@askexenow/exe-os 0.9.172 → 0.9.173

package/dist/bin/cli.js

@@ -107,7 +107,7 @@ if (args.includes("--global")) {
     process.exit(1);
   }
 } else if (args[0] === "key") {
-  const { main: runKey } = await import("../exe-key-67XRL4GL.js");
+  const { main: runKey } = await import("../exe-key-NBM3H7VT.js");
   await runKey(args.slice(1));
 } else if (args[0] === "link") {
   console.error("`exe-os link` has been removed from the customer command surface.");

package/dist/{exe-key-67XRL4GL.js → exe-key-NBM3H7VT.js}

@@ -1,7 +1,4 @@
 #!/usr/bin/env node
-import {
-  requestDeployRestart
-} from "./chunk-PWMMIGVQ.js";
 import {
   disposeDatabase,
   ensureSchema,
@@ -83,15 +80,12 @@ async function stopDaemonIfAlive() {
       throw new Error("Refusing to signal PID 1. Stop the exed Docker container manually, then retry.");
     }
   }
-  const result = requestDeployRestart("key-rotation");
-  if (!result.ok) {
-    throw new Error(`Daemon stop failed: ${result.skipped}`);
-  }
-  for (let i = 0; i < 10; i++) {
+  process.kill(Number(daemon.pid), "SIGTERM");
+  for (let i = 0; i < 30; i++) {
     await new Promise((resolve) => setTimeout(resolve, 500));
     if (!daemonStatus().alive) return;
   }
-  throw new Error(`Daemon pid ${daemon.pid} did not stop after orchestrated kill; refusing to rotate`);
+  throw new Error(`Daemon pid ${daemon.pid} did not stop after SIGTERM; refusing to rotate`);
 }
 async function keyStatus() {
   const key = await getMasterKey();

package/dist/hooks/pre-tool-use.js

@@ -184,6 +184,27 @@ If MCP is down, tell the user: "MCP disconnected. Run /mcp to reconnect."`
         }
       }
     }
+    if (/^(Write|Edit)$/.test(data.tool_name)) {
+      const filePath = data.tool_input?.file_path ?? "";
+      const cwd = process.cwd();
+      const worktreeMatch = cwd.match(/\.worktrees\/([^/]+)/);
+      if (worktreeMatch && filePath) {
+        const worktreeRoot = cwd.slice(0, cwd.indexOf(".worktrees/") + ".worktrees/".length + worktreeMatch[1].length);
+        const repoRoot = cwd.slice(0, cwd.indexOf(".worktrees") - 1);
+        if (filePath.startsWith(repoRoot + "/") && !filePath.startsWith(worktreeRoot + "/") && !filePath.startsWith(worktreeRoot)) {
+          const output = JSON.stringify({
+            hookSpecificOutput: { permissionDecision: "deny" },
+            systemMessage: `ACTION BLOCKED: You are in worktree "${worktreeMatch[1]}" but tried to edit a file in the main repo root.
+DENIED path: ${filePath}
+Your worktree root is: ${worktreeRoot}/
+Edit the file at: ${filePath.replace(repoRoot, worktreeRoot)} instead.
+NEVER edit files outside your worktree. The main repo belongs to the coordinator.`
+          });
+          process.stdout.write(output);
+          process.exit(0);
+        }
+      }
+    }
     if (/^(Write|Edit)$/.test(data.tool_name) && !canCoordinate(agent.agentId, agent.agentRole)) {
       const filePath = data.tool_input?.file_path ?? "";
       const exeMatch = filePath.match(/exe\/([^/]+)\//);

package/dist/lib/exe-daemon.js

@@ -3235,7 +3235,6 @@ process.on("uncaughtException", (err) => {
 function killOrphanDaemons() {
   try {
     const pids = execSyncNode("pgrep -f 'exe-daemon\\.js' 2>/dev/null || true", { encoding: "utf8", timeout: 3e3 }).trim().split("\n").filter(Boolean).map(Number).filter((n) => !isNaN(n) && n !== process.pid);
-    if (pids.length === 0) return;
     for (const pid of pids) {
       try {
         process.kill(pid, 0);
@@ -3245,17 +3244,6 @@ function killOrphanDaemons() {
       } catch {
       }
     }
-    setTimeout(() => {
-      for (const pid of pids) {
-        try {
-          process.kill(pid, 0);
-          process.stderr.write(`[exed] Orphan PID ${pid} survived SIGTERM \u2014 escalating to SIGKILL
-`);
-          process.kill(pid, "SIGKILL");
-        } catch {
-        }
-      }
-    }, 2e3).unref();
   } catch {
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.172",
+  "version": "0.9.173",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",