claudecode-omc 4.4.10 → 4.7.4

package/bridge/team-bridge.cjs

@@ -48,7 +48,7 @@ __export(bridge_entry_exports, {
 module.exports = __toCommonJS(bridge_entry_exports);
 var import_fs10 = require("fs");
 var import_path12 = require("path");
-var import_os2 = require("os");
+var import_os3 = require("os");
 
 // src/team/mcp-team-bridge.ts
 var import_child_process2 = require("child_process");
@@ -157,12 +157,18 @@ function killSession(teamName, workerName) {
 
 // src/team/state-paths.ts
 var import_path4 = require("path");
+function normalizeTaskFileStem(taskId) {
+  const trimmed = String(taskId).trim().replace(/\.json$/i, "");
+  if (/^task-\d+$/.test(trimmed)) return trimmed;
+  if (/^\d+$/.test(trimmed)) return `task-${trimmed}`;
+  return trimmed;
+}
 var TeamPaths = {
   root: (teamName) => `.omc/state/team/${teamName}`,
   config: (teamName) => `.omc/state/team/${teamName}/config.json`,
   shutdown: (teamName) => `.omc/state/team/${teamName}/shutdown.json`,
   tasks: (teamName) => `.omc/state/team/${teamName}/tasks`,
-  taskFile: (teamName, taskId) => `.omc/state/team/${teamName}/tasks/${taskId}.json`,
+  taskFile: (teamName, taskId) => `.omc/state/team/${teamName}/tasks/${normalizeTaskFileStem(taskId)}.json`,
   workers: (teamName) => `.omc/state/team/${teamName}/workers`,
   workerDir: (teamName, workerName) => `.omc/state/team/${teamName}/workers/${workerName}`,
   heartbeat: (teamName, workerName) => `.omc/state/team/${teamName}/workers/${workerName}/heartbeat.json`,
@@ -171,8 +177,23 @@ var TeamPaths = {
   ready: (teamName, workerName) => `.omc/state/team/${teamName}/workers/${workerName}/.ready`,
   overlay: (teamName, workerName) => `.omc/state/team/${teamName}/workers/${workerName}/AGENTS.md`,
   shutdownAck: (teamName, workerName) => `.omc/state/team/${teamName}/workers/${workerName}/shutdown-ack.json`,
-  done: (teamName, workerName) => `.omc/state/team/${teamName}/workers/${workerName}/done.json`,
-  mailbox: (teamName, workerName) => `.omc/state/team/${teamName}/mailbox/${workerName}.jsonl`
+  mailbox: (teamName, workerName) => `.omc/state/team/${teamName}/mailbox/${workerName}.json`,
+  mailboxLockDir: (teamName, workerName) => `.omc/state/team/${teamName}/mailbox/.lock-${workerName}`,
+  dispatchRequests: (teamName) => `.omc/state/team/${teamName}/dispatch/requests.json`,
+  dispatchLockDir: (teamName) => `.omc/state/team/${teamName}/dispatch/.lock`,
+  workerStatus: (teamName, workerName) => `.omc/state/team/${teamName}/workers/${workerName}/status.json`,
+  workerIdleNotify: (teamName) => `.omc/state/team/${teamName}/worker-idle-notify.json`,
+  workerPrevNotifyState: (teamName, workerName) => `.omc/state/team/${teamName}/workers/${workerName}/prev-notify-state.json`,
+  events: (teamName) => `.omc/state/team/${teamName}/events.jsonl`,
+  approval: (teamName, taskId) => `.omc/state/team/${teamName}/approvals/${taskId}.json`,
+  manifest: (teamName) => `.omc/state/team/${teamName}/manifest.json`,
+  monitorSnapshot: (teamName) => `.omc/state/team/${teamName}/monitor-snapshot.json`,
+  summarySnapshot: (teamName) => `.omc/state/team/${teamName}/summary-snapshot.json`,
+  phaseState: (teamName) => `.omc/state/team/${teamName}/phase-state.json`,
+  scalingLock: (teamName) => `.omc/state/team/${teamName}/.scaling-lock`,
+  workerIdentity: (teamName, workerName) => `.omc/state/team/${teamName}/workers/${workerName}/identity.json`,
+  workerAgentsMd: (teamName) => `.omc/state/team/${teamName}/worker-agents.md`,
+  shutdownRequest: (teamName, workerName) => `.omc/state/team/${teamName}/workers/${workerName}/shutdown-request.json`
 };
 function getTaskStoragePath(cwd, teamName, taskId) {
   if (taskId !== void 0) {
@@ -391,6 +412,7 @@ function writeTaskFailure(teamName, taskId, error, opts) {
     lastFailedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
   atomicWriteJson(filePath, sidecar);
+  return sidecar;
 }
 function readTaskFailure(teamName, taskId, opts) {
   const filePath = failureSidecarPath(teamName, taskId, opts?.cwd);
@@ -402,12 +424,6 @@ function readTaskFailure(teamName, taskId, opts) {
     return null;
   }
 }
-var DEFAULT_MAX_TASK_RETRIES = 5;
-function isTaskRetryExhausted(teamName, taskId, maxRetries = DEFAULT_MAX_TASK_RETRIES, opts) {
-  const failure = readTaskFailure(teamName, taskId, opts);
-  if (!failure) return false;
-  return failure.retryCount >= maxRetries;
-}
 function listTaskIds(teamName, opts) {
   const scanDir = (dir) => {
     if (!(0, import_fs3.existsSync)(dir)) return [];
@@ -1039,7 +1055,11 @@ function sleep(ms) {
 function captureFileSnapshot(cwd) {
   const files = /* @__PURE__ */ new Set();
   try {
-    const statusOutput = (0, import_child_process2.execSync)("git status --porcelain", { cwd, encoding: "utf-8", timeout: 1e4 });
+    const statusOutput = (0, import_child_process2.execSync)("git status --porcelain", {
+      cwd,
+      encoding: "utf-8",
+      timeout: 1e4
+    });
     for (const line of statusOutput.split("\n")) {
       if (!line.trim()) continue;
       const filePart = line.slice(3);
@@ -1047,7 +1067,10 @@ function captureFileSnapshot(cwd) {
       const fileName = arrowIdx !== -1 ? filePart.slice(arrowIdx + 4) : filePart;
       files.add(fileName.trim());
     }
-    const untrackedOutput = (0, import_child_process2.execSync)("git ls-files --others --exclude-standard", { cwd, encoding: "utf-8", timeout: 1e4 });
+    const untrackedOutput = (0, import_child_process2.execSync)(
+      "git ls-files --others --exclude-standard",
+      { cwd, encoding: "utf-8", timeout: 1e4 }
+    );
     for (const line of untrackedOutput.split("\n")) {
       if (line.trim()) files.add(line.trim());
     }
@@ -1078,6 +1101,22 @@ function buildEffectivePermissions(config) {
     workerName: config.workerName
   });
 }
+var MODEL_NAME_REGEX = /^[a-z0-9][a-z0-9._-]{0,63}$/i;
+function validateModelName(model) {
+  if (!model) return;
+  if (!MODEL_NAME_REGEX.test(model)) {
+    throw new Error(
+      `Invalid model name: ${model}. Must match /^[a-z0-9][a-z0-9._-]{0,63}$/i`
+    );
+  }
+}
+function validateProvider(provider) {
+  if (provider !== "codex" && provider !== "gemini") {
+    throw new Error(
+      `Invalid provider: ${provider}. Must be 'codex' or 'gemini'`
+    );
+  }
+}
 var MAX_BUFFER_SIZE = 10 * 1024 * 1024;
 var INBOX_ROTATION_THRESHOLD = 10 * 1024 * 1024;
 function buildHeartbeat(config, status, currentTaskId, consecutiveErrors) {
@@ -1153,15 +1192,36 @@ function buildTaskPrompt(task, messages, config) {
     }
     inboxContext = "\nCONTEXT FROM TEAM LEAD:\n" + inboxParts.join("\n") + "\n";
   }
-  let result = formatPromptTemplate(sanitizedSubject, sanitizedDescription, config.workingDirectory, inboxContext);
+  let result = formatPromptTemplate(
+    sanitizedSubject,
+    sanitizedDescription,
+    config.workingDirectory,
+    inboxContext
+  );
   if (result.length > MAX_PROMPT_SIZE) {
     const overBy = result.length - MAX_PROMPT_SIZE;
-    sanitizedDescription = sanitizedDescription.slice(0, Math.max(0, sanitizedDescription.length - overBy));
-    result = formatPromptTemplate(sanitizedSubject, sanitizedDescription, config.workingDirectory, inboxContext);
+    sanitizedDescription = sanitizedDescription.slice(
+      0,
+      Math.max(0, sanitizedDescription.length - overBy)
+    );
+    result = formatPromptTemplate(
+      sanitizedSubject,
+      sanitizedDescription,
+      config.workingDirectory,
+      inboxContext
+    );
     if (result.length > MAX_PROMPT_SIZE) {
       const stillOverBy = result.length - MAX_PROMPT_SIZE;
-      sanitizedDescription = sanitizedDescription.slice(0, Math.max(0, sanitizedDescription.length - stillOverBy));
-      result = formatPromptTemplate(sanitizedSubject, sanitizedDescription, config.workingDirectory, inboxContext);
+      sanitizedDescription = sanitizedDescription.slice(
+        0,
+        Math.max(0, sanitizedDescription.length - stillOverBy)
+      );
+      result = formatPromptTemplate(
+        sanitizedSubject,
+        sanitizedDescription,
+        config.workingDirectory,
+        inboxContext
+      );
     }
   }
   return result;
@@ -1178,7 +1238,10 @@ function getOutputPath(config, taskId) {
   const dir = (0, import_path10.join)(config.workingDirectory, ".omc", "outputs");
   ensureDirWithMode(dir);
   const suffix = Math.random().toString(36).slice(2, 8);
-  return (0, import_path10.join)(dir, `team-${config.teamName}-task-${taskId}-${Date.now()}-${suffix}.md`);
+  return (0, import_path10.join)(
+    dir,
+    `team-${config.teamName}-task-${taskId}-${Date.now()}-${suffix}.md`
+  );
 }
 function readOutputSummary(outputFile) {
   try {
@@ -1203,7 +1266,10 @@ function readOutputSummary(outputFile) {
 function recordTaskCompletionUsage(args) {
   const completedAt = (/* @__PURE__ */ new Date()).toISOString();
   const wallClockMs = Math.max(0, Date.now() - args.startedAt);
-  const { promptChars, responseChars } = measureCharCounts(args.promptFile, args.outputFile);
+  const { promptChars, responseChars } = measureCharCounts(
+    args.promptFile,
+    args.outputFile
+  );
   recordTaskUsage(args.config.workingDirectory, args.config.teamName, {
     taskId: args.taskId,
     workerName: args.config.workerName,
@@ -1255,20 +1321,28 @@ function parseCodexOutput(output) {
   return messages.join("\n") || output;
 }
 function spawnCliProcess(provider, prompt, model, cwd, timeoutMs) {
+  validateProvider(provider);
+  validateModelName(model);
   let args;
   let cmd;
   if (provider === "codex") {
     cmd = "codex";
-    args = ["exec", "-m", model || "gpt-5.3-codex", "--json", "--dangerously-bypass-approvals-and-sandbox", "--skip-git-repo-check"];
+    args = [
+      "exec",
+      "-m",
+      model || "gpt-5.3-codex",
+      "--json",
+      "--dangerously-bypass-approvals-and-sandbox",
+      "--skip-git-repo-check"
+    ];
   } else {
     cmd = "gemini";
-    args = ["--yolo"];
+    args = ["--approval-mode", "yolo"];
     if (model) args.push("--model", model);
   }
   const child = (0, import_child_process2.spawn)(cmd, args, {
     stdio: ["pipe", "pipe", "pipe"],
-    cwd,
-    ...process.platform === "win32" ? { shell: true } : {}
+    cwd
   });
   const result = new Promise((resolve5, reject) => {
     let stdout = "";
@@ -1364,30 +1438,47 @@ async function runBridge(config) {
   log(`[bridge] ${workerName}@${teamName} starting (${provider})`);
   audit(config, "bridge_start");
   try {
-    writeHeartbeat(workingDirectory, buildHeartbeat(config, "polling", null, 0));
+    writeHeartbeat(
+      workingDirectory,
+      buildHeartbeat(config, "polling", null, 0)
+    );
   } catch (err) {
-    audit(config, "bridge_start", void 0, { warning: "startup_write_failed", error: String(err) });
+    audit(config, "bridge_start", void 0, {
+      warning: "startup_write_failed",
+      error: String(err)
+    });
   }
   let readyEmitted = false;
   while (true) {
     try {
       const shutdown = checkShutdownSignal(teamName, workerName);
       if (shutdown) {
-        audit(config, "shutdown_received", void 0, { requestId: shutdown.requestId, reason: shutdown.reason });
+        audit(config, "shutdown_received", void 0, {
+          requestId: shutdown.requestId,
+          reason: shutdown.reason
+        });
         await handleShutdown(config, shutdown, activeChild);
         break;
       }
       const drain = checkDrainSignal(teamName, workerName);
       if (drain) {
         log(`[bridge] Drain signal received: ${drain.reason}`);
-        audit(config, "shutdown_received", void 0, { requestId: drain.requestId, reason: drain.reason, type: "drain" });
+        audit(config, "shutdown_received", void 0, {
+          requestId: drain.requestId,
+          reason: drain.reason,
+          type: "drain"
+        });
         appendOutbox(teamName, workerName, {
           type: "shutdown_ack",
           requestId: drain.requestId,
           timestamp: (/* @__PURE__ */ new Date()).toISOString()
         });
         deleteDrainSignal(teamName, workerName);
-        await handleShutdown(config, { requestId: drain.requestId, reason: `drain: ${drain.reason}` }, null);
+        await handleShutdown(
+          config,
+          { requestId: drain.requestId, reason: `drain: ${drain.reason}` },
+          null
+        );
         break;
       }
       if (consecutiveErrors >= config.maxConsecutiveErrors) {
@@ -1400,14 +1491,23 @@ async function runBridge(config) {
           audit(config, "worker_quarantined", void 0, { consecutiveErrors });
           quarantineNotified = true;
         }
-        writeHeartbeat(workingDirectory, buildHeartbeat(config, "quarantined", null, consecutiveErrors));
+        writeHeartbeat(
+          workingDirectory,
+          buildHeartbeat(config, "quarantined", null, consecutiveErrors)
+        );
         await sleep(config.pollIntervalMs * 3);
         continue;
       }
-      writeHeartbeat(workingDirectory, buildHeartbeat(config, "polling", null, consecutiveErrors));
+      writeHeartbeat(
+        workingDirectory,
+        buildHeartbeat(config, "polling", null, consecutiveErrors)
+      );
       if (!readyEmitted) {
         try {
-          writeHeartbeat(workingDirectory, buildHeartbeat(config, "ready", null, 0));
+          writeHeartbeat(
+            workingDirectory,
+            buildHeartbeat(config, "ready", null, 0)
+          );
           appendOutbox(teamName, workerName, {
             type: "ready",
             message: `Worker ${workerName} is ready (${provider})`,
@@ -1416,7 +1516,10 @@ async function runBridge(config) {
           audit(config, "worker_ready");
           readyEmitted = true;
         } catch (err) {
-          audit(config, "bridge_start", void 0, { warning: "startup_write_failed", error: String(err) });
+          audit(config, "bridge_start", void 0, {
+            warning: "startup_write_failed",
+            error: String(err)
+          });
         }
       }
       const messages = readNewInboxMessages(teamName, workerName);
@@ -1426,10 +1529,16 @@ async function runBridge(config) {
         updateTask(teamName, task.id, { status: "in_progress" });
         audit(config, "task_claimed", task.id);
         audit(config, "task_started", task.id);
-        writeHeartbeat(workingDirectory, buildHeartbeat(config, "executing", task.id, consecutiveErrors));
+        writeHeartbeat(
+          workingDirectory,
+          buildHeartbeat(config, "executing", task.id, consecutiveErrors)
+        );
         const shutdownBeforeSpawn = checkShutdownSignal(teamName, workerName);
         if (shutdownBeforeSpawn) {
-          audit(config, "shutdown_received", task.id, { requestId: shutdownBeforeSpawn.requestId, reason: shutdownBeforeSpawn.reason });
+          audit(config, "shutdown_received", task.id, {
+            requestId: shutdownBeforeSpawn.requestId,
+            reason: shutdownBeforeSpawn.reason
+          });
           updateTask(teamName, task.id, { status: "pending" });
           await handleShutdown(config, shutdownBeforeSpawn, null);
           return;
@@ -1454,7 +1563,10 @@ async function runBridge(config) {
             config.taskTimeoutMs
           );
           activeChild = child;
-          audit(config, "cli_spawned", task.id, { provider, model: config.model });
+          audit(config, "cli_spawned", task.id, {
+            provider,
+            model: config.model
+          });
           const response = await result;
           activeChild = null;
           writeFileWithMode(outputFile, response);
@@ -1464,14 +1576,21 @@ async function runBridge(config) {
             const changedPaths = diffSnapshots(preSnapshot, postSnapshot);
             if (changedPaths.length > 0) {
               const effectivePerms = buildEffectivePermissions(config);
-              violations = findPermissionViolations(changedPaths, effectivePerms, workingDirectory);
+              violations = findPermissionViolations(
+                changedPaths,
+                effectivePerms,
+                workingDirectory
+              );
             }
           }
           if (violations.length > 0) {
             const violationSummary = violations.map((v) => `  - ${v.path}: ${v.reason}`).join("\n");
             if (enforcementMode === "enforce") {
               audit(config, "permission_violation", task.id, {
-                violations: violations.map((v) => ({ path: v.path, reason: v.reason })),
+                violations: violations.map((v) => ({
+                  path: v.path,
+                  reason: v.reason
+                })),
                 mode: "enforce"
               });
               updateTask(teamName, task.id, {
@@ -1490,7 +1609,9 @@ async function runBridge(config) {
 ${violationSummary}`,
                 timestamp: (/* @__PURE__ */ new Date()).toISOString()
               });
-              log(`[bridge] Task ${task.id} failed: permission violations (enforce mode)`);
+              log(
+                `[bridge] Task ${task.id} failed: permission violations (enforce mode)`
+              );
               try {
                 recordTaskCompletionUsage({
                   config,
@@ -1502,16 +1623,23 @@ ${violationSummary}`,
                   startedAtIso: taskStartedAtIso
                 });
               } catch (usageErr) {
-                log(`[bridge] usage tracking failed for task ${task.id}: ${usageErr.message}`);
+                log(
+                  `[bridge] usage tracking failed for task ${task.id}: ${usageErr.message}`
+                );
               }
               consecutiveErrors = 0;
             } else {
               audit(config, "permission_audit", task.id, {
-                violations: violations.map((v) => ({ path: v.path, reason: v.reason })),
+                violations: violations.map((v) => ({
+                  path: v.path,
+                  reason: v.reason
+                })),
                 mode: "audit"
               });
-              log(`[bridge] Permission audit warning for task ${task.id}:
-${violationSummary}`);
+              log(
+                `[bridge] Permission audit warning for task ${task.id}:
+${violationSummary}`
+              );
               updateTask(teamName, task.id, { status: "completed" });
               audit(config, "task_completed", task.id);
               consecutiveErrors = 0;
@@ -1534,9 +1662,13 @@ ${violationSummary}`);
                   startedAtIso: taskStartedAtIso
                 });
               } catch (usageErr) {
-                log(`[bridge] usage tracking failed for task ${task.id}: ${usageErr.message}`);
+                log(
+                  `[bridge] usage tracking failed for task ${task.id}: ${usageErr.message}`
+                );
               }
-              log(`[bridge] Task ${task.id} completed (with ${violations.length} audit warning(s))`);
+              log(
+                `[bridge] Task ${task.id} completed (with ${violations.length} audit warning(s))`
+              );
             }
           } else {
             updateTask(teamName, task.id, { status: "completed" });
@@ -1560,7 +1692,9 @@ ${violationSummary}`);
                 startedAtIso: taskStartedAtIso
               });
             } catch (usageErr) {
-              log(`[bridge] usage tracking failed for task ${task.id}: ${usageErr.message}`);
+              log(
+                `[bridge] usage tracking failed for task ${task.id}: ${usageErr.message}`
+              );
             }
             log(`[bridge] Task ${task.id} completed`);
           }
@@ -1573,10 +1707,11 @@ ${violationSummary}`);
           } else {
             audit(config, "cli_error", task.id, { error: errorMsg });
           }
-          writeTaskFailure(teamName, task.id, errorMsg);
-          const failure = readTaskFailure(teamName, task.id);
-          const attempt = failure?.retryCount || 1;
-          if (isTaskRetryExhausted(teamName, task.id, config.maxRetries)) {
+          const failure = writeTaskFailure(teamName, task.id, errorMsg, {
+            cwd: workingDirectory
+          });
+          const attempt = failure.retryCount;
+          if (attempt >= (config.maxRetries ?? 5)) {
             updateTask(teamName, task.id, {
               status: "completed",
               metadata: {
@@ -1586,7 +1721,10 @@ ${violationSummary}`);
                 failedAttempts: attempt
               }
             });
-            audit(config, "task_permanently_failed", task.id, { error: errorMsg, attempts: attempt });
+            audit(config, "task_permanently_failed", task.id, {
+              error: errorMsg,
+              attempts: attempt
+            });
             appendOutbox(teamName, workerName, {
               type: "error",
               taskId: task.id,
@@ -1604,9 +1742,13 @@ ${violationSummary}`);
                 startedAtIso: taskStartedAtIso
               });
             } catch (usageErr) {
-              log(`[bridge] usage tracking failed for task ${task.id}: ${usageErr.message}`);
+              log(
+                `[bridge] usage tracking failed for task ${task.id}: ${usageErr.message}`
+              );
             }
-            log(`[bridge] Task ${task.id} permanently failed after ${attempt} attempts`);
+            log(
+              `[bridge] Task ${task.id} permanently failed after ${attempt} attempts`
+            );
           } else {
             updateTask(teamName, task.id, { status: "pending" });
             audit(config, "task_failed", task.id, { error: errorMsg, attempt });
@@ -1616,7 +1758,9 @@ ${violationSummary}`);
               error: `${errorMsg} (attempt ${attempt})`,
               timestamp: (/* @__PURE__ */ new Date()).toISOString()
             });
-            log(`[bridge] Task ${task.id} failed (attempt ${attempt}): ${errorMsg}`);
+            log(
+              `[bridge] Task ${task.id} failed (attempt ${attempt}): ${errorMsg}`
+            );
           }
         }
       } else {
@@ -1630,7 +1774,9 @@ ${violationSummary}`);
           idleNotified = true;
         }
         try {
-          const teamStatus = getTeamStatus(teamName, workingDirectory, 3e4, { includeUsage: false });
+          const teamStatus = getTeamStatus(teamName, workingDirectory, 3e4, {
+            includeUsage: false
+          });
           if (teamStatus.taskSummary.total > 0 && teamStatus.taskSummary.pending === 0 && teamStatus.taskSummary.inProgress === 0) {
             log(`[bridge] All team tasks complete. Auto-terminating worker.`);
             appendOutbox(teamName, workerName, {
@@ -1638,12 +1784,20 @@ ${violationSummary}`);
               message: "All team tasks reached terminal state. Worker self-terminating.",
               timestamp: (/* @__PURE__ */ new Date()).toISOString()
             });
-            audit(config, "bridge_shutdown", void 0, { reason: "auto_cleanup_all_tasks_complete" });
-            await handleShutdown(config, { requestId: "auto-cleanup", reason: "all_tasks_complete" }, activeChild);
+            audit(config, "bridge_shutdown", void 0, {
+              reason: "auto_cleanup_all_tasks_complete"
+            });
+            await handleShutdown(
+              config,
+              { requestId: "auto-cleanup", reason: "all_tasks_complete" },
+              activeChild
+            );
             break;
           }
         } catch (err) {
-          log(`[bridge] Auto-cleanup status check failed: ${err.message}`);
+          log(
+            `[bridge] Auto-cleanup status check failed: ${err.message}`
+          );
         }
       }
       rotateOutboxIfNeeded(teamName, workerName, config.outboxMaxLines);
@@ -1661,6 +1815,7 @@ ${violationSummary}`);
 var import_crypto = require("crypto");
 var import_child_process3 = require("child_process");
 var import_fs9 = require("fs");
+var import_os2 = require("os");
 var import_path11 = require("path");
 var MAX_WORKTREE_CACHE_SIZE = 8;
 var worktreeCacheMap = /* @__PURE__ */ new Map();
@@ -1676,7 +1831,8 @@ function getWorktreeRoot(cwd) {
     const root = (0, import_child_process3.execSync)("git rev-parse --show-toplevel", {
       cwd: effectiveCwd,
       encoding: "utf-8",
-      stdio: ["pipe", "pipe", "pipe"]
+      stdio: ["pipe", "pipe", "pipe"],
+      timeout: 5e3
     }).trim();
     if (worktreeCacheMap.size >= MAX_WORKTREE_CACHE_SIZE) {
       const oldest = worktreeCacheMap.keys().next().value;
@@ -1721,7 +1877,7 @@ function validateBridgeWorkingDirectory(workingDirectory) {
     throw new Error(`workingDirectory is not a directory: ${workingDirectory}`);
   }
   const resolved = (0, import_fs10.realpathSync)(workingDirectory);
-  const home = (0, import_os2.homedir)();
+  const home = (0, import_os3.homedir)();
   if (!resolved.startsWith(home + "/") && resolved !== home) {
     throw new Error(`workingDirectory is outside home directory: ${resolved}`);
   }
@@ -1737,7 +1893,7 @@ function main() {
     process.exit(1);
   }
   const configPath2 = (0, import_path12.resolve)(process.argv[configIdx + 1]);
-  const home = (0, import_os2.homedir)();
+  const home = (0, import_os3.homedir)();
   const claudeConfigDir = getClaudeConfigDir();
   if (!validateConfigPath(configPath2, home, claudeConfigDir)) {
     console.error(`Config path must be under ~/ with ${claudeConfigDir} or ~/.omc/ subpath: ${configPath2}`);