@askexenow/exe-os 0.9.372 → 0.9.374

package/dist/{chunk-JR23BL74.js → chunk-PDVXWXTL.js}

@@ -9,17 +9,17 @@ import {
 import {
   buildClaudeHttpMcpEntry,
   buildClaudeStdioProxyMcpEntry
-} from "./chunk-LDL3S7AC.js";
+} from "./chunk-NKETJCB5.js";
 import {
   ensureAllAgentSymlinks
-} from "./chunk-WAEKYKTK.js";
+} from "./chunk-6RKKVPYF.js";
 import {
   MCP_LEGACY_KEY,
   MCP_PRIMARY_KEY
 } from "./chunk-HYZV25LY.js";
 import {
   loadConfigSync
-} from "./chunk-QMSEL5YS.js";
+} from "./chunk-ZIG7VPJV.js";
 
 // src/adapters/claude/installer.ts
 import { readFile, writeFile, mkdir, readdir, rm } from "fs/promises";
@@ -942,7 +942,7 @@ async function runInstaller(homeDir) {
     );
   }
   try {
-    const { generateAgentDefs, summarizeAgentDefResults } = await import("./agent-defs-generator-M4ZNYIVX.js");
+    const { generateAgentDefs, summarizeAgentDefResults } = await import("./agent-defs-generator-ZWI6DXOE.js");
     const defResults = generateAgentDefs({ homeDir: resolvedHome });
     process.stderr.write(`Agent definitions: ${summarizeAgentDefResults(defResults)}
 `);

package/dist/{chunk-3CIMDFXG.js → chunk-PFQ3VEEM.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-5YEUPUV4.js";
 import {
   EXE_AI_DIR
-} from "./chunk-QMSEL5YS.js";
+} from "./chunk-ZIG7VPJV.js";
 
 // src/lib/shard-manager.ts
 import path from "path";

package/dist/{chunk-SBJV2PCU.js → chunk-PHBU4LGO.js}

@@ -1,6 +1,6 @@
 import {
   resolveDataDir
-} from "./chunk-QMSEL5YS.js";
+} from "./chunk-ZIG7VPJV.js";
 
 // src/lib/postinstall-failure.ts
 import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";

package/dist/{chunk-W25RLOQ2.js → chunk-PLZSZOZN.js}

@@ -1,10 +1,10 @@
 import {
   withScopedReadWindow
-} from "./chunk-YFCNWQAM.js";
+} from "./chunk-DJOIMFKV.js";
 import {
   requireOrgPartnerBinding,
   resolvePartnerIdentities
-} from "./chunk-PVEM537A.js";
+} from "./chunk-4YLBKEL5.js";
 import {
   allocateOutboundSeq,
   approveBriefManually,
@@ -22,7 +22,7 @@ import {
   sealMailboxEnvelope,
   unrecordedText,
   verifyManifest
-} from "./chunk-RUVO3NJC.js";
+} from "./chunk-IN6CAM4F.js";
 import {
   queueMailboxDeposit
 } from "./chunk-4LWBC7CM.js";

package/dist/{chunk-THIJIOE2.js → chunk-PY3FOMRN.js}

@@ -132,6 +132,12 @@ var PLATFORM_PROCEDURES = [
     priority: "p1",
     content: "Do NOT query bug/feature status during startup; the boot script owns the startup brief. When the founder asks about filed bugs or shipped features after boot, call support(action='list_my_bugs') and support(action='list_my_features'). If any bug has status 'closed' with fixed_version, tell the founder: 'N bug fix(es) available \u2014 run exe-os update to get vX.Y.Z'. If any feature has status 'shipped' with shipped_version, tell founder: 'N feature(s) shipped \u2014 run exe-os update to get vX.Y.Z'. Skip silently if the support tool is unavailable."
   },
+  {
+    title: "Link fix PRs to bugs at PR-open time",
+    domain: "support",
+    priority: "p1",
+    content: "When you open a PR that addresses a filed bug, immediately comment the linkage onto that bug: support(action='add_comment', id=<bug-id>, comment='Fix PR opened: <repo>#<PR number> (<branch>)'). Do this the moment the PR exists \u2014 before merge, not after. The bug stays open until the fix lands, but the bug\u2194PR linkage must be recorded at PR-open time so triage and other agents can see which PR owns which bug without guessing. Also reference the bug ID in the PR body for the reverse link."
+  },
   // --- Tool guidance ---
   {
     title: "How to use company_actions \u2014 execute business actions through gateway connectors",
@@ -247,12 +253,6 @@ var PLATFORM_PROCEDURES = [
     priority: "p0",
     content: "Before broad repo exploration, agents MUST use code_context and graph MCP tools instead of manual grep/read. code_context: action=search (multi-language code/doc search), action=trace (symbol imports/dependents), action=blast_radius (impact analysis), action=index/stats (refresh/check index). graph: action=query_relationships, action=hot_entities, action=entity_neighbors, action=stats. NEVER brute-force grep without checking code_context first. CLI parity: exe-os code-context init|index|status|stats|search|doctor. Keep code_context separate from durable memory \u2014 promote only validated decisions/lessons."
   },
-  {
-    title: "Retrieval architecture \u2014 three pillars, embeddings optional",
-    domain: "tool-use",
-    priority: "p1",
-    content: "THREE equal pillars: (1) Keyword (FTS5), (2) Graph (entity relationships), (3) Vector (embedding similarity). All run in parallel; results merge via Reciprocal Rank Fusion. Keyword + Graph are FIRST-CLASS, not fallbacks. 8-16GB machines without embeddings = still excellent. 8GB: FTS+Graph only. 16GB: +optional 0.6B model. 32+GB: full hybrid with 4B model. Degrades gracefully. CLaRa (query expansion) runs automatically on every recall \u2014 LLM infers related terms, closing the gap between keyword and semantic search WITHOUT embeddings. No config needed. BENCHMARK: FTS+Graph (42.25%) BEATS full hybrid (41.75%) on BEAM 100K. DOCUMENT-AWARE: For ingested documents (PDFs, exports, wiki imports), use retrieval_mode='document_aware' for neighbor chunk expansion, project affinity boost, and scoring diagnostics. For quick fact lookups on agent memories, default recall is better."
-  },
   {
     title: "Commit discipline \u2014 commit after every completed track, never batch",
     domain: "workflow",
@@ -326,6 +326,18 @@ var PLATFORM_PROCEDURES = [
   }
 ];
 var PLATFORM_REFERENCE_PROCEDURES = [
+  // Demoted from the always-injected block (2026-08-19). Reference-shaped:
+  // hardware tiers, benchmark percentages and architecture prose that no
+  // agent has to act on mid-task. The actionable half already lives inline
+  // as "Code context + graph first — MANDATORY". Demoted because the
+  // injected set had reached 26,969 of its 27,000-char cap, which is
+  // exactly the pressure that cap exists to create.
+  {
+    title: "Retrieval architecture \u2014 three pillars, embeddings optional",
+    domain: "tool-use",
+    priority: "p1",
+    content: "THREE equal pillars: (1) Keyword (FTS5), (2) Graph (entity relationships), (3) Vector (embedding similarity). All run in parallel; results merge via Reciprocal Rank Fusion. Keyword + Graph are FIRST-CLASS, not fallbacks. 8-16GB machines without embeddings = still excellent. 8GB: FTS+Graph only. 16GB: +optional 0.6B model. 32+GB: full hybrid with 4B model. Degrades gracefully. CLaRa (query expansion) runs automatically on every recall \u2014 LLM infers related terms, closing the gap between keyword and semantic search WITHOUT embeddings. No config needed. BENCHMARK: FTS+Graph (42.25%) BEATS full hybrid (41.75%) on BEAM 100K. DOCUMENT-AWARE: For ingested documents (PDFs, exports, wiki imports), use retrieval_mode='document_aware' for neighbor chunk expansion, project affinity boost, and scoring diagnostics. For quick fact lookups on agent memories, default recall is better."
+  },
   {
     title: "Use the diagnostics dashboards \u2014 never grep daemon logs",
     domain: "workflow",

package/dist/{chunk-AAUWFXOX.js → chunk-Q3AXXKDF.js}

@@ -2,13 +2,13 @@ import {
   InviteError,
   resolveAuth,
   resolveEndpoint
-} from "./chunk-5N4SG5NB.js";
+} from "./chunk-T35RCQFE.js";
 import {
   resolvePartnerIdentities
-} from "./chunk-PVEM537A.js";
+} from "./chunk-4YLBKEL5.js";
 import {
   orgKeyFingerprintDisplay
-} from "./chunk-H37FSTF2.js";
+} from "./chunk-UBMZ3YQU.js";
 import {
   asOrgBillablePlan
 } from "./chunk-X2X3IGZU.js";

package/dist/{chunk-VKXS2YGN.js → chunk-QHJR7IMX.js}

@@ -8,11 +8,11 @@ import {
 import {
   loadLicense,
   readCachedLicenseToken
-} from "./chunk-DKBPCOU4.js";
+} from "./chunk-L6RXG36J.js";
 import {
   EXE_AI_DIR,
   loadConfig
-} from "./chunk-QMSEL5YS.js";
+} from "./chunk-ZIG7VPJV.js";
 
 // src/bin/exe-support.ts
 import { mkdirSync, readFileSync, unlinkSync, writeFileSync } from "fs";

package/dist/chunk-QLZ46RCK.js

@@ -0,0 +1,45 @@
+// src/lib/budget-fallback.ts
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "fs";
+import path from "path";
+function sessionCacheDir() {
+  const base = process.env.EXE_OS_DIR ?? path.join(process.env.HOME ?? "", ".exe-os");
+  return path.join(base, "session-cache");
+}
+function markerPath(taskId) {
+  const safe = String(taskId).replace(/[^a-zA-Z0-9_-]/g, "");
+  return path.join(sessionCacheDir(), `budget-fallback-${safe}.json`);
+}
+function setBudgetFallback(marker) {
+  if (!marker.taskId || !marker.fallbackModel) return;
+  try {
+    const dir = sessionCacheDir();
+    if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+    writeFileSync(markerPath(marker.taskId), JSON.stringify(marker), { mode: 384 });
+  } catch {
+  }
+}
+function getBudgetFallback(taskId) {
+  if (!taskId) return null;
+  try {
+    const file = markerPath(taskId);
+    if (!existsSync(file)) return null;
+    const parsed = JSON.parse(readFileSync(file, "utf8"));
+    return parsed && parsed.taskId && parsed.fallbackModel ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+function clearBudgetFallback(taskId) {
+  if (!taskId) return;
+  try {
+    const file = markerPath(taskId);
+    if (existsSync(file)) unlinkSync(file);
+  } catch {
+  }
+}
+
+export {
+  setBudgetFallback,
+  getBudgetFallback,
+  clearBudgetFallback
+};

package/dist/{chunk-UHPMK6QZ.js → chunk-R3CZWFFC.js}

@@ -36,8 +36,8 @@ function rejectAllPending(reason) {
 function isWriteWorkerEnabled(env = process.env) {
   return env.EXE_WRITE_WORKER === "1";
 }
-function spawnDbWriteWorker(dbPath, encryptionKey) {
-  if (!isWriteWorkerEnabled()) return;
+function spawnDbWriteWorker(dbPath, encryptionKey, opts) {
+  if (!opts?.forMaintenance && !isWriteWorkerEnabled()) return;
   if (_worker) return;
   if (_spawnAttempts >= MAX_SPAWN_ATTEMPTS) return;
   _spawnAttempts++;
@@ -108,6 +108,13 @@ async function sweepSessionEventsRetentionInWorker(retentionDays) {
   });
   return { deleted: Number(result.deleted ?? 0) };
 }
+async function sweepConversationsRetentionInWorker(retentionDays) {
+  const result = await sendWriteWorkerRequest({
+    type: "sweep-conversations-retention",
+    retentionDays
+  });
+  return { deleted: Number(result.deleted ?? 0) };
+}
 function sendWriteWorkerRequest(payload) {
   if (!_worker || !_workerReady) {
     return Promise.reject(new Error("db write worker not available"));
@@ -150,6 +157,7 @@ export {
   isDbWriteWorkerReady,
   writeMemoryInWorker,
   sweepSessionEventsRetentionInWorker,
+  sweepConversationsRetentionInWorker,
   _getDbWriteWorkerForTests,
   disposeDbWriteWorker
 };

package/dist/{chunk-6XEYELCA.js → chunk-R4CBHKZ2.js}

@@ -1,6 +1,6 @@
 import {
   getGlobalProceduresBlock
-} from "./chunk-HIVZ53YB.js";
+} from "./chunk-EXTZSNWL.js";
 
 // src/lib/employee-templates.ts
 var BASE_OPERATING_PROCEDURES = `

package/dist/{chunk-5APCDDJZ.js → chunk-R522MWAR.js}

@@ -5,17 +5,17 @@ import {
 import {
   getBrandAsciiArt,
   getBrandName
-} from "./chunk-2CWS374F.js";
+} from "./chunk-7RI2CNXJ.js";
 import {
   FREE_TIER_BACKUP_DISCLOSURE
 } from "./chunk-SO7KTH3Q.js";
+import {
+  RUNTIME_TABLE
+} from "./chunk-WNBZJSQT.js";
 import {
   getMasterKey,
   setMasterKey
 } from "./chunk-HPXFKUGU.js";
-import {
-  RUNTIME_TABLE
-} from "./chunk-WNBZJSQT.js";
 import {
   WINDOWS_UNSUPPORTED_EXIT,
   isWSL,
@@ -27,7 +27,7 @@ import {
   MODELS_DIR,
   loadConfig,
   saveConfig
-} from "./chunk-QMSEL5YS.js";
+} from "./chunk-ZIG7VPJV.js";
 import {
   atomicWriteJsonSync,
   atomicWriteSync
@@ -219,7 +219,7 @@ function clearSetupState() {
 }
 async function probeDaemonHealthAfterInstall() {
   try {
-    const { waitForDaemonReady } = await import("./daemon-ready-OT2VQLS7.js");
+    const { waitForDaemonReady } = await import("./daemon-ready-P2BR2XP5.js");
     return await waitForDaemonReady(4, 500);
   } catch {
     return false;
@@ -771,7 +771,7 @@ async function runSetupWizard(opts = {}) {
       log("  The old directory will not be modified or deleted.");
       log("");
     }
-    const { getKeyBackupStatus, markKeyBackupConfirmed } = await import("./key-backup-status-6L2ARCXW.js");
+    const { getKeyBackupStatus, markKeyBackupConfirmed } = await import("./key-backup-status-LQPINQ3W.js");
     const keyBackupBeforeStep1 = getKeyBackupStatus();
     const mustRunKeyCeremony = !state.completedSteps.includes(1) || !keyBackupBeforeStep1.exists;
     if (mustRunKeyCeremony) {
@@ -1043,7 +1043,7 @@ async function runSetupWizard(opts = {}) {
       } else if (cloudDeclined) {
         delete config.cloud;
       }
-      const { applyDefaultOrchestrationPhase } = await import("./orchestration-phase-UDS24CVQ.js");
+      const { applyDefaultOrchestrationPhase } = await import("./orchestration-phase-T2WD45UA.js");
       applyDefaultOrchestrationPhase(config);
       await saveConfig(config);
       log("");
@@ -1425,7 +1425,7 @@ async function runSetupWizard(opts = {}) {
         log("");
         unlockExecutives = await askYesNo("Unlock Phase 2 executives now? (y/N): ", void 0, false);
       }
-      const { setOrchestrationPhase } = await import("./orchestration-phase-UDS24CVQ.js");
+      const { setOrchestrationPhase } = await import("./orchestration-phase-T2WD45UA.js");
       if (!unlockExecutives) {
         await setOrchestrationPhase("phase_1_coo", "setup-wizard");
         log("");

package/dist/chunk-RH4AH3YB.js

@@ -0,0 +1,80 @@
+// src/lib/hermetic-guard.ts
+import { realpathSync } from "fs";
+import os from "os";
+import path from "path";
+var SHARED_TMP_BASES = ["/tmp", os.tmpdir()];
+function isHermeticTestEnv() {
+  return process.env.EXE_TEST_HERMETIC === "1";
+}
+function harnessRealHome() {
+  const v = process.env.EXE_HERMETIC_REAL_HOME ?? process.env.EXE_REAL_HOME;
+  return v && v.trim() ? v : null;
+}
+function harnessSandboxRoot() {
+  const v = process.env.EXE_HERMETIC_SANDBOX_ROOT;
+  return v && v.trim() ? v : null;
+}
+function canonical(p) {
+  let dir = path.resolve(p);
+  const tail = [];
+  for (; ; ) {
+    try {
+      return path.join(realpathSync(dir), ...tail);
+    } catch {
+    }
+    const parent = path.dirname(dir);
+    if (parent === dir) return path.resolve(p);
+    tail.unshift(path.basename(dir));
+    dir = parent;
+  }
+}
+function isInside(candidate, base) {
+  const rel = path.relative(canonical(base), canonical(candidate));
+  return rel === "" || !rel.startsWith("..") && !path.isAbsolute(rel);
+}
+function realInstallDirs(realHome) {
+  return [path.join(realHome, ".exe-os"), path.join(realHome, ".exe-mem")];
+}
+function assertHermeticPath(what, resolved) {
+  if (!isHermeticTestEnv()) return;
+  const realHome = harnessRealHome();
+  if (!realHome) return;
+  const sandboxRoot = harnessSandboxRoot();
+  if (sandboxRoot && isInside(resolved, sandboxRoot)) return;
+  const breached = realInstallDirs(realHome).find((dir) => isInside(resolved, dir));
+  if (!breached) return;
+  throw new Error(
+    `[hermetic-guard] Test isolation breach: ${what} resolved to ${resolved}, which is the REAL exe-os install at ${breached}.
+  This process runs under the hermetic test harness (EXE_TEST_HERMETIC=1) but is operating on the LIVE install. Real product code reached from here can and does kill the production daemon (bug 2b7072a7 / 7a915790).
+  Cause is almost always a spawn that overrode the sandbox: an explicit env: {...} that dropped EXE_OS_DIR/EXE_MEM_DIR, or HOME: os.homedir() captured outside the sandbox.
+  Fix: inherit ...process.env, or use the hermetic HOME (process.env.HOME), never os.homedir().`
+  );
+}
+function assertHermeticTmux() {
+  if (!isHermeticTestEnv()) return;
+  const realHome = harnessRealHome();
+  if (!realHome) return;
+  if (process.env.TMUX) {
+    throw new Error(
+      `[hermetic-guard] Test isolation breach: $TMUX is set (${process.env.TMUX}) under the hermetic test harness. A tmux client follows $TMUX to the LIVE tmux server regardless of -L, so this invocation would create, signal, or reap real agent sessions (bug 2b7072a7).
+  Fix: delete TMUX/TMUX_PANE from the child env \u2014 the harness does this for the worker itself.`
+    );
+  }
+  const tmpdir = process.env.TMUX_TMPDIR;
+  const sandboxRoot = harnessSandboxRoot();
+  const recordedTmuxDir = process.env.EXE_HERMETIC_TMUX_DIR;
+  const isOwnScratch = !!tmpdir && (!!recordedTmuxDir && isInside(tmpdir, recordedTmuxDir) || !!sandboxRoot && isInside(tmpdir, sandboxRoot) || // No harness breadcrumbs (a child spawned without them): fall back to the
+  // property that matters — it must not be a bare shared base.
+  !recordedTmuxDir && !sandboxRoot && !SHARED_TMP_BASES.some((base) => canonical(tmpdir) === canonical(base)));
+  if (!isOwnScratch) {
+    throw new Error(
+      `[hermetic-guard] Test isolation breach: TMUX_TMPDIR is ${tmpdir ? tmpdir : "unset"} under the hermetic test harness, so tmux would use a SHARED ${path.join("<base>", "tmux-<uid>")} server \u2014 the live one (bug 2b7072a7).
+  Fix: point TMUX_TMPDIR at a per-run scratch directory, as tests/setup/hermetic-env.ts does.`
+    );
+  }
+}
+
+export {
+  assertHermeticPath,
+  assertHermeticTmux
+};

package/dist/{chunk-AMKSDKMK.js → chunk-S2WBS6BG.js}

@@ -1,9 +1,10 @@
 import {
+  GIT_CRYPT_SMUDGE_BYPASS_ARGS,
   getGitRoot,
   getGitRootAsync,
   isWorktreeDirty,
   isWorktreeDirtyAsync
-} from "./chunk-JTWTBX2M.js";
+} from "./chunk-4EN3IZ3Q.js";
 
 // src/lib/worktree-sweep.ts
 import { execFile } from "child_process";
@@ -303,25 +304,6 @@ async function pruneWorktreeRegistry(repoRoot) {
   } catch {
   }
 }
-async function clearStashes(repoRoot) {
-  try {
-    const stashList = (await execFileAsync("git", ["stash", "list"], {
-      cwd: repoRoot,
-      encoding: "utf8",
-      timeout: GIT_TIMEOUT_MS
-    })).stdout.trim();
-    if (!stashList) return 0;
-    const count = stashList.split("\n").length;
-    await execFileAsync("git", ["stash", "clear"], {
-      cwd: repoRoot,
-      encoding: "utf8",
-      timeout: GIT_TIMEOUT_MS
-    });
-    return count;
-  } catch {
-    return 0;
-  }
-}
 function parseAgentName(wtPath) {
   const dirName = path.basename(wtPath);
   if (!dirName) return null;
@@ -338,17 +320,18 @@ async function archiveDirtyWorktree(wtPath, agentName) {
   const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, 19);
   const quarantineBranch = `quarantine/${agentName}-${timestamp}`;
   try {
-    await execFileAsync("git", ["-C", wtPath, "checkout", "-b", quarantineBranch], {
+    await execFileAsync("git", ["-C", wtPath, ...GIT_CRYPT_SMUDGE_BYPASS_ARGS, "checkout", "-b", quarantineBranch], {
       encoding: "utf8",
       timeout: GIT_TIMEOUT_MS
     });
-    await execFileAsync("git", ["-C", wtPath, "add", "-A"], {
+    await execFileAsync("git", ["-C", wtPath, ...GIT_CRYPT_SMUDGE_BYPASS_ARGS, "add", "-A"], {
       encoding: "utf8",
       timeout: GIT_TIMEOUT_MS
     });
     await execFileAsync("git", [
       "-C",
       wtPath,
+      ...GIT_CRYPT_SMUDGE_BYPASS_ARGS,
       "commit",
       "-m",
       `[quarantine] Auto-archived dirty orphan worktree
@@ -369,9 +352,19 @@ Archived by worktree-sweep after ${DIRTY_ORPHAN_MAX_AGE_MS / 864e5}-day dirty or
     });
     process.stderr.write(`[worktree-sweep] Archived dirty changes to branch ${quarantineBranch}
 `);
-    return true;
-  } catch {
-    return false;
+    return { ok: true };
+  } catch (err) {
+    const detail = (() => {
+      if (!err || typeof err !== "object") return String(err);
+      const e = err;
+      const parts = [e.message, e.stderr, e.stdout].map((part) => Buffer.isBuffer(part) ? part.toString("utf8") : String(part ?? "")).filter(Boolean);
+      return parts.join(" | ").replace(/\s+/g, " ").trim().slice(0, 400);
+    })();
+    process.stderr.write(
+      `[worktree-sweep] Archive FAILED for ${wtPath} (branch ${quarantineBranch}): ${detail}
+`
+    );
+    return { ok: false, detail };
   }
 }
 async function sweepWorktrees(options = {}) {
@@ -428,13 +421,15 @@ async function sweepWorktrees(options = {}) {
 `
           );
           const archived = await archiveDirtyWorktree(wt.path, agentName);
-          if (archived) {
+          if (archived.ok) {
           } else {
             result.skipped.push({
               repo: repoName,
               worktree: wtName,
               branch: wt.branch,
-              reason: `uncommitted changes (archive failed after ${ageD}d)`
+              // Carry the git error. Without it this read "archive failed" 205
+              // times over and gave an operator nothing to act on (42aa8c56).
+              reason: `uncommitted changes (archive failed after ${ageD}d: ${archived.detail})`
             });
             continue;
           }
@@ -492,14 +487,6 @@ async function sweepWorktrees(options = {}) {
         result.branchesDeleted.push({ repo: repoName, branch: wt.branch, remote: remoteDeleted });
       }
     }
-    if (!dryRun) {
-      const cleared = await clearStashes(repoRoot);
-      if (cleared > 0) {
-        result.stashesCleared += cleared;
-        process.stderr.write(`[worktree-sweep] Cleared ${cleared} stash(es) in ${repoName}
-`);
-      }
-    }
     if (!dryRun) {
       await pruneWorktreeRegistry(repoRoot);
     }

package/dist/{chunk-WUKQVNLP.js → chunk-SEQIPGLU.js}

@@ -2,7 +2,7 @@ import {
   getClient,
   isCoordinatorName,
   loadEmployeesSync
-} from "./chunk-5DCCKHDY.js";
+} from "./chunk-TAMDAOCU.js";
 
 // src/lib/steward-gate.ts
 import crypto from "crypto";

package/dist/{chunk-7WQRFSZI.js → chunk-SL6KQYDU.js}

@@ -1,20 +1,29 @@
 import {
   employeeSessionName,
+  extractRootExe,
+  getDispatchedBy,
   isEmployeeAlive,
+  isProvenIntercomDelivery,
   resolveExeSession,
   sendIntercom,
   strictSessionScopeFilter
-} from "./chunk-XHYHX6F7.js";
+} from "./chunk-AKLQSC6W.js";
+import {
+  isValidSessionScope
+} from "./chunk-BTSWFMEH.js";
 import {
   parseMessage,
   serializeMessage
 } from "./chunk-QAEWWYHL.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-E2WEFZOR.js";
+} from "./chunk-W75GTHR3.js";
+import {
+  getSessionKey
+} from "./chunk-CVYC6DUW.js";
 import {
   getClient
-} from "./chunk-5DCCKHDY.js";
+} from "./chunk-TAMDAOCU.js";
 
 // src/lib/messaging.ts
 import crypto from "crypto";
@@ -45,6 +54,18 @@ function rowToMessage(row) {
   };
 }
 var MAX_RETRIES = 10;
+function resolveSenderSessionScope() {
+  const ambient = resolveExeSession();
+  if (ambient) return ambient;
+  try {
+    const dispatcher = getDispatchedBy(getSessionKey());
+    if (!dispatcher) return null;
+    const scope = extractRootExe(dispatcher) ?? dispatcher;
+    return isValidSessionScope(scope) ? scope : null;
+  } catch {
+    return null;
+  }
+}
 function buildUnreadMessagesCountStatement(targetAgent, sessionScope) {
   const scope = strictSessionScopeFilter(sessionScope);
   return {
@@ -63,7 +84,7 @@ async function sendMessage(input) {
   const id = generateUlid();
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const targetDevice = input.targetDevice ?? "local";
-  const sessionScope = input.sessionScope === void 0 ? resolveExeSession() : input.sessionScope;
+  const sessionScope = input.sessionScope === void 0 ? resolveSenderSessionScope() : input.sessionScope;
   await client.execute({
     sql: `INSERT INTO messages (id, from_agent, from_device, target_agent, target_project, target_device, session_scope, content, priority, status, founder_id, created_at)
           VALUES (?, ?, 'local', ?, ?, ?, ?, ?, ?, 'pending', ?, ?)`,
@@ -176,8 +197,7 @@ async function deliverLocalMessage(messageId) {
     if (intercomResult === "failed") {
       throw new Error(`intercom delivery failed for ${sessionName}`);
     }
-    const DELIVERED_RESULTS = /* @__PURE__ */ new Set(["acknowledged", "delivered"]);
-    if (!DELIVERED_RESULTS.has(intercomResult)) {
+    if (!isProvenIntercomDelivery(intercomResult)) {
       return false;
     }
     await client.execute({