@askexenow/exe-os 0.9.409 → 0.9.410

package/dist/{chunk-XAGIZVYI.js → chunk-WSYIQKZ6.js}

@@ -1,20 +1,9 @@
-import {
-  ensureAgentSymlink
-} from "./chunk-ESO5JDOT.js";
-import {
-  ensureWorktree,
-  ensureWorktreeAsync,
-  getGitRoot,
-  getMainRepoRoot,
-  isInsideGitRepo,
-  isWorktreeDirty
-} from "./chunk-VYKXRSHU.js";
 import {
   runBudgetedSweep
 } from "./chunk-ZKGWHT56.js";
 import {
   resolveRowVisibility
-} from "./chunk-KBHK2WNO.js";
+} from "./chunk-5F3E57TQ.js";
 import {
   LEASE_MINUTES,
   isLeaseExpired,
@@ -35,9 +24,8 @@ import {
   writeMemoryViaDaemon
 } from "./chunk-QDMZ5DX2.js";
 import {
-  listSessions,
-  registerSession
-} from "./chunk-HFXBL7XE.js";
+  listSessions
+} from "./chunk-6T5RC3L4.js";
 import {
   getTransport
 } from "./chunk-VI4ATC6I.js";
@@ -46,7 +34,7 @@ import {
 } from "./chunk-6L4VIYLZ.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-SA66WRBT.js";
+} from "./chunk-WLV27PAO.js";
 import {
   appendDispatchJournalEvent,
   releaseDispatchClaim,
@@ -55,30 +43,22 @@ import {
 } from "./chunk-T5SM4RXY.js";
 import {
   incrementSkillSuccess
-} from "./chunk-FJKUFMNF.js";
+} from "./chunk-ASA2UJDH.js";
 import {
   assertRuntimeModelCompatible,
   getAgentRuntime,
-  normalizeCcModelName,
   resolveSpawnRuntimeConfig
 } from "./chunk-IVXELUEQ.js";
 import {
   PlanLimitError,
   assertEmployeeLimitSync
-} from "./chunk-EIM7OGTD.js";
-import {
-  AGENT_IDENTITY_TOKEN_ENV,
-  getDaemonAgentIdentityBroker
-} from "./chunk-PCV52RYM.js";
+} from "./chunk-2AXJRXA6.js";
 import {
   isValidSessionScope
 } from "./chunk-BTSWFMEH.js";
 import {
   getProjectName
-} from "./chunk-4Q7H3TO7.js";
-import {
-  expandDualPrefixTools
-} from "./chunk-HYZV25LY.js";
+} from "./chunk-J6RTX7XT.js";
 import {
   getSessionKey
 } from "./chunk-CVYC6DUW.js";
@@ -99,176 +79,41 @@ import {
   getEmployee,
   isCoordinatorName,
   loadEmployees,
-  loadEmployeesState,
   loadEmployeesSync,
   offloadReadIfMain,
   offloadReadQuery
-} from "./chunk-3MDUKF3N.js";
-import {
-  RUNTIME_TABLE
-} from "./chunk-UWGQNJIE.js";
+} from "./chunk-LBEBSXZA.js";
 import {
   loadDeviceId
-} from "./chunk-DIKLSAJE.js";
+} from "./chunk-KNEEOZWN.js";
 import {
   EXE_AI_DIR
 } from "./chunk-MMS2HBRT.js";
 import {
-  atomicWriteJsonSync,
-  atomicWriteSync
+  atomicWriteJsonSync
 } from "./chunk-HSGBZSCA.js";
 
 // src/lib/tmux-routing.ts
-import { execFile as execFile2, execFileSync as execFileSync3 } from "child_process";
-import { promisify as promisify3 } from "util";
-import { readFileSync as readFileSync6, writeFileSync as writeFileSync5, mkdirSync as mkdirSync6, existsSync as existsSync9, appendFileSync as appendFileSync3, openSync as openSync2, closeSync as closeSync2, writeSync as writeSync2, renameSync as renameSync3, constants as constants2, statSync as statSync4, realpathSync as realpathSync2 } from "fs";
-import path8 from "path";
-import os6 from "os";
-import { fileURLToPath } from "url";
-
-// src/lib/cc-help-cache.ts
-import { execSync } from "child_process";
-import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
-import path from "path";
-import os from "os";
-var CACHE_DIR = path.join(os.homedir(), ".exe-os", "cache");
-var _cached = null;
-function getCcVersion() {
-  try {
-    const out = execSync("claude --version 2>/dev/null || echo unknown", {
-      encoding: "utf8",
-      timeout: 5e3
-    }).trim();
-    const m = out.match(/(\d+\.\d+\.\d+)/);
-    return m ? m[1] : "unknown";
-  } catch {
-    return "unknown";
-  }
-}
-function getCcHelpOutputCached() {
-  if (_cached !== null) return _cached;
-  const version = getCcVersion();
-  const cacheFile = path.join(CACHE_DIR, `cc-help-${version}.txt`);
-  if (existsSync(cacheFile)) {
-    try {
-      _cached = readFileSync(cacheFile, "utf8");
-      return _cached;
-    } catch {
-    }
-  }
-  let helpText = "";
-  try {
-    const result = execSync("claude --help 2>&1", {
-      encoding: "utf8",
-      timeout: 5e3
-    });
-    helpText = typeof result === "string" ? result : "";
-  } catch {
-    helpText = "";
-  }
-  try {
-    mkdirSync(CACHE_DIR, { recursive: true });
-    writeFileSync(cacheFile, helpText, "utf8");
-  } catch {
-  }
-  _cached = helpText;
-  return _cached;
-}
-function _resetCcHelpCache() {
-  _cached = null;
-}
-
-// src/lib/cc-agent-support.ts
-function _resetCcAgentSupportCache() {
-  _resetCcHelpCache();
-}
-function claudeSupportsAgentFlag() {
-  return /(^|\s)--agent(\b|=)/.test(getCcHelpOutputCached());
-}
-
-// src/lib/provider-table.ts
-var PROVIDER_TABLE = {
-  opencode: {
-    baseUrl: "https://opencode.ai/zen/go",
-    apiKeyEnv: "OPENCODE_API_KEY",
-    defaultModel: "kimi-k2.7-code"
-  },
-  glm: {
-    baseUrl: "https://api.z.ai/api/anthropic",
-    apiKeyEnv: "ZAI_API_KEY",
-    defaultModel: "glm-5.3",
-    authVar: "ANTHROPIC_AUTH_TOKEN",
-    apiKeyFallbackFile: ".glm-mcp/config.json",
-    contextByModel: {
-      // glm-5.3 released 2026-08-14 (confirmed real via
-      // api.z.ai/api/paas/v4/models — Z.ai's endpoint validates model ids and
-      // this one isn't rejected). Z.ai's model-list/model-detail endpoints
-      // don't expose context length via API, so this 1M figure is founder-
-      // confirmed (2026-08-24), not independently API-verified — if that
-      // ever turns out wrong, don't silently "fix" it back down, ask first.
-      "glm-5.3": 1e6,
-      "glm-5.2": 1e6,
-      "glm-5": 2e5,
-      "glm-5-turbo": 2e5,
-      "glm-4.7": 2e5,
-      "glm-4.7-flash": 2e5
-    }
-  },
-  kimi: {
-    // Kimi subscription via kimi-proxy (~/.kimi-code/kimi-proxy.mjs, launchd
-    // com.exeai.kimi-proxy, port 8791). The subscription API
-    // https://api.kimi.ai/coding/v1/messages speaks NATIVE Anthropic protocol
-    // but authenticates with the Kimi CLI's OAuth token (15-min expiry,
-    // refresh via auth.kimi.ai/v1/oauth/token — client_id 17e5f671-…,
-    // anthropic-beta oauth-2025-04-20; extracted from @moonshot-ai/kimi-code
-    // 2.0.2 dist/main.mjs). The proxy handles refresh + Cloudflare UA
-    // fingerprinting (upstream 403s any non-kimi UA) and is a pure byte
-    // passthrough, so Claude Code just points at 127.0.0.1:8791 and CC's
-    // /v1/messages lands on /coding/v1/messages. Verified E2E 2026-09-22.
-    //
-    // Model ids are the Kimi Code registry's wire ids (NOT display names):
-    // kimi-for-coding = "K2.8 Preview" (1M context, default per founder
-    // 2026-09-22), kimi-for-coding-highspeed = "K2.7 Code Highspeed" (256k),
-    // k3-256k. K3's 1M variant (wire id "k3") is deliberately NOT declared —
-    // founder policy 2026-09-22: never use K3 1M, it burns 2x tokens; K3
-    // work goes through k3-256k. The fallback api-key.json exists only to
-    // satisfy the launcher's key check — the proxy owns real credentials.
-    baseUrl: "http://127.0.0.1:8791",
-    apiKeyEnv: "KIMI_API_KEY",
-    defaultModel: "kimi-for-coding",
-    authVar: "ANTHROPIC_AUTH_TOKEN",
-    apiKeyFallbackFile: ".kimi-code/api-key.json",
-    contextByModel: {
-      "kimi-for-coding": 1e6,
-      "kimi-for-coding-highspeed": 262144,
-      "k3-256k": 262144
-    }
-  }
-};
-var DEFAULT_PROVIDER = "default";
-function detectActiveProvider(env = process.env) {
-  const baseUrl = env.ANTHROPIC_BASE_URL;
-  if (!baseUrl) return DEFAULT_PROVIDER;
-  for (const [name, cfg] of Object.entries(PROVIDER_TABLE)) {
-    if (cfg.baseUrl === baseUrl) return name;
-  }
-  return DEFAULT_PROVIDER;
-}
+import { execFile } from "child_process";
+import { promisify as promisify2 } from "util";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync4, mkdirSync as mkdirSync5, existsSync as existsSync7, appendFileSync as appendFileSync3, openSync as openSync2, closeSync as closeSync2, writeSync as writeSync2, renameSync as renameSync3, constants as constants2, statSync as statSync4 } from "fs";
+import path6 from "path";
+import os5 from "os";
 
 // src/lib/intercom-queue.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, renameSync, existsSync as existsSync3, mkdirSync as mkdirSync2, appendFileSync, openSync, closeSync, writeSync, unlinkSync as unlinkSync2, constants, statSync } from "fs";
-import path3 from "path";
-import os3 from "os";
+import { readFileSync as readFileSync2, writeFileSync, renameSync, existsSync as existsSync2, mkdirSync, appendFileSync, openSync, closeSync, writeSync, unlinkSync as unlinkSync2, constants, statSync } from "fs";
+import path2 from "path";
+import os2 from "os";
 
 // src/lib/notifications.ts
 import crypto from "crypto";
-import path2 from "path";
-import os2 from "os";
+import path from "path";
+import os from "os";
 import {
-  readFileSync as readFileSync2,
+  readFileSync,
   readdirSync,
   unlinkSync,
-  existsSync as existsSync2,
+  existsSync,
   rmdirSync
 } from "fs";
 var CLEANUP_DAYS = 7;
@@ -415,9 +260,9 @@ function formatNotifications(notifications) {
   return lines.join("\n");
 }
 async function migrateJsonNotifications() {
-  const base = process.env.EXE_OS_DIR || process.env.EXE_MEM_DIR || path2.join(os2.homedir(), ".exe-os");
-  const notifDir = path2.join(base, "notifications");
-  if (!existsSync2(notifDir)) return 0;
+  const base = process.env.EXE_OS_DIR || process.env.EXE_MEM_DIR || path.join(os.homedir(), ".exe-os");
+  const notifDir = path.join(base, "notifications");
+  if (!existsSync(notifDir)) return 0;
   let migrated = 0;
   try {
     const files = readdirSync(notifDir).filter((f) => f.endsWith(".json"));
@@ -425,8 +270,8 @@ async function migrateJsonNotifications() {
     const client = getClient();
     for (const file of files) {
       try {
-        const filePath = path2.join(notifDir, file);
-        const data = JSON.parse(readFileSync2(filePath, "utf8"));
+        const filePath = path.join(notifDir, file);
+        const data = JSON.parse(readFileSync(filePath, "utf8"));
         await client.execute({
           sql: `INSERT OR IGNORE INTO notifications (id, agent_id, agent_role, event, project, summary, task_file, session_scope, read, created_at)
                 VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
@@ -495,14 +340,14 @@ function formatTimeAgo(timestamp) {
 }
 
 // src/lib/intercom-queue.ts
-var QUEUE_PATH = path3.join(os3.homedir(), ".exe-os", "intercom-queue.json");
+var QUEUE_PATH = path2.join(os2.homedir(), ".exe-os", "intercom-queue.json");
 var QUEUE_LOCK_PATH = `${QUEUE_PATH}.lock`;
 var MAX_RETRIES = 10;
 var TTL_MS = 60 * 60 * 1e3;
 var HARD_TTL_MS = 2 * TTL_MS;
 function ensureDir() {
-  const dir = path3.dirname(QUEUE_PATH);
-  if (!existsSync3(dir)) mkdirSync2(dir, { recursive: true });
+  const dir = path2.dirname(QUEUE_PATH);
+  if (!existsSync2(dir)) mkdirSync(dir, { recursive: true });
 }
 function acquireQueueLock() {
   ensureDir();
@@ -517,7 +362,7 @@ function acquireQueueLock() {
     } catch (err) {
       if (err.code !== "EEXIST") return false;
       try {
-        const lock = JSON.parse(readFileSync3(QUEUE_LOCK_PATH, "utf8"));
+        const lock = JSON.parse(readFileSync2(QUEUE_LOCK_PATH, "utf8"));
         if (Date.now() - Number(lock.timestamp ?? 0) > 3e4) unlinkSync2(QUEUE_LOCK_PATH);
       } catch {
         try {
@@ -538,8 +383,8 @@ function releaseQueueLock() {
 }
 function readQueue() {
   try {
-    if (!existsSync3(QUEUE_PATH)) return [];
-    return JSON.parse(readFileSync3(QUEUE_PATH, "utf8"));
+    if (!existsSync2(QUEUE_PATH)) return [];
+    return JSON.parse(readFileSync2(QUEUE_PATH, "utf8"));
   } catch {
     return [];
   }
@@ -547,7 +392,7 @@ function readQueue() {
 function writeQueue(queue) {
   ensureDir();
   const tmp = `${QUEUE_PATH}.tmp`;
-  writeFileSync2(tmp, JSON.stringify(queue, null, 2), { mode: 384 });
+  writeFileSync(tmp, JSON.stringify(queue, null, 2), { mode: 384 });
   renameSync(tmp, QUEUE_PATH);
 }
 function queueIntercom(targetSession, reason, intercomReason = "nudge") {
@@ -783,7 +628,7 @@ function clearQueueForAgent(agentName) {
 function _resetDrainGuard() {
   _draining = false;
 }
-var INTERCOM_LOG = path3.join(os3.homedir(), ".exe-os", "intercom.log");
+var INTERCOM_LOG = path2.join(os2.homedir(), ".exe-os", "intercom.log");
 var INTERCOM_LOG_MAX_BYTES = 1024 * 1024;
 function logQueue(msg) {
   const line = `[${(/* @__PURE__ */ new Date()).toISOString()}] [queue] ${msg}
@@ -791,7 +636,7 @@ function logQueue(msg) {
   process.stderr.write(`[intercom-queue] ${msg}
 `);
   try {
-    if (existsSync3(INTERCOM_LOG) && statSync(INTERCOM_LOG).size > INTERCOM_LOG_MAX_BYTES) {
+    if (existsSync2(INTERCOM_LOG) && statSync(INTERCOM_LOG).size > INTERCOM_LOG_MAX_BYTES) {
       renameSync(INTERCOM_LOG, `${INTERCOM_LOG}.1`);
     }
     appendFileSync(INTERCOM_LOG, line);
@@ -803,16 +648,16 @@ function logQueue(msg) {
 import { unlinkSync as unlinkSync4 } from "fs";
 
 // src/lib/routing-log.ts
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync3, existsSync as existsSync4, statSync as statSync2, renameSync as renameSync2 } from "fs";
-import path4 from "path";
-import os4 from "os";
-var LOG_DIR = path4.join(os4.homedir(), ".exe-os", "logs");
-var LOG_FILE = path4.join(LOG_DIR, "routing.log");
+import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync2, existsSync as existsSync3, statSync as statSync2, renameSync as renameSync2 } from "fs";
+import path3 from "path";
+import os3 from "os";
+var LOG_DIR = path3.join(os3.homedir(), ".exe-os", "logs");
+var LOG_FILE = path3.join(LOG_DIR, "routing.log");
 var dirChecked = false;
 var MAX_LOG_BYTES = 5 * 1024 * 1024;
 function ensureDir2() {
   if (dirChecked) return;
-  if (!existsSync4(LOG_DIR)) mkdirSync3(LOG_DIR, { recursive: true });
+  if (!existsSync3(LOG_DIR)) mkdirSync2(LOG_DIR, { recursive: true });
   dirChecked = true;
 }
 function rotateIfNeeded() {
@@ -910,21 +755,21 @@ function logTaskDispatch(opts) {
 }
 
 // src/lib/tasks-review.ts
-import path6 from "path";
-import { existsSync as existsSync7, readdirSync as readdirSync2, statSync as statSync3, unlinkSync as unlinkSync3 } from "fs";
+import path5 from "path";
+import { existsSync as existsSync6, readdirSync as readdirSync2, statSync as statSync3, unlinkSync as unlinkSync3 } from "fs";
 import { homedir as homedir2 } from "os";
 
 // src/lib/tasks-crud.ts
 import crypto2 from "crypto";
-import path5 from "path";
-import os5 from "os";
-import { execSync as execSync2, execFile as execFileCb, execFileSync } from "child_process";
+import path4 from "path";
+import os4 from "os";
+import { execSync, execFile as execFileCb, execFileSync } from "child_process";
 import { promisify } from "util";
 import { mkdir, writeFile, appendFile, readdir, unlink, stat } from "fs/promises";
-import { existsSync as existsSync6, readFileSync as readFileSync5, mkdirSync as mkdirSync5, writeFileSync as writeFileSync4 } from "fs";
+import { existsSync as existsSync5, readFileSync as readFileSync4, mkdirSync as mkdirSync4, writeFileSync as writeFileSync3 } from "fs";
 
 // src/lib/completion-nudge-dedup.ts
-import { existsSync as existsSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync3, mkdirSync as mkdirSync4 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync3, writeFileSync as writeFileSync2, mkdirSync as mkdirSync3 } from "fs";
 import { join, dirname } from "path";
 import { homedir } from "os";
 var COMPLETION_NUDGE_COOLDOWN_MS = Number(process.env.EXE_COMPLETION_NUDGE_COOLDOWN_MS) || 6 * 60 * 60 * 1e3;
@@ -943,8 +788,8 @@ function load(ledger) {
   if (ledger.state) return ledger.state;
   ledger.state = {};
   try {
-    if (existsSync5(ledger.path)) {
-      const raw = JSON.parse(readFileSync4(ledger.path, "utf8"));
+    if (existsSync4(ledger.path)) {
+      const raw = JSON.parse(readFileSync3(ledger.path, "utf8"));
       if (raw && typeof raw === "object" && !Array.isArray(raw)) {
         for (const [k, v] of Object.entries(raw)) {
           if (typeof v === "number") ledger.state[k] = v;
@@ -957,8 +802,8 @@ function load(ledger) {
 }
 function persist(ledger, state) {
   try {
-    mkdirSync4(dirname(ledger.path), { recursive: true });
-    writeFileSync3(ledger.path, JSON.stringify(state), "utf8");
+    mkdirSync3(dirname(ledger.path), { recursive: true });
+    writeFileSync2(ledger.path, JSON.stringify(state), "utf8");
   } catch {
   }
 }
@@ -1011,6 +856,7 @@ function clearStaleReviewEscalation(taskId) {
 // src/lib/tasks-crud.ts
 var execFileAsync = promisify(execFileCb);
 var DEFAULT_TASK_PRIORITY = "p1";
+var DEFAULT_NEW_TASK_EXECUTION_MODE = "checklist";
 function normalizeTaskPriority(value) {
   const v = typeof value === "string" ? value.trim().toLowerCase() : "";
   if (v === "p0" || v === "p1" || v === "p2") return v;
@@ -1531,8 +1377,8 @@ ${f.context}
 `;
 }
 async function writeTaskMarkdownAtomic(finalPath, content) {
-  const dir = path5.dirname(finalPath);
-  if (!existsSync6(dir)) await mkdir(dir, { recursive: true });
+  const dir = path4.dirname(finalPath);
+  if (!existsSync5(dir)) await mkdir(dir, { recursive: true });
   const tmpPath = `${finalPath}.${crypto2.randomBytes(6).toString("hex")}.tmp`;
   try {
     await writeFile(tmpPath, content, "utf-8");
@@ -1610,7 +1456,7 @@ async function createTaskCore(input, deps = {}) {
         if (isCoordinatorSession) {
           earlySessionScope = resolved;
         } else {
-          const { getSessionProject } = await import("./session-scope-5CDRHV75.js");
+          const { getSessionProject } = await import("./session-scope-BZALGKYZ.js");
           const sessionProject = getSessionProject(resolved);
           if (sessionProject && sessionProject !== input.projectName) {
             scopeMismatchWarning = `session/project mismatch: session "${resolved}" owns "${sessionProject}" but task targets "${input.projectName}". Routed to default scope.`;
@@ -1681,8 +1527,8 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
   }
   if (input.baseDir) {
     try {
-      await mkdir(path5.join(input.baseDir, "exe", "output"), { recursive: true });
-      await mkdir(path5.join(input.baseDir, "exe", "research"), { recursive: true });
+      await mkdir(path4.join(input.baseDir, "exe", "output"), { recursive: true });
+      await mkdir(path4.join(input.baseDir, "exe", "research"), { recursive: true });
       await ensureArchitectureDoc(input.baseDir, input.projectName);
       await ensureGitignoreExe(input.baseDir);
     } catch {
@@ -1712,7 +1558,7 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
   }
   const groupId = input.groupId ?? null;
   if (groupId) {
-    const requestedExecutionMode = input.executionMode ?? "durable_tmux";
+    const requestedExecutionMode = input.executionMode ?? DEFAULT_NEW_TASK_EXECUTION_MODE;
     const groupCheck = await client.execute({
       sql: `SELECT id, execution_mode FROM task_groups WHERE id = ? AND session_scope IS ?`,
       args: [groupId, sessionScope]
@@ -1757,7 +1603,7 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
         sessionScope,
         input.spawnRuntime ?? null,
         input.spawnModel ?? null,
-        input.executionMode ?? "durable_tmux",
+        input.executionMode ?? DEFAULT_NEW_TASK_EXECUTION_MODE,
         groupId,
         loadDeviceId(),
         input.founderId ?? null,
@@ -1781,7 +1627,7 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
       if (existing.rows.length > 0) {
         const r = existing.rows[0];
         const persistedMode = r.execution_mode === "checklist" ? "checklist" : "durable_tmux";
-        const requestedMode = input.executionMode ?? "durable_tmux";
+        const requestedMode = input.executionMode ?? DEFAULT_NEW_TASK_EXECUTION_MODE;
         if (persistedMode !== requestedMode) {
           throw new Error(
             `Idempotency execution_mode mismatch: existing task is ${persistedMode}, requested ${requestedMode}`
@@ -1862,8 +1708,8 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
   });
   if (input.baseDir) {
     try {
-      const EXE_OS_DIR = path5.join(os5.homedir(), ".exe-os");
-      const mdPath = path5.join(EXE_OS_DIR, taskFile);
+      const EXE_OS_DIR = path4.join(os4.homedir(), ".exe-os");
+      const mdPath = path4.join(EXE_OS_DIR, taskFile);
       const reviewer = input.reviewer ?? input.assignedBy;
       const mdContent = renderTaskMarkdown({
         id,
@@ -1880,7 +1726,7 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
       });
       await writeTaskMarkdownAtomic(mdPath, mdContent);
       try {
-        const { injectBehaviors } = await import("./behavior-injection-NRXTNROW.js");
+        const { injectBehaviors } = await import("./behavior-injection-CTSIKHTH.js");
         await injectBehaviors({
           taskFile: mdPath,
           title: input.title,
@@ -1921,7 +1767,7 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
     tokensWarnedAt: null,
     spawnRuntime: input.spawnRuntime ?? null,
     spawnModel: input.spawnModel ?? null,
-    executionMode: input.executionMode ?? "durable_tmux",
+    executionMode: input.executionMode ?? DEFAULT_NEW_TASK_EXECUTION_MODE,
     sessionScope
   };
 }
@@ -1975,7 +1821,7 @@ async function buildTaskRowsStatement(opts) {
   }
   if (opts.founderId !== null) {
     try {
-      const { founderScopeFilter } = await import("./founder-context-QIXDZIJX.js");
+      const { founderScopeFilter } = await import("./founder-context-DVHSVBM5.js");
       const founderFilter = founderScopeFilter(opts.founderId);
       const cleaned = founderFilter.sql.replace(/^\s*AND\s+/, "");
       conditions.push(cleaned);
@@ -2191,7 +2037,7 @@ function refreshTmuxAliveCacheSync() {
   _tmuxAliveSessions = /* @__PURE__ */ new Set();
   _tmuxAlivePanes = /* @__PURE__ */ new Set();
   try {
-    const output = execSync2(tmuxCmd("list-panes -a -F '#{session_name}	#{pane_id}	#{pane_dead}'"), {
+    const output = execSync(tmuxCmd("list-panes -a -F '#{session_name}	#{pane_id}	#{pane_dead}'"), {
       timeout: 2e3,
       encoding: "utf8",
       stdio: ["pipe", "pipe", "pipe"]
@@ -2465,12 +2311,12 @@ function checkStaleCompletion(taskContext, taskCreatedAt) {
   if (!DELEGATION_KEYWORDS.test(taskContext)) return null;
   try {
     const since = new Date(taskCreatedAt).toISOString();
-    const branch = execSync2(
+    const branch = execSync(
       "git rev-parse --abbrev-ref HEAD 2>/dev/null",
       { encoding: "utf8", timeout: 3e3 }
     ).trim();
     const branchArg = branch && branch !== "HEAD" ? branch : "";
-    const commitCount = execSync2(
+    const commitCount = execSync(
       `git log --oneline --since="${since}" ${branchArg} 2>/dev/null | wc -l`,
       { encoding: "utf8", timeout: 5e3 }
     ).trim();
@@ -3377,8 +3223,8 @@ ${input.result ?? ""}`;
       try {
         const scope = row.session_scope ? String(row.session_scope) : "default";
         const dir = taskSignalDir(scope);
-        mkdirSync5(dir, { recursive: true });
-        writeFileSync4(
+        mkdirSync4(dir, { recursive: true });
+        writeFileSync3(
           reviewSignalPath(scope, reviewer, taskId),
           JSON.stringify({
             task_id: taskId,
@@ -3663,9 +3509,9 @@ async function deleteTaskCore(taskId, _baseDir) {
   return { taskFile, assignedTo, assignedBy, taskSlug };
 }
 async function ensureArchitectureDoc(baseDir, projectName) {
-  const archPath = path5.join(baseDir, "exe", "ARCHITECTURE.md");
+  const archPath = path4.join(baseDir, "exe", "ARCHITECTURE.md");
   try {
-    if (existsSync6(archPath)) return;
+    if (existsSync5(archPath)) return;
     const template = [
       `# ${projectName} \u2014 System Architecture`,
       "",
@@ -3699,10 +3545,10 @@ async function ensureArchitectureDoc(baseDir, projectName) {
 }
 var GITIGNORE_EXE_BLOCK = "# Employee task assignments (private)\n# exe/output/ stays tracked \u2014 it is the sanctioned deliverable handoff\n# location (bug 4c8d4c4b). Never collapse this back to a blanket /exe/.\n/exe/*\n!/exe/output/\n";
 async function ensureGitignoreExe(baseDir) {
-  const gitignorePath = path5.join(baseDir, ".gitignore");
+  const gitignorePath = path4.join(baseDir, ".gitignore");
   try {
-    if (existsSync6(gitignorePath)) {
-      const content = readFileSync5(gitignorePath, "utf-8");
+    if (existsSync5(gitignorePath)) {
+      const content = readFileSync4(gitignorePath, "utf-8");
       if (/^\/?exe\/\*$/m.test(content) && /^!\/?exe\/output\/?$/m.test(content)) return;
       if (/^\/?exe\/?$/m.test(content)) {
         const narrowed = content.replace(/^\/?exe\/?$/m, "/exe/*\n!/exe/output/");
@@ -3727,7 +3573,7 @@ async function collectTaskMarkdownPaths(root) {
       return;
     }
     for (const entry of entries) {
-      const fullPath = path5.join(dir, entry.name);
+      const fullPath = path4.join(dir, entry.name);
       if (entry.isDirectory()) {
         await walkDir(fullPath);
       } else if (entry.name.endsWith(".md")) {
@@ -3740,14 +3586,14 @@ async function collectTaskMarkdownPaths(root) {
 }
 var TASK_FILE_CONFLICT_MARKER_SUFFIX = ".conflict";
 async function cleanOrphanedTaskFiles() {
-  const EXE_TASKS_DIR = path5.join(os5.homedir(), ".exe-os", "tasks");
-  if (!existsSync6(EXE_TASKS_DIR)) return 0;
+  const EXE_TASKS_DIR = path4.join(os4.homedir(), ".exe-os", "tasks");
+  if (!existsSync5(EXE_TASKS_DIR)) return 0;
   let cleaned = 0;
   const paths = await collectTaskMarkdownPaths(EXE_TASKS_DIR);
   await runBudgetedSweep(paths, async (fullPath) => {
-    const entryName = path5.basename(fullPath);
-    if (existsSync6(`${fullPath}${TASK_FILE_CONFLICT_MARKER_SUFFIX}`)) return;
-    const relativePath = path5.relative(path5.join(os5.homedir(), ".exe-os"), fullPath);
+    const entryName = path4.basename(fullPath);
+    if (existsSync5(`${fullPath}${TASK_FILE_CONFLICT_MARKER_SUFFIX}`)) return;
+    const relativePath = path4.relative(path4.join(os4.homedir(), ".exe-os"), fullPath);
     try {
       const result = await offloadReadQuery("SELECT id FROM tasks WHERE task_file = ? LIMIT 1", [relativePath]);
       if (result.rows.length === 0) {
@@ -3830,7 +3676,7 @@ async function createTaskGroup(input) {
       input.projectName ?? null,
       input.timeoutMinutes ?? 120,
       input.onPartialFailure ?? "notify",
-      input.executionMode ?? "durable_tmux",
+      input.executionMode ?? DEFAULT_NEW_TASK_EXECUTION_MODE,
       now,
       now
     ]
@@ -3851,7 +3697,7 @@ async function createTaskGroup(input) {
     projectName: input.projectName ?? null,
     timeoutMinutes: input.timeoutMinutes ?? 120,
     onPartialFailure: input.onPartialFailure ?? "notify",
-    executionMode: input.executionMode ?? "durable_tmux",
+    executionMode: input.executionMode ?? DEFAULT_NEW_TASK_EXECUTION_MODE,
     barrierFired: false,
     barrierFiredAt: null,
     aggregatedResult: null,
@@ -4114,8 +3960,8 @@ async function checkTaskFileConsistency() {
     for (const row of result.rows) {
       const taskFile = String(row.task_file ?? "");
       if (!taskFile) continue;
-      const fullPath = taskFile.startsWith("/") ? taskFile : path5.join(os5.homedir(), ".exe-os", taskFile);
-      if (existsSync6(fullPath)) continue;
+      const fullPath = taskFile.startsWith("/") ? taskFile : path4.join(os4.homedir(), ".exe-os", taskFile);
+      if (existsSync5(fullPath)) continue;
       let repaired = false;
       try {
         const mdContent = renderTaskMarkdown({
@@ -4269,10 +4115,10 @@ async function invalidateReviewArtifacts(row) {
   }
   try {
     const dir = taskSignalDir(row.session_scope || "default");
-    if (existsSync7(dir)) {
+    if (existsSync6(dir)) {
       for (const f of readdirSync2(dir)) {
         if (f.endsWith(`.review-${row.id}.pending`)) {
-          unlinkSync3(path6.join(dir, f));
+          unlinkSync3(path5.join(dir, f));
         }
       }
     }
@@ -4322,10 +4168,10 @@ async function closeReviewRows(client, rows, status, now) {
 function sweepExpiredSignalFiles(now = Date.now()) {
   let deleted = 0;
   try {
-    const base = path6.join(homedir2(), ".exe-os", "task-signals");
-    if (!existsSync7(base)) return 0;
+    const base = path5.join(homedir2(), ".exe-os", "task-signals");
+    if (!existsSync6(base)) return 0;
     for (const scopeName of readdirSync2(base)) {
-      const scopeDir = path6.join(base, scopeName);
+      const scopeDir = path5.join(base, scopeName);
       let entries;
       try {
         entries = readdirSync2(scopeDir);
@@ -4334,7 +4180,7 @@ function sweepExpiredSignalFiles(now = Date.now()) {
       }
       for (const f of entries) {
         if (!f.endsWith(".pending")) continue;
-        const filePath = path6.join(scopeDir, f);
+        const filePath = path5.join(scopeDir, f);
         try {
           if (now - statSync3(filePath).mtimeMs > SIGNAL_FILE_TTL_MS) {
             unlinkSync3(filePath);
@@ -4648,11 +4494,11 @@ async function cleanupReviewFile(row, taskFile, _baseDir) {
     );
   }
   try {
-    const cacheDir = path6.join(EXE_AI_DIR, "session-cache");
-    if (existsSync7(cacheDir)) {
+    const cacheDir = path5.join(EXE_AI_DIR, "session-cache");
+    if (existsSync6(cacheDir)) {
       for (const f of readdirSync2(cacheDir)) {
         if (f.startsWith("review-notified-")) {
-          unlinkSync3(path6.join(cacheDir, f));
+          unlinkSync3(path5.join(cacheDir, f));
         }
       }
     }
@@ -4660,193 +4506,6 @@ async function cleanupReviewFile(row, taskFile, _baseDir) {
   }
 }
 
-// src/lib/worktree-guard.ts
-import { execFile, execFileSync as execFileSync2 } from "child_process";
-import { promisify as promisify2 } from "util";
-import { existsSync as existsSync8, realpathSync } from "fs";
-import path7 from "path";
-var GIT_TIMEOUT_MS = 1e4;
-var execFileAsync2 = promisify2(execFile);
-function realpath(p) {
-  try {
-    return realpathSync(p);
-  } catch {
-    return p;
-  }
-}
-var defaultGitExecutor = async (args, cwd) => {
-  const { stdout } = await execFileAsync2("git", args, {
-    cwd,
-    encoding: "utf8",
-    timeout: GIT_TIMEOUT_MS
-  });
-  return String(stdout ?? "");
-};
-function listWorktreesPorcelain(repoRoot) {
-  try {
-    const output = execFileSync2("git", ["worktree", "list", "--porcelain"], {
-      cwd: repoRoot,
-      encoding: "utf8",
-      timeout: GIT_TIMEOUT_MS,
-      stdio: ["pipe", "pipe", "pipe"]
-    });
-    const worktrees = [];
-    let currentPath = "";
-    for (const line of output.split("\n")) {
-      if (line.startsWith("worktree ")) {
-        currentPath = line.slice("worktree ".length);
-      } else if (line.startsWith("branch ") && currentPath) {
-        const branch = line.slice("branch refs/heads/".length);
-        worktrees.push({ path: currentPath, branch });
-        currentPath = "";
-      }
-    }
-    return worktrees;
-  } catch {
-    return [];
-  }
-}
-function inferSessionOwner(wtPath, branch) {
-  const dirName = path7.basename(wtPath);
-  if (dirName && dirName !== ".worktrees") {
-    return dirName;
-  }
-  const dashIdx = branch.indexOf("-");
-  if (dashIdx > 0) {
-    return branch.slice(0, dashIdx);
-  }
-  return null;
-}
-function hasUnpushedCommits(wtPath, branch) {
-  for (const mainRef of ["main", "master"]) {
-    try {
-      const ahead = execFileSync2(
-        "git",
-        ["-C", wtPath, "rev-list", `${mainRef}..${branch}`, "--count"],
-        { encoding: "utf-8", timeout: GIT_TIMEOUT_MS, stdio: ["pipe", "pipe", "ignore"] }
-      ).trim();
-      return parseInt(ahead, 10) > 0;
-    } catch {
-    }
-  }
-  return true;
-}
-function checkWorktreeCollisions(repoPath) {
-  const repoRoot = getGitRoot(repoPath);
-  if (!repoRoot) return [];
-  const warnings = [];
-  const worktrees = listWorktreesPorcelain(repoRoot);
-  for (const wt of worktrees) {
-    if (!wt.path.includes("/.worktrees/")) continue;
-    if (!existsSync8(wt.path)) continue;
-    const owner = inferSessionOwner(wt.path, wt.branch);
-    const dirty = isWorktreeDirty(wt.path);
-    const hasCommits = hasUnpushedCommits(wt.path, wt.branch);
-    if (dirty) {
-      warnings.push({
-        worktreePath: wt.path,
-        branch: wt.branch,
-        sessionOwner: owner,
-        dirty: true,
-        reason: `Worktree has uncommitted changes (agent: ${owner ?? "unknown"}, branch: ${wt.branch})`
-      });
-    } else if (hasCommits) {
-      warnings.push({
-        worktreePath: wt.path,
-        branch: wt.branch,
-        sessionOwner: owner,
-        dirty: false,
-        reason: `Worktree has unpushed commits on branch ${wt.branch} (agent: ${owner ?? "unknown"})`
-      });
-    }
-  }
-  return warnings;
-}
-async function getGitRootAsync(dir, git) {
-  try {
-    const root = (await git(["rev-parse", "--show-toplevel"], dir)).trim();
-    return root ? realpath(root) : null;
-  } catch {
-    return null;
-  }
-}
-async function listWorktreesPorcelainAsync(repoRoot, git) {
-  try {
-    const output = await git(["worktree", "list", "--porcelain"], repoRoot);
-    const worktrees = [];
-    let currentPath = "";
-    for (const line of output.split("\n")) {
-      if (line.startsWith("worktree ")) {
-        currentPath = line.slice("worktree ".length);
-      } else if (line.startsWith("branch ") && currentPath) {
-        const branch = line.slice("branch refs/heads/".length);
-        worktrees.push({ path: currentPath, branch });
-        currentPath = "";
-      }
-    }
-    return worktrees;
-  } catch {
-    return [];
-  }
-}
-async function isWorktreeDirtyAsync(wtPath, git) {
-  try {
-    return (await git(["status", "--porcelain"], wtPath)).trim().length > 0;
-  } catch {
-    return true;
-  }
-}
-async function hasUnpushedCommitsAsync(wtPath, branch, git) {
-  for (const mainRef of ["main", "master"]) {
-    try {
-      const ahead = (await git(["-C", wtPath, "rev-list", `${mainRef}..${branch}`, "--count"], wtPath)).trim();
-      return parseInt(ahead, 10) > 0;
-    } catch {
-    }
-  }
-  return true;
-}
-async function checkWorktreeCollisionsAsync(repoPath, git = defaultGitExecutor) {
-  const worktreeListCache = /* @__PURE__ */ new Map();
-  const listWorktreesOnce = (root) => {
-    let cached = worktreeListCache.get(root);
-    if (!cached) {
-      cached = listWorktreesPorcelainAsync(root, git);
-      worktreeListCache.set(root, cached);
-    }
-    return cached;
-  };
-  const repoRoot = await getGitRootAsync(repoPath, git);
-  if (!repoRoot) return [];
-  const warnings = [];
-  const worktrees = await listWorktreesOnce(repoRoot);
-  for (const wt of worktrees) {
-    if (!wt.path.includes("/.worktrees/")) continue;
-    if (!existsSync8(wt.path)) continue;
-    const owner = inferSessionOwner(wt.path, wt.branch);
-    const dirty = await isWorktreeDirtyAsync(wt.path, git);
-    const hasCommits = await hasUnpushedCommitsAsync(wt.path, wt.branch, git);
-    if (dirty) {
-      warnings.push({
-        worktreePath: wt.path,
-        branch: wt.branch,
-        sessionOwner: owner,
-        dirty: true,
-        reason: `Worktree has uncommitted changes (agent: ${owner ?? "unknown"}, branch: ${wt.branch})`
-      });
-    } else if (hasCommits) {
-      warnings.push({
-        worktreePath: wt.path,
-        branch: wt.branch,
-        sessionOwner: owner,
-        dirty: false,
-        reason: `Worktree has unpushed commits on branch ${wt.branch} (agent: ${owner ?? "unknown"})`
-      });
-    }
-  }
-  return warnings;
-}
-
 // src/lib/intercom-prompts.ts
 function formatIntercomPrompt(reason = "nudge") {
   switch (reason) {
@@ -4863,6 +4522,15 @@ function formatIntercomPrompt(reason = "nudge") {
   }
 }
 
+// src/lib/tmux-dispatch-gate.ts
+var TMUX_DISPATCH_RETIRED_MESSAGE = "tmux dispatch is retired; dispatch a named subagent: Agent(subagent_type='<name>') \u2014 worktree isolation for code, brief it with a file fence and the guardrails, and persist its result into the task checklist row + memory before you finish. task(action='create') stays a durable checklist row for tracking and never launches compute.";
+function tmuxDispatchRefusal(toolName) {
+  return `${toolName}: ${TMUX_DISPATCH_RETIRED_MESSAGE} Nothing was created or dispatched.`;
+}
+function spawnOverrideNoopNotice(fields) {
+  return `Ignored ${fields.join(", ")} \u2014 ${TMUX_DISPATCH_RETIRED_MESSAGE} Set a subagent's model per employee with set_agent_config, or per dispatch with the Agent tool's own model argument.`;
+}
+
 // src/lib/session-busy-pattern.ts
 var BUSY_PATTERN = /[✻✽✶✳].*…|Running…|• Working|• Ran |• Explored|• Called|esc to interrupt|Waiting for \d+ background agents?/i;
 
@@ -4870,13 +4538,13 @@ var BUSY_PATTERN = /[✻✽✶✳].*…|Running…|• Working|• Ran |• Expl
 var _cachedExeBinDir;
 function resolveExeBinDir() {
   if (_cachedExeBinDir !== void 0) return _cachedExeBinDir;
-  const nodeBinDir = path8.dirname(process.execPath);
-  if (existsSync9(path8.join(nodeBinDir, "exe-launch-agent"))) {
+  const nodeBinDir = path6.dirname(process.execPath);
+  if (existsSync7(path6.join(nodeBinDir, "exe-launch-agent"))) {
     _cachedExeBinDir = nodeBinDir;
     return _cachedExeBinDir;
   }
-  const localBin = path8.join(os6.homedir(), ".local", "bin");
-  if (existsSync9(path8.join(localBin, "exe-launch-agent"))) {
+  const localBin = path6.join(os5.homedir(), ".local", "bin");
+  if (existsSync7(path6.join(localBin, "exe-launch-agent"))) {
     _cachedExeBinDir = localBin;
     return _cachedExeBinDir;
   }
@@ -4887,9 +4555,9 @@ function _resetExeBinDirCache() {
   _cachedExeBinDir = void 0;
 }
 function buildSpawnPath(inheritedPath = process.env.PATH, execPath = process.execPath) {
-  const sep = path8.delimiter;
-  const nodeBinDir = path8.dirname(execPath);
-  const localBin = path8.join(os6.homedir(), ".local", "bin");
+  const sep = path6.delimiter;
+  const nodeBinDir = path6.dirname(execPath);
+  const localBin = path6.join(os5.homedir(), ".local", "bin");
   const exeBinDir = resolveExeBinDir();
   const prefixDirs = [nodeBinDir, exeBinDir, localBin].filter(
     (d) => Boolean(d)
@@ -4907,17 +4575,17 @@ function buildSpawnPath(inheritedPath = process.env.PATH, execPath = process.exe
   return ordered.join(sep);
 }
 function spawnLockDir() {
-  return process.env.EXE_SPAWN_LOCK_DIR || path8.join(os6.homedir(), ".exe-os", "spawn-locks");
+  return process.env.EXE_SPAWN_LOCK_DIR || path6.join(os5.homedir(), ".exe-os", "spawn-locks");
 }
 function spawnLockPath(sessionName) {
-  return path8.join(spawnLockDir(), `${sessionName}.lock`);
+  return path6.join(spawnLockDir(), `${sessionName}.lock`);
 }
 function sanitizeLockKey(value) {
   return value.replace(/[^a-zA-Z0-9_.-]/g, "_");
 }
 function spawnMutexPath(employeeName, exeSession) {
   const key = `${sanitizeLockKey(baseAgentName(employeeName).toLowerCase())}--${sanitizeLockKey(exeSession)}`;
-  return path8.join(spawnLockDir(), `${key}.spawn-mutex.lock`);
+  return path6.join(spawnLockDir(), `${key}.spawn-mutex.lock`);
 }
 function isProcessAlive(pid) {
   try {
@@ -4929,8 +4597,8 @@ function isProcessAlive(pid) {
 }
 function acquireSpawnLock(sessionName) {
   const lockDir = spawnLockDir();
-  if (!existsSync9(lockDir)) {
-    mkdirSync6(lockDir, { recursive: true });
+  if (!existsSync7(lockDir)) {
+    mkdirSync5(lockDir, { recursive: true });
   }
   const lockFile = spawnLockPath(sessionName);
   const lockData = JSON.stringify({ pid: process.pid, timestamp: Date.now() });
@@ -4945,7 +4613,7 @@ function acquireSpawnLock(sessionName) {
     }
   }
   try {
-    const lock = JSON.parse(readFileSync6(lockFile, "utf8"));
+    const lock = JSON.parse(readFileSync5(lockFile, "utf8"));
     const age = Date.now() - lock.timestamp;
     if (isProcessAlive(lock.pid) && age < 6e4) {
       return false;
@@ -4957,7 +4625,7 @@ function acquireSpawnLock(sessionName) {
         unlinkSync4(tmpName);
       } catch {
       }
-      writeFileSync5(lockFile, lockData);
+      writeFileSync4(lockFile, lockData);
       return true;
     } catch {
       return false;
@@ -4970,7 +4638,7 @@ function acquireSpawnLock(sessionName) {
         unlinkSync4(tmpName);
       } catch {
       }
-      writeFileSync5(lockFile, lockData);
+      writeFileSync4(lockFile, lockData);
       return true;
     } catch {
       return false;
@@ -4985,7 +4653,7 @@ function releaseSpawnLock(sessionName) {
 }
 function acquireAgentSpawnMutex(employeeName, exeSession) {
   const lockDir = spawnLockDir();
-  if (!existsSync9(lockDir)) mkdirSync6(lockDir, { recursive: true });
+  if (!existsSync7(lockDir)) mkdirSync5(lockDir, { recursive: true });
   const lockFile = spawnMutexPath(employeeName, exeSession);
   const lockData = JSON.stringify({ pid: process.pid, timestamp: Date.now() });
   try {
@@ -4997,7 +4665,7 @@ function acquireAgentSpawnMutex(employeeName, exeSession) {
     if (err?.code !== "EEXIST") return true;
   }
   try {
-    const lock = JSON.parse(readFileSync6(lockFile, "utf8"));
+    const lock = JSON.parse(readFileSync5(lockFile, "utf8"));
     const age = Date.now() - lock.timestamp;
     if (isProcessAlive(lock.pid) && age < 6e4) return false;
   } catch {
@@ -5009,7 +4677,7 @@ function acquireAgentSpawnMutex(employeeName, exeSession) {
       unlinkSync4(tmpName);
     } catch {
     }
-    writeFileSync5(lockFile, lockData);
+    writeFileSync4(lockFile, lockData);
     return true;
   } catch {
     return false;
@@ -5041,59 +4709,7 @@ function reconcileStaleSpawnLock(sessionName, isAlive = isEmployeeAlive) {
   });
   return { skip: false, brokeStaleLock: true };
 }
-var SESSION_CACHE = path8.join(os6.homedir(), ".exe-os", "session-cache");
-var BEHAVIORS_EXPORT_TIMEOUT_MS = 1e4;
-function resolveBehaviorsExporterScript() {
-  try {
-    const thisFile = fileURLToPath(import.meta.url);
-    const scriptPath = path8.join(
-      path8.dirname(thisFile),
-      "..",
-      "bin",
-      "exe-export-behaviors.js"
-    );
-    return existsSync9(scriptPath) ? scriptPath : null;
-  } catch {
-    return null;
-  }
-}
-function exportBehaviorsSync(agentId, projectName, sessionKey) {
-  const script = resolveBehaviorsExporterScript();
-  if (!script) return null;
-  try {
-    const output = execFileSync3(
-      process.execPath,
-      [script, agentId, projectName, sessionKey],
-      { encoding: "utf-8", timeout: BEHAVIORS_EXPORT_TIMEOUT_MS }
-    ).trim();
-    return output.length > 0 ? output : null;
-  } catch (err) {
-    process.stderr.write(
-      `[tmux-routing] behaviors export failed for ${agentId}: ${err instanceof Error ? err.message : String(err)}
-`
-    );
-    return null;
-  }
-}
-async function exportBehaviorsAsync(agentId, projectName, sessionKey) {
-  const script = resolveBehaviorsExporterScript();
-  if (!script) return null;
-  try {
-    const { stdout } = await execFileAsync3(
-      process.execPath,
-      [script, agentId, projectName, sessionKey],
-      { encoding: "utf-8", timeout: BEHAVIORS_EXPORT_TIMEOUT_MS }
-    );
-    const output = stdout.trim();
-    return output.length > 0 ? output : null;
-  } catch (err) {
-    process.stderr.write(
-      `[tmux-routing] behaviors export failed for ${agentId}: ${err instanceof Error ? err.message : String(err)}
-`
-    );
-    return null;
-  }
-}
+var SESSION_CACHE = path6.join(os5.homedir(), ".exe-os", "session-cache");
 function getMySession() {
   return getTransport().getMySession();
 }
@@ -5156,8 +4772,8 @@ function extractRootExe(name) {
   return tail.length > 0 ? tail : null;
 }
 function registerParentExe(sessionKey, parentExe, dispatchedBy) {
-  if (!existsSync9(SESSION_CACHE)) {
-    mkdirSync6(SESSION_CACHE, { recursive: true });
+  if (!existsSync7(SESSION_CACHE)) {
+    mkdirSync5(SESSION_CACHE, { recursive: true });
   }
   const rootExe = extractRootExe(parentExe) ?? parentExe;
   if (!isValidSessionScope(rootExe)) {
@@ -5167,7 +4783,7 @@ function registerParentExe(sessionKey, parentExe, dispatchedBy) {
     );
     return;
   }
-  const filePath = path8.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`);
+  const filePath = path6.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`);
   atomicWriteJsonSync(filePath, {
     parentExe: rootExe,
     dispatchedBy: dispatchedBy || rootExe,
@@ -5177,7 +4793,7 @@ function registerParentExe(sessionKey, parentExe, dispatchedBy) {
 var PARENT_EXE_CACHE_TTL_MS = 4 * 60 * 60 * 1e3;
 function getParentExe(sessionKey) {
   try {
-    const data = JSON.parse(readFileSync6(path8.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`), "utf8"));
+    const data = JSON.parse(readFileSync5(path6.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`), "utf8"));
     if (data.registeredAt) {
       const age = Date.now() - new Date(data.registeredAt).getTime();
       if (age > PARENT_EXE_CACHE_TTL_MS) return null;
@@ -5189,8 +4805,8 @@ function getParentExe(sessionKey) {
 }
 function getDispatchedBy(sessionKey) {
   try {
-    const data = JSON.parse(readFileSync6(
-      path8.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`),
+    const data = JSON.parse(readFileSync5(
+      path6.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`),
       "utf8"
     ));
     return data.dispatchedBy ?? data.parentExe ?? null;
@@ -5465,40 +5081,6 @@ function liveAgentSessionsForScope(employeeName, exeSession, listSessions2 = ()
 function firstLiveAgentSessionForScope(employeeName, exeSession) {
   return liveAgentSessionsForScope(employeeName, exeSession)[0] ?? null;
 }
-function realpathForCompare(pathname) {
-  try {
-    return realpathSync2(pathname);
-  } catch {
-    return path8.resolve(pathname);
-  }
-}
-function sameRealPath(a, b) {
-  try {
-    return path8.resolve(a) === path8.resolve(b);
-  } catch {
-    return a === b;
-  }
-}
-function detectCoordinatorCheckoutCwd(cwd) {
-  if (cwd.includes("/.worktrees/") || cwd.includes("/.claude/worktrees/")) return null;
-  const cwdRepoRoot = getMainRepoRoot(cwd);
-  if (!cwdRepoRoot) return null;
-  const cwdResolved = realpathForCompare(cwd);
-  if (!sameRealPath(cwdRepoRoot, cwdResolved)) return null;
-  try {
-    for (const session of listSessions()) {
-      if (!isRootSession(session.windowName)) continue;
-      if (!session.projectDir || !existsSync9(session.projectDir)) continue;
-      const coordinatorRepoRoot = getMainRepoRoot(session.projectDir);
-      if (coordinatorRepoRoot && sameRealPath(coordinatorRepoRoot, cwdRepoRoot)) {
-        return { coordinatorSession: session.windowName, repoRoot: cwdRepoRoot };
-      }
-    }
-  } catch {
-    return null;
-  }
-  return null;
-}
 var VERIFY_PANE_LINES = 200;
 async function verifyPaneAtCapacity(sessionName) {
   const transport = getTransport();
@@ -5514,7 +5096,7 @@ async function verifyPaneAtCapacity(sessionName) {
       reason: `capture-pane failed: ${err instanceof Error ? err.message : String(err)}`
     };
   }
-  const { isAtCapacity } = await import("./capacity-monitor-UI553HRL.js");
+  const { isAtCapacity } = await import("./capacity-monitor-YO3WRSRY.js");
   if (!isAtCapacity(pane)) {
     return {
       atCapacity: false,
@@ -5528,15 +5110,15 @@ async function verifyPaneAtCapacity(sessionName) {
 }
 var INTERCOM_DEBOUNCE_MS = 3e5;
 var CODEX_DEBOUNCE_MS = 3e5;
-var INTERCOM_LOG2 = path8.join(os6.homedir(), ".exe-os", "intercom.log");
+var INTERCOM_LOG2 = path6.join(os5.homedir(), ".exe-os", "intercom.log");
 var INTERCOM_LOG_MAX_BYTES2 = 1024 * 1024;
-var execFileAsync3 = promisify3(execFile2);
-var DEBOUNCE_FILE = path8.join(SESSION_CACHE, "intercom-debounce.json");
+var execFileAsync2 = promisify2(execFile);
+var DEBOUNCE_FILE = path6.join(SESSION_CACHE, "intercom-debounce.json");
 var DEBOUNCE_CLEANUP_AGE_MS = 5 * 60 * 1e3;
 function readDebounceState() {
   try {
-    if (!existsSync9(DEBOUNCE_FILE)) return {};
-    const raw = JSON.parse(readFileSync6(DEBOUNCE_FILE, "utf8"));
+    if (!existsSync7(DEBOUNCE_FILE)) return {};
+    const raw = JSON.parse(readFileSync5(DEBOUNCE_FILE, "utf8"));
     const state = {};
     for (const [key, val] of Object.entries(raw)) {
       if (typeof val === "number") {
@@ -5552,7 +5134,7 @@ function readDebounceState() {
 }
 function writeDebounceState(state) {
   try {
-    if (!existsSync9(SESSION_CACHE)) mkdirSync6(SESSION_CACHE, { recursive: true });
+    if (!existsSync7(SESSION_CACHE)) mkdirSync5(SESSION_CACHE, { recursive: true });
     atomicWriteJsonSync(DEBOUNCE_FILE, state);
   } catch {
   }
@@ -5560,9 +5142,9 @@ function writeDebounceState(state) {
 function resolveSessionRuntime(targetSession) {
   const agentName = baseAgentName(targetSession.split("-")[0] ?? "");
   try {
-    const diPath = path8.join(SESSION_CACHE, `dispatch-info-${targetSession}.json`);
-    if (existsSync9(diPath)) {
-      const di = JSON.parse(readFileSync6(diPath, "utf-8"));
+    const diPath = path6.join(SESSION_CACHE, `dispatch-info-${targetSession}.json`);
+    if (existsSync7(diPath)) {
+      const di = JSON.parse(readFileSync5(diPath, "utf-8"));
       if (di.runtime) return di.runtime;
     }
     return getAgentRuntime(agentName).runtime;
@@ -5602,7 +5184,7 @@ function logIntercom(msg, meta) {
   process.stderr.write(`[intercom] ${msg}${metaStr}
 `);
   try {
-    if (existsSync9(INTERCOM_LOG2) && statSync4(INTERCOM_LOG2).size > INTERCOM_LOG_MAX_BYTES2) {
+    if (existsSync7(INTERCOM_LOG2) && statSync4(INTERCOM_LOG2).size > INTERCOM_LOG_MAX_BYTES2) {
       renameSync3(INTERCOM_LOG2, `${INTERCOM_LOG2}.1`);
     }
     appendFileSync3(INTERCOM_LOG2, line);
@@ -5629,7 +5211,7 @@ function getSessionState(sessionName) {
   }
 }
 async function captureSessionPaneAsync(sessionName, lines) {
-  const { stdout } = await execFileAsync3(
+  const { stdout } = await execFileAsync2(
     "tmux",
     ["capture-pane", "-t", sessionName, "-p", "-S", `-${lines}`],
     { encoding: "utf8", timeout: 3e3 }
@@ -5678,7 +5260,7 @@ async function confirmNudgeSubmittedAsync(targetSession, runtime) {
     if (verdict.state === "confirmed") return true;
     if (!isSubmitRepairable(verdict.reason)) return false;
     try {
-      await execFileAsync3("tmux", ["send-keys", "-t", targetSession, isCodex ? "C-m" : "Enter"], { timeout: 1e3 });
+      await execFileAsync2("tmux", ["send-keys", "-t", targetSession, isCodex ? "C-m" : "Enter"], { timeout: 1e3 });
     } catch {
     }
     await new Promise((r) => setTimeout(r, SUBMIT_CONFIRM_DELAY_MS));
@@ -5821,7 +5403,7 @@ async function countScopedPendingReviews(targetSession, reviewer) {
 }
 async function countScopedOpenTasks(targetSession, agentId) {
   try {
-    const { fastDbInit } = await import("./fast-db-init-SD7JZSEC.js");
+    const { fastDbInit } = await import("./fast-db-init-UN225WS7.js");
     const client = await fastDbInit();
     const scope = extractRootExe(targetSession);
     if (!scope) return 0;
@@ -5878,7 +5460,7 @@ function buildScopedInProgressTaskQuery(targetSession) {
 async function findScopedInProgressTaskId(targetSession) {
   const q = buildScopedInProgressTaskQuery(targetSession);
   if (!q) return null;
-  const { fastDbInit } = await import("./fast-db-init-SD7JZSEC.js");
+  const { fastDbInit } = await import("./fast-db-init-UN225WS7.js");
   const client = await fastDbInit();
   const result = await client.execute(q);
   const id = result.rows[0]?.id;
@@ -5999,7 +5581,7 @@ function sendIntercom(targetSession, opts) {
   const ledgerEnv = (process.env.EXE_NOTIFICATION_LEDGER ?? "").trim().toLowerCase();
   if (ledgerEnv === "shadow") {
     const ledgerScope = opts && "callerSessionScope" in opts ? opts.callerSessionScope : void 0;
-    void import("./notification-ledger-3WJYJGGS.js").then((m) => m.recordShadowNudge(targetSession, reason, ledgerScope, { force: opts?.force })).catch(() => {
+    void import("./notification-ledger-AV5242RM.js").then((m) => m.recordShadowNudge(targetSession, reason, ledgerScope, { force: opts?.force })).catch(() => {
     });
   }
   if (!opts?.force && isDebounced(targetSession)) {
@@ -6040,8 +5622,8 @@ function sendIntercom(targetSession, opts) {
       try {
         const rawAgent2 = targetSession.split("-")[0] ?? targetSession;
         const agent = baseAgentName(rawAgent2);
-        const markerPath = path8.join(SESSION_CACHE, `current-task-${agent}.json`);
-        if (existsSync9(markerPath)) {
+        const markerPath = path6.join(SESSION_CACHE, `current-task-${agent}.json`);
+        if (existsSync7(markerPath)) {
           logIntercom(`SKIP \u2192 ${targetSession} (has in_progress task marker + not idle \u2014 will auto-chain)`);
           recordResult("debounced", "in_progress_marker");
           return "debounced";
@@ -6101,89 +5683,22 @@ function sendIntercom(targetSession, opts) {
     return "failed";
   }
 }
-var DEFERRED_SPAWN_NUDGE_ATTEMPTS = 3;
-var DEFERRED_SPAWN_NUDGE_RETRY_MS = Number(process.env.EXE_DEFERRED_SPAWN_NUDGE_RETRY_MS || 5e3);
-function scheduleDeferredSpawnNudge(input) {
-  const attemptSend = (attempt) => {
-    setTimeout(() => {
-      void (async () => {
-        try {
-          if (!input.transport.isAlive(input.sessionName)) {
-            throw new Error("session not alive at deferred nudge time");
-          }
-          input.transport.sendKeysLiteral(input.sessionName, input.message, input.runtime);
-          const verdict = await verifyNudgeDeliveredAsync(input.sessionName, input.runtime, true);
-          if (verdict.state !== "confirmed") {
-            throw new Error(`nudge unconfirmed at target pane (${verdict.reason})`);
-          }
-          process.stderr.write(
-            `[tmux-routing] deferred spawn nudge delivered to ${input.sessionName} (attempt ${attempt}/${DEFERRED_SPAWN_NUDGE_ATTEMPTS})
-`
-          );
-          recordOrchestrationEventBestEffort({
-            eventType: "dispatch.spawn_nudge.delivered",
-            source: "tmux-routing.scheduleDeferredSpawnNudge",
-            agentId: input.employeeName,
-            sessionScope: input.exeSession,
-            tmuxSession: input.sessionName,
-            runtime: input.runtime,
-            result: "delivered",
-            payload: { attempt }
-          });
-        } catch (err) {
-          const msg = err instanceof Error ? err.message : String(err);
-          process.stderr.write(
-            `[tmux-routing] deferred spawn nudge failed for ${input.sessionName} (attempt ${attempt}/${DEFERRED_SPAWN_NUDGE_ATTEMPTS}): ${msg}
-`
-          );
-          recordOrchestrationEventBestEffort({
-            eventType: "dispatch.spawn_nudge.failed",
-            source: "tmux-routing.scheduleDeferredSpawnNudge",
-            severity: "warn",
-            agentId: input.employeeName,
-            sessionScope: input.exeSession,
-            tmuxSession: input.sessionName,
-            runtime: input.runtime,
-            result: "failed",
-            errorCode: "deferred_nudge_failed",
-            payload: { attempt, error: msg }
-          });
-          if (attempt < DEFERRED_SPAWN_NUDGE_ATTEMPTS) {
-            attemptSend(attempt + 1);
-            return;
-          }
-          queueIntercom(input.sessionName, `spawn nudge failed after ${attempt} attempts: ${msg}`, "signal");
-          void import("./notifications-T5C2CVB3.js").then(({ writeNotification: writeNotification2 }) => writeNotification2({
-            agentId: getCoordinatorName(),
-            agentRole: "COO",
-            event: "error_spike",
-            project: "",
-            summary: `Spawned ${input.sessionName}, but the initial task nudge failed after ${attempt} attempts (${msg}). Worker may be idle with open task; check session and re-dispatch if needed.`,
-            sessionScope: input.exeSession
-          })).catch(() => {
-          });
-        }
-      })();
-    }, attempt === 1 ? 1e4 : DEFERRED_SPAWN_NUDGE_RETRY_MS);
-  };
-  attemptSend(1);
-}
 var CODEX_SUBMIT_DELAY_MS = Number(process.env.EXE_CODEX_SUBMIT_DELAY_MS || 250);
 var SUBMIT_DELAY_MS = Number(process.env.EXE_SUBMIT_DELAY_MS || 60);
 async function sendKeysLiteralAsync(targetSession, text, runtime) {
   const isCodex = runtime === "codex";
   const submit = async () => {
     await new Promise((r) => setTimeout(r, isCodex ? CODEX_SUBMIT_DELAY_MS : SUBMIT_DELAY_MS));
-    await execFileAsync3("tmux", ["send-keys", "-t", targetSession, isCodex ? "C-m" : "Enter"], { timeout: 1e3 });
+    await execFileAsync2("tmux", ["send-keys", "-t", targetSession, isCodex ? "C-m" : "Enter"], { timeout: 1e3 });
   };
   if (text.length >= 500) {
-    const tmpDir = path8.join(os6.tmpdir(), "exe-os-intercom");
-    mkdirSync6(tmpDir, { recursive: true });
-    const tmpFile = path8.join(tmpDir, `msg-${process.pid}-${Date.now()}.txt`);
+    const tmpDir = path6.join(os5.tmpdir(), "exe-os-intercom");
+    mkdirSync5(tmpDir, { recursive: true });
+    const tmpFile = path6.join(tmpDir, `msg-${process.pid}-${Date.now()}.txt`);
     try {
-      writeFileSync5(tmpFile, text, "utf-8");
-      await execFileAsync3("tmux", ["load-buffer", tmpFile], { timeout: 3e3 });
-      await execFileAsync3("tmux", ["paste-buffer", "-p", "-t", targetSession], { timeout: 3e3 });
+      writeFileSync4(tmpFile, text, "utf-8");
+      await execFileAsync2("tmux", ["load-buffer", tmpFile], { timeout: 3e3 });
+      await execFileAsync2("tmux", ["paste-buffer", "-p", "-t", targetSession], { timeout: 3e3 });
       await submit();
     } finally {
       try {
@@ -6193,7 +5708,7 @@ async function sendKeysLiteralAsync(targetSession, text, runtime) {
     }
     return;
   }
-  await execFileAsync3("tmux", ["send-keys", "-t", targetSession, "-l", text], { timeout: 3e3 });
+  await execFileAsync2("tmux", ["send-keys", "-t", targetSession, "-l", text], { timeout: 3e3 });
   await submit();
 }
 async function sendIntercomAsync(targetSession, opts) {
@@ -6248,7 +5763,7 @@ async function sendIntercomAsync(targetSession, opts) {
   let ledgerClaim = null;
   if (authoritativeLedger) {
     try {
-      const { claimAuthoritativeNudge } = await import("./notification-ledger-3WJYJGGS.js");
+      const { claimAuthoritativeNudge } = await import("./notification-ledger-AV5242RM.js");
       const claim2 = await claimAuthoritativeNudge(
         targetSession,
         reason,
@@ -6271,7 +5786,7 @@ async function sendIntercomAsync(targetSession, opts) {
   const markLedgerDelivered = async () => {
     if (!ledgerClaim) return;
     try {
-      const { markNudgeDelivered } = await import("./notification-ledger-3WJYJGGS.js");
+      const { markNudgeDelivered } = await import("./notification-ledger-AV5242RM.js");
       await markNudgeDelivered(ledgerClaim.id, ledgerClaim.sessionScope);
     } catch {
     }
@@ -6279,7 +5794,7 @@ async function sendIntercomAsync(targetSession, opts) {
   const markLedgerFailed = async (error) => {
     if (!ledgerClaim) return;
     try {
-      const { markNudgeDeliveryFailed } = await import("./notification-ledger-3WJYJGGS.js");
+      const { markNudgeDeliveryFailed } = await import("./notification-ledger-AV5242RM.js");
       await markNudgeDeliveryFailed(ledgerClaim.id, error, ledgerClaim.sessionScope);
     } catch {
     }
@@ -6290,7 +5805,7 @@ async function sendIntercomAsync(targetSession, opts) {
     return "debounced";
   }
   try {
-    const { stdout } = await execFileAsync3("tmux", ["list-sessions", "-F", "#{session_name}"], { encoding: "utf8", timeout: 3e3 });
+    const { stdout } = await execFileAsync2("tmux", ["list-sessions", "-F", "#{session_name}"], { encoding: "utf8", timeout: 3e3 });
     const sessions = stdout.trim().split("\n").filter(Boolean);
     if (!sessions.includes(targetSession)) {
       logIntercom(`SKIP \u2192 ${targetSession} (session not found)`);
@@ -6321,10 +5836,10 @@ async function sendIntercomAsync(targetSession, opts) {
       return "queued";
     }
     try {
-      const mode = await execFileAsync3("tmux", ["display-message", "-p", "-t", targetSession, "#{pane_in_mode}"], { encoding: "utf8", timeout: 1e3 });
+      const mode = await execFileAsync2("tmux", ["display-message", "-p", "-t", targetSession, "#{pane_in_mode}"], { encoding: "utf8", timeout: 1e3 });
       if (mode.stdout.trim() === "1") {
         logIntercom(`COPY_MODE \u2192 ${targetSession} (exiting copy mode first)`);
-        await execFileAsync3("tmux", ["send-keys", "-t", targetSession, "q"], { timeout: 1e3 });
+        await execFileAsync2("tmux", ["send-keys", "-t", targetSession, "q"], { timeout: 1e3 });
       }
     } catch {
     }
@@ -6428,23 +5943,7 @@ function notifyCoordinatorTaskCompletion(coordinatorSession, agentName, taskTitl
     return false;
   }
 }
-function emitOptOutBypassWarning(employeeName, projectDir) {
-  process.stderr.write(
-    `[tmux-routing] WORKTREE ISOLATION BYPASSED by explicit spawn_worktree=false for code-role ${employeeName} in real repo ${projectDir} \u2014 commits can land on main. This is a deliberate operator opt-out.
-`
-  );
-}
-function worktreeIsolationGate(employeeName, projectDir, opts) {
-  const nonGit = !isInsideGitRepo(projectDir);
-  if (opts?.spawnWorktree === false) {
-    if (!nonGit) emitOptOutBypassWarning(employeeName, projectDir);
-    return { allow: true, nonGit };
-  }
-  if (nonGit) return { allow: true, nonGit: true };
-  const message = `Worktree isolation required for code-role ${employeeName}; refusing to spawn in ${projectDir}. ${projectDir} is a git repo but the worktree could not be created (git error/timeout) \u2014 spawning here would let commits land on main. To dispatch a code-role agent here anyway, pass spawn_worktree=false (create_task) or opts.spawnWorktree=false.`;
-  return { allow: false, message };
-}
-function ensureEmployee(employeeName, exeSession, projectDir, opts) {
+function ensureEmployee(employeeName, exeSession, _projectDir, opts) {
   employeeName = employeeName.toLowerCase();
   if (isCoordinatorName(employeeName)) {
     return { status: "failed", sessionName: "", error: "The coordinator is not a dispatchable employee" };
@@ -6542,12 +6041,12 @@ function ensureEmployee(employeeName, exeSession, projectDir, opts) {
     } else {
       const liveSession = firstLiveAgentSessionForScope(employeeName, exeSession);
       if (liveSession) {
-        const result2 = sendIntercom(liveSession, {
+        const result = sendIntercom(liveSession, {
           force: true,
           reason: "signal",
           callerSessionScope: exeSession
         });
-        const status = classifyIntercomHandoff(result2);
+        const status = classifyIntercomHandoff(result);
         if (status === "failed") {
           return { status, sessionName: liveSession, error: "intercom delivery failed during spawn mutex handoff" };
         }
@@ -6633,114 +6132,19 @@ function ensureEmployee(employeeName, exeSession, projectDir, opts) {
   if (isEmployeeAlive(sessionName)) {
     releaseIfOwned();
     releaseSpawnMutexIfOwned();
-    const result2 = sendIntercom(sessionName, { force: true, reason: "signal", callerSessionScope: exeSession });
-    const status = classifyIntercomHandoff(result2);
+    const result = sendIntercom(sessionName, { force: true, reason: "signal", callerSessionScope: exeSession });
+    const status = classifyIntercomHandoff(result);
     if (status === "failed") {
       return { status, sessionName, error: "intercom delivery failed" };
     }
     return { status, sessionName };
   }
-  const spawnOpts = { ...opts, instance: effectiveInstance };
-  if (!spawnOpts.cwd) {
-    const COORDINATOR_ROLES = /* @__PURE__ */ new Set(["COO", "CTO", "CMO"]);
-    try {
-      const roster = loadEmployeesSync();
-      const emp = roster.find((e) => baseAgentName(e.name) === baseAgentName(employeeName));
-      if (emp && !COORDINATOR_ROLES.has(emp.role)) {
-        try {
-          const collisions = spawnOpts.collisionGuardHandled ? [] : checkWorktreeCollisions(projectDir);
-          if (collisions.length > 0) {
-            for (const c of collisions) {
-              process.stderr.write(
-                `[worktree-guard] WARNING: ${c.reason} (path: ${c.worktreePath})
-`
-              );
-            }
-            recordOrchestrationEventBestEffort({
-              eventType: "worktree.collision_warning",
-              source: "tmux-routing.ensureEmployee",
-              agentId: employeeName,
-              sessionScope: exeSession,
-              instanceId: effectiveInstance != null ? String(effectiveInstance) : null,
-              payload: { collisionCount: collisions.length, collisions: collisions.map((c) => ({ branch: c.branch, owner: c.sessionOwner, dirty: c.dirty })) }
-            });
-          }
-        } catch {
-        }
-        const wtPath = ensureWorktree(projectDir, employeeName, effectiveInstance);
-        if (wtPath) {
-          spawnOpts.cwd = wtPath;
-          process.stderr.write(`[tmux-routing] worktree isolation: ${employeeName} \u2192 ${wtPath}
-`);
-        } else {
-          const gate = worktreeIsolationGate(employeeName, projectDir, opts);
-          if (gate.allow) {
-            spawnOpts.cwd = projectDir;
-            spawnOpts.spawnWorktree = false;
-            const reason = gate.nonGit ? "non_git_project" : "opt_out_override";
-            process.stderr.write(
-              `[tmux-routing] WORKTREE BYPASSED: code-role ${employeeName} spawning in ${projectDir} (reason=${reason}) \u2014 no git worktree isolation
-`
-            );
-            recordOrchestrationEventBestEffort({
-              eventType: "worktree.bypassed",
-              source: "tmux-routing.ensureEmployee",
-              severity: "warn",
-              agentId: employeeName,
-              sessionScope: exeSession,
-              instanceId: effectiveInstance != null ? String(effectiveInstance) : null,
-              tmuxSession: sessionName,
-              payload: {
-                agent: employeeName,
-                cwd: projectDir,
-                reason,
-                risk: "code-role agent runs in project root without git worktree isolation"
-              }
-            });
-          } else {
-            releaseIfOwned();
-            releaseSpawnMutexIfOwned();
-            process.stderr.write(`[tmux-routing] ${gate.message}
-`);
-            return { status: "failed", sessionName, error: gate.message };
-          }
-        }
-      }
-    } catch (e) {
-      process.stderr.write(`[tmux-routing] worktree setup failed for ${employeeName}: ${e instanceof Error ? e.message : String(e)}
-`);
-    }
-  }
-  let result;
-  try {
-    result = spawnEmployee(employeeName, exeSession, projectDir, spawnOpts);
-  } catch (err) {
-    releaseSpawnLock(sessionName);
-    releaseSpawnMutexIfOwned();
-    const msg = err instanceof Error ? err.message : String(err);
-    process.stderr.write(
-      `[ensureEmployee] spawnEmployee THREW for ${sessionName}: ${msg} \u2014 released spawn lock to prevent permanent dispatch block
-`
-    );
-    recordOrchestrationEventBestEffort({
-      eventType: "tmux.spawn.completed",
-      source: "tmux-routing.ensureEmployee",
-      severity: "warn",
-      agentId: employeeName,
-      sessionScope: exeSession,
-      tmuxSession: sessionName,
-      result: "failed",
-      errorCode: "spawn_threw",
-      payload: { error: msg }
-    });
-    return { status: "failed", sessionName, error: `spawn threw: ${msg}` };
-  }
-  if (result.error) {
-    releaseSpawnMutexIfOwned();
-    return { status: "failed", sessionName, error: result.error };
-  }
+  releaseIfOwned();
   releaseSpawnMutexIfOwned();
-  return { status: "spawned", sessionName };
+  const refusal = tmuxDispatchRefusal(`ensureEmployee(${employeeName})`);
+  process.stderr.write(`[ensureEmployee] ${refusal}
+`);
+  return { status: "failed", sessionName, error: refusal };
 }
 async function ensureEmployeeAsync(employeeName, exeSession, projectDir, opts) {
   let asyncOpts = { ...opts, behaviorsExported: true };
@@ -6825,87 +6229,6 @@ async function ensureEmployeeAsync(employeeName, exeSession, projectDir, opts) {
       spawnMutexHeld: true
     };
   }
-  if (!asyncOpts.cwd) {
-    const COORDINATOR_ROLES = /* @__PURE__ */ new Set(["COO", "CTO", "CMO"]);
-    try {
-      const roster = loadEmployeesSync();
-      const emp = roster.find((e) => baseAgentName(e.name) === baseAgentName(employeeName));
-      if (emp && !COORDINATOR_ROLES.has(emp.role)) {
-        try {
-          const collisions = await checkWorktreeCollisionsAsync(projectDir);
-          if (collisions.length > 0) {
-            for (const c of collisions) {
-              process.stderr.write(
-                `[worktree-guard] WARNING: ${c.reason} (path: ${c.worktreePath})
-`
-              );
-            }
-            recordOrchestrationEventBestEffort({
-              eventType: "worktree.collision_warning",
-              source: "tmux-routing.ensureEmployeeAsync",
-              agentId: employeeName,
-              sessionScope: exeSession,
-              instanceId: asyncOpts.instance != null ? String(asyncOpts.instance) : null,
-              payload: { collisionCount: collisions.length, collisions: collisions.map((c) => ({ branch: c.branch, owner: c.sessionOwner, dirty: c.dirty })) }
-            });
-          }
-        } catch {
-        }
-        const wtPath = await ensureWorktreeAsync(projectDir, employeeName, asyncOpts.instance);
-        if (wtPath) {
-          asyncOpts.cwd = wtPath;
-        } else {
-          const sessionName = employeeSessionName(employeeName, exeSession, asyncOpts.instance);
-          const gate = worktreeIsolationGate(employeeName, projectDir, asyncOpts);
-          if (gate.allow) {
-            asyncOpts.cwd = projectDir;
-            asyncOpts.spawnWorktree = false;
-            const reason = gate.nonGit ? "non_git_project" : "opt_out_override";
-            process.stderr.write(
-              `[ensureEmployeeAsync] WORKTREE BYPASSED: code-role ${employeeName} spawning in ${projectDir} (reason=${reason}) \u2014 no git worktree isolation
-`
-            );
-            recordOrchestrationEventBestEffort({
-              eventType: "worktree.bypassed",
-              source: "tmux-routing.ensureEmployeeAsync",
-              severity: "warn",
-              agentId: employeeName,
-              sessionScope: exeSession,
-              instanceId: asyncOpts.instance != null ? String(asyncOpts.instance) : null,
-              tmuxSession: sessionName,
-              payload: {
-                agent: employeeName,
-                cwd: projectDir,
-                reason,
-                risk: "code-role agent runs in project root without git worktree isolation"
-              }
-            });
-          } else {
-            process.stderr.write(`[ensureEmployeeAsync] ${gate.message}
-`);
-            if (asyncOpts.spawnLockHeld) releaseSpawnLock(sessionName);
-            releaseSpawnMutexIfOwned();
-            return { status: "failed", sessionName, error: gate.message };
-          }
-        }
-      }
-    } catch (err) {
-      process.stderr.write(
-        `[ensureEmployeeAsync] worktree setup failed for ${employeeName}: ${err instanceof Error ? err.message : String(err)}
-`
-      );
-    }
-  }
-  try {
-    const sessionName = employeeSessionName(employeeName, exeSession, asyncOpts.instance);
-    await exportBehaviorsAsync(employeeName, path8.basename(asyncOpts.cwd ?? projectDir), sessionName);
-  } catch (err) {
-    process.stderr.write(
-      `[ensureEmployeeAsync] behavior export failed for ${employeeName}: ${err instanceof Error ? err.message : String(err)}
-`
-    );
-  }
-  asyncOpts = { ...asyncOpts, collisionGuardHandled: true };
   const result = ensureEmployee(employeeName, exeSession, projectDir, asyncOpts);
   if (asyncOpts.spawnLockHeld && result.sessionName) {
     releaseSpawnLock(result.sessionName);
@@ -6913,764 +6236,12 @@ async function ensureEmployeeAsync(employeeName, exeSession, projectDir, opts) {
   releaseSpawnMutexIfOwned();
   return result;
 }
-function decideSpawnWorktreeDiscipline(input) {
-  if (input.inWorktree) return "ok";
-  if (input.roleKnown) {
-    if (!input.isCodeRole) return "ok";
-    if (input.optOut) return "bypass";
-    return input.spawnCwdIsGitRepo ? "refuse" : "bypass";
-  }
-  if (input.optOut) return "bypass";
-  return input.spawnCwdIsGitRepo ? "refuse" : "bypass";
-}
-function resolveSpawnCwd(requestedCwd, projectDir, dirExists = existsSync9) {
-  if (dirExists(requestedCwd)) return { cwd: requestedCwd, fellBack: false, requestedCwd };
-  if (dirExists(projectDir)) return { cwd: projectDir, fellBack: true, requestedCwd };
-  return { cwd: null, fellBack: false, requestedCwd };
-}
-function spawnExitMarkerPath(sessionName) {
-  const safe = sessionName.replace(/[^A-Za-z0-9._-]/g, "_");
-  return path8.join(SESSION_CACHE, `spawn-exit-${safe}`);
-}
-function buildSpawnCommand(launchCommand, exitMarkerPath, cleanupSuffix) {
-  const list = `${launchCommand}; printf '%s' "$?" > "${exitMarkerPath}"${cleanupSuffix}`;
-  return `/bin/sh -c '${list.replace(/'/g, `'\\''`)}'`;
-}
-function readSpawnExitMarker(markerPath, read = (p) => readFileSync6(p, "utf8")) {
-  let raw;
-  try {
-    raw = read(markerPath);
-  } catch {
-    return null;
-  }
-  const trimmed = raw.trim();
-  if (!/^\d+$/.test(trimmed)) return null;
-  return Number(trimmed);
-}
-function paneShowsRuntimeBanner(pane, runtime) {
-  if (runtime === "exe-agent") return pane.includes("[exe-agent]") || pane.includes("online");
-  if (runtime === "codex") {
-    return pane.includes("codex") || pane.includes("Codex") || pane.includes("exe-start-codex");
-  }
-  if (runtime === "opencode") {
-    return pane.includes("opencode") || pane.includes("OpenCode") || pane.includes("exe-start-opencode");
-  }
-  return pane.includes("Claude Code") || pane.includes("\u276F");
-}
-function classifySpawnFailurePane(pane) {
-  const paneLc = pane.toLowerCase();
-  if (paneLc.includes("command not found") || paneLc.includes(": not found")) {
-    return "path_not_found";
-  }
-  if (paneLc.includes("exit 127") || paneLc.includes("claude") && paneLc.includes("not found") || paneLc.includes("not support") || // existing "unsupported launch flag" hint
-  paneLc.includes("unknown option") || paneLc.includes("enoent")) {
-    return "claude_launch_failed";
-  }
-  return "timeout";
-}
-function resolveStartupWatchCapMs(input) {
-  const explicit = Number(input.override) || Number(input.legacyOverride);
-  if (explicit > 0) return explicit;
-  if (input.useCodex) return 2500;
-  return input.callerIsDaemon ? 2e3 : 3e3;
-}
-function watchSpawnStartup(probes, opts) {
-  const interval = Math.max(1, opts.intervalMs);
-  const iterations = Math.max(0, Math.ceil(Math.max(0, opts.capMs) / interval));
-  const capture = () => {
-    try {
-      return probes.capturePane();
-    } catch {
-      return "";
-    }
-  };
-  let polls = 0;
-  for (let i = 0; i <= iterations; i++) {
-    polls++;
-    const exitCode = probes.readLauncherExit();
-    if (exitCode !== null) return { outcome: "exited", exitCode, pane: capture(), polls };
-    if (!probes.isAlive()) {
-      return { outcome: "exited", exitCode: probes.readLauncherExit(), pane: capture(), polls };
-    }
-    if (i < iterations) probes.sleep(interval);
-  }
-  return { outcome: "running", polls };
-}
-function spawnEmployee(employeeName, exeSession, projectDir, opts) {
-  const transport = getTransport();
-  const sessionName = employeeSessionName(employeeName, exeSession, opts?.instance);
-  const spawnStartedAt = Date.now();
-  const instanceLabel = opts?.instance != null && opts.instance > 0 ? `${employeeName}${opts.instance}` : employeeName;
-  const logDir = path8.join(os6.homedir(), ".exe-os", "session-logs");
-  const logFile = path8.join(logDir, `${instanceLabel}-${Date.now()}.log`);
-  {
-    const earlyRt = resolveSpawnRuntimeConfig(
-      employeeName,
-      opts?.runtimeOverride,
-      opts?.modelOverride
-    );
-    const compat = assertRuntimeModelCompatible(earlyRt.runtime, earlyRt.model);
-    if (!compat.ok) {
-      process.stderr.write(`[spawnEmployee] ${compat.error}
-`);
-      recordOrchestrationEventBestEffort({
-        eventType: "tmux.spawn.completed",
-        source: "tmux-routing.spawnEmployee",
-        severity: "error",
-        agentId: employeeName,
-        sessionScope: exeSession,
-        tmuxSession: sessionName,
-        runtime: earlyRt.runtime,
-        result: "failed",
-        errorCode: "runtime_model_mismatch",
-        payload: { runtime: earlyRt.runtime, model: earlyRt.model }
-      });
-      return { sessionName, error: compat.error };
-    }
-  }
-  recordOrchestrationEventBestEffort({
-    eventType: "tmux.spawn.attempted",
-    source: "tmux-routing.spawnEmployee",
-    agentId: employeeName,
-    sessionScope: exeSession,
-    instanceId: opts?.instance != null ? String(opts.instance) : null,
-    tmuxSession: sessionName,
-    runtime: opts?.runtimeOverride ?? null,
-    payload: { hasCwdOverride: Boolean(opts?.cwd), autoInstance: Boolean(opts?.autoInstance) }
-  });
-  if (!existsSync9(logDir)) {
-    mkdirSync6(logDir, { recursive: true });
-  }
-  const cwdResolution = resolveSpawnCwd(opts?.cwd ?? projectDir, projectDir);
-  if (cwdResolution.cwd === null) {
-    process.stderr.write(
-      `[tmux-routing] spawn cwd does not exist: ${cwdResolution.requestedCwd} \u2014 and project root ${projectDir} is also missing; refusing spawn
-`
-    );
-    recordOrchestrationEventBestEffort({
-      eventType: "worktree.stale_cwd_fallback",
-      source: "tmux-routing.spawnEmployee",
-      severity: "error",
-      agentId: employeeName,
-      sessionScope: exeSession,
-      instanceId: opts?.instance != null ? String(opts.instance) : null,
-      tmuxSession: sessionName,
-      result: "failed",
-      errorCode: "spawn_cwd_missing",
-      payload: { requestedCwd: cwdResolution.requestedCwd, fallbackCwd: null, projectDir }
-    });
-    releaseSpawnLock(sessionName);
-    return { sessionName, error: `spawn cwd missing: ${cwdResolution.requestedCwd} (project root ${projectDir} also missing)` };
-  }
-  if (cwdResolution.fellBack) {
-    process.stderr.write(
-      `[tmux-routing] spawn cwd does not exist: ${cwdResolution.requestedCwd} \u2014 falling back to project root ${cwdResolution.cwd} (never spawning into a stale/deleted worktree)
-`
-    );
-    recordOrchestrationEventBestEffort({
-      eventType: "worktree.stale_cwd_fallback",
-      source: "tmux-routing.spawnEmployee",
-      severity: "warn",
-      agentId: employeeName,
-      sessionScope: exeSession,
-      instanceId: opts?.instance != null ? String(opts.instance) : null,
-      tmuxSession: sessionName,
-      payload: { requestedCwd: cwdResolution.requestedCwd, fallbackCwd: cwdResolution.cwd, projectDir }
-    });
-  }
-  const spawnCwd = cwdResolution.cwd;
-  const optedOutOfWorktree = opts?.spawnWorktree === false;
-  const coordinatorCheckout = !isCoordinatorName(employeeName) && optedOutOfWorktree ? detectCoordinatorCheckoutCwd(spawnCwd) : null;
-  if (coordinatorCheckout) {
-    const message = `Coordinator checkout refusal: refusing to spawn employee ${employeeName} in registered coordinator repo root ${coordinatorCheckout.repoRoot} (coordinator session ${coordinatorCheckout.coordinatorSession}). Spawned implementation agents must run from an isolated worktree; launching here would let commits land on the coordinator's checked-out branch.`;
-    process.stderr.write(`[tmux-routing] ${message}
+function spawnEmployee(employeeName, _exeSession, _projectDir, opts) {
+  const sessionName = employeeSessionName(employeeName, _exeSession, opts?.instance);
+  const message = tmuxDispatchRefusal(`spawnEmployee(${employeeName})`);
+  process.stderr.write(`[spawnEmployee] ${message}
 `);
-    releaseSpawnLock(sessionName);
-    recordOrchestrationEventBestEffort({
-      eventType: "worktree.refused",
-      source: "tmux-routing.spawnEmployee",
-      severity: "error",
-      agentId: employeeName,
-      sessionScope: exeSession,
-      instanceId: opts?.instance != null ? String(opts.instance) : null,
-      tmuxSession: sessionName,
-      result: "failed",
-      errorCode: "coordinator_checkout_cwd",
-      payload: {
-        cwd: spawnCwd,
-        coordinatorSession: coordinatorCheckout.coordinatorSession,
-        repoRoot: coordinatorCheckout.repoRoot
-      }
-    });
-    return { sessionName, error: message };
-  }
-  transport.kill(sessionName, exeSession);
-  let cleanupSuffix = "";
-  try {
-    const thisFile = fileURLToPath(import.meta.url);
-    const cleanupScript = path8.join(path8.dirname(thisFile), "..", "bin", "exe-session-cleanup.js");
-    if (existsSync9(cleanupScript)) {
-      cleanupSuffix = `; ${process.execPath} "${cleanupScript}" "${employeeName}" "${exeSession}"`;
-    }
-  } catch {
-  }
-  try {
-    const claudeJsonPath = path8.join(os6.homedir(), ".claude.json");
-    let claudeJson = {};
-    try {
-      claudeJson = JSON.parse(readFileSync6(claudeJsonPath, "utf8"));
-    } catch {
-    }
-    if (!claudeJson.projects) claudeJson.projects = {};
-    const projects = claudeJson.projects;
-    const trustDir = opts?.cwd ?? projectDir;
-    if (!projects[trustDir]) projects[trustDir] = {};
-    projects[trustDir].hasTrustDialogAccepted = true;
-    atomicWriteSync(claudeJsonPath, JSON.stringify(claudeJson, null, 2) + "\n");
-  } catch {
-  }
-  try {
-    const settingsDir = path8.join(os6.homedir(), ".claude", "projects");
-    const normalizedKey = (opts?.cwd ?? projectDir).replace(/\//g, "-").replace(/^-/, "");
-    const projSettingsDir = path8.join(settingsDir, normalizedKey);
-    const settingsPath = path8.join(projSettingsDir, "settings.json");
-    let settings = {};
-    try {
-      settings = JSON.parse(readFileSync6(settingsPath, "utf8"));
-    } catch {
-    }
-    const perms = settings.permissions ?? {};
-    const allow = perms.allow ?? [];
-    const toolNames = [
-      "recall_my_memory",
-      "store_memory",
-      "create_task",
-      "update_task",
-      "list_tasks",
-      "get_task",
-      // Work claims: spawned agents must be able to claim/release without a
-      // permission prompt, or the dispatch gate becomes advisory in practice.
-      "claim",
-      "ask_team_memory",
-      "store_behavior",
-      "get_identity",
-      "send_message"
-    ];
-    const requiredTools = expandDualPrefixTools(toolNames);
-    let changed = false;
-    for (const tool of requiredTools) {
-      if (!allow.includes(tool)) {
-        allow.push(tool);
-        changed = true;
-      }
-    }
-    if (changed) {
-      perms.allow = allow;
-      settings.permissions = perms;
-      mkdirSync6(projSettingsDir, { recursive: true });
-      atomicWriteSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
-    }
-  } catch {
-  }
-  let disciplineRefusal = null;
-  try {
-    const inWorktree = spawnCwd.includes("/.worktrees/") || spawnCwd.includes("/.claude/worktrees/");
-    const COORDINATOR_ROLES = /* @__PURE__ */ new Set(["COO", "CTO", "CMO"]);
-    const rosterResult = loadEmployeesState();
-    const emp = rosterResult.employees.find(
-      (e) => baseAgentName(e.name) === baseAgentName(employeeName)
-    );
-    const roleKnown = emp != null;
-    const isCodeRole = emp != null && !COORDINATOR_ROLES.has(emp.role);
-    const optOut = opts?.spawnWorktree === false;
-    const spawnCwdIsGitRepo = isInsideGitRepo(spawnCwd);
-    const decision = decideSpawnWorktreeDiscipline({
-      inWorktree,
-      roleKnown,
-      isCodeRole,
-      spawnCwdIsGitRepo,
-      optOut
-    });
-    if (decision !== "ok") {
-      const reason = rosterResult.status === "error" && !roleKnown ? "roster_load_error" : opts?.cwd != null ? "preset_cwd" : !roleKnown ? "roster_miss" : "git_timeout";
-      const role = emp?.role ?? "unknown";
-      if (decision === "refuse") {
-        const rosterNote = reason === "roster_load_error" ? ` The roster failed to load (unreadable/corrupt/truncated), so ${employeeName}'s role could not be verified and is treated as code-role.` : reason === "roster_miss" ? ` ${employeeName} is not in the roster, so its role could not be verified and is treated as code-role.` : "";
-        disciplineRefusal = `Worktree isolation required for ${roleKnown ? `code-role ${employeeName} (role=${role})` : employeeName}; refusing to spawn in MAIN checkout ${spawnCwd} (reason=${reason}) \u2014 commits would land on main.${rosterNote} Pass spawn_worktree=false (create_task) or opts.spawnWorktree=false to dispatch here anyway (e.g. a non-git automation project).`;
-        process.stderr.write(`[tmux-routing] ${disciplineRefusal}
-`);
-        recordOrchestrationEventBestEffort({
-          eventType: "worktree.refused",
-          source: "tmux-routing.spawnEmployee",
-          severity: "warn",
-          agentId: employeeName,
-          sessionScope: exeSession,
-          instanceId: opts?.instance != null ? String(opts.instance) : null,
-          tmuxSession: sessionName,
-          payload: { agent: employeeName, role, cwd: spawnCwd, reason, rosterStatus: rosterResult.status }
-        });
-      } else {
-        const viaOptOut = optOut;
-        process.stderr.write(
-          `[tmux-routing] WORKTREE BYPASSED: ${role} ${employeeName} spawning in MAIN checkout ${spawnCwd} (reason=${reason}${viaOptOut ? ", opt-out" : ""}) \u2014 commits will land on main
-`
-        );
-        if (viaOptOut && spawnCwdIsGitRepo) emitOptOutBypassWarning(employeeName, spawnCwd);
-        recordOrchestrationEventBestEffort({
-          eventType: "worktree.bypassed",
-          source: "tmux-routing.spawnEmployee",
-          severity: "warn",
-          agentId: employeeName,
-          sessionScope: exeSession,
-          instanceId: opts?.instance != null ? String(opts.instance) : null,
-          tmuxSession: sessionName,
-          payload: { agent: employeeName, role, cwd: spawnCwd, reason, optOut: viaOptOut, rosterStatus: rosterResult.status }
-        });
-      }
-    }
-  } catch {
-  }
-  if (disciplineRefusal) {
-    releaseSpawnLock(sessionName);
-    return { sessionName, error: disciplineRefusal };
-  }
-  const useExeAgent = !!(opts?.model && opts?.provider);
-  const agentRtConfig = resolveSpawnRuntimeConfig(
-    employeeName,
-    opts?.runtimeOverride,
-    opts?.modelOverride
-  );
-  const useCodex = !useExeAgent && agentRtConfig.runtime === "codex";
-  const useOpencode = !useExeAgent && !useCodex && agentRtConfig.runtime === "opencode";
-  const ccProvider = useExeAgent || useCodex || useOpencode ? DEFAULT_PROVIDER : detectActiveProvider();
-  const useBinSymlink = ccProvider !== DEFAULT_PROVIDER;
-  let legacyFallbackWarned = false;
-  if (!useExeAgent && !useBinSymlink) {
-    const identityPath = path8.join(
-      os6.homedir(),
-      ".exe-os",
-      "identity",
-      `${employeeName}.md`
-    );
-    _resetCcAgentSupportCache();
-    const hasAgentFlag = claudeSupportsAgentFlag();
-    if (hasAgentFlag) {
-      const symlink = ensureAgentSymlink(employeeName);
-      if (symlink.action === "conflict") {
-        process.stderr.write(
-          `[tmux-routing] WARN: respecting customer-owned ~/.claude/agents/${employeeName}.md (${symlink.conflict}); not overwriting or bypassing it.
-`
-        );
-      }
-    } else if (existsSync9(identityPath)) {
-      legacyFallbackWarned = true;
-    }
-    if (!opts?.behaviorsExported) {
-      const behaviorsFile = exportBehaviorsSync(
-        employeeName,
-        path8.basename(spawnCwd),
-        sessionName
-      );
-      void behaviorsFile;
-    }
-  }
-  if (legacyFallbackWarned) {
-    process.stderr.write(
-      `[tmux-routing] claude --agent not supported by installed CC. Falling back to --append-system-prompt-file for ${employeeName}. Upgrade Claude Code to enable native --agent launch.
-`
-    );
-  }
-  try {
-    const ctxDir = path8.join(os6.homedir(), ".exe-os", "session-cache");
-    mkdirSync6(ctxDir, { recursive: true });
-    const ctxFile = path8.join(ctxDir, `session-context-${sessionName}.md`);
-    const ctxContent = [
-      `## Session Context`,
-      `You are running in tmux session: ${sessionName}.`,
-      `Your parent coordinator session is ${exeSession}.`,
-      `Your employees (if any) use the -${exeSession} suffix.`
-    ].join("\n");
-    atomicWriteSync(ctxFile, ctxContent);
-    void ctxFile;
-  } catch {
-  }
-  const launchEnv = {
-    AGENT_ID: employeeName,
-    EXE_SESSION: exeSession,
-    EXE_SESSION_NAME: sessionName,
-    EXE_SESSION_START_ISO: (/* @__PURE__ */ new Date()).toISOString(),
-    EXE_OS_ENABLE_LEAN_MCP: "1",
-    // Bug 1ed715ec: dispatcher-reply path — spawned agents need to know which
-    // coordinator session dispatched them so they can address replies to the
-    // exact originator. exeSession is the coordinator's session name (e.g.
-    // "exe1", "exe2") that spawned this agent.
-    EXE_DISPATCHER_SESSION: exeSession,
-    // Bug bbf7824c: tmux inherits a minimal PATH from the launchd-spawned
-    // daemon, which omits the nvm/.local bin dir where exe-launch-agent,
-    // exe-agent, and claude live — so the spawn command is unresolvable and
-    // every auto-dispatch fails. Carry an explicit, PATH that includes the
-    // running node's bin dir and preserves the inherited PATH.
-    PATH: buildSpawnPath()
-  };
-  if (process.env.EXE_IS_DAEMON === "1") {
-    try {
-      let identityRole = "employee";
-      try {
-        const emp = loadEmployeesState().employees.find(
-          (e) => baseAgentName(e.name) === baseAgentName(employeeName)
-        );
-        if (emp?.role) identityRole = emp.role;
-      } catch {
-      }
-      const { token } = getDaemonAgentIdentityBroker().issue({
-        agentId: employeeName,
-        role: identityRole,
-        sessionId: sessionName
-      });
-      launchEnv[AGENT_IDENTITY_TOKEN_ENV] = token;
-    } catch (e) {
-      process.stderr.write(
-        `[tmux-routing] WARN: could not mint agent identity credential for ${sessionName}: ${e instanceof Error ? e.message : String(e)}
-`
-      );
-    }
-  }
-  if (ccProvider !== DEFAULT_PROVIDER) {
-    const cfg = PROVIDER_TABLE[ccProvider];
-    if (cfg?.apiKeyEnv) {
-      const keyVal = process.env[cfg.apiKeyEnv];
-      if (keyVal) {
-        launchEnv[cfg.apiKeyEnv] = keyVal;
-      }
-    }
-  }
-  if (useCodex) {
-    const codexCfg = RUNTIME_TABLE.codex;
-    if (codexCfg?.apiKeyEnv) {
-      const keyVal = process.env[codexCfg.apiKeyEnv];
-      if (keyVal) {
-        launchEnv[codexCfg.apiKeyEnv] = keyVal;
-      }
-    }
-    if (agentRtConfig.model) launchEnv.EXE_AGENT_MODEL = agentRtConfig.model;
-    if (agentRtConfig.reasoning_effort) {
-      launchEnv.EXE_AGENT_REASONING_EFFORT = agentRtConfig.reasoning_effort;
-    }
-  }
-  if (useOpencode) {
-    const ocCfg = PROVIDER_TABLE.opencode;
-    if (ocCfg?.apiKeyEnv) {
-      const keyVal = process.env[ocCfg.apiKeyEnv];
-      if (keyVal) {
-        launchEnv[ocCfg.apiKeyEnv] = keyVal;
-      }
-    }
-    if (agentRtConfig.model) launchEnv.ANTHROPIC_MODEL = agentRtConfig.model;
-  }
-  if (!useExeAgent && !useCodex && !useOpencode && !useBinSymlink) {
-    if (agentRtConfig.runtime === "claude" && agentRtConfig.model) {
-      const ccModel = normalizeCcModelName(agentRtConfig.model);
-      launchEnv.ANTHROPIC_MODEL = ccModel;
-      if (opts?.modelOverride) {
-        launchEnv.EXE_AGENT_MODEL = ccModel;
-      }
-    }
-  }
-  let launchCommand;
-  if (useExeAgent) {
-    launchCommand = `exe-agent --employee ${employeeName} --model ${opts.model} --provider ${opts.provider}`;
-  } else if (useCodex) {
-    process.stderr.write(
-      `[tmux-routing] agent-config: ${employeeName} \u2192 codex (${agentRtConfig.model})
-`
-    );
-    launchCommand = `exe-start-codex --agent ${employeeName} --session ${sessionName}`;
-  } else if (useOpencode) {
-    const binName = `${employeeName}-opencode`;
-    process.stderr.write(
-      `[tmux-routing] agent-config: ${employeeName} \u2192 opencode (${agentRtConfig.model})
-`
-    );
-    launchCommand = binName;
-  } else if (useBinSymlink) {
-    const binName = `${employeeName}-${ccProvider}`;
-    process.stderr.write(
-      `[tmux-routing] provider cascade: ${ccProvider} \u2192 spawning ${binName}
-`
-    );
-    launchCommand = binName;
-  } else {
-    let launcherAbs = "";
-    try {
-      const launcherJs = path8.join(path8.dirname(fileURLToPath(import.meta.url)), "..", "bin", "exe-launch-agent.js");
-      if (existsSync9(launcherJs)) launcherAbs = launcherJs;
-    } catch {
-    }
-    launchCommand = launcherAbs ? `"${process.execPath}" "${launcherAbs}" --agent ${employeeName}` : `exe-launch-agent --agent ${employeeName}`;
-  }
-  const exitMarkerPath = spawnExitMarkerPath(sessionName);
-  try {
-    mkdirSync6(SESSION_CACHE, { recursive: true });
-  } catch {
-  }
-  try {
-    unlinkSync4(exitMarkerPath);
-  } catch {
-  }
-  const spawnCommand = buildSpawnCommand(launchCommand, exitMarkerPath, cleanupSuffix);
-  const tmuxEnvArgs = Object.entries(launchEnv).flatMap(([key, val]) => ["-e", `${key}=${val}`]);
-  let spawnResult;
-  try {
-    execFileSync3("tmux", [
-      "new-session",
-      "-d",
-      ...tmuxEnvArgs,
-      "-s",
-      sessionName,
-      "-x",
-      "200",
-      "-y",
-      "50",
-      "-c",
-      spawnCwd,
-      spawnCommand
-    ], { timeout: 1e4 });
-    spawnResult = { sessionName };
-  } catch (e) {
-    spawnResult = { sessionName, error: `spawn failed: ${e instanceof Error ? e.message : String(e)}` };
-  }
-  if (spawnResult.error) {
-    releaseSpawnLock(sessionName);
-    recordOrchestrationEventBestEffort({
-      eventType: "tmux.spawn.completed",
-      source: "tmux-routing.spawnEmployee",
-      severity: "warn",
-      agentId: employeeName,
-      sessionScope: exeSession,
-      instanceId: opts?.instance != null ? String(opts.instance) : null,
-      tmuxSession: sessionName,
-      runtime: useCodex ? "codex" : useOpencode ? "opencode" : useExeAgent ? "exe-agent" : "claude",
-      durationMs: Date.now() - spawnStartedAt,
-      result: "failed",
-      errorCode: "tmux_new_session_failed"
-    });
-    return { sessionName, error: `tmux new-session failed: ${spawnResult.error}` };
-  }
-  transport.pipeLog(sessionName, logFile);
-  try {
-    const mySession = getMySession();
-    const dispatchInfo = path8.join(SESSION_CACHE, `dispatch-info-${sessionName}.json`);
-    atomicWriteJsonSync(dispatchInfo, {
-      dispatchedBy: mySession,
-      rootExe: exeSession,
-      provider: useBinSymlink ? ccProvider : useExeAgent ? opts.provider : useCodex ? "openai" : useOpencode ? "opencode" : "anthropic",
-      runtime: useCodex ? "codex" : useOpencode ? "opencode" : useExeAgent ? "exe-agent" : "claude",
-      model: useCodex ? agentRtConfig.model : useOpencode ? agentRtConfig.model : void 0,
-      createdAt: (/* @__PURE__ */ new Date()).toISOString()
-    });
-  } catch {
-  }
-  const callerIsDaemon = process.env.EXE_IS_DAEMON === "1";
-  const POLL_INTERVAL_MS = 500;
-  const runtimeLabel = useExeAgent ? "exe-agent" : useCodex ? "codex" : useOpencode ? "opencode" : "claude";
-  const LIVENESS_CAP_MS = Number(process.env.EXE_SPAWN_LIVENESS_CAP_MS) || (callerIsDaemon ? 6e3 : 8e3);
-  const livenessIterations = Math.max(1, Math.ceil(LIVENESS_CAP_MS / POLL_INTERVAL_MS));
-  let sessionLive = false;
-  for (let i = 0; i < livenessIterations; i++) {
-    if (transport.isAlive(sessionName)) {
-      sessionLive = true;
-      break;
-    }
-    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, POLL_INTERVAL_MS);
-  }
-  if (!sessionLive) sessionLive = transport.isAlive(sessionName);
-  if (!sessionLive) {
-    releaseSpawnLock(sessionName);
-    let lastPane = "";
-    try {
-      lastPane = transport.capturePane(sessionName, 50);
-    } catch {
-    }
-    const spawnFailureCause = classifySpawnFailurePane(lastPane);
-    const errMsg2 = `spawn did not start: tmux session "${sessionName}" never came alive within ${LIVENESS_CAP_MS / 1e3}s (${runtimeLabel} process failed to launch or exited immediately; cause=${spawnFailureCause}). Check ~/.exe-os/session-logs/${instanceLabel}-*.log \u2014 common cause: installed Claude Code does not support a launch flag, or the daemon PATH excludes the node/launcher bin dir (cause=path_not_found).`;
-    process.stderr.write(`[tmux-routing] SPAWN FAILED ${sessionName} (${spawnFailureCause}): ${errMsg2}
-`);
-    recordOrchestrationEventBestEffort({
-      eventType: "tmux.spawn.completed",
-      source: "tmux-routing.spawnEmployee",
-      severity: "warn",
-      agentId: employeeName,
-      sessionScope: exeSession,
-      instanceId: opts?.instance != null ? String(opts.instance) : null,
-      tmuxSession: sessionName,
-      runtime: useCodex ? "codex" : useOpencode ? "opencode" : useExeAgent ? "exe-agent" : "claude",
-      durationMs: Date.now() - spawnStartedAt,
-      result: "failed",
-      // Refined, classified errorCode drives the spawnFailureByCause breakdown
-      // in orchestration-events. Keep the generic detail in payload for context.
-      errorCode: spawnFailureCause,
-      payload: { spawnFailureCause, detail: "spawn_session_not_live", spawnCommand }
-    });
-    return { sessionName, error: errMsg2 };
-  }
-  const STARTUP_WATCH_MS = resolveStartupWatchCapMs({
-    useCodex,
-    callerIsDaemon,
-    override: process.env.EXE_SPAWN_STARTUP_WATCH_MS,
-    legacyOverride: process.env.EXE_SPAWN_STABILITY_MS
-  });
-  const STARTUP_WATCH_INTERVAL_MS = 250;
-  const startupWatch = watchSpawnStartup(
-    {
-      readLauncherExit: () => readSpawnExitMarker(exitMarkerPath),
-      isAlive: () => transport.isAlive(sessionName),
-      capturePane: () => transport.capturePane(sessionName, 50),
-      sleep: (ms) => {
-        Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
-      }
-    },
-    { capMs: STARTUP_WATCH_MS, intervalMs: STARTUP_WATCH_INTERVAL_MS }
-  );
-  if (startupWatch.outcome === "exited") {
-    try {
-      execFileSync3("tmux", ["kill-session", "-t", sessionName], { timeout: 3e3 });
-    } catch {
-    }
-    releaseSpawnLock(sessionName);
-    const { exitCode } = startupWatch;
-    const refused = exitCode === 78;
-    const errorCode = refused ? "launch_refused" : "startup_exit";
-    const paneCause = classifySpawnFailurePane(startupWatch.pane);
-    const errMsg2 = refused ? `spawn refused: ${runtimeLabel} launcher for "${sessionName}" exited 78 (refusal) within ${STARTUP_WATCH_MS / 1e3}s \u2014 it declined to start the agent. Most common cause: running as root (uid 0), where Claude Code rejects --dangerously-skip-permissions / bypassPermissions. Run the daemon as a non-root user. Check ~/.exe-os/session-logs/${instanceLabel}-*.log. Pane tail: ${startupWatch.pane.trim().slice(-500) || "(empty)"}` : `spawn died during startup: ${runtimeLabel} launcher for "${sessionName}" ` + (exitCode === null ? `disappeared within ${STARTUP_WATCH_MS / 1e3}s of launch` : `exited ${exitCode} within ${STARTUP_WATCH_MS / 1e3}s of launch`) + ` (cause=${paneCause}). Check ~/.exe-os/session-logs/${instanceLabel}-*.log. Pane tail: ${startupWatch.pane.trim().slice(-500) || "(empty)"}`;
-    process.stderr.write(`[tmux-routing] SPAWN FAILED ${sessionName} (${errorCode}): ${errMsg2}
-`);
-    recordOrchestrationEventBestEffort({
-      eventType: "tmux.spawn.completed",
-      source: "tmux-routing.spawnEmployee",
-      severity: "warn",
-      agentId: employeeName,
-      sessionScope: exeSession,
-      instanceId: opts?.instance != null ? String(opts.instance) : null,
-      tmuxSession: sessionName,
-      runtime: runtimeLabel,
-      durationMs: Date.now() - spawnStartedAt,
-      result: "failed",
-      errorCode,
-      payload: {
-        detail: "spawn_exited_during_startup",
-        exitCode,
-        spawnFailureCause: paneCause,
-        watchCapMs: STARTUP_WATCH_MS,
-        polls: startupWatch.polls,
-        spawnCommand
-      }
-    });
-    return { sessionName, error: errMsg2 };
-  }
-  if (useCodex) {
-    let pane = "";
-    try {
-      pane = transport.capturePane(sessionName, 80);
-    } catch {
-    }
-    if (isBlockedCodexPrompt(pane)) {
-      try {
-        execFileSync3("tmux", ["kill-session", "-t", sessionName], { timeout: 3e3 });
-      } catch {
-      }
-      releaseSpawnLock(sessionName);
-      const errMsg2 = `codex spawn blocked by an interactive model prompt in ${sessionName}; killed session so it can respawn non-interactively`;
-      process.stderr.write(`[tmux-routing] SPAWN FAILED ${sessionName} (codex_blocked_prompt): ${errMsg2}
-`);
-      recordOrchestrationEventBestEffort({
-        eventType: "tmux.spawn.completed",
-        source: "tmux-routing.spawnEmployee",
-        severity: "warn",
-        agentId: employeeName,
-        sessionScope: exeSession,
-        instanceId: opts?.instance != null ? String(opts.instance) : null,
-        tmuxSession: sessionName,
-        runtime: "codex",
-        durationMs: Date.now() - spawnStartedAt,
-        result: "failed",
-        errorCode: "codex_blocked_prompt",
-        payload: { detail: "interactive_model_prompt" }
-      });
-      return { sessionName, error: errMsg2 };
-    }
-  }
-  const POLL_CAP_MS = callerIsDaemon ? 0 : 45e3;
-  const pollIterations = Math.ceil(POLL_CAP_MS / POLL_INTERVAL_MS);
-  let booted = false;
-  for (let i = 0; i < pollIterations; i++) {
-    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, POLL_INTERVAL_MS);
-    try {
-      if (paneShowsRuntimeBanner(transport.capturePane(sessionName), runtimeLabel)) {
-        booted = true;
-        break;
-      }
-    } catch {
-    }
-  }
-  if (!booted && !callerIsDaemon) {
-    process.stderr.write(
-      `[tmux-routing] ${runtimeLabel} boot banner poll capped at ${POLL_CAP_MS / 1e3}s for ${sessionName} (session is live) \u2014 sending task nudge anyway
-`
-    );
-  }
-  if (!useExeAgent && !useCodex) {
-    if (callerIsDaemon) {
-      try {
-        const empRoster = loadEmployeesSync();
-        const bootCache = {
-          agentId: employeeName,
-          agentRole: empRoster.find((e) => baseAgentName(e.name) === baseAgentName(employeeName))?.role ?? "employee",
-          sessionName,
-          exeSession,
-          dispatchedAt: (/* @__PURE__ */ new Date()).toISOString()
-        };
-        const cachePath = path8.join(os6.homedir(), ".exe-os", "session-cache", `boot-cache-${sessionName}.json`);
-        writeFileSync5(cachePath, JSON.stringify(bootCache));
-      } catch {
-      }
-      scheduleDeferredSpawnNudge({
-        sessionName,
-        employeeName,
-        exeSession,
-        runtime: useOpencode ? "opencode" : "claude",
-        transport,
-        message: `You have pending tasks. Run list_tasks and start your highest priority task immediately.`
-      });
-    } else {
-      try {
-        transport.sendKeysLiteral(sessionName, `You have pending tasks. Run list_tasks and start immediately.`);
-      } catch (e) {
-        process.stderr.write(`[tmux-routing] CLI nudge ${employeeName}: ${e instanceof Error ? e.message : String(e)}
-`);
-      }
-    }
-  }
-  registerSession({
-    windowName: sessionName,
-    agentId: employeeName,
-    projectDir: spawnCwd,
-    parentExe: exeSession,
-    pid: 0,
-    registeredAt: (/* @__PURE__ */ new Date()).toISOString()
-  });
-  releaseSpawnLock(sessionName);
-  recordOrchestrationEventBestEffort({
-    eventType: "tmux.spawn.completed",
-    source: "tmux-routing.spawnEmployee",
-    agentId: employeeName,
-    sessionScope: exeSession,
-    instanceId: opts?.instance != null ? String(opts.instance) : null,
-    tmuxSession: sessionName,
-    runtime: useCodex ? "codex" : useOpencode ? "opencode" : useExeAgent ? "exe-agent" : "claude",
-    durationMs: Date.now() - spawnStartedAt,
-    result: booted ? "spawned_booted" : "spawned_unverified"
-  });
-  return { sessionName };
+  return { sessionName, error: message };
 }
 
 // src/lib/task-scope.ts
@@ -7909,12 +6480,6 @@ function canonicalTaskFilePath(oldTaskFile, assignedTo, newSessionScope) {
 }
 
 export {
-  getCcHelpOutputCached,
-  _resetCcHelpCache,
-  _resetCcAgentSupportCache,
-  claudeSupportsAgentFlag,
-  PROVIDER_TABLE,
-  DEFAULT_PROVIDER,
   isAmbiguousMultiCoordinatorContext,
   hasLiveCoordinatorLanes,
   isMultiCoordinatorSharedProject,
@@ -7945,6 +6510,7 @@ export {
   _resetDrainGuard,
   logTaskDispatch,
   DEFAULT_TASK_PRIORITY,
+  DEFAULT_NEW_TASK_EXECUTION_MODE,
   normalizeTaskPriority,
   isStructuredTaskCompletionReport,
   resolveCompletionChangedFiles,
@@ -8007,6 +6573,8 @@ export {
   getReviewChecklist,
   createReviewForCompletedTask,
   cleanupReviewFile,
+  tmuxDispatchRefusal,
+  spawnOverrideNoopNotice,
   BUSY_PATTERN,
   _resetExeBinDirCache,
   buildSpawnPath,
@@ -8025,7 +6593,6 @@ export {
   resolveExeSession,
   isEmployeeAlive,
   findFreeInstance,
-  detectCoordinatorCheckoutCwd,
   verifyPaneAtCapacity,
   resolveSessionRuntime,
   classifyPaneSessionState,
@@ -8058,18 +6625,7 @@ export {
   sendIntercomAsync,
   notifyParentExe,
   notifyCoordinatorTaskCompletion,
-  emitOptOutBypassWarning,
-  worktreeIsolationGate,
   ensureEmployee,
   ensureEmployeeAsync,
-  decideSpawnWorktreeDiscipline,
-  resolveSpawnCwd,
-  spawnExitMarkerPath,
-  buildSpawnCommand,
-  readSpawnExitMarker,
-  paneShowsRuntimeBanner,
-  classifySpawnFailurePane,
-  resolveStartupWatchCapMs,
-  watchSpawnStartup,
   spawnEmployee
 };