@askexenow/exe-os 0.9.374 → 0.9.376

package/dist/{chunk-GSJLB6JI.js → chunk-7THUQU44.js}

@@ -3,11 +3,12 @@ import {
   markSupportReportSentSync
 } from "./chunk-MMRUBN3I.js";
 import {
+  describeUpstreamFailure,
   isTelemetryRedactionEnabled,
   sanitizeSupportEndpointPath,
   sanitizeUpstreamId,
   sanitizeUpstreamPayload
-} from "./chunk-4QCFFW2H.js";
+} from "./chunk-5QCIWWFA.js";
 
 // src/lib/support-outbox.ts
 import { mkdirSync, readdirSync, readFileSync, writeFileSync, existsSync } from "fs";
@@ -32,7 +33,7 @@ var MAX_BACKOFF_S = 30;
 var sentIds = /* @__PURE__ */ new Set();
 async function loadGoTrueAuthHeader() {
   try {
-    const { getAuthHeader } = await import("./gotrue-session-ODZ2ERJX.js");
+    const { getAuthHeader } = await import("./gotrue-session-U4H3UGHL.js");
     return await getAuthHeader();
   } catch {
     return null;
@@ -409,6 +410,10 @@ ${DUPLICATE_MARKER}: ${dedupeHash}
   }
   return { sent, errors, skipped };
 }
+var PERMANENT_4XX = /* @__PURE__ */ new Set([400, 404, 405, 409, 410, 413, 415, 422]);
+function isDeterministicRejection(status) {
+  return PERMANENT_4XX.has(status);
+}
 async function sendStatusUpdateRecord(record, filePath, licenseKey, licenseToken, adminToken, gotrueAuth) {
   const endpoint = buildStatusUpdateEndpoint(record.endpointPath, adminToken);
   const resp = await fetch(endpoint, {
@@ -429,16 +434,27 @@ async function sendStatusUpdateRecord(record, filePath, licenseKey, licenseToken
   if (resp.ok) {
     writeFileSync(filePath, JSON.stringify({ ...record, sent_at: (/* @__PURE__ */ new Date()).toISOString() }, null, 2), "utf-8");
     onNetworkSuccess();
-    return true;
+    return "sent";
+  }
+  const lastError = await describeUpstreamFailure(resp);
+  if (isDeterministicRejection(resp.status)) {
+    writeFileSync(filePath, JSON.stringify({
+      ...record,
+      attempts: (record.attempts ?? 0) + 1,
+      last_error: lastError,
+      last_attempt_at: (/* @__PURE__ */ new Date()).toISOString(),
+      permanent_rejection: { status: resp.status, error: lastError, rejected_at: (/* @__PURE__ */ new Date()).toISOString() }
+    }, null, 2), "utf-8");
+    return "rejected";
   }
   writeFileSync(filePath, JSON.stringify({
     ...record,
     attempts: (record.attempts ?? 0) + 1,
-    last_error: `HTTP ${resp.status}`,
+    last_error: lastError,
     last_attempt_at: (/* @__PURE__ */ new Date()).toISOString()
   }, null, 2), "utf-8");
   onNetworkFailure();
-  return false;
+  return "failed";
 }
 async function flushStatusUpdates(licenseKey, licenseToken, adminToken, maxPerFlush, gotrueAuth) {
   let sent = 0;
@@ -466,6 +482,10 @@ async function flushStatusUpdates(licenseKey, licenseToken, adminToken, maxPerFl
       skipped++;
       continue;
     }
+    if (record.permanent_rejection) {
+      skipped++;
+      continue;
+    }
     try {
       if (Date.now() - new Date(record.created_at).getTime() > TTL_MS) {
         writeFileSync(filePath, JSON.stringify({
@@ -479,8 +499,9 @@ async function flushStatusUpdates(licenseKey, licenseToken, adminToken, maxPerFl
     } catch {
     }
     try {
-      const ok = await sendStatusUpdateRecord(record, filePath, licenseKey, licenseToken, adminToken, gotrueAuth);
-      if (ok) sent++;
+      const outcome = await sendStatusUpdateRecord(record, filePath, licenseKey, licenseToken, adminToken, gotrueAuth);
+      if (outcome === "sent") sent++;
+      else if (outcome === "rejected") skipped++;
       else errors++;
     } catch (err) {
       try {
@@ -609,10 +630,15 @@ function scanStatusDir(dir) {
     return { total: 0, unsent: 0 };
   }
   let unsent = 0;
+  let rejected = 0;
   let oldest;
   for (const file of files) {
     try {
       const record = JSON.parse(readFileSync(path.join(dir, file), "utf-8"));
+      if (record.permanent_rejection) {
+        rejected++;
+        continue;
+      }
       if (!record.sent_at) {
         unsent++;
         if (record.created_at && (!oldest || record.created_at < oldest)) oldest = record.created_at;
@@ -621,7 +647,7 @@ function scanStatusDir(dir) {
       unsent++;
     }
   }
-  return { total: files.length, unsent, oldest };
+  return { total: files.length, unsent, rejected, oldest };
 }
 
 export {

package/dist/{chunk-HDLAB7W3.js → chunk-7UH2JWBF.js}

@@ -1,6 +1,6 @@
 import {
   redactSecrets
-} from "./chunk-4QCFFW2H.js";
+} from "./chunk-5QCIWWFA.js";
 import {
   EXE_AI_DIR
 } from "./chunk-ZIG7VPJV.js";

package/dist/{chunk-KTCXJWJG.js → chunk-7UNMSF5O.js}

@@ -1,6 +1,6 @@
 import {
   isCoordinatorRole
-} from "./chunk-TAMDAOCU.js";
+} from "./chunk-66CGXQUA.js";
 
 // src/lib/task-router.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-JTVIANUB.js → chunk-AEUGIJDO.js}

@@ -6,7 +6,7 @@ import {
   baseAgentName,
   getEmployee,
   loadEmployeesSync
-} from "./chunk-TAMDAOCU.js";
+} from "./chunk-66CGXQUA.js";
 
 // src/lib/project-name.ts
 import { execSync } from "child_process";
@@ -15,6 +15,8 @@ import path from "path";
 var _cached = null;
 var _cachedCwd = null;
 function getProjectName(cwd) {
+  const override = process.env.EXE_PROJECT_NAME?.trim();
+  if (override) return override;
   if (!cwd) {
     try {
       const ctx = getAgentContext();

package/dist/{chunk-DSJI76XL.js → chunk-AHNVFBVB.js}

@@ -192,7 +192,7 @@ async function quickCheckBackupSourceAfterCopy(reason, backupPath) {
       });
     }
   })();
-  const { recordDbIntegrityEvent } = await import("./db-integrity-events-2DTFO37N.js");
+  const { recordDbIntegrityEvent } = await import("./db-integrity-events-GYGANKZV.js");
   const backupName = path.basename(backupPath);
   const markUnverified = (detail) => {
     process.stderr.write(
@@ -205,7 +205,7 @@ async function quickCheckBackupSourceAfterCopy(reason, backupPath) {
   try {
     const { getClient } = await import("./lib/database.js");
     const client = getClient();
-    const { canTrustIntegrityVerdict } = await import("./fts-integrity-4YB34KWX.js");
+    const { canTrustIntegrityVerdict } = await import("./fts-integrity-PLAL6NMG.js");
     if (!await canTrustIntegrityVerdict(client)) {
       return markUnverified("connection is query_only; an FTS5 verdict from it is not trustworthy");
     }
@@ -313,21 +313,41 @@ async function promoteTmpBackup(tmpBackupPath, backupPath, includeSidecars) {
     if (existsSync(tmpSidecar)) await rename(tmpSidecar, backupPath + suffix);
   }
 }
-async function createEncryptedByteBackup(dbPath, tmpBackupPath, encryptionKey) {
-  const client = createClient({ url: `file:${dbPath}`, encryptionKey });
+async function checkpointWalIntoMainDb(client) {
   try {
+    await client.execute(`PRAGMA busy_timeout = ${PRE_BACKUP_CHECKPOINT_BUSY_TIMEOUT_MS}`);
+  } catch {
+  }
+  const modes = ["TRUNCATE", "TRUNCATE", "TRUNCATE", "FULL"];
+  for (const mode of modes) {
     try {
-      await client.execute(`PRAGMA busy_timeout = ${PRE_BACKUP_CHECKPOINT_BUSY_TIMEOUT_MS}`);
+      const res = await client.execute(`PRAGMA wal_checkpoint(${mode})`);
+      const row = res.rows?.[0];
+      const busy = Number(row?.busy ?? row?.[0] ?? 0);
+      if (busy === 0) return true;
     } catch {
     }
+  }
+  return false;
+}
+async function createEncryptedByteBackup(dbPath, tmpBackupPath, encryptionKey) {
+  let drained = false;
+  const client = createClient({ url: `file:${dbPath}`, encryptionKey });
+  try {
     await client.execute("SELECT 1");
-    try {
-      await client.execute("PRAGMA wal_checkpoint(TRUNCATE)");
-    } catch {
-    }
+    drained = await checkpointWalIntoMainDb(client);
   } finally {
     client.close();
   }
+  let walBytes = 0;
+  try {
+    walBytes = existsSync(dbPath + "-wal") ? statSync(dbPath + "-wal").size : 0;
+  } catch {
+  }
+  if (drained || walBytes === 0) {
+    await copyFile(dbPath, tmpBackupPath);
+    return false;
+  }
   return copyBytePreservingSnapshot(dbPath, tmpBackupPath);
 }
 async function resolveBackupEncryptionKey(dbPath, explicit) {
@@ -343,6 +363,25 @@ async function resolveBackupEncryptionKey(dbPath, explicit) {
   }
   return void 0;
 }
+function shouldQuarantineDirtyWalBackup(input) {
+  if (input.reason === "pre-restore") return false;
+  return input.walBytes > 0 && !input.manifestPresent;
+}
+async function quarantineDirtyWalBackup(backupPath) {
+  const unverifiedPath = `${backupPath}${UNVERIFIED_SUFFIX}`;
+  try {
+    await rename(backupPath, unverifiedPath);
+  } catch {
+    return null;
+  }
+  for (const sfx of ["-wal", "-shm", ".manifest.json"]) {
+    try {
+      await unlink(backupPath + sfx);
+    } catch {
+    }
+  }
+  return unverifiedPath;
+}
 async function createBackup(reason = "manual", opts = {}) {
   return createBackupAsync(reason, opts);
 }
@@ -376,6 +415,15 @@ async function createBackupAsync(reason = "manual", opts = {}) {
       message
     });
     alertMissedBackup(message, skipping);
+    try {
+      const { recordDbIntegrityEvent } = await import("./db-integrity-events-GYGANKZV.js");
+      recordDbIntegrityEvent({
+        kind: "backup-skipped-low-disk",
+        reason,
+        detail: `free=${lowDisk.freeBytes} bytes, required=${lowDisk.requiredBytes} bytes${skipping ? " (skip explicitly authorized)" : ""}`
+      });
+    } catch {
+    }
     if (!skipping) throw new BackupDiskSpaceError(message, { reason, ...lowDisk });
     return null;
   }
@@ -384,6 +432,7 @@ async function createBackupAsync(reason = "manual", opts = {}) {
   const backupPath = path.join(BACKUP_DIR, backupName);
   const tmpBackupPath = `${backupPath}.tmp`;
   void opts.checkpointMode;
+  const preserveForRestore = reason === "pre-restore";
   const encryptionKey = await resolveBackupEncryptionKey(dbPath, opts.encryptionKey);
   let bytePreservingSidecars = false;
   try {
@@ -393,11 +442,11 @@ async function createBackupAsync(reason = "manual", opts = {}) {
       await createOnlineBackup(dbPath, tmpBackupPath);
     }
   } catch (err) {
-    if (reason !== "pre-restore") throw err;
+    if (!preserveForRestore) throw err;
     bytePreservingSidecars = await copyBytePreservingSnapshot(dbPath, tmpBackupPath);
   }
   await promoteTmpBackup(tmpBackupPath, backupPath, bytePreservingSidecars);
-  const sourceStatus = await quickCheckBackupSourceAfterCopy(reason, backupPath);
+  const sourceStatus = preserveForRestore ? null : await quickCheckBackupSourceAfterCopy(reason, backupPath);
   if (sourceStatus === "failed") return null;
   if (sourceStatus === "repaired") {
     if (opts._retriedAfterFtsRepair) {
@@ -414,12 +463,14 @@ async function createBackupAsync(reason = "manual", opts = {}) {
       }
     }
   }
+  let manifestWritten = false;
   try {
-    const { manifestWriteEnabled, writeBackupManifest } = await import("./backup-verify-ZKTUYLTA.js");
+    const { manifestWriteEnabled, writeBackupManifest, manifestPathFor } = await import("./backup-verify-LWHKGOOV.js");
     if (manifestWriteEnabled()) {
-      const manifest = await writeBackupManifest(backupPath, dbName);
+      const manifest = await writeBackupManifest(backupPath, dbName, { keyHex: encryptionKey });
+      manifestWritten = manifest !== null && existsSync(manifestPathFor(backupPath));
       if (manifest && sourceStatus === "unverified") {
-        const { recordDbIntegrityEvent } = await import("./db-integrity-events-2DTFO37N.js");
+        const { recordDbIntegrityEvent } = await import("./db-integrity-events-GYGANKZV.js");
         recordDbIntegrityEvent({
           kind: "backup-verified",
           reason,
@@ -427,9 +478,36 @@ async function createBackupAsync(reason = "manual", opts = {}) {
           detail: "proven readable by manifest read-back (source pragma unavailable)"
         });
       }
+    } else {
+      manifestWritten = true;
     }
   } catch {
   }
+  {
+    let walBytes = 0;
+    try {
+      walBytes = existsSync(backupPath + "-wal") ? statSync(backupPath + "-wal").size : 0;
+    } catch {
+    }
+    if (shouldQuarantineDirtyWalBackup({ walBytes, manifestPresent: manifestWritten, reason })) {
+      const quarantined = await quarantineDirtyWalBackup(backupPath);
+      try {
+        const { recordDbIntegrityEvent } = await import("./db-integrity-events-GYGANKZV.js");
+        recordDbIntegrityEvent({
+          kind: "backup-failed",
+          reason,
+          backup: path.basename(backupPath),
+          detail: `dirty-WAL backup could not be manifested (wal=${walBytes} bytes) \u2014 unverifiable image ${quarantined ? "quarantined" : "quarantine-rename FAILED; remove manually"}`
+        });
+      } catch {
+      }
+      process.stderr.write(
+        `[db-backup] ERROR: backup (${reason}) left a ${walBytes}-byte WAL with no manifest \u2014 unverifiable image. ` + (quarantined ? `Quarantined as ${path.basename(quarantined)}.` : `Quarantine rename FAILED \u2014 remove ${path.basename(backupPath)} manually.`) + ` This file is NOT a valid backup.
+`
+      );
+      if (reason !== "pre-restore") return null;
+    }
+  }
   if (!opts.skipRetention) {
     try {
       enforceRetention(reason);
@@ -582,7 +660,7 @@ function recordMissedBackup(entry) {
 function alertMissedBackup(message, skipped) {
   void (async () => {
     try {
-      const { pushNotifyAsync } = await import("./push-notifications-NCZLH6DI.js");
+      const { pushNotifyAsync } = await import("./push-notifications-EY6BXZUY.js");
       pushNotifyAsync({
         event: "backup_failed",
         title: skipped ? "Backup SKIPPED \u2014 disk full" : "Backup FAILED \u2014 disk full",
@@ -847,9 +925,23 @@ function hasRecentBackup(reason, withinMs, deps = REAL_RECENT_BACKUP_DEPS) {
 function shouldMakePreRestartBackup(existingBackupMtimesMs, now, windowMs = preRestartDedupWindowMs()) {
   return !existingBackupMtimesMs.some((mtime) => now - mtime <= windowMs);
 }
+function isUnverifiableDirtyWalBackup(backupPath) {
+  try {
+    const wal = backupPath + "-wal";
+    if (!existsSync(wal)) return false;
+    if (statSync(wal).size <= 0) return false;
+    return !existsSync(backupPath + ".manifest.json");
+  } catch {
+    return false;
+  }
+}
 function getLatestBackup() {
   const backups = listBackups();
-  return backups.length > 0 ? backups[0].path : null;
+  for (const b of backups) {
+    if (isUnverifiableDirtyWalBackup(b.path)) continue;
+    return b.path;
+  }
+  return null;
 }
 async function restoreBackup(backupPath) {
   const dbPath = findActiveDb();
@@ -857,11 +949,13 @@ async function restoreBackup(backupPath) {
     const target = path.join(EXE_AI_DIR, DB_NAMES[0]);
     const source2 = backupPath ?? getLatestBackup();
     if (!source2 || !existsSync(source2)) return null;
+    if (isUnverifiableDirtyWalBackup(source2)) return null;
     await copyFile(source2, target);
     return { restored: path.basename(source2), preRestoreBackup: null };
   }
   const source = backupPath ?? getLatestBackup();
   if (!source || !existsSync(source)) return null;
+  if (isUnverifiableDirtyWalBackup(source)) return null;
   if (path.resolve(source) === path.resolve(dbPath)) return null;
   await quickCheckBackupSource(source);
   const preRestoreBackup = await createBackup("pre-restore");
@@ -910,6 +1004,8 @@ export {
   resolveQuickCheckRoute,
   resolveCheckpointWorkerPath,
   preBackupCheckpoint,
+  shouldQuarantineDirtyWalBackup,
+  quarantineDirtyWalBackup,
   createBackup,
   createBackupAsync,
   rotateBackups,
@@ -941,6 +1037,7 @@ export {
   preRestartDedupWindowMs,
   hasRecentBackup,
   shouldMakePreRestartBackup,
+  isUnverifiableDirtyWalBackup,
   getLatestBackup,
   restoreBackup,
   getBackupDir

package/dist/{chunk-IBS2FAI4.js → chunk-AUKRBHHZ.js}

@@ -11,7 +11,10 @@ async function run(cmd, args, cwd, timeoutMs = REMOTE_TIMEOUT_MS) {
     cwd,
     encoding: "utf8",
     timeout: timeoutMs,
-    maxBuffer: 16 * 1024 * 1024
+    maxBuffer: 16 * 1024 * 1024,
+    // GIT_TERMINAL_PROMPT=0: fail fast (or hit timeoutMs) instead of hanging
+    // on an interactive credential prompt — this runs in headless contexts.
+    env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
   });
   return stdout;
 }

package/dist/{chunk-AKLJ4JH3.js → chunk-BBK2TSK3.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-WCGNCH3Q.js";
 import {
   registerAllTools
-} from "./chunk-DIXXEE3S.js";
+} from "./chunk-BQXYXJYC.js";
 
 // src/mcp/mcp-surface-hash.ts
 function computeMcpSurfaceHash() {

package/dist/{chunk-ZL4AGWAH.js → chunk-BNWWVYRN.js}

@@ -4,7 +4,7 @@ import {
   supportProductSchema,
   supportTaskIdSchema,
   supportVersionSchema
-} from "./chunk-5H47VHB7.js";
+} from "./chunk-UWX6MMCX.js";
 import {
   assessAttribution,
   assessDisposition,
@@ -14,17 +14,17 @@ import {
 } from "./chunk-4YNA3CM6.js";
 import {
   getActiveAgent
-} from "./chunk-55BEFF4V.js";
+} from "./chunk-5DF4Y6EC.js";
 import {
   SUPPORT_PRODUCTS,
   sanitizeProductFilter,
   sanitizeUpstreamId,
   sanitizedUpstreamBody
-} from "./chunk-4QCFFW2H.js";
+} from "./chunk-5QCIWWFA.js";
 import {
   loadLicense,
   readCachedLicenseToken
-} from "./chunk-L6RXG36J.js";
+} from "./chunk-Y2HD2YB7.js";
 
 // src/mcp/tools/support-inbox.ts
 import { z as z2 } from "zod";
@@ -435,7 +435,7 @@ async function commentRequestJson(bugId, init) {
   const ownerHeaders = ownerAuthHeaders();
   if (!ownerHeaders.authorization && !ownerHeaders["x-exe-license-token"]) {
     throw new Error(
-      "Not authenticated for support comments. Run `exe-os login` (GoTrue) or set a license key, or configure an AskExe admin token (ASKEXE_SUPPORT_ADMIN_TOKEN)."
+      "Not authenticated for support comments. Set a license key (`exe-os setup`), or store a support-issued token with `exe-os login --token <jwt>`, or configure an AskExe admin token (ASKEXE_SUPPORT_ADMIN_TOKEN)."
     );
   }
   const safeId = encodeURIComponent(sanitizeUpstreamId(bugId));
@@ -765,6 +765,7 @@ function registerTriageReview(server) {
 
 export {
   resolveAttribution,
+  isVerifiedStatus,
   verificationArtifactInputSchema,
   assertVerdictAttribution,
   resolveVerificationArtifact,

package/dist/{chunk-PY3FOMRN.js → chunk-BQEZPRUC.js}

@@ -79,7 +79,7 @@ var PLATFORM_PROCEDURES = [
     title: "Dispatch Ladder \u2014 named subagents first; tmux employees are legacy",
     domain: "workflow",
     priority: "p0",
-    content: "Three rungs \u2014 stop at the first that fits. (1) Do it yourself: trivial, in-scope work in main context. (2) Named/native subagents (Claude Code Agent tool + worktree isolation; Codex spawned agents; OpenCode sessions) \u2014 the DEFAULT for delegation AND parallelism: roster-employee work via named identity dispatch, bounded well-specified work, parallel research, isolated worktree fixes, verbose throwaway exploration. Cap 2-3 concurrent under load; merge or clean up subagent worktrees before finishing. MANDATORY: persist subagent results/lessons into the task record + memory BEFORE completing \u2014 subagent output must never die in a context window. (3) create_task -> tmux employee \u2014 LEGACY, reserved for work that must outlive the orchestrator's session or cross coordinator sessions/projects; gets no new investment. When used, create_task remains the only tmux dispatch path \u2014 no manual spawns, no send_message for actionable work."
+    content: "Three rungs \u2014 stop at the first that fits. (1) Do it yourself: trivial, in-scope work in main context. (2) Named/native subagents (Claude Code Agent tool + worktree isolation; Codex spawned agents; OpenCode sessions) \u2014 the DEFAULT for delegation AND parallelism: roster-employee work via named identity dispatch, bounded well-specified work, parallel research, isolated worktree fixes, verbose throwaway exploration. Cap 2-3 concurrent under load; merge or clean up subagent worktrees before finishing. MANDATORY: persist subagent results/lessons into the task record + memory BEFORE completing \u2014 subagent output must never die in a context window. Tasks created with task(action='create') are durable checklist items by default and never launch compute. (3) task(action='create', execution_mode='durable_tmux') -> tmux employee \u2014 LEGACY, reserved for work that must outlive the orchestrator's session or cross coordinator sessions/projects; gets no new investment. When used, the explicit durable_tmux mode remains the only tmux dispatch path \u2014 no manual spawns, no send_message for actionable work."
   },
   {
     title: "Subagent guardrails \u2014 fence scope, isolate Codex, never stash",
@@ -91,7 +91,7 @@ var PLATFORM_PROCEDURES = [
     title: "Right-size the model \u2014 match model cost to task difficulty",
     domain: "workflow",
     priority: "p1",
-    content: "Tokens are money \u2014 pick the model per task. Mechanical/bounded work (renames, config edits, boilerplate, well-specified fixes) -> cheaper model and/or lower reasoning effort. Adversarial verification, hard design, security review, debugging unknowns -> strong model; never verify a strong model's work with a weaker one. Set per agent via set_agent_config, per task via create_task spawn_model/spawn_runtime. Audit spend with config(action='agent_spend')."
+    content: "Tokens are money \u2014 pick the model per task. Mechanical/bounded work (renames, config edits, boilerplate, well-specified fixes) -> cheaper model and/or lower reasoning effort. Adversarial verification, hard design, security review, debugging unknowns -> strong model; never verify a strong model's work with a weaker one. Set per agent via set_agent_config; legacy durable tmux dispatch may override spawn_model/spawn_runtime only with execution_mode='durable_tmux'. Audit spend with config(action='agent_spend')."
   },
   {
     title: "Fetch and scope-check before dispatching fix work",
@@ -276,7 +276,7 @@ var PLATFORM_PROCEDURES = [
     title: "Task lifecycle \u2014 the golden path every agent follows",
     domain: "workflow",
     priority: "p0",
-    content: "For rung-3 work (tmux employees \u2014 see the Dispatch Ladder), create_task is dispatch + delivery. Task lifecycle: open -> in_progress (you start) -> done (update_task when finished) -> needs_review (reviewer nudged) -> closed (COO only via close_task). DB is the reliable delivery \u2014 intercom is just a speedup nudge. If you finish a task, self-chain: check for next task immediately (step 7). Never wait for a nudge. Never say 'standing by.'"
+    content: "Tasks are durable, session-scoped checklist/notepad records by default; native subagent execution is orchestrated separately in the current context. For rung-3 legacy work (tmux employees \u2014 see the Dispatch Ladder), execution_mode='durable_tmux' is explicit dispatch + delivery. Task lifecycle: open -> in_progress (you start) -> done (update_task when finished) -> needs_review (reviewer nudged) -> closed (COO only via close_task). DB is the reliable delivery \u2014 intercom is just a speedup nudge. If you finish a task, self-chain: check for next task immediately (step 7). Never wait for a nudge. Never say 'standing by.'"
   },
   {
     title: "Review chain \u2014 managers must actively pull completed work, never wait for nudges",
@@ -360,7 +360,7 @@ var PLATFORM_REFERENCE_PROCEDURES = [
     title: "MCP tool reference \u2014 all domains and key actions",
     domain: "tool-use",
     priority: "p1",
-    content: "exe-os MCP uses action-based dispatch (19 consolidated tools). Legacy 108-tool surface via EXE_MCP_TOOL_SURFACE=legacy. MEMORY: recall (search, as_of for bi-temporal, kind filter, retrieval_mode: all|decisions_only|procedures_only|operational|recent_high_value|document_aware) | ask_team | store (kind, procedure_for) | commit (high-importance) | search_everything | session_context | get_by_id | consolidate | cardinality | supersede. DECISION: store (domain, decision, rationale) | get (domain or query). TASK: create (title, assigned_to, context; blocked_by, parent_task_id, reviewer, complexity, budget_tokens, spawn_runtime, spawn_model) | list | get | update (in_progress/done/blocked/cancelled + assertions) | close (COO only) | checkpoint | resume. GRAPH: query_relationships | entity_neighbors | hot_entities | stats | export | merge_entities | similar_trajectories. IDENTITY: get | update. BEHAVIOR: store | list | deactivate. SUPPORT: create_bug (title, description, severity p0-p3, product param for any AskExe product) | create_feature (title, description, use_case, proposed_solution) | list_my_bugs | list_my_features | triage_bug (AskExe-internal, uses triage_notes NOT notes) | health. MESSAGE: send | acknowledge. REMINDER: create | list | complete. SESSION: events | last_response. WIKI: list | get. DOCUMENT: ingest | list | purge | set_importance | rerank. CRM: list_people | get_person | list_tables | describe_table. RAW_DATA: list_sources | query | get. GATEWAY: send_whatsapp | query_conversations | query_company_brain. CONFIG: list_employees | set_agent_config | agent_spend | daemon_health | license_status | cloud_sync (cloud_action: status|sync|reupload) | memory_audit | run_consolidation | restart_telemetry | worker_gate | auto_wake_status | orchestration_phase | company_procedure (store|list|deactivate) | global_procedure | create_trigger | list_triggers | export_orchestration | import_orchestration | closeout | capability_cards (query param for best-agent match). DIAGNOSTICS: healthcheck | doctor | status_brief | check_update | stack_update_check | cloud_status | pending_work_summary | rename_employee | tool_search | drift. DREAMING: run | status | history. MCP_PING: daemon health + license + tool usage + retrieval health. Unsure an MCP path exists? diagnostics(action='tool_search', query='...') finds it before punting to the terminal. cloud_sync(cloud_action='reupload') is destructive \u2014 requires confirm_local_db_source_of_truth='LOCAL DB IS SOURCE OF TRUTH'."
+    content: "exe-os MCP uses action-based dispatch (19 consolidated tools). Legacy 108-tool surface via EXE_MCP_TOOL_SURFACE=legacy. MEMORY: recall (search, as_of for bi-temporal, kind filter, retrieval_mode: all|decisions_only|procedures_only|operational|recent_high_value|document_aware) | ask_team | store (kind, procedure_for) | commit (high-importance) | search_everything | session_context | get_by_id | consolidate | cardinality | supersede. DECISION: store (domain, decision, rationale) | get (domain or query). TASK: create (title, assigned_to, context; defaults to checklist with zero execution side effects; blocked_by, parent_task_id, reviewer, complexity, budget_tokens, group_id, work_ref; execution_mode='durable_tmux' is the explicit legacy dispatch opt-in and enables spawn_runtime/spawn_model) | list | get | update (in_progress/done/blocked/cancelled + assertions) | close (COO only) | checkpoint | resume. GRAPH: query_relationships | entity_neighbors | hot_entities | stats | export | merge_entities | similar_trajectories. IDENTITY: get | update. BEHAVIOR: store | list | deactivate. SUPPORT: create_bug (title, description, severity p0-p3, product param for any AskExe product) | create_feature (title, description, use_case, proposed_solution) | list_my_bugs | list_my_features | triage_bug (AskExe-internal, uses triage_notes NOT notes) | health. MESSAGE: send | acknowledge. REMINDER: create | list | complete. SESSION: events | last_response. WIKI: list | get. DOCUMENT: ingest | list | purge | set_importance | rerank. CRM: list_people | get_person | list_tables | describe_table. RAW_DATA: list_sources | query | get. GATEWAY: send_whatsapp | query_conversations | query_company_brain. CONFIG: list_employees | set_agent_config | agent_spend | daemon_health | license_status | cloud_sync (cloud_action: status|sync|reupload) | memory_audit | run_consolidation | restart_telemetry | worker_gate | auto_wake_status | orchestration_phase | company_procedure (store|list|deactivate) | global_procedure | create_trigger | list_triggers | export_orchestration | import_orchestration | closeout | capability_cards (query param for best-agent match). DIAGNOSTICS: healthcheck | doctor | status_brief | check_update | stack_update_check | cloud_status | pending_work_summary | rename_employee | tool_search | drift. DREAMING: run | status | history. MCP_PING: daemon health + license + tool usage + retrieval health. Unsure an MCP path exists? diagnostics(action='tool_search', query='...') finds it before punting to the terminal. cloud_sync(cloud_action='reupload') is destructive \u2014 requires confirm_local_db_source_of_truth='LOCAL DB IS SOURCE OF TRUTH'."
   },
   {
     title: "Cognition features \u2014 dreaming, reflexes, baselines, hot-path summary",