@algosuite/vo-mcp 0.2.0-beta.50 → 0.2.0-beta.52

package/dist/index.js

@@ -502,7 +502,7 @@ __export(memory_knowledge_bridge_exports, {
   extractMemoryTitle: () => extractMemoryTitle,
   upsertMemoryFilesAsKnowledge: () => upsertMemoryFilesAsKnowledge
 });
-import { existsSync as existsSync7, readdirSync as readdirSync5, readFileSync as readFileSync13 } from "node:fs";
+import { existsSync as existsSync8, readdirSync as readdirSync5, readFileSync as readFileSync13 } from "node:fs";
 function extractMemoryTitle(fileName, content) {
   const frontmatter = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
   if (frontmatter) {
@@ -517,7 +517,7 @@ async function upsertMemoryFilesAsKnowledge(options) {
   const { controlPlaneUrl, token, memoryDir, fetchFn, cache, deadline } = options;
   let files;
   try {
-    if (!existsSync7(memoryDir)) {
+    if (!existsSync8(memoryDir)) {
       return { attempted: 0, upserted: 0, failed: 0, skipped: 0, failures: [] };
     }
     files = readdirSync5(memoryDir).filter(
@@ -807,24 +807,24 @@ function defaultOverridePath() {
   return join2(homedir(), ".claude", "vo-arch-defaults.local.json");
 }
 function loadTenantOverride(opts = {}) {
-  const path3 = opts.path ?? defaultOverridePath();
-  if (!existsSync2(path3)) {
+  const path4 = opts.path ?? defaultOverridePath();
+  if (!existsSync2(path4)) {
     return { override: null, source_path: null };
   }
-  const raw = readFileSync2(path3, "utf8");
+  const raw = readFileSync2(path4, "utf8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
   } catch (err) {
     const m = err instanceof Error ? err.message : String(err);
-    throw new Error(`vo-arch-defaults: invalid JSON in override ${path3}: ${m}`, { cause: err });
+    throw new Error(`vo-arch-defaults: invalid JSON in override ${path4}: ${m}`, { cause: err });
   }
   try {
     const override = parseOverride(parsed);
-    return { override, source_path: path3 };
+    return { override, source_path: path4 };
   } catch (err) {
     const m = err instanceof Error ? err.message : String(err);
-    throw new Error(`vo-arch-defaults: override schema validation failed for ${path3}: ${m}`, { cause: err });
+    throw new Error(`vo-arch-defaults: override schema validation failed for ${path4}: ${m}`, { cause: err });
   }
 }
 
@@ -954,9 +954,9 @@ function globToRegExp(glob) {
   }
   return new RegExp("^" + out + "$");
 }
-function matchesAnyGlob(path3, globs) {
+function matchesAnyGlob(path4, globs) {
   for (const g of globs) {
-    if (globToRegExp(g).test(path3)) return true;
+    if (globToRegExp(g).test(path4)) return true;
   }
   return false;
 }
@@ -4142,10 +4142,10 @@ Produce the JSON dispatch plan now.`;
 init_auth_token_source();
 init_credential_store();
 var AdminCallableError = class extends Error {
-  constructor(status, path3, message) {
+  constructor(status, path4, message) {
     super(message);
     this.status = status;
-    this.path = path3;
+    this.path = path4;
     this.name = "AdminCallableError";
   }
   status;
@@ -5140,7 +5140,7 @@ async function handleReportSessionState(deps, rawInput, _signal) {
 import { spawn } from "node:child_process";
 import { homedir as homedir5 } from "node:os";
 import { join as join7 } from "node:path";
-import { existsSync as existsSync4, mkdirSync as mkdirSync4, openSync as openSync2, readFileSync as readFileSync7, readdirSync as readdirSync3, statSync as statSync3 } from "node:fs";
+import { closeSync as closeSync2, existsSync as existsSync5, mkdirSync as mkdirSync4, openSync as openSync2, readFileSync as readFileSync7, readdirSync as readdirSync3, statSync as statSync4 } from "node:fs";
 
 // src/swarm/tier-binding.ts
 var SWARM_TIERS = Object.freeze([
@@ -5346,10 +5346,10 @@ function sanitizeSwarmId(raw) {
   return id;
 }
 var CEILING_FILE = "ceiling.json";
-function createExclusive(path3, contents) {
+function createExclusive(path4, contents) {
   let fd;
   try {
-    fd = openSync(path3, "wx");
+    fd = openSync(path4, "wx");
   } catch {
     return false;
   }
@@ -5364,18 +5364,18 @@ function capToCents(cap) {
   return isPositiveCap(cap) ? Math.round(cap * 100) : 0;
 }
 function readOrRecordLedgerHead(swarmDir, proposedCeiling, proposedCapCents, nowIso) {
-  const path3 = join6(swarmDir, CEILING_FILE);
+  const path4 = join6(swarmDir, CEILING_FILE);
   const head = JSON.stringify({
     ceiling: proposedCeiling,
     cap_cents: proposedCapCents,
     recorded_at: nowIso
   });
-  if (createExclusive(path3, head)) {
+  if (createExclusive(path4, head)) {
     return { ceiling: proposedCeiling, capCents: proposedCapCents };
   }
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync6(path3, "utf8"));
+    parsed = JSON.parse(readFileSync6(path4, "utf8"));
   } catch {
     return null;
   }
@@ -5455,6 +5455,288 @@ var claimSpawnSlot = ({ swarmId, proposedCeiling, proposedCapUsd, dir, nowIso })
   };
 };
 
+// src/swarm/spawn-plan.ts
+function resolveSpawnPlan(env, input, nowIso, platform = process.platform, claim = claimSpawnSlot) {
+  const rawBinding = env[SWARM_TIER_BINDING_ENV];
+  const hasBinding = typeof rawBinding === "string" && rawBinding.trim().length > 0;
+  if (!hasBinding) {
+    const explicit = input.agent?.trim();
+    const resolved2 = resolveSuccessorLaunch({ agent: explicit || "claude", maxTurns: input.max_turns, platform });
+    if (!resolved2.ok) return { ok: false, reason: resolved2.reason, tier: "unbound" };
+    return {
+      ok: true,
+      bin: resolved2.bin,
+      args: resolved2.args,
+      agent: resolved2.agent,
+      tier: "unbound",
+      bound: false,
+      env: {},
+      slot: null,
+      capUsd: null,
+      capRemainingUsd: null
+    };
+  }
+  const binding = inheritSwarmTierBinding(env, nowIso);
+  const admission = admitSubagentSpawn(binding);
+  if (!admission.allowed) {
+    return { ok: false, reason: admission.reason, tier: binding.tier };
+  }
+  const agentRefusal = agentBindingRefusal(binding, input.agent);
+  if (agentRefusal !== null) return { ok: false, reason: agentRefusal, tier: binding.tier };
+  const resolved = resolveSuccessorLaunch({
+    agent: binding.agent,
+    maxTurns: input.max_turns,
+    platform
+  });
+  if (!resolved.ok) return { ok: false, reason: resolved.reason, tier: binding.tier };
+  const slot = claim({
+    swarmId: binding.swarm_id,
+    proposedCeiling: binding.subagent_budget,
+    // The spend-cap POOL, recorded once per swarm exactly like the ceiling. The
+    // child's cap is DEBITED from it below, not recomputed from this binding.
+    proposedCapUsd: binding.spend_cap_usd,
+    dir: resolveLedgerDir(env),
+    nowIso
+  });
+  if (!slot.ok) return { ok: false, reason: slot.reason, tier: binding.tier };
+  return {
+    ok: true,
+    bin: resolved.bin,
+    args: resolved.args,
+    agent: resolved.agent,
+    tier: binding.tier,
+    bound: true,
+    // Re-export the same TIER with a DECREMENTED budget and the spend cap the
+    // ledger just DEBITED. Exporting the binding verbatim (what this did before
+    // #9312) meant the child re-read the full budget and every generation
+    // restarted at zero. Recomputing the cap from THIS binding (what #9312 did)
+    // bounded a chain but not a tree: three siblings each re-halved the parent's
+    // untouched $50 and walked away with $75 between them.
+    env: childBindingEnvFragment(binding, slot.capUsd),
+    slot: slot.slot,
+    capUsd: slot.capUsd,
+    capRemainingUsd: slot.capRemainingUsd
+  };
+}
+
+// ../../scripts/virtual-office/code-runner/windows-claude-launch.mjs
+import { existsSync as existsSync4, realpathSync } from "node:fs";
+import { win32 as path3 } from "node:path";
+import { spawnSync as spawnSync2 } from "node:child_process";
+var NATIVE_CLAUDE_PARTS = [
+  "node_modules",
+  "@anthropic-ai",
+  "claude-code",
+  "bin",
+  "claude.exe"
+];
+function pathValue(env) {
+  for (const key of ["Path", "PATH", "path"]) {
+    if (typeof env?.[key] === "string") return env[key];
+  }
+  return "";
+}
+function cleanPathSegment(value) {
+  const trimmed = String(value || "").trim();
+  return trimmed.startsWith('"') && trimmed.endsWith('"') ? trimmed.slice(1, -1) : trimmed;
+}
+function envValue(env, name) {
+  const exact = env?.[name];
+  if (typeof exact === "string") return exact.trim();
+  const key = Object.keys(env || {}).find((candidate) => candidate.toLowerCase() === name.toLowerCase());
+  return typeof env?.[key] === "string" ? env[key].trim() : "";
+}
+function userClaudeCandidates(bin, env) {
+  if (!/^claude(?:\.(?:exe|cmd|ps1))?$/iu.test(bin)) return [];
+  const userProfile = envValue(env, "USERPROFILE");
+  const appData = envValue(env, "APPDATA") || (userProfile ? path3.join(userProfile, "AppData", "Roaming") : "");
+  const localAppData = envValue(env, "LOCALAPPDATA") || (userProfile ? path3.join(userProfile, "AppData", "Local") : "");
+  const candidates = [];
+  if (appData) {
+    const npmBin = path3.join(appData, "npm");
+    candidates.push(
+      path3.join(npmBin, "claude.exe"),
+      path3.join(npmBin, "claude.cmd"),
+      path3.join(npmBin, "claude.ps1"),
+      path3.join(npmBin, "claude"),
+      path3.join(npmBin, ...NATIVE_CLAUDE_PARTS)
+    );
+  }
+  if (userProfile) candidates.push(path3.join(userProfile, ".local", "bin", "claude.exe"));
+  if (localAppData) {
+    candidates.push(
+      path3.join(localAppData, "Microsoft", "WinGet", "Links", "claude.exe"),
+      path3.join(localAppData, "Microsoft", "WindowsApps", "claude.exe")
+    );
+  }
+  return candidates;
+}
+function pathCandidates(bin, env) {
+  if (path3.isAbsolute(bin) || /[\\/]/u.test(bin)) {
+    return [path3.resolve(bin)];
+  }
+  const extension = path3.extname(bin);
+  const fromPath = pathValue(env).split(";").map(cleanPathSegment).filter(Boolean).flatMap((directory) => extension ? [path3.join(directory, bin)] : [
+    path3.join(directory, `${bin}.exe`),
+    path3.join(directory, `${bin}.cmd`),
+    path3.join(directory, `${bin}.ps1`),
+    path3.join(directory, bin)
+  ]);
+  const seen = /* @__PURE__ */ new Set();
+  return [...fromPath, ...userClaudeCandidates(bin, env)].filter((candidate) => {
+    const key = candidate.toLowerCase();
+    if (seen.has(key)) return false;
+    seen.add(key);
+    return true;
+  });
+}
+function canonicalExistingPath(candidate, exists, canonicalize2) {
+  if (!exists(candidate)) return null;
+  try {
+    return canonicalize2(candidate);
+  } catch {
+    return null;
+  }
+}
+function resolveWindowsClaudeExecutable({
+  bin = "claude",
+  env = process.env,
+  exists = existsSync4,
+  canonicalize: canonicalize2 = realpathSync
+} = {}) {
+  const requested = String(bin || "").trim();
+  if (!requested || requested.includes("\0")) {
+    throw new TypeError("Claude executable must be a non-empty path without NUL bytes");
+  }
+  for (const candidate of pathCandidates(requested, env)) {
+    const found = canonicalExistingPath(candidate, exists, canonicalize2);
+    if (!found) continue;
+    if (path3.extname(found).toLowerCase() === ".exe") return found;
+    const native = path3.join(path3.dirname(found), ...NATIVE_CLAUDE_PARTS);
+    const resolvedNative = canonicalExistingPath(native, exists, canonicalize2);
+    if (resolvedNative) return resolvedNative;
+  }
+  const error = new Error(
+    `Could not resolve a native claude.exe for "${requested}". Install or update Claude Code with the native Windows installer (recommended) or npm install -g @anthropic-ai/claude-code; the HQ runner will not execute a shell-only .cmd/.ps1 shim.`
+  );
+  error.code = "ENOENT";
+  throw error;
+}
+
+// src/swarm/successor-windows-exe.ts
+var resolveWindowsClaudeExe = (bin, env) => resolveWindowsClaudeExecutable({ bin, env });
+function resolveNativeWindowsExecutable(bin, env = process.env, resolve3 = resolveWindowsClaudeExe) {
+  try {
+    return { ok: true, bin: resolve3(bin, env) };
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return {
+      ok: false,
+      reason: `could not resolve a native Windows executable for '${bin}': ${message}`
+    };
+  }
+}
+
+// src/swarm/successor-liveness.ts
+import { statSync as statSync3 } from "node:fs";
+var DEFAULT_EARLY_EXIT_SEC = 10;
+var DEFAULT_NO_OUTPUT_SEC = 0;
+var DEFAULT_POLL_MS = 200;
+var KILL_ESCALATION_MS = 2e3;
+function positiveSeconds(raw, fallback) {
+  if (raw === void 0) return fallback;
+  const n = Number(raw.trim());
+  return Number.isFinite(n) && n > 0 ? n : fallback;
+}
+function resolveLivenessConfigFromEnv(env = process.env, explicitOverride = {}) {
+  const earlyExitMs = explicitOverride.earlyExitMs ?? positiveSeconds(env["VO_MCP_SUCCESSOR_EXIT_CHECK_SEC"], DEFAULT_EARLY_EXIT_SEC) * 1e3;
+  const noOutputMs = explicitOverride.noOutputMs ?? positiveSeconds(env["VO_MCP_SUCCESSOR_OUTPUT_CHECK_SEC"], DEFAULT_NO_OUTPUT_SEC) * 1e3;
+  return { earlyExitMs, noOutputMs };
+}
+function defaultStatLogBytes(path4) {
+  try {
+    return statSync3(path4).size;
+  } catch {
+    return 0;
+  }
+}
+function defaultKillChild(child) {
+  try {
+    child.kill("SIGTERM");
+  } catch {
+  }
+  const escalation = setTimeout(() => {
+    try {
+      child.kill("SIGKILL");
+    } catch {
+    }
+  }, KILL_ESCALATION_MS);
+  escalation.unref();
+}
+function checkSuccessorLiveness(child, logPath, config, deps = {}) {
+  const statLogBytes = deps.statLogBytes ?? defaultStatLogBytes;
+  const now = deps.now ?? Date.now;
+  const pollIntervalMs = deps.pollIntervalMs ?? DEFAULT_POLL_MS;
+  const killChild = deps.killChild ?? defaultKillChild;
+  const outputGateEnabled = Number.isFinite(config.noOutputMs) && config.noOutputMs > 0;
+  const startedAt = now();
+  return new Promise((resolve3) => {
+    let settled = false;
+    let pollTimer = null;
+    const onExit = (code, signal) => {
+      const elapsedMs = now() - startedAt;
+      finish({
+        ok: false,
+        reason: `child_exited_early: exit code ${code ?? "null"} signal ${signal ?? "none"} after ${elapsedMs}ms`,
+        detail: { exitCode: code, signal, elapsedMs }
+      });
+    };
+    const cleanup = () => {
+      if (pollTimer !== null) clearInterval(pollTimer);
+      child.off?.("exit", onExit);
+    };
+    const finish = (result) => {
+      if (settled) return;
+      settled = true;
+      cleanup();
+      if (!result.ok) {
+        try {
+          killChild(child);
+        } catch {
+        }
+      }
+      resolve3(result);
+    };
+    if (typeof child.exitCode === "number" || typeof child.signalCode === "string" && child.signalCode.length > 0) {
+      finish({
+        ok: false,
+        reason: `child_exited_early: exit code ${child.exitCode ?? "null"} signal ${child.signalCode ?? "none"} before the liveness watch attached`,
+        detail: { exitCode: child.exitCode ?? null, signal: child.signalCode ?? null, elapsedMs: 0 }
+      });
+      return;
+    }
+    child.on("exit", onExit);
+    const tick = () => {
+      if (settled) return;
+      const elapsedMs = now() - startedAt;
+      const outputSeen = outputGateEnabled ? statLogBytes(logPath) > 0 : true;
+      if (outputSeen && elapsedMs >= config.earlyExitMs) {
+        finish({ ok: true });
+        return;
+      }
+      if (outputGateEnabled && !outputSeen && elapsedMs >= config.noOutputMs) {
+        finish({
+          ok: false,
+          reason: `no_output: log stayed empty for ${elapsedMs}ms (limit ${config.noOutputMs}ms)`,
+          detail: { elapsedMs, logPath }
+        });
+      }
+    };
+    pollTimer = setInterval(tick, pollIntervalMs);
+    tick();
+  });
+}
+
 // src/tools/session/spawn-successor.ts
 var TOOL_NAME20 = "vo_spawn_successor";
 var MAX_HANDOFF_BYTES = 64e3;
@@ -5486,7 +5768,7 @@ var inputSchema20 = {
   additionalProperties: false
 };
 var RETIRED_COUNTER_INPUT = "spawns_so_far";
-var description20 = "Mode B auto-handoff (roadmap \xA73.4): spawn a DETACHED headless `claude -p` successor with a handoff doc pre-injected into its prompt. Defaults to the newest handoff in ~/.vo/handoffs/. Returns {spawned, pid, log_path, handoff_path}. The successor works under the same gates as any session (ADR-001: verify-before-act, human merge approval) \u2014 this tool never fires autonomously.";
+var description20 = "Mode B auto-handoff (roadmap \xA73.4): spawn a DETACHED headless `claude -p` successor with a handoff doc pre-injected into its prompt. Defaults to the newest handoff in ~/.vo/handoffs/. Verifies the child is actually alive (survives an early-exit window; an optional log-output window is off by default) before reporting success. Returns {spawned, pid, log_path, handoff_path}. The successor works under the same gates as any session (ADR-001: verify-before-act, human merge approval) \u2014 this tool never fires autonomously.";
 function isToolInput20(v) {
   if (typeof v !== "object" || v === null) return false;
   const o = v;
@@ -5504,7 +5786,7 @@ function retiredCounterRefusal(v) {
 }
 function newestHandoff(dir = join7(homedir5(), ".vo", "handoffs")) {
   try {
-    const entries = readdirSync3(dir).filter((f) => f.endsWith(".md")).map((f) => ({ f, m: statSync3(join7(dir, f)).mtimeMs })).sort((a, b) => b.m - a.m);
+    const entries = readdirSync3(dir).filter((f) => f.endsWith(".md")).map((f) => ({ f, m: statSync4(join7(dir, f)).mtimeMs })).sort((a, b) => b.m - a.m);
     return entries.length > 0 && entries[0] ? join7(dir, entries[0].f) : null;
   } catch {
     return null;
@@ -5542,97 +5824,14 @@ function buildSuccessorPrompt(handoffMarkdown, goal) {
   if (goal && goal.trim().length > 0) lines.push("", `OPERATOR GOAL OVERRIDE: ${goal.trim()}`);
   return lines.join("\n");
 }
-function buildSuccessorArgs(maxTurns) {
-  const args = ["-p", "--permission-mode", "acceptEdits"];
-  if (Number.isInteger(maxTurns) && maxTurns > 0) {
-    args.push("--max-turns", String(maxTurns));
-  }
-  return args;
-}
-function resolveSpawnPlan(env, input, nowIso, platform = process.platform, claim = claimSpawnSlot) {
-  const rawBinding = env[SWARM_TIER_BINDING_ENV];
-  const hasBinding = typeof rawBinding === "string" && rawBinding.trim().length > 0;
-  if (!hasBinding) {
-    const explicit = input.agent?.trim();
-    if (explicit) {
-      const resolved2 = resolveSuccessorLaunch({ agent: explicit, maxTurns: input.max_turns, platform });
-      if (!resolved2.ok) return { ok: false, reason: resolved2.reason, tier: "unbound" };
-      return {
-        ok: true,
-        bin: resolved2.bin,
-        args: resolved2.args,
-        agent: resolved2.agent,
-        tier: "unbound",
-        bound: false,
-        env: {},
-        slot: null,
-        capUsd: null,
-        capRemainingUsd: null
-      };
-    }
-    return {
-      ok: true,
-      bin: "claude",
-      args: buildSuccessorArgs(input.max_turns),
-      agent: "claude",
-      tier: "unbound",
-      bound: false,
-      env: {},
-      slot: null,
-      capUsd: null,
-      capRemainingUsd: null
-    };
-  }
-  const binding = inheritSwarmTierBinding(env, nowIso);
-  const admission = admitSubagentSpawn(binding);
-  if (!admission.allowed) {
-    return { ok: false, reason: admission.reason, tier: binding.tier };
-  }
-  const agentRefusal = agentBindingRefusal(binding, input.agent);
-  if (agentRefusal !== null) return { ok: false, reason: agentRefusal, tier: binding.tier };
-  const resolved = resolveSuccessorLaunch({
-    agent: binding.agent,
-    maxTurns: input.max_turns,
-    platform
-  });
-  if (!resolved.ok) return { ok: false, reason: resolved.reason, tier: binding.tier };
-  const slot = claim({
-    swarmId: binding.swarm_id,
-    proposedCeiling: binding.subagent_budget,
-    // The spend-cap POOL, recorded once per swarm exactly like the ceiling. The
-    // child's cap is DEBITED from it below, not recomputed from this binding.
-    proposedCapUsd: binding.spend_cap_usd,
-    dir: resolveLedgerDir(env),
-    nowIso
-  });
-  if (!slot.ok) return { ok: false, reason: slot.reason, tier: binding.tier };
-  return {
-    ok: true,
-    bin: resolved.bin,
-    args: resolved.args,
-    agent: resolved.agent,
-    tier: binding.tier,
-    bound: true,
-    // Re-export the same TIER with a DECREMENTED budget and the spend cap the
-    // ledger just DEBITED. Exporting the binding verbatim (what this did before
-    // #9312) meant the child re-read the full budget and every generation
-    // restarted at zero. Recomputing the cap from THIS binding (what #9312 did)
-    // bounded a chain but not a tree: three siblings each re-halved the parent's
-    // untouched $50 and walked away with $75 between them.
-    env: childBindingEnvFragment(binding, slot.capUsd),
-    slot: slot.slot,
-    capUsd: slot.capUsd,
-    capRemainingUsd: slot.capRemainingUsd
-  };
-}
-async function handleSpawnSuccessor(_deps, rawInput, _signal, spawnImpl = spawn) {
+async function handleSpawnSuccessor(_deps, rawInput, _signal, spawnImpl = spawn, overrides = {}) {
   const retired = retiredCounterRefusal(rawInput);
   if (retired !== null) throw invalidParams(TOOL_NAME20, retired);
   if (!isToolInput20(rawInput)) {
     throw invalidParams(TOOL_NAME20, "invalid input. Optional: { handoff_path, goal, cwd, max_turns, agent }.");
   }
   const handoffPath = rawInput.handoff_path?.trim() || newestHandoff();
-  if (!handoffPath || !existsSync4(handoffPath)) {
+  if (!handoffPath || !existsSync5(handoffPath)) {
     return jsonContent({
       tool: TOOL_NAME20,
       schema_version: 1,
@@ -5657,27 +5856,52 @@ async function handleSpawnSuccessor(_deps, rawInput, _signal, spawnImpl = spawn)
       }
     });
   }
+  const platform = overrides.platform ?? process.platform;
+  let resolvedBin = plan.bin;
+  if (platform === "win32") {
+    const resolution = resolveNativeWindowsExecutable(plan.bin, process.env, overrides.resolveWindowsExecutable);
+    if (!resolution.ok) {
+      return jsonContent({
+        tool: TOOL_NAME20,
+        schema_version: 1,
+        payload: {
+          spawned: false,
+          reason: resolution.reason,
+          agent: plan.agent,
+          tier: plan.tier,
+          handoff_path: handoffPath
+        }
+      });
+    }
+    resolvedBin = resolution.bin;
+  }
   const logDir = process.env["VO_MCP_SUCCESSOR_LOG_DIR"]?.trim() || join7(homedir5(), ".vo", "successors");
   mkdirSync4(logDir, { recursive: true });
   const logPath = join7(logDir, `successor-${Date.now()}.log`);
   const logFd = openSync2(logPath, "a");
-  const child = spawnImpl(plan.bin, [...plan.args], {
+  const child = spawnImpl(resolvedBin, [...plan.args], {
     cwd: rawInput.cwd?.trim() || process.cwd(),
     detached: true,
     stdio: ["pipe", logFd, logFd],
-    // Windows: the agent CLIs are .cmd shims — they need a shell to resolve.
-    // The prompt goes via STDIN below, never argv, so the shell never sees it.
-    shell: process.platform === "win32",
+    // Never a shell: `resolvedBin` is either the bare platform-neutral name
+    // (POSIX, resolved by the OS via PATH + shebang) or the native win32 exe
+    // resolved above — routing either through cmd.exe/sh is the extra layer
+    // a detached, unref'd child can lose silently (2026-08-16 incident).
+    shell: false,
     windowsHide: true,
+    windowsVerbatimArguments: false,
     // Carry the SAME binding to the child. Without this the successor inherits
     // no tier and re-resolves its own — which is the split-payer defect one
     // generation down.
     ...plan.bound ? { env: { ...process.env, ...plan.env } } : {}
   });
+  closeSync2(logFd);
   let spawnError = null;
   child.on("error", (e) => {
     spawnError = e.message;
   });
+  child.stdin.on?.("error", () => {
+  });
   try {
     child.stdin.write(prompt);
     child.stdin.end();
@@ -5685,10 +5909,40 @@ async function handleSpawnSuccessor(_deps, rawInput, _signal, spawnImpl = spawn)
   }
   child.unref();
   await new Promise((r) => setTimeout(r, 150));
+  if (spawnError) {
+    return jsonContent({
+      tool: TOOL_NAME20,
+      schema_version: 1,
+      payload: {
+        spawned: false,
+        reason: `spawn failed: ${spawnError}`,
+        agent: plan.agent,
+        tier: plan.tier,
+        handoff_path: handoffPath
+      }
+    });
+  }
+  const checkLiveness = overrides.checkLiveness ?? ((c, p) => checkSuccessorLiveness(c, p, resolveLivenessConfigFromEnv(process.env, overrides.livenessConfig), overrides.livenessDeps));
+  const liveness = await checkLiveness(child, logPath);
+  if (!liveness.ok) {
+    return jsonContent({
+      tool: TOOL_NAME20,
+      schema_version: 1,
+      payload: {
+        spawned: false,
+        reason: liveness.reason,
+        pid: child.pid ?? null,
+        log_path: logPath,
+        agent: plan.agent,
+        tier: plan.tier,
+        handoff_path: handoffPath
+      }
+    });
+  }
   return jsonContent({
     tool: TOOL_NAME20,
     schema_version: 1,
-    payload: spawnError ? { spawned: false, reason: `spawn failed: ${spawnError}`, agent: plan.agent, tier: plan.tier, handoff_path: handoffPath } : {
+    payload: {
       spawned: true,
       pid: child.pid ?? null,
       log_path: logPath,
@@ -5700,7 +5954,10 @@ async function handleSpawnSuccessor(_deps, rawInput, _signal, spawnImpl = spawn)
       // The debit, surfaced so an operator can reconcile a fan-out's spend
       // against the pool without reading the ledger directory by hand.
       ledger_cap_usd: plan.capUsd,
-      ledger_cap_remaining_usd: plan.capRemainingUsd
+      ledger_cap_remaining_usd: plan.capRemainingUsd,
+      // Additive (2026-08-17): true only once the child survived the
+      // early-exit window (and the output window, when that gate is enabled).
+      verified_alive: true
     }
   });
 }
@@ -5787,22 +6044,22 @@ async function handleConciergeDispatch(deps, rawInput, _signal) {
 }
 
 // src/tools/memory/sync-config.ts
-import { existsSync as existsSync8 } from "node:fs";
+import { existsSync as existsSync9 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
 import { join as join11 } from "node:path";
 
 // src/tools/memory/memory-sync-http.ts
 init_safe_memory_file();
-import { existsSync as existsSync5, mkdirSync as mkdirSync6, readFileSync as readFileSync11, writeFileSync as writeFileSync6, readdirSync as readdirSync4 } from "node:fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync6, readFileSync as readFileSync11, writeFileSync as writeFileSync6, readdirSync as readdirSync4 } from "node:fs";
 
 // src/tools/memory/sync-lock.ts
-import { closeSync as closeSync2, mkdirSync as mkdirSync5, openSync as openSync3, readFileSync as readFileSync9, unlinkSync as unlinkSync2, writeFileSync as writeFileSync4 } from "node:fs";
+import { closeSync as closeSync3, mkdirSync as mkdirSync5, openSync as openSync3, readFileSync as readFileSync9, unlinkSync as unlinkSync2, writeFileSync as writeFileSync4 } from "node:fs";
 import { hostname } from "node:os";
 import { join as join8 } from "node:path";
 import { randomUUID as randomUUID2 } from "node:crypto";
 
 // src/tools/memory/sync-lock-liveness.ts
-import { statSync as statSync4, readFileSync as readFileSync8 } from "node:fs";
+import { statSync as statSync5, readFileSync as readFileSync8 } from "node:fs";
 function defaultIsProcessAlive(pid) {
   try {
     process.kill(pid, 0);
@@ -5828,10 +6085,10 @@ function toPayload(parsed) {
     acquiredAtMs: typeof acquiredAtMs === "number" && Number.isFinite(acquiredAtMs) ? acquiredAtMs : Number.NaN
   };
 }
-function readLockRecord(path3) {
+function readLockRecord(path4) {
   let raw;
   try {
-    raw = readFileSync8(path3, "utf8");
+    raw = readFileSync8(path4, "utf8");
   } catch {
     return null;
   }
@@ -5841,7 +6098,7 @@ function readLockRecord(path3) {
     return { raw, payload: null };
   }
 }
-function lockAgeMs(record, path3, nowMs) {
+function lockAgeMs(record, path4, nowMs) {
   let startedMs = Number.NaN;
   if (record.payload) {
     if (Number.isFinite(record.payload.acquiredAtMs)) {
@@ -5852,7 +6109,7 @@ function lockAgeMs(record, path3, nowMs) {
   }
   if (!Number.isFinite(startedMs)) {
     try {
-      startedMs = statSync4(path3).mtimeMs;
+      startedMs = statSync5(path4).mtimeMs;
     } catch {
       return null;
     }
@@ -5885,10 +6142,10 @@ var BACKOFF_FACTOR = 1.6;
 function positiveOr(value, fallback) {
   return typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : fallback;
 }
-function createExclusive2(path3, contents) {
+function createExclusive2(path4, contents) {
   let fd;
   try {
-    fd = openSync3(path3, "wx");
+    fd = openSync3(path4, "wx");
   } catch (err) {
     const code = err.code;
     return { ok: false, exists: code === "EEXIST", message: err instanceof Error ? err.message : String(err) };
@@ -5896,37 +6153,37 @@ function createExclusive2(path3, contents) {
   try {
     writeFileSync4(fd, contents, "utf8");
   } catch (err) {
-    closeSync2(fd);
+    closeSync3(fd);
     try {
-      unlinkSync2(path3);
+      unlinkSync2(path4);
     } catch {
     }
     return { ok: false, exists: false, message: err instanceof Error ? err.message : String(err) };
   }
-  closeSync2(fd);
+  closeSync3(fd);
   return { ok: true };
 }
-function removeAbandoned(path3, expectedRaw) {
+function removeAbandoned(path4, expectedRaw) {
   let current;
   try {
-    current = readFileSync9(path3, "utf8");
+    current = readFileSync9(path4, "utf8");
   } catch {
     return;
   }
   if (current !== expectedRaw) return;
   try {
-    unlinkSync2(path3);
+    unlinkSync2(path4);
   } catch {
   }
 }
-function makeRelease(path3, token) {
+function makeRelease(path4, token) {
   let released = false;
   return () => {
     if (released) return;
     released = true;
     let raw;
     try {
-      raw = readFileSync9(path3, "utf8");
+      raw = readFileSync9(path4, "utf8");
     } catch {
       return;
     }
@@ -5938,7 +6195,7 @@ function makeRelease(path3, token) {
     }
     if (!stillOurs) return;
     try {
-      unlinkSync2(path3);
+      unlinkSync2(path4);
     } catch {
     }
   };
@@ -5957,7 +6214,7 @@ async function acquireMemorySyncLock(options) {
   }));
   const isProcessAlive = options.isProcessAlive ?? defaultIsProcessAlive;
   const thisHost = hostname();
-  const path3 = join8(options.memoryDir, MEMORY_SYNC_LOCK_FILE);
+  const path4 = join8(options.memoryDir, MEMORY_SYNC_LOCK_FILE);
   if (options.createDir === true) mkdirSync5(options.memoryDir, { recursive: true });
   const deadline = now() + waitMs;
   let backoffMs = INITIAL_BACKOFF_MS;
@@ -5973,30 +6230,30 @@ async function acquireMemorySyncLock(options) {
       acquiredAt: new Date(acquiredAtMs).toISOString(),
       acquiredAtMs
     };
-    const created = createExclusive2(path3, `${JSON.stringify(payload, null, 2)}
+    const created = createExclusive2(path4, `${JSON.stringify(payload, null, 2)}
 `);
     if (created.ok) {
-      return { path: path3, payload, tookOverFrom, release: makeRelease(path3, payload.token) };
+      return { path: path4, payload, tookOverFrom, release: makeRelease(path4, payload.token) };
     }
     if (!created.exists) {
       throw new Error(
-        `memory sync lock ${path3} could not be created (${created.message}) \u2014 refusing to sync without exclusion`
+        `memory sync lock ${path4} could not be created (${created.message}) \u2014 refusing to sync without exclusion`
       );
     }
-    const record = readLockRecord(path3);
+    const record = readLockRecord(path4);
     let reclaimed = false;
     if (record) {
       holderDescription = describeHolder(record);
-      const age = lockAgeMs(record, path3, now());
+      const age = lockAgeMs(record, path4, now());
       if (isLockAbandoned(record, age, ttlMs, isProcessAlive, thisHost)) {
         tookOverFrom = record.payload;
-        removeAbandoned(path3, record.raw);
+        removeAbandoned(path4, record.raw);
         reclaimed = true;
       }
     }
     if (now() >= deadline) {
       throw new Error(
-        `memory sync lock ${path3} is held by ${holderDescription}; waited ${waitMs}ms \u2014 refusing to sync unlocked (concurrent memory writes corrupt the shared index). If that holder is provably gone, delete the lock file.`
+        `memory sync lock ${path4} is held by ${holderDescription}; waited ${waitMs}ms \u2014 refusing to sync unlocked (concurrent memory writes corrupt the shared index). If that holder is provably gone, delete the lock file.`
       );
     }
     if (reclaimed) backoffMs = INITIAL_BACKOFF_MS;
@@ -6148,7 +6405,7 @@ async function uploadOne(item, controlPlaneUrl, token, sessionId, fetchFn, deadl
 }
 async function pushMemory(controlPlaneUrl, token, memoryDir, sessionId, fetchFn, options = {}) {
   const empty = { pushed: 0, created: 0, updated: 0, skipped: 0, indexRowsPreserved: 0 };
-  if (!existsSync5(memoryDir)) {
+  if (!existsSync6(memoryDir)) {
     return empty;
   }
   const localFiles = listPushableFiles(memoryDir).map((f) => ({
@@ -6236,7 +6493,7 @@ init_bounded_sync();
 init_memory_push_cache();
 
 // src/tools/memory/sync-kill-switch.ts
-import { existsSync as existsSync6, readFileSync as readFileSync12 } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync12 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
 import { join as join10 } from "node:path";
 var MEMORY_SYNC_DISABLE_ENV = "VO_MCP_DISABLE_MEMORY_SYNC";
@@ -6259,7 +6516,7 @@ function clip(raw) {
 function evaluateMemorySyncKillSwitch(deps = {}) {
   const env = deps.env ?? process.env;
   const home = deps.home ?? homedir6();
-  const fileExists = deps.fileExists ?? existsSync6;
+  const fileExists = deps.fileExists ?? existsSync7;
   const readFile3 = deps.readFile ?? ((p) => readFileSync12(p, "utf8"));
   const fired = [];
   const rawEnv = env[MEMORY_SYNC_DISABLE_ENV];
@@ -6343,7 +6600,7 @@ async function runMemorySync(action, cwd, sessionId, fetchFn = globalThis.fetch,
   }
   const memoryDir = getMemoryDir(cwd);
   const baseUrl = controlPlaneUrl.replace(/\/+$/, "");
-  if (action === "push" && !existsSync8(memoryDir)) {
+  if (action === "push" && !existsSync9(memoryDir)) {
     return {
       synced: true,
       action: "push",
@@ -6524,10 +6781,10 @@ async function getCloudAuth(fetchFn) {
   if (!token) return { ok: false, reason: "Failed to obtain auth token. Run `vo-mcp login` again." };
   return { ok: true, controlPlaneUrl, token };
 }
-async function callPrivateKnowledge(path3, body, fetchFn) {
+async function callPrivateKnowledge(path4, body, fetchFn) {
   const auth = await getCloudAuth(fetchFn);
   if (!auth.ok) return { ok: false, reason: auth.reason };
-  const response = await fetchFn(`${auth.controlPlaneUrl}${path3}`, {
+  const response = await fetchFn(`${auth.controlPlaneUrl}${path4}`, {
     method: "POST",
     headers: {
       authorization: `Bearer ${auth.token}`,
@@ -6744,11 +7001,11 @@ async function handleHqWhiteboardRead(_deps, rawInput, signal) {
 }
 
 // src/tools/skills/skill-corpus.ts
-import { existsSync as existsSync9, statSync as statSync6 } from "node:fs";
+import { existsSync as existsSync10, statSync as statSync7 } from "node:fs";
 import { dirname as dirname5, isAbsolute, join as join13, resolve as resolve2 } from "node:path";
 
 // ../skill-registry/src/loader.ts
-import { readdirSync as readdirSync6, readFileSync as readFileSync14, statSync as statSync5 } from "node:fs";
+import { readdirSync as readdirSync6, readFileSync as readFileSync14, statSync as statSync6 } from "node:fs";
 import { join as join12 } from "node:path";
 var InvalidSkillFrontmatterError = class extends Error {
   constructor(skillFile, reason) {
@@ -6805,7 +7062,7 @@ function loadSkillsFromDir(skillsDir) {
     const entryPath = join12(skillsDir, entry);
     let stat;
     try {
-      stat = statSync5(entryPath);
+      stat = statSync6(entryPath);
     } catch {
       continue;
     }
@@ -6854,12 +7111,12 @@ function resolveSkillsDir(env = process.env, startDir = process.cwd()) {
   const override = env.VO_SKILLS_DIR;
   if (typeof override === "string" && override.length > 0) {
     const abs = isAbsolute(override) ? override : resolve2(startDir, override);
-    return existsSync9(abs) && statSync6(abs).isDirectory() ? abs : null;
+    return existsSync10(abs) && statSync7(abs).isDirectory() ? abs : null;
   }
   let dir = resolve2(startDir);
   for (let i = 0; i < MAX_WALK_UP_LEVELS; i += 1) {
     const candidate = join13(dir, ".claude", "skills");
-    if (existsSync9(candidate) && statSync6(candidate).isDirectory()) return candidate;
+    if (existsSync10(candidate) && statSync7(candidate).isDirectory()) return candidate;
     const parent = dirname5(dir);
     if (parent === dir) break;
     dir = parent;