@askexenow/exe-os 0.9.403 → 0.9.404

package/dist/{chunk-NPPAHWZC.js → chunk-56XINHPT.js}

@@ -1,6 +1,6 @@
 import {
   ensureAgentSymlink
-} from "./chunk-V37FAK3N.js";
+} from "./chunk-W76IFXGP.js";
 import {
   ensureWorktree,
   ensureWorktreeAsync,
@@ -8,10 +8,10 @@ import {
   getMainRepoRoot,
   isInsideGitRepo,
   isWorktreeDirty
-} from "./chunk-SNIFEKZN.js";
+} from "./chunk-SI7JLNKV.js";
 import {
   resolveRowVisibility
-} from "./chunk-4H7AJCGW.js";
+} from "./chunk-GAUPRBOT.js";
 import {
   LEASE_MINUTES,
   isLeaseExpired,
@@ -34,7 +34,7 @@ import {
 import {
   listSessions,
   registerSession
-} from "./chunk-URL7COCO.js";
+} from "./chunk-Y2OSYQCG.js";
 import {
   getTransport
 } from "./chunk-VI4ATC6I.js";
@@ -43,7 +43,7 @@ import {
 } from "./chunk-6L4VIYLZ.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-R2URBZJ5.js";
+} from "./chunk-MKO45WBR.js";
 import {
   appendDispatchJournalEvent,
   releaseDispatchClaim,
@@ -52,7 +52,7 @@ import {
 } from "./chunk-T5SM4RXY.js";
 import {
   incrementSkillSuccess
-} from "./chunk-YBTBVSU5.js";
+} from "./chunk-PQVIARTA.js";
 import {
   assertRuntimeModelCompatible,
   getAgentRuntime,
@@ -62,13 +62,10 @@ import {
 import {
   PlanLimitError,
   assertEmployeeLimitSync
-} from "./chunk-2A65MF6T.js";
-import {
-  getSessionKey
-} from "./chunk-CVYC6DUW.js";
+} from "./chunk-3RQHJYRK.js";
 import {
   writeMemoryViaDaemon
-} from "./chunk-3NFV2N4Y.js";
+} from "./chunk-QDMZ5DX2.js";
 import {
   AGENT_IDENTITY_TOKEN_ENV,
   getDaemonAgentIdentityBroker
@@ -78,20 +75,23 @@ import {
 } from "./chunk-BTSWFMEH.js";
 import {
   getProjectName
-} from "./chunk-5ZU62OI3.js";
+} from "./chunk-SD5PWIUP.js";
 import {
   expandDualPrefixTools
 } from "./chunk-HYZV25LY.js";
+import {
+  getSessionKey
+} from "./chunk-CVYC6DUW.js";
 import {
   getAgentContext
 } from "./chunk-GJV3WDWM.js";
-import {
-  orgBus
-} from "./chunk-MP2AFCGL.js";
 import {
   isOlderThan,
   parseInstant
 } from "./chunk-YRUZK2QA.js";
+import {
+  orgBus
+} from "./chunk-MP2AFCGL.js";
 import {
   baseAgentName,
   getClient,
@@ -103,13 +103,13 @@ import {
   loadEmployeesSync,
   offloadReadIfMain,
   offloadReadQuery
-} from "./chunk-W437JXWU.js";
+} from "./chunk-YWH7XWOX.js";
 import {
   RUNTIME_TABLE
 } from "./chunk-3VW5ZP2F.js";
 import {
   loadDeviceId
-} from "./chunk-3EZ7A7HL.js";
+} from "./chunk-OAYFVKNM.js";
 import {
   EXE_AI_DIR
 } from "./chunk-MMS2HBRT.js";
@@ -1610,7 +1610,7 @@ async function createTaskCore(input, deps = {}) {
         if (isCoordinatorSession) {
           earlySessionScope = resolved;
         } else {
-          const { getSessionProject } = await import("./session-scope-5MBB7AJF.js");
+          const { getSessionProject } = await import("./session-scope-Z6UWY4NL.js");
           const sessionProject = getSessionProject(resolved);
           if (sessionProject && sessionProject !== input.projectName) {
             scopeMismatchWarning = `session/project mismatch: session "${resolved}" owns "${sessionProject}" but task targets "${input.projectName}". Routed to default scope.`;
@@ -1880,7 +1880,7 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
       });
       await writeTaskMarkdownAtomic(mdPath, mdContent);
       try {
-        const { injectBehaviors } = await import("./behavior-injection-N6FQDXAX.js");
+        const { injectBehaviors } = await import("./behavior-injection-FJFD735A.js");
         await injectBehaviors({
           taskFile: mdPath,
           title: input.title,
@@ -1975,7 +1975,7 @@ async function buildTaskRowsStatement(opts) {
   }
   if (opts.founderId !== null) {
     try {
-      const { founderScopeFilter } = await import("./founder-context-Y55QMPQJ.js");
+      const { founderScopeFilter } = await import("./founder-context-3QW7IIRX.js");
       const founderFilter = founderScopeFilter(opts.founderId);
       const cleaned = founderFilter.sql.replace(/^\s*AND\s+/, "");
       conditions.push(cleaned);
@@ -5514,7 +5514,7 @@ async function verifyPaneAtCapacity(sessionName) {
       reason: `capture-pane failed: ${err instanceof Error ? err.message : String(err)}`
     };
   }
-  const { isAtCapacity } = await import("./capacity-monitor-XBJBYCOR.js");
+  const { isAtCapacity } = await import("./capacity-monitor-DIX6TOWZ.js");
   if (!isAtCapacity(pane)) {
     return {
       atCapacity: false,
@@ -5821,7 +5821,7 @@ async function countScopedPendingReviews(targetSession, reviewer) {
 }
 async function countScopedOpenTasks(targetSession, agentId) {
   try {
-    const { fastDbInit } = await import("./fast-db-init-5PHZBSUI.js");
+    const { fastDbInit } = await import("./fast-db-init-NGVQV5J2.js");
     const client = await fastDbInit();
     const scope = extractRootExe(targetSession);
     if (!scope) return 0;
@@ -5878,7 +5878,7 @@ function buildScopedInProgressTaskQuery(targetSession) {
 async function findScopedInProgressTaskId(targetSession) {
   const q = buildScopedInProgressTaskQuery(targetSession);
   if (!q) return null;
-  const { fastDbInit } = await import("./fast-db-init-5PHZBSUI.js");
+  const { fastDbInit } = await import("./fast-db-init-NGVQV5J2.js");
   const client = await fastDbInit();
   const result = await client.execute(q);
   const id = result.rows[0]?.id;
@@ -5999,7 +5999,7 @@ function sendIntercom(targetSession, opts) {
   const ledgerEnv = (process.env.EXE_NOTIFICATION_LEDGER ?? "").trim().toLowerCase();
   if (ledgerEnv === "shadow") {
     const ledgerScope = opts && "callerSessionScope" in opts ? opts.callerSessionScope : void 0;
-    void import("./notification-ledger-ZLLQF37E.js").then((m) => m.recordShadowNudge(targetSession, reason, ledgerScope, { force: opts?.force })).catch(() => {
+    void import("./notification-ledger-QMQ5OU65.js").then((m) => m.recordShadowNudge(targetSession, reason, ledgerScope, { force: opts?.force })).catch(() => {
     });
   }
   if (!opts?.force && isDebounced(targetSession)) {
@@ -6153,7 +6153,7 @@ function scheduleDeferredSpawnNudge(input) {
             return;
           }
           queueIntercom(input.sessionName, `spawn nudge failed after ${attempt} attempts: ${msg}`, "signal");
-          void import("./notifications-OY2CQN3J.js").then(({ writeNotification: writeNotification2 }) => writeNotification2({
+          void import("./notifications-WJY5SFDV.js").then(({ writeNotification: writeNotification2 }) => writeNotification2({
             agentId: getCoordinatorName(),
             agentRole: "COO",
             event: "error_spike",
@@ -6248,7 +6248,7 @@ async function sendIntercomAsync(targetSession, opts) {
   let ledgerClaim = null;
   if (authoritativeLedger) {
     try {
-      const { claimAuthoritativeNudge } = await import("./notification-ledger-ZLLQF37E.js");
+      const { claimAuthoritativeNudge } = await import("./notification-ledger-QMQ5OU65.js");
       const claim2 = await claimAuthoritativeNudge(
         targetSession,
         reason,
@@ -6271,7 +6271,7 @@ async function sendIntercomAsync(targetSession, opts) {
   const markLedgerDelivered = async () => {
     if (!ledgerClaim) return;
     try {
-      const { markNudgeDelivered } = await import("./notification-ledger-ZLLQF37E.js");
+      const { markNudgeDelivered } = await import("./notification-ledger-QMQ5OU65.js");
       await markNudgeDelivered(ledgerClaim.id, ledgerClaim.sessionScope);
     } catch {
     }
@@ -6279,7 +6279,7 @@ async function sendIntercomAsync(targetSession, opts) {
   const markLedgerFailed = async (error) => {
     if (!ledgerClaim) return;
     try {
-      const { markNudgeDeliveryFailed } = await import("./notification-ledger-ZLLQF37E.js");
+      const { markNudgeDeliveryFailed } = await import("./notification-ledger-QMQ5OU65.js");
       await markNudgeDeliveryFailed(ledgerClaim.id, error, ledgerClaim.sessionScope);
     } catch {
     }

package/dist/{chunk-M7X2HTAE.js → chunk-5I3BXKOK.js}

@@ -1,13 +1,22 @@
+import {
+  compareRuntimeIdentity,
+  formatRuntimeDriftWarning,
+  pkgRootFromHookTarget,
+  readBuildIdentity
+} from "./chunk-ZM22ANTG.js";
 import {
   checkCpuStealSync
 } from "./chunk-SSC7EKY2.js";
+import {
+  computeDegradations
+} from "./chunk-DQUGV7TQ.js";
 import {
   inventoryLocalSecretResidue,
   redactResiduePathForDisplay
 } from "./chunk-PYS43F2X.js";
 import {
-  computeDegradations
-} from "./chunk-FCIJBJTL.js";
+  auditRegisteredHookLiveness
+} from "./chunk-ZPPPHVSU.js";
 import {
   NO_DB_INTEGRITY_EVENTS
 } from "./chunk-5TAJDCZY.js";
@@ -18,25 +27,26 @@ import {
 } from "./chunk-CBPNZFSU.js";
 import {
   DAEMON_DRIFT_FAIL_THRESHOLD,
+  checkoutRootFromScript,
   measureDaemonDrift,
   resolveRunningDaemonScript
-} from "./chunk-PMVVUIHH.js";
+} from "./chunk-GSOKSUBB.js";
 import {
   readMcpHttpEvents,
   summarizeMcpTransport
 } from "./chunk-ZM6EZAVY.js";
-import {
-  mcpHttpPort
-} from "./chunk-5XEU5LCN.js";
 import {
   redactSecrets
 } from "./chunk-T4IDLAZM.js";
+import {
+  mcpHttpPort
+} from "./chunk-ID3KTUXS.js";
 import {
   isWithin
 } from "./chunk-YRUZK2QA.js";
 import {
   inspectKeyCustodySync
-} from "./chunk-FO7PVURG.js";
+} from "./chunk-ZHHGFNTZ.js";
 import {
   checkSingleGotrueInstance
 } from "./chunk-FTZET5YX.js";
@@ -301,6 +311,52 @@ function checkDaemonDrift(pkgRoot, opts) {
     detail: `Daemon build is ${result.behind} commits behind origin/main (HEAD ${result.head.slice(0, 8)})${via}${ahead} \u2014 within the \u2264${DAEMON_DRIFT_FAIL_THRESHOLD} tolerance for normal merge\u2192deploy lag.`
   }];
 }
+function formatDriftCheck(name, result) {
+  if (result.status === "unknown" && result.unverified) {
+    return {
+      name,
+      pass: true,
+      detail: `\u26A0\uFE0F UNVERIFIED: version ${result.running?.version} matches, but the build commit is unstamped on at least one side \u2014 cannot confirm this is the same build`
+    };
+  }
+  if (result.status === "unknown") {
+    return { name, pass: true, detail: `not measured: ${result.reason}` };
+  }
+  if (result.status === "drift") {
+    return { name, pass: false, detail: formatRuntimeDriftWarning(result) ?? "drift detected" };
+  }
+  const r = result.running;
+  return {
+    name,
+    pass: true,
+    detail: r ? `matches installed package (${r.version}${r.commit !== "unknown" ? `, ${r.commit}` : ""})` : "matches installed package"
+  };
+}
+function checkRuntimeDrift(pkgRoot, opts) {
+  const installed = readBuildIdentity(pkgRoot);
+  if (!installed) {
+    return [{
+      name: "exed/runtime-drift",
+      pass: false,
+      detail: `UNKNOWN \u2014 could not read installed package.json at ${pkgRoot}`
+    }];
+  }
+  const hookReport = auditRegisteredHookLiveness({ home: opts?.home });
+  const hookProbe = hookReport.probes.find(
+    (p) => p.runtime === "claude" && p.target && /[\\/]dist[\\/]hooks[\\/]/.test(p.target)
+  );
+  const hookRoot = hookProbe?.target ? pkgRootFromHookTarget(hookProbe.target) : null;
+  const hookRunning = hookRoot ? readBuildIdentity(hookRoot) : null;
+  const hookResult = compareRuntimeIdentity("hooks", hookRunning, installed);
+  const daemonScript = resolveRunningDaemonScript(opts?.pidFile ?? path2.join(EXE_AI_DIR, "exed.pid"));
+  const daemonRoot = daemonScript ? checkoutRootFromScript(daemonScript) : null;
+  const daemonRunning = daemonRoot ? readBuildIdentity(daemonRoot) : null;
+  const daemonResult = compareRuntimeIdentity("daemon", daemonRunning, installed);
+  return [
+    formatDriftCheck("exed/runtime-drift-hooks", hookResult),
+    formatDriftCheck("exed/runtime-drift-daemon", daemonResult)
+  ];
+}
 function checkTaskSystem(pkgRoot) {
   const results = [];
   const scannerPath = path2.join(pkgRoot, "dist", "bin", "scan-tasks.js");
@@ -861,6 +917,7 @@ function runHealthCheck() {
     ...checkBuildIntegrity(pkgRoot),
     ...checkEmbedPipeline(pkgRoot),
     ...checkDaemonDrift(pkgRoot),
+    ...checkRuntimeDrift(pkgRoot),
     ...checkTaskSystem(pkgRoot),
     ...checkWorkerSpawning(pkgRoot),
     ...checkMcpTransport(),
@@ -901,6 +958,7 @@ export {
   compareSemver2 as compareSemver,
   detectAutoupdaterVar2 as detectAutoupdaterVar,
   checkDaemonDrift,
+  checkRuntimeDrift,
   checkMcpTransport,
   checkClaudeCodeInstall,
   checkCpuSteal,