@askexenow/exe-os 0.9.142 → 0.9.144

package/dist/{chunk-5PZ3HSGP.js → chunk-ROTT6N5K.js}

@@ -1,6 +1,6 @@
 import {
   isCrdtSyncEnabled
-} from "./chunk-JZB67O4M.js";
+} from "./chunk-5OANXJSV.js";
 import {
   decryptSyncBlob,
   encryptSyncBlob,
@@ -15,20 +15,22 @@ import {
   loadEmployees,
   registerBinSymlinks,
   saveEmployees
-} from "./chunk-55LEDLDE.js";
+} from "./chunk-WLW7QV2C.js";
 import {
   init_license,
   loadDeviceId
-} from "./chunk-GLVF7ENO.js";
+} from "./chunk-AFEXRICE.js";
 import {
   EXE_AI_DIR,
   init_config
-} from "./chunk-VA42PIIY.js";
+} from "./chunk-QASVYG2B.js";
 import {
+  atomicWriteJsonSync,
+  atomicWriteSync,
   enforcePrivateFileSync,
   ensurePrivateDirSync,
   init_secure_files
-} from "./chunk-FZ23OZL3.js";
+} from "./chunk-VAOAI6DS.js";
 
 // src/lib/cloud-sync.ts
 init_database();
@@ -484,7 +486,7 @@ async function cloudSync(config) {
   let pulled = 0;
   if (pullResult.records.length > 0) {
     if (isCrdtSyncEnabled()) {
-      const { initCrdtDoc, importExistingMemories, readAllMemories } = await import("./crdt-sync-WXVYQ5ZO.js");
+      const { initCrdtDoc, importExistingMemories, readAllMemories } = await import("./crdt-sync-WYAIMNUX.js");
       initCrdtDoc();
       importExistingMemories(
         pullResult.records.map((rec) => ({
@@ -853,7 +855,7 @@ async function cloudSync(config) {
   }
   const totalMemories = await countRows("SELECT COUNT(*) as cnt FROM memories WHERE status = 'active' OR status IS NULL");
   try {
-    const { getLatestBackup } = await import("./db-backup-YHDR4SXR.js");
+    const { getLatestBackup } = await import("./db-backup-K2M7HENN.js");
     const latestBackup = getLatestBackup();
     if (latestBackup) {
       const backupSize = statSync(latestBackup).size;
@@ -915,13 +917,13 @@ function recordRosterDeletion(name) {
     process.stderr.write("[cloud-sync] roster-deletions.json read failed: " + (e instanceof Error ? e.message : String(e)) + "\n");
   }
   if (!deletions.includes(name)) deletions.push(name);
-  writeFileSync(ROSTER_DELETIONS_PATH, JSON.stringify(deletions));
+  atomicWriteJsonSync(ROSTER_DELETIONS_PATH, deletions);
 }
 function consumeRosterDeletions() {
   try {
     if (!existsSync(ROSTER_DELETIONS_PATH)) return [];
     const deletions = JSON.parse(readFileSync(ROSTER_DELETIONS_PATH, "utf-8"));
-    writeFileSync(ROSTER_DELETIONS_PATH, "[]");
+    atomicWriteJsonSync(ROSTER_DELETIONS_PATH, []);
     return deletions;
   } catch (e) {
     process.stderr.write("[cloud-sync] consumeRosterDeletions failed: " + (e instanceof Error ? e.message : String(e)) + "\n");
@@ -1053,7 +1055,7 @@ function mergeConfig(remoteConfig, configPath) {
   const merged = { ...remoteConfig, ...local };
   const dir = path.dirname(cfgPath);
   ensurePrivateDirSync(dir);
-  writeFileSync(cfgPath, JSON.stringify(merged, null, 2), "utf-8");
+  atomicWriteSync(cfgPath, JSON.stringify(merged, null, 2) + "\n");
   enforcePrivateFileSync(cfgPath);
 }
 async function mergeRosterFromRemote(remote, paths) {
@@ -1090,7 +1092,7 @@ async function mergeRosterFromRemote(remote, paths) {
           process.stderr.write("[cloud-sync] local identity file read failed: " + (e instanceof Error ? e.message : String(e)) + "\n");
         }
         if (localIdentity !== remoteIdentity) {
-          writeFileSync(idPath, remoteIdentity, "utf-8");
+          atomicWriteSync(idPath, remoteIdentity);
           identitiesUpdated++;
         }
       }
@@ -1128,7 +1130,7 @@ async function mergeRosterFromRemote(remote, paths) {
         }
         const merged = { ...remote.agentConfig, ...local };
         ensurePrivateDirSync(path.dirname(agentConfigPath));
-        writeFileSync(agentConfigPath, JSON.stringify(merged, null, 2) + "\n", "utf-8");
+        atomicWriteSync(agentConfigPath, JSON.stringify(merged, null, 2) + "\n");
         enforcePrivateFileSync(agentConfigPath);
       } catch (e) {
         process.stderr.write("[cloud-sync] agent-config merge failed: " + (e instanceof Error ? e.message : String(e)) + "\n");
@@ -1422,34 +1424,11 @@ async function cloudPullTasks(config) {
   if (!remoteTasks || remoteTasks.length === 0) return { pulled: 0 };
   const client = getClient();
   const stmts = remoteTasks.map((t) => ({
-    sql: `INSERT INTO tasks
+    sql: `INSERT OR IGNORE INTO tasks
           (id, title, assigned_to, assigned_by, project_name, priority, status, task_file, created_at, updated_at,
            blocked_by, parent_task_id, budget_tokens, budget_fallback_model, tokens_used, tokens_warned_at,
            reviewer, context, complexity, session_scope, spawn_runtime, spawn_model, result)
-          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-          ON CONFLICT(id) DO UPDATE SET
-            title = excluded.title,
-            assigned_to = excluded.assigned_to,
-            assigned_by = excluded.assigned_by,
-            project_name = excluded.project_name,
-            priority = excluded.priority,
-            status = excluded.status,
-            task_file = excluded.task_file,
-            updated_at = excluded.updated_at,
-            blocked_by = excluded.blocked_by,
-            parent_task_id = excluded.parent_task_id,
-            budget_tokens = excluded.budget_tokens,
-            budget_fallback_model = excluded.budget_fallback_model,
-            tokens_used = excluded.tokens_used,
-            tokens_warned_at = excluded.tokens_warned_at,
-            reviewer = COALESCE(excluded.reviewer, tasks.reviewer),
-            context = COALESCE(excluded.context, tasks.context),
-            complexity = COALESCE(excluded.complexity, tasks.complexity),
-            session_scope = COALESCE(excluded.session_scope, tasks.session_scope),
-            spawn_runtime = COALESCE(excluded.spawn_runtime, tasks.spawn_runtime),
-            spawn_model = COALESCE(excluded.spawn_model, tasks.spawn_model),
-            result = COALESCE(excluded.result, tasks.result)
-          WHERE excluded.updated_at > tasks.updated_at`,
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
     args: [
       sqlSafe(t.id),
       sqlSafe(t.title),
@@ -1633,7 +1612,7 @@ async function cloudPushCodeContext(config) {
   }
   if (pushed > 0) {
     try {
-      writeFileSync(metaPath, JSON.stringify(syncMeta));
+      atomicWriteJsonSync(metaPath, syncMeta);
     } catch (e) {
       process.stderr.write("[cloud-sync] code-context sync-meta write failed: " + (e instanceof Error ? e.message : String(e)) + "\n");
     }
@@ -1662,12 +1641,12 @@ async function cloudPullCodeContext(config) {
         const compressed = decryptSyncBlob(blob);
         const content = decompress(compressed).toString("utf8");
         if (!existsSync(localPath)) {
-          writeFileSync(localPath, content, "utf-8");
+          atomicWriteSync(localPath, content);
           pulled++;
         } else {
           const localContent = readFileSync(localPath, "utf-8");
           if (localContent.length !== content.length) {
-            writeFileSync(localPath, content, "utf-8");
+            atomicWriteSync(localPath, content);
             pulled++;
           }
         }

package/dist/{chunk-4YSDLTCT.js → chunk-SCP545OR.js}

@@ -1,6 +1,6 @@
 import {
   MultiAgentOrchestrator
-} from "./chunk-UYNFWD54.js";
+} from "./chunk-37RJAKHZ.js";
 import {
   createQuietRenderer,
   createTerminalRenderer,
@@ -211,7 +211,7 @@ function createExeOSHooks(config) {
         );
       }
       try {
-        const { listBehaviors } = await import("./behaviors-GE4RY2HA.js");
+        const { listBehaviors } = await import("./behaviors-A4W3CBE5.js");
         const behaviors = await listBehaviors(config.agentId, config.projectName, 12);
         if (behaviors.length > 0) {
           process.stderr.write(
@@ -332,7 +332,7 @@ function createExeOSHooks(config) {
     async onSubagentStop(_reason) {
       try {
         const { getClient } = await import("./lib/database.js");
-        const { sessionScopeFilter } = await import("./task-scope-QNRAYD7S.js");
+        const { sessionScopeFilter } = await import("./task-scope-YIPIPEVK.js");
         const client = getClient();
         const ehScope = sessionScopeFilter();
         const tasks = await client.execute({
@@ -424,7 +424,7 @@ function createExeOSHooks(config) {
         try {
           const { writeMemory, flushBatch } = await import("./lib/store.js");
           const { getClient } = await import("./lib/database.js");
-          const { sessionScopeFilter: cpScopeFilter } = await import("./task-scope-QNRAYD7S.js");
+          const { sessionScopeFilter: cpScopeFilter } = await import("./task-scope-YIPIPEVK.js");
           const client = getClient();
           const cpScope = cpScopeFilter();
           const tasks = await client.execute({

package/dist/{chunk-U7M7ZURS.js → chunk-SI5TLMB6.js}

@@ -1,10 +1,10 @@
 import {
   vectorToBlob
-} from "./chunk-LR3QFARI.js";
+} from "./chunk-MI4RRRX5.js";
 import {
   init_employees,
   isCoordinatorName
-} from "./chunk-55LEDLDE.js";
+} from "./chunk-WLW7QV2C.js";
 
 // src/lib/consolidation.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-S3FDCJNF.js → chunk-SRQXDGUO.js}

@@ -589,7 +589,7 @@ function auditHookOwnership() {
 }
 async function auditShards() {
   try {
-    const { auditShardHealth } = await import("./shard-manager-3MDFLDOZ.js");
+    const { auditShardHealth } = await import("./shard-manager-IIII7AAS.js");
     const report = await auditShardHealth();
     return {
       total: report.total,
@@ -605,7 +605,7 @@ async function auditShards() {
 async function auditKeyHealth() {
   try {
     const { getMasterKey } = await import("./lib/keychain.js");
-    const { getKeyBackupStatus } = await import("./key-backup-status-M4W77D3P.js");
+    const { getKeyBackupStatus } = await import("./key-backup-status-2CMNBKEM.js");
     const key = await getMasterKey();
     const backup = getKeyBackupStatus();
     return {
@@ -830,7 +830,7 @@ function formatReport(report, flags) {
   return lines.join("\n");
 }
 async function fixNullVectors() {
-  const { tryAcquireWorkerSlot, registerWorkerPid } = await import("./worker-gate-WM2RGEZE.js");
+  const { tryAcquireWorkerSlot, registerWorkerPid } = await import("./worker-gate-CVWHVSX3.js");
   if (!tryAcquireWorkerSlot()) {
     process.stderr.write("[exe-doctor] Worker gate full \u2014 waiting for existing backfill workers to finish\n");
     await new Promise((r) => setTimeout(r, 5e3));
@@ -914,7 +914,7 @@ async function fixBloated(client, bloated, dryRun) {
   return chunksCreated;
 }
 async function fixShards(dryRun) {
-  const { auditShardHealth } = await import("./shard-manager-3MDFLDOZ.js");
+  const { auditShardHealth } = await import("./shard-manager-IIII7AAS.js");
   const report = await auditShardHealth({ repair: true, dryRun });
   return {
     total: report.total,
@@ -951,7 +951,7 @@ function splitAtSentences(text, maxChunkSize) {
 }
 async function main(argv = process.argv.slice(2)) {
   const flags = parseFlags(argv);
-  const { fastDbInit } = await import("./fast-db-init-ADRYLHUA.js");
+  const { fastDbInit } = await import("./fast-db-init-TLDOE64G.js");
   const client = await fastDbInit();
   const report = await runAudit(client, flags);
   console.log(formatReport(report, flags));
@@ -962,7 +962,7 @@ ${mode} Applying repairs...
 `);
     if (!flags.dryRun) {
       try {
-        const { createBackup } = await import("./db-backup-YHDR4SXR.js");
+        const { createBackup } = await import("./db-backup-K2M7HENN.js");
         const backupPath = createBackup("pre-fix");
         if (backupPath) {
           console.log(`  Backup created: ${backupPath.split("/").pop()}`);

package/dist/{chunk-4OHIVMHS.js → chunk-T2WBLUN7.js}

@@ -3,7 +3,7 @@ import {
   disconnectClient,
   embedViaClient,
   init_exe_daemon_client
-} from "./chunk-UKCSMGNM.js";
+} from "./chunk-UAAOJHVR.js";
 import {
   EMBEDDING_DIM,
   init_memory

package/dist/{chunk-AJOZXJLJ.js → chunk-TBO4RYRU.js}

@@ -1,7 +1,7 @@
 import {
   MODELS_DIR,
   init_config
-} from "./chunk-VA42PIIY.js";
+} from "./chunk-QASVYG2B.js";
 
 // src/lib/reranker.ts
 init_config();

package/dist/{chunk-DUDPJVAC.js → chunk-TGR3H3DM.js}

@@ -1,16 +1,16 @@
 import {
   deactivateBehavior,
   init_behaviors
-} from "./chunk-NFX6MDEO.js";
+} from "./chunk-BNH4LWKE.js";
 import {
   getActiveAgent
-} from "./chunk-CBSUVFZ7.js";
+} from "./chunk-HLYXFVVT.js";
 import {
   canCoordinate,
   getClient,
   init_database,
   init_employees
-} from "./chunk-55LEDLDE.js";
+} from "./chunk-WLW7QV2C.js";
 
 // src/mcp/tools/deactivate-behavior.ts
 init_behaviors();

package/dist/{chunk-UB7E2FEB.js → chunk-TLXIKKEG.js}

@@ -1,7 +1,7 @@
 import {
   init_session_kill_telemetry,
   recordSessionKill
-} from "./chunk-EZUWMBWA.js";
+} from "./chunk-AYUYBWGD.js";
 import {
   init_notifications,
   init_task_scope,
@@ -9,7 +9,7 @@ import {
   sessionScopeFilter,
   verifyPaneAtCapacity,
   writeNotification
-} from "./chunk-AOJHEMHE.js";
+} from "./chunk-V3YNF3JK.js";
 import {
   init_session_registry,
   listSessions
@@ -23,7 +23,7 @@ import {
   init_database,
   init_employees,
   isCoordinatorName
-} from "./chunk-55LEDLDE.js";
+} from "./chunk-WLW7QV2C.js";
 import {
   __esm
 } from "./chunk-KFQGP6VL.js";

package/dist/{chunk-UKCSMGNM.js → chunk-UAAOJHVR.js}

@@ -2,11 +2,11 @@ import {
   ensureDaemonToken,
   init_daemon_auth,
   readDaemonToken
-} from "./chunk-SDYBAMPW.js";
+} from "./chunk-KKYDUT2Z.js";
 import {
   EXE_AI_DIR,
   init_config
-} from "./chunk-VA42PIIY.js";
+} from "./chunk-QASVYG2B.js";
 import {
   __esm
 } from "./chunk-KFQGP6VL.js";

package/dist/{chunk-AOJHEMHE.js → chunk-V3YNF3JK.js}

@@ -1,7 +1,7 @@
 import {
-  init_worktree,
-  worktree_exports
-} from "./chunk-2OG5NAO2.js";
+  ensureWorktree,
+  init_worktree
+} from "./chunk-V6O4GN5M.js";
 import {
   init_intercom_queue,
   queueIntercom
@@ -16,7 +16,7 @@ import {
 } from "./chunk-57HCNSFO.js";
 import {
   init_tmux_status,
-  tmux_status_exports
+  listTmuxSessions
 } from "./chunk-DC4ZD76Y.js";
 import {
   DEFAULT_PROVIDER,
@@ -31,7 +31,7 @@ import {
   getAgentRuntime,
   init_agent_config,
   normalizeCcModelName
-} from "./chunk-SOHGHGWU.js";
+} from "./chunk-VTQRACP7.js";
 import {
   RUNTIME_TABLE,
   init_runtime_table
@@ -40,13 +40,13 @@ import {
   PlanLimitError,
   assertEmployeeLimitSync,
   init_plan_limits
-} from "./chunk-NMG76472.js";
+} from "./chunk-67WOKLTZ.js";
 import {
   getSessionKey,
   init_session_key
 } from "./chunk-HP43GLZ6.js";
 import {
-  agent_context_exports,
+  getAgentContext,
   init_agent_context
 } from "./chunk-ELE2C7L4.js";
 import {
@@ -56,14 +56,13 @@ import {
 import {
   ensureAgentSymlink,
   init_agent_symlinks
-} from "./chunk-DU4ZN7VF.js";
+} from "./chunk-7PJP3TZV.js";
 import {
   expandDualPrefixTools,
   init_mcp_prefix
 } from "./chunk-6BFIFI5F.js";
 import {
   baseAgentName,
-  employees_exports,
   getClient,
   getCoordinatorName,
   getEmployee,
@@ -72,20 +71,23 @@ import {
   isCoordinatorName,
   loadEmployees,
   loadEmployeesSync
-} from "./chunk-55LEDLDE.js";
+} from "./chunk-WLW7QV2C.js";
 import {
   init_license,
   loadDeviceId
-} from "./chunk-GLVF7ENO.js";
+} from "./chunk-AFEXRICE.js";
 import {
   EXE_AI_DIR,
   init_config
-} from "./chunk-VA42PIIY.js";
+} from "./chunk-QASVYG2B.js";
+import {
+  atomicWriteJsonSync,
+  atomicWriteSync,
+  init_secure_files
+} from "./chunk-VAOAI6DS.js";
 import {
   __esm,
-  __export,
-  __require,
-  __toCommonJS
+  __export
 } from "./chunk-KFQGP6VL.js";
 
 // src/lib/routing-log.ts
@@ -319,8 +321,8 @@ async function createTaskCore(input) {
     const { resolveExeSession: resolveExeSession2 } = await import("./lib/tmux-routing.js");
     const resolved = resolveExeSession2();
     try {
-      const { getAgentContext } = await import("./agent-context-CDWUZEXY.js");
-      callerSession = getAgentContext()?.sessionHint ?? "";
+      const { getAgentContext: getAgentContext2 } = await import("./agent-context-CDWUZEXY.js");
+      callerSession = getAgentContext2()?.sessionHint ?? "";
     } catch {
     }
     if (!callerSession) {
@@ -345,7 +347,7 @@ async function createTaskCore(input) {
       if (isCoordinatorSession) {
         earlySessionScope = resolved;
       } else {
-        const { getSessionProject } = await import("./session-scope-S5DODJU4.js");
+        const { getSessionProject } = await import("./session-scope-QPBPO5XV.js");
         const sessionProject = getSessionProject(resolved);
         if (sessionProject && sessionProject !== input.projectName) {
           scopeMismatchWarning = `session/project mismatch: session "${resolved}" owns "${sessionProject}" but task targets "${input.projectName}". Routed to default scope.`;
@@ -1111,18 +1113,6 @@ var init_notifications = __esm({
 });
 
 // src/lib/tasks-review.ts
-var tasks_review_exports = {};
-__export(tasks_review_exports, {
-  cleanupOrphanedReviews: () => cleanupOrphanedReviews,
-  cleanupReviewFile: () => cleanupReviewFile,
-  countNewPendingReviewsSince: () => countNewPendingReviewsSince,
-  countPendingReviews: () => countPendingReviews,
-  createReviewForCompletedTask: () => createReviewForCompletedTask,
-  formatAge: () => formatAge,
-  getReviewChecklist: () => getReviewChecklist,
-  isStale: () => isStale,
-  listPendingReviews: () => listPendingReviews
-});
 import path4 from "path";
 import { existsSync as existsSync4, readdirSync as readdirSync2, unlinkSync as unlinkSync2 } from "fs";
 function formatAge(isoTimestamp) {
@@ -1461,7 +1451,7 @@ __export(tmux_routing_exports, {
   verifyPaneAtCapacity: () => verifyPaneAtCapacity
 });
 import { execFileSync, execSync as execSync2 } from "child_process";
-import { readFileSync as readFileSync3, writeFileSync, mkdirSync as mkdirSync2, existsSync as existsSync5, appendFileSync as appendFileSync2, readdirSync as readdirSync3 } from "fs";
+import { readFileSync as readFileSync3, writeFileSync, mkdirSync as mkdirSync2, existsSync as existsSync5, appendFileSync as appendFileSync2, readdirSync as readdirSync3, openSync, closeSync, writeSync, renameSync, constants } from "fs";
 import path5 from "path";
 import os4 from "os";
 import { fileURLToPath } from "url";
@@ -1483,8 +1473,6 @@ function acquireSpawnLock(sessionName) {
   }
   const lockFile = spawnLockPath(sessionName);
   const lockData = JSON.stringify({ pid: process.pid, timestamp: Date.now() });
-  const { openSync, closeSync, writeSync } = __require("fs");
-  const { constants } = __require("fs");
   try {
     const fd = openSync(lockFile, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL, 420);
     writeSync(fd, lockData);
@@ -1501,7 +1489,6 @@ function acquireSpawnLock(sessionName) {
     if (isProcessAlive(lock.pid) && age < 6e4) {
       return false;
     }
-    const { renameSync } = __require("fs");
     const tmpName = `${lockFile}.stale-${process.pid}-${Date.now()}`;
     try {
       renameSync(lockFile, tmpName);
@@ -1515,7 +1502,6 @@ function acquireSpawnLock(sessionName) {
       return false;
     }
   } catch {
-    const { renameSync } = __require("fs");
     const tmpName = `${lockFile}.stale-${process.pid}-${Date.now()}`;
     try {
       renameSync(lockFile, tmpName);
@@ -1608,7 +1594,7 @@ function extractRootExe(name) {
   if (!name) return null;
   if (!name.includes("-")) return name;
   try {
-    const roster = (init_employees(), __toCommonJS(employees_exports)).loadEmployeesSync();
+    const roster = loadEmployeesSync();
     if (roster.length > 0) {
       const sortedNames = roster.map((e) => e.name).sort((a, b) => b.length - a.length);
       for (const agentName of sortedNames) {
@@ -1633,11 +1619,11 @@ function registerParentExe(sessionKey, parentExe, dispatchedBy) {
   }
   const rootExe = extractRootExe(parentExe) ?? parentExe;
   const filePath = path5.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`);
-  writeFileSync(filePath, JSON.stringify({
+  atomicWriteJsonSync(filePath, {
     parentExe: rootExe,
     dispatchedBy: dispatchedBy || rootExe,
     registeredAt: (/* @__PURE__ */ new Date()).toISOString()
-  }));
+  });
 }
 function getParentExe(sessionKey) {
   try {
@@ -1667,7 +1653,6 @@ function resolveExeSession() {
   const fromSessionName = mySession ? extractRootExe(mySession) ?? null : null;
   const alsHint = (() => {
     try {
-      const { getAgentContext } = (init_agent_context(), __toCommonJS(agent_context_exports));
       return getAgentContext()?.sessionHint ?? "";
     } catch {
       return "";
@@ -1861,7 +1846,7 @@ async function verifyPaneAtCapacity(sessionName) {
       reason: `capture-pane failed: ${err instanceof Error ? err.message : String(err)}`
     };
   }
-  const { isAtCapacity } = await import("./capacity-monitor-D3RGDLMN.js");
+  const { isAtCapacity } = await import("./capacity-monitor-7VX6NW5J.js");
   if (!isAtCapacity(pane)) {
     return {
       atCapacity: false,
@@ -1893,7 +1878,7 @@ function readDebounceState() {
 function writeDebounceState(state) {
   try {
     if (!existsSync5(SESSION_CACHE)) mkdirSync2(SESSION_CACHE, { recursive: true });
-    writeFileSync(DEBOUNCE_FILE, JSON.stringify(state));
+    atomicWriteJsonSync(DEBOUNCE_FILE, state);
   } catch {
   }
 }
@@ -2087,8 +2072,7 @@ function notifyCoordinatorTaskCompletion(coordinatorSession, agentName, taskTitl
     const sessions = transport.listSessions();
     if (!sessions.includes(coordinatorSession)) return false;
     try {
-      const { countPendingReviews: countPendingReviews2 } = (init_tasks_review(), __toCommonJS(tasks_review_exports));
-      const pending = countPendingReviews2(coordinatorSession);
+      const pending = countPendingReviews(coordinatorSession);
       if (pending instanceof Promise) {
         pending.then((count) => {
           if (count > 0) {
@@ -2120,7 +2104,6 @@ function ensureEmployee(employeeName, exeSession, projectDir, opts) {
   }
   try {
     const MAX_CONCURRENT = Number(process.env.EXE_MAX_SESSIONS) || 50;
-    const { listTmuxSessions } = (init_tmux_status(), __toCommonJS(tmux_status_exports));
     const liveSessions = listTmuxSessions().filter((s) => !isExeSession(s));
     if (liveSessions.length >= MAX_CONCURRENT) {
       return {
@@ -2184,12 +2167,11 @@ function ensureEmployee(employeeName, exeSession, projectDir, opts) {
   }
   const spawnOpts = { ...opts, instance: effectiveInstance };
   if (!spawnOpts.cwd) {
-    const WORKTREE_ROLES = /* @__PURE__ */ new Set(["Principal Engineer", "Staff Code Reviewer", "engineer", "developer"]);
+    const COORDINATOR_ROLES = /* @__PURE__ */ new Set(["COO", "CTO", "CMO"]);
     try {
       const roster = loadEmployeesSync();
       const emp = roster.find((e) => baseAgentName(e.name) === baseAgentName(employeeName));
-      if (emp && WORKTREE_ROLES.has(emp.role)) {
-        const { ensureWorktree } = (init_worktree(), __toCommonJS(worktree_exports));
+      if (emp && !COORDINATOR_ROLES.has(emp.role)) {
         const wtPath = ensureWorktree(projectDir, employeeName, effectiveInstance);
         if (wtPath) {
           spawnOpts.cwd = wtPath;
@@ -2239,7 +2221,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
     const trustDir = opts?.cwd ?? projectDir;
     if (!projects[trustDir]) projects[trustDir] = {};
     projects[trustDir].hasTrustDialogAccepted = true;
-    writeFileSync(claudeJsonPath, JSON.stringify(claudeJson, null, 2) + "\n");
+    atomicWriteSync(claudeJsonPath, JSON.stringify(claudeJson, null, 2) + "\n");
   } catch {
   }
   try {
@@ -2278,7 +2260,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
       perms.allow = allow;
       settings.permissions = perms;
       mkdirSync2(projSettingsDir, { recursive: true });
-      writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
+      atomicWriteSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
     }
   } catch {
   }
@@ -2338,7 +2320,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
       `Your parent coordinator session is ${exeSession}.`,
       `Your employees (if any) use the -${exeSession} suffix.`
     ].join("\n");
-    writeFileSync(ctxFile, ctxContent);
+    atomicWriteSync(ctxFile, ctxContent);
     void ctxFile;
   } catch {
   }
@@ -2419,14 +2401,14 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   try {
     const mySession = getMySession();
     const dispatchInfo = path5.join(SESSION_CACHE, `dispatch-info-${sessionName}.json`);
-    writeFileSync(dispatchInfo, JSON.stringify({
+    atomicWriteJsonSync(dispatchInfo, {
       dispatchedBy: mySession,
       rootExe: exeSession,
       provider: useBinSymlink ? ccProvider : useExeAgent ? opts.provider : useCodex ? "openai" : useOpencode ? "opencode" : "anthropic",
       runtime: useCodex ? "codex" : useOpencode ? "opencode" : useExeAgent ? "exe-agent" : "claude",
       model: useCodex ? agentRtConfig.model : useOpencode ? agentRtConfig.model : void 0,
       createdAt: (/* @__PURE__ */ new Date()).toISOString()
-    }));
+    });
   } catch {
   }
   let booted = false;
@@ -2533,6 +2515,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
 var SPAWN_LOCK_DIR, SESSION_CACHE, BEHAVIORS_EXPORT_TIMEOUT_MS, VALID_SESSION_NAME, PARENT_EXE_CACHE_TTL_MS, VERIFY_PANE_LINES, INTERCOM_DEBOUNCE_MS, CODEX_DEBOUNCE_MS, INTERCOM_LOG, DEBOUNCE_FILE, DEBOUNCE_CLEANUP_AGE_MS, BUSY_PATTERN;
 var init_tmux_routing = __esm({
   "src/lib/tmux-routing.ts"() {
+    init_secure_files();
     init_session_registry();
     init_session_key();
     init_transport();
@@ -2546,6 +2529,10 @@ var init_tmux_routing = __esm({
     init_plan_limits();
     init_employees();
     init_agent_symlinks();
+    init_agent_context();
+    init_tasks_review();
+    init_tmux_status();
+    init_worktree();
     SPAWN_LOCK_DIR = path5.join(os4.homedir(), ".exe-os", "spawn-locks");
     SESSION_CACHE = path5.join(os4.homedir(), ".exe-os", "session-cache");
     BEHAVIORS_EXPORT_TIMEOUT_MS = 1e4;
@@ -2600,16 +2587,6 @@ export {
   sessionScopeFilter,
   strictSessionScopeFilter,
   init_task_scope,
-  writeNotification,
-  readUnreadNotifications,
-  markAsRead,
-  markAsReadByTaskFile,
-  cleanupOldNotifications,
-  markDoneTaskNotificationsAsRead,
-  formatNotifications,
-  migrateJsonNotifications,
-  notifications_exports,
-  init_notifications,
   writeCheckpoint,
   extractParentFromContext,
   slugify,
@@ -2624,6 +2601,16 @@ export {
   ensureArchitectureDoc,
   ensureGitignoreExe,
   init_tasks_crud,
+  writeNotification,
+  readUnreadNotifications,
+  markAsRead,
+  markAsReadByTaskFile,
+  cleanupOldNotifications,
+  markDoneTaskNotificationsAsRead,
+  formatNotifications,
+  migrateJsonNotifications,
+  notifications_exports,
+  init_notifications,
   formatAge,
   isStale,
   countPendingReviews,