@askexenow/exe-os 0.9.409 → 0.9.410

package/dist/{chunk-BIV4IHED.js → chunk-JDZNGC4O.js}

@@ -7,24 +7,26 @@ import {
 } from "./chunk-S2YTU74T.js";
 import {
   createTask
-} from "./chunk-IPBNHPTE.js";
+} from "./chunk-BIHPY7JW.js";
 import {
   getActiveAgent
-} from "./chunk-OISOA6NX.js";
+} from "./chunk-IHBYJG7N.js";
 import {
   deriveTaskIdempotencyKey,
   ensureEmployeeAsync,
   isEmployeeAlive,
   isExeSession,
   logTaskDispatch,
-  resolveExeSession
-} from "./chunk-XAGIZVYI.js";
+  resolveExeSession,
+  spawnOverrideNoopNotice,
+  tmuxDispatchRefusal
+} from "./chunk-WSYIQKZ6.js";
 import {
   getPaneCwdAsync
 } from "./chunk-6L4VIYLZ.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-SA66WRBT.js";
+} from "./chunk-WLV27PAO.js";
 import {
   releaseDispatchClaim,
   tryAcquireDispatchClaim,
@@ -37,7 +39,7 @@ import {
 } from "./chunk-IVXELUEQ.js";
 import {
   getLicenseSync
-} from "./chunk-EIM7OGTD.js";
+} from "./chunk-2AXJRXA6.js";
 import {
   isValidSessionScope
 } from "./chunk-BTSWFMEH.js";
@@ -46,7 +48,7 @@ import {
 } from "./chunk-GJV3WDWM.js";
 import {
   isCoordinatorName
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-LBEBSXZA.js";
 import {
   EXE_AI_DIR
 } from "./chunk-MMS2HBRT.js";
@@ -173,19 +175,6 @@ async function sessionIncarnationId(sessionName) {
   return null;
 }
 
-// src/lib/tmux-dispatch-gate.ts
-var TMUX_DISPATCH_RETIRED_MESSAGE = "tmux dispatch is retired; dispatch a named subagent: Agent(subagent_type='<name>') \u2014 worktree isolation for code, brief it with a file fence and the guardrails, and persist its result into the task checklist row + memory before you finish. task(action='create') stays a durable checklist row for tracking and never launches compute.";
-var TMUX_DISPATCH_ESCAPE_HATCH = "EXE_ALLOW_TMUX_DISPATCH";
-function isTmuxDispatchAllowed(env = process.env) {
-  return env[TMUX_DISPATCH_ESCAPE_HATCH] === "1";
-}
-function tmuxDispatchRefusal(toolName) {
-  return `${toolName}: ${TMUX_DISPATCH_RETIRED_MESSAGE} Nothing was created or dispatched.`;
-}
-function spawnOverrideNoopNotice(fields) {
-  return `Ignored ${fields.join(", ")} \u2014 ${TMUX_DISPATCH_RETIRED_MESSAGE} Set a subagent's model per employee with set_agent_config, or per dispatch with the Agent tool's own model argument.`;
-}
-
 // src/mcp/tools/create-task.ts
 var ProjectScopeCheckFailedError = class extends Error {
   constructor(message, options) {
@@ -704,7 +693,7 @@ function registerCreateTask(server, deps = {}) {
     async ({ execution_mode, title, assigned_to, project_name, priority, complexity, context, blocked_by, parent_task_id, reviewer, budget_tokens, budget_fallback_model, spawn_runtime, spawn_model, spawn_worktree, idempotency_key, idempotency_window, session_scope, work_ref, group_id, override_claim_reason }) => {
       const executionMode = execution_mode ?? "checklist";
       const isDurableTmuxDispatch = executionMode === "durable_tmux";
-      if (isDurableTmuxDispatch && !isTmuxDispatchAllowed()) {
+      if (isDurableTmuxDispatch) {
         return {
           isError: true,
           content: [{ type: "text", text: tmuxDispatchRefusal("create_task") }]
@@ -891,7 +880,7 @@ Idempotent no-op (existing task unchanged; no execution side effects)`
       let claimWarning = "";
       const claimRefRaw = (work_ref ?? "").trim();
       try {
-        const { findConflicts, findConflictsInText, describeConflict, normalizeTarget } = await import("./work-claims-OAICQBWO.js");
+        const { findConflicts, findConflictsInText, describeConflict, normalizeTarget } = await import("./work-claims-XQXT2VWJ.js");
         const conflicts = claimRefRaw ? await findConflicts(
           [normalizeTarget({ kind: "work_ref", value: claimRefRaw })],
           callerRoot
@@ -958,7 +947,7 @@ Nothing was created or dispatched. Either pick different work, or \u2014 if that
         });
         if (claimRefRaw) {
           try {
-            const { acquireClaim } = await import("./work-claims-OAICQBWO.js");
+            const { acquireClaim } = await import("./work-claims-XQXT2VWJ.js");
             const acquired = await acquireClaim({
               targets: [{ kind: "work_ref", value: claimRefRaw }],
               holderSession: callerRoot,
@@ -1154,7 +1143,7 @@ Note: ${spawnOverrideNoopNotice(ignoredSpawnOverrides)}`;
       }
       if (claimRefRaw) {
         try {
-          const { acquireClaim } = await import("./work-claims-OAICQBWO.js");
+          const { acquireClaim } = await import("./work-claims-XQXT2VWJ.js");
           const acquired = await acquireClaim({
             targets: [{ kind: "work_ref", value: claimRefRaw }],
             holderSession: callerRoot,
@@ -1207,7 +1196,7 @@ Claimed ${claimRefRaw} for session ${callerRoot} (claim_group ${acquired.claimGr
           session_scope: sessionScope,
           created_at: (/* @__PURE__ */ new Date()).toISOString()
         }), "utf-8");
-        const { recordOrchestrationEventBestEffort: recordOE } = await import("./orchestration-events-73VEJT7Q.js");
+        const { recordOrchestrationEventBestEffort: recordOE } = await import("./orchestration-events-ARGZU6KS.js");
         recordOE({
           eventType: "signal.created",
           source: "create-task.mcp",
@@ -1240,7 +1229,7 @@ Claimed ${claimRefRaw} for session ${callerRoot} (claim_group ${acquired.claimGr
             let projectConflictOpts = {};
             try {
               const { getClient } = await import("./lib/database.js");
-              const { sessionScopeFilter } = await import("./task-scope-AMR3Z3DJ.js");
+              const { sessionScopeFilter } = await import("./task-scope-4EKZBTTM.js");
               const client = getClient();
               const scope = sessionScopeFilter(task.sessionScope || callerRoot || exeSession || null);
               const existing = await client.execute({
@@ -1536,8 +1525,6 @@ Do NOT call create_task again \u2014 that duplicates the row. Re-dispatch the EX
 }
 
 export {
-  isTmuxDispatchAllowed,
-  tmuxDispatchRefusal,
   ProjectScopeCheckFailedError,
   isSafeProjectName,
   findProjectChildDir,

package/dist/{chunk-JJYAETCO.js → chunk-JTXXLNYD.js}

@@ -1,7 +1,7 @@
 import {
   orgMembershipsPath,
   readActiveOrgMemberships
-} from "./chunk-K7DAE2HO.js";
+} from "./chunk-FOZSHNET.js";
 import {
   resolveExeDataDir
 } from "./chunk-NPXIS2RY.js";
@@ -270,7 +270,7 @@ async function departOrgToPersonalFreeTier(orgIdRaw, cause = "left") {
       `could not determine whether standing consent policies exist for ${orgId} (permission or I/O error checking ${consentStatePath}). Treating this as NOT cleared \u2014 they may still be armed. Re-run the departure once the file is readable.`
     );
   } else try {
-    const { clearStandingPolicies } = await import("./org-consent-policy-MSVSRI53.js");
+    const { clearStandingPolicies } = await import("./org-consent-policy-7K5H6FOB.js");
     await clearStandingPolicies(orgId);
     consentCleared = true;
   } catch (err) {
@@ -289,7 +289,7 @@ async function departOrgToPersonalFreeTier(orgIdRaw, cause = "left") {
   }
   let pollerStopped = false;
   try {
-    const { stopOrgPartnerPollerFor } = await import("./org-partner-runtime-GN4GFWI2.js");
+    const { stopOrgPartnerPollerFor } = await import("./org-partner-runtime-7AD7WY3Y.js");
     pollerStopped = await stopOrgPartnerPollerFor(orgId);
   } catch (err) {
     failures.push(
@@ -298,7 +298,7 @@ async function departOrgToPersonalFreeTier(orgIdRaw, cause = "left") {
   }
   let seqFloor = 0;
   try {
-    const { preserveOutboundSeqFloor } = await import("./task-request-inbox-AY3C6DND.js");
+    const { preserveOutboundSeqFloor } = await import("./task-request-inbox-RXAT2QJF.js");
     seqFloor = preserveOutboundSeqFloor(orgId);
     if (seqFloor > 0) {
       notes.push(

package/dist/{chunk-YVS77JPW.js → chunk-JZ23D5YF.js}

@@ -1,9 +1,9 @@
 import {
   listBehaviors
-} from "./chunk-F5ZRHLG5.js";
+} from "./chunk-NYV4A5IG.js";
 import {
   incrementSkillUsage
-} from "./chunk-FJKUFMNF.js";
+} from "./chunk-ASA2UJDH.js";
 
 // src/lib/behavior-injection.ts
 import { appendFile } from "fs/promises";
@@ -349,7 +349,7 @@ async function injectBehaviors(opts) {
       `[behavior-injection] ${opts.assignedTo} <- ${selected.length}/${behaviors.length} behaviour(s) for "${opts.title.slice(0, 60)}": ` + selected.map((s) => `${s.behavior.id.slice(0, 8)}(${s.score.toFixed(2)})`).join(" ") + "\n"
     );
     await incrementSkillUsage(selected.map((s) => s.behavior));
-    const { recordBehaviorsConsulted } = await import("./skill-usage-GNV737U5.js");
+    const { recordBehaviorsConsulted } = await import("./skill-usage-QOLIJQJC.js");
     await recordBehaviorsConsulted(selected.map((s) => s.behavior.id));
     return selected;
   } catch (err) {

package/dist/{chunk-QYIR64RR.js → chunk-K464YYT5.js}

@@ -1,6 +1,6 @@
 import {
   processCRMEvent
-} from "./chunk-CLV7ALXV.js";
+} from "./chunk-XDWIJBTY.js";
 
 // src/gateway/adapters/crm-webhook.ts
 function parseTwentyWebhook(payload) {

package/dist/{chunk-BM467PZN.js → chunk-K6XWIJN7.js}

@@ -1,6 +1,6 @@
 import {
   getMasterKey
-} from "./chunk-KIJRAZWR.js";
+} from "./chunk-IQCC6WFI.js";
 import {
   PRIVATE_DIR_MODE,
   PRIVATE_FILE_MODE,

package/dist/{chunk-DIKLSAJE.js → chunk-KNEEOZWN.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-3R7UDPVR.js";
 import {
   getDeviceInfo
-} from "./chunk-LDHJX4TZ.js";
+} from "./chunk-XJDSTA2C.js";
 import {
   EXE_AI_DIR
 } from "./chunk-MMS2HBRT.js";

package/dist/{chunk-3MDUKF3N.js → chunk-LBEBSXZA.js}

@@ -7,14 +7,14 @@ import {
 import {
   listBackups,
   preBackupCheckpoint
-} from "./chunk-YUAOQJVV.js";
+} from "./chunk-E2346GKI.js";
 import {
   MEMORY_PROJECTION_OUTBOX_INDEX_SQL,
   MEMORY_PROJECTION_OUTBOX_TABLE_SQL,
   MEMORY_PROJECTION_OUTBOX_UNIQUE_INDEX_SQL,
   PROJECTION_CHECKPOINT_TABLE_SQL,
   ensureMemoryWriteIndex
-} from "./chunk-OE7TAEOG.js";
+} from "./chunk-IXRYS5X3.js";
 import {
   recordDbOpen
 } from "./chunk-5YEUPUV4.js";
@@ -1515,7 +1515,7 @@ async function migrateReflectionDedup(client) {
     "ALTER TABLE memory_reflections ADD COLUMN dedup_key TEXT",
     "migration add memory_reflections.dedup_key"
   );
-  const { reflectionDedupKey } = await import("./memory-reflection-N6NSYW6S.js");
+  const { reflectionDedupKey } = await import("./memory-reflection-DVAT4QKS.js");
   const keyForRow = (row) => {
     let sources = [];
     try {
@@ -2573,7 +2573,7 @@ async function sweepExpiredSoftDeletedMemories(client, options = {}) {
   const purgeArchived = archDays !== void 0;
   const BATCH_SIZE = 2e3;
   const MAX_BATCHES = 500;
-  const { cleanupCardsForMemories, cleanupGraphLinksForMemories } = await import("./graph-rag-GBA5E3QC.js");
+  const { cleanupCardsForMemories, cleanupGraphLinksForMemories } = await import("./graph-rag-LH34CEGC.js");
   const softCutoff = `-${softDays} days`;
   const selectArgsBase = [softCutoff];
   let predicate = `status = 'deleted' AND COALESCE(deleted_at, timestamp) < datetime('now', ?)`;
@@ -5014,6 +5014,7 @@ export {
   recordTriggerFire,
   disposeTurso,
   disposeDatabase,
+  IDENTITY_DIR,
   IdentityWriteError,
   identityPath,
   getIdentity,

package/dist/{chunk-NK4JHJNP.js → chunk-LCXWQVOD.js}

@@ -4,21 +4,21 @@ import {
   assertUsableEpoch,
   deriveOrgKeyIdentities,
   describeEpochRemedy
-} from "./chunk-6RRPVE5O.js";
+} from "./chunk-APKEGWFB.js";
 import {
   InviteError,
   resolveAuth,
   resolveEndpoint
-} from "./chunk-M4N7I2H5.js";
+} from "./chunk-XC2KAJK4.js";
 import {
   asOrgBillablePlan
 } from "./chunk-W4H2MZAS.js";
 import {
   orgKeyFingerprintDisplay
-} from "./chunk-XFGS22VE.js";
+} from "./chunk-XBCIRNNU.js";
 import {
   ed25519PrivateKeyFromSeed
-} from "./chunk-GPWXUU3L.js";
+} from "./chunk-OUUNFTS4.js";
 
 // src/lib/org-key-admin.ts
 import { sign } from "crypto";

package/dist/{chunk-3AL2LO3L.js → chunk-LZS2B2JT.js}

@@ -19,7 +19,7 @@ import {
 } from "./chunk-RT57D7C4.js";
 import {
   loadLicense
-} from "./chunk-DIKLSAJE.js";
+} from "./chunk-KNEEOZWN.js";
 
 // src/lib/stack-update.ts
 import { execFileSync, spawnSync as spawnSync2 } from "child_process";

package/dist/{chunk-W2VDJKTB.js → chunk-MNWN3SQ3.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-LBEBSXZA.js";
 import {
   loadConfig
 } from "./chunk-MMS2HBRT.js";

package/dist/{chunk-ZEHBSA25.js → chunk-MQD3JJCO.js}

@@ -132,7 +132,7 @@ async function verifyOrBlock(hookPath) {
     process.stderr.write(`[SECURITY] Hook tamper detected: ${filename} \u2014 ${result.reason}
 `);
     try {
-      const { pushNotifyAsync } = await import("./push-notifications-YVOP4KGN.js");
+      const { pushNotifyAsync } = await import("./push-notifications-W3UNHDC5.js");
       pushNotifyAsync({
         event: "security_alert",
         title: "Hook tamper detected",

package/dist/{chunk-KPLMY2GT.js → chunk-NUEDA2US.js}

@@ -2,10 +2,10 @@ import {
   BUSY_PATTERN,
   sendIntercom,
   updateTaskStatus
-} from "./chunk-XAGIZVYI.js";
+} from "./chunk-WSYIQKZ6.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-SA66WRBT.js";
+} from "./chunk-WLV27PAO.js";
 import {
   hasPassed
 } from "./chunk-YRUZK2QA.js";
@@ -13,7 +13,7 @@ import {
   baseAgentName,
   getCoordinatorName,
   isCoordinatorName
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-LBEBSXZA.js";
 import {
   isAutonomousTmuxSpawnEnabled
 } from "./chunk-MMS2HBRT.js";
@@ -338,7 +338,7 @@ async function surfaceStaleDispatchPendingSignals(scopeList, now, thresholdMs =
     const sessionScope = signalScope ?? (scopeList.length === 1 ? scopeList[0] : null);
     if (allowedScopes.size > 0 && sessionScope && !allowedScopes.has(sessionScope)) continue;
     try {
-      const { writeNotification } = await import("./notifications-T5C2CVB3.js");
+      const { writeNotification } = await import("./notifications-75FVPJLY.js");
       await writeNotification({
         agentId: getCoordinatorName(),
         agentRole: "COO",

package/dist/{chunk-F5ZRHLG5.js → chunk-NYV4A5IG.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-ZD5TZZXU.js";
 import {
   vectorToSqlLiteral
-} from "./chunk-APVU4Q5B.js";
+} from "./chunk-X2EBM5BQ.js";
 import {
   blobToVector
 } from "./chunk-OTVEIJUQ.js";
 import {
   getClient,
   sanitizeBehaviorContent
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-LBEBSXZA.js";
 
 // src/lib/behaviors.ts
 import crypto from "crypto";

package/dist/{chunk-M7774YLB.js → chunk-O5RKAXCG.js}

@@ -1,6 +1,6 @@
 import {
   canonicalizeStackManifest
-} from "./chunk-3AL2LO3L.js";
+} from "./chunk-LZS2B2JT.js";
 
 // src/lib/stack-manifest-write.ts
 import { readFileSync, statSync, writeFileSync } from "fs";

package/dist/{chunk-GPWXUU3L.js → chunk-OUUNFTS4.js}

@@ -1,6 +1,6 @@
 import {
   getMasterKey
-} from "./chunk-KIJRAZWR.js";
+} from "./chunk-IQCC6WFI.js";
 
 // src/lib/partner-sign-identity.ts
 import crypto from "crypto";

package/dist/{chunk-G3ZYXXO7.js → chunk-PCF4QMJS.js}

@@ -1,16 +1,16 @@
 import {
   isPaneBusy
-} from "./chunk-KPLMY2GT.js";
+} from "./chunk-NUEDA2US.js";
 import {
   recordSessionKill
-} from "./chunk-HFSFWMID.js";
+} from "./chunk-AEOB4JCJ.js";
 import {
   buildMergedPrCache,
   getBranchLandedState
-} from "./chunk-PZDAPIQL.js";
+} from "./chunk-XJQGS4IM.js";
 import {
   updateTask
-} from "./chunk-IPBNHPTE.js";
+} from "./chunk-BIHPY7JW.js";
 import {
   BUSY_PATTERN,
   countPendingReviews,
@@ -29,14 +29,14 @@ import {
   sessionScopeFilter,
   strictSessionScopeFilter,
   writeNotification
-} from "./chunk-XAGIZVYI.js";
+} from "./chunk-WSYIQKZ6.js";
 import {
   LEASE_MINUTES,
   isLeaseExpired
 } from "./chunk-E23LNUWJ.js";
 import {
   listSessions
-} from "./chunk-HFXBL7XE.js";
+} from "./chunk-6T5RC3L4.js";
 import {
   getTransport
 } from "./chunk-VI4ATC6I.js";
@@ -51,7 +51,7 @@ import {
 } from "./chunk-6L4VIYLZ.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-SA66WRBT.js";
+} from "./chunk-WLV27PAO.js";
 import {
   checkDispatchStatus,
   readTerminalLauncherFailure,
@@ -79,7 +79,7 @@ import {
   getCoordinatorName,
   isCoordinatorName,
   shouldAutoInstance
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-LBEBSXZA.js";
 import {
   eventLoopBlockedMarkerPath
 } from "./chunk-ZQEJ4IX2.js";
@@ -3822,7 +3822,7 @@ function createMergedPrCacheMemo(lookup = buildMergedPrCache) {
 }
 async function createWorktreeReaperRealDeps() {
   const { getPaneCwdAsync } = await import("./lib/tmux-status.js");
-  const { getGitRootAsync, isWorktreeDirtyAsync, GIT_CRYPT_SMUDGE_BYPASS_ARGS } = await import("./worktree-XWVNDBRD.js");
+  const { getGitRootAsync, isWorktreeDirtyAsync, GIT_CRYPT_SMUDGE_BYPASS_ARGS } = await import("./worktree-GS4ODQ4C.js");
   const { statSync: statSync3 } = await import("fs");
   const { basename: basename2 } = await import("path");
   const { promisify: promisify2 } = await import("util");
@@ -4070,7 +4070,7 @@ function shouldNotifyTaskGroupViaIntercom(executionMode) {
 }
 async function pollTaskGroupBarriers() {
   try {
-    const { checkAndFireBarriers } = await import("./tasks-crud-2GHKIZOM.js");
+    const { checkAndFireBarriers } = await import("./tasks-crud-MB7WXGPW.js");
     const firedGroupIds = await checkAndFireBarriers();
     if (firedGroupIds.length === 0) return 0;
     const { getClient } = await import("./lib/database.js");

package/dist/{chunk-HRKN3DQE.js → chunk-PONGX3YG.js}

@@ -1,9 +1,9 @@
 import {
   MultiAgentOrchestrator
-} from "./chunk-SGR4ZQAV.js";
+} from "./chunk-T7W75LII.js";
 import {
   createTokenBudgetMiddleware
-} from "./chunk-6JLVCMKH.js";
+} from "./chunk-2LJ2GZEE.js";
 import {
   createQuietRenderer,
   createTerminalRenderer,
@@ -212,7 +212,7 @@ function createExeOSHooks(config) {
         );
       }
       try {
-        const { listBehaviors } = await import("./behaviors-7AOK44QK.js");
+        const { listBehaviors } = await import("./behaviors-RUNSC5WI.js");
         const behaviors = await listBehaviors(config.agentId, config.projectName, 12);
         if (behaviors.length > 0) {
           process.stderr.write(
@@ -250,7 +250,7 @@ function createExeOSHooks(config) {
       const ALLOWED_RE = /^(Bash|Edit|Write|Read|Glob|Grep|Agent|mcp__.*)$/;
       if (!ALLOWED_RE.test(toolName)) return;
       try {
-        const { extractSemanticText } = await import("./content-extractor-OVD7PTSN.js");
+        const { extractSemanticText } = await import("./content-extractor-GWF2T7FK.js");
         const { writeMemory } = await import("./lib/store.js");
         const toolInput = block.input ?? {};
         const toolResponse = result.isError ? { error: result.content } : { output: result.content };
@@ -333,7 +333,7 @@ function createExeOSHooks(config) {
     async onSubagentStop(_reason) {
       try {
         const { getClient } = await import("./lib/database.js");
-        const { sessionScopeFilter } = await import("./task-scope-AMR3Z3DJ.js");
+        const { sessionScopeFilter } = await import("./task-scope-4EKZBTTM.js");
         const client = getClient();
         const ehScope = sessionScopeFilter();
         const tasks = await client.execute({
@@ -373,7 +373,7 @@ function createExeOSHooks(config) {
         setAt: (/* @__PURE__ */ new Date()).toISOString()
       });
       try {
-        const { writeNotification } = await import("./notifications-T5C2CVB3.js");
+        const { writeNotification } = await import("./notifications-75FVPJLY.js");
         await writeNotification({
           agentId: config.agentId,
           agentRole: "employee",
@@ -444,7 +444,7 @@ function createExeOSHooks(config) {
         try {
           const { writeMemory, flushBatch } = await import("./lib/store.js");
           const { getClient } = await import("./lib/database.js");
-          const { sessionScopeFilter: cpScopeFilter } = await import("./task-scope-AMR3Z3DJ.js");
+          const { sessionScopeFilter: cpScopeFilter } = await import("./task-scope-4EKZBTTM.js");
           const client = getClient();
           const cpScope = cpScopeFilter();
           const tasks = await client.execute({

package/dist/{chunk-JR3GTBV3.js → chunk-QH2V67NX.js}

@@ -212,7 +212,7 @@ async function main(args) {
   console.log("[health-gate] Starting rollback...");
   restorePreDeployBackup();
   try {
-    const { rollbackStackUpdate, defaultStackPaths } = await import("./stack-update-C5YKHE7A.js");
+    const { rollbackStackUpdate, defaultStackPaths } = await import("./stack-update-7ET7S3ED.js");
     const paths = defaultStackPaths();
     await rollbackStackUpdate({
       manifestRef: paths.manifestRef,

package/dist/{chunk-4O7OUBEX.js → chunk-QKHQTHE6.js}

@@ -1,6 +1,6 @@
 import {
   isCrdtSyncEnabled
-} from "./chunk-BPBEJD7U.js";
+} from "./chunk-B55U5BKF.js";
 import {
   compress,
   decompress
@@ -8,14 +8,14 @@ import {
 import {
   orgMembershipsPath,
   orgModeActive
-} from "./chunk-K7DAE2HO.js";
+} from "./chunk-FOZSHNET.js";
 import {
   activeRecipientPubKeys,
   grantsPath,
   isGrantsMacPrimed,
   primeGrantsMacKey,
   warnActiveMonitoringOnce
-} from "./chunk-TCV3WA5I.js";
+} from "./chunk-3WNDI5KT.js";
 import {
   assertGateAndGrantsColocated
 } from "./chunk-NPXIS2RY.js";
@@ -25,7 +25,7 @@ import {
 import {
   GHOST_BEHAVIOR_SQL,
   isGhostBehaviorRow
-} from "./chunk-F5ZRHLG5.js";
+} from "./chunk-NYV4A5IG.js";
 import {
   isTransientDaemonTransportError,
   retryOnDaemonTransportError
@@ -36,17 +36,17 @@ import {
   encryptSyncBlob,
   initSyncCrypto,
   isSyncCryptoInitialized
-} from "./chunk-OFT5KSBM.js";
+} from "./chunk-54Q7M2AG.js";
 import {
   getClient,
   isGenuineCorruptionError,
   loadEmployees,
   registerBinSymlinks,
   saveEmployees
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-LBEBSXZA.js";
 import {
   loadDeviceId
-} from "./chunk-DIKLSAJE.js";
+} from "./chunk-KNEEOZWN.js";
 import {
   EXE_AI_DIR
 } from "./chunk-MMS2HBRT.js";
@@ -69,13 +69,23 @@ var _monitoredWriter = null;
 var _resolved = null;
 var _founderModuleLinked = false;
 var _lastSealOrgMode = null;
+var _writerLink = null;
+function linkMonitoredWriter() {
+  if (_monitoredWriter) return Promise.resolve();
+  if (!_writerLink) {
+    _writerLink = import("./founder-monitor-envelope-HMPPUBUT.js").then((mod) => {
+      _monitoredWriter = mod.encryptMonitoredSyncBlob;
+      _founderModuleLinked = true;
+    }).catch((err) => {
+      _writerLink = null;
+      throw err;
+    });
+  }
+  return _writerLink;
+}
 async function getSyncCipher() {
   if (_resolved) return _resolved;
-  if (!orgModeActive()) {
-    const mod = await import("./founder-monitor-envelope-TLOC4UYG.js");
-    _monitoredWriter = mod.encryptMonitoredSyncBlob;
-    _founderModuleLinked = true;
-  }
+  if (!orgModeActive()) await linkMonitoredWriter();
   _resolved = {
     seal: (data, context) => {
       assertGateAndGrantsColocated(orgMembershipsPath(), grantsPath());
@@ -86,8 +96,10 @@ async function getSyncCipher() {
       if (recipients.length === 0) return encryptSyncBlob(data, context);
       if (!_monitoredWriter) {
         process.stderr.write(
-          "[exe-os] \u26A0 monitoring grants are active but the monitor writer is not linked in this process \u2014 emitting a device-only (v=1) blob. Restart exe-os to enable monitoring.\n"
+          "[exe-os] \u26A0 monitoring grants are active but the monitor writer is not linked in this process \u2014 emitting a device-only (v=1) blob for this record and linking the writer now; subsequent records will be monitored.\n"
         );
+        void linkMonitoredWriter().catch(() => {
+        });
         return encryptSyncBlob(data, context);
       }
       warnActiveMonitoringOnce(recipients);
@@ -1283,7 +1295,7 @@ async function cloudSync(config, options) {
           })
         };
         if (shouldUseCrdtMergeForCloudSync()) {
-          const { initCrdtDoc, importExistingMemories, readAllMemories } = await import("./crdt-sync-IX43KVQ3.js");
+          const { initCrdtDoc, importExistingMemories, readAllMemories } = await import("./crdt-sync-Z62SWOKD.js");
           initCrdtDoc();
           importExistingMemories(
             pullResult.records.map((rec) => ({
@@ -1844,7 +1856,7 @@ async function cloudSync(config, options) {
     const artifactResult = { pushed: 0, frozen: false, remaining: 0 };
     if (!shouldSkip("artifacts")) {
       try {
-        const { flushArtifactBackups } = await import("./artifact-backup-6O4FNYPS.js");
+        const { flushArtifactBackups } = await import("./artifact-backup-STQQZDZ5.js");
         const flushed = await flushArtifactBackups(cloudArtifactTransport(config));
         artifactResult.pushed = flushed.pushed;
         artifactResult.frozen = flushed.frozen;