = 0;
+  }
+  result += "\\".repeat(backslashes * 2) + '"';
+  return result;
+}
+function buildWin32ExecFileSpawn(resolvedCommand, args) {
+  if (process.platform !== "win32") return { file: resolvedCommand, args };
+  const ext = path10.extname(resolvedCommand).toLowerCase();
+  if (!SHIM_EXEC_EXT.has(ext)) return { file: resolvedCommand, args };
+  const commandLine = [resolvedCommand, ...args].map(quoteWin32CmdArg).join(" ");
+  return {
+    file: process.env.ComSpec || "cmd.exe",
+    args: ["/d", "/s", "/c", `"${commandLine}"`],
+    windowsVerbatimArguments: true
+  };
+}
+var import_child_process, import_fs8, path10, DIRECT_EXEC_EXT, SHIM_EXEC_EXT, WIN_EXEC_EXT;
 var init_resolve_executable = __esm({
   "src/cli-adapters/resolve-executable.ts"() {
     "use strict";
@@ -8480,6 +8607,7 @@ var init_resolve_executable = __esm({
     import_fs8 = require("fs");
     path10 = __toESM(require("path"));
     DIRECT_EXEC_EXT = /* @__PURE__ */ new Set([".exe", ".com"]);
+    SHIM_EXEC_EXT = /* @__PURE__ */ new Set([".cmd", ".bat"]);
     WIN_EXEC_EXT = [".exe", ".com", ".cmd", ".bat"];
   }
 });
@@ -8664,14 +8792,16 @@ async function runMeshWorktreeBootstrap(mesh, workspace) {
     const startedAt = Date.now();
     state.lastCommand = command.displayCommand;
     const resolvedCommand = resolveWin32Executable(command.command);
+    const spawn4 = buildWin32ExecFileSpawn(resolvedCommand, command.args);
     try {
-      const result = await execFileAsync4(resolvedCommand, command.args, {
+      const result = await execFileAsync4(spawn4.file, spawn4.args, {
         cwd,
         encoding: "utf8",
         timeout: command.timeoutMs || DEFAULT_TIMEOUT_MS2,
         maxBuffer: command.outputLimitBytes || DEFAULT_OUTPUT_LIMIT_BYTES,
         env: { ...process.env, CI: process.env.CI || "1", ...command.env || {} },
-        windowsHide: true
+        windowsHide: true,
+        ...spawn4.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {}
       });
       state.commandsRun?.push({
         command: command.command,
@@ -10426,6 +10556,11 @@ function buildPendingEventFingerprint(event) {
       ].join("::");
     }
   }
+  const consensusGroupId = readNonEmptyString2(metadata.consensusGroupId) || readNonEmptyString2(readRecord4(metadata.payload)?.consensusGroupId);
+  if (consensusGroupId) {
+    const groupTaskId = readNonEmptyString2(metadata.taskId) || readNonEmptyString2(readRecord4(metadata.payload)?.taskId);
+    return [event.meshId, event.event, groupTaskId || "", consensusGroupId, "group"].join("::");
+  }
   const sessionId = resolveEventSessionId(metadata);
   const providerSessionId = readNonEmptyString2(metadata.providerSessionId);
   const taskId = readNonEmptyString2(metadata.taskId) || readNonEmptyString2(readRecord4(metadata.payload)?.taskId);
@@ -12252,6 +12387,12 @@ function sessionHasActiveAssignment(meshId, sessionId) {
   }
   return false;
 }
+function isSessionActivelyGenerating(components, sessionId) {
+  if (!sessionId) return false;
+  const state = components.instanceManager?.getInstance?.(sessionId)?.getState?.();
+  if (!state) return false;
+  return sessionStateLooksActive(state);
+}
 function liveSessionCountForNode(components, meshId, nodeId) {
   return components.instanceManager.getByCategory("cli").filter((inst) => {
     const state = inst.getState();
@@ -15696,13 +15837,22 @@ function injectMeshSystemMessage(components, args) {
   ) || readNonEmptyString2(args.metadataEvent.meshCoordinatorSessionId);
   const enrichedMetadataEvent = (() => {
     const last = sourceSession ? getLastDisplayMessage(sourceSession.getState()) : null;
-    if (!last || !last.preview) return args.metadataEvent;
-    return {
+    const base = !last || !last.preview ? args.metadataEvent : {
       ...args.metadataEvent,
       lastMessagePreview: last.preview,
       lastMessageRole: last.role,
       ...last.receivedAt > 0 ? { lastMessageAt: last.receivedAt } : {}
     };
+    if (readNonEmptyString2(base.consensusGroupId)) return base;
+    const eventTaskId = readNonEmptyString2(args.metadataEvent.taskId);
+    if (!eventTaskId) return base;
+    try {
+      const entry = MeshRuntimeStore.getInstance().findQueueEntryById(args.meshId, eventTaskId);
+      const consensusGroupId = readNonEmptyString2(entry?.consensusGroupId);
+      if (consensusGroupId) return { ...base, consensusGroupId };
+    } catch {
+    }
+    return base;
   })();
   if (components.onMeshCoordinatorEventForwarded) {
     try {
@@ -17319,6 +17469,7 @@ __export(mesh_events_exports, {
   getPendingMeshCoordinatorEvents: () => getPendingMeshCoordinatorEvents,
   handleMeshForwardEvent: () => handleMeshForwardEvent,
   isMeshCoordinatorEvent: () => isMeshCoordinatorEvent,
+  isSessionActivelyGenerating: () => isSessionActivelyGenerating,
   queuePendingMeshCoordinatorEvent: () => queuePendingMeshCoordinatorEvent,
   reconcileDirectDispatchCompletionFromTranscript: () => reconcileDirectDispatchCompletionFromTranscript,
   resolveCoordinatorDrainDeliverability: () => resolveCoordinatorDrainDeliverability,
@@ -23146,6 +23297,7 @@ __export(index_exports, {
   getLedgerDir: () => getLedgerDir,
   getLedgerSummary: () => getLedgerSummary,
   getLogLevel: () => getLogLevel,
+  getMagiPanel: () => getMagiPanel,
   getMesh: () => getMesh,
   getMeshByRepo: () => getMeshByRepo,
   getMeshMission: () => getMeshMission,
@@ -23199,6 +23351,7 @@ __export(index_exports, {
   launchWithCdp: () => launchWithCdp,
   listCoordinatorsForWorkspace: () => listCoordinatorsForWorkspace,
   listHostedCliRuntimes: () => listHostedCliRuntimes,
+  listMagiPanels: () => listMagiPanels,
   listMeshMissionSummaries: () => listMeshMissionSummaries,
   listMeshes: () => listMeshes,
   listWorktrees: () => listWorktrees,
@@ -23268,6 +23421,7 @@ __export(index_exports, {
   recordMeshToolCall: () => recordMeshToolCall,
   registerExtensionProviders: () => registerExtensionProviders,
   registerMeshCoordinator: () => registerMeshCoordinator,
+  removeMagiPanel: () => removeMagiPanel,
   removeNode: () => removeNode,
   removeWorktree: () => removeWorktree,
   requeueTask: () => requeueTask,
@@ -23322,6 +23476,7 @@ __export(index_exports, {
   updateSessionDeliveryStatus: () => updateSessionDeliveryStatus,
   updateSessionTaskStatus: () => updateSessionTaskStatus,
   updateTaskStatus: () => updateTaskStatus,
+  upsertMagiPanel: () => upsertMagiPanel,
   upsertMeshMission: () => upsertMeshMission,
   upsertSavedProviderSession: () => upsertSavedProviderSession,
   validateChangeImpactConfig: () => validateChangeImpactConfig,
@@ -49590,7 +49745,18 @@ var meshQueueHandlers = {
     const ownerFailure = await ctx.requireMeshHostMutationOwner(meshId, args?.inlineMesh, "queue requeue");
     if (ownerFailure) return ownerFailure;
     try {
-      const { requeueTask: requeueTask2 } = await Promise.resolve().then(() => (init_mesh_work_queue(), mesh_work_queue_exports));
+      const { requeueTask: requeueTask2, getQueue: getQueue2 } = await Promise.resolve().then(() => (init_mesh_work_queue(), mesh_work_queue_exports));
+      if (args?.force !== true) {
+        const { isSessionActivelyGenerating: isSessionActivelyGenerating2 } = await Promise.resolve().then(() => (init_mesh_events(), mesh_events_exports));
+        const existing = getQueue2(meshId).find((t) => t?.id === taskId);
+        if (existing?.status === "assigned" && existing.assignedSessionId && isSessionActivelyGenerating2(ctx.deps, existing.assignedSessionId)) {
+          return {
+            success: false,
+            error: `Task '${taskId}' is actively dispatched/generating (live session ${existing.assignedSessionId}); requeue refused to avoid a duplicate second dispatch. Pass force:true to override, or cancel and re-enqueue.`,
+            task: existing
+          };
+        }
+      }
       const task = requeueTask2(meshId, taskId, {
         reason: typeof args?.reason === "string" ? args.reason : void 0,
         targetNodeId: typeof args?.targetNodeId === "string" ? args.targetNodeId.trim() : void 0,
@@ -53526,13 +53692,15 @@ async function runMeshRefineValidationGate(mesh, workspace, opts) {
       const cwd = candidate.cwd ? (0, import_path14.resolve)(workspace, candidate.cwd) : workspace;
       const timeout = candidate.timeoutMs || REFINE_VALIDATION_TIMEOUT_MS;
       const resolvedCommand = resolveWin32Executable(candidate.command);
+      const spawn4 = buildWin32ExecFileSpawn(resolvedCommand, candidate.args);
       try {
-        const result = await execFileAsync4(resolvedCommand, candidate.args, {
+        const result = await execFileAsync4(spawn4.file, spawn4.args, {
           cwd,
           encoding: "utf8",
           timeout,
           maxBuffer: candidate.outputLimitBytes || REFINE_VALIDATION_OUTPUT_LIMIT_BYTES,
-          env: { ...process.env, CI: process.env.CI || "1", ...candidate.env || {} }
+          env: { ...process.env, CI: process.env.CI || "1", ...candidate.env || {} },
+          ...spawn4.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {}
         });
         summary.bootstrapCommandsRun.push(commandRecord(candidate, cwd, startedAt, result, true, { exitCode: 0 }));
       } catch (error) {
@@ -53543,7 +53711,7 @@ async function runMeshRefineValidationGate(mesh, workspace, opts) {
           timedOut: error?.killed === true || /timed out/i.test(String(error?.message || "")),
           ...spawnResolutionFailed ? { failureKind: "spawn_resolution_failed", resolvedCommand } : { failureKind: "dependency_bootstrap_failed" }
         }));
-        summary.bootstrap = { stage: "failed", error: describeSpawnError(error, candidate.command, spawnResolutionFailed) };
+        summary.bootstrap = { stage: "failed", error: describeSpawnError(error, resolvedCommand, spawnResolutionFailed) };
         summary.status = "failed";
         summary.failureKind = spawnResolutionFailed ? "spawn_resolution_failed" : "dependency_bootstrap_failed";
         summary.failureCode = spawnResolutionFailed ? "spawn_resolution_failed" : "dependency_bootstrap_failed";
@@ -53570,13 +53738,15 @@ async function runMeshRefineValidationGate(mesh, workspace, opts) {
       return summary;
     }
     const resolvedCommand = resolveWin32Executable(candidate.command);
+    const spawn4 = buildWin32ExecFileSpawn(resolvedCommand, candidate.args);
     try {
-      const result = await execFileAsync4(resolvedCommand, candidate.args, {
+      const result = await execFileAsync4(spawn4.file, spawn4.args, {
         cwd,
         encoding: "utf8",
         timeout,
         maxBuffer: candidate.outputLimitBytes || REFINE_VALIDATION_OUTPUT_LIMIT_BYTES,
-        env: { ...process.env, CI: process.env.CI || "1", ...candidate.env || {} }
+        env: { ...process.env, CI: process.env.CI || "1", ...candidate.env || {} },
+        ...spawn4.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {}
       });
       summary.commandsRun.push(commandRecord(candidate, cwd, startedAt, result, true, { exitCode: 0 }));
     } catch (error) {
@@ -53593,7 +53763,7 @@ async function runMeshRefineValidationGate(mesh, workspace, opts) {
       if (spawnResolutionFailed) {
         summary.failureKind = "spawn_resolution_failed";
         summary.failureCode = "spawn_resolution_failed";
-        summary.spawnResolutionError = describeSpawnError(error, candidate.command, true);
+        summary.spawnResolutionError = describeSpawnError(error, resolvedCommand, true);
       } else if (missingDependencyFailure) {
         summary.failureKind = "missing_dependencies";
         summary.failureCode = "missing_dependencies";
@@ -64596,6 +64766,7 @@ var V1_CONTRACT_VERSION = "1.0.0";
   getLedgerDir,
   getLedgerSummary,
   getLogLevel,
+  getMagiPanel,
   getMesh,
   getMeshByRepo,
   getMeshMission,
@@ -64649,6 +64820,7 @@ var V1_CONTRACT_VERSION = "1.0.0";
   launchWithCdp,
   listCoordinatorsForWorkspace,
   listHostedCliRuntimes,
+  listMagiPanels,
   listMeshMissionSummaries,
   listMeshes,
   listWorktrees,
@@ -64718,6 +64890,7 @@ var V1_CONTRACT_VERSION = "1.0.0";
   recordMeshToolCall,
   registerExtensionProviders,
   registerMeshCoordinator,
+  removeMagiPanel,
   removeNode,
   removeWorktree,
   requeueTask,
@@ -64772,6 +64945,7 @@ var V1_CONTRACT_VERSION = "1.0.0";
   updateSessionDeliveryStatus,
   updateSessionTaskStatus,
   updateTaskStatus,
+  upsertMagiPanel,
   upsertMeshMission,
   upsertSavedProviderSession,
   validateChangeImpactConfig,