@askexenow/exe-os 0.9.341 → 0.9.342

package/dist/{chunk-54QCG45Y.js → chunk-WOYADZF5.js}

@@ -3,7 +3,8 @@ import {
 } from "./chunk-GJV3WDWM.js";
 
 // src/lib/tmux-transport.ts
-import { execFileSync } from "child_process";
+import { execFile, execFileSync } from "child_process";
+import { promisify } from "util";
 import { writeFileSync, unlinkSync, mkdirSync } from "fs";
 import { randomBytes } from "crypto";
 import path from "path";
@@ -24,6 +25,7 @@ var QUIET = {
   stdio: ["pipe", "pipe", "pipe"],
   timeout: 3e3
 };
+var execFileAsync = promisify(execFile);
 var TmuxTransport = class {
   sessionsCache = { ts: 0, sessions: [] };
   paneStatusCache = { ts: 0, bySession: /* @__PURE__ */ new Map(), byPaneId: /* @__PURE__ */ new Map() };
@@ -68,12 +70,30 @@ var TmuxTransport = class {
     this.paneStatusCache = { ts: now, bySession, byPaneId };
     return this.paneStatusCache;
   }
+  /**
+   * The tmux session this PROCESS lives in. Immutable for the process lifetime
+   * (a process cannot move between sessions), so it is resolved once and
+   * memoized — unlike listSessions/paneStatus, which describe the changing
+   * outside world and keep their TTL caches.
+   *
+   * Boot-perf (bug 4b2d2d10): this was an uncached fork on EVERY call. Every
+   * sessionScopeFilter() → resolveExeSession() → getMySession() hop paid a
+   * `tmux display-message` fork — 9.95s of a 76s boot, most of it from inside
+   * per-task loops. Memoizing removes the forks without changing the answer.
+   * Deliberately NOT cleared by invalidateCaches(): spawning or killing another
+   * session cannot rename the session we are in.
+   */
+  mySessionCache = { resolved: false, value: null };
   getMySession() {
+    if (this.mySessionCache.resolved) return this.mySessionCache.value;
+    let value = null;
     try {
-      return execFileSync("tmux", ["display-message", "-p", "#{session_name}"], QUIET).trim() || null;
+      value = execFileSync("tmux", ["display-message", "-p", "#{session_name}"], QUIET).trim() || null;
     } catch {
-      return null;
+      value = null;
     }
+    this.mySessionCache = { resolved: true, value };
+    return value;
   }
   listSessions() {
     return this.listSessionsCached();
@@ -164,7 +184,18 @@ var TmuxTransport = class {
       return { sessionName: name, error: `spawn failed: ${e}` };
     }
   }
-  kill(target, callerScope) {
+  /**
+   * Session-isolation guard shared by the sync kill and the async killAsync.
+   * Returns true when the kill is BLOCKED (caller scope ≠ target scope).
+   *
+   * Session isolation: only kill sessions belonging to the caller's coordinator
+   * scope. An agent in exe1 can only kill *-exe1 sessions. Coordinator sessions
+   * (exe1) can kill their own employees.
+   *
+   * Caller identity priority (bug a671b0c9): explicit callerScope → ALS
+   * sessionHint/EXE_SESSION → ambient tmux.
+   */
+  killBlockedByScope(target, callerScope) {
     const resolvedCaller = this.resolveCallerScope(callerScope);
     if (resolvedCaller && target.includes("-")) {
       const targetScope = target.slice(target.lastIndexOf("-") + 1);
@@ -174,15 +205,35 @@ var TmuxTransport = class {
           `[tmux-transport] BLOCKED kill: caller scope "${resolvedCaller}" tried to kill ${target} (scope ${targetScope} \u2260 ${cScope}). Session isolation enforced.
 `
         );
-        return;
+        return true;
       }
     }
+    return false;
+  }
+  kill(target, callerScope) {
+    if (this.killBlockedByScope(target, callerScope)) return;
     try {
       execFileSync("tmux", ["kill-session", "-t", target], QUIET);
     } catch {
     }
     this.invalidateCaches();
   }
+  /**
+   * Async twin of kill — same isolation guard, but the actual kill-session runs
+   * via execFileAsync so it never blocks the event loop. Bug 1c870c78: the
+   * daemon's 5-min TTL timer kills expired sessions through deps.killSession →
+   * kill → execFileSync; on kill decisions that was a sync tmux subprocess on
+   * the timer. The TTL real deps now await this. Sync kill() is kept for the
+   * many non-timer callers (no ripple).
+   */
+  async killAsync(target, callerScope) {
+    if (this.killBlockedByScope(target, callerScope)) return;
+    try {
+      await execFileAsync("tmux", ["kill-session", "-t", target], { encoding: "utf8", timeout: 3e3 });
+    } catch {
+    }
+    this.invalidateCaches();
+  }
   /**
    * Resolve the caller's coordinator scope for isolation enforcement.
    * In the shared HTTP daemon, ambient tmux is meaningless — prefer the

package/dist/{chunk-7Y5UDEVM.js → chunk-WZHZCDDO.js}

@@ -3,7 +3,7 @@ import {
   atomicWriteJson,
   atomicWriteJsonSync,
   ensurePrivateDir
-} from "./chunk-SHIICYJW.js";
+} from "./chunk-BYTDMAGB.js";
 
 // src/lib/config.ts
 import { readFile } from "fs/promises";
@@ -217,14 +217,15 @@ var DEFAULT_CONFIG = {
     enabled: true,
     cooldownMinutes: 10
   },
-  // Memory-pressure watchdog — off and dry-run by default (stability-critical feature).
+  // Memory-pressure watchdog — active by default; kills only idle worker sessions.
   memoryPressureWatchdog: {
-    enabled: false,
-    dryRun: true,
+    enabled: true,
+    dryRun: false,
     highWatermarkPct: 90,
     targetPct: 80,
     maxKillsPerTick: 2,
-    intervalMs: 6e4
+    intervalMs: 6e4,
+    maxLiveEmployeeSessions: 6
   },
   autoUpdate: {
     checkOnBoot: true,

package/dist/{chunk-3NGZ4PL7.js → chunk-X2Q5NLUL.js}

@@ -1,10 +1,10 @@
 import {
   EXE_AI_DIR
-} from "./chunk-7Y5UDEVM.js";
+} from "./chunk-WZHZCDDO.js";
 import {
   enforcePrivateFileSync,
   ensurePrivateDirSync
-} from "./chunk-SHIICYJW.js";
+} from "./chunk-BYTDMAGB.js";
 
 // src/lib/daemon-auth.ts
 import crypto from "crypto";
@@ -43,6 +43,14 @@ function shouldEnforceSessionIdentity(env = process.env) {
   const v = (env.EXE_ENFORCE_SESSION_IDENTITY ?? "").trim().toLowerCase();
   return v === "1" || v === "true" || v === "yes" || v === "on";
 }
+function assessInitialBindIdentity(input) {
+  const { agentId, privileged, corroborated, enforce } = input;
+  if (!privileged || corroborated) {
+    return { allow: true, flagged: false, reject: false };
+  }
+  const reason = `header-only privileged identity "${agentId}": the X-Agent-Id header claims a management (chain-of-command) role but no launcher-written session-registry entry corroborates it. ${enforce ? "Rejecting handshake" : "Binding with a warning"} (bug 2138232d).`;
+  return { allow: !enforce, flagged: true, reject: enforce, reason };
+}
 function reconcileSessionAgentIdentity(boundAgentId, claimedAgentId, enforce = false) {
   const bound = normalizeToken(boundAgentId ?? null);
   if (!bound) {
@@ -77,5 +85,6 @@ export {
   readDaemonToken,
   ensureDaemonToken,
   shouldEnforceSessionIdentity,
+  assessInitialBindIdentity,
   reconcileSessionAgentIdentity
 };

package/dist/{chunk-CCIEIRV2.js → chunk-X33NYQYJ.js}

@@ -1,9 +1,9 @@
 import {
   listBehaviors
-} from "./chunk-OUEFW4RK.js";
+} from "./chunk-KW2SD2FL.js";
 import {
   loadConfigSync
-} from "./chunk-7Y5UDEVM.js";
+} from "./chunk-WZHZCDDO.js";
 
 // src/lib/behaviors-export.ts
 import os from "os";

package/dist/{chunk-K6KRBXQP.js → chunk-XHK3FS3W.js}

@@ -1,6 +1,6 @@
 import {
   getGlobalProceduresBlock
-} from "./chunk-6BQG7EKO.js";
+} from "./chunk-GJ26DULE.js";
 
 // src/lib/employee-templates.ts
 var BASE_OPERATING_PROCEDURES = `
@@ -533,7 +533,8 @@ var LEGACY_TEMPLATE_ALIASES = {
   teddy: "chief-of-staff"
 };
 function getTemplate(key) {
-  return TEMPLATES[key] ?? TEMPLATES[LEGACY_TEMPLATE_ALIASES[key] ?? ""];
+  const k = key.toLowerCase();
+  return TEMPLATES[k] ?? TEMPLATES[LEGACY_TEMPLATE_ALIASES[k] ?? ""];
 }
 function getTemplateByRole(role) {
   const lower = role.toLowerCase();

package/dist/{chunk-AP455LBW.js → chunk-XZXBB3TN.js}

@@ -2,14 +2,14 @@ import {
   connectEmbedDaemon,
   disconnectClient,
   embedViaClient
-} from "./chunk-UU4UINUX.js";
+} from "./chunk-G4RGKBCA.js";
 import {
   EMBEDDING_DIM
 } from "./chunk-FXU7JOXK.js";
 import {
   MODELS_DIR,
   loadConfigSync
-} from "./chunk-7Y5UDEVM.js";
+} from "./chunk-WZHZCDDO.js";
 
 // src/lib/embedder.ts
 var MAX_EMBED_CHARS = 24e3;

package/dist/{chunk-JSKBHUR7.js → chunk-YCANDMI2.js}

@@ -1,9 +1,9 @@
 import {
   EXE_AI_DIR
-} from "./chunk-7Y5UDEVM.js";
+} from "./chunk-WZHZCDDO.js";
 import {
   atomicWriteJsonSync
-} from "./chunk-SHIICYJW.js";
+} from "./chunk-BYTDMAGB.js";
 
 // src/lib/background-jobs.ts
 import { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync } from "fs";

package/dist/{chunk-YIIME2OW.js → chunk-YLXTKI6M.js}

@@ -1,6 +1,6 @@
 import {
   redactSecrets
-} from "./chunk-RP5GETX5.js";
+} from "./chunk-4QCFFW2H.js";
 import {
   isExeMcpTool,
   stripExeMcpPrefix