@askexenow/exe-os 0.9.302 → 0.9.310

package/dist/chunk-G6EJKYK3.js

@@ -0,0 +1,33 @@
+// src/lib/providers/billing-mode.ts
+function isTrue(v) {
+  return typeof v === "string" && v.trim().toLowerCase() === "true";
+}
+function resolveBillingMode(env = process.env) {
+  const rawMode = (env.EXE_BILLING_MODE ?? "").trim().toLowerCase();
+  const explicitAllow = isTrue(env.EXE_ALLOW_DIRECT_PROVIDER_KEYS);
+  const byokAlias = isTrue(env.BYOK_ENABLED);
+  if (rawMode === "metered") {
+    return {
+      mode: "metered",
+      allowDirectKeys: false,
+      reason: byokAlias || explicitAllow ? "EXE_BILLING_MODE=metered overrides BYOK opt-in \u2014 metering enforced, direct keys rejected" : "EXE_BILLING_MODE=metered \u2014 metering enforced"
+    };
+  }
+  const byokRequested = rawMode === "byok" || byokAlias || explicitAllow;
+  if (!byokRequested) {
+    return {
+      mode: "metered",
+      allowDirectKeys: false,
+      reason: "no BYOK opt-in (EXE_BILLING_MODE/EXE_ALLOW_DIRECT_PROVIDER_KEYS/BYOK_ENABLED unset) \u2014 metering enforced"
+    };
+  }
+  return {
+    mode: "byok",
+    allowDirectKeys: true,
+    reason: "BYOK explicitly enabled \u2014 direct provider keys accepted, billing not metered"
+  };
+}
+
+export {
+  resolveBillingMode
+};

package/dist/{chunk-OMCNFTSI.js → chunk-GMZMBLHT.js}

@@ -119,7 +119,7 @@ function releaseBackfillLock() {
 }
 async function getTaskAwareCapacity() {
   const { getClient } = await import("./lib/database.js");
-  const { sessionScopeFilter } = await import("./task-scope-PYOK7OQ6.js");
+  const { sessionScopeFilter } = await import("./task-scope-P5STKYAC.js");
   const client = getClient();
   const scope = sessionScopeFilter();
   const result = await client.execute({

package/dist/{chunk-4LZ54YGA.js → chunk-GSY6HL3T.js}

@@ -1,24 +1,24 @@
 import {
   recordSessionKill
-} from "./chunk-D6UICP3C.js";
+} from "./chunk-LMX7UKGX.js";
 import {
   sessionScopeFilter,
   verifyPaneAtCapacity,
   writeNotification
-} from "./chunk-OVKNFTCL.js";
+} from "./chunk-HED6D5KR.js";
 import {
   listSessions
-} from "./chunk-2LJDLQNO.js";
+} from "./chunk-WJ2PZGRV.js";
 import {
   getTransport
 } from "./chunk-KOO3J5PV.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-WHOT5NZ7.js";
+} from "./chunk-OR3TAZL3.js";
 import {
   getClient,
   isCoordinatorName
-} from "./chunk-P3SIFDES.js";
+} from "./chunk-SCYWCWKY.js";
 
 // src/lib/capacity-monitor.ts
 var CAPACITY_PATTERNS = [

package/dist/{chunk-OVKNFTCL.js → chunk-HED6D5KR.js}

@@ -2,7 +2,7 @@ import {
   ensureWorktree,
   getGitRoot,
   isWorktreeDirty
-} from "./chunk-YNALY3SX.js";
+} from "./chunk-RZJ6DXVE.js";
 import {
   buildTaskResult,
   serializeMessage
@@ -16,16 +16,16 @@ import {
 } from "./chunk-E23LNUWJ.js";
 import {
   registerSession
-} from "./chunk-2LJDLQNO.js";
-import {
-  getTransport
-} from "./chunk-KOO3J5PV.js";
+} from "./chunk-WJ2PZGRV.js";
 import {
   listTmuxSessions
 } from "./chunk-SSTLTIF3.js";
+import {
+  getTransport
+} from "./chunk-KOO3J5PV.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-WHOT5NZ7.js";
+} from "./chunk-OR3TAZL3.js";
 import {
   getAgentRuntime,
   normalizeCcModelName
@@ -36,7 +36,7 @@ import {
 import {
   PlanLimitError,
   assertEmployeeLimitSync
-} from "./chunk-VDHUHXFF.js";
+} from "./chunk-XYG722JW.js";
 import {
   getSessionKey
 } from "./chunk-CVYC6DUW.js";
@@ -51,7 +51,7 @@ import {
 } from "./chunk-MP2AFCGL.js";
 import {
   ensureAgentSymlink
-} from "./chunk-AYMSIV7X.js";
+} from "./chunk-NIZQ3CIS.js";
 import {
   expandDualPrefixTools
 } from "./chunk-HYZV25LY.js";
@@ -63,10 +63,10 @@ import {
   isCoordinatorName,
   loadEmployees,
   loadEmployeesSync
-} from "./chunk-P3SIFDES.js";
+} from "./chunk-SCYWCWKY.js";
 import {
   loadDeviceId
-} from "./chunk-VME3UH4D.js";
+} from "./chunk-JV225JBX.js";
 import {
   EXE_AI_DIR
 } from "./chunk-DFIOOK5R.js";
@@ -673,7 +673,7 @@ async function createTaskCore(input) {
         if (isCoordinatorSession) {
           earlySessionScope = resolved;
         } else {
-          const { getSessionProject } = await import("./session-scope-E54VIYTJ.js");
+          const { getSessionProject } = await import("./session-scope-JGDYAMJO.js");
           const sessionProject = getSessionProject(resolved);
           if (sessionProject && sessionProject !== input.projectName) {
             scopeMismatchWarning = `session/project mismatch: session "${resolved}" owns "${sessionProject}" but task targets "${input.projectName}". Routed to default scope.`;
@@ -922,7 +922,7 @@ async function queryTaskRows(opts) {
   }
   if (opts.founderId !== null) {
     try {
-      const { founderScopeFilter } = await import("./founder-context-3SOKEW76.js");
+      const { founderScopeFilter } = await import("./founder-context-QCTMEK66.js");
       const founderFilter = founderScopeFilter(opts.founderId);
       const cleaned = founderFilter.sql.replace(/^\s*AND\s+/, "");
       conditions.push(cleaned);
@@ -1154,7 +1154,7 @@ async function updateTaskStatus(input) {
     } catch {
     }
     try {
-      const { writeNotification: writeNotification2 } = await import("./notifications-AMJ2K3MM.js");
+      const { writeNotification: writeNotification2 } = await import("./notifications-UP7WQGG4.js");
       await writeNotification2({
         agentId: reviewer,
         agentRole: isCoordinatorName(reviewer) ? "COO" : "manager",
@@ -1574,7 +1574,7 @@ ${input.result ?? ""}`;
   }
   if (shouldWriteCompletionMemory && input.result) {
     try {
-      const { writeMemoryViaDaemon } = await import("./memory-queue-client-DD4E5SIZ.js");
+      const { writeMemoryViaDaemon } = await import("./memory-queue-client-HLURQEV6.js");
       await writeMemoryViaDaemon({
         raw_text: input.result,
         agent_id: String(row.assigned_to),
@@ -1677,7 +1677,7 @@ ${input.result ?? ""}`;
   }
   if (input.status === "done" || input.status === "needs_review") {
     try {
-      const { incrementSkillSuccess } = await import("./skill-refinement-FTURVWFN.js");
+      const { incrementSkillSuccess } = await import("./skill-refinement-DUOO6B7V.js");
       await incrementSkillSuccess(
         String(row.assigned_to),
         row.project_name ? String(row.project_name) : null
@@ -2847,6 +2847,45 @@ function formatIntercomPrompt(reason = "nudge") {
 }
 
 // src/lib/tmux-routing.ts
+var _cachedExeBinDir;
+function resolveExeBinDir() {
+  if (_cachedExeBinDir !== void 0) return _cachedExeBinDir;
+  const nodeBinDir = path7.dirname(process.execPath);
+  if (existsSync7(path7.join(nodeBinDir, "exe-launch-agent"))) {
+    _cachedExeBinDir = nodeBinDir;
+    return _cachedExeBinDir;
+  }
+  const localBin = path7.join(os5.homedir(), ".local", "bin");
+  if (existsSync7(path7.join(localBin, "exe-launch-agent"))) {
+    _cachedExeBinDir = localBin;
+    return _cachedExeBinDir;
+  }
+  _cachedExeBinDir = null;
+  return _cachedExeBinDir;
+}
+function _resetExeBinDirCache() {
+  _cachedExeBinDir = void 0;
+}
+function buildSpawnPath(inheritedPath = process.env.PATH, execPath = process.execPath) {
+  const sep = path7.delimiter;
+  const nodeBinDir = path7.dirname(execPath);
+  const localBin = path7.join(os5.homedir(), ".local", "bin");
+  const exeBinDir = resolveExeBinDir();
+  const prefixDirs = [nodeBinDir, exeBinDir, localBin].filter(
+    (d) => Boolean(d)
+  );
+  const fallbackDirs = ["/opt/homebrew/bin", "/usr/local/bin", "/usr/bin", "/bin"];
+  const inherited = (inheritedPath ?? "").split(sep).filter(Boolean);
+  const seen = /* @__PURE__ */ new Set();
+  const ordered = [];
+  for (const dir of [...prefixDirs, ...inherited, ...fallbackDirs]) {
+    if (!seen.has(dir)) {
+      seen.add(dir);
+      ordered.push(dir);
+    }
+  }
+  return ordered.join(sep);
+}
 var SPAWN_LOCK_DIR = path7.join(os5.homedir(), ".exe-os", "spawn-locks");
 function spawnLockPath(sessionName) {
   return path7.join(SPAWN_LOCK_DIR, `${sessionName}.lock`);
@@ -3276,7 +3315,7 @@ async function verifyPaneAtCapacity(sessionName) {
       reason: `capture-pane failed: ${err instanceof Error ? err.message : String(err)}`
     };
   }
-  const { isAtCapacity } = await import("./capacity-monitor-B4S3XEDO.js");
+  const { isAtCapacity } = await import("./capacity-monitor-BUKYPSWR.js");
   if (!isAtCapacity(pane)) {
     return {
       atCapacity: false,
@@ -4026,6 +4065,46 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   } catch {
   }
   const spawnCwd = opts?.cwd ?? projectDir;
+  try {
+    const inWorktree = spawnCwd.includes("/.worktrees/") || spawnCwd.includes("/.claude/worktrees/");
+    if (!inWorktree) {
+      const COORDINATOR_ROLES = /* @__PURE__ */ new Set(["COO", "CTO", "CMO"]);
+      const roster = loadEmployeesSync();
+      const emp = roster.find(
+        (e) => baseAgentName(e.name) === baseAgentName(employeeName)
+      );
+      const isCodeRole = emp != null && !COORDINATOR_ROLES.has(emp.role);
+      if (isCodeRole) {
+        const reason = opts?.cwd != null ? "preset_cwd" : process.env.EXE_IS_DAEMON === "1" ? "daemon_env" : "git_timeout";
+        process.stderr.write(
+          `[tmux-routing] WORKTREE BYPASSED: code-role ${employeeName} (role=${emp.role}) spawning in MAIN checkout ${spawnCwd} (reason=${reason}) \u2014 commits will land on main
+`
+        );
+        recordOrchestrationEventBestEffort({
+          eventType: "worktree.bypassed",
+          source: "tmux-routing.spawnEmployee",
+          severity: "warn",
+          agentId: employeeName,
+          sessionScope: exeSession,
+          instanceId: opts?.instance != null ? String(opts.instance) : null,
+          tmuxSession: sessionName,
+          payload: { agent: employeeName, role: emp.role, cwd: spawnCwd, reason }
+        });
+      } else if (emp == null) {
+        recordOrchestrationEventBestEffort({
+          eventType: "worktree.bypassed",
+          source: "tmux-routing.spawnEmployee",
+          severity: "warn",
+          agentId: employeeName,
+          sessionScope: exeSession,
+          instanceId: opts?.instance != null ? String(opts.instance) : null,
+          tmuxSession: sessionName,
+          payload: { agent: employeeName, role: "unknown", cwd: spawnCwd, reason: "roster_miss" }
+        });
+      }
+    }
+  } catch {
+  }
   const useExeAgent = !!(opts?.model && opts?.provider);
   const baseRtConfig = getAgentRuntime(employeeName);
   const agentRtConfig = {
@@ -4092,7 +4171,13 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
     EXE_SESSION: exeSession,
     EXE_SESSION_NAME: sessionName,
     EXE_SESSION_START_ISO: (/* @__PURE__ */ new Date()).toISOString(),
-    EXE_OS_ENABLE_LEAN_MCP: "1"
+    EXE_OS_ENABLE_LEAN_MCP: "1",
+    // Bug bbf7824c: tmux inherits a minimal PATH from the launchd-spawned
+    // daemon, which omits the nvm/.local bin dir where exe-launch-agent,
+    // exe-agent, and claude live — so the spawn command is unresolvable and
+    // every auto-dispatch fails. Carry an explicit, PATH that includes the
+    // running node's bin dir and preserves the inherited PATH.
+    PATH: buildSpawnPath()
   };
   if (ccProvider !== DEFAULT_PROVIDER) {
     const cfg = PROVIDER_TABLE[ccProvider];
@@ -4159,7 +4244,13 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
     );
     spawnCommand = `${binName}${cleanupSuffix}`;
   } else {
-    spawnCommand = `exe-launch-agent --agent ${employeeName}${cleanupSuffix}`;
+    let launcherAbs = "";
+    try {
+      const launcherJs = path7.join(path7.dirname(fileURLToPath(import.meta.url)), "..", "bin", "exe-launch-agent.js");
+      if (existsSync7(launcherJs)) launcherAbs = launcherJs;
+    } catch {
+    }
+    spawnCommand = launcherAbs ? `"${process.execPath}" "${launcherAbs}" --agent ${employeeName}${cleanupSuffix}` : `exe-launch-agent --agent ${employeeName}${cleanupSuffix}`;
   }
   const tmuxEnvArgs = Object.entries(launchEnv).flatMap(([key, val]) => ["-e", `${key}=${val}`]);
   let spawnResult;
@@ -4229,8 +4320,23 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   if (!sessionLive) {
     releaseSpawnLock(sessionName);
     const runtimeLabel = useExeAgent ? "exe-agent" : useCodex ? "codex" : useOpencode ? "opencode" : "claude";
-    const errMsg = `spawn did not start: tmux session "${sessionName}" never came alive within ${LIVENESS_CAP_MS / 1e3}s (${runtimeLabel} process failed to launch or exited immediately). Check ~/.exe-os/session-logs/${instanceLabel}-*.log \u2014 common cause: installed Claude Code does not support a launch flag.`;
-    process.stderr.write(`[tmux-routing] SPAWN FAILED ${sessionName}: ${errMsg}
+    let lastPane = "";
+    try {
+      lastPane = transport.capturePane(sessionName, 50);
+    } catch {
+    }
+    const paneLc = lastPane.toLowerCase();
+    let spawnFailureCause;
+    if (paneLc.includes("command not found") || paneLc.includes(": not found")) {
+      spawnFailureCause = "path_not_found";
+    } else if (paneLc.includes("exit 127") || paneLc.includes("claude") && paneLc.includes("not found") || paneLc.includes("not support") || // existing "unsupported launch flag" hint
+    paneLc.includes("unknown option") || paneLc.includes("enoent")) {
+      spawnFailureCause = "claude_launch_failed";
+    } else {
+      spawnFailureCause = "timeout";
+    }
+    const errMsg = `spawn did not start: tmux session "${sessionName}" never came alive within ${LIVENESS_CAP_MS / 1e3}s (${runtimeLabel} process failed to launch or exited immediately; cause=${spawnFailureCause}). Check ~/.exe-os/session-logs/${instanceLabel}-*.log \u2014 common cause: installed Claude Code does not support a launch flag, or the daemon PATH excludes the node/launcher bin dir (cause=path_not_found).`;
+    process.stderr.write(`[tmux-routing] SPAWN FAILED ${sessionName} (${spawnFailureCause}): ${errMsg}
 `);
     recordOrchestrationEventBestEffort({
       eventType: "tmux.spawn.completed",
@@ -4243,7 +4349,10 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
       runtime: useCodex ? "codex" : useOpencode ? "opencode" : useExeAgent ? "exe-agent" : "claude",
       durationMs: Date.now() - spawnStartedAt,
       result: "failed",
-      errorCode: "spawn_session_not_live"
+      // Refined, classified errorCode drives the spawnFailureByCause breakdown
+      // in orchestration-events. Keep the generic detail in payload for context.
+      errorCode: spawnFailureCause,
+      payload: { spawnFailureCause, detail: "spawn_session_not_live", spawnCommand }
     });
     return { sessionName, error: errMsg };
   }
@@ -4433,6 +4542,8 @@ export {
   createReviewForCompletedTask,
   cleanupReviewFile,
   formatIntercomPrompt,
+  _resetExeBinDirCache,
+  buildSpawnPath,
   acquireSpawnLock,
   releaseSpawnLock,
   getMySession,

package/dist/{chunk-ALH6QLYF.js → chunk-HQODUV3G.js}

@@ -1,9 +1,9 @@
 import {
   sendMessage
-} from "./chunk-QWLPAEG5.js";
+} from "./chunk-4Q5VNQTV.js";
 import {
   getActiveAgent
-} from "./chunk-LE7CDIOA.js";
+} from "./chunk-BUOMSIXH.js";
 
 // src/mcp/tools/send-message.ts
 import { z } from "zod";

package/dist/{chunk-US64UR5O.js → chunk-IIHE3FNC.js}

@@ -1,15 +1,15 @@
 import {
   getActiveAgent
-} from "./chunk-LE7CDIOA.js";
+} from "./chunk-BUOMSIXH.js";
 import {
   listTasks
-} from "./chunk-OVKNFTCL.js";
+} from "./chunk-HED6D5KR.js";
 import {
   getAgentContext
 } from "./chunk-GJV3WDWM.js";
 import {
   isCoordinatorName
-} from "./chunk-P3SIFDES.js";
+} from "./chunk-SCYWCWKY.js";
 
 // src/mcp/tools/list-tasks.ts
 import { z } from "zod";

package/dist/{chunk-H2ISTRWU.js → chunk-IRIPGGGL.js}

@@ -2,7 +2,7 @@ import {
   getClient,
   isCoordinatorName,
   loadEmployeesSync
-} from "./chunk-P3SIFDES.js";
+} from "./chunk-SCYWCWKY.js";
 
 // src/lib/steward-gate.ts
 import crypto from "crypto";

package/dist/{chunk-Z3EXECOX.js → chunk-ISILDO7P.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-VUH67PT4.js";
 import {
   getClient
-} from "./chunk-P3SIFDES.js";
+} from "./chunk-SCYWCWKY.js";
 
 // src/lib/global-procedures.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-6ERZFDBS.js → chunk-IZPO6IOZ.js}

@@ -1,6 +1,6 @@
 import {
   getGlobalProceduresBlock
-} from "./chunk-Z3EXECOX.js";
+} from "./chunk-ISILDO7P.js";
 
 // src/lib/employee-templates.ts
 var BASE_OPERATING_PROCEDURES = `

package/dist/{chunk-W65Z4SJS.js → chunk-J3QZPDNH.js}

@@ -1,6 +1,6 @@
 import {
   completeReminder
-} from "./chunk-ORNKGGFX.js";
+} from "./chunk-JNARUXDC.js";
 
 // src/mcp/tools/complete-reminder.ts
 import { z } from "zod";

package/dist/{chunk-3IJCP6ZH.js → chunk-JDYO76PI.js}

@@ -204,7 +204,7 @@ async function main(args) {
   console.log("[health-gate] Starting rollback...");
   restorePreDeployBackup();
   try {
-    const { rollbackStackUpdate, defaultStackPaths } = await import("./stack-update-BIK2QHOE.js");
+    const { rollbackStackUpdate, defaultStackPaths } = await import("./stack-update-XHQJRJEP.js");
     const paths = defaultStackPaths();
     await rollbackStackUpdate({
       manifestRef: paths.manifestRef,

package/dist/{chunk-ORNKGGFX.js → chunk-JNARUXDC.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-P3SIFDES.js";
+} from "./chunk-SCYWCWKY.js";
 import {
   loadConfig
 } from "./chunk-DFIOOK5R.js";

package/dist/{chunk-VME3UH4D.js → chunk-JV225JBX.js}

@@ -1,6 +1,6 @@
 import {
   getDeviceInfo
-} from "./chunk-CXKR5Z5F.js";
+} from "./chunk-2EJ636HI.js";
 import {
   EXE_AI_DIR
 } from "./chunk-DFIOOK5R.js";

package/dist/{chunk-EI7PBUIA.js → chunk-JZW5AOWI.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-ELXR65AN.js";
 import {
   loadEmployeesSync
-} from "./chunk-P3SIFDES.js";
+} from "./chunk-SCYWCWKY.js";
 
 // src/adapters/mcp-http-config.ts
 import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";

package/dist/{chunk-TLOILHSL.js → chunk-K7KBAJQL.js}

@@ -1,20 +1,23 @@
 import {
   MultiAgentOrchestrator
-} from "./chunk-BEIYF4NS.js";
+} from "./chunk-W2J2RF5N.js";
+import {
+  createTokenBudgetMiddleware
+} from "./chunk-ZOVHXTGC.js";
 import {
   createQuietRenderer,
   createTerminalRenderer,
   renderAgentEvents
 } from "./chunk-YZFZDJWZ.js";
-import {
-  checkDangerousPatterns,
-  hasCriticalPattern
-} from "./chunk-CMCYL2JC.js";
 import {
   checkPathSafety,
   checkReadPathSafety,
   containsPathTraversal
 } from "./chunk-NGVOA6ZQ.js";
+import {
+  checkDangerousPatterns,
+  hasCriticalPattern
+} from "./chunk-CMCYL2JC.js";
 import {
   ContextManager,
   agentLoop,
@@ -28,10 +31,6 @@ import {
   recordSuccess,
   shouldFallbackToAsk
 } from "./chunk-UAMWGUBX.js";
-import {
-  composeHooks,
-  createDefaultHooks
-} from "./chunk-O377P7GM.js";
 import {
   ToolRegistry,
   partitionTools,
@@ -50,6 +49,10 @@ import {
   matchInputPattern,
   matchToolPattern
 } from "./chunk-HF25XPZE.js";
+import {
+  composeHooks,
+  createDefaultHooks
+} from "./chunk-O377P7GM.js";
 import {
   StateBus,
   orgBus
@@ -206,7 +209,7 @@ function createExeOSHooks(config) {
         );
       }
       try {
-        const { listBehaviors } = await import("./behaviors-JM6KFSXL.js");
+        const { listBehaviors } = await import("./behaviors-47CPEKJ7.js");
         const behaviors = await listBehaviors(config.agentId, config.projectName, 12);
         if (behaviors.length > 0) {
           process.stderr.write(
@@ -327,7 +330,7 @@ function createExeOSHooks(config) {
     async onSubagentStop(_reason) {
       try {
         const { getClient } = await import("./lib/database.js");
-        const { sessionScopeFilter } = await import("./task-scope-PYOK7OQ6.js");
+        const { sessionScopeFilter } = await import("./task-scope-P5STKYAC.js");
         const client = getClient();
         const ehScope = sessionScopeFilter();
         const tasks = await client.execute({
@@ -419,7 +422,7 @@ function createExeOSHooks(config) {
         try {
           const { writeMemory, flushBatch } = await import("./lib/store.js");
           const { getClient } = await import("./lib/database.js");
-          const { sessionScopeFilter: cpScopeFilter } = await import("./task-scope-PYOK7OQ6.js");
+          const { sessionScopeFilter: cpScopeFilter } = await import("./task-scope-P5STKYAC.js");
           const client = getClient();
           const cpScope = cpScopeFilter();
           const tasks = await client.execute({
@@ -482,10 +485,20 @@ ${taskList}`,
 var SessionManager = class {
   sessions = /* @__PURE__ */ new Map();
   eventHandlers = /* @__PURE__ */ new Set();
-  /** Start a new agent session for an employee */
-  startSession(employeeId, config) {
+  /**
+   * Start a new agent session for an employee.
+   *
+   * When `taskId` is provided, a token-budget middleware bound to that task
+   * is constructed and attached to the agent-loop config so per-task token
+   * limits are enforced live. The middleware reads budget config from the
+   * tasks DB on every call and is a no-op when the task has no `budget_tokens`
+   * set — so budget-less sessions are entirely unaffected. An explicit
+   * `config.tokenBudgetMiddleware` always takes precedence (we never override).
+   */
+  startSession(employeeId, config, taskId) {
     const sessionId = randomUUID2();
     const abortController = new AbortController();
+    const tokenBudgetMiddleware = config.tokenBudgetMiddleware ?? (taskId ? createTokenBudgetMiddleware(taskId) : void 0);
     const session = {
       info: {
         sessionId,
@@ -496,7 +509,7 @@ var SessionManager = class {
         status: "active",
         messageCount: 0
       },
-      config: { ...config, abortController },
+      config: { ...config, abortController, tokenBudgetMiddleware },
       history: [],
       abortController,
       processing: false
@@ -589,14 +602,19 @@ var SessionManager = class {
   offEvent(handler) {
     this.eventHandlers.delete(handler);
   }
-  /** Start a session with ExeOS hooks wired in */
-  startExeOSSession(employeeId, config, hookConfig) {
+  /**
+   * Start a session with ExeOS hooks wired in.
+   *
+   * Pass `taskId` to enable live per-task token-budget enforcement (no-op
+   * when the task has no budget configured — see `startSession`).
+   */
+  startExeOSSession(employeeId, config, hookConfig, taskId) {
     const exeHooks = createExeOSHooks(hookConfig);
     const composedConfig = {
       ...config,
       hooks: composeHooks(exeHooks, config.hooks)
     };
-    return this.startSession(employeeId, composedConfig);
+    return this.startSession(employeeId, composedConfig, taskId);
   }
   /** Stop all sessions */
   stopAll() {

package/dist/{chunk-RHMWSUJB.js → chunk-KAVUTP5G.js}

@@ -1,9 +1,9 @@
 import {
   storeBehavior
-} from "./chunk-N76VTMMF.js";
+} from "./chunk-PMEOSD6S.js";
 import {
   getClient
-} from "./chunk-P3SIFDES.js";
+} from "./chunk-SCYWCWKY.js";
 import {
   loadConfig
 } from "./chunk-DFIOOK5R.js";

package/dist/{chunk-7FNELLMX.js → chunk-KPVVTHPK.js}

@@ -4,31 +4,31 @@ import {
 } from "./chunk-HMP5VT6A.js";
 import {
   createTask
-} from "./chunk-GSWGOGP5.js";
+} from "./chunk-EOS7VPVT.js";
 import {
   getActiveAgent
-} from "./chunk-LE7CDIOA.js";
+} from "./chunk-BUOMSIXH.js";
 import {
   ensureEmployee,
   logTaskDispatch,
   resolveExeSession
-} from "./chunk-OVKNFTCL.js";
+} from "./chunk-HED6D5KR.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-WHOT5NZ7.js";
+} from "./chunk-OR3TAZL3.js";
 import {
   getAgentRuntime,
   validateRuntimeModel
 } from "./chunk-QB5JOGPK.js";
 import {
   getLicenseSync
-} from "./chunk-VDHUHXFF.js";
+} from "./chunk-XYG722JW.js";
 import {
   getAgentContext
 } from "./chunk-GJV3WDWM.js";
 import {
   isCoordinatorName
-} from "./chunk-P3SIFDES.js";
+} from "./chunk-SCYWCWKY.js";
 
 // src/mcp/tools/create-task.ts
 import { z } from "zod";
@@ -334,7 +334,7 @@ function registerCreateTask(server) {
           session_scope: sessionScope,
           created_at: (/* @__PURE__ */ new Date()).toISOString()
         }), "utf-8");
-        const { recordOrchestrationEventBestEffort: recordOE } = await import("./orchestration-events-MB4QVHTD.js");
+        const { recordOrchestrationEventBestEffort: recordOE } = await import("./orchestration-events-PZLLPCKY.js");
         recordOE({
           eventType: "signal.created",
           source: "create-task.mcp",
@@ -366,7 +366,7 @@ function registerCreateTask(server) {
             let projectConflictOpts = {};
             try {
               const { getClient } = await import("./lib/database.js");
-              const { sessionScopeFilter } = await import("./task-scope-PYOK7OQ6.js");
+              const { sessionScopeFilter } = await import("./task-scope-P5STKYAC.js");
               const client = getClient();
               const scope = sessionScopeFilter(task.sessionScope || callerRoot || exeSession || null);
               const existing = await client.execute({