@askexenow/exe-os 0.9.359 → 0.9.361

package/dist/{chunk-74R44E4S.js → chunk-VGWGXAHT.js}

@@ -1,6 +1,9 @@
 import {
   ensureAgentSymlink
-} from "./chunk-CAEWPEBA.js";
+} from "./chunk-W6J25BU7.js";
+import {
+  resolveRowVisibility
+} from "./chunk-J5KRIGHE.js";
 import {
   ensureWorktree,
   ensureWorktreeAsync,
@@ -8,14 +11,13 @@ import {
   getMainRepoRoot,
   isInsideGitRepo,
   isWorktreeDirty
-} from "./chunk-XV42EAVK.js";
+} from "./chunk-AQF6XMZ7.js";
 import {
-  incrementSkillSuccess
-} from "./chunk-6WHYSLGF.js";
+  runBudgetedSweep
+} from "./chunk-KI5PFRG6.js";
 import {
-  reviewSignalPath,
-  taskSignalDir
-} from "./chunk-EIKATSE4.js";
+  incrementSkillSuccess
+} from "./chunk-J5QNK5VL.js";
 import {
   LEASE_MINUTES,
   isLeaseExpired,
@@ -24,20 +26,24 @@ import {
 import {
   buildTaskResult,
   serializeMessage
-} from "./chunk-4JERP7NT.js";
+} from "./chunk-QAEWWYHL.js";
+import {
+  reviewSignalPath,
+  taskSignalDir
+} from "./chunk-EIKATSE4.js";
 import {
   listSessions,
   registerSession
-} from "./chunk-3ODATKWH.js";
+} from "./chunk-ZPW6FAEQ.js";
 import {
   getTransport
 } from "./chunk-UXLO7VHX.js";
 import {
   listTmuxSessions
-} from "./chunk-SKGMF2SO.js";
+} from "./chunk-GBNB4EWD.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-POZGQQEZ.js";
+} from "./chunk-2PIEDT3G.js";
 import {
   appendDispatchJournalEvent,
   releaseDispatchClaim,
@@ -49,23 +55,17 @@ import {
   getAgentRuntime,
   normalizeCcModelName,
   resolveSpawnRuntimeConfig
-} from "./chunk-VAY6IXWY.js";
+} from "./chunk-KDMVVHZH.js";
 import {
   PlanLimitError,
   assertEmployeeLimitSync
-} from "./chunk-F3QTF4T7.js";
-import {
-  BUSY_PATTERN
-} from "./chunk-OSKWCKUC.js";
-import {
-  runBudgetedSweep
-} from "./chunk-KI5PFRG6.js";
+} from "./chunk-YZLDE3XJ.js";
 import {
   getSessionKey
 } from "./chunk-CVYC6DUW.js";
 import {
   writeMemoryViaDaemon
-} from "./chunk-A6VIK3SS.js";
+} from "./chunk-4P2BFNSB.js";
 import {
   getProjectName
 } from "./chunk-OPU3NYOO.js";
@@ -89,16 +89,16 @@ import {
   loadEmployeesSync,
   offloadReadIfMain,
   offloadReadQuery
-} from "./chunk-EA5FVACM.js";
+} from "./chunk-ESGLOI6Q.js";
 import {
   RUNTIME_TABLE
 } from "./chunk-WNBZJSQT.js";
 import {
   loadDeviceId
-} from "./chunk-2OVTGZYH.js";
+} from "./chunk-IM7PRQ27.js";
 import {
   EXE_AI_DIR
-} from "./chunk-BCZF3AGJ.js";
+} from "./chunk-BRIZ6OZ3.js";
 import {
   atomicWriteJsonSync,
   atomicWriteSync
@@ -1302,7 +1302,7 @@ function checkLaneAffinity(title, context, assigneeName, employees = loadEmploye
   const expectedRoles = Array.from(matchedRoles).join(" or ");
   return `\u26A0\uFE0F Lane mismatch: task content suggests ${expectedRoles}, but assigned to ${assigneeName} (${assigneeRole}).`;
 }
-async function resolveTask(client, identifier, scopeSession) {
+async function resolveTask(client, identifier, scopeSession, intent = "mutate") {
   const scope = sessionScopeFilter(scopeSession);
   const currentScope = typeof scope.args[0] === "string" ? String(scope.args[0]) : null;
   const crossSessionError = (rows) => {
@@ -1317,6 +1317,11 @@ async function resolveTask(client, identifier, scopeSession) {
     });
     if (crossSessionRows.length === 0) return null;
     const matches = crossSessionRows.slice(0, 5).map((row) => `${String(row.id).slice(0, 8)} "${String(row.title)}" [session:${String(row.session_scope)}]`).join(", ");
+    if (intent === "read") {
+      return new Error(
+        `Cross-session task not in current session: "${identifier}" belongs to another coordinator session. Current session: ${currentScope}. Matching task(s): ${matches}. Use task(action="list", cross_session=true) for read-only diagnostics, or switch to the owning session to view it.`
+      );
+    }
     return new Error(
       `Cross-session task mutation blocked: "${identifier}" belongs to another coordinator session. Current session: ${currentScope}. Matching task(s): ${matches}. Use task(action="list", cross_session=true) for read-only diagnostics, or switch to the owning session to update/close.`
     );
@@ -1471,6 +1476,7 @@ async function createTaskCore(input) {
   const id = crypto2.randomUUID();
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const slug = slugify(input.title);
+  const rowVisibility = resolveRowVisibility(input.orgOrigin);
   if (input.callerIsSidechain || input.assignedBy.startsWith("subagent:")) {
     throw new Error(
       `${TASK_SIDECHAIN_WRITE_BLOCKED_PREFIX}: sidechain contexts cannot create parent task rows. Report findings back to the owning session; the parent creates or updates tasks.`
@@ -1515,7 +1521,7 @@ async function createTaskCore(input) {
         if (isCoordinatorSession) {
           earlySessionScope = resolved;
         } else {
-          const { getSessionProject } = await import("./session-scope-2ADEVY3C.js");
+          const { getSessionProject } = await import("./session-scope-64QIDBJS.js");
           const sessionProject = getSessionProject(resolved);
           if (sessionProject && sessionProject !== input.projectName) {
             scopeMismatchWarning = `session/project mismatch: session "${resolved}" owns "${sessionProject}" but task targets "${input.projectName}". Routed to default scope.`;
@@ -1612,8 +1618,8 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
   ).digest("hex") : null;
   try {
     const res = await client.execute({
-      sql: `INSERT INTO tasks (id, title, assigned_to, assigned_by, project_name, priority, status, task_file, blocked_by, parent_task_id, reviewer, context, complexity, budget_tokens, budget_fallback_model, tokens_used, tokens_warned_at, session_scope, spawn_runtime, spawn_model, device_id, founder_id, idempotency_key, created_at, updated_at)
-            VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      sql: `INSERT INTO tasks (id, title, assigned_to, assigned_by, project_name, priority, status, task_file, blocked_by, parent_task_id, reviewer, context, complexity, budget_tokens, budget_fallback_model, tokens_used, tokens_warned_at, session_scope, spawn_runtime, spawn_model, device_id, founder_id, idempotency_key, visibility, origin_org_id, created_at, updated_at)
+            VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
             ON CONFLICT(idempotency_key) WHERE idempotency_key IS NOT NULL DO NOTHING
             RETURNING id`,
       args: [
@@ -1640,6 +1646,13 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
         loadDeviceId(),
         input.founderId ?? null,
         idempotencyKey,
+        // §4.1 (B7). `rowVisibility` is 'private' for every write that carries
+        // no org-origin stamp — i.e. every write in the product except an
+        // accepted org task_request. It is resolved ONCE, above, and written
+        // explicitly rather than left to the column default so the value in the
+        // row is the value this code decided.
+        rowVisibility.visibility,
+        rowVisibility.originOrgId,
         now,
         now
       ]
@@ -1812,7 +1825,7 @@ async function buildTaskRowsStatement(opts) {
   }
   if (opts.founderId !== null) {
     try {
-      const { founderScopeFilter } = await import("./founder-context-C7X7IRDA.js");
+      const { founderScopeFilter } = await import("./founder-context-TU5G4AKR.js");
       const founderFilter = founderScopeFilter(opts.founderId);
       const cleaned = founderFilter.sql.replace(/^\s*AND\s+/, "");
       conditions.push(cleaned);
@@ -3545,7 +3558,7 @@ async function getGroupResults(groupId) {
   }));
 }
 async function getAggregatedGroupResults(groupId) {
-  const { parseMessage, isTypedMessage } = await import("./typed-messages-TKDGVPHS.js");
+  const { parseMessage, isTypedMessage } = await import("./typed-messages-RCMPEKJN.js");
   const client = getClient();
   const groupCheck = await client.execute({
     sql: "SELECT id FROM task_groups WHERE id = ?",
@@ -4498,6 +4511,9 @@ function sanitizeSessionScope(scope) {
   return isValidSessionScope(scope) ? scope : null;
 }
 
+// src/lib/session-busy-pattern.ts
+var BUSY_PATTERN = /[✻✽✶✳].*…|Running…|• Working|• Ran |• Explored|• Called|esc to interrupt|Waiting for \d+ background agents?/i;
+
 // src/lib/tmux-routing.ts
 var _cachedExeBinDir;
 function resolveExeBinDir() {
@@ -5144,7 +5160,7 @@ async function verifyPaneAtCapacity(sessionName) {
       reason: `capture-pane failed: ${err instanceof Error ? err.message : String(err)}`
     };
   }
-  const { isAtCapacity } = await import("./capacity-monitor-QLPEL6S5.js");
+  const { isAtCapacity } = await import("./capacity-monitor-3HVLTPQA.js");
   if (!isAtCapacity(pane)) {
     return {
       atCapacity: false,
@@ -5378,7 +5394,7 @@ async function countScopedPendingReviews(targetSession, reviewer) {
 }
 async function countScopedOpenTasks(targetSession, agentId) {
   try {
-    const { fastDbInit } = await import("./fast-db-init-6H67K76Q.js");
+    const { fastDbInit } = await import("./fast-db-init-YZNPKBNX.js");
     const client = await fastDbInit();
     const scope = extractRootExe(targetSession);
     if (!scope) return 0;
@@ -5433,7 +5449,7 @@ function buildScopedInProgressTaskQuery(targetSession) {
 async function findScopedInProgressTaskId(targetSession) {
   const q = buildScopedInProgressTaskQuery(targetSession);
   if (!q) return null;
-  const { fastDbInit } = await import("./fast-db-init-6H67K76Q.js");
+  const { fastDbInit } = await import("./fast-db-init-YZNPKBNX.js");
   const client = await fastDbInit();
   const result = await client.execute(q);
   const id = result.rows[0]?.id;
@@ -5553,7 +5569,7 @@ function sendIntercom(targetSession, opts) {
   }
   if ((process.env.EXE_NOTIFICATION_LEDGER ?? "").trim().toLowerCase() === "shadow") {
     const shadowScope = opts && "callerSessionScope" in opts ? opts.callerSessionScope : void 0;
-    void import("./notification-ledger-NZ4HO3M5.js").then((m) => m.recordShadowNudge(targetSession, reason, shadowScope)).catch(() => {
+    void import("./notification-ledger-4JVPBNDO.js").then((m) => m.recordShadowNudge(targetSession, reason, shadowScope)).catch(() => {
     });
   }
   if (!opts?.force && isDebounced(targetSession)) {
@@ -5689,7 +5705,7 @@ function scheduleDeferredSpawnNudge(input) {
           return;
         }
         queueIntercom(input.sessionName, `spawn nudge failed after ${attempt} attempts: ${msg}`, "signal");
-        void import("./notifications-74YECZ4V.js").then(({ writeNotification: writeNotification2 }) => writeNotification2({
+        void import("./notifications-7EJE7FEP.js").then(({ writeNotification: writeNotification2 }) => writeNotification2({
           agentId: getCoordinatorName(),
           agentRole: "COO",
           event: "error_spike",
@@ -6126,7 +6142,7 @@ function ensureEmployee(employeeName, exeSession, projectDir, opts) {
       const emp = roster.find((e) => baseAgentName(e.name) === baseAgentName(employeeName));
       if (emp && !COORDINATOR_ROLES.has(emp.role)) {
         try {
-          const collisions = checkWorktreeCollisions(projectDir);
+          const collisions = spawnOpts.collisionGuardHandled ? [] : checkWorktreeCollisions(projectDir);
           if (collisions.length > 0) {
             for (const c of collisions) {
               process.stderr.write(
@@ -6361,6 +6377,7 @@ async function ensureEmployeeAsync(employeeName, exeSession, projectDir, opts) {
 `
     );
   }
+  asyncOpts = { ...asyncOpts, collisionGuardHandled: true };
   const result = ensureEmployee(employeeName, exeSession, projectDir, asyncOpts);
   if (asyncOpts.spawnLockHeld && result.sessionName) {
     releaseSpawnLock(result.sessionName);
@@ -6383,6 +6400,71 @@ function resolveSpawnCwd(requestedCwd, projectDir, dirExists = existsSync9) {
   if (dirExists(projectDir)) return { cwd: projectDir, fellBack: true, requestedCwd };
   return { cwd: null, fellBack: false, requestedCwd };
 }
+function spawnExitMarkerPath(sessionName) {
+  const safe = sessionName.replace(/[^A-Za-z0-9._-]/g, "_");
+  return path8.join(SESSION_CACHE, `spawn-exit-${safe}`);
+}
+function buildSpawnCommand(launchCommand, exitMarkerPath, cleanupSuffix) {
+  const list = `${launchCommand}; printf '%s' "$?" > "${exitMarkerPath}"${cleanupSuffix}`;
+  return `/bin/sh -c '${list.replace(/'/g, `'\\''`)}'`;
+}
+function readSpawnExitMarker(markerPath, read = (p) => readFileSync6(p, "utf8")) {
+  let raw;
+  try {
+    raw = read(markerPath);
+  } catch {
+    return null;
+  }
+  const trimmed = raw.trim();
+  if (!/^\d+$/.test(trimmed)) return null;
+  return Number(trimmed);
+}
+function paneShowsRuntimeBanner(pane, runtime) {
+  if (runtime === "exe-agent") return pane.includes("[exe-agent]") || pane.includes("online");
+  if (runtime === "codex") {
+    return pane.includes("codex") || pane.includes("Codex") || pane.includes("exe-start-codex");
+  }
+  return pane.includes("Claude Code") || pane.includes("\u276F");
+}
+function classifySpawnFailurePane(pane) {
+  const paneLc = pane.toLowerCase();
+  if (paneLc.includes("command not found") || paneLc.includes(": not found")) {
+    return "path_not_found";
+  }
+  if (paneLc.includes("exit 127") || paneLc.includes("claude") && paneLc.includes("not found") || paneLc.includes("not support") || // existing "unsupported launch flag" hint
+  paneLc.includes("unknown option") || paneLc.includes("enoent")) {
+    return "claude_launch_failed";
+  }
+  return "timeout";
+}
+function resolveStartupWatchCapMs(input) {
+  const explicit = Number(input.override) || Number(input.legacyOverride);
+  if (explicit > 0) return explicit;
+  if (input.useCodex) return 2500;
+  return input.callerIsDaemon ? 2e3 : 3e3;
+}
+function watchSpawnStartup(probes, opts) {
+  const interval = Math.max(1, opts.intervalMs);
+  const iterations = Math.max(0, Math.ceil(Math.max(0, opts.capMs) / interval));
+  const capture = () => {
+    try {
+      return probes.capturePane();
+    } catch {
+      return "";
+    }
+  };
+  let polls = 0;
+  for (let i = 0; i <= iterations; i++) {
+    polls++;
+    const exitCode = probes.readLauncherExit();
+    if (exitCode !== null) return { outcome: "exited", exitCode, pane: capture(), polls };
+    if (!probes.isAlive()) {
+      return { outcome: "exited", exitCode: probes.readLauncherExit(), pane: capture(), polls };
+    }
+    if (i < iterations) probes.sleep(interval);
+  }
+  return { outcome: "running", polls };
+}
 function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   const transport = getTransport();
   const sessionName = employeeSessionName(employeeName, exeSession, opts?.instance);
@@ -6732,29 +6814,29 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
       }
     }
   }
-  let spawnCommand;
+  let launchCommand;
   if (useExeAgent) {
-    spawnCommand = `exe-agent --employee ${employeeName} --model ${opts.model} --provider ${opts.provider}${cleanupSuffix}`;
+    launchCommand = `exe-agent --employee ${employeeName} --model ${opts.model} --provider ${opts.provider}`;
   } else if (useCodex) {
     process.stderr.write(
       `[tmux-routing] agent-config: ${employeeName} \u2192 codex (${agentRtConfig.model})
 `
     );
-    spawnCommand = `exe-start-codex --agent ${employeeName} --session ${sessionName}${cleanupSuffix}`;
+    launchCommand = `exe-start-codex --agent ${employeeName} --session ${sessionName}`;
   } else if (useOpencode) {
     const binName = `${employeeName}-opencode`;
     process.stderr.write(
       `[tmux-routing] agent-config: ${employeeName} \u2192 opencode (${agentRtConfig.model})
 `
     );
-    spawnCommand = `${binName}${cleanupSuffix}`;
+    launchCommand = binName;
   } else if (useBinSymlink) {
     const binName = `${employeeName}-${ccProvider}`;
     process.stderr.write(
       `[tmux-routing] provider cascade: ${ccProvider} \u2192 spawning ${binName}
 `
     );
-    spawnCommand = `${binName}${cleanupSuffix}`;
+    launchCommand = binName;
   } else {
     let launcherAbs = "";
     try {
@@ -6762,8 +6844,18 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
       if (existsSync9(launcherJs)) launcherAbs = launcherJs;
     } catch {
     }
-    spawnCommand = launcherAbs ? `"${process.execPath}" "${launcherAbs}" --agent ${employeeName}${cleanupSuffix}` : `exe-launch-agent --agent ${employeeName}${cleanupSuffix}`;
+    launchCommand = launcherAbs ? `"${process.execPath}" "${launcherAbs}" --agent ${employeeName}` : `exe-launch-agent --agent ${employeeName}`;
+  }
+  const exitMarkerPath = spawnExitMarkerPath(sessionName);
+  try {
+    mkdirSync6(SESSION_CACHE, { recursive: true });
+  } catch {
+  }
+  try {
+    unlinkSync4(exitMarkerPath);
+  } catch {
   }
+  const spawnCommand = buildSpawnCommand(launchCommand, exitMarkerPath, cleanupSuffix);
   const tmuxEnvArgs = Object.entries(launchEnv).flatMap(([key, val]) => ["-e", `${key}=${val}`]);
   let spawnResult;
   try {
@@ -6818,6 +6910,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   }
   const callerIsDaemon = process.env.EXE_IS_DAEMON === "1";
   const POLL_INTERVAL_MS = 500;
+  const runtimeLabel = useExeAgent ? "exe-agent" : useCodex ? "codex" : useOpencode ? "opencode" : "claude";
   const LIVENESS_CAP_MS = Number(process.env.EXE_SPAWN_LIVENESS_CAP_MS) || (callerIsDaemon ? 6e3 : 8e3);
   const livenessIterations = Math.max(1, Math.ceil(LIVENESS_CAP_MS / POLL_INTERVAL_MS));
   let sessionLive = false;
@@ -6831,22 +6924,12 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   if (!sessionLive) sessionLive = transport.isAlive(sessionName);
   if (!sessionLive) {
     releaseSpawnLock(sessionName);
-    const runtimeLabel = useExeAgent ? "exe-agent" : useCodex ? "codex" : useOpencode ? "opencode" : "claude";
     let lastPane = "";
     try {
       lastPane = transport.capturePane(sessionName, 50);
     } catch {
     }
-    const paneLc = lastPane.toLowerCase();
-    let spawnFailureCause;
-    if (paneLc.includes("command not found") || paneLc.includes(": not found")) {
-      spawnFailureCause = "path_not_found";
-    } else if (paneLc.includes("exit 127") || paneLc.includes("claude") && paneLc.includes("not found") || paneLc.includes("not support") || // existing "unsupported launch flag" hint
-    paneLc.includes("unknown option") || paneLc.includes("enoent")) {
-      spawnFailureCause = "claude_launch_failed";
-    } else {
-      spawnFailureCause = "timeout";
-    }
+    const spawnFailureCause = classifySpawnFailurePane(lastPane);
     const errMsg2 = `spawn did not start: tmux session "${sessionName}" never came alive within ${LIVENESS_CAP_MS / 1e3}s (${runtimeLabel} process failed to launch or exited immediately; cause=${spawnFailureCause}). Check ~/.exe-os/session-logs/${instanceLabel}-*.log \u2014 common cause: installed Claude Code does not support a launch flag, or the daemon PATH excludes the node/launcher bin dir (cause=path_not_found).`;
     process.stderr.write(`[tmux-routing] SPAWN FAILED ${sessionName} (${spawnFailureCause}): ${errMsg2}
 `);
@@ -6868,31 +6951,59 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
     });
     return { sessionName, error: errMsg2 };
   }
-  const STABILITY_MS = Number(process.env.EXE_SPAWN_STABILITY_MS) || (useCodex ? 2500 : 0);
-  if (STABILITY_MS > 0) {
-    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, STABILITY_MS);
-    if (!transport.isAlive(sessionName)) {
-      releaseSpawnLock(sessionName);
-      const runtimeLabel = useExeAgent ? "exe-agent" : useCodex ? "codex" : useOpencode ? "opencode" : "claude";
-      const errMsg2 = `spawn died immediately: tmux session "${sessionName}" disappeared within ${STABILITY_MS / 1e3}s after launch (${runtimeLabel} exited during startup).`;
-      process.stderr.write(`[tmux-routing] SPAWN FAILED ${sessionName} (startup_exit): ${errMsg2}
-`);
-      recordOrchestrationEventBestEffort({
-        eventType: "tmux.spawn.completed",
-        source: "tmux-routing.spawnEmployee",
-        severity: "warn",
-        agentId: employeeName,
-        sessionScope: exeSession,
-        instanceId: opts?.instance != null ? String(opts.instance) : null,
-        tmuxSession: sessionName,
-        runtime: useCodex ? "codex" : useOpencode ? "opencode" : useExeAgent ? "exe-agent" : "claude",
-        durationMs: Date.now() - spawnStartedAt,
-        result: "failed",
-        errorCode: "startup_exit",
-        payload: { detail: "spawn_session_died_after_liveness", spawnCommand }
-      });
-      return { sessionName, error: errMsg2 };
+  const STARTUP_WATCH_MS = resolveStartupWatchCapMs({
+    useCodex,
+    callerIsDaemon,
+    override: process.env.EXE_SPAWN_STARTUP_WATCH_MS,
+    legacyOverride: process.env.EXE_SPAWN_STABILITY_MS
+  });
+  const STARTUP_WATCH_INTERVAL_MS = 250;
+  const startupWatch = watchSpawnStartup(
+    {
+      readLauncherExit: () => readSpawnExitMarker(exitMarkerPath),
+      isAlive: () => transport.isAlive(sessionName),
+      capturePane: () => transport.capturePane(sessionName, 50),
+      sleep: (ms) => {
+        Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+      }
+    },
+    { capMs: STARTUP_WATCH_MS, intervalMs: STARTUP_WATCH_INTERVAL_MS }
+  );
+  if (startupWatch.outcome === "exited") {
+    try {
+      execFileSync3("tmux", ["kill-session", "-t", sessionName], { timeout: 3e3 });
+    } catch {
     }
+    releaseSpawnLock(sessionName);
+    const { exitCode } = startupWatch;
+    const refused = exitCode === 78;
+    const errorCode = refused ? "launch_refused" : "startup_exit";
+    const paneCause = classifySpawnFailurePane(startupWatch.pane);
+    const errMsg2 = refused ? `spawn refused: ${runtimeLabel} launcher for "${sessionName}" exited 78 (refusal) within ${STARTUP_WATCH_MS / 1e3}s \u2014 it declined to start the agent. Most common cause: running as root (uid 0), where Claude Code rejects --dangerously-skip-permissions / bypassPermissions. Run the daemon as a non-root user. Check ~/.exe-os/session-logs/${instanceLabel}-*.log. Pane tail: ${startupWatch.pane.trim().slice(-500) || "(empty)"}` : `spawn died during startup: ${runtimeLabel} launcher for "${sessionName}" ` + (exitCode === null ? `disappeared within ${STARTUP_WATCH_MS / 1e3}s of launch` : `exited ${exitCode} within ${STARTUP_WATCH_MS / 1e3}s of launch`) + ` (cause=${paneCause}). Check ~/.exe-os/session-logs/${instanceLabel}-*.log. Pane tail: ${startupWatch.pane.trim().slice(-500) || "(empty)"}`;
+    process.stderr.write(`[tmux-routing] SPAWN FAILED ${sessionName} (${errorCode}): ${errMsg2}
+`);
+    recordOrchestrationEventBestEffort({
+      eventType: "tmux.spawn.completed",
+      source: "tmux-routing.spawnEmployee",
+      severity: "warn",
+      agentId: employeeName,
+      sessionScope: exeSession,
+      instanceId: opts?.instance != null ? String(opts.instance) : null,
+      tmuxSession: sessionName,
+      runtime: runtimeLabel,
+      durationMs: Date.now() - spawnStartedAt,
+      result: "failed",
+      errorCode,
+      payload: {
+        detail: "spawn_exited_during_startup",
+        exitCode,
+        spawnFailureCause: paneCause,
+        watchCapMs: STARTUP_WATCH_MS,
+        polls: startupWatch.polls,
+        spawnCommand
+      }
+    });
+    return { sessionName, error: errMsg2 };
   }
   if (useCodex) {
     let pane = "";
@@ -6932,28 +7043,14 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   for (let i = 0; i < pollIterations; i++) {
     Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, POLL_INTERVAL_MS);
     try {
-      const pane = transport.capturePane(sessionName);
-      if (useExeAgent) {
-        if (pane.includes("[exe-agent]") || pane.includes("online")) {
-          booted = true;
-          break;
-        }
-      } else if (useCodex) {
-        if (pane.includes("codex") || pane.includes("Codex") || pane.includes("exe-start-codex")) {
-          booted = true;
-          break;
-        }
-      } else {
-        if (pane.includes("Claude Code") || pane.includes("\u276F")) {
-          booted = true;
-          break;
-        }
+      if (paneShowsRuntimeBanner(transport.capturePane(sessionName), runtimeLabel)) {
+        booted = true;
+        break;
       }
     } catch {
     }
   }
   if (!booted && !callerIsDaemon) {
-    const runtimeLabel = useExeAgent ? "exe-agent" : useCodex ? "codex" : "claude";
     process.stderr.write(
       `[tmux-routing] ${runtimeLabel} boot banner poll capped at ${POLL_CAP_MS / 1e3}s for ${sessionName} (session is live) \u2014 sending task nudge anyway
 `
@@ -7272,6 +7369,7 @@ export {
   getReviewChecklist,
   createReviewForCompletedTask,
   cleanupReviewFile,
+  BUSY_PATTERN,
   _resetExeBinDirCache,
   buildSpawnPath,
   acquireSpawnLock,
@@ -7322,5 +7420,12 @@ export {
   ensureEmployeeAsync,
   decideSpawnWorktreeDiscipline,
   resolveSpawnCwd,
+  spawnExitMarkerPath,
+  buildSpawnCommand,
+  readSpawnExitMarker,
+  paneShowsRuntimeBanner,
+  classifySpawnFailurePane,
+  resolveStartupWatchCapMs,
+  watchSpawnStartup,
   spawnEmployee
 };

package/dist/{chunk-YKRNH5LU.js → chunk-VQWRRXBD.js}

@@ -89,7 +89,7 @@ async function getRetrievalHealth() {
   const coveragePct = totalMemories > 0 ? Math.round(memoriesWithVectors / totalMemories * 100) : null;
   let dbRestore = { hasEvents: false, count: 0, last: null, quarantineFiles: 0 };
   try {
-    const { getDbRestoreHealth } = await import("./db-restore-events-ZLD2HRQV.js");
+    const { getDbRestoreHealth } = await import("./db-restore-events-TFCZ4CPM.js");
     dbRestore = getDbRestoreHealth();
   } catch {
   }

package/dist/{chunk-7QRMFYOV.js → chunk-VYFZVIWX.js}

@@ -1,6 +1,6 @@
 import {
   isPostgresBackendEnabled
-} from "./chunk-YMUZWC33.js";
+} from "./chunk-YYB5PMTK.js";
 
 // src/lib/db-write-worker-client.ts
 import { fork } from "child_process";

package/dist/{chunk-CAEWPEBA.js → chunk-W6J25BU7.js}

@@ -1,6 +1,6 @@
 import {
   loadEmployees
-} from "./chunk-EA5FVACM.js";
+} from "./chunk-ESGLOI6Q.js";
 
 // src/lib/agent-symlinks.ts
 import os from "os";

package/dist/{chunk-EUQF3JOH.js → chunk-WBG7XYVR.js}

@@ -22,7 +22,7 @@ import {
 import {
   getCachedMonitorIdentity,
   recomputeEnvelopeWrapKey
-} from "./chunk-IOEUAQWP.js";
+} from "./chunk-EEZOBN6X.js";
 
 // src/lib/crypto.ts
 import crypto from "crypto";

package/dist/chunk-WT4RI36X.js

@@ -0,0 +1,23 @@
+// src/lib/unforgeable.ts
+function createRegistry(opts) {
+  const entries = /* @__PURE__ */ new WeakMap();
+  const freeze = opts?.freeze ?? true;
+  return {
+    mint(value, meta) {
+      const registered = freeze ? Object.freeze(value) : value;
+      entries.set(registered, meta);
+      return registered;
+    },
+    metaOf(value) {
+      if (value === null || typeof value !== "object") return void 0;
+      return entries.get(value);
+    },
+    has(value) {
+      return value !== null && typeof value === "object" && entries.has(value);
+    }
+  };
+}
+
+export {
+  createRegistry
+};

package/dist/{chunk-46RPEWTH.js → chunk-WYETVNK4.js}

@@ -1,6 +1,6 @@
 import {
   isCoordinatorRole
-} from "./chunk-EA5FVACM.js";
+} from "./chunk-ESGLOI6Q.js";
 
 // src/lib/task-router.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-DKRSKC5R.js → chunk-XQDF2I4D.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-WCGNCH3Q.js";
 import {
   registerAllTools
-} from "./chunk-GD7VXXW6.js";
+} from "./chunk-IXRNZ2Y2.js";
 
 // src/mcp/mcp-surface-hash.ts
 function computeMcpSurfaceHash() {