@askexenow/exe-os 0.9.382 → 0.9.384

package/dist/{chunk-3KFQCFQB.js → chunk-LR5O2XWZ.js}

@@ -1,24 +1,24 @@
 import {
   recordSessionKill
-} from "./chunk-GGEKMY6G.js";
+} from "./chunk-P3UX5EH4.js";
 import {
   sessionScopeFilter,
   verifyPaneAtCapacity,
   writeNotification
-} from "./chunk-ZVBVPX4W.js";
+} from "./chunk-7UHZBVP3.js";
 import {
   listSessions
-} from "./chunk-NPGV4MZ3.js";
+} from "./chunk-ALRHGEAJ.js";
 import {
   getTransport
 } from "./chunk-VI4ATC6I.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-VUOAPKPI.js";
+} from "./chunk-LSNBTGW4.js";
 import {
   getClient,
   isCoordinatorName
-} from "./chunk-AY2U4NZ5.js";
+} from "./chunk-GL47M7NY.js";
 
 // src/lib/capacity-monitor.ts
 var CAPACITY_PATTERNS = [

package/dist/{chunk-VUOAPKPI.js → chunk-LSNBTGW4.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-AY2U4NZ5.js";
+} from "./chunk-GL47M7NY.js";
 
 // src/lib/orchestration-events.ts
 import crypto from "crypto";

package/dist/{chunk-P5U3GAWU.js → chunk-MB47DRF5.js}

@@ -1,10 +1,10 @@
 import {
   getCurrentSessionScope,
   strictSessionScopeFilter
-} from "./chunk-ZVBVPX4W.js";
+} from "./chunk-7UHZBVP3.js";
 import {
   getProjectName
-} from "./chunk-22LNFCDF.js";
+} from "./chunk-UX2EO653.js";
 
 // src/lib/session-events.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-HZESME3B.js → chunk-MC4IM2CC.js}

@@ -1,15 +1,16 @@
 import {
   checkCpuStealSync
 } from "./chunk-SSC7EKY2.js";
-import {
-  inventoryLocalSecretResidue
-} from "./chunk-7UH2JWBF.js";
 import {
   computeDegradations
-} from "./chunk-RTZZBWQC.js";
+} from "./chunk-MPZ2AVNS.js";
+import {
+  inventoryLocalSecretResidue,
+  redactResiduePathForDisplay
+} from "./chunk-AZSTIAVL.js";
 import {
   NO_DB_INTEGRITY_EVENTS
-} from "./chunk-RFPMXR6B.js";
+} from "./chunk-U4GMOT4M.js";
 import {
   CC_NATIVE_ONLY_CUTOFF,
   compareSemver,
@@ -23,16 +24,19 @@ import {
 import {
   readMcpHttpEvents,
   summarizeMcpTransport
-} from "./chunk-FNEZ4BWT.js";
+} from "./chunk-FEU6QEEL.js";
 import {
   mcpHttpPort
-} from "./chunk-L5YDAFUH.js";
+} from "./chunk-CYCIX7AW.js";
 import {
   redactSecrets
-} from "./chunk-5QCIWWFA.js";
+} from "./chunk-ELEGH4DX.js";
+import {
+  isWithin
+} from "./chunk-YRUZK2QA.js";
 import {
   inspectKeyCustodySync
-} from "./chunk-AVMLC2MR.js";
+} from "./chunk-5U2IJBFV.js";
 import {
   checkSingleGotrueInstance
 } from "./chunk-FTZET5YX.js";
@@ -41,7 +45,7 @@ import {
 } from "./chunk-A7JYF4RG.js";
 import {
   EXE_AI_DIR
-} from "./chunk-ZIG7VPJV.js";
+} from "./chunk-MMS2HBRT.js";
 
 // src/bin/exe-healthcheck.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2, readdirSync } from "fs";
@@ -697,9 +701,8 @@ function checkRetrievalHealth() {
       const raw = JSON.parse(readFileSync2(ledgerPath, "utf8"));
       if (Array.isArray(raw) && raw.length > 0) {
         const now = Date.now();
-        const dayAgo = now - 24 * 60 * 60 * 1e3;
         const recentEvents = raw.filter(
-          (e) => e.at && new Date(e.at).getTime() > dayAgo
+          (e) => e.at != null && isWithin(e.at, 24 * 60 * 60 * 1e3, now)
         );
         const last = raw[raw.length - 1];
         if (recentEvents.length > 0) {
@@ -745,7 +748,7 @@ function checkLocalSecretResidue() {
   if (inventory.residues.length === 0) {
     return [{ name: "security/local-secret-residue", pass: true, detail: "No plaintext recovery/key export residue detected" }];
   }
-  const shown = inventory.residues.slice(0, 3).map((r) => `${r.kind}: ${r.path}`).join("; ");
+  const shown = inventory.residues.slice(0, 3).map((r) => `${r.kind}: ${redactResiduePathForDisplay(r.path)}`).join("; ");
   return [{
     name: "security/local-secret-residue",
     pass: false,

package/dist/{chunk-ZKJ5S23O.js → chunk-MFAOAIUE.js}

@@ -1,26 +1,29 @@
 import {
   ensureDaemonToken,
   readDaemonToken
-} from "./chunk-GPUOUUHA.js";
+} from "./chunk-PCV52RYM.js";
 import {
   SUPERVISED_ENV
-} from "./chunk-ZG62LIK3.js";
-import {
-  sanitizeDaemonKeyCustodyEnv
-} from "./chunk-IMYGYIAI.js";
+} from "./chunk-CIPDQRFO.js";
 import {
   computeDaemonHeapCapMb
 } from "./chunk-NLEW62VC.js";
+import {
+  sanitizeDaemonKeyCustodyEnv
+} from "./chunk-IMYGYIAI.js";
 import {
   killIfSameProcess,
   processStartedAt,
   sameProcessIdentity
-} from "./chunk-GPJIBLP4.js";
+} from "./chunk-3DAEZILW.js";
 import {
   KILL_INTENT_LOOKBACK_MS,
   findRecentKillIntent,
   recordKillIntent
-} from "./chunk-V3WLC5TJ.js";
+} from "./chunk-DRTJCG6B.js";
+import {
+  parseInstant
+} from "./chunk-YRUZK2QA.js";
 import {
   SYSTEMD_DAEMON_UNIT,
   SYSTEMD_WATCHDOG_UNIT,
@@ -32,7 +35,7 @@ import {
 import {
   EXE_AI_DIR,
   resolveDataDir
-} from "./chunk-ZIG7VPJV.js";
+} from "./chunk-MMS2HBRT.js";
 
 // src/lib/exe-daemon-client.ts
 import net from "net";
@@ -261,7 +264,7 @@ function consumeRestartIntentDetail(preserveFor) {
     if (parsed.intent && preserveFor) {
       try {
         const marker = JSON.parse(raw);
-        if (marker.targetPid === preserveFor.pid && (typeof marker.targetStartedAt === "number" ? typeof preserveFor.startedAt === "number" && sameProcessIdentity(marker.targetStartedAt, preserveFor.startedAt) : typeof marker.createdAt === "string" && typeof preserveFor.startedAt === "number" && Date.parse(marker.createdAt) >= preserveFor.startedAt)) {
+        if (marker.targetPid === preserveFor.pid && (typeof marker.targetStartedAt === "number" ? typeof preserveFor.startedAt === "number" && sameProcessIdentity(marker.targetStartedAt, preserveFor.startedAt) : typeof marker.createdAt === "string" && typeof preserveFor.startedAt === "number" && (parseInstant(marker.createdAt) ?? Infinity) >= preserveFor.startedAt)) {
           return { intent: false, reason: null };
         }
       } catch {

package/dist/{chunk-62J64CHO.js → chunk-MKM6D7JM.js}

@@ -2,15 +2,21 @@ import {
   BUSY_PATTERN,
   sendIntercom,
   updateTaskStatus
-} from "./chunk-ZVBVPX4W.js";
+} from "./chunk-7UHZBVP3.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-VUOAPKPI.js";
+} from "./chunk-LSNBTGW4.js";
+import {
+  hasPassed
+} from "./chunk-YRUZK2QA.js";
 import {
   baseAgentName,
   getCoordinatorName,
   isCoordinatorName
-} from "./chunk-AY2U4NZ5.js";
+} from "./chunk-GL47M7NY.js";
+import {
+  isAutonomousTmuxSpawnEnabled
+} from "./chunk-MMS2HBRT.js";
 
 // src/lib/play-mode.ts
 import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
@@ -74,7 +80,7 @@ function getPlayMode(agentId, sessionScope) {
   const store = readStore();
   const entry = store[key];
   if (!entry) return null;
-  if (new Date(entry.expiresAt).getTime() <= Date.now()) {
+  if (hasPassed(entry.expiresAt, Date.now())) {
     delete store[key];
     try {
       writeStore(store);
@@ -99,7 +105,7 @@ function listExploreSessions() {
     const active = [];
     let pruned = false;
     for (const [key, entry] of Object.entries(store)) {
-      if (new Date(entry.expiresAt).getTime() <= now) {
+      if (hasPassed(entry.expiresAt, now)) {
         delete store[key];
         pruned = true;
       } else {
@@ -332,7 +338,7 @@ async function surfaceStaleDispatchPendingSignals(scopeList, now, thresholdMs =
     const sessionScope = signalScope ?? (scopeList.length === 1 ? scopeList[0] : null);
     if (allowedScopes.size > 0 && sessionScope && !allowedScopes.has(sessionScope)) continue;
     try {
-      const { writeNotification } = await import("./notifications-LPRCFJYY.js");
+      const { writeNotification } = await import("./notifications-JE3PX55X.js");
       await writeNotification({
         agentId: getCoordinatorName(),
         agentRole: "COO",
@@ -457,6 +463,7 @@ async function findStuckTasks(client, scopeList, now, thresholdMs = STUCK_TASK_T
 async function runTaskEnforcementTick(deps) {
   const { transport, employees, client } = deps;
   const now = deps.now ?? Date.now();
+  const autonomousSpawnAllowed = (deps.autonomousTmuxSpawnEnabled ?? isAutonomousTmuxSpawnEnabled)();
   const tickStartedAt = Date.now();
   const sessions = transport.listSessions();
   let processedAnyEmployee = false;
@@ -603,7 +610,12 @@ async function runTaskEnforcementTick(deps) {
           paneIdle = isWorkerPaneIdle(pane);
           const workerNudgeEcho = isNudgeEcho(pane);
           const paneCurrentlyIdle = isCurrentlyIdle(pane);
-          if (isMcpZombiePane(pane, paneCurrentlyIdle) && deps.zombieWorkerRecover) {
+          if (isMcpZombiePane(pane, paneCurrentlyIdle) && deps.zombieWorkerRecover && !autonomousSpawnAllowed) {
+            process.stderr.write(
+              `[exed] MCP zombie recovery SUPPRESSED for ${session}: autonomous tmux spawning is disabled (allowAutonomousTmuxSpawn=false) \u2014 not killing a session we are not allowed to respawn
+`
+            );
+          } else if (isMcpZombiePane(pane, paneCurrentlyIdle) && deps.zombieWorkerRecover) {
             const reason2 = "pane shows dead MCP client";
             await deps.zombieWorkerRecover(session, agentName, coordinatorSession ?? "", reason2);
             writeAuditEntry({
@@ -770,6 +782,13 @@ async function runTaskEnforcementTick(deps) {
           continue;
         }
         if (!deps.reviewerSpawn) continue;
+        if (!autonomousSpawnAllowed) {
+          process.stderr.write(
+            `[exed] Reviewer auto-spawn SUPPRESSED for ${reviewerName} in ${sessionScope}: autonomous tmux spawning is disabled (allowAutonomousTmuxSpawn=false) \u2014 ${group.ids.length} review(s) stay queued
+`
+          );
+          continue;
+        }
         try {
           const result = deps.reviewerSpawn(reviewerName, sessionScope);
           if (!result) continue;

package/dist/{chunk-ZIG7VPJV.js → chunk-MMS2HBRT.js}

@@ -1,12 +1,12 @@
+import {
+  assertHermeticPath
+} from "./chunk-RH4AH3YB.js";
 import {
   atomicWrite,
   atomicWriteJson,
   atomicWriteJsonSync,
   ensurePrivateDir
 } from "./chunk-HSGBZSCA.js";
-import {
-  assertHermeticPath
-} from "./chunk-RH4AH3YB.js";
 import {
   currentKeyDirContext,
   refusedQuarantineDir,
@@ -152,6 +152,10 @@ var DEFAULT_CONFIG = {
   flushIntervalMs: 1e4,
   autoIngestion: true,
   autoRetrieval: true,
+  // Bug 05033d35: autonomous tmux spawning stays available for tasks that
+  // explicitly opted into the legacy durable_tmux lane, but is a single flip
+  // away from off for installs that dispatch only via native subagents.
+  allowAutonomousTmuxSpawn: true,
   // OFF. A Partner silently copying every document it reads is a surprise even
   // when the bytes are encrypted under the member's own key and stored against
   // their own allowance. Opt-in, always.
@@ -515,6 +519,13 @@ async function loadConfigFrom(configPath) {
     return { ...DEFAULT_CONFIG };
   }
 }
+function isAutonomousTmuxSpawnEnabled() {
+  try {
+    return loadConfigSync().allowAutonomousTmuxSpawn !== false;
+  } catch {
+    return true;
+  }
+}
 function getThemePreference() {
   return loadConfigSync().appearance.theme;
 }
@@ -547,6 +558,7 @@ export {
   loadConfigSync,
   saveConfig,
   loadConfigFrom,
+  isAutonomousTmuxSpawnEnabled,
   getThemePreference,
   setThemePreference
 };

package/dist/{chunk-FHSV4BSW.js → chunk-MOANZQXF.js}

@@ -1,17 +1,25 @@
 import {
   canonicalizeStackManifest
-} from "./chunk-NY74W3S4.js";
+} from "./chunk-ZBPZDADW.js";
 
 // src/lib/stack-manifest-write.ts
-import { readFileSync, writeFileSync } from "fs";
+import { readFileSync, statSync, writeFileSync } from "fs";
 import { createPrivateKey, createSign, sign as cryptoSign } from "crypto";
+var SIGNING_KEY_FILE_GROUP_OTHER_MASK = 63;
 function loadStackSigningKey(env = process.env) {
   const keyId = env.EXE_STACK_SIGNING_KEY_ID || "exe-stack-1";
   if (env.EXE_STACK_SIGNING_KEY) {
     return { key: createPrivateKey(env.EXE_STACK_SIGNING_KEY), keyId };
   }
-  if (env.EXE_STACK_SIGNING_KEY_FILE) {
-    return { key: createPrivateKey(readFileSync(env.EXE_STACK_SIGNING_KEY_FILE, "utf8")), keyId };
+  const file = env.EXE_STACK_SIGNING_KEY_FILE;
+  if (file) {
+    const perms = statSync(file).mode & 4095;
+    if ((perms & SIGNING_KEY_FILE_GROUP_OTHER_MASK) !== 0) {
+      throw new Error(
+        `stack signing key file ${file} has mode ${perms.toString(8).padStart(4, "0")} \u2014 readable or writable beyond its owner. Refusing to sign with an already-exposed private key (bug b597e4fc). Fix: chmod 600 ${file} \u2014 better, pass the PEM in EXE_STACK_SIGNING_KEY so it never touches the filesystem at all.`
+      );
+    }
+    return { key: createPrivateKey(readFileSync(file, "utf8")), keyId };
   }
   return null;
 }

package/dist/{chunk-RTZZBWQC.js → chunk-MPZ2AVNS.js}

@@ -1,16 +1,19 @@
 import {
   NO_DB_INTEGRITY_EVENTS
-} from "./chunk-RFPMXR6B.js";
+} from "./chunk-U4GMOT4M.js";
 import {
   resolveAnthropicAuth
 } from "./chunk-VGMACSEV.js";
 
 // src/lib/retrieval-health.ts
 import os from "os";
+function postCaptureReverifyEnabled() {
+  return /^(1|true|yes|on)$/i.test(process.env.EXE_BACKUP_VERIFY_DAILY ?? "0");
+}
 async function getRetrievalHealth() {
   let embedDaemon = "unavailable";
   try {
-    const { isDaemonAlive } = await import("./mcp-health-B5EKRCZG.js");
+    const { isDaemonAlive } = await import("./mcp-health-4ZHU67LM.js");
     const { alive } = isDaemonAlive();
     if (alive) {
       try {
@@ -82,7 +85,7 @@ async function getRetrievalHealth() {
     totalMemories = Number(totalRes.rows[0]?.cnt ?? 0);
     memoriesWithVectors = Number(vectorRes.rows[0]?.cnt ?? 0);
     try {
-      const { getGraphStats } = await import("./graph-query-36K6VXFF.js");
+      const { getGraphStats } = await import("./graph-query-JDZWAVCU.js");
       const stats = await getGraphStats(client);
       entities = stats.entities;
       relationships = stats.relationships;
@@ -94,13 +97,13 @@ async function getRetrievalHealth() {
   const coveragePct = totalMemories > 0 ? Math.round(memoriesWithVectors / totalMemories * 100) : null;
   let dbRestore = { hasEvents: false, count: 0, last: null, quarantineFiles: 0 };
   try {
-    const { getDbRestoreHealth } = await import("./db-restore-events-G6NOQOVE.js");
+    const { getDbRestoreHealth } = await import("./db-restore-events-XYL6CGPC.js");
     dbRestore = getDbRestoreHealth();
   } catch {
   }
   let dbIntegrity = NO_INTEGRITY_EVENTS;
   try {
-    const { getDbIntegrityHealth } = await import("./db-integrity-events-GYGANKZV.js");
+    const { getDbIntegrityHealth } = await import("./db-integrity-events-7NKWS5MT.js");
     dbIntegrity = getDbIntegrityHealth();
   } catch {
   }
@@ -208,6 +211,14 @@ function computeDegradations(h) {
       remediation: "Do NOT trust recent backups. Run `exe-os doctor` to confirm, and restore from the newest backup that carries a `backup-verified` ledger entry."
     });
   }
+  if (gi.lastProvenBackupOnDisk && !postCaptureReverifyEnabled()) {
+    out.push({
+      code: "backup_reverify_off",
+      severity: "info",
+      message: `Backups are proven readable at CAPTURE (the copy is opened and counted), but are not re-checked afterwards \u2014 ${gi.lastProvenBackupOnDisk.backup ?? "the last proven backup"} has not been re-read since ${gi.lastProvenBackupOnDisk.at}`,
+      remediation: "Set EXE_BACKUP_VERIFY_DAILY=1 to re-open and integrity-scan the daily backup after capture. It costs a second full copy plus a full-file integrity scan per day, so it is opt-in; without it, degradation of a backup at rest would not be detected until a restore."
+    });
+  }
   if (gi.lowDiskSkips > 0 && gi.lastLowDiskSkip) {
     const provenForLowDisk = gi.lastProvenBackupOnDisk;
     const covered = provenForLowDisk !== null && provenForLowDisk.at > gi.lastLowDiskSkip.at;

package/dist/{chunk-AZ6KLVDX.js → chunk-MROSARM5.js}

@@ -1,9 +1,9 @@
 import {
   getClient
-} from "./chunk-AY2U4NZ5.js";
+} from "./chunk-GL47M7NY.js";
 import {
   loadConfigSync
-} from "./chunk-ZIG7VPJV.js";
+} from "./chunk-MMS2HBRT.js";
 
 // src/lib/token-spend.ts
 import { readdir, stat } from "fs/promises";

package/dist/{chunk-RV2FFCDS.js → chunk-MUAWCFW6.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-5YEUPUV4.js";
 import {
   EXE_AI_DIR
-} from "./chunk-ZIG7VPJV.js";
+} from "./chunk-MMS2HBRT.js";
 
 // src/lib/shard-manager.ts
 import path from "path";
@@ -83,7 +83,11 @@ async function loadRetiredKeysFromKeychain() {
     for (const key of retired) {
       if (!_keyRing.includes(key)) _keyRing.push(key);
     }
-  } catch {
+  } catch (err) {
+    process.stderr.write(
+      `[shard-manager] \u26A0 retired master keys could not be read \u2014 shards written before the last key rotation will not open until this is fixed: ${err instanceof Error ? err.message : String(err)}
+`
+    );
   }
 }
 async function openShardWithKeyRing(dbPath, source) {

package/dist/{chunk-K4ESASPL.js → chunk-MUCNYSJP.js}

@@ -1,6 +1,6 @@
 import {
   EXE_AI_DIR
-} from "./chunk-ZIG7VPJV.js";
+} from "./chunk-MMS2HBRT.js";
 
 // src/lib/subagent-spawn-ledger.ts
 import { mkdirSync, readFileSync, unlinkSync, writeFileSync } from "fs";

package/dist/{chunk-5QGKMP6T.js → chunk-NF5FOSLD.js}

@@ -1,7 +1,7 @@
 import {
   clean,
   stableId
-} from "./chunk-FWA4MYTA.js";
+} from "./chunk-JRIH6I7D.js";
 
 // src/lib/reflection-checkpoints.ts
 function parsePayload(payload) {

package/dist/{chunk-CKOJP7JI.js → chunk-NKEFYE4R.js}

@@ -2,14 +2,14 @@ import {
   connectEmbedDaemon,
   disconnectClient,
   embedViaClient
-} from "./chunk-ZKJ5S23O.js";
+} from "./chunk-MFAOAIUE.js";
 import {
   EMBEDDING_DIM
 } from "./chunk-FXU7JOXK.js";
 import {
   MODELS_DIR,
   loadConfigSync
-} from "./chunk-ZIG7VPJV.js";
+} from "./chunk-MMS2HBRT.js";
 
 // src/lib/embedder.ts
 var MAX_EMBED_CHARS = 24e3;

package/dist/{chunk-3SXHEQ7X.js → chunk-NPXIS2RY.js}

@@ -1,6 +1,6 @@
 import {
   EXE_AI_DIR
-} from "./chunk-ZIG7VPJV.js";
+} from "./chunk-MMS2HBRT.js";
 
 // src/internal/data-dir.ts
 import path from "path";

package/dist/{chunk-A5USSF66.js → chunk-NVFNADTX.js}

@@ -1,28 +1,28 @@
 import {
   createMailboxInboxPoller,
   getMailboxInboxState
-} from "./chunk-XTQ7R2PA.js";
+} from "./chunk-BV2IET6B.js";
 import {
   registerDaemonScopedQueryChokepoint
-} from "./chunk-3CL2I3RG.js";
+} from "./chunk-IGJMS7C5.js";
 import {
   orgPartnerModeActive,
   resolveOrgPartnerBindings,
   resolvePartnerIdentities,
   rosterKeyLookupFor
-} from "./chunk-7BMSBACY.js";
+} from "./chunk-VOVFUKEB.js";
 import {
+  createDerivedSeqStore,
   createMailboxOpener,
-  createMemorySeqStore,
   createTaskRequestDispatcher,
   initOrgConsent,
   isConsentMacPrimed,
   primeTaskOriginMarkerKey,
   scopedQueryChokepointStatus
-} from "./chunk-JDQ7JU3A.js";
+} from "./chunk-YLFCH3VA.js";
 import {
   flushMailboxOutbox
-} from "./chunk-NY6SBR4O.js";
+} from "./chunk-3FGBBJYM.js";
 
 // src/lib/org-partner-runtime.ts
 var OUTBOX_FLUSH_INTERVAL_MS = 6e4;
@@ -148,14 +148,16 @@ async function startPollerFor(binding, opts, log) {
     throw new Error("refusing to start a mailbox poller before the scoped-query chokepoint is registered");
   }
   const identities = await resolvePartnerIdentities(binding.orgId);
-  const persisted = getMailboxInboxState(binding.orgId, binding.mailboxId);
+  const seqStore = createDerivedSeqStore(
+    () => getMailboxInboxState(binding.orgId, binding.mailboxId).openerSeed
+  );
   const opener = createMailboxOpener({
     orgId: binding.orgId,
     mailboxId: binding.mailboxId,
     expectedDirection: "down",
     recipientPrivateScalar: identities.x25519.privateKey,
     recipientPublicKey: identities.x25519.publicKey,
-    seqStore: createMemorySeqStore(persisted.lastSeqBySender)
+    seqStore
   });
   const dispatch = createTaskRequestDispatcher({
     orgId: binding.orgId,
@@ -171,6 +173,8 @@ async function startPollerFor(binding, opts, log) {
     orgId: binding.orgId,
     mailboxId: binding.mailboxId,
     opener,
+    // The SAME instance the opener holds; the poller stages and commits it.
+    seqStore,
     rosterLookup: rosterKeyLookupFor(binding),
     dispatch,
     ...opts.intervalMs ? { intervalMs: opts.intervalMs } : {},

package/dist/{chunk-VVUO3RJS.js → chunk-NYLJQ2M2.js}

@@ -1,13 +1,13 @@
 import {
   deactivateBehavior
-} from "./chunk-2YIB75UQ.js";
+} from "./chunk-S26CV7BE.js";
 import {
   getActiveAgent
-} from "./chunk-F6H7GP2O.js";
+} from "./chunk-F4BBMIPG.js";
 import {
   canCoordinate,
   getClient
-} from "./chunk-AY2U4NZ5.js";
+} from "./chunk-GL47M7NY.js";
 
 // src/mcp/tools/deactivate-behavior.ts
 import { z } from "zod";
@@ -24,7 +24,7 @@ function registerDeactivateBehavior(server) {
     async ({ behavior_id }) => {
       const caller = getActiveAgent();
       try {
-        const { StewardGate } = await import("./steward-gate-OKUYYIX6.js");
+        const { StewardGate } = await import("./steward-gate-AQJ6KT2C.js");
         const steward = new StewardGate();
         const gateDecision = await steward.checkAuthority(caller.agentId || "unknown", "deactivate_behavior", behavior_id);
         if (!gateDecision.allowed) {

package/dist/{chunk-HIVOLPLD.js → chunk-OAFENIHN.js}

@@ -1,6 +1,6 @@
 import {
   EXE_AI_DIR
-} from "./chunk-ZIG7VPJV.js";
+} from "./chunk-MMS2HBRT.js";
 
 // src/lib/worker-gate.ts
 import { readdirSync, writeFileSync, unlinkSync, mkdirSync, existsSync, readFileSync } from "fs";

package/dist/{chunk-PMZHZQ6K.js → chunk-OBBO6EJR.js}

@@ -1,6 +1,6 @@
 import {
   createReminder
-} from "./chunk-LGC6TBA3.js";
+} from "./chunk-UXN4BICC.js";
 
 // src/mcp/tools/create-reminder.ts
 import { z } from "zod";

package/dist/{chunk-SS6EMDLL.js → chunk-P2UY34XE.js}

@@ -8,20 +8,20 @@ import {
   queryTaskRows,
   resolveExeSession,
   sendIntercom
-} from "./chunk-ZVBVPX4W.js";
+} from "./chunk-7UHZBVP3.js";
 import {
   getTransport
 } from "./chunk-VI4ATC6I.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-VUOAPKPI.js";
+} from "./chunk-LSNBTGW4.js";
 import {
   releaseDispatchClaim,
   tryAcquireDispatchClaim
-} from "./chunk-XU57KFD6.js";
+} from "./chunk-T5SM4RXY.js";
 import {
   getAgentRuntime
-} from "./chunk-GZOG2MAX.js";
+} from "./chunk-L5EPGGDP.js";
 import {
   getSessionKey
 } from "./chunk-CVYC6DUW.js";
@@ -29,7 +29,7 @@ import {
   isCoordinatorName,
   isMultiInstance,
   shouldAutoInstance
-} from "./chunk-AY2U4NZ5.js";
+} from "./chunk-GL47M7NY.js";
 
 // src/lib/tasks-notify.ts
 var VERIFY_DELAY_MS = 1e4;
@@ -91,7 +91,7 @@ async function dispatchTaskToEmployee(input) {
   let crossProject = false;
   if (input.projectName) {
     try {
-      const { assertSessionScope } = await import("./session-scope-UB3HA5E7.js");
+      const { assertSessionScope } = await import("./session-scope-XG5R3P3D.js");
       const check = assertSessionScope("dispatch_task", input.projectName);
       if (check.reason === "cross_session_denied") {
         crossProject = true;

package/dist/{chunk-Y4T5IUEP.js → chunk-P3QQ52QK.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-BTSWFMEH.js";
 import {
   getClient
-} from "./chunk-AY2U4NZ5.js";
+} from "./chunk-GL47M7NY.js";
 
 // src/lib/work-claims.ts
 var CLAIM_TTL_MINUTES = 90;
@@ -306,7 +306,7 @@ async function heartbeatClaims(holderSession, ttlMinutes = CLAIM_TTL_MINUTES) {
 }
 async function recordClaimEvent(eventType, sessionScope, agentId, payload, severity) {
   try {
-    const { recordOrchestrationEventBestEffort } = await import("./orchestration-events-T2GXV2NG.js");
+    const { recordOrchestrationEventBestEffort } = await import("./orchestration-events-JCQ5F5IJ.js");
     recordOrchestrationEventBestEffort({
       eventType,
       source: "work-claims",