@askexenow/exe-os 0.8.38 → 0.8.39

package/dist/hooks/ingest-worker.js

@@ -211,6 +211,7 @@ async function ensureSchema() {
   const client = getRawClient();
   await client.execute("PRAGMA journal_mode = WAL");
   await client.execute("PRAGMA busy_timeout = 30000");
+  await client.execute("PRAGMA wal_autocheckpoint = 1000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -1034,15 +1035,15 @@ __export(config_exports, {
   migrateConfig: () => migrateConfig,
   saveConfig: () => saveConfig
 });
-import { readFile as readFile2, writeFile as writeFile2, mkdir as mkdir2 } from "fs/promises";
+import { readFile as readFile2, writeFile as writeFile2, mkdir as mkdir2, chmod as chmod2 } from "fs/promises";
 import { readFileSync as readFileSync2, existsSync as existsSync3, renameSync } from "fs";
 import path4 from "path";
-import os from "os";
+import os2 from "os";
 function resolveDataDir() {
   if (process.env.EXE_OS_DIR) return process.env.EXE_OS_DIR;
   if (process.env.EXE_MEM_DIR) return process.env.EXE_MEM_DIR;
-  const newDir = path4.join(os.homedir(), ".exe-os");
-  const legacyDir = path4.join(os.homedir(), ".exe-mem");
+  const newDir = path4.join(os2.homedir(), ".exe-os");
+  const legacyDir = path4.join(os2.homedir(), ".exe-mem");
   if (!existsSync3(newDir) && existsSync3(legacyDir)) {
     try {
       renameSync(legacyDir, newDir);
@@ -1129,7 +1130,7 @@ async function loadConfig() {
     normalizeAutoUpdate(migratedCfg);
     const config = { ...DEFAULT_CONFIG, dbPath: path4.join(dir, "memories.db"), ...migratedCfg };
     if (config.dbPath.startsWith("~")) {
-      config.dbPath = config.dbPath.replace(/^~/, os.homedir());
+      config.dbPath = config.dbPath.replace(/^~/, os2.homedir());
     }
     return config;
   } catch {
@@ -1160,6 +1161,9 @@ async function saveConfig(config) {
   await mkdir2(dir, { recursive: true });
   const configPath = path4.join(dir, "config.json");
   await writeFile2(configPath, JSON.stringify(config, null, 2) + "\n");
+  if (config.cloud?.apiKey) {
+    await chmod2(configPath, 384);
+  }
 }
 async function loadConfigFrom(configPath) {
   const raw = await readFile2(configPath, "utf-8");
@@ -1505,7 +1509,7 @@ var init_shard_manager = __esm({
 // src/lib/notifications.ts
 import crypto3 from "crypto";
 import path6 from "path";
-import os2 from "os";
+import os3 from "os";
 import {
   readFileSync as readFileSync3,
   readdirSync as readdirSync3,
@@ -1591,6 +1595,14 @@ import { readFileSync as readFileSync5, writeFileSync, existsSync as existsSync7
 import { randomUUID } from "crypto";
 import path8 from "path";
 import { jwtVerify, importSPKI } from "jose";
+async function fetchRetry(url, init) {
+  try {
+    return await fetch(url, init);
+  } catch {
+    await new Promise((r) => setTimeout(r, RETRY_DELAY_MS));
+    return fetch(url, { ...init, signal: AbortSignal.timeout(1e4) });
+  }
+}
 function loadDeviceId() {
   const deviceJsonPath = path8.join(EXE_AI_DIR, "device.json");
   try {
@@ -1661,7 +1673,7 @@ function cacheResponse(token) {
 async function validateLicense(apiKey, deviceId) {
   const did = deviceId ?? loadDeviceId();
   try {
-    const res = await fetch(`${API_BASE}/auth/activate`, {
+    const res = await fetchRetry(`${API_BASE}/auth/activate`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ apiKey, deviceId: did }),
@@ -1716,7 +1728,7 @@ async function checkLicense() {
   const deviceId = loadDeviceId();
   return validateLicense(key, deviceId);
 }
-var LICENSE_PATH, CACHE_PATH, DEVICE_ID_PATH, API_BASE, LICENSE_PUBLIC_KEY_PEM, LICENSE_JWT_ALG, PLAN_LIMITS, FREE_LICENSE, CACHE_MAX_AGE_MS;
+var LICENSE_PATH, CACHE_PATH, DEVICE_ID_PATH, API_BASE, RETRY_DELAY_MS, LICENSE_PUBLIC_KEY_PEM, LICENSE_JWT_ALG, PLAN_LIMITS, FREE_LICENSE, CACHE_MAX_AGE_MS;
 var init_license = __esm({
   "src/lib/license.ts"() {
     "use strict";
@@ -1725,6 +1737,7 @@ var init_license = __esm({
     CACHE_PATH = path8.join(EXE_AI_DIR, "license-cache.json");
     DEVICE_ID_PATH = path8.join(EXE_AI_DIR, "device-id");
     API_BASE = "https://askexe.com/cloud";
+    RETRY_DELAY_MS = 500;
     LICENSE_PUBLIC_KEY_PEM = `-----BEGIN PUBLIC KEY-----
 MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEeHztAMOpR/ZMh+rWuOASjEZ54CGY
 4uj+UqeKCcvtgNHKmOK278HJaJcANe9xAeji8AFYu27q3WtzCi04pHudow==
@@ -1856,6 +1869,10 @@ import path10 from "path";
 import { fileURLToPath } from "url";
 function handleData(chunk) {
   _buffer += chunk.toString();
+  if (_buffer.length > MAX_BUFFER) {
+    _buffer = "";
+    return;
+  }
   let newlineIdx;
   while ((newlineIdx = _buffer.indexOf("\n")) !== -1) {
     const line = _buffer.slice(0, newlineIdx).trim();
@@ -2163,7 +2180,7 @@ function disconnectClient() {
     entry.resolve({ error: "Client disconnected" });
   }
 }
-var SOCKET_PATH, PID_PATH, SPAWN_LOCK_PATH, SPAWN_LOCK_STALE_MS, CONNECT_TIMEOUT_MS, REQUEST_TIMEOUT_MS, _socket, _connected, _buffer, _requestCount, HEALTH_CHECK_INTERVAL, _pending;
+var SOCKET_PATH, PID_PATH, SPAWN_LOCK_PATH, SPAWN_LOCK_STALE_MS, CONNECT_TIMEOUT_MS, REQUEST_TIMEOUT_MS, _socket, _connected, _buffer, _requestCount, HEALTH_CHECK_INTERVAL, _pending, MAX_BUFFER;
 var init_exe_daemon_client = __esm({
   "src/lib/exe-daemon-client.ts"() {
     "use strict";
@@ -2180,6 +2197,7 @@ var init_exe_daemon_client = __esm({
     _requestCount = 0;
     HEALTH_CHECK_INTERVAL = 100;
     _pending = /* @__PURE__ */ new Map();
+    MAX_BUFFER = 1e7;
   }
 });
 
@@ -2221,8 +2239,8 @@ async function embedDirect(text) {
   const llamaCpp = await import("node-llama-cpp");
   const { MODELS_DIR: MODELS_DIR2 } = await Promise.resolve().then(() => (init_config(), config_exports));
   const { existsSync: existsSync15 } = await import("fs");
-  const path19 = await import("path");
-  const modelPath = path19.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
+  const path20 = await import("path");
+  const modelPath = path20.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
   if (!existsSync15(modelPath)) {
     throw new Error(`Embedding model not found at ${modelPath}. Run '/exe-setup' to download it.`);
   }
@@ -2655,7 +2673,7 @@ var init_tasks_crud = __esm({
 // src/lib/session-registry.ts
 import { readFileSync as readFileSync9, writeFileSync as writeFileSync2, mkdirSync as mkdirSync3, existsSync as existsSync11 } from "fs";
 import path12 from "path";
-import os3 from "os";
+import os4 from "os";
 function registerSession(entry) {
   const dir = path12.dirname(REGISTRY_PATH);
   if (!existsSync11(dir)) {
@@ -2682,7 +2700,7 @@ var REGISTRY_PATH;
 var init_session_registry = __esm({
   "src/lib/session-registry.ts"() {
     "use strict";
-    REGISTRY_PATH = path12.join(os3.homedir(), ".exe-os", "session-registry.json");
+    REGISTRY_PATH = path12.join(os4.homedir(), ".exe-os", "session-registry.json");
   }
 });
 
@@ -2881,7 +2899,7 @@ var init_provider_table = __esm({
 // src/lib/intercom-queue.ts
 import { readFileSync as readFileSync10, writeFileSync as writeFileSync3, renameSync as renameSync2, existsSync as existsSync12, mkdirSync as mkdirSync4 } from "fs";
 import path13 from "path";
-import os4 from "os";
+import os5 from "os";
 function ensureDir() {
   const dir = path13.dirname(QUEUE_PATH);
   if (!existsSync12(dir)) mkdirSync4(dir, { recursive: true });
@@ -2921,9 +2939,9 @@ var QUEUE_PATH, TTL_MS, INTERCOM_LOG;
 var init_intercom_queue = __esm({
   "src/lib/intercom-queue.ts"() {
     "use strict";
-    QUEUE_PATH = path13.join(os4.homedir(), ".exe-os", "intercom-queue.json");
+    QUEUE_PATH = path13.join(os5.homedir(), ".exe-os", "intercom-queue.json");
     TTL_MS = 60 * 60 * 1e3;
-    INTERCOM_LOG = path13.join(os4.homedir(), ".exe-os", "intercom.log");
+    INTERCOM_LOG = path13.join(os5.homedir(), ".exe-os", "intercom.log");
   }
 });
 
@@ -2931,7 +2949,7 @@ var init_intercom_queue = __esm({
 import { execFileSync as execFileSync2, execSync as execSync7 } from "child_process";
 import { readFileSync as readFileSync11, writeFileSync as writeFileSync4, mkdirSync as mkdirSync5, existsSync as existsSync13, appendFileSync } from "fs";
 import path14 from "path";
-import os5 from "os";
+import os6 from "os";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { unlinkSync as unlinkSync3 } from "fs";
 function spawnLockPath(sessionName) {
@@ -3236,7 +3254,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   const transport = getTransport();
   const sessionName = employeeSessionName(employeeName, exeSession, opts?.instance);
   const instanceLabel = opts?.instance != null && opts.instance > 0 ? `${employeeName}${opts.instance}` : employeeName;
-  const logDir = path14.join(os5.homedir(), ".exe-os", "session-logs");
+  const logDir = path14.join(os6.homedir(), ".exe-os", "session-logs");
   const logFile = path14.join(logDir, `${instanceLabel}-${Date.now()}.log`);
   if (!existsSync13(logDir)) {
     mkdirSync5(logDir, { recursive: true });
@@ -3252,7 +3270,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   } catch {
   }
   try {
-    const claudeJsonPath = path14.join(os5.homedir(), ".claude.json");
+    const claudeJsonPath = path14.join(os6.homedir(), ".claude.json");
     let claudeJson = {};
     try {
       claudeJson = JSON.parse(readFileSync11(claudeJsonPath, "utf8"));
@@ -3267,7 +3285,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   } catch {
   }
   try {
-    const settingsDir = path14.join(os5.homedir(), ".claude", "projects");
+    const settingsDir = path14.join(os6.homedir(), ".claude", "projects");
     const normalizedKey = (opts?.cwd ?? projectDir).replace(/\//g, "-").replace(/^-/, "");
     const projSettingsDir = path14.join(settingsDir, normalizedKey);
     const settingsPath = path14.join(projSettingsDir, "settings.json");
@@ -3315,7 +3333,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   let legacyFallbackWarned = false;
   if (!useExeAgent && !useBinSymlink) {
     const identityPath = path14.join(
-      os5.homedir(),
+      os6.homedir(),
       ".exe-os",
       "identity",
       `${employeeName}.md`
@@ -3345,7 +3363,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   }
   let sessionContextFlag = "";
   try {
-    const ctxDir = path14.join(os5.homedir(), ".exe-os", "session-cache");
+    const ctxDir = path14.join(os6.homedir(), ".exe-os", "session-cache");
     mkdirSync5(ctxDir, { recursive: true });
     const ctxFile = path14.join(ctxDir, `session-context-${sessionName}.md`);
     const ctxContent = [
@@ -3456,11 +3474,11 @@ var init_tmux_routing = __esm({
     init_provider_table();
     init_intercom_queue();
     init_plan_limits();
-    SPAWN_LOCK_DIR = path14.join(os5.homedir(), ".exe-os", "spawn-locks");
-    SESSION_CACHE = path14.join(os5.homedir(), ".exe-os", "session-cache");
+    SPAWN_LOCK_DIR = path14.join(os6.homedir(), ".exe-os", "spawn-locks");
+    SESSION_CACHE = path14.join(os6.homedir(), ".exe-os", "session-cache");
     BEHAVIORS_EXPORT_TIMEOUT_MS = 1e4;
     INTERCOM_DEBOUNCE_MS = 3e4;
-    INTERCOM_LOG2 = path14.join(os5.homedir(), ".exe-os", "intercom.log");
+    INTERCOM_LOG2 = path14.join(os6.homedir(), ".exe-os", "intercom.log");
     DEBOUNCE_FILE = path14.join(SESSION_CACHE, "intercom-debounce.json");
     DEBOUNCE_CLEANUP_AGE_MS = 5 * 60 * 1e3;
     BUSY_PATTERN = /[✻✽✶✳·].*…|Running…/;
@@ -4288,11 +4306,69 @@ var init_tasks = __esm({
   }
 });
 
+// src/lib/worker-gate.ts
+var worker_gate_exports = {};
+__export(worker_gate_exports, {
+  MAX_CONCURRENT_WORKERS: () => MAX_CONCURRENT_WORKERS,
+  cleanupWorkerPid: () => cleanupWorkerPid,
+  registerWorkerPid: () => registerWorkerPid,
+  tryAcquireWorkerSlot: () => tryAcquireWorkerSlot
+});
+import { readdirSync as readdirSync5, writeFileSync as writeFileSync6, unlinkSync as unlinkSync6, mkdirSync as mkdirSync7 } from "fs";
+import path18 from "path";
+function tryAcquireWorkerSlot() {
+  try {
+    mkdirSync7(WORKER_PID_DIR, { recursive: true });
+    const files = readdirSync5(WORKER_PID_DIR);
+    let alive = 0;
+    for (const f of files) {
+      if (!f.endsWith(".pid")) continue;
+      const dashIdx = f.lastIndexOf("-");
+      const pid = parseInt(f.slice(dashIdx + 1).replace(".pid", ""), 10);
+      if (isNaN(pid)) continue;
+      try {
+        process.kill(pid, 0);
+        alive++;
+      } catch {
+        try {
+          unlinkSync6(path18.join(WORKER_PID_DIR, f));
+        } catch {
+        }
+      }
+    }
+    return alive < MAX_CONCURRENT_WORKERS;
+  } catch {
+    return true;
+  }
+}
+function registerWorkerPid(pid) {
+  try {
+    mkdirSync7(WORKER_PID_DIR, { recursive: true });
+    writeFileSync6(path18.join(WORKER_PID_DIR, `worker-${pid}.pid`), String(pid));
+  } catch {
+  }
+}
+function cleanupWorkerPid() {
+  try {
+    unlinkSync6(path18.join(WORKER_PID_DIR, `worker-${process.pid}.pid`));
+  } catch {
+  }
+}
+var WORKER_PID_DIR, MAX_CONCURRENT_WORKERS;
+var init_worker_gate = __esm({
+  "src/lib/worker-gate.ts"() {
+    "use strict";
+    init_config();
+    WORKER_PID_DIR = path18.join(EXE_AI_DIR, "worker-pids");
+    MAX_CONCURRENT_WORKERS = 3;
+  }
+});
+
 // src/adapters/claude/hooks/ingest-worker.ts
 import crypto7 from "crypto";
 import { execSync as execSync8 } from "child_process";
-import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync6 } from "fs";
-import path18 from "path";
+import { mkdirSync as mkdirSync8, writeFileSync as writeFileSync7 } from "fs";
+import path19 from "path";
 
 // src/lib/error-detector.ts
 init_mcp_prefix();
@@ -4406,11 +4482,12 @@ init_database();
 import { readFile, writeFile, unlink, mkdir, chmod } from "fs/promises";
 import { existsSync as existsSync2 } from "fs";
 import path3 from "path";
+import os from "os";
 import crypto2 from "crypto";
 var SERVICE = "exe-mem";
 var ACCOUNT = "master-key";
 function getKeyDir() {
-  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path3.join(process.env.HOME ?? "/tmp", ".exe-os");
+  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path3.join(os.homedir(), ".exe-os");
 }
 function getKeyPath() {
   return path3.join(getKeyDir(), "master.key");
@@ -4447,6 +4524,30 @@ async function getMasterKey() {
 
 // src/lib/store.ts
 init_config();
+var INIT_MAX_RETRIES = 3;
+var INIT_RETRY_DELAY_MS = 1e3;
+function isBusyError2(err) {
+  if (err instanceof Error) {
+    const msg = err.message.toLowerCase();
+    return msg.includes("sqlite_busy") || msg.includes("database is locked");
+  }
+  return false;
+}
+async function retryOnBusy2(fn, label) {
+  for (let attempt = 0; attempt <= INIT_MAX_RETRIES; attempt++) {
+    try {
+      return await fn();
+    } catch (err) {
+      if (!isBusyError2(err) || attempt === INIT_MAX_RETRIES) throw err;
+      process.stderr.write(
+        `[store] SQLITE_BUSY during ${label}, retry ${attempt + 1}/${INIT_MAX_RETRIES}
+`
+      );
+      await new Promise((r) => setTimeout(r, INIT_RETRY_DELAY_MS * (attempt + 1)));
+    }
+  }
+  throw new Error("unreachable");
+}
 var _pendingRecords = [];
 var _batchSize = 20;
 var _flushIntervalMs = 1e4;
@@ -4481,14 +4582,17 @@ async function initStore(options) {
     dbPath,
     encryptionKey: hexKey
   });
-  await ensureSchema();
+  await retryOnBusy2(() => ensureSchema(), "ensureSchema");
   try {
     const { initShardManager: initShardManager2 } = await Promise.resolve().then(() => (init_shard_manager(), shard_manager_exports));
     initShardManager2(hexKey);
   } catch {
   }
   const client = getClient();
-  const vResult = await client.execute("SELECT MAX(version) as max_v FROM memories");
+  const vResult = await retryOnBusy2(
+    () => client.execute("SELECT MAX(version) as max_v FROM memories"),
+    "version-query"
+  );
   _nextVersion = (Number(vResult.rows[0]?.max_v) || 0) + 1;
 }
 function classifyTier(record) {
@@ -4787,9 +4891,9 @@ function extractBash(input2, response) {
 }
 function extractGrep(input2, response) {
   const pattern = String(input2.pattern ?? "");
-  const path19 = input2.path ? String(input2.path) : "";
+  const path20 = input2.path ? String(input2.path) : "";
   const output = String(response.text ?? response.content ?? JSON.stringify(response).slice(0, MAX_OUTPUT));
-  return `Searched for "${pattern}"${path19 ? ` in ${path19}` : ""}
+  return `Searched for "${pattern}"${path20 ? ` in ${path20}` : ""}
 ${output.slice(0, MAX_OUTPUT)}`;
 }
 function extractGlob(input2, response) {
@@ -4924,7 +5028,7 @@ process.stdin.on("end", async () => {
     try {
       const { EXE_AI_DIR: exeDir } = await Promise.resolve().then(() => (init_config(), config_exports));
       const agentId2 = process.env.AGENT_ID;
-      const cachePath = path18.join(exeDir, "session-cache", `current-task-${agentId2}.json`);
+      const cachePath = path19.join(exeDir, "session-cache", `current-task-${agentId2}.json`);
       const { readFileSync: rf } = await import("fs");
       const cached = JSON.parse(rf(cachePath, "utf8"));
       taskId = cached.taskId ?? null;
@@ -4949,8 +5053,8 @@ process.stdin.on("end", async () => {
     if (needsBackfill) {
       try {
         const { EXE_AI_DIR: exeDir } = await Promise.resolve().then(() => (init_config(), config_exports));
-        const flagPath = path18.join(exeDir, "session-cache", "needs-backfill");
-        writeFileSync6(flagPath, "1");
+        const flagPath = path19.join(exeDir, "session-cache", "needs-backfill");
+        writeFileSync7(flagPath, "1");
       } catch (err) {
         process.stderr.write(`[ingest-worker] backfill flag write failed: ${err instanceof Error ? err.message : String(err)}
 `);
@@ -5062,8 +5166,8 @@ process.stdin.on("end", async () => {
           }
           const cwd = data.cwd ?? process.cwd();
           try {
-            mkdirSync7(path18.join(cwd, "exe/output"), { recursive: true });
-            mkdirSync7(path18.join(cwd, "exe/research"), { recursive: true });
+            mkdirSync8(path19.join(cwd, "exe/output"), { recursive: true });
+            mkdirSync8(path19.join(cwd, "exe/research"), { recursive: true });
             const { ensureGitignoreExe: ensureGitignoreExe2 } = await Promise.resolve().then(() => (init_tasks(), tasks_exports));
             await ensureGitignoreExe2(cwd);
           } catch (err) {
@@ -5073,9 +5177,19 @@ process.stdin.on("end", async () => {
         }
       }
     }
+    try {
+      const { getRawClient: getRawClient2 } = await Promise.resolve().then(() => (init_database(), database_exports));
+      await getRawClient2().execute("PRAGMA wal_checkpoint(PASSIVE)");
+    } catch {
+    }
   } catch (err) {
     process.stderr.write(`[ingest-worker] FATAL: ${err instanceof Error ? err.message : String(err)}
 `);
+  }
+  try {
+    const { cleanupWorkerPid: cleanupWorkerPid2 } = await Promise.resolve().then(() => (init_worker_gate(), worker_gate_exports));
+    cleanupWorkerPid2();
+  } catch {
   }
   process.exit(0);
 });

package/dist/hooks/ingest.js

@@ -1,5 +1,5 @@
 // src/lib/config.ts
-import { readFile, writeFile, mkdir } from "fs/promises";
+import { readFile, writeFile, mkdir, chmod } from "fs/promises";
 import { readFileSync, existsSync, renameSync } from "fs";
 import path from "path";
 import os from "os";
@@ -170,8 +170,8 @@ function loadConfigSync() {
 
 // src/adapters/claude/hooks/ingest.ts
 import { spawn } from "child_process";
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2, existsSync as existsSync2, openSync, closeSync } from "fs";
-import path3 from "path";
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, mkdirSync as mkdirSync3, existsSync as existsSync2, openSync, closeSync } from "fs";
+import path4 from "path";
 import { fileURLToPath } from "url";
 
 // src/adapters/claude/active-agent.ts
@@ -412,6 +412,44 @@ function errorFingerprint(toolName, errorText) {
   return crypto.createHash("sha256").update(`${toolName}:${normalized}`).digest("hex").slice(0, 16);
 }
 
+// src/lib/worker-gate.ts
+import { readdirSync as readdirSync2, writeFileSync as writeFileSync2, unlinkSync as unlinkSync2, mkdirSync as mkdirSync2 } from "fs";
+import path3 from "path";
+var WORKER_PID_DIR = path3.join(EXE_AI_DIR, "worker-pids");
+var MAX_CONCURRENT_WORKERS = 3;
+function tryAcquireWorkerSlot() {
+  try {
+    mkdirSync2(WORKER_PID_DIR, { recursive: true });
+    const files = readdirSync2(WORKER_PID_DIR);
+    let alive = 0;
+    for (const f of files) {
+      if (!f.endsWith(".pid")) continue;
+      const dashIdx = f.lastIndexOf("-");
+      const pid = parseInt(f.slice(dashIdx + 1).replace(".pid", ""), 10);
+      if (isNaN(pid)) continue;
+      try {
+        process.kill(pid, 0);
+        alive++;
+      } catch {
+        try {
+          unlinkSync2(path3.join(WORKER_PID_DIR, f));
+        } catch {
+        }
+      }
+    }
+    return alive < MAX_CONCURRENT_WORKERS;
+  } catch {
+    return true;
+  }
+}
+function registerWorkerPid(pid) {
+  try {
+    mkdirSync2(WORKER_PID_DIR, { recursive: true });
+    writeFileSync2(path3.join(WORKER_PID_DIR, `worker-${pid}.pid`), String(pid));
+  } catch {
+  }
+}
+
 // src/adapters/claude/hooks/ingest.ts
 if (!process.env.AGENT_ID) {
   process.env.AGENT_ID = "default";
@@ -420,7 +458,7 @@ if (!process.env.AGENT_ID) {
 if (!loadConfigSync().autoIngestion) {
   process.exit(0);
 }
-var WORKER_LOG_PATH = path3.join(EXE_AI_DIR, "workers.log");
+var WORKER_LOG_PATH = path4.join(EXE_AI_DIR, "workers.log");
 function openWorkerLog() {
   try {
     return openSync(WORKER_LOG_PATH, "a");
@@ -432,9 +470,9 @@ var ALLOWED_TOOL_RE = /^(Bash|Edit|Write|Read|Glob|Grep|Agent|mcp__.*)$/;
 var WRITE_TOOL_RE = /^(Bash|Edit|Write)$/;
 var SUMMARY_INTERVAL = 25;
 var MIN_WRITES_FOR_SUMMARY = 3;
-var COUNTER_DIR = path3.join(EXE_AI_DIR, "session-cache");
+var COUNTER_DIR = path4.join(EXE_AI_DIR, "session-cache");
 function getCounterPath(sessionId) {
-  return path3.join(COUNTER_DIR, `counter-${sessionId}.json`);
+  return path4.join(COUNTER_DIR, `counter-${sessionId}.json`);
 }
 function loadCounter(sessionId) {
   try {
@@ -446,8 +484,8 @@ function loadCounter(sessionId) {
 }
 function saveCounter(sessionId, counter) {
   try {
-    mkdirSync2(COUNTER_DIR, { recursive: true });
-    writeFileSync2(getCounterPath(sessionId), JSON.stringify(counter));
+    mkdirSync3(COUNTER_DIR, { recursive: true });
+    writeFileSync3(getCounterPath(sessionId), JSON.stringify(counter));
   } catch {
   }
 }
@@ -466,7 +504,7 @@ process.stdin.on("end", () => {
       process.exit(0);
     }
     const agent = getActiveAgent();
-    if (/^(Read|Write|Edit)$/.test(data.tool_name) && agent.agentId !== "exe" && agent.agentId !== "default") {
+    if (/^(Read|Write|Edit)$/.test(data.tool_name) && agent.agentRole !== "COO" && agent.agentId !== "default") {
       const filePath = data.tool_input?.file_path ?? "";
       const exeMatch = filePath.match(/exe\/([^/]+)\//);
       if (exeMatch && exeMatch[1] !== agent.agentId) {
@@ -483,7 +521,7 @@ Do NOT read, write, or modify files in another employee's folder.`
         process.stdout.write(warning);
       }
     }
-    if (/^(Read|Glob|Grep|Bash)$/.test(data.tool_name) && agent.agentId === "exe") {
+    if (/^(Read|Glob|Grep|Bash)$/.test(data.tool_name) && agent.agentRole === "COO") {
       const target = data.tool_input?.file_path ?? data.tool_input?.path ?? data.tool_input?.pattern ?? String(data.tool_input?.command ?? "");
       if (/exe\/exe\//.test(target)) {
         const warning = JSON.stringify({
@@ -498,7 +536,7 @@ Open reviews are tracked in the tasks table: SELECT COUNT(*) FROM tasks WHERE as
         process.stdout.write(warning);
       }
     }
-    if (/^(Write|Bash)$/.test(data.tool_name) && agent.agentId !== "exe" && agent.agentId !== "default") {
+    if (/^(Write|Bash)$/.test(data.tool_name) && agent.agentRole !== "COO" && agent.agentId !== "default") {
       const filePath = data.tool_input?.file_path ?? String(data.tool_input?.command ?? "");
       const outputMatch = filePath.match(/exe\/output\/([^/\-]+)-([^/]+)/);
       if (outputMatch) {
@@ -522,7 +560,7 @@ Your output files must start with: exe/output/${agent.agentId}-`
       const classification = classifyError(errorText);
       if (classification === "system" && data.session_id) {
         const fp = errorFingerprint(data.tool_name, errorText);
-        const fpFilePath = path3.join(COUNTER_DIR, `bug-fingerprints-${data.session_id}.json`);
+        const fpFilePath = path4.join(COUNTER_DIR, `bug-fingerprints-${data.session_id}.json`);
         let fpData = {
           seen: {},
           taskCount: 0,
@@ -547,13 +585,13 @@ Your output files must start with: exe/output/${agent.agentId}-`
           fpData.seen[fp] = { count: 1, firstAt: now, lastAt: now };
           fpData.taskCount++;
           fpData.lastTaskAt = now;
-          const bugWorkerPath = path3.resolve(
-            path3.dirname(fileURLToPath(import.meta.url)),
+          const bugWorkerPath = path4.resolve(
+            path4.dirname(fileURLToPath(import.meta.url)),
             "bug-report-worker.js"
           );
-          if (existsSync2(bugWorkerPath)) {
+          if (existsSync2(bugWorkerPath) && tryAcquireWorkerSlot()) {
             const stderrFd2 = openWorkerLog();
-            const projectName = process.cwd().split(path3.sep).pop() ?? "unknown";
+            const projectName = process.cwd().split(path4.sep).pop() ?? "unknown";
             const bugToolInput = data.tool_input ?? {};
             const bugWorker = spawn(process.execPath, [bugWorkerPath], {
               detached: true,
@@ -569,6 +607,7 @@ Your output files must start with: exe/output/${agent.agentId}-`
                 BUG_PROJECT_NAME: projectName
               }
             });
+            if (bugWorker.pid) registerWorkerPid(bugWorker.pid);
             bugWorker.unref();
             if (typeof stderrFd2 === "number") try {
               closeSync(stderrFd2);
@@ -580,13 +619,13 @@ Your output files must start with: exe/output/${agent.agentId}-`
           }
         }
         try {
-          mkdirSync2(COUNTER_DIR, { recursive: true });
-          writeFileSync2(fpFilePath, JSON.stringify(fpData));
+          mkdirSync3(COUNTER_DIR, { recursive: true });
+          writeFileSync3(fpFilePath, JSON.stringify(fpData));
         } catch {
         }
       }
     }
-    if (data.session_id && agent.agentId !== "exe" && agent.agentId !== "default") {
+    if (data.session_id && agent.agentRole !== "COO" && agent.agentId !== "default") {
       const counter = loadCounter(data.session_id);
       counter.total++;
       if (WRITE_TOOL_RE.test(data.tool_name)) {
@@ -598,11 +637,11 @@ Your output files must start with: exe/output/${agent.agentId}-`
       }
       const callsSinceLastSummary = counter.total - counter.lastSummaryAt;
       if (callsSinceLastSummary >= SUMMARY_INTERVAL && counter.writes >= MIN_WRITES_FOR_SUMMARY) {
-        const summaryWorkerPath = path3.resolve(
-          path3.dirname(fileURLToPath(import.meta.url)),
+        const summaryWorkerPath = path4.resolve(
+          path4.dirname(fileURLToPath(import.meta.url)),
           "summary-worker.js"
         );
-        if (existsSync2(summaryWorkerPath)) {
+        if (existsSync2(summaryWorkerPath) && tryAcquireWorkerSlot()) {
           const stderrFd2 = openWorkerLog();
           const summaryWorker = spawn(process.execPath, [summaryWorkerPath], {
             detached: true,
@@ -616,6 +655,7 @@ Your output files must start with: exe/output/${agent.agentId}-`
               EXE_SUMMARY_WRITES: String(counter.writes)
             }
           });
+          if (summaryWorker.pid) registerWorkerPid(summaryWorker.pid);
           summaryWorker.unref();
           if (typeof stderrFd2 === "number") try {
             closeSync(stderrFd2);
@@ -643,13 +683,13 @@ Your output files must start with: exe/output/${agent.agentId}-`
       const bashOutput = typeof data.tool_response === "string" ? data.tool_response : JSON.stringify(data.tool_response ?? "");
       const commitMatch = bashOutput.match(/\[(\S+)\s+([a-f0-9]{7,40})\]\s+(.+)/);
       if (commitMatch) {
-        const commitWorkerPath = path3.resolve(
-          path3.dirname(fileURLToPath(import.meta.url)),
+        const commitWorkerPath = path4.resolve(
+          path4.dirname(fileURLToPath(import.meta.url)),
           "commit-complete.js"
         );
-        if (existsSync2(commitWorkerPath)) {
+        if (existsSync2(commitWorkerPath) && tryAcquireWorkerSlot()) {
           const stderrFd2 = openWorkerLog();
-          const projectName = process.cwd().split(path3.sep).pop() ?? "unknown";
+          const projectName = process.cwd().split(path4.sep).pop() ?? "unknown";
           const commitWorker = spawn(process.execPath, [commitWorkerPath], {
             detached: true,
             stdio: ["ignore", "ignore", stderrFd2],
@@ -661,6 +701,7 @@ Your output files must start with: exe/output/${agent.agentId}-`
               PROJECT_NAME: projectName
             }
           });
+          if (commitWorker.pid) registerWorkerPid(commitWorker.pid);
           commitWorker.unref();
           if (typeof stderrFd2 === "number") try {
             closeSync(stderrFd2);
@@ -672,16 +713,21 @@ Your output files must start with: exe/output/${agent.agentId}-`
     if (!ALLOWED_TOOL_RE.test(data.tool_name)) {
       process.exit(0);
     }
-    const workerPath = path3.resolve(
-      path3.dirname(fileURLToPath(import.meta.url)),
+    const workerPath = path4.resolve(
+      path4.dirname(fileURLToPath(import.meta.url)),
       "ingest-worker.js"
     );
+    if (!tryAcquireWorkerSlot()) {
+      process.stderr.write("[ingest] Worker concurrency limit reached, skipping ingestion\n");
+      process.exit(0);
+    }
     const stderrFd = openWorkerLog();
     const worker = spawn(process.execPath, [workerPath], {
       detached: true,
       stdio: ["pipe", "ignore", stderrFd],
       env: { ...process.env, AGENT_ID: agent.agentId, AGENT_ROLE: agent.agentRole }
     });
+    if (worker.pid) registerWorkerPid(worker.pid);
     worker.stdin.write(input);
     worker.stdin.end();
     worker.unref();