@askexenow/exe-os 0.9.384 → 0.9.389

package/dist/{chunk-P2VVMGMI.js → chunk-V4WH3FV7.js}

@@ -17,17 +17,21 @@ function triggerCooldownKey(triggerId, record) {
   const recordPart = rid == null ? "_" : String(rid).slice(0, 200);
   return `${triggerId}:${recordPart}`;
 }
-async function isTriggerFireAllowed(triggerId, record) {
-  if (TRIGGER_COOLDOWN_MS <= 0) return true;
+async function triggerCooldownVerdict(triggerId, record) {
+  if (TRIGGER_COOLDOWN_MS <= 0) return "allow";
   try {
-    const { recordTriggerFire } = await import("./lib/database.js");
+    const { recordTriggerFire, isInitialized } = await import("./lib/database.js");
+    if (!isInitialized()) return "allow";
     const { allowed } = await recordTriggerFire(
       triggerCooldownKey(triggerId, record),
       TRIGGER_COOLDOWN_MS
     );
-    return allowed;
-  } catch {
-    return true;
+    return allowed ? "allow" : "suppress";
+  } catch (err) {
+    console.error(
+      `[trigger-engine] Cooldown store unreadable for trigger ${triggerId}: ${err instanceof Error ? err.message : String(err)}`
+    );
+    return "unknown";
   }
 }
 var OUTBOUND_RATE_LIMIT_PER_HOUR = 100;
@@ -111,17 +115,25 @@ function evaluateConditions(conditions, record) {
 }
 function loadTriggers(project) {
   if (!existsSync(TRIGGERS_PATH)) return [];
+  let all;
   try {
-    const raw = readFileSync(TRIGGERS_PATH, "utf-8");
-    const all = JSON.parse(raw);
-    if (!Array.isArray(all)) return [];
-    if (project) {
-      return all.filter((t) => !t.project || t.project === project);
-    }
-    return all;
-  } catch {
-    return [];
+    all = JSON.parse(readFileSync(TRIGGERS_PATH, "utf-8"));
+  } catch (err) {
+    throw new Error(
+      `refusing to treat ${TRIGGERS_PATH} as empty: the file exists but could not be read (${err.message}). Saving over it would destroy every configured trigger; running against it would silently fire none.`,
+      { cause: err }
+    );
   }
+  if (!Array.isArray(all)) {
+    throw new Error(
+      `refusing to treat ${TRIGGERS_PATH} as empty: the file parsed to ${all === null ? "null" : typeof all}, not an array of triggers. Saving over it would destroy every configured trigger.`
+    );
+  }
+  const triggers = all;
+  if (project) {
+    return triggers.filter((t) => !t.project || t.project === project);
+  }
+  return triggers;
 }
 function saveTriggers(triggers) {
   const dir = path.dirname(TRIGGERS_PATH);
@@ -379,12 +391,19 @@ async function _processCRMEventInner(event, executor, triggersOverride) {
     if (!trigger.enabled) continue;
     if (trigger.event !== eventString && trigger.event !== "*") continue;
     if (!evaluateConditions(trigger.conditions, event.record)) continue;
-    if (!await isTriggerFireAllowed(trigger.id, event.record)) {
+    const verdict = await triggerCooldownVerdict(trigger.id, event.record);
+    if (verdict === "suppress") {
       console.warn(
         `[trigger-engine] Suppressed "${trigger.name}" on ${eventString}: re-fired within ${TRIGGER_COOLDOWN_MS}ms cooldown for the same record (loop guard).`
       );
       continue;
     }
+    if (verdict === "unknown") {
+      console.error(
+        `[trigger-engine] Suppressed "${trigger.name}" on ${eventString}: the persisted cooldown could not be consulted, so a cross-process re-fire cannot be ruled out. Fix the cooldown store (or set EXE_TRIGGER_COOLDOWN_MS=0 to disable the window deliberately) to resume firing.`
+      );
+      continue;
+    }
     const actionResults = [];
     for (const action of trigger.actions) {
       const result = await executeAction(action, event.record, executor, trigger.name);

package/dist/{worktree-ownership-guard-O6JQF2CL.js → chunk-V6F4I2XY.js}

@@ -1,7 +1,3 @@
-import {
-  LockTimeoutError,
-  withLock
-} from "./chunk-5WA4DG2A.js";
 import {
   basename,
   isLeadingAssignment,
@@ -9,15 +5,16 @@ import {
   shellDashCScriptIndex,
   tokenizeShell
 } from "./chunk-NB5IRTC4.js";
+import {
+  LockTimeoutError,
+  withLock
+} from "./chunk-5WA4DG2A.js";
 import {
   EXE_AI_DIR
 } from "./chunk-MMS2HBRT.js";
-import "./chunk-RH4AH3YB.js";
 import {
   atomicWriteJsonSync
 } from "./chunk-HSGBZSCA.js";
-import "./chunk-JKKZGDLP.js";
-import "./chunk-MLKGABMK.js";
 
 // src/lib/worktree-ownership-guard.ts
 import path from "path";
@@ -406,16 +403,18 @@ function isReadOnlyTokens(tokens, cwd, worktreeRoot, depth) {
   }
   return READ_ONLY_COMMANDS.has(base);
 }
+
 export {
   OWNERSHIP_STAMP_TTL_MS,
-  evaluateNestedSpawnGuard,
-  evaluateWorktreeOwnership,
   getWorktreeOwner,
-  isEscapeOrReadOnly,
-  isSessionAliveFs,
+  evaluateNestedSpawnGuard,
   ownerLockDirFs,
-  pidFromSessionKey,
-  readOwnerSessionFs,
   readOwnerStampFs,
-  writeOwnerSessionFs
+  readOwnerSessionFs,
+  writeOwnerSessionFs,
+  pidFromSessionKey,
+  isSessionAliveFs,
+  evaluateWorktreeOwnership,
+  isEscapeOrReadOnly,
+  isInertAssignment
 };

package/dist/{chunk-JFTUAV4J.js → chunk-VBKUESIW.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-GL47M7NY.js";
+} from "./chunk-3UD3OF3X.js";
 
 // src/lib/boot-generation.ts
 var SYNC_META_KEY = "daemon_boot_generation";

package/dist/{chunk-AZSTIAVL.js → chunk-VBPYYJPC.js}

@@ -1,6 +1,6 @@
 import {
   redactSecrets
-} from "./chunk-ELEGH4DX.js";
+} from "./chunk-ZUGQPYUY.js";
 import {
   EXE_AI_DIR
 } from "./chunk-MMS2HBRT.js";

package/dist/{chunk-LKTN22L6.js → chunk-VIP4LKLO.js}

@@ -7,10 +7,10 @@ import {
 } from "./chunk-S2YTU74T.js";
 import {
   createTask
-} from "./chunk-2FKU4ZEO.js";
+} from "./chunk-QDBKMEYY.js";
 import {
   getActiveAgent
-} from "./chunk-F4BBMIPG.js";
+} from "./chunk-B4XJQBQB.js";
 import {
   deriveTaskIdempotencyKey,
   ensureEmployeeAsync,
@@ -18,13 +18,13 @@ import {
   isExeSession,
   logTaskDispatch,
   resolveExeSession
-} from "./chunk-7UHZBVP3.js";
+} from "./chunk-QDVLVLXP.js";
 import {
   getPaneCwdAsync
-} from "./chunk-PUBA5B4M.js";
+} from "./chunk-6L4VIYLZ.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-LSNBTGW4.js";
+} from "./chunk-DPYZW42H.js";
 import {
   releaseDispatchClaim,
   tryAcquireDispatchClaim,
@@ -34,10 +34,10 @@ import {
 import {
   getAgentRuntime,
   validateRuntimeModel
-} from "./chunk-L5EPGGDP.js";
+} from "./chunk-GWAN2BDB.js";
 import {
   getLicenseSync
-} from "./chunk-BPVFZ6Q4.js";
+} from "./chunk-B5EGDNG6.js";
 import {
   isValidSessionScope
 } from "./chunk-BTSWFMEH.js";
@@ -46,7 +46,7 @@ import {
 } from "./chunk-GJV3WDWM.js";
 import {
   isCoordinatorName
-} from "./chunk-GL47M7NY.js";
+} from "./chunk-3UD3OF3X.js";
 import {
   EXE_AI_DIR
 } from "./chunk-MMS2HBRT.js";
@@ -173,6 +173,19 @@ async function sessionIncarnationId(sessionName) {
   return null;
 }
 
+// src/lib/tmux-dispatch-gate.ts
+var TMUX_DISPATCH_RETIRED_MESSAGE = "tmux dispatch is retired; dispatch a named subagent: Agent(subagent_type='<name>') \u2014 worktree isolation for code, brief it with a file fence and the guardrails, and persist its result into the task checklist row + memory before you finish. task(action='create') stays a durable checklist row for tracking and never launches compute.";
+var TMUX_DISPATCH_ESCAPE_HATCH = "EXE_ALLOW_TMUX_DISPATCH";
+function isTmuxDispatchAllowed(env = process.env) {
+  return env[TMUX_DISPATCH_ESCAPE_HATCH] === "1";
+}
+function tmuxDispatchRefusal(toolName) {
+  return `${toolName}: ${TMUX_DISPATCH_RETIRED_MESSAGE} Nothing was created or dispatched.`;
+}
+function spawnOverrideNoopNotice(fields) {
+  return `Ignored ${fields.join(", ")} \u2014 ${TMUX_DISPATCH_RETIRED_MESSAGE} Set a subagent's model per employee with set_agent_config, or per dispatch with the Agent tool's own model argument.`;
+}
+
 // src/mcp/tools/create-task.ts
 var ProjectScopeCheckFailedError = class extends Error {
   constructor(message, options) {
@@ -654,18 +667,18 @@ async function resolveCoordinatorOwnProjectDir(callerRoot) {
   }
   return null;
 }
-function registerCreateTask(server) {
+function registerCreateTask(server, deps = {}) {
   server.registerTool(
     "create_task",
     {
       title: "Create Task",
-      description: "Create a durable, session-scoped checklist item. Creation has no execution side effects by default; use execution_mode='durable_tmux' only for explicit legacy tmux dispatch.",
+      description: "Create a durable, session-scoped checklist item. Creating a task NEVER dispatches or launches compute \u2014 to delegate, dispatch a named subagent with Agent(subagent_type='<employee>').",
       inputSchema: {
         execution_mode: z.enum(["checklist", "durable_tmux"]).default("checklist").describe(
-          "Execution behavior. 'checklist' (default) only persists the task for native-subagent orchestration in the current coordinator context. 'durable_tmux' explicitly opts into legacy project resolution, employee validation, tmux spawn/wake, intercom, and signal delivery."
+          "Execution behavior. 'checklist' (default, and the only supported value) persists the task as a durable checklist row with zero execution side effects. 'durable_tmux' is RETIRED: background tmux employees are gone and the value is refused \u2014 delegate with Agent(subagent_type='<employee>') instead. The parameter is kept so older clients that still send it get a clear refusal rather than a schema error."
         ),
         title: z.string().describe("Task title"),
-        assigned_to: z.string().describe("Checklist owner/assignee label. It is not validated against the employee roster unless execution_mode='durable_tmux'."),
+        assigned_to: z.string().describe("Checklist owner/assignee label. It records who owns the row; it does not dispatch anyone and is not validated against the employee roster."),
         project_name: z.string().describe("Project name"),
         priority: z.enum(["p0", "p1", "p2"]).default("p1").describe("Priority level"),
         complexity: z.enum(["routine", "standard", "complex", "critical"]).default("standard").describe("Bloom taxonomy complexity level. Affects routing tier and review requirements."),
@@ -675,8 +688,8 @@ function registerCreateTask(server) {
         reviewer: z.string().optional().describe("Who should review this task when done. Defaults to assigner."),
         budget_tokens: z.number().optional().describe("Max tokens allowed for this task (null = unlimited)"),
         budget_fallback_model: z.string().optional().describe("Model to route to when budget is exhausted"),
-        spawn_runtime: z.string().optional().describe("Override runtime for spawned session (e.g., 'claude', 'codex', 'opencode')"),
-        spawn_model: z.string().optional().describe("Override model for spawned session (e.g., 'claude-sonnet-4.6', 'claude-haiku-4.5')"),
+        spawn_runtime: z.string().optional().describe("RETIRED no-op \u2014 nothing is spawned. Accepted and ignored (the response says so). Set a subagent's runtime per employee with set_agent_config."),
+        spawn_model: z.string().optional().describe("RETIRED no-op \u2014 nothing is spawned. Accepted and ignored (the response says so). Set a subagent's model per employee with set_agent_config, or per dispatch with the Agent tool's own model argument."),
         spawn_worktree: z.boolean().optional().describe(
           "Worktree isolation for code-role agents. Default true (REQUIRED \u2014 a code-role agent that cannot get an isolated git worktree is refused, never spawned on main). Set false ONLY to dispatch a code-role agent into a NON-git 'automation' project (a plain folder with no repo to protect); the agent then runs in the project root and a loud worktree.bypassed event is logged. Genuine non-git projects are auto-detected, so this is rarely needed by hand."
         ),
@@ -691,6 +704,16 @@ function registerCreateTask(server) {
     async ({ execution_mode, title, assigned_to, project_name, priority, complexity, context, blocked_by, parent_task_id, reviewer, budget_tokens, budget_fallback_model, spawn_runtime, spawn_model, spawn_worktree, idempotency_key, idempotency_window, session_scope, work_ref, group_id, override_claim_reason }) => {
       const executionMode = execution_mode ?? "checklist";
       const isDurableTmuxDispatch = executionMode === "durable_tmux";
+      if (isDurableTmuxDispatch && !isTmuxDispatchAllowed()) {
+        return {
+          isError: true,
+          content: [{ type: "text", text: tmuxDispatchRefusal("create_task") }]
+        };
+      }
+      const ignoredSpawnOverrides = isDurableTmuxDispatch ? [] : [
+        spawn_runtime ? "spawn_runtime" : null,
+        spawn_model ? "spawn_model" : null
+      ].filter((f) => f !== null);
       if (isDurableTmuxDispatch && !isCoordinatorName(assigned_to)) {
         const license = getLicenseSync();
         if (license.plan === "free") {
@@ -755,7 +778,8 @@ function registerCreateTask(server) {
       }
       if (!callerRoot && isDurableTmuxDispatch) {
         const coordinatorSessions = await listCoordinatorRoots();
-        if (coordinatorSessions.length > 1 && process.env.VITEST !== "true" && process.env.NODE_ENV !== "test") {
+        const isTestEnv = process.env.VITEST === "true" || process.env.NODE_ENV === "test";
+        if (coordinatorSessions.length > 1 && (!isTestEnv || !!deps.enforceAmbiguityGuard)) {
           const message = `BLOCKED: create_task cannot determine the caller session. ${coordinatorSessions.length} coordinator sessions are active (${coordinatorSessions.join(", ")}), X-Exe-Session is missing, and project "${project_name}" did not map to exactly one registered coordinator. Refusing to guess because guessing causes cross-session dispatch (for example exe2 tasks spawning yoshi2-exe1). Restart this coordinator or ensure the MCP client sends X-Exe-Session.` + HEADLESS_SCOPE_REMEDY;
           process.stderr.write(`[create_task] ${message}
 `);
@@ -783,7 +807,8 @@ function registerCreateTask(server) {
         } catch {
         }
       }
-      if (!callerRoot && process.env.VITEST !== "true" && process.env.NODE_ENV !== "test") {
+      const isTestEnvScope = process.env.VITEST === "true" || process.env.NODE_ENV === "test";
+      if (!callerRoot && (!isTestEnvScope || !!deps.enforceScopeGuard)) {
         const scopeRemedy = isDurableTmuxDispatch ? HEADLESS_SCOPE_REMEDY : ` Pass a valid session_scope parameter or ensure the MCP client supplies X-Exe-Session; checklist creation never guesses scope from tmux.`;
         const message = `BLOCKED: create_task resolved no session_scope for project "${project_name}". Refusing to create an unscoped task.` + scopeRemedy;
         process.stderr.write(`[create_task] ${message}
@@ -866,7 +891,7 @@ Idempotent no-op (existing task unchanged; no execution side effects)`
       let claimWarning = "";
       const claimRefRaw = (work_ref ?? "").trim();
       try {
-        const { findConflicts, findConflictsInText, describeConflict, normalizeTarget } = await import("./work-claims-6DM32MGO.js");
+        const { findConflicts, findConflictsInText, describeConflict, normalizeTarget } = await import("./work-claims-CMV2GWIW.js");
         const conflicts = claimRefRaw ? await findConflicts(
           [normalizeTarget({ kind: "work_ref", value: claimRefRaw })],
           callerRoot
@@ -933,7 +958,7 @@ Nothing was created or dispatched. Either pick different work, or \u2014 if that
         });
         if (claimRefRaw) {
           try {
-            const { acquireClaim } = await import("./work-claims-6DM32MGO.js");
+            const { acquireClaim } = await import("./work-claims-CMV2GWIW.js");
             const acquired = await acquireClaim({
               targets: [{ kind: "work_ref", value: claimRefRaw }],
               holderSession: callerRoot,
@@ -960,6 +985,10 @@ Status: blocked (waiting on ${blocked_by})`;
         }
         if (task2.warning) text2 += `
 Warning: ${task2.warning}`;
+        if (ignoredSpawnOverrides.length > 0) {
+          text2 += `
+Note: ${spawnOverrideNoopNotice(ignoredSpawnOverrides)}`;
+        }
         return { content: [{ type: "text", text: text2 }] };
       }
       let projectDir;
@@ -995,7 +1024,8 @@ Warning: ${task2.warning}`;
           );
         }
       }
-      if (projectDir == null && process.env.VITEST !== "true" && process.env.NODE_ENV !== "test") {
+      const isTestEnvProjectDir = process.env.VITEST === "true" || process.env.NODE_ENV === "test";
+      if (projectDir == null && (!isTestEnvProjectDir || !!deps.enforceProjectDirGuard)) {
         const message = `BLOCKED: create_task could not resolve an existing project directory for "${project_name}" within the caller's coordinator scope. Refusing to create/dispatch into a fabricated or cross-scope path. Clone the project (or ensure the coordinator session registry points at it) and retry. If "${project_name}" is a non-git automation project, dispatch it from a session whose coordinator dir contains it.` + HEADLESS_SCOPE_REMEDY;
         process.stderr.write(`[create_task] ${message}
 `);
@@ -1124,7 +1154,7 @@ Warning: ${task2.warning}`;
       }
       if (claimRefRaw) {
         try {
-          const { acquireClaim } = await import("./work-claims-6DM32MGO.js");
+          const { acquireClaim } = await import("./work-claims-CMV2GWIW.js");
           const acquired = await acquireClaim({
             targets: [{ kind: "work_ref", value: claimRefRaw }],
             holderSession: callerRoot,
@@ -1177,7 +1207,7 @@ Claimed ${claimRefRaw} for session ${callerRoot} (claim_group ${acquired.claimGr
           session_scope: sessionScope,
           created_at: (/* @__PURE__ */ new Date()).toISOString()
         }), "utf-8");
-        const { recordOrchestrationEventBestEffort: recordOE } = await import("./orchestration-events-JCQ5F5IJ.js");
+        const { recordOrchestrationEventBestEffort: recordOE } = await import("./orchestration-events-CHY3GOJD.js");
         recordOE({
           eventType: "signal.created",
           source: "create-task.mcp",
@@ -1190,7 +1220,8 @@ Claimed ${claimRefRaw} for session ${callerRoot} (claim_group ${acquired.claimGr
       }
       let dispatchStatus = "";
       let dispatchOutcome = "ok";
-      if (task.status !== "blocked" && !process.env.VITEST && !task.deduplicated) {
+      const isTestEnvDispatch = !!process.env.VITEST;
+      if (task.status !== "blocked" && (!isTestEnvDispatch || !!deps.enforceDispatchBranch) && !task.deduplicated) {
         try {
           const exeSession = task.sessionScope || callerRoot;
           const dispatchRuntime = resolveDispatchRuntime(assigned_to, spawn_runtime ?? null);
@@ -1209,7 +1240,7 @@ Claimed ${claimRefRaw} for session ${callerRoot} (claim_group ${acquired.claimGr
             let projectConflictOpts = {};
             try {
               const { getClient } = await import("./lib/database.js");
-              const { sessionScopeFilter } = await import("./task-scope-NHXB4ZRN.js");
+              const { sessionScopeFilter } = await import("./task-scope-32HQEV6W.js");
               const client = getClient();
               const scope = sessionScopeFilter(task.sessionScope || callerRoot || exeSession || null);
               const existing = await client.execute({
@@ -1442,7 +1473,7 @@ ${dispatchErr instanceof Error ? dispatchErr.stack : ""}
       }
       let dupWarning = "";
       try {
-        const { findMatchingBranches } = await import("./branch-hygiene-44WLSOZR.js");
+        const { findMatchingBranches } = await import("./branch-hygiene-DDXXI6ZA.js");
         const matches = await findMatchingBranches(resolvedProjectDir, { title });
         if (matches.length > 0) {
           const top = matches.slice(0, 3).map((m) => {
@@ -1505,6 +1536,8 @@ Do NOT call create_task again \u2014 that duplicates the row. Re-dispatch the EX
 }
 
 export {
+  isTmuxDispatchAllowed,
+  tmuxDispatchRefusal,
   ProjectScopeCheckFailedError,
   isSafeProjectName,
   findProjectChildDir,