@askexenow/exe-os 0.9.372 → 0.9.374

package/dist/{chunk-XHYHX6F7.js → chunk-AKLQSC6W.js}

@@ -3,10 +3,7 @@ import {
 } from "./chunk-BTSWFMEH.js";
 import {
   ensureAgentSymlink
-} from "./chunk-WAEKYKTK.js";
-import {
-  resolveRowVisibility
-} from "./chunk-44C7QNZS.js";
+} from "./chunk-6RKKVPYF.js";
 import {
   ensureWorktree,
   ensureWorktreeAsync,
@@ -14,10 +11,13 @@ import {
   getMainRepoRoot,
   isInsideGitRepo,
   isWorktreeDirty
-} from "./chunk-JTWTBX2M.js";
+} from "./chunk-4EN3IZ3Q.js";
 import {
   runBudgetedSweep
 } from "./chunk-KI5PFRG6.js";
+import {
+  resolveRowVisibility
+} from "./chunk-3KDCORDO.js";
 import {
   LEASE_MINUTES,
   isLeaseExpired,
@@ -31,19 +31,22 @@ import {
   reviewSignalPath,
   taskSignalDir
 } from "./chunk-EIKATSE4.js";
+import {
+  hasIntercomAckAfter
+} from "./chunk-MJCSEIFI.js";
 import {
   listSessions,
   registerSession
-} from "./chunk-MDGYXUOV.js";
+} from "./chunk-XH7YL7JM.js";
 import {
   listTmuxSessions
-} from "./chunk-GBNB4EWD.js";
+} from "./chunk-ORM7ZFKC.js";
 import {
   getTransport
-} from "./chunk-UXLO7VHX.js";
+} from "./chunk-VI4ATC6I.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-E2WEFZOR.js";
+} from "./chunk-W75GTHR3.js";
 import {
   appendDispatchJournalEvent,
   releaseDispatchClaim,
@@ -52,30 +55,30 @@ import {
 } from "./chunk-AJIXH5JF.js";
 import {
   incrementSkillSuccess
-} from "./chunk-L6ZNURWN.js";
+} from "./chunk-7GE2EQ23.js";
 import {
   assertRuntimeModelCompatible,
   getAgentRuntime,
   normalizeCcModelName,
   resolveSpawnRuntimeConfig
-} from "./chunk-XTWHNLGD.js";
+} from "./chunk-GZOG2MAX.js";
 import {
   PlanLimitError,
   assertEmployeeLimitSync
-} from "./chunk-HIIXCAEE.js";
+} from "./chunk-6YVUR3OU.js";
 import {
   getSessionKey
 } from "./chunk-CVYC6DUW.js";
 import {
   writeMemoryViaDaemon
-} from "./chunk-QZL6E4UB.js";
+} from "./chunk-GOMQ7PVQ.js";
 import {
   AGENT_IDENTITY_TOKEN_ENV,
   getDaemonAgentIdentityBroker
-} from "./chunk-RIECV7SR.js";
+} from "./chunk-EKYYMIVT.js";
 import {
   getProjectName
-} from "./chunk-W2IRQJ6R.js";
+} from "./chunk-JTVIANUB.js";
 import {
   expandDualPrefixTools
 } from "./chunk-HYZV25LY.js";
@@ -96,16 +99,16 @@ import {
   loadEmployeesSync,
   offloadReadIfMain,
   offloadReadQuery
-} from "./chunk-5DCCKHDY.js";
+} from "./chunk-TAMDAOCU.js";
 import {
   RUNTIME_TABLE
 } from "./chunk-WNBZJSQT.js";
 import {
   loadDeviceId
-} from "./chunk-DKBPCOU4.js";
+} from "./chunk-L6RXG36J.js";
 import {
   EXE_AI_DIR
-} from "./chunk-QMSEL5YS.js";
+} from "./chunk-ZIG7VPJV.js";
 import {
   atomicWriteJsonSync,
   atomicWriteSync
@@ -1528,7 +1531,7 @@ async function createTaskCore(input) {
         if (isCoordinatorSession) {
           earlySessionScope = resolved;
         } else {
-          const { getSessionProject } = await import("./session-scope-LG2J4EMQ.js");
+          const { getSessionProject } = await import("./session-scope-KRWE54C4.js");
           const sessionProject = getSessionProject(resolved);
           if (sessionProject && sessionProject !== input.projectName) {
             scopeMismatchWarning = `session/project mismatch: session "${resolved}" owns "${sessionProject}" but task targets "${input.projectName}". Routed to default scope.`;
@@ -1832,7 +1835,7 @@ async function buildTaskRowsStatement(opts) {
   }
   if (opts.founderId !== null) {
     try {
-      const { founderScopeFilter } = await import("./founder-context-ZFZC4UHO.js");
+      const { founderScopeFilter } = await import("./founder-context-D4HFIESJ.js");
       const founderFilter = founderScopeFilter(opts.founderId);
       const cleaned = founderFilter.sql.replace(/^\s*AND\s+/, "");
       conditions.push(cleaned);
@@ -1875,30 +1878,30 @@ async function listTasks(input) {
     extraConditions.push("priority = ?");
     extraArgs.push(input.priority);
   }
+  if (input.effectiveReviewer) {
+    extraConditions.push("(reviewer = ? OR (reviewer IS NULL AND assigned_by = ?))");
+    extraArgs.push(input.effectiveReviewer, input.effectiveReviewer);
+  }
   const callerSession = input.callerSession?.trim();
   if (input.isOwnQuery && callerSession) {
     const live = await resolveLiveTmuxSessions();
-    const liveForeign = live.verified ? [...live.sessions].filter((s) => s !== callerSession) : null;
-    if (liveForeign === null) {
-      extraConditions.push("(instance_id IS NULL OR instance_id = ?)");
-      extraArgs.push(callerSession);
-      extraConditions.push(
-        "(assigned_tmux IS NULL OR assigned_tmux = 'unknown' OR assigned_tmux = ? OR assigned_tmux LIKE ?)"
-      );
-      extraArgs.push(callerSession, `${callerSession}:%`);
-    } else if (liveForeign.length === 0) {
+    if (!live.verified) {
     } else {
-      const ph = liveForeign.map(() => "?").join(", ");
-      extraConditions.push(
-        `(instance_id IS NULL OR instance_id = ? OR instance_id NOT IN (${ph}))`
-      );
-      extraArgs.push(callerSession, ...liveForeign);
-      const notLive = liveForeign.map(() => "(assigned_tmux <> ? AND assigned_tmux NOT LIKE ?)").join(" AND ");
-      extraConditions.push(
-        `(assigned_tmux IS NULL OR assigned_tmux = 'unknown' OR assigned_tmux = ? OR assigned_tmux LIKE ? OR (${notLive}))`
-      );
-      extraArgs.push(callerSession, `${callerSession}:%`);
-      for (const s of liveForeign) extraArgs.push(s, `${s}:%`);
+      const liveForeign = [...live.sessions].filter((s) => s !== callerSession);
+      if (liveForeign.length === 0) {
+      } else {
+        const ph = liveForeign.map(() => "?").join(", ");
+        extraConditions.push(
+          `(instance_id IS NULL OR instance_id = ? OR instance_id NOT IN (${ph}))`
+        );
+        extraArgs.push(callerSession, ...liveForeign);
+        const notLive = liveForeign.map(() => "(assigned_tmux <> ? AND assigned_tmux NOT LIKE ?)").join(" AND ");
+        extraConditions.push(
+          `(assigned_tmux IS NULL OR assigned_tmux = 'unknown' OR assigned_tmux = ? OR assigned_tmux LIKE ? OR (${notLive}))`
+        );
+        extraArgs.push(callerSession, `${callerSession}:%`);
+        for (const s of liveForeign) extraArgs.push(s, `${s}:%`);
+      }
     }
   }
   const callerRoot = callerSession ? callerSession.includes("-") ? callerSession.split("-").pop() || null : callerSession : null;
@@ -2139,7 +2142,16 @@ var VALID_TRANSITIONS = {
   open: ["in_progress", "needs_review", "cancelled", "blocked"],
   in_progress: ["in_progress", "open", "needs_review", "blocked", "cancelled"],
   blocked: ["open", "in_progress", "needs_review", "cancelled"],
-  needs_review: ["closed", "in_progress", "open"],
+  // Bug 02d2255a: needs_review had no self-transition, so when a hook had
+  // already flipped in_progress → needs_review, the worker's own
+  // update(status="done", result=..., assertions_resolved=...) was rejected —
+  // and the payload went with it. The task then showed needs_review carrying an
+  // auto-generated generic completion report while the agent's real deliverable
+  // was silently discarded. Data loss on the single most important call in the
+  // task lifecycle. in_progress already allows a self-transition for exactly
+  // this reason; needs_review now does too. It does NOT re-fire the reviewer
+  // notification: isReviewTransition requires previousStatus !== "needs_review".
+  needs_review: ["closed", "in_progress", "open", "needs_review"],
   closed: [],
   // terminal — no transitions out
   cancelled: ["open"]
@@ -2896,19 +2908,19 @@ ${input.result}` : `\u26A0\uFE0F ${warning}`;
     const hasResult = typeof input.result === "string" && input.result.trim().length > 0;
     if (!hasResult) {
       return {
-        sql: `UPDATE tasks SET status = ?, updated_at = ?${actualMinutesClause} WHERE id = ? AND project_name IS ? AND session_scope IS ?`,
-        args: [input.status, now, ...actualMinutesArgs, taskId, eventProjectName, eventSessionScope]
+        sql: `UPDATE tasks SET status = ?, updated_at = ?${actualMinutesClause} WHERE id = ? AND project_name IS ? AND session_scope IS ? AND status IS ?`,
+        args: [input.status, now, ...actualMinutesArgs, taskId, eventProjectName, eventSessionScope, previousStatus]
       };
     }
     if (input.preserveResultIfPresent) {
       return {
-        sql: `UPDATE tasks SET status = ?, result = CASE WHEN result IS NULL OR trim(result, char(32)||char(9)||char(10)||char(13)) = '' THEN ? ELSE result END, updated_at = ?${actualMinutesClause} WHERE id = ? AND project_name IS ? AND session_scope IS ?`,
-        args: [input.status, input.result, now, ...actualMinutesArgs, taskId, eventProjectName, eventSessionScope]
+        sql: `UPDATE tasks SET status = ?, result = CASE WHEN result IS NULL OR trim(result, char(32)||char(9)||char(10)||char(13)) = '' THEN ? ELSE result END, updated_at = ?${actualMinutesClause} WHERE id = ? AND project_name IS ? AND session_scope IS ? AND status IS ?`,
+        args: [input.status, input.result, now, ...actualMinutesArgs, taskId, eventProjectName, eventSessionScope, previousStatus]
       };
     }
     return {
-      sql: `UPDATE tasks SET status = ?, result = ?, updated_at = ?${actualMinutesClause} WHERE id = ? AND project_name IS ? AND session_scope IS ?`,
-      args: [input.status, input.result, now, ...actualMinutesArgs, taskId, eventProjectName, eventSessionScope]
+      sql: `UPDATE tasks SET status = ?, result = ?, updated_at = ?${actualMinutesClause} WHERE id = ? AND project_name IS ? AND session_scope IS ? AND status IS ?`,
+      args: [input.status, input.result, now, ...actualMinutesArgs, taskId, eventProjectName, eventSessionScope, previousStatus]
     };
   };
   const writeStatements = [];
@@ -2919,8 +2931,15 @@ ${input.result}` : `\u26A0\uFE0F ${warning}`;
     });
   }
   writeStatements.push(buildStatusStatement());
+  const assertStatusWriteLanded = (results) => {
+    const affected = Number(results[results.length - 1]?.rowsAffected ?? 0);
+    if (affected > 0) return;
+    throw new Error(
+      `Task ${taskId} changed underneath this update: expected status "${previousStatus}" when writing "${input.status}", but the row no longer matches. Another session very likely transitioned it first. Re-read the task and retry.`
+    );
+  };
   try {
-    await client.batch(writeStatements, "write");
+    assertStatusWriteLanded(await client.batch(writeStatements, "write"));
   } catch (err) {
     const errMsg2 = err instanceof Error ? err.message : String(err);
     if (structuredSerialized && /structured_result/i.test(errMsg2)) {
@@ -2930,7 +2949,7 @@ ${input.result}` : `\u26A0\uFE0F ${warning}`;
       );
       input.result = `<!-- STRUCTURED_RESULT:${structuredSerialized} -->
 ${input.result ?? ""}`;
-      await client.batch([buildStatusStatement()], "write");
+      assertStatusWriteLanded(await client.batch([buildStatusStatement()], "write"));
     } else {
       throw err;
     }
@@ -3355,15 +3374,22 @@ async function ensureArchitectureDoc(baseDir, projectName) {
   } catch {
   }
 }
+var GITIGNORE_EXE_BLOCK = "# Employee task assignments (private)\n# exe/output/ stays tracked \u2014 it is the sanctioned deliverable handoff\n# location (bug 4c8d4c4b). Never collapse this back to a blanket /exe/.\n/exe/*\n!/exe/output/\n";
 async function ensureGitignoreExe(baseDir) {
   const gitignorePath = path5.join(baseDir, ".gitignore");
   try {
     if (existsSync6(gitignorePath)) {
       const content = readFileSync5(gitignorePath, "utf-8");
-      if (/^\/?exe\/?$/m.test(content)) return;
-      await appendFile(gitignorePath, "\n# Employee task assignments (private)\n/exe/\n");
+      if (/^\/?exe\/\*$/m.test(content) && /^!\/?exe\/output\/?$/m.test(content)) return;
+      if (/^\/?exe\/?$/m.test(content)) {
+        const narrowed = content.replace(/^\/?exe\/?$/m, "/exe/*\n!/exe/output/");
+        await writeFile(gitignorePath, narrowed, "utf-8");
+        return;
+      }
+      await appendFile(gitignorePath, `
+${GITIGNORE_EXE_BLOCK}`);
     } else {
-      await writeFile(gitignorePath, "# Employee task assignments (private)\n/exe/\n", "utf-8");
+      await writeFile(gitignorePath, GITIGNORE_EXE_BLOCK, "utf-8");
     }
   } catch {
   }
@@ -3830,6 +3856,7 @@ function isStale(isoTimestamp) {
   if (!isoTimestamp) return false;
   return Date.now() - new Date(isoTimestamp).getTime() > STALE_REVIEW_AGE_MS;
 }
+var EFFECTIVE_REVIEWER_SQL = "(reviewer = ? OR (reviewer IS NULL AND assigned_by = ?))";
 function pendingReviewsCountOpts(sessionScope, reviewer) {
   return {
     status: "needs_review",
@@ -3838,8 +3865,8 @@ function pendingReviewsCountOpts(sessionScope, reviewer) {
     strictSession: sessionScope !== void 0,
     projectName: null,
     // no project filter for review counts
-    extraConditions: reviewer ? ["reviewer = ?"] : void 0,
-    extraArgs: reviewer ? [reviewer] : void 0,
+    extraConditions: reviewer ? [EFFECTIVE_REVIEWER_SQL] : void 0,
+    extraArgs: reviewer ? [reviewer, reviewer] : void 0,
     limit: 1,
     orderBy: "1"
   };
@@ -3855,8 +3882,8 @@ async function countNewPendingReviewsSince(sinceIso, sessionScope, reviewer) {
   const extraConditions = ["updated_at > ?"];
   const extraArgs = [sinceIso];
   if (reviewer) {
-    extraConditions.push("reviewer = ?");
-    extraArgs.push(reviewer);
+    extraConditions.push(EFFECTIVE_REVIEWER_SQL);
+    extraArgs.push(reviewer, reviewer);
   }
   const rows = await queryTaskRows({
     status: "needs_review",
@@ -3872,8 +3899,8 @@ async function countNewPendingReviewsSince(sinceIso, sessionScope, reviewer) {
   return Number(rows[0]?.cnt) || 0;
 }
 async function listPendingReviews(limit, sessionScope, projectName, reviewer) {
-  const extraConditions = reviewer ? ["reviewer = ?"] : void 0;
-  const extraArgs = reviewer ? [reviewer] : void 0;
+  const extraConditions = reviewer ? [EFFECTIVE_REVIEWER_SQL] : void 0;
+  const extraArgs = reviewer ? [reviewer, reviewer] : void 0;
   const rows = await queryTaskRows({
     status: "needs_review",
     columns: "title, assigned_to, reviewer, project_name, updated_at",
@@ -5087,12 +5114,14 @@ function resolveExeSession() {
 function isEmployeeAlive(sessionName) {
   return getTransport().isAlive(sessionName);
 }
-function findFreeInstance(employeeName, exeSession, maxInstances = 10, isAlive = isEmployeeAlive) {
+function findFreeInstance(employeeName, exeSession, maxInstances = 10, isAlive = isEmployeeAlive, isIdle) {
   const base = employeeSessionName(employeeName, exeSession);
   if (!isAlive(base) && acquireSpawnLock(base)) return 0;
+  if (isIdle && isAlive(base) && isIdle(base) && acquireSpawnLock(base)) return 0;
   for (let i = 2; i <= maxInstances; i++) {
     const candidate = employeeSessionName(employeeName, exeSession, i);
     if (!isAlive(candidate) && acquireSpawnLock(candidate)) return i;
+    if (isIdle && isAlive(candidate) && isIdle(candidate) && acquireSpawnLock(candidate)) return i;
   }
   return null;
 }
@@ -5158,7 +5187,7 @@ async function verifyPaneAtCapacity(sessionName) {
       reason: `capture-pane failed: ${err instanceof Error ? err.message : String(err)}`
     };
   }
-  const { isAtCapacity } = await import("./capacity-monitor-FKMQXORX.js");
+  const { isAtCapacity } = await import("./capacity-monitor-SAXCQK7O.js");
   if (!isAtCapacity(pane)) {
     return {
       atCapacity: false,
@@ -5307,23 +5336,65 @@ function confirmNudgeSubmitted(targetSession, runtime) {
   const transport = getTransport();
   if (typeof transport.submitEnter !== "function") return true;
   for (let attempt = 0; attempt < SUBMIT_CONFIRM_ATTEMPTS; attempt++) {
-    if (!sessionHasPendingInput(targetSession)) return true;
+    const verdict = classifyNudgeDelivery(capturePaneSafe(targetSession));
+    if (verdict.state === "confirmed") return true;
+    if (!isSubmitRepairable(verdict.reason)) return false;
     transport.submitEnter(targetSession, runtime);
     confirmSleepSync(SUBMIT_CONFIRM_DELAY_MS);
   }
-  return !sessionHasPendingInput(targetSession);
+  return classifyNudgeDelivery(capturePaneSafe(targetSession)).state === "confirmed";
 }
 async function confirmNudgeSubmittedAsync(targetSession, runtime) {
   const isCodex = runtime === "codex";
   for (let attempt = 0; attempt < SUBMIT_CONFIRM_ATTEMPTS; attempt++) {
-    if (!await sessionHasPendingInputAsync(targetSession)) return true;
+    const verdict = classifyNudgeDelivery(await capturePaneSafeAsync(targetSession));
+    if (verdict.state === "confirmed") return true;
+    if (!isSubmitRepairable(verdict.reason)) return false;
     try {
       await execFileAsync3("tmux", ["send-keys", "-t", targetSession, isCodex ? "C-m" : "Enter"], { timeout: 1e3 });
     } catch {
     }
     await new Promise((r) => setTimeout(r, SUBMIT_CONFIRM_DELAY_MS));
   }
-  return !await sessionHasPendingInputAsync(targetSession);
+  return classifyNudgeDelivery(await capturePaneSafeAsync(targetSession)).state === "confirmed";
+}
+function capturePaneSafe(sessionName) {
+  try {
+    return getTransport().capturePane(sessionName, PANE_TAIL_LINES);
+  } catch {
+    return null;
+  }
+}
+async function capturePaneSafeAsync(sessionName) {
+  try {
+    return await captureSessionPaneAsync(sessionName, PANE_TAIL_LINES);
+  } catch {
+    return null;
+  }
+}
+function classifyNudgeDelivery(paneAfterSend) {
+  if (paneAfterSend === null) return { state: "unconfirmed", reason: "capture_failed" };
+  const blocked = paneBlockedState(paneAfterSend);
+  if (blocked !== null) return { state: "unconfirmed", reason: blocked };
+  if (paneHasPendingInput(paneAfterSend)) return { state: "unconfirmed", reason: "pending_input" };
+  return { state: "confirmed" };
+}
+function isSubmitRepairable(reason) {
+  return reason === "pending_input" || reason === "queued_messages";
+}
+function verifyNudgeDelivered(targetSession, runtime, mayPressEnter) {
+  const verdict = classifyNudgeDelivery(capturePaneSafe(targetSession));
+  if (verdict.state === "confirmed") return verdict;
+  if (!mayPressEnter || !isSubmitRepairable(verdict.reason)) return verdict;
+  confirmNudgeSubmitted(targetSession, runtime);
+  return classifyNudgeDelivery(capturePaneSafe(targetSession));
+}
+async function verifyNudgeDeliveredAsync(targetSession, runtime, mayPressEnter) {
+  const verdict = classifyNudgeDelivery(await capturePaneSafeAsync(targetSession));
+  if (verdict.state === "confirmed") return verdict;
+  if (!mayPressEnter || !isSubmitRepairable(verdict.reason)) return verdict;
+  await confirmNudgeSubmittedAsync(targetSession, runtime);
+  return classifyNudgeDelivery(await capturePaneSafeAsync(targetSession));
 }
 function isSessionBusy(sessionName) {
   const state = getSessionState(sessionName);
@@ -5334,11 +5405,42 @@ function isExeSession(sessionName) {
   const coordinatorName = getCoordinatorName();
   return matchesBaseWithInstance(coordinatorName);
 }
+function isProvenIntercomDelivery(result) {
+  return result === "acknowledged" || result === "delivered";
+}
+function classifyIntercomHandoff(result) {
+  switch (result) {
+    case "delivered":
+    case "sent":
+      return "intercom_unprocessed";
+    case "acknowledged":
+    case "skipped_exe":
+    case "debounced":
+    case "queued":
+      return "intercom_sent";
+    case "failed":
+      return "failed";
+    default: {
+      const exhaustive = result;
+      return exhaustive;
+    }
+  }
+}
 var PROMPT_INPUT_LINE = /(?:^|\s|│)\s*[❯›>]\s?(.*)$/u;
 var PROMPT_PLACEHOLDER = /^Try\s+["'“]/u;
+var PANE_BLOCKED_MARKERS = [
+  ["queued_messages", /press\s+up\s+to\s+edit\s+queued\s+messages?/iu]
+];
+var PANE_TAIL_LINES = 12;
+function paneBlockedState(pane) {
+  const tail = pane.split("\n").slice(-PANE_TAIL_LINES).join("\n");
+  for (const [state, re] of PANE_BLOCKED_MARKERS) if (re.test(tail)) return state;
+  return null;
+}
 function paneHasPendingInput(pane) {
+  if (paneBlockedState(pane) !== null) return true;
   const lines = pane.split("\n");
-  const tail = lines.slice(-12);
+  const tail = lines.slice(-PANE_TAIL_LINES);
   for (let i = tail.length - 1; i >= 0; i--) {
     const line = tail[i];
     if (!line || line.trim().length === 0) continue;
@@ -5392,7 +5494,7 @@ async function countScopedPendingReviews(targetSession, reviewer) {
 }
 async function countScopedOpenTasks(targetSession, agentId) {
   try {
-    const { fastDbInit } = await import("./fast-db-init-SCTOOIUT.js");
+    const { fastDbInit } = await import("./fast-db-init-L2RGKJWH.js");
     const client = await fastDbInit();
     const scope = extractRootExe(targetSession);
     if (!scope) return 0;
@@ -5447,7 +5549,7 @@ function buildScopedInProgressTaskQuery(targetSession) {
 async function findScopedInProgressTaskId(targetSession) {
   const q = buildScopedInProgressTaskQuery(targetSession);
   if (!q) return null;
-  const { fastDbInit } = await import("./fast-db-init-SCTOOIUT.js");
+  const { fastDbInit } = await import("./fast-db-init-L2RGKJWH.js");
   const client = await fastDbInit();
   const result = await client.execute(q);
   const id = result.rows[0]?.id;
@@ -5493,7 +5595,7 @@ async function decideDrainSend(item, ctx) {
     return true;
   }
   const result = await ctx.deliver(item.targetSession, item.intercomReason ?? "nudge");
-  return result === "delivered" || result === "debounced" || result === "skipped_exe";
+  return result === "delivered" || result === "sent" || result === "debounced" || result === "skipped_exe";
 }
 function sendIntercom(targetSession, opts) {
   const transport = getTransport();
@@ -5566,9 +5668,9 @@ function sendIntercom(targetSession, opts) {
   } catch {
   }
   const ledgerEnv = (process.env.EXE_NOTIFICATION_LEDGER ?? "").trim().toLowerCase();
-  if (ledgerEnv === "shadow" || ledgerEnv === "on") {
+  if (ledgerEnv === "shadow") {
     const ledgerScope = opts && "callerSessionScope" in opts ? opts.callerSessionScope : void 0;
-    void import("./notification-ledger-6QRLQW4Q.js").then((m) => m.recordShadowNudge(targetSession, reason, ledgerScope, { force: opts?.force })).catch(() => {
+    void import("./notification-ledger-CLGM7ODF.js").then((m) => m.recordShadowNudge(targetSession, reason, ledgerScope, { force: opts?.force })).catch(() => {
     });
   }
   if (!opts?.force && isDebounced(targetSession)) {
@@ -5624,11 +5726,17 @@ function sendIntercom(targetSession, opts) {
     }
     if (sessionHasPendingInput(targetSession)) {
       const isEmployeePane = targetSession.includes("-") && !isExeSession(targetSession) && !isCoordinatorName(rawAgent);
+      const resubmitAt = Date.now();
       if (sessionState === "idle" && isEmployeePane && typeof transport.submitEnter === "function" && confirmNudgeSubmitted(targetSession, resolveSessionRuntime(targetSession))) {
         const batched3 = recordDebounce(targetSession);
-        logIntercom(`RESUBMITTED \u2192 ${targetSession} (completed half-delivered nudge \u2014 pressed Enter)${batched3 > 0 ? ` [${batched3} batched]` : ""}`);
-        recordResult("delivered", "resubmit_pending_input");
-        return "delivered";
+        if (hasIntercomAckAfter(targetSession, resubmitAt)) {
+          logIntercom(`RESUBMITTED \u2192 ${targetSession} (completed half-delivered nudge \u2014 pressed Enter + target ack)${batched3 > 0 ? ` [${batched3} batched]` : ""}`);
+          recordResult("delivered", "resubmit_pending_input");
+          return "delivered";
+        }
+        logIntercom(`RESUBMITTED \u2192 ${targetSession} (pressed Enter; awaiting target ack)${batched3 > 0 ? ` [${batched3} batched]` : ""}`);
+        recordResult("sent", "resubmit_pending_input");
+        return "sent";
       }
       queueIntercom(targetSession, "non-empty input buffer at send time", reason);
       const batched2 = recordDebounce(targetSession);
@@ -5638,18 +5746,25 @@ function sendIntercom(targetSession, opts) {
     }
     const msg = formatIntercomPrompt(reason);
     const runtime = resolveSessionRuntime(targetSession);
+    const injectedAt = Date.now();
     transport.sendKeysLiteral(targetSession, msg, runtime);
-    if (sessionState === "idle" && !confirmNudgeSubmitted(targetSession, runtime)) {
-      queueIntercom(targetSession, "nudge typed but submit Enter unconfirmed (e4889b61)", reason);
+    const verdict = verifyNudgeDelivered(targetSession, runtime, sessionState === "idle");
+    if (verdict.state !== "confirmed") {
+      queueIntercom(targetSession, `nudge unconfirmed at target pane (${verdict.reason})`, reason);
       const batched2 = recordDebounce(targetSession);
-      logIntercom(`UNCONFIRMED \u2192 ${targetSession} (typed but not submitted \u2014 re-queued)${batched2 > 0 ? ` [${batched2} batched]` : ""}`);
-      recordResult("queued", "submit_unconfirmed");
+      logIntercom(`UNCONFIRMED \u2192 ${targetSession} (${verdict.reason} \u2014 re-queued)${batched2 > 0 ? ` [${batched2} batched]` : ""}`);
+      recordResult("queued", `unconfirmed_${verdict.reason}`);
       return "queued";
     }
     const batched = recordDebounce(targetSession);
-    logIntercom(`DELIVERED \u2192 ${targetSession}${batched > 0 ? ` [${batched} nudges batched during debounce]` : ""} (fire-and-forget)`);
-    recordResult("delivered");
-    return "delivered";
+    if (hasIntercomAckAfter(targetSession, injectedAt)) {
+      logIntercom(`DELIVERED \u2192 ${targetSession}${batched > 0 ? ` [${batched} nudges batched during debounce]` : ""} (confirmed at target pane + target ack)`);
+      recordResult("delivered");
+      return "delivered";
+    }
+    logIntercom(`SENT \u2192 ${targetSession}${batched > 0 ? ` [${batched} nudges batched during debounce]` : ""} (injected at target pane; awaiting target ack)`);
+    recordResult("sent");
+    return "sent";
   } catch (e) {
     process.stderr.write("[tmux-routing] sendIntercom to " + targetSession + ": " + (e instanceof Error ? e.message : String(e)) + "\n");
     logIntercom(`FAIL \u2192 ${targetSession}`);
@@ -5662,58 +5777,64 @@ var DEFERRED_SPAWN_NUDGE_RETRY_MS = Number(process.env.EXE_DEFERRED_SPAWN_NUDGE_
 function scheduleDeferredSpawnNudge(input) {
   const attemptSend = (attempt) => {
     setTimeout(() => {
-      try {
-        if (!input.transport.isAlive(input.sessionName)) {
-          throw new Error("session not alive at deferred nudge time");
-        }
-        input.transport.sendKeysLiteral(input.sessionName, input.message, input.runtime);
-        process.stderr.write(
-          `[tmux-routing] deferred spawn nudge delivered to ${input.sessionName} (attempt ${attempt}/${DEFERRED_SPAWN_NUDGE_ATTEMPTS})
+      void (async () => {
+        try {
+          if (!input.transport.isAlive(input.sessionName)) {
+            throw new Error("session not alive at deferred nudge time");
+          }
+          input.transport.sendKeysLiteral(input.sessionName, input.message, input.runtime);
+          const verdict = await verifyNudgeDeliveredAsync(input.sessionName, input.runtime, true);
+          if (verdict.state !== "confirmed") {
+            throw new Error(`nudge unconfirmed at target pane (${verdict.reason})`);
+          }
+          process.stderr.write(
+            `[tmux-routing] deferred spawn nudge delivered to ${input.sessionName} (attempt ${attempt}/${DEFERRED_SPAWN_NUDGE_ATTEMPTS})
 `
-        );
-        recordOrchestrationEventBestEffort({
-          eventType: "dispatch.spawn_nudge.delivered",
-          source: "tmux-routing.scheduleDeferredSpawnNudge",
-          agentId: input.employeeName,
-          sessionScope: input.exeSession,
-          tmuxSession: input.sessionName,
-          runtime: input.runtime,
-          result: "delivered",
-          payload: { attempt }
-        });
-      } catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        process.stderr.write(
-          `[tmux-routing] deferred spawn nudge failed for ${input.sessionName} (attempt ${attempt}/${DEFERRED_SPAWN_NUDGE_ATTEMPTS}): ${msg}
+          );
+          recordOrchestrationEventBestEffort({
+            eventType: "dispatch.spawn_nudge.delivered",
+            source: "tmux-routing.scheduleDeferredSpawnNudge",
+            agentId: input.employeeName,
+            sessionScope: input.exeSession,
+            tmuxSession: input.sessionName,
+            runtime: input.runtime,
+            result: "delivered",
+            payload: { attempt }
+          });
+        } catch (err) {
+          const msg = err instanceof Error ? err.message : String(err);
+          process.stderr.write(
+            `[tmux-routing] deferred spawn nudge failed for ${input.sessionName} (attempt ${attempt}/${DEFERRED_SPAWN_NUDGE_ATTEMPTS}): ${msg}
 `
-        );
-        recordOrchestrationEventBestEffort({
-          eventType: "dispatch.spawn_nudge.failed",
-          source: "tmux-routing.scheduleDeferredSpawnNudge",
-          severity: "warn",
-          agentId: input.employeeName,
-          sessionScope: input.exeSession,
-          tmuxSession: input.sessionName,
-          runtime: input.runtime,
-          result: "failed",
-          errorCode: "deferred_nudge_failed",
-          payload: { attempt, error: msg }
-        });
-        if (attempt < DEFERRED_SPAWN_NUDGE_ATTEMPTS) {
-          attemptSend(attempt + 1);
-          return;
+          );
+          recordOrchestrationEventBestEffort({
+            eventType: "dispatch.spawn_nudge.failed",
+            source: "tmux-routing.scheduleDeferredSpawnNudge",
+            severity: "warn",
+            agentId: input.employeeName,
+            sessionScope: input.exeSession,
+            tmuxSession: input.sessionName,
+            runtime: input.runtime,
+            result: "failed",
+            errorCode: "deferred_nudge_failed",
+            payload: { attempt, error: msg }
+          });
+          if (attempt < DEFERRED_SPAWN_NUDGE_ATTEMPTS) {
+            attemptSend(attempt + 1);
+            return;
+          }
+          queueIntercom(input.sessionName, `spawn nudge failed after ${attempt} attempts: ${msg}`, "signal");
+          void import("./notifications-MACUZPYP.js").then(({ writeNotification: writeNotification2 }) => writeNotification2({
+            agentId: getCoordinatorName(),
+            agentRole: "COO",
+            event: "error_spike",
+            project: "",
+            summary: `Spawned ${input.sessionName}, but the initial task nudge failed after ${attempt} attempts (${msg}). Worker may be idle with open task; check session and re-dispatch if needed.`,
+            sessionScope: input.exeSession
+          })).catch(() => {
+          });
         }
-        queueIntercom(input.sessionName, `spawn nudge failed after ${attempt} attempts: ${msg}`, "signal");
-        void import("./notifications-7B6D7Y5C.js").then(({ writeNotification: writeNotification2 }) => writeNotification2({
-          agentId: getCoordinatorName(),
-          agentRole: "COO",
-          event: "error_spike",
-          project: "",
-          summary: `Spawned ${input.sessionName}, but the initial task nudge failed after ${attempt} attempts (${msg}). Worker may be idle with open task; check session and re-dispatch if needed.`,
-          sessionScope: input.exeSession
-        })).catch(() => {
-        });
-      }
+      })();
     }, attempt === 1 ? 1e4 : DEFERRED_SPAWN_NUDGE_RETRY_MS);
   };
   attemptSend(1);
@@ -5798,7 +5919,7 @@ async function sendIntercomAsync(targetSession, opts) {
   let ledgerClaim = null;
   if (authoritativeLedger) {
     try {
-      const { claimAuthoritativeNudge } = await import("./notification-ledger-6QRLQW4Q.js");
+      const { claimAuthoritativeNudge } = await import("./notification-ledger-CLGM7ODF.js");
       const claim2 = await claimAuthoritativeNudge(
         targetSession,
         reason,
@@ -5821,7 +5942,7 @@ async function sendIntercomAsync(targetSession, opts) {
   const markLedgerDelivered = async () => {
     if (!ledgerClaim) return;
     try {
-      const { markNudgeDelivered } = await import("./notification-ledger-6QRLQW4Q.js");
+      const { markNudgeDelivered } = await import("./notification-ledger-CLGM7ODF.js");
       await markNudgeDelivered(ledgerClaim.id, ledgerClaim.sessionScope);
     } catch {
     }
@@ -5829,7 +5950,7 @@ async function sendIntercomAsync(targetSession, opts) {
   const markLedgerFailed = async (error) => {
     if (!ledgerClaim) return;
     try {
-      const { markNudgeDeliveryFailed } = await import("./notification-ledger-6QRLQW4Q.js");
+      const { markNudgeDeliveryFailed } = await import("./notification-ledger-CLGM7ODF.js");
       await markNudgeDeliveryFailed(ledgerClaim.id, error, ledgerClaim.sessionScope);
     } catch {
     }
@@ -5880,12 +6001,18 @@ async function sendIntercomAsync(targetSession, opts) {
     }
     if (await sessionHasPendingInputAsync(targetSession)) {
       const isEmployeePane = targetSession.includes("-") && !isExeSession(targetSession) && !isCoordinatorName(rawAgent);
+      const resubmitAt = Date.now();
       if (sessionState === "idle" && isEmployeePane && await confirmNudgeSubmittedAsync(targetSession, resolveSessionRuntime(targetSession))) {
         const batched3 = recordDebounce(targetSession);
-        logIntercom(`RESUBMITTED \u2192 ${targetSession} (completed half-delivered nudge \u2014 pressed Enter)${batched3 > 0 ? ` [${batched3} batched]` : ""}`);
-        await markLedgerDelivered();
-        recordResult("delivered", "resubmit_pending_input");
-        return "delivered";
+        if (hasIntercomAckAfter(targetSession, resubmitAt)) {
+          logIntercom(`RESUBMITTED \u2192 ${targetSession} (completed half-delivered nudge \u2014 pressed Enter + target ack)${batched3 > 0 ? ` [${batched3} batched]` : ""}`);
+          await markLedgerDelivered();
+          recordResult("delivered", "resubmit_pending_input");
+          return "delivered";
+        }
+        logIntercom(`RESUBMITTED \u2192 ${targetSession} (pressed Enter; awaiting target ack)${batched3 > 0 ? ` [${batched3} batched]` : ""}`);
+        recordResult("sent", "resubmit_pending_input");
+        return "sent";
       }
       queueIntercom(targetSession, "non-empty input buffer at send time", reason);
       const batched2 = recordDebounce(targetSession);
@@ -5894,19 +6021,27 @@ async function sendIntercomAsync(targetSession, opts) {
       return "queued";
     }
     const runtime = resolveSessionRuntime(targetSession);
+    const injectedAt = Date.now();
     await sendKeysLiteralAsync(targetSession, formatIntercomPrompt(reason), runtime);
-    if (sessionState === "idle" && !await confirmNudgeSubmittedAsync(targetSession, runtime)) {
-      queueIntercom(targetSession, "nudge typed but submit Enter unconfirmed (e4889b61)", reason);
+    const verdict = await verifyNudgeDeliveredAsync(targetSession, runtime, sessionState === "idle");
+    if (verdict.state !== "confirmed") {
+      queueIntercom(targetSession, `nudge unconfirmed at target pane (${verdict.reason})`, reason);
       const batched2 = recordDebounce(targetSession);
-      logIntercom(`UNCONFIRMED \u2192 ${targetSession} (typed but not submitted \u2014 re-queued)${batched2 > 0 ? ` [${batched2} batched]` : ""}`);
-      recordResult("queued", "submit_unconfirmed");
+      logIntercom(`UNCONFIRMED \u2192 ${targetSession} (${verdict.reason} \u2014 re-queued)${batched2 > 0 ? ` [${batched2} batched]` : ""}`);
+      await markLedgerFailed(`unconfirmed_${verdict.reason}`);
+      recordResult("queued", `unconfirmed_${verdict.reason}`);
       return "queued";
     }
     const batched = recordDebounce(targetSession);
-    logIntercom(`DELIVERED \u2192 ${targetSession}${batched > 0 ? ` [${batched} nudges batched during debounce]` : ""} (async fire-and-forget)`);
-    await markLedgerDelivered();
-    recordResult("delivered");
-    return "delivered";
+    if (hasIntercomAckAfter(targetSession, injectedAt)) {
+      logIntercom(`DELIVERED \u2192 ${targetSession}${batched > 0 ? ` [${batched} nudges batched during debounce]` : ""} (confirmed at target pane + target ack)`);
+      await markLedgerDelivered();
+      recordResult("delivered");
+      return "delivered";
+    }
+    logIntercom(`SENT \u2192 ${targetSession}${batched > 0 ? ` [${batched} nudges batched during debounce]` : ""} (injected at target pane; awaiting target ack)`);
+    recordResult("sent");
+    return "sent";
   } catch (e) {
     process.stderr.write("[tmux-routing] sendIntercomAsync to " + targetSession + ": " + (e instanceof Error ? e.message : String(e)) + "\n");
     logIntercom(`FAIL \u2192 ${targetSession}`);
@@ -6083,13 +6218,11 @@ function ensureEmployee(employeeName, exeSession, projectDir, opts) {
           reason: "signal",
           callerSessionScope: exeSession
         });
-        if (result2 === "delivered") {
-          return { status: "intercom_unprocessed", sessionName: liveSession };
-        }
-        if (result2 === "acknowledged" || result2 === "skipped_exe" || result2 === "debounced" || result2 === "queued") {
-          return { status: "intercom_sent", sessionName: liveSession };
+        const status = classifyIntercomHandoff(result2);
+        if (status === "failed") {
+          return { status, sessionName: liveSession, error: "intercom delivery failed during spawn mutex handoff" };
         }
-        return { status: "failed", sessionName: liveSession, error: "intercom delivery failed during spawn mutex handoff" };
+        return { status, sessionName: liveSession };
       }
       const baseSession = employeeSessionName(employeeName, exeSession);
       const message = `Spawn already in flight for ${baseAgentName(employeeName)} in coordinator session ${exeSession}; refusing to create a numbered duplicate before tmux liveness is established. Retry after the active spawn finishes.`;
@@ -6115,7 +6248,10 @@ function ensureEmployee(employeeName, exeSession, projectDir, opts) {
     const free = findFreeInstance(
       employeeName,
       exeSession,
-      opts.maxAutoInstances ?? 10
+      opts.maxAutoInstances ?? 10,
+      isEmployeeAlive,
+      // Bug 3d7c9fea: prefer an alive-but-idle session over spawning a duplicate.
+      (s) => getSessionState(s) === "idle"
     );
     if (free === null) {
       releaseSpawnMutexIfOwned();
@@ -6169,13 +6305,11 @@ function ensureEmployee(employeeName, exeSession, projectDir, opts) {
     releaseIfOwned();
     releaseSpawnMutexIfOwned();
     const result2 = sendIntercom(sessionName, { force: true, reason: "signal", callerSessionScope: exeSession });
-    if (result2 === "acknowledged" || result2 === "skipped_exe" || result2 === "debounced" || result2 === "queued") {
-      return { status: "intercom_sent", sessionName };
+    const status = classifyIntercomHandoff(result2);
+    if (status === "failed") {
+      return { status, sessionName, error: "intercom delivery failed" };
     }
-    if (result2 === "delivered") {
-      return { status: "intercom_unprocessed", sessionName };
-    }
-    return { status: "failed", sessionName, error: "intercom delivery failed" };
+    return { status, sessionName };
   }
   const spawnOpts = { ...opts, instance: effectiveInstance };
   if (!spawnOpts.cwd) {
@@ -6297,13 +6431,11 @@ async function ensureEmployeeAsync(employeeName, exeSession, projectDir, opts) {
             reason: "signal",
             callerSessionScope: exeSession
           });
-          if (result2 === "delivered") {
-            return { status: "intercom_unprocessed", sessionName: liveSession };
-          }
-          if (result2 === "acknowledged" || result2 === "skipped_exe" || result2 === "debounced" || result2 === "queued") {
-            return { status: "intercom_sent", sessionName: liveSession };
+          const status = classifyIntercomHandoff(result2);
+          if (status === "failed") {
+            return { status, sessionName: liveSession, error: "intercom delivery failed during spawn mutex handoff" };
           }
-          return { status: "failed", sessionName: liveSession, error: "intercom delivery failed during spawn mutex handoff" };
+          return { status, sessionName: liveSession };
         }
         const baseSession = employeeSessionName(employeeName, exeSession);
         const message = `Spawn already in flight for ${baseAgentName(employeeName)} in coordinator session ${exeSession}; refusing to create a numbered duplicate before tmux liveness is established. Retry after the active spawn finishes.`;
@@ -6323,7 +6455,31 @@ async function ensureEmployeeAsync(employeeName, exeSession, projectDir, opts) {
         return { status: "failed", sessionName: baseSession, error: message };
       }
     }
-    const free = findFreeInstance(employeeName, exeSession, asyncOpts.maxAutoInstances ?? 10);
+    const maxAuto = asyncOpts.maxAutoInstances ?? 10;
+    const idleSet = /* @__PURE__ */ new Set();
+    {
+      const slotNames = [
+        employeeSessionName(employeeName, exeSession),
+        ...Array.from(
+          { length: Math.max(0, maxAuto - 1) },
+          (_, k) => employeeSessionName(employeeName, exeSession, k + 2)
+        )
+      ];
+      await Promise.all(
+        slotNames.map(async (s) => {
+          if (isEmployeeAlive(s) && await getSessionStateAsync(s) === "idle") {
+            idleSet.add(s);
+          }
+        })
+      );
+    }
+    const free = findFreeInstance(
+      employeeName,
+      exeSession,
+      maxAuto,
+      isEmployeeAlive,
+      (s) => idleSet.has(s)
+    );
     if (free === null) {
       releaseSpawnMutexIfOwned();
       return {
@@ -6467,6 +6623,9 @@ function paneShowsRuntimeBanner(pane, runtime) {
   if (runtime === "codex") {
     return pane.includes("codex") || pane.includes("Codex") || pane.includes("exe-start-codex");
   }
+  if (runtime === "opencode") {
+    return pane.includes("opencode") || pane.includes("OpenCode") || pane.includes("exe-start-opencode");
+  }
   return pane.includes("Claude Code") || pane.includes("\u276F");
 }
 function classifySpawnFailurePane(pane) {
@@ -7462,8 +7621,14 @@ export {
   sessionHasPendingInputAsync,
   confirmNudgeSubmitted,
   confirmNudgeSubmittedAsync,
+  classifyNudgeDelivery,
+  verifyNudgeDelivered,
+  verifyNudgeDeliveredAsync,
   isSessionBusy,
   isExeSession,
+  isProvenIntercomDelivery,
+  classifyIntercomHandoff,
+  paneBlockedState,
   paneHasPendingInput,
   isBlockedCodexPrompt,
   sessionHasPendingInput,