@askexenow/exe-os 0.9.367 → 0.9.368

package/dist/{chunk-7W5LCREK.js → chunk-BJKC6ZJU.js}

@@ -1,21 +1,28 @@
+import {
+  clearDispatchJournalEntry,
+  dispatchJournalDir,
+  findOrphanedDispatchIntents,
+  journalDispatchIntent,
+  updateDispatchJournalEntry
+} from "./chunk-S2YTU74T.js";
 import {
   createTask
-} from "./chunk-ZZ3JQM5I.js";
+} from "./chunk-LJWCK2DR.js";
 import {
   getActiveAgent
-} from "./chunk-QWDZNQXA.js";
+} from "./chunk-NNXPIJRB.js";
 import {
   ensureEmployeeAsync,
   isExeSession,
   logTaskDispatch,
   resolveExeSession
-} from "./chunk-QX33D4CH.js";
+} from "./chunk-Y4AYNLXU.js";
 import {
   isValidSessionScope
 } from "./chunk-BTSWFMEH.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-UI3K73LD.js";
+} from "./chunk-BFL3UB77.js";
 import {
   releaseDispatchClaim,
   tryAcquireDispatchClaim,
@@ -28,19 +35,18 @@ import {
 } from "./chunk-XTWHNLGD.js";
 import {
   getLicenseSync
-} from "./chunk-N3JLNMPF.js";
+} from "./chunk-PGF5I7EV.js";
 import {
   getAgentContext
 } from "./chunk-GJV3WDWM.js";
 import {
   isCoordinatorName
-} from "./chunk-HSBKV5LB.js";
+} from "./chunk-OBESOWFJ.js";
 
 // src/mcp/tools/create-task.ts
 import { z } from "zod";
-import { existsSync, readdirSync, readFileSync, realpathSync, statSync, writeFileSync, mkdirSync, unlinkSync } from "fs";
+import { existsSync, readdirSync, realpathSync, statSync, writeFileSync, mkdirSync } from "fs";
 import { basename, dirname, isAbsolute, join, sep } from "path";
-import { homedir } from "os";
 function rootFromSessionName(sessionName) {
   const raw = (sessionName ?? "").trim();
   if (!raw) return "";
@@ -227,6 +233,9 @@ async function listCoordinatorRoots() {
   }
   return [...roots].sort();
 }
+var HEADLESS_SCOPE_REMEDY = `
+
+Headless/app callers (desktop backend, gateway, cron \u2014 anything not running inside a tmux coordinator session) cannot send X-Exe-Session and must instead pass the session_scope parameter naming the coordinator scope to act as (e.g. session_scope: "exe2"). That scope must genuinely own the project: it is resolved by the same in-scope rules as any other caller, and a scope that does not own the project is still refused. Registering the project's directory against a coordinator session also lets it resolve automatically without this parameter.`;
 async function inferCoordinatorRootForProject(projectName) {
   try {
     const liveRoots = new Set(await listCoordinatorRoots());
@@ -240,69 +249,6 @@ async function inferCoordinatorRootForProject(projectName) {
 function sessionBelongsToCoordinator(session, coordName, callerSession) {
   return session.windowName === coordName || session.windowName === callerSession || session.parentExe === coordName || rootFromSessionName(session.windowName) === coordName;
 }
-var DISPATCH_JOURNAL_ORPHAN_AGE_MS = 6e4;
-function dispatchJournalDir() {
-  const base = process.env.EXE_OS_DIR || process.env.EXE_MEM_DIR || join(homedir(), ".exe-os");
-  return join(base, "dispatch-journal");
-}
-function dispatchJournalSlug(title) {
-  const slug = title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40);
-  return slug || "task";
-}
-function journalDispatchIntent(title, payload, caller) {
-  const dir = dispatchJournalDir();
-  mkdirSync(dir, { recursive: true });
-  const file = join(dir, `${Date.now()}-${dispatchJournalSlug(title)}.json`);
-  const entry = {
-    version: 1,
-    journaledAt: (/* @__PURE__ */ new Date()).toISOString(),
-    status: "pending",
-    payload,
-    caller
-  };
-  writeFileSync(file, JSON.stringify(entry, null, 2), "utf-8");
-  return file;
-}
-function updateDispatchJournalEntry(file, patch) {
-  const entry = JSON.parse(readFileSync(file, "utf-8"));
-  writeFileSync(file, JSON.stringify({ ...entry, ...patch }, null, 2), "utf-8");
-}
-function clearDispatchJournalEntry(file) {
-  try {
-    unlinkSync(file);
-  } catch {
-  }
-}
-function findOrphanedDispatchIntents(sessionScope, olderThanMs = DISPATCH_JOURNAL_ORPHAN_AGE_MS) {
-  const dir = dispatchJournalDir();
-  if (!existsSync(dir)) return [];
-  let names;
-  try {
-    names = readdirSync(dir);
-  } catch {
-    return [];
-  }
-  const cutoff = Date.now() - olderThanMs;
-  const orphans = [];
-  for (const name of names) {
-    if (!name.endsWith(".json")) continue;
-    const file = join(dir, name);
-    try {
-      if (statSync(file).mtimeMs > cutoff) continue;
-    } catch {
-      continue;
-    }
-    let entry = null;
-    try {
-      entry = JSON.parse(readFileSync(file, "utf-8"));
-    } catch {
-    }
-    const entryScope = entry?.caller?.sessionScope ?? null;
-    if (sessionScope && entryScope && entryScope !== sessionScope) continue;
-    orphans.push({ file, entry });
-  }
-  return orphans;
-}
 function resolveDispatchRuntime(agentId, override) {
   if (override) return override;
   try {
@@ -535,7 +481,7 @@ function registerCreateTask(server) {
       if (!callerRoot) {
         const coordinatorSessions = await listCoordinatorRoots();
         if (coordinatorSessions.length > 1 && process.env.VITEST !== "true" && process.env.NODE_ENV !== "test") {
-          const message = `BLOCKED: create_task cannot determine the caller session. ${coordinatorSessions.length} coordinator sessions are active (${coordinatorSessions.join(", ")}), X-Exe-Session is missing, and project "${project_name}" did not map to exactly one registered coordinator. Refusing to guess because guessing causes cross-session dispatch (for example exe2 tasks spawning yoshi2-exe1). Restart this coordinator or ensure the MCP client sends X-Exe-Session.`;
+          const message = `BLOCKED: create_task cannot determine the caller session. ${coordinatorSessions.length} coordinator sessions are active (${coordinatorSessions.join(", ")}), X-Exe-Session is missing, and project "${project_name}" did not map to exactly one registered coordinator. Refusing to guess because guessing causes cross-session dispatch (for example exe2 tasks spawning yoshi2-exe1). Restart this coordinator or ensure the MCP client sends X-Exe-Session.` + HEADLESS_SCOPE_REMEDY;
           process.stderr.write(`[create_task] ${message}
 `);
           recordOrchestrationEventBestEffort({
@@ -563,7 +509,7 @@ function registerCreateTask(server) {
         }
       }
       if (!callerRoot && process.env.VITEST !== "true" && process.env.NODE_ENV !== "test") {
-        const message = `BLOCKED: create_task resolved no session_scope for project "${project_name}". Refusing to create an unscoped task. Ensure the MCP client sends a non-empty X-Exe-Session header or run from a coordinator session that can be resolved.`;
+        const message = `BLOCKED: create_task resolved no session_scope for project "${project_name}". Refusing to create an unscoped task. Ensure the MCP client sends a non-empty X-Exe-Session header or run from a coordinator session that can be resolved.` + HEADLESS_SCOPE_REMEDY;
         process.stderr.write(`[create_task] ${message}
 `);
         recordOrchestrationEventBestEffort({
@@ -595,7 +541,7 @@ function registerCreateTask(server) {
       let claimWarning = "";
       const claimRefRaw = (work_ref ?? "").trim();
       try {
-        const { findConflicts, findConflictsInText, describeConflict, normalizeTarget } = await import("./work-claims-4QOE7DT2.js");
+        const { findConflicts, findConflictsInText, describeConflict, normalizeTarget } = await import("./work-claims-XZL2DKQ3.js");
         const conflicts = claimRefRaw ? await findConflicts(
           [normalizeTarget({ kind: "work_ref", value: claimRefRaw })],
           callerRoot
@@ -648,7 +594,7 @@ Nothing was created or dispatched. Either pick different work, or \u2014 if that
         }
       }
       if (projectDir == null && process.env.VITEST !== "true" && process.env.NODE_ENV !== "test") {
-        const message = `BLOCKED: create_task could not resolve an existing project directory for "${project_name}" within the caller's coordinator scope. Refusing to create/dispatch into a fabricated or cross-scope path. Clone the project (or ensure the coordinator session registry points at it) and retry. If "${project_name}" is a non-git automation project, dispatch it from a session whose coordinator dir contains it.`;
+        const message = `BLOCKED: create_task could not resolve an existing project directory for "${project_name}" within the caller's coordinator scope. Refusing to create/dispatch into a fabricated or cross-scope path. Clone the project (or ensure the coordinator session registry points at it) and retry. If "${project_name}" is a non-git automation project, dispatch it from a session whose coordinator dir contains it.` + HEADLESS_SCOPE_REMEDY;
         process.stderr.write(`[create_task] ${message}
 `);
         recordOrchestrationEventBestEffort({
@@ -774,7 +720,7 @@ Nothing was created or dispatched. Either pick different work, or \u2014 if that
       }
       if (claimRefRaw) {
         try {
-          const { acquireClaim } = await import("./work-claims-4QOE7DT2.js");
+          const { acquireClaim } = await import("./work-claims-XZL2DKQ3.js");
           const acquired = await acquireClaim({
             targets: [{ kind: "work_ref", value: claimRefRaw }],
             holderSession: callerRoot,
@@ -827,7 +773,7 @@ Claimed ${claimRefRaw} for session ${callerRoot} (claim_group ${acquired.claimGr
           session_scope: sessionScope,
           created_at: (/* @__PURE__ */ new Date()).toISOString()
         }), "utf-8");
-        const { recordOrchestrationEventBestEffort: recordOE } = await import("./orchestration-events-HVG56HJ5.js");
+        const { recordOrchestrationEventBestEffort: recordOE } = await import("./orchestration-events-VBGCIQSS.js");
         recordOE({
           eventType: "signal.created",
           source: "create-task.mcp",
@@ -859,7 +805,7 @@ Claimed ${claimRefRaw} for session ${callerRoot} (claim_group ${acquired.claimGr
             let projectConflictOpts = {};
             try {
               const { getClient } = await import("./lib/database.js");
-              const { sessionScopeFilter } = await import("./task-scope-74JBTKJN.js");
+              const { sessionScopeFilter } = await import("./task-scope-PQ67YRWP.js");
               const client = getClient();
               const scope = sessionScopeFilter(task.sessionScope || callerRoot || exeSession || null);
               const existing = await client.execute({
@@ -1036,6 +982,8 @@ Dispatch deferred: no coordinator session \u2014 auto-wake will spawn ${assigned
           }
         } catch (dispatchErr) {
           dispatchOutcome = "failed";
+          dispatchStatus = `
+Dispatch FAILED: ${dispatchErr instanceof Error ? dispatchErr.message : String(dispatchErr)}`;
           try {
             releaseDispatchClaim(task.id, assigned_to, "dispatch exception");
           } catch {
@@ -1094,6 +1042,20 @@ Status: blocked (waiting on ${blocked_by})`;
         text += `
 Warning: ${task.warning}`;
       }
+      if (dispatchOutcome === "failed") {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `${text}
+
+\u26A0 THE TASK ROW EXISTS BUT NO ONE WAS DISPATCHED. Task ${task.id} is durable and assigned to ${assigned_to}, but the spawn/intercom did not land, so ${assigned_to} has NOT been told about it and will not start on its own.
+Do NOT call create_task again \u2014 that duplicates the row. Re-dispatch the EXISTING task instead (resume_employee for ${assigned_to}, or exe-dispatch), or tell a human. The dispatch intent is journaled and will be surfaced by the daemon's stalled-dispatch check.`
+            }
+          ],
+          isError: true
+        };
+      }
       return {
         content: [
           {
@@ -1110,12 +1072,6 @@ export {
   isSafeProjectName,
   findProjectChildDir,
   findAutomationChildDir,
-  DISPATCH_JOURNAL_ORPHAN_AGE_MS,
-  dispatchJournalDir,
-  journalDispatchIntent,
-  updateDispatchJournalEntry,
-  clearDispatchJournalEntry,
-  findOrphanedDispatchIntents,
   resolveProjectDir,
   resolveCoordinatorOwnProjectDir,
   registerCreateTask

package/dist/{chunk-OPS7KUFV.js → chunk-BLNSUBP3.js}

@@ -1,15 +1,15 @@
 import {
   getActiveAgent
-} from "./chunk-QWDZNQXA.js";
+} from "./chunk-NNXPIJRB.js";
 import {
   listTasks
-} from "./chunk-QX33D4CH.js";
+} from "./chunk-Y4AYNLXU.js";
 import {
   getAgentContext
 } from "./chunk-GJV3WDWM.js";
 import {
   isCoordinatorName
-} from "./chunk-HSBKV5LB.js";
+} from "./chunk-OBESOWFJ.js";
 
 // src/mcp/tools/list-tasks.ts
 import { z } from "zod";

package/dist/{chunk-5CH6XKVC.js → chunk-BNDHQGOY.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-HHGOCBVQ.js";
 import {
   getClient
-} from "./chunk-HSBKV5LB.js";
+} from "./chunk-OBESOWFJ.js";
 
 // src/lib/global-procedures.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-Z5Z3MYUW.js → chunk-BPQWRR4H.js}

@@ -1,6 +1,6 @@
 import {
   registerDaemonScopedQueryChokepoint
-} from "./chunk-O3F5P6Z5.js";
+} from "./chunk-GILYOIMP.js";
 import {
   orgPartnerModeActive,
   resolveOrgPartnerBindings,
@@ -19,7 +19,7 @@ import {
   isConsentMacPrimed,
   primeTaskOriginMarkerKey,
   scopedQueryChokepointStatus
-} from "./chunk-JOKKIFRN.js";
+} from "./chunk-AAL6CDMQ.js";
 import {
   flushMailboxOutbox
 } from "./chunk-4LWBC7CM.js";

package/dist/{chunk-YA4PM3MV.js → chunk-BTGR55GX.js}

@@ -1,13 +1,13 @@
 import {
   isExeSession
-} from "./chunk-QX33D4CH.js";
+} from "./chunk-Y4AYNLXU.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-UI3K73LD.js";
+} from "./chunk-BFL3UB77.js";
 import {
   getClient,
   isCoordinatorName
-} from "./chunk-HSBKV5LB.js";
+} from "./chunk-OBESOWFJ.js";
 import {
   isDaemonAlive
 } from "./chunk-V3W3SATA.js";

package/dist/{chunk-WYVBWDFY.js → chunk-C4IJ5IS5.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-WCGNCH3Q.js";
 import {
   registerAllTools
-} from "./chunk-PS4NA7PM.js";
+} from "./chunk-EDB3LXBQ.js";
 
 // src/mcp/mcp-surface-hash.ts
 function computeMcpSurfaceHash() {

package/dist/{chunk-XVRQZCTS.js → chunk-C5FOA5GO.js}

@@ -1,6 +1,10 @@
 import {
+  behaviorTruncationNotice
+} from "./chunk-XOTDAKJL.js";
+import {
+  countActiveBehaviors,
   listBehaviors
-} from "./chunk-WBKIU6UJ.js";
+} from "./chunk-MCXYNYZI.js";
 import {
   loadConfigSync
 } from "./chunk-QMSEL5YS.js";
@@ -55,11 +59,12 @@ function renderBehaviorLine(row) {
   const scope = row.project_name ? ` (${row.project_name})` : "";
   return `- ${tag}${row.content}${scope}`;
 }
-function renderBehaviorExport(behaviors) {
+function renderBehaviorExport(behaviors, counts = { total: behaviors.length, p0: 0 }) {
   if (behaviors.length === 0) {
     return "";
   }
   const lines = behaviors.map(renderBehaviorLine);
+  const notice = behaviorTruncationNotice(behaviors, counts);
   return [
     "<system-reminder>",
     "## Your Behavioral Memory",
@@ -67,6 +72,7 @@ function renderBehaviorExport(behaviors) {
     "Sourced from exe-os Layer 2 (Expertise). Changes apply on next spawn.",
     "",
     ...lines,
+    ...notice ? ["", notice] : [],
     "</system-reminder>",
     ""
   ].join("\n");
@@ -86,7 +92,12 @@ async function exportBehaviorsForAgent(agentId, projectName, sessionKey) {
   sweepStaleBehaviorExports();
   const behaviors = await listBehaviors(agentId, projectName, getBehaviorLimit());
   if (behaviors.length === 0) return null;
-  const body = renderBehaviorExport(behaviors);
+  let counts = { total: behaviors.length, p0: 0 };
+  try {
+    counts = await countActiveBehaviors(agentId, projectName);
+  } catch {
+  }
+  const body = renderBehaviorExport(behaviors, counts);
   const target = exportFilePath(agentId, projectName, sessionKey);
   writeFileSync(target, body, "utf-8");
   return target;

package/dist/{chunk-XKFMNAJ7.js → chunk-CSBD7QLZ.js}

@@ -1,6 +1,6 @@
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-UI3K73LD.js";
+} from "./chunk-BFL3UB77.js";
 import {
   atomicWriteJsonSync
 } from "./chunk-HSGBZSCA.js";

package/dist/{chunk-BY3V5CLX.js → chunk-CU2OUUSV.js}

@@ -9,10 +9,10 @@ import {
 import {
   buildClaudeHttpMcpEntry,
   buildClaudeStdioProxyMcpEntry
-} from "./chunk-JFOZHVNO.js";
+} from "./chunk-QCSAYYL6.js";
 import {
   ensureAllAgentSymlinks
-} from "./chunk-6MCUXRIP.js";
+} from "./chunk-P3PAD6AA.js";
 import {
   MCP_LEGACY_KEY,
   MCP_PRIMARY_KEY
@@ -23,13 +23,13 @@ import {
 
 // src/adapters/claude/installer.ts
 import { readFile, writeFile, mkdir, readdir, rm } from "fs/promises";
-import { existsSync, readFileSync, writeFileSync, copyFileSync, mkdirSync, realpathSync } from "fs";
+import { existsSync, readFileSync, writeFileSync, copyFileSync, mkdirSync, realpathSync, statSync } from "fs";
 import { createHash } from "crypto";
 import path from "path";
 import os from "os";
 import { execSync } from "child_process";
 import { fileURLToPath } from "url";
-function assertCanonicalInstallRoot(packageRoot) {
+function assertCanonicalInstallRoot(packageRoot, opts = {}) {
   if (process.env.EXE_ALLOW_NONCANONICAL_INSTALL === "1") return;
   const real = (() => {
     try {
@@ -57,6 +57,25 @@ function assertCanonicalInstallRoot(packageRoot) {
 The installer registers this path into global hooks/MCP config (~/.claude/settings.json); when a temp checkout or worktree is deleted, every hook dies system-wide (bug 49550059). Run the installer from the canonical install (e.g. ~/exe-os or the global npm root), or set EXE_ALLOW_NONCANONICAL_INSTALL=1 if you are intentionally sandboxing HOME.`
     );
   }
+  if (opts.isWorktree ?? isLinkedGitWorktree(real)) {
+    throw new Error(
+      `[exe-os] REFUSING to install from a git worktree: ${real}
+This checkout is a linked worktree (.git is a gitdir pointer file), so it is expected to be removed once its branch merges \u2014 but the installer would stamp this path into global hooks/MCP config (~/.claude/settings.json), killing every hook system-wide when it goes away (bug 49550059). Build here if you like, but install/deploy from the primary checkout (e.g. ~/exe-os) or the global npm root, or set EXE_ALLOW_NONCANONICAL_INSTALL=1 to override.`
+    );
+  }
+}
+function isLinkedGitWorktree(root) {
+  const dotGit = path.join(root, ".git");
+  try {
+    if (!statSync(dotGit).isFile()) return false;
+  } catch {
+    return false;
+  }
+  try {
+    return /^gitdir:\s*\S/m.test(readFileSync(dotGit, "utf-8"));
+  } catch {
+    return false;
+  }
 }
 function resolvePackageRoot() {
   const thisFile = fileURLToPath(import.meta.url);
@@ -923,7 +942,7 @@ async function runInstaller(homeDir) {
     );
   }
   try {
-    const { generateAgentDefs, summarizeAgentDefResults } = await import("./agent-defs-generator-MLPRGY75.js");
+    const { generateAgentDefs, summarizeAgentDefResults } = await import("./agent-defs-generator-M5AUL3WM.js");
     const defResults = generateAgentDefs({ homeDir: resolvedHome });
     process.stderr.write(`Agent definitions: ${summarizeAgentDefResults(defResults)}
 `);
@@ -1133,6 +1152,7 @@ function summarizeSymlinkResults(results) {
 
 export {
   assertCanonicalInstallRoot,
+  isLinkedGitWorktree,
   resolvePackageRoot,
   copySlashCommands,
   detectMcpNameCollisions,

package/dist/{chunk-Y4JVM3SI.js → chunk-CXHRNESJ.js}

@@ -1,7 +1,7 @@
 import {
   executeAction,
   substituteTemplate
-} from "./chunk-YNPOELAN.js";
+} from "./chunk-LBWEAQ6Z.js";
 
 // src/automation/workflow-engine.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-SFKIZYKK.js → chunk-DRMGPZSC.js}

@@ -3,13 +3,13 @@ import {
 } from "./chunk-HHGOCBVQ.js";
 import {
   isGhostBehaviorRow
-} from "./chunk-WBKIU6UJ.js";
+} from "./chunk-MCXYNYZI.js";
 import {
   getClient,
   getIdentity,
   listIdentities,
   updateIdentity
-} from "./chunk-HSBKV5LB.js";
+} from "./chunk-OBESOWFJ.js";
 import {
   atomicWriteJsonSync
 } from "./chunk-HSGBZSCA.js";

package/dist/{chunk-PFOJX6CR.js → chunk-DYPKSVB7.js}

@@ -1,24 +1,24 @@
 import {
   recordSessionKill
-} from "./chunk-YA4PM3MV.js";
+} from "./chunk-BTGR55GX.js";
 import {
   sessionScopeFilter,
   verifyPaneAtCapacity,
   writeNotification
-} from "./chunk-QX33D4CH.js";
+} from "./chunk-Y4AYNLXU.js";
 import {
   listSessions
-} from "./chunk-XKFMNAJ7.js";
+} from "./chunk-CSBD7QLZ.js";
 import {
   getTransport
 } from "./chunk-UXLO7VHX.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-UI3K73LD.js";
+} from "./chunk-BFL3UB77.js";
 import {
   getClient,
   isCoordinatorName
-} from "./chunk-HSBKV5LB.js";
+} from "./chunk-OBESOWFJ.js";
 
 // src/lib/capacity-monitor.ts
 var CAPACITY_PATTERNS = [