@askexenow/exe-os 0.8.40 → 0.8.42

package/dist/runtime/index.js

@@ -666,6 +666,13 @@ async function ensureSchema() {
     });
   } catch {
   }
+  try {
+    await client.execute({
+      sql: `ALTER TABLE tasks ADD COLUMN session_scope TEXT`,
+      args: []
+    });
+  } catch {
+  }
   try {
     await client.execute({
       sql: `ALTER TABLE memories ADD COLUMN task_id TEXT`,
@@ -1112,6 +1119,18 @@ async function ensureSchema() {
     CREATE INDEX IF NOT EXISTS idx_session_kills_agent
       ON session_kills(agent_id);
   `);
+  await client.execute(`
+    CREATE TABLE IF NOT EXISTS global_procedures (
+      id TEXT PRIMARY KEY,
+      title TEXT NOT NULL,
+      content TEXT NOT NULL,
+      priority TEXT NOT NULL DEFAULT 'p0',
+      domain TEXT,
+      active INTEGER NOT NULL DEFAULT 1,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    )
+  `);
   await client.executeMultiple(`
     CREATE TABLE IF NOT EXISTS conversations (
       id              TEXT PRIMARY KEY,
@@ -1677,6 +1696,61 @@ var init_session_kill_telemetry = __esm({
   }
 });
 
+// src/lib/state-bus.ts
+var StateBus, orgBus;
+var init_state_bus = __esm({
+  "src/lib/state-bus.ts"() {
+    "use strict";
+    StateBus = class {
+      handlers = /* @__PURE__ */ new Map();
+      globalHandlers = /* @__PURE__ */ new Set();
+      /** Emit an event to all subscribers */
+      emit(event) {
+        const typeHandlers = this.handlers.get(event.type);
+        if (typeHandlers) {
+          for (const handler of typeHandlers) {
+            try {
+              handler(event);
+            } catch {
+            }
+          }
+        }
+        for (const handler of this.globalHandlers) {
+          try {
+            handler(event);
+          } catch {
+          }
+        }
+      }
+      /** Subscribe to a specific event type */
+      on(type, handler) {
+        if (!this.handlers.has(type)) {
+          this.handlers.set(type, /* @__PURE__ */ new Set());
+        }
+        this.handlers.get(type).add(handler);
+      }
+      /** Subscribe to ALL events */
+      onAny(handler) {
+        this.globalHandlers.add(handler);
+      }
+      /** Unsubscribe from a specific event type */
+      off(type, handler) {
+        this.handlers.get(type)?.delete(handler);
+      }
+      /** Unsubscribe from ALL events */
+      offAny(handler) {
+        this.globalHandlers.delete(handler);
+      }
+      /** Remove all listeners */
+      clear() {
+        this.handlers.clear();
+        this.globalHandlers.clear();
+      }
+    };
+    orgBus = new StateBus();
+  }
+});
+
 // src/lib/tasks-crud.ts
 import crypto3 from "crypto";
 import path9 from "path";
@@ -1820,9 +1894,15 @@ async function createTaskCore(input) {
     }
   }
   const complexity = input.complexity ?? "standard";
+  let sessionScope = null;
+  try {
+    const { resolveExeSession: resolveExeSession2 } = await Promise.resolve().then(() => (init_tmux_routing(), tmux_routing_exports));
+    sessionScope = resolveExeSession2();
+  } catch {
+  }
   await client.execute({
-    sql: `INSERT INTO tasks (id, title, assigned_to, assigned_by, project_name, priority, status, task_file, blocked_by, parent_task_id, reviewer, context, complexity, budget_tokens, budget_fallback_model, tokens_used, tokens_warned_at, created_at, updated_at)
-          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+    sql: `INSERT INTO tasks (id, title, assigned_to, assigned_by, project_name, priority, status, task_file, blocked_by, parent_task_id, reviewer, context, complexity, budget_tokens, budget_fallback_model, tokens_used, tokens_warned_at, session_scope, created_at, updated_at)
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
     args: [
       id,
       input.title,
@@ -1841,6 +1921,7 @@ async function createTaskCore(input) {
       input.budgetFallbackModel ?? null,
       0,
       null,
+      sessionScope,
       now,
       now
     ]
@@ -1885,9 +1966,18 @@ async function listTasks(input) {
     conditions.push("priority = ?");
     args.push(input.priority);
   }
+  try {
+    const { resolveExeSession: resolveExeSession2 } = await Promise.resolve().then(() => (init_tmux_routing(), tmux_routing_exports));
+    const session = resolveExeSession2();
+    if (session) {
+      conditions.push("(session_scope IS NULL OR session_scope = ?)");
+      args.push(session);
+    }
+  } catch {
+  }
   const where = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
   const result = await client.execute({
-    sql: `SELECT * FROM tasks ${where} ORDER BY CASE status WHEN 'blocked' THEN 0 WHEN 'in_progress' THEN 1 WHEN 'open' THEN 2 ELSE 3 END, priority ASC, created_at DESC`,
+    sql: `SELECT * FROM tasks ${where} ORDER BY CASE status WHEN 'blocked' THEN 0 WHEN 'in_progress' THEN 1 WHEN 'open' THEN 2 ELSE 3 END, priority ASC, created_at DESC LIMIT 1000`,
     args
   });
   return result.rows.map((r) => ({
@@ -2108,6 +2198,34 @@ async function listPendingReviews(limit) {
   });
   return result.rows;
 }
+async function cleanupOrphanedReviews() {
+  const client = getClient();
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const r1 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND assigned_by = 'system'
+          AND title LIKE 'Review:%'
+          AND parent_task_id IN (SELECT id FROM tasks WHERE status IN ('done', 'cancelled'))`,
+    args: [now]
+  });
+  const staleThreshold = new Date(Date.now() - 60 * 60 * 1e3).toISOString();
+  const r2 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND result IS NOT NULL
+          AND updated_at < ?`,
+    args: [now, staleThreshold]
+  });
+  const total = r1.rowsAffected + r2.rowsAffected;
+  if (total > 0) {
+    process.stderr.write(
+      `[cleanup] Closed ${total} orphaned review(s): ${r1.rowsAffected} cascade + ${r2.rowsAffected} stale
+`
+    );
+  }
+  return total;
+}
 function getReviewChecklist(role, agent, taskSlug) {
   const roleLower = role.toLowerCase();
   if (roleLower.includes("engineer") || roleLower === "principal engineer") {
@@ -2221,6 +2339,7 @@ var init_tasks_review = __esm({
     init_tasks_crud();
     init_tmux_routing();
     init_session_key();
+    init_state_bus();
   }
 });
 
@@ -2385,13 +2504,12 @@ function assertSessionScope(actionType, targetProject) {
       };
     }
     process.stderr.write(
-      `[session-scope] Cross-project ${actionType}: session project="${currentProject}" \u2260 target project="${targetProject}"
+      `[session-scope] BLOCKED cross-project ${actionType}: session project="${currentProject}" \u2260 target project="${targetProject}"
 `
     );
     return {
-      allowed: true,
-      // v1: warn-only, don't block
-      reason: "cross_session_granted",
+      allowed: false,
+      reason: "cross_session_denied",
       currentProject,
       targetProject,
       targetSession: findSessionForProject(targetProject)?.windowName
@@ -2417,8 +2535,9 @@ async function dispatchTaskToEmployee(input) {
     try {
       const { assertSessionScope: assertSessionScope2 } = (init_session_scope(), __toCommonJS(session_scope_exports));
       const check = assertSessionScope2("dispatch_task", input.projectName);
-      if (check.reason === "cross_session_granted") {
+      if (check.reason === "cross_session_denied") {
         crossProject = true;
+        return { dispatched: "skipped", crossProject: true };
       }
     } catch {
     }
@@ -2849,6 +2968,7 @@ var init_skill_learning = __esm({
 // src/lib/tasks.ts
 var tasks_exports = {};
 __export(tasks_exports, {
+  cleanupOrphanedReviews: () => cleanupOrphanedReviews,
   countNewPendingReviewsSince: () => countNewPendingReviewsSince,
   countPendingReviews: () => countPendingReviews,
   createTask: () => createTask,
@@ -2914,6 +3034,21 @@ async function updateTask(input) {
       });
     } catch {
     }
+    try {
+      const client = getClient();
+      const cascaded = await client.execute({
+        sql: `UPDATE tasks SET status = 'done', updated_at = ?
+              WHERE parent_task_id = ? AND status = 'needs_review'`,
+        args: [now, taskId]
+      });
+      if (cascaded.rowsAffected > 0) {
+        process.stderr.write(
+          `[cascade] Closed ${cascaded.rowsAffected} orphaned review task(s) for parent ${taskId}
+`
+        );
+      }
+    } catch {
+    }
   }
   const isTerminal = input.status === "done" || input.status === "needs_review";
   if (isTerminal) {
@@ -2927,6 +3062,13 @@ async function updateTask(input) {
         await cascadeUnblock(taskId, input.baseDir, now);
       } catch {
       }
+      orgBus.emit({
+        type: "task_completed",
+        taskId,
+        employee: String(row.assigned_to),
+        result: input.result ?? "",
+        timestamp: now
+      });
       if (row.parent_task_id) {
         try {
           await checkSubtaskCompletion(String(row.parent_task_id), String(row.project_name));
@@ -2994,6 +3136,7 @@ var init_tasks = __esm({
     init_database();
     init_config();
     init_notifications();
+    init_state_bus();
     init_tasks_crud();
     init_tasks_review();
     init_tasks_crud();
@@ -3384,8 +3527,28 @@ function getMySession() {
   return getTransport().getMySession();
 }
 function employeeSessionName(employee, exeSession, instance) {
+  if (!/^exe\d+$/.test(exeSession)) {
+    const root = extractRootExe(exeSession);
+    if (root) {
+      process.stderr.write(
+        `[tmux-routing] WARN: exeSession="${exeSession}" is not a root exe session, using "${root}" instead
+`
+      );
+      exeSession = root;
+    } else {
+      throw new Error(
+        `Invalid exeSession "${exeSession}" \u2014 must be a root exe session (e.g., "exe1"), not an agent session`
+      );
+    }
+  }
   const suffix = instance != null && instance > 0 ? String(instance) : "";
-  return `${employee}${suffix}-${exeSession}`;
+  const name = `${employee}${suffix}-${exeSession}`;
+  if (!VALID_SESSION_NAME.test(name)) {
+    throw new Error(
+      `Invalid session name "${name}" \u2014 must match {agent}-exe{N} or {agent}{instance}-exe{N}`
+    );
+  }
+  return name;
 }
 function parseParentExe(sessionName, agentId) {
   const escaped = agentId.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -3625,6 +3788,22 @@ function ensureEmployee(employeeName, exeSession, projectDir, opts) {
       error: `Error: pass employee name ('${bare}'), not session name ('${employeeName}')`
     };
   }
+  if (!/^exe\d+$/.test(exeSession)) {
+    const root = extractRootExe(exeSession);
+    if (root) {
+      process.stderr.write(
+        `[ensureEmployee] WARN: caller passed exeSession="${exeSession}" (not a root exe). Auto-correcting to "${root}".
+`
+      );
+      exeSession = root;
+    } else {
+      return {
+        status: "failed",
+        sessionName: "",
+        error: `Invalid exeSession "${exeSession}" \u2014 must be a root exe session (e.g., "exe1")`
+      };
+    }
+  }
   let effectiveInstance = opts?.instance;
   if (effectiveInstance === void 0 && opts?.autoInstance) {
     const free = findFreeInstance(
@@ -3871,7 +4050,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   releaseSpawnLock(sessionName);
   return { sessionName };
 }
-var SPAWN_LOCK_DIR, SESSION_CACHE, BEHAVIORS_EXPORT_TIMEOUT_MS, VERIFY_PANE_LINES, INTERCOM_DEBOUNCE_MS, INTERCOM_LOG2, DEBOUNCE_FILE, DEBOUNCE_CLEANUP_AGE_MS, BUSY_PATTERN;
+var SPAWN_LOCK_DIR, SESSION_CACHE, BEHAVIORS_EXPORT_TIMEOUT_MS, VALID_SESSION_NAME, VERIFY_PANE_LINES, INTERCOM_DEBOUNCE_MS, INTERCOM_LOG2, DEBOUNCE_FILE, DEBOUNCE_CLEANUP_AGE_MS, BUSY_PATTERN;
 var init_tmux_routing = __esm({
   "src/lib/tmux-routing.ts"() {
     "use strict";
@@ -3886,6 +4065,7 @@ var init_tmux_routing = __esm({
     SPAWN_LOCK_DIR = path14.join(os6.homedir(), ".exe-os", "spawn-locks");
     SESSION_CACHE = path14.join(os6.homedir(), ".exe-os", "session-cache");
     BEHAVIORS_EXPORT_TIMEOUT_MS = 1e4;
+    VALID_SESSION_NAME = /^[a-z]+-exe\d+$|^[a-z]+\d+-exe\d+$/;
     VERIFY_PANE_LINES = 200;
     INTERCOM_DEBOUNCE_MS = 3e4;
     INTERCOM_LOG2 = path14.join(os6.homedir(), ".exe-os", "intercom.log");
@@ -4195,6 +4375,71 @@ var init_shard_manager = __esm({
   }
 });
 
+// src/lib/global-procedures.ts
+var global_procedures_exports = {};
+__export(global_procedures_exports, {
+  deactivateGlobalProcedure: () => deactivateGlobalProcedure,
+  getGlobalProceduresBlock: () => getGlobalProceduresBlock,
+  loadGlobalProcedures: () => loadGlobalProcedures,
+  storeGlobalProcedure: () => storeGlobalProcedure
+});
+import { randomUUID as randomUUID3 } from "crypto";
+async function loadGlobalProcedures() {
+  const client = getClient();
+  const result = await client.execute({
+    sql: "SELECT * FROM global_procedures WHERE active = 1 ORDER BY priority ASC, created_at ASC",
+    args: []
+  });
+  const procedures = result.rows;
+  if (procedures.length > 0) {
+    _cache = procedures.map((p) => `### ${p.title}
+${p.content}`).join("\n\n");
+  } else {
+    _cache = "";
+  }
+  _cacheLoaded = true;
+  return procedures;
+}
+function getGlobalProceduresBlock() {
+  if (!_cacheLoaded) return "";
+  if (!_cache) return "";
+  return `## Organization-Wide Procedures (MANDATORY \u2014 supersedes all other rules)
+
+${_cache}
+`;
+}
+async function storeGlobalProcedure(input) {
+  const id = randomUUID3();
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const client = getClient();
+  await client.execute({
+    sql: `INSERT INTO global_procedures (id, title, content, priority, domain, active, created_at, updated_at)
+          VALUES (?, ?, ?, ?, ?, 1, ?, ?)`,
+    args: [id, input.title, input.content, input.priority ?? "p0", input.domain ?? null, now, now]
+  });
+  await loadGlobalProcedures();
+  return id;
+}
+async function deactivateGlobalProcedure(id) {
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const client = getClient();
+  const result = await client.execute({
+    sql: "UPDATE global_procedures SET active = 0, updated_at = ? WHERE id = ?",
+    args: [now, id]
+  });
+  await loadGlobalProcedures();
+  return result.rowsAffected > 0;
+}
+var _cache, _cacheLoaded;
+var init_global_procedures = __esm({
+  "src/lib/global-procedures.ts"() {
+    "use strict";
+    init_database();
+    _cache = "";
+    _cacheLoaded = false;
+  }
+});
+
 // src/lib/store.ts
 var store_exports = {};
 __export(store_exports, {
@@ -4274,6 +4519,11 @@ async function initStore(options) {
     "version-query"
   );
   _nextVersion = (Number(vResult.rows[0]?.max_v) || 0) + 1;
+  try {
+    const { loadGlobalProcedures: loadGlobalProcedures2 } = await Promise.resolve().then(() => (init_global_procedures(), global_procedures_exports));
+    await loadGlobalProcedures2();
+  } catch {
+  }
 }
 function classifyTier(record) {
   if (record.tool_name === "commit_to_long_term_memory" && (record.importance ?? 0) >= 8) return 1;
@@ -4315,6 +4565,12 @@ async function writeMemory(record) {
     supersedes_id: record.supersedes_id ?? null
   };
   _pendingRecords.push(dbRow);
+  orgBus.emit({
+    type: "memory_stored",
+    agentId: record.agent_id,
+    project: record.project_name,
+    timestamp: record.timestamp
+  });
   const MAX_PENDING = 1e3;
   if (_pendingRecords.length > MAX_PENDING) {
     const dropped = _pendingRecords.length - MAX_PENDING;
@@ -4660,6 +4916,7 @@ var init_store = __esm({
     init_database();
     init_keychain();
     init_config();
+    init_state_bus();
     INIT_MAX_RETRIES = 3;
     INIT_RETRY_DELAY_MS = 1e3;
     _pendingRecords = [];
@@ -6625,60 +6882,15 @@ function createQuietRenderer() {
   };
 }
 
-// src/runtime/state-bus.ts
-var StateBus = class {
-  handlers = /* @__PURE__ */ new Map();
-  globalHandlers = /* @__PURE__ */ new Set();
-  /** Emit an event to all subscribers */
-  emit(event) {
-    const typeHandlers = this.handlers.get(event.type);
-    if (typeHandlers) {
-      for (const handler of typeHandlers) {
-        try {
-          handler(event);
-        } catch {
-        }
-      }
-    }
-    for (const handler of this.globalHandlers) {
-      try {
-        handler(event);
-      } catch {
-      }
-    }
-  }
-  /** Subscribe to a specific event type */
-  on(type, handler) {
-    if (!this.handlers.has(type)) {
-      this.handlers.set(type, /* @__PURE__ */ new Set());
-    }
-    this.handlers.get(type).add(handler);
-  }
-  /** Subscribe to ALL events */
-  onAny(handler) {
-    this.globalHandlers.add(handler);
-  }
-  /** Unsubscribe from a specific event type */
-  off(type, handler) {
-    this.handlers.get(type)?.delete(handler);
-  }
-  /** Unsubscribe from ALL events */
-  offAny(handler) {
-    this.globalHandlers.delete(handler);
-  }
-  /** Remove all listeners */
-  clear() {
-    this.handlers.clear();
-    this.globalHandlers.clear();
-  }
-};
-var orgBus = new StateBus();
+// src/runtime/index.ts
+init_state_bus();
 
 // src/runtime/session-manager.ts
-import { randomUUID as randomUUID4 } from "crypto";
+import { randomUUID as randomUUID5 } from "crypto";
+init_state_bus();
 
 // src/runtime/exe-hooks.ts
-import { randomUUID as randomUUID3 } from "crypto";
+import { randomUUID as randomUUID4 } from "crypto";
 function createExeOSHooks(config) {
   let sessionRegistered = false;
   return {
@@ -6737,7 +6949,7 @@ function createExeOSHooks(config) {
         const toolResponse = result.isError ? { error: result.content } : { output: result.content };
         const rawText = extractSemanticText2(toolName, toolInput, toolResponse);
         await writeMemory2({
-          id: randomUUID3(),
+          id: randomUUID4(),
           agent_id: config.agentId,
           agent_role: "employee",
           session_id: `api-${config.agentId}`,
@@ -6760,7 +6972,7 @@ function createExeOSHooks(config) {
         const { writeMemory: writeMemory2 } = await Promise.resolve().then(() => (init_store(), store_exports));
         if (summary) {
           await writeMemory2({
-            id: randomUUID3(),
+            id: randomUUID4(),
             agent_id: config.agentId,
             agent_role: "employee",
             session_id: `api-${config.agentId}`,
@@ -6831,7 +7043,7 @@ function createExeOSHooks(config) {
         await client.execute({
           sql: `INSERT OR IGNORE INTO notifications (id, type, source_agent, message, task_file, created_at, read)
                 VALUES (?, 'system', ?, ?, NULL, ?, 0)`,
-          args: [randomUUID3(), config.agentId, message.slice(0, 500), (/* @__PURE__ */ new Date()).toISOString()]
+          args: [randomUUID4(), config.agentId, message.slice(0, 500), (/* @__PURE__ */ new Date()).toISOString()]
         });
       } catch {
       }
@@ -6847,7 +7059,7 @@ function createExeOSHooks(config) {
       try {
         const { writeMemory: writeMemory2 } = await Promise.resolve().then(() => (init_store(), store_exports));
         await writeMemory2({
-          id: randomUUID3(),
+          id: randomUUID4(),
           agent_id: config.agentId,
           agent_role: "employee",
           session_id: `api-${config.agentId}`,
@@ -6869,7 +7081,7 @@ function createExeOSHooks(config) {
       try {
         const { writeMemory: writeMemory2 } = await Promise.resolve().then(() => (init_store(), store_exports));
         await writeMemory2({
-          id: randomUUID3(),
+          id: randomUUID4(),
           agent_id: config.agentId,
           agent_role: "employee",
           session_id: `api-${config.agentId}`,
@@ -6906,7 +7118,7 @@ function createExeOSHooks(config) {
           if (tasks.rows.length > 0) {
             const taskList = tasks.rows.map((r) => `- [${String(r.status)}] ${String(r.title)} (${String(r.task_file)})`).join("\n");
             await writeMemory2({
-              id: randomUUID3(),
+              id: randomUUID4(),
               agent_id: config.agentId,
               agent_role: "employee",
               session_id: `api-${config.agentId}`,
@@ -6932,7 +7144,7 @@ ${taskList}`,
       try {
         const { writeMemory: writeMemory2 } = await Promise.resolve().then(() => (init_store(), store_exports));
         await writeMemory2({
-          id: randomUUID3(),
+          id: randomUUID4(),
           agent_id: config.agentId,
           agent_role: "employee",
           session_id: `api-${config.agentId}`,
@@ -6959,7 +7171,7 @@ var SessionManager = class {
   eventHandlers = /* @__PURE__ */ new Set();
   /** Start a new agent session for an employee */
   startSession(employeeId, config) {
-    const sessionId = randomUUID4();
+    const sessionId = randomUUID5();
     const abortController = new AbortController();
     const session = {
       info: {