@askexenow/exe-os 0.8.33 → 0.8.37

package/dist/bin/exe-new-employee.js

@@ -106,19 +106,27 @@ var init_config = __esm({
   }
 });
 
+// src/lib/db-retry.ts
+var init_db_retry = __esm({
+  "src/lib/db-retry.ts"() {
+    "use strict";
+  }
+});
+
 // src/lib/database.ts
 import { createClient } from "@libsql/client";
 function getClient() {
-  if (!_client) {
+  if (!_resilientClient) {
     throw new Error("Database client not initialized. Call initDatabase() first.");
   }
-  return _client;
+  return _resilientClient;
 }
-var _client;
+var _resilientClient;
 var init_database = __esm({
   "src/lib/database.ts"() {
     "use strict";
-    _client = null;
+    init_db_retry();
+    _resilientClient = null;
   }
 });
 
@@ -142,6 +150,7 @@ function getTemplateForTitle(title) {
   if (t.includes("engineer") || t.includes("developer")) return IDENTITY_TEMPLATES["principal-engineer"];
   if (t.includes("content") || t.includes("production")) return IDENTITY_TEMPLATES["content-specialist"];
   if (t.includes("ai") || t.includes("product lead") || t.includes("specialist") && !t.includes("content")) return IDENTITY_TEMPLATES["ai-specialist"];
+  if (t.includes("review") || t.includes("audit") || t.includes("qa")) return IDENTITY_TEMPLATES["staff-code-reviewer"];
   return null;
 }
 var POST_WORK_CHECKLIST, IDENTITY_TEMPLATES;
@@ -224,6 +233,7 @@ Never say "I have no memories" without first searching broadly. Your memory may
 - **create_task** \u2014 assign work to specialists with clear specs
 - **update_task / close_task** \u2014 finalize reviews, mark work done
 - **store_behavior** \u2014 record corrections as behavioral rules (p0/p1/p2)
+- **update_identity** \u2014 rewrite any agent's identity when role/responsibilities change (exe/founder only)
 - **get_identity** \u2014 read any agent's identity for coordination
 - **send_message** \u2014 direct intercom to employees
 
@@ -587,6 +597,55 @@ You are the AI Product Lead \u2014 the competitive intelligence engine. You stud
 - Every recommendation includes cost/quality/latency tradeoff analysis
 - Separate experimental from production-ready \u2014 label clearly
 - If you can't verify, say so explicitly: "Couldn't verify because X"
+`,
+      "staff-code-reviewer": `---
+role: staff-code-reviewer
+title: Staff Code Reviewer & System Auditor
+agent_id: bob
+org_level: specialist
+created_by: system
+updated_at: ${(/* @__PURE__ */ new Date()).toISOString()}
+---
+## Identity
+
+You are \${agent_id}. Staff Code Reviewer and System Auditor. Last line of defense before code ships to customers. You catch what developers miss \u2014 systemic patterns that make entire feature categories break.
+
+## The 7 Audit Patterns (MANDATORY)
+
+1. **"Works on dev, breaks on user install"** \u2014 scoped paths, npm resolution, deps
+2. **"Two code paths, one untested"** \u2014 binary symlink vs /exe-call, verify BOTH
+3. **"Case sensitivity kills non-technical users"** \u2014 normalize all user inputs
+4. **"Hardcoded names in runtime logic"** \u2014 grep for employee names, must use roles
+5. **"Installer doesn't self-heal"** \u2014 npm update must auto-fix stale hooks/paths
+6. **"Data written but invisible"** \u2014 agent_id mismatch between writer and reader
+7. **"Partial fixes miss inline refs"** \u2014 before/after grep count is mandatory
+
+## Method
+
+1. Read actual source code
+2. Send to Codex MCP for sweep
+3. Validate against ARCHITECTURE.md
+4. Trace identity chain with CUSTOM-NAMED employee ("jarvis" as CTO)
+5. Before/after grep count for every fix
+6. Structured report: PASS/FAIL per item
+
+## Tools
+
+- **Codex MCP** \u2014 first tool for every review
+- **recall_my_memory / ask_team_memory** \u2014 past audit findings
+- **store_behavior** \u2014 record new patterns
+- **update_task** \u2014 mark reviews done with structured findings
+- **create_task** \u2014 assign fixes to the CTO
+
+## Completion Workflow
+
+1. Read the task brief and understand the audit scope
+2. Run the audit using all 7 patterns
+3. Write report to exe/output/ with file:line references
+4. Fix findings yourself if possible
+5. Call **update_task** with status "done" and finding count
+6. Call **store_memory** with audit summary
+7. Check for next task \u2014 auto-chain
 `
     };
   }
@@ -601,7 +660,7 @@ __export(identity_exports, {
   listIdentities: () => listIdentities,
   updateIdentity: () => updateIdentity
 });
-import { existsSync as existsSync5, mkdirSync as mkdirSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync5, mkdirSync as mkdirSync2, readFileSync as readFileSync5, writeFileSync as writeFileSync2 } from "fs";
 import { readdirSync } from "fs";
 import path5 from "path";
 import { createHash } from "crypto";
@@ -653,7 +712,7 @@ function contentHash(content) {
 function getIdentity(agentId) {
   const filePath = identityPath(agentId);
   if (!existsSync5(filePath)) return null;
-  const raw = readFileSync4(filePath, "utf-8");
+  const raw = readFileSync5(filePath, "utf-8");
   const { frontmatter, body } = parseFrontmatter(raw);
   return {
     agentId,
@@ -734,7 +793,7 @@ import path6 from "path";
 // src/lib/employees.ts
 init_config();
 import { readFile as readFile2, writeFile as writeFile2, mkdir as mkdir2 } from "fs/promises";
-import { existsSync as existsSync2, symlinkSync, readlinkSync } from "fs";
+import { existsSync as existsSync2, symlinkSync, readlinkSync, readFileSync as readFileSync2 } from "fs";
 import { execSync } from "child_process";
 import path2 from "path";
 var EMPLOYEES_PATH = path2.join(EXE_AI_DIR, "exe-employees.json");
@@ -1095,6 +1154,32 @@ When you analyze a repo:
 Every analysis must answer: "Should we build this? If yes, how hard? If no, why not?"
 
 Maintain a clear separation between experimental (for evaluation) and production-ready (for shipping). Never recommend something you haven't read the source code for.`
+  },
+  bob: {
+    name: "bob",
+    role: "Staff Code Reviewer",
+    systemPrompt: `You are bob, the Staff Code Reviewer and System Auditor. You are the last line of defense before code ships to customers. You catch what developers miss \u2014 not just code bugs, but systemic patterns that make entire feature categories break. You report to the COO.
+
+Your core job: audit code, find bugs, verify fixes, and ensure customer-readiness. Every audit answers: "Would this break for a customer who customized their setup?"
+
+The 7 Audit Patterns (MANDATORY \u2014 apply to EVERY audit):
+1. "Works on dev, breaks on user install" \u2014 verify scoped paths, npm resolution, dependencies
+2. "Two code paths, one untested" \u2014 binary symlink vs /exe-call, CLI vs MCP \u2014 verify BOTH
+3. "Case sensitivity kills non-technical users" \u2014 normalize all user inputs
+4. "Hardcoded names leak into user-facing content" \u2014 grep for employee names in runtime logic
+5. "Installer doesn't self-heal on update" \u2014 npm update must auto-fix stale hooks/paths
+6. "Data written but invisible to the agent" \u2014 verify query path retrieves stored data
+7. "Partial fixes that miss inline references" \u2014 before/after grep count is mandatory
+
+Audit method:
+1. Read the actual source code \u2014 not summaries
+2. Send to Codex MCP for initial sweep
+3. Validate against ARCHITECTURE.md
+4. Trace full identity chain with a CUSTOM-NAMED employee (e.g., "jarvis" as CTO)
+5. Count matches before and after any claimed fix
+6. Write structured report with PASS/FAIL per item
+
+After an audit, fix the findings yourself if you can. Don't hand off when you have the context.`
   }
 };
 function buildCustomEmployeePrompt(name, role) {
@@ -1125,12 +1210,12 @@ function isMainModule(importMetaUrl) {
 
 // src/lib/plan-limits.ts
 init_database();
-import { readFileSync as readFileSync3, existsSync as existsSync4 } from "fs";
+import { readFileSync as readFileSync4, existsSync as existsSync4 } from "fs";
 import path4 from "path";
 
 // src/lib/license.ts
 init_config();
-import { readFileSync as readFileSync2, writeFileSync, existsSync as existsSync3, mkdirSync } from "fs";
+import { readFileSync as readFileSync3, writeFileSync, existsSync as existsSync3, mkdirSync } from "fs";
 import { randomUUID } from "crypto";
 import path3 from "path";
 import { jwtVerify, importSPKI } from "jose";
@@ -1163,14 +1248,14 @@ function loadDeviceId() {
   const deviceJsonPath = path3.join(EXE_AI_DIR, "device.json");
   try {
     if (existsSync3(deviceJsonPath)) {
-      const data = JSON.parse(readFileSync2(deviceJsonPath, "utf8"));
+      const data = JSON.parse(readFileSync3(deviceJsonPath, "utf8"));
       if (data.deviceId) return data.deviceId;
     }
   } catch {
   }
   try {
     if (existsSync3(DEVICE_ID_PATH)) {
-      const id2 = readFileSync2(DEVICE_ID_PATH, "utf8").trim();
+      const id2 = readFileSync3(DEVICE_ID_PATH, "utf8").trim();
       if (id2) return id2;
     }
   } catch {
@@ -1183,7 +1268,7 @@ function loadDeviceId() {
 function loadLicense() {
   try {
     if (!existsSync3(LICENSE_PATH)) return null;
-    return readFileSync2(LICENSE_PATH, "utf8").trim();
+    return readFileSync3(LICENSE_PATH, "utf8").trim();
   } catch {
     return null;
   }
@@ -1213,7 +1298,7 @@ async function verifyLicenseJwt(token) {
 async function getCachedLicense() {
   try {
     if (!existsSync3(CACHE_PATH)) return null;
-    const raw = JSON.parse(readFileSync2(CACHE_PATH, "utf8"));
+    const raw = JSON.parse(readFileSync3(CACHE_PATH, "utf8"));
     if (!raw.token || typeof raw.token !== "string") return null;
     return await verifyLicenseJwt(raw.token);
   } catch {

package/dist/bin/exe-pending-messages.js

@@ -14,12 +14,68 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// src/lib/db-retry.ts
+function isBusyError(err) {
+  if (err instanceof Error) {
+    const msg = err.message.toLowerCase();
+    return msg.includes("sqlite_busy") || msg.includes("database is locked");
+  }
+  return false;
+}
+function delay(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function retryOnBusy(fn, label) {
+  let lastError;
+  for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+    try {
+      return await fn();
+    } catch (err) {
+      lastError = err;
+      if (!isBusyError(err) || attempt === MAX_RETRIES) {
+        throw err;
+      }
+      const backoff = BASE_DELAY_MS * Math.pow(2, attempt);
+      const jitter = Math.floor(Math.random() * MAX_JITTER_MS);
+      process.stderr.write(
+        `[exe-os] SQLITE_BUSY ${label} retry ${attempt + 1}/${MAX_RETRIES} \u2014 waiting ${backoff + jitter}ms
+`
+      );
+      await delay(backoff + jitter);
+    }
+  }
+  throw lastError;
+}
+function wrapWithRetry(client) {
+  return new Proxy(client, {
+    get(target, prop, receiver) {
+      if (prop === "execute") {
+        return (sql) => retryOnBusy(() => target.execute(sql), "execute");
+      }
+      if (prop === "batch") {
+        return (stmts) => retryOnBusy(() => target.batch(stmts), "batch");
+      }
+      return Reflect.get(target, prop, receiver);
+    }
+  });
+}
+var MAX_RETRIES, BASE_DELAY_MS, MAX_JITTER_MS;
+var init_db_retry = __esm({
+  "src/lib/db-retry.ts"() {
+    "use strict";
+    MAX_RETRIES = 3;
+    BASE_DELAY_MS = 200;
+    MAX_JITTER_MS = 300;
+  }
+});
+
 // src/lib/database.ts
 import { createClient } from "@libsql/client";
 async function initDatabase(config) {
   if (_client) {
     _client.close();
     _client = null;
+    _resilientClient = null;
   }
   const opts = {
     url: `file:${config.dbPath}`
@@ -28,17 +84,24 @@ async function initDatabase(config) {
     opts.encryptionKey = config.encryptionKey;
   }
   _client = createClient(opts);
+  _resilientClient = wrapWithRetry(_client);
 }
 function getClient() {
+  if (!_resilientClient) {
+    throw new Error("Database client not initialized. Call initDatabase() first.");
+  }
+  return _resilientClient;
+}
+function getRawClient() {
   if (!_client) {
     throw new Error("Database client not initialized. Call initDatabase() first.");
   }
   return _client;
 }
 async function ensureSchema() {
-  const client = getClient();
+  const client = getRawClient();
   await client.execute("PRAGMA journal_mode = WAL");
-  await client.execute("PRAGMA busy_timeout = 5000");
+  await client.execute("PRAGMA busy_timeout = 30000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -827,11 +890,13 @@ async function ensureSchema() {
     }
   }
 }
-var _client, initTurso;
+var _client, _resilientClient, initTurso;
 var init_database = __esm({
   "src/lib/database.ts"() {
     "use strict";
+    init_db_retry();
     _client = null;
+    _resilientClient = null;
     initTurso = initDatabase;
   }
 });
@@ -1083,7 +1148,7 @@ function listShards() {
 }
 async function ensureShardSchema(client) {
   await client.execute("PRAGMA journal_mode = WAL");
-  await client.execute("PRAGMA busy_timeout = 5000");
+  await client.execute("PRAGMA busy_timeout = 30000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -1338,7 +1403,7 @@ var init_intercom_queue = __esm({
 
 // src/lib/employees.ts
 import { readFile as readFile3, writeFile as writeFile3, mkdir as mkdir3 } from "fs/promises";
-import { existsSync as existsSync5, symlinkSync, readlinkSync } from "fs";
+import { existsSync as existsSync5, symlinkSync, readlinkSync, readFileSync as readFileSync3 } from "fs";
 import { execSync as execSync3 } from "child_process";
 import path6 from "path";
 var EMPLOYEES_PATH;
@@ -1351,7 +1416,7 @@ var init_employees = __esm({
 });
 
 // src/lib/license.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, existsSync as existsSync6, mkdirSync as mkdirSync3 } from "fs";
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync2, existsSync as existsSync6, mkdirSync as mkdirSync3 } from "fs";
 import { randomUUID } from "crypto";
 import path7 from "path";
 import { jwtVerify, importSPKI } from "jose";
@@ -1367,7 +1432,7 @@ var init_license = __esm({
 });
 
 // src/lib/plan-limits.ts
-import { readFileSync as readFileSync4, existsSync as existsSync7 } from "fs";
+import { readFileSync as readFileSync5, existsSync as existsSync7 } from "fs";
 import path8 from "path";
 var CACHE_PATH2;
 var init_plan_limits = __esm({
@@ -1385,7 +1450,7 @@ var init_plan_limits = __esm({
 import path9 from "path";
 import os4 from "os";
 import { fileURLToPath } from "url";
-var SESSION_CACHE, INTERCOM_LOG2, DEBOUNCE_FILE, DEBOUNCE_CLEANUP_AGE_MS;
+var SPAWN_LOCK_DIR, SESSION_CACHE, INTERCOM_LOG2, DEBOUNCE_FILE, DEBOUNCE_CLEANUP_AGE_MS;
 var init_tmux_routing = __esm({
   "src/lib/tmux-routing.ts"() {
     "use strict";
@@ -1397,6 +1462,7 @@ var init_tmux_routing = __esm({
     init_provider_table();
     init_intercom_queue();
     init_plan_limits();
+    SPAWN_LOCK_DIR = path9.join(os4.homedir(), ".exe-os", "spawn-locks");
     SESSION_CACHE = path9.join(os4.homedir(), ".exe-os", "session-cache");
     INTERCOM_LOG2 = path9.join(os4.homedir(), ".exe-os", "intercom.log");
     DEBOUNCE_FILE = path9.join(SESSION_CACHE, "intercom-debounce.json");

package/dist/bin/exe-pending-notifications.js

@@ -262,7 +262,7 @@ function listShards() {
 }
 async function ensureShardSchema(client) {
   await client.execute("PRAGMA journal_mode = WAL");
-  await client.execute("PRAGMA busy_timeout = 5000");
+  await client.execute("PRAGMA busy_timeout = 30000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -448,12 +448,65 @@ var init_shard_manager = __esm({
 
 // src/lib/database.ts
 import { createClient } from "@libsql/client";
+
+// src/lib/db-retry.ts
+var MAX_RETRIES = 3;
+var BASE_DELAY_MS = 200;
+var MAX_JITTER_MS = 300;
+function isBusyError(err) {
+  if (err instanceof Error) {
+    const msg = err.message.toLowerCase();
+    return msg.includes("sqlite_busy") || msg.includes("database is locked");
+  }
+  return false;
+}
+function delay(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function retryOnBusy(fn, label) {
+  let lastError;
+  for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+    try {
+      return await fn();
+    } catch (err) {
+      lastError = err;
+      if (!isBusyError(err) || attempt === MAX_RETRIES) {
+        throw err;
+      }
+      const backoff = BASE_DELAY_MS * Math.pow(2, attempt);
+      const jitter = Math.floor(Math.random() * MAX_JITTER_MS);
+      process.stderr.write(
+        `[exe-os] SQLITE_BUSY ${label} retry ${attempt + 1}/${MAX_RETRIES} \u2014 waiting ${backoff + jitter}ms
+`
+      );
+      await delay(backoff + jitter);
+    }
+  }
+  throw lastError;
+}
+function wrapWithRetry(client) {
+  return new Proxy(client, {
+    get(target, prop, receiver) {
+      if (prop === "execute") {
+        return (sql) => retryOnBusy(() => target.execute(sql), "execute");
+      }
+      if (prop === "batch") {
+        return (stmts) => retryOnBusy(() => target.batch(stmts), "batch");
+      }
+      return Reflect.get(target, prop, receiver);
+    }
+  });
+}
+
+// src/lib/database.ts
 var _client = null;
+var _resilientClient = null;
 var initTurso = initDatabase;
 async function initDatabase(config) {
   if (_client) {
     _client.close();
     _client = null;
+    _resilientClient = null;
   }
   const opts = {
     url: `file:${config.dbPath}`
@@ -462,17 +515,24 @@ async function initDatabase(config) {
     opts.encryptionKey = config.encryptionKey;
   }
   _client = createClient(opts);
+  _resilientClient = wrapWithRetry(_client);
 }
 function getClient() {
+  if (!_resilientClient) {
+    throw new Error("Database client not initialized. Call initDatabase() first.");
+  }
+  return _resilientClient;
+}
+function getRawClient() {
   if (!_client) {
     throw new Error("Database client not initialized. Call initDatabase() first.");
   }
   return _client;
 }
 async function ensureSchema() {
-  const client = getClient();
+  const client = getRawClient();
   await client.execute("PRAGMA journal_mode = WAL");
-  await client.execute("PRAGMA busy_timeout = 5000");
+  await client.execute("PRAGMA busy_timeout = 30000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {

package/dist/bin/exe-pending-reviews.js

@@ -15,12 +15,68 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// src/lib/db-retry.ts
+function isBusyError(err) {
+  if (err instanceof Error) {
+    const msg = err.message.toLowerCase();
+    return msg.includes("sqlite_busy") || msg.includes("database is locked");
+  }
+  return false;
+}
+function delay(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function retryOnBusy(fn, label) {
+  let lastError;
+  for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+    try {
+      return await fn();
+    } catch (err) {
+      lastError = err;
+      if (!isBusyError(err) || attempt === MAX_RETRIES) {
+        throw err;
+      }
+      const backoff = BASE_DELAY_MS * Math.pow(2, attempt);
+      const jitter = Math.floor(Math.random() * MAX_JITTER_MS);
+      process.stderr.write(
+        `[exe-os] SQLITE_BUSY ${label} retry ${attempt + 1}/${MAX_RETRIES} \u2014 waiting ${backoff + jitter}ms
+`
+      );
+      await delay(backoff + jitter);
+    }
+  }
+  throw lastError;
+}
+function wrapWithRetry(client) {
+  return new Proxy(client, {
+    get(target, prop, receiver) {
+      if (prop === "execute") {
+        return (sql) => retryOnBusy(() => target.execute(sql), "execute");
+      }
+      if (prop === "batch") {
+        return (stmts) => retryOnBusy(() => target.batch(stmts), "batch");
+      }
+      return Reflect.get(target, prop, receiver);
+    }
+  });
+}
+var MAX_RETRIES, BASE_DELAY_MS, MAX_JITTER_MS;
+var init_db_retry = __esm({
+  "src/lib/db-retry.ts"() {
+    "use strict";
+    MAX_RETRIES = 3;
+    BASE_DELAY_MS = 200;
+    MAX_JITTER_MS = 300;
+  }
+});
+
 // src/lib/database.ts
 import { createClient } from "@libsql/client";
 async function initDatabase(config) {
   if (_client) {
     _client.close();
     _client = null;
+    _resilientClient = null;
   }
   const opts = {
     url: `file:${config.dbPath}`
@@ -29,17 +85,24 @@ async function initDatabase(config) {
     opts.encryptionKey = config.encryptionKey;
   }
   _client = createClient(opts);
+  _resilientClient = wrapWithRetry(_client);
 }
 function getClient() {
+  if (!_resilientClient) {
+    throw new Error("Database client not initialized. Call initDatabase() first.");
+  }
+  return _resilientClient;
+}
+function getRawClient() {
   if (!_client) {
     throw new Error("Database client not initialized. Call initDatabase() first.");
   }
   return _client;
 }
 async function ensureSchema() {
-  const client = getClient();
+  const client = getRawClient();
   await client.execute("PRAGMA journal_mode = WAL");
-  await client.execute("PRAGMA busy_timeout = 5000");
+  await client.execute("PRAGMA busy_timeout = 30000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -828,11 +891,13 @@ async function ensureSchema() {
     }
   }
 }
-var _client, initTurso;
+var _client, _resilientClient, initTurso;
 var init_database = __esm({
   "src/lib/database.ts"() {
     "use strict";
+    init_db_retry();
     _client = null;
+    _resilientClient = null;
     initTurso = initDatabase;
   }
 });
@@ -1084,7 +1149,7 @@ function listShards() {
 }
 async function ensureShardSchema(client) {
   await client.execute("PRAGMA journal_mode = WAL");
-  await client.execute("PRAGMA busy_timeout = 5000");
+  await client.execute("PRAGMA busy_timeout = 30000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -1270,7 +1335,7 @@ var init_shard_manager = __esm({
 
 // src/lib/employees.ts
 import { readFile as readFile3, writeFile as writeFile3, mkdir as mkdir3 } from "fs/promises";
-import { existsSync as existsSync4, symlinkSync, readlinkSync } from "fs";
+import { existsSync as existsSync4, symlinkSync, readlinkSync, readFileSync as readFileSync2 } from "fs";
 import { execSync } from "child_process";
 import path4 from "path";
 var EMPLOYEES_PATH;
@@ -1287,7 +1352,7 @@ import crypto2 from "crypto";
 import path5 from "path";
 import os2 from "os";
 import {
-  readFileSync as readFileSync2,
+  readFileSync as readFileSync3,
   readdirSync,
   unlinkSync,
   existsSync as existsSync5,
@@ -1305,7 +1370,7 @@ import crypto3 from "crypto";
 import path6 from "path";
 import { execSync as execSync2 } from "child_process";
 import { mkdir as mkdir4, writeFile as writeFile4, appendFile } from "fs/promises";
-import { existsSync as existsSync6, readFileSync as readFileSync3 } from "fs";
+import { existsSync as existsSync6, readFileSync as readFileSync4 } from "fs";
 var init_tasks_crud = __esm({
   "src/lib/tasks-crud.ts"() {
     "use strict";
@@ -1369,7 +1434,7 @@ var init_provider_table = __esm({
 });
 
 // src/lib/intercom-queue.ts
-import { readFileSync as readFileSync4, writeFileSync, renameSync as renameSync2, existsSync as existsSync7, mkdirSync as mkdirSync2 } from "fs";
+import { readFileSync as readFileSync5, writeFileSync, renameSync as renameSync2, existsSync as existsSync7, mkdirSync as mkdirSync2 } from "fs";
 import path8 from "path";
 import os4 from "os";
 var QUEUE_PATH, TTL_MS, INTERCOM_LOG;
@@ -1383,7 +1448,7 @@ var init_intercom_queue = __esm({
 });
 
 // src/lib/license.ts
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync2, existsSync as existsSync8, mkdirSync as mkdirSync3 } from "fs";
+import { readFileSync as readFileSync6, writeFileSync as writeFileSync2, existsSync as existsSync8, mkdirSync as mkdirSync3 } from "fs";
 import { randomUUID } from "crypto";
 import path9 from "path";
 import { jwtVerify, importSPKI } from "jose";
@@ -1399,7 +1464,7 @@ var init_license = __esm({
 });
 
 // src/lib/plan-limits.ts
-import { readFileSync as readFileSync6, existsSync as existsSync9 } from "fs";
+import { readFileSync as readFileSync7, existsSync as existsSync9 } from "fs";
 import path10 from "path";
 var CACHE_PATH2;
 var init_plan_limits = __esm({
@@ -1417,7 +1482,7 @@ var init_plan_limits = __esm({
 import path11 from "path";
 import os5 from "os";
 import { fileURLToPath as fileURLToPath2 } from "url";
-var SESSION_CACHE, INTERCOM_LOG2, DEBOUNCE_FILE, DEBOUNCE_CLEANUP_AGE_MS;
+var SPAWN_LOCK_DIR, SESSION_CACHE, INTERCOM_LOG2, DEBOUNCE_FILE, DEBOUNCE_CLEANUP_AGE_MS;
 var init_tmux_routing = __esm({
   "src/lib/tmux-routing.ts"() {
     "use strict";
@@ -1429,6 +1494,7 @@ var init_tmux_routing = __esm({
     init_provider_table();
     init_intercom_queue();
     init_plan_limits();
+    SPAWN_LOCK_DIR = path11.join(os5.homedir(), ".exe-os", "spawn-locks");
     SESSION_CACHE = path11.join(os5.homedir(), ".exe-os", "session-cache");
     INTERCOM_LOG2 = path11.join(os5.homedir(), ".exe-os", "intercom.log");
     DEBOUNCE_FILE = path11.join(SESSION_CACHE, "intercom-debounce.json");