@askexenow/exe-os 0.9.115 → 0.9.116

package/dist/bin/cleanup-stale-review-tasks.js

@@ -6556,15 +6556,28 @@ function getParentExe(sessionKey) {
   }
 }
 function resolveExeSession() {
+  const mySession = getMySession();
+  const fromSessionName = mySession ? extractRootExe(mySession) ?? null : null;
   if (process.env.EXE_SESSION_NAME) {
     const fromEnv = extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
-    if (fromEnv) return fromEnv;
+    if (fromEnv) {
+      if (!mySession) {
+        return fromEnv;
+      }
+      if (fromSessionName && fromEnv !== fromSessionName) {
+        process.stderr.write(
+          `[tmux-routing] WARN: EXE_SESSION_NAME="${fromEnv}" but tmux says "${fromSessionName}". Trusting tmux, correcting env var.
+`
+        );
+        process.env.EXE_SESSION_NAME = fromSessionName;
+      } else {
+        return fromEnv;
+      }
+    }
   }
-  const mySession = getMySession();
   if (!mySession) {
     return null;
   }
-  const fromSessionName = extractRootExe(mySession);
   let candidate = null;
   try {
     const key = getSessionKey();

package/dist/bin/cli.js

@@ -16876,15 +16876,28 @@ function getDispatchedBy(sessionKey) {
   }
 }
 function resolveExeSession() {
+  const mySession = getMySession();
+  const fromSessionName = mySession ? extractRootExe(mySession) ?? null : null;
   if (process.env.EXE_SESSION_NAME) {
     const fromEnv = extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
-    if (fromEnv) return fromEnv;
+    if (fromEnv) {
+      if (!mySession) {
+        return fromEnv;
+      }
+      if (fromSessionName && fromEnv !== fromSessionName) {
+        process.stderr.write(
+          `[tmux-routing] WARN: EXE_SESSION_NAME="${fromEnv}" but tmux says "${fromSessionName}". Trusting tmux, correcting env var.
+`
+        );
+        process.env.EXE_SESSION_NAME = fromSessionName;
+      } else {
+        return fromEnv;
+      }
+    }
   }
-  const mySession = getMySession();
   if (!mySession) {
     return null;
   }
-  const fromSessionName = extractRootExe(mySession);
   let candidate = null;
   try {
     const key = getSessionKey();
@@ -17068,6 +17081,21 @@ function isExeSession(sessionName) {
 }
 function sendIntercom(targetSession) {
   const transport = getTransport();
+  try {
+    const callerScope = resolveExeSession();
+    if (callerScope && isExeSession(callerScope) && targetSession.includes("-")) {
+      const targetScope = extractRootExe(targetSession);
+      if (targetScope && targetScope !== callerScope) {
+        logIntercom(`BLOCKED \u2192 ${targetSession} (scope violation: caller=${callerScope}, target=${targetScope})`);
+        process.stderr.write(
+          `[intercom] BLOCKED: cross-session intercom from ${callerScope} to ${targetSession}. Session isolation enforced.
+`
+        );
+        return "failed";
+      }
+    }
+  } catch {
+  }
   if (isExeSession(targetSession)) {
     logIntercom(`SKIP_COORDINATOR \u2192 ${targetSession} (coordinator sessions use prompt-submit hook)`);
     return "skipped_exe";

package/dist/bin/exe-boot.js

@@ -9003,15 +9003,28 @@ function getDispatchedBy(sessionKey) {
   }
 }
 function resolveExeSession() {
+  const mySession = getMySession();
+  const fromSessionName = mySession ? extractRootExe(mySession) ?? null : null;
   if (process.env.EXE_SESSION_NAME) {
     const fromEnv = extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
-    if (fromEnv) return fromEnv;
+    if (fromEnv) {
+      if (!mySession) {
+        return fromEnv;
+      }
+      if (fromSessionName && fromEnv !== fromSessionName) {
+        process.stderr.write(
+          `[tmux-routing] WARN: EXE_SESSION_NAME="${fromEnv}" but tmux says "${fromSessionName}". Trusting tmux, correcting env var.
+`
+        );
+        process.env.EXE_SESSION_NAME = fromSessionName;
+      } else {
+        return fromEnv;
+      }
+    }
   }
-  const mySession = getMySession();
   if (!mySession) {
     return null;
   }
-  const fromSessionName = extractRootExe(mySession);
   let candidate = null;
   try {
     const key = getSessionKey();
@@ -9195,6 +9208,21 @@ function isExeSession(sessionName) {
 }
 function sendIntercom(targetSession) {
   const transport = getTransport();
+  try {
+    const callerScope = resolveExeSession();
+    if (callerScope && isExeSession(callerScope) && targetSession.includes("-")) {
+      const targetScope = extractRootExe(targetSession);
+      if (targetScope && targetScope !== callerScope) {
+        logIntercom(`BLOCKED \u2192 ${targetSession} (scope violation: caller=${callerScope}, target=${targetScope})`);
+        process.stderr.write(
+          `[intercom] BLOCKED: cross-session intercom from ${callerScope} to ${targetSession}. Session isolation enforced.
+`
+        );
+        return "failed";
+      }
+    }
+  } catch {
+  }
   if (isExeSession(targetSession)) {
     logIntercom(`SKIP_COORDINATOR \u2192 ${targetSession} (coordinator sessions use prompt-submit hook)`);
     return "skipped_exe";

package/dist/bin/exe-dispatch.js

@@ -7524,15 +7524,28 @@ function getDispatchedBy(sessionKey) {
   }
 }
 function resolveExeSession() {
+  const mySession = getMySession();
+  const fromSessionName = mySession ? extractRootExe(mySession) ?? null : null;
   if (process.env.EXE_SESSION_NAME) {
     const fromEnv = extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
-    if (fromEnv) return fromEnv;
+    if (fromEnv) {
+      if (!mySession) {
+        return fromEnv;
+      }
+      if (fromSessionName && fromEnv !== fromSessionName) {
+        process.stderr.write(
+          `[tmux-routing] WARN: EXE_SESSION_NAME="${fromEnv}" but tmux says "${fromSessionName}". Trusting tmux, correcting env var.
+`
+        );
+        process.env.EXE_SESSION_NAME = fromSessionName;
+      } else {
+        return fromEnv;
+      }
+    }
   }
-  const mySession = getMySession();
   if (!mySession) {
     return null;
   }
-  const fromSessionName = extractRootExe(mySession);
   let candidate = null;
   try {
     const key = getSessionKey();
@@ -7716,6 +7729,21 @@ function isExeSession(sessionName) {
 }
 function sendIntercom(targetSession) {
   const transport = getTransport();
+  try {
+    const callerScope = resolveExeSession();
+    if (callerScope && isExeSession(callerScope) && targetSession.includes("-")) {
+      const targetScope = extractRootExe(targetSession);
+      if (targetScope && targetScope !== callerScope) {
+        logIntercom(`BLOCKED \u2192 ${targetSession} (scope violation: caller=${callerScope}, target=${targetScope})`);
+        process.stderr.write(
+          `[intercom] BLOCKED: cross-session intercom from ${callerScope} to ${targetSession}. Session isolation enforced.
+`
+        );
+        return "failed";
+      }
+    }
+  } catch {
+  }
   if (isExeSession(targetSession)) {
     logIntercom(`SKIP_COORDINATOR \u2192 ${targetSession} (coordinator sessions use prompt-submit hook)`);
     return "skipped_exe";

package/dist/bin/exe-gateway.js

@@ -13046,15 +13046,28 @@ function getDispatchedBy(sessionKey) {
   }
 }
 function resolveExeSession() {
+  const mySession = getMySession();
+  const fromSessionName = mySession ? extractRootExe(mySession) ?? null : null;
   if (process.env.EXE_SESSION_NAME) {
     const fromEnv = extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
-    if (fromEnv) return fromEnv;
+    if (fromEnv) {
+      if (!mySession) {
+        return fromEnv;
+      }
+      if (fromSessionName && fromEnv !== fromSessionName) {
+        process.stderr.write(
+          `[tmux-routing] WARN: EXE_SESSION_NAME="${fromEnv}" but tmux says "${fromSessionName}". Trusting tmux, correcting env var.
+`
+        );
+        process.env.EXE_SESSION_NAME = fromSessionName;
+      } else {
+        return fromEnv;
+      }
+    }
   }
-  const mySession = getMySession();
   if (!mySession) {
     return null;
   }
-  const fromSessionName = extractRootExe(mySession);
   let candidate = null;
   try {
     const key = getSessionKey();
@@ -13238,6 +13251,21 @@ function isExeSession(sessionName) {
 }
 function sendIntercom(targetSession) {
   const transport = getTransport();
+  try {
+    const callerScope = resolveExeSession();
+    if (callerScope && isExeSession(callerScope) && targetSession.includes("-")) {
+      const targetScope = extractRootExe(targetSession);
+      if (targetScope && targetScope !== callerScope) {
+        logIntercom(`BLOCKED \u2192 ${targetSession} (scope violation: caller=${callerScope}, target=${targetScope})`);
+        process.stderr.write(
+          `[intercom] BLOCKED: cross-session intercom from ${callerScope} to ${targetSession}. Session isolation enforced.
+`
+        );
+        return "failed";
+      }
+    }
+  } catch {
+  }
   if (isExeSession(targetSession)) {
     logIntercom(`SKIP_COORDINATOR \u2192 ${targetSession} (coordinator sessions use prompt-submit hook)`);
     return "skipped_exe";

package/dist/bin/exe-heartbeat.js

@@ -6585,15 +6585,28 @@ function getParentExe(sessionKey) {
   }
 }
 function resolveExeSession() {
+  const mySession = getMySession();
+  const fromSessionName = mySession ? extractRootExe(mySession) ?? null : null;
   if (process.env.EXE_SESSION_NAME) {
     const fromEnv = extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
-    if (fromEnv) return fromEnv;
+    if (fromEnv) {
+      if (!mySession) {
+        return fromEnv;
+      }
+      if (fromSessionName && fromEnv !== fromSessionName) {
+        process.stderr.write(
+          `[tmux-routing] WARN: EXE_SESSION_NAME="${fromEnv}" but tmux says "${fromSessionName}". Trusting tmux, correcting env var.
+`
+        );
+        process.env.EXE_SESSION_NAME = fromSessionName;
+      } else {
+        return fromEnv;
+      }
+    }
   }
-  const mySession = getMySession();
   if (!mySession) {
     return null;
   }
-  const fromSessionName = extractRootExe(mySession);
   let candidate = null;
   try {
     const key = getSessionKey();

package/dist/bin/exe-pending-messages.js

@@ -4043,15 +4043,28 @@ function getParentExe(sessionKey) {
   }
 }
 function resolveExeSession() {
+  const mySession = getMySession();
+  const fromSessionName = mySession ? extractRootExe(mySession) ?? null : null;
   if (process.env.EXE_SESSION_NAME) {
     const fromEnv = extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
-    if (fromEnv) return fromEnv;
+    if (fromEnv) {
+      if (!mySession) {
+        return fromEnv;
+      }
+      if (fromSessionName && fromEnv !== fromSessionName) {
+        process.stderr.write(
+          `[tmux-routing] WARN: EXE_SESSION_NAME="${fromEnv}" but tmux says "${fromSessionName}". Trusting tmux, correcting env var.
+`
+        );
+        process.env.EXE_SESSION_NAME = fromSessionName;
+      } else {
+        return fromEnv;
+      }
+    }
   }
-  const mySession = getMySession();
   if (!mySession) {
     return null;
   }
-  const fromSessionName = extractRootExe(mySession);
   let candidate = null;
   try {
     const key = getSessionKey();

package/dist/bin/exe-pending-notifications.js

@@ -4044,15 +4044,28 @@ function getParentExe(sessionKey) {
   }
 }
 function resolveExeSession() {
+  const mySession = getMySession();
+  const fromSessionName = mySession ? extractRootExe(mySession) ?? null : null;
   if (process.env.EXE_SESSION_NAME) {
     const fromEnv = extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
-    if (fromEnv) return fromEnv;
+    if (fromEnv) {
+      if (!mySession) {
+        return fromEnv;
+      }
+      if (fromSessionName && fromEnv !== fromSessionName) {
+        process.stderr.write(
+          `[tmux-routing] WARN: EXE_SESSION_NAME="${fromEnv}" but tmux says "${fromSessionName}". Trusting tmux, correcting env var.
+`
+        );
+        process.env.EXE_SESSION_NAME = fromSessionName;
+      } else {
+        return fromEnv;
+      }
+    }
   }
-  const mySession = getMySession();
   if (!mySession) {
     return null;
   }
-  const fromSessionName = extractRootExe(mySession);
   let candidate = null;
   try {
     const key = getSessionKey();

package/dist/bin/exe-pending-reviews.js

@@ -4044,15 +4044,28 @@ function getParentExe(sessionKey) {
   }
 }
 function resolveExeSession() {
+  const mySession = getMySession();
+  const fromSessionName = mySession ? extractRootExe(mySession) ?? null : null;
   if (process.env.EXE_SESSION_NAME) {
     const fromEnv = extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
-    if (fromEnv) return fromEnv;
+    if (fromEnv) {
+      if (!mySession) {
+        return fromEnv;
+      }
+      if (fromSessionName && fromEnv !== fromSessionName) {
+        process.stderr.write(
+          `[tmux-routing] WARN: EXE_SESSION_NAME="${fromEnv}" but tmux says "${fromSessionName}". Trusting tmux, correcting env var.
+`
+        );
+        process.env.EXE_SESSION_NAME = fromSessionName;
+      } else {
+        return fromEnv;
+      }
+    }
   }
-  const mySession = getMySession();
   if (!mySession) {
     return null;
   }
-  const fromSessionName = extractRootExe(mySession);
   let candidate = null;
   try {
     const key = getSessionKey();

package/dist/bin/exe-session-cleanup.js

@@ -9898,15 +9898,28 @@ function getDispatchedBy(sessionKey) {
   }
 }
 function resolveExeSession() {
+  const mySession = getMySession();
+  const fromSessionName = mySession ? extractRootExe(mySession) ?? null : null;
   if (process.env.EXE_SESSION_NAME) {
     const fromEnv = extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
-    if (fromEnv) return fromEnv;
+    if (fromEnv) {
+      if (!mySession) {
+        return fromEnv;
+      }
+      if (fromSessionName && fromEnv !== fromSessionName) {
+        process.stderr.write(
+          `[tmux-routing] WARN: EXE_SESSION_NAME="${fromEnv}" but tmux says "${fromSessionName}". Trusting tmux, correcting env var.
+`
+        );
+        process.env.EXE_SESSION_NAME = fromSessionName;
+      } else {
+        return fromEnv;
+      }
+    }
   }
-  const mySession = getMySession();
   if (!mySession) {
     return null;
   }
-  const fromSessionName = extractRootExe(mySession);
   let candidate = null;
   try {
     const key = getSessionKey();
@@ -10090,6 +10103,21 @@ function isExeSession(sessionName) {
 }
 function sendIntercom(targetSession) {
   const transport = getTransport();
+  try {
+    const callerScope = resolveExeSession();
+    if (callerScope && isExeSession(callerScope) && targetSession.includes("-")) {
+      const targetScope = extractRootExe(targetSession);
+      if (targetScope && targetScope !== callerScope) {
+        logIntercom(`BLOCKED \u2192 ${targetSession} (scope violation: caller=${callerScope}, target=${targetScope})`);
+        process.stderr.write(
+          `[intercom] BLOCKED: cross-session intercom from ${callerScope} to ${targetSession}. Session isolation enforced.
+`
+        );
+        return "failed";
+      }
+    }
+  } catch {
+  }
   if (isExeSession(targetSession)) {
     logIntercom(`SKIP_COORDINATOR \u2192 ${targetSession} (coordinator sessions use prompt-submit hook)`);
     return "skipped_exe";

package/dist/bin/exe-status.js

@@ -6556,15 +6556,28 @@ function getParentExe(sessionKey) {
   }
 }
 function resolveExeSession() {
+  const mySession = getMySession();
+  const fromSessionName = mySession ? extractRootExe(mySession) ?? null : null;
   if (process.env.EXE_SESSION_NAME) {
     const fromEnv = extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
-    if (fromEnv) return fromEnv;
+    if (fromEnv) {
+      if (!mySession) {
+        return fromEnv;
+      }
+      if (fromSessionName && fromEnv !== fromSessionName) {
+        process.stderr.write(
+          `[tmux-routing] WARN: EXE_SESSION_NAME="${fromEnv}" but tmux says "${fromSessionName}". Trusting tmux, correcting env var.
+`
+        );
+        process.env.EXE_SESSION_NAME = fromSessionName;
+      } else {
+        return fromEnv;
+      }
+    }
   }
-  const mySession = getMySession();
   if (!mySession) {
     return null;
   }
-  const fromSessionName = extractRootExe(mySession);
   let candidate = null;
   try {
     const key = getSessionKey();

package/dist/bin/git-sweep.js

@@ -7441,15 +7441,28 @@ function getDispatchedBy(sessionKey) {
   }
 }
 function resolveExeSession() {
+  const mySession = getMySession();
+  const fromSessionName = mySession ? extractRootExe(mySession) ?? null : null;
   if (process.env.EXE_SESSION_NAME) {
     const fromEnv = extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
-    if (fromEnv) return fromEnv;
+    if (fromEnv) {
+      if (!mySession) {
+        return fromEnv;
+      }
+      if (fromSessionName && fromEnv !== fromSessionName) {
+        process.stderr.write(
+          `[tmux-routing] WARN: EXE_SESSION_NAME="${fromEnv}" but tmux says "${fromSessionName}". Trusting tmux, correcting env var.
+`
+        );
+        process.env.EXE_SESSION_NAME = fromSessionName;
+      } else {
+        return fromEnv;
+      }
+    }
   }
-  const mySession = getMySession();
   if (!mySession) {
     return null;
   }
-  const fromSessionName = extractRootExe(mySession);
   let candidate = null;
   try {
     const key = getSessionKey();
@@ -7633,6 +7646,21 @@ function isExeSession(sessionName) {
 }
 function sendIntercom(targetSession) {
   const transport = getTransport();
+  try {
+    const callerScope = resolveExeSession();
+    if (callerScope && isExeSession(callerScope) && targetSession.includes("-")) {
+      const targetScope = extractRootExe(targetSession);
+      if (targetScope && targetScope !== callerScope) {
+        logIntercom(`BLOCKED \u2192 ${targetSession} (scope violation: caller=${callerScope}, target=${targetScope})`);
+        process.stderr.write(
+          `[intercom] BLOCKED: cross-session intercom from ${callerScope} to ${targetSession}. Session isolation enforced.
+`
+        );
+        return "failed";
+      }
+    }
+  } catch {
+  }
   if (isExeSession(targetSession)) {
     logIntercom(`SKIP_COORDINATOR \u2192 ${targetSession} (coordinator sessions use prompt-submit hook)`);
     return "skipped_exe";

package/dist/bin/intercom-check.js

@@ -9550,15 +9550,28 @@ function getDispatchedBy(sessionKey) {
   }
 }
 function resolveExeSession() {
+  const mySession = getMySession();
+  const fromSessionName = mySession ? extractRootExe(mySession) ?? null : null;
   if (process.env.EXE_SESSION_NAME) {
     const fromEnv = extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
-    if (fromEnv) return fromEnv;
+    if (fromEnv) {
+      if (!mySession) {
+        return fromEnv;
+      }
+      if (fromSessionName && fromEnv !== fromSessionName) {
+        process.stderr.write(
+          `[tmux-routing] WARN: EXE_SESSION_NAME="${fromEnv}" but tmux says "${fromSessionName}". Trusting tmux, correcting env var.
+`
+        );
+        process.env.EXE_SESSION_NAME = fromSessionName;
+      } else {
+        return fromEnv;
+      }
+    }
   }
-  const mySession = getMySession();
   if (!mySession) {
     return null;
   }
-  const fromSessionName = extractRootExe(mySession);
   let candidate = null;
   try {
     const key = getSessionKey();
@@ -9742,6 +9755,21 @@ function isExeSession(sessionName) {
 }
 function sendIntercom(targetSession) {
   const transport = getTransport();
+  try {
+    const callerScope = resolveExeSession();
+    if (callerScope && isExeSession(callerScope) && targetSession.includes("-")) {
+      const targetScope = extractRootExe(targetSession);
+      if (targetScope && targetScope !== callerScope) {
+        logIntercom(`BLOCKED \u2192 ${targetSession} (scope violation: caller=${callerScope}, target=${targetScope})`);
+        process.stderr.write(
+          `[intercom] BLOCKED: cross-session intercom from ${callerScope} to ${targetSession}. Session isolation enforced.
+`
+        );
+        return "failed";
+      }
+    }
+  } catch {
+  }
   if (isExeSession(targetSession)) {
     logIntercom(`SKIP_COORDINATOR \u2192 ${targetSession} (coordinator sessions use prompt-submit hook)`);
     return "skipped_exe";

package/dist/bin/scan-tasks.js

@@ -7512,15 +7512,28 @@ function getDispatchedBy(sessionKey) {
   }
 }
 function resolveExeSession() {
+  const mySession = getMySession();
+  const fromSessionName = mySession ? extractRootExe(mySession) ?? null : null;
   if (process.env.EXE_SESSION_NAME) {
     const fromEnv = extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
-    if (fromEnv) return fromEnv;
+    if (fromEnv) {
+      if (!mySession) {
+        return fromEnv;
+      }
+      if (fromSessionName && fromEnv !== fromSessionName) {
+        process.stderr.write(
+          `[tmux-routing] WARN: EXE_SESSION_NAME="${fromEnv}" but tmux says "${fromSessionName}". Trusting tmux, correcting env var.
+`
+        );
+        process.env.EXE_SESSION_NAME = fromSessionName;
+      } else {
+        return fromEnv;
+      }
+    }
   }
-  const mySession = getMySession();
   if (!mySession) {
     return null;
   }
-  const fromSessionName = extractRootExe(mySession);
   let candidate = null;
   try {
     const key = getSessionKey();
@@ -7704,6 +7717,21 @@ function isExeSession(sessionName) {
 }
 function sendIntercom(targetSession) {
   const transport = getTransport();
+  try {
+    const callerScope = resolveExeSession();
+    if (callerScope && isExeSession(callerScope) && targetSession.includes("-")) {
+      const targetScope = extractRootExe(targetSession);
+      if (targetScope && targetScope !== callerScope) {
+        logIntercom(`BLOCKED \u2192 ${targetSession} (scope violation: caller=${callerScope}, target=${targetScope})`);
+        process.stderr.write(
+          `[intercom] BLOCKED: cross-session intercom from ${callerScope} to ${targetSession}. Session isolation enforced.
+`
+        );
+        return "failed";
+      }
+    }
+  } catch {
+  }
   if (isExeSession(targetSession)) {
     logIntercom(`SKIP_COORDINATOR \u2192 ${targetSession} (coordinator sessions use prompt-submit hook)`);
     return "skipped_exe";

package/dist/gateway/index.js

@@ -11366,15 +11366,28 @@ function getDispatchedBy(sessionKey) {
   }
 }
 function resolveExeSession() {
+  const mySession = getMySession();
+  const fromSessionName = mySession ? extractRootExe(mySession) ?? null : null;
   if (process.env.EXE_SESSION_NAME) {
     const fromEnv = extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
-    if (fromEnv) return fromEnv;
+    if (fromEnv) {
+      if (!mySession) {
+        return fromEnv;
+      }
+      if (fromSessionName && fromEnv !== fromSessionName) {
+        process.stderr.write(
+          `[tmux-routing] WARN: EXE_SESSION_NAME="${fromEnv}" but tmux says "${fromSessionName}". Trusting tmux, correcting env var.
+`
+        );
+        process.env.EXE_SESSION_NAME = fromSessionName;
+      } else {
+        return fromEnv;
+      }
+    }
   }
-  const mySession = getMySession();
   if (!mySession) {
     return null;
   }
-  const fromSessionName = extractRootExe(mySession);
   let candidate = null;
   try {
     const key = getSessionKey();
@@ -11558,6 +11571,21 @@ function isExeSession(sessionName) {
 }
 function sendIntercom(targetSession) {
   const transport = getTransport();
+  try {
+    const callerScope = resolveExeSession();
+    if (callerScope && isExeSession(callerScope) && targetSession.includes("-")) {
+      const targetScope = extractRootExe(targetSession);
+      if (targetScope && targetScope !== callerScope) {
+        logIntercom(`BLOCKED \u2192 ${targetSession} (scope violation: caller=${callerScope}, target=${targetScope})`);
+        process.stderr.write(
+          `[intercom] BLOCKED: cross-session intercom from ${callerScope} to ${targetSession}. Session isolation enforced.
+`
+        );
+        return "failed";
+      }
+    }
+  } catch {
+  }
   if (isExeSession(targetSession)) {
     logIntercom(`SKIP_COORDINATOR \u2192 ${targetSession} (coordinator sessions use prompt-submit hook)`);
     return "skipped_exe";