@askexenow/exe-os 0.8.33 → 0.8.37

package/dist/lib/hybrid-search.js

@@ -23,12 +23,68 @@ var init_memory = __esm({
   }
 });
 
+// src/lib/db-retry.ts
+function isBusyError(err) {
+  if (err instanceof Error) {
+    const msg = err.message.toLowerCase();
+    return msg.includes("sqlite_busy") || msg.includes("database is locked");
+  }
+  return false;
+}
+function delay(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function retryOnBusy(fn, label) {
+  let lastError;
+  for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+    try {
+      return await fn();
+    } catch (err) {
+      lastError = err;
+      if (!isBusyError(err) || attempt === MAX_RETRIES) {
+        throw err;
+      }
+      const backoff = BASE_DELAY_MS * Math.pow(2, attempt);
+      const jitter = Math.floor(Math.random() * MAX_JITTER_MS);
+      process.stderr.write(
+        `[exe-os] SQLITE_BUSY ${label} retry ${attempt + 1}/${MAX_RETRIES} \u2014 waiting ${backoff + jitter}ms
+`
+      );
+      await delay(backoff + jitter);
+    }
+  }
+  throw lastError;
+}
+function wrapWithRetry(client) {
+  return new Proxy(client, {
+    get(target, prop, receiver) {
+      if (prop === "execute") {
+        return (sql) => retryOnBusy(() => target.execute(sql), "execute");
+      }
+      if (prop === "batch") {
+        return (stmts) => retryOnBusy(() => target.batch(stmts), "batch");
+      }
+      return Reflect.get(target, prop, receiver);
+    }
+  });
+}
+var MAX_RETRIES, BASE_DELAY_MS, MAX_JITTER_MS;
+var init_db_retry = __esm({
+  "src/lib/db-retry.ts"() {
+    "use strict";
+    MAX_RETRIES = 3;
+    BASE_DELAY_MS = 200;
+    MAX_JITTER_MS = 300;
+  }
+});
+
 // src/lib/database.ts
 import { createClient } from "@libsql/client";
 async function initDatabase(config) {
   if (_client) {
     _client.close();
     _client = null;
+    _resilientClient = null;
   }
   const opts = {
     url: `file:${config.dbPath}`
@@ -37,17 +93,24 @@ async function initDatabase(config) {
     opts.encryptionKey = config.encryptionKey;
   }
   _client = createClient(opts);
+  _resilientClient = wrapWithRetry(_client);
 }
 function getClient() {
+  if (!_resilientClient) {
+    throw new Error("Database client not initialized. Call initDatabase() first.");
+  }
+  return _resilientClient;
+}
+function getRawClient() {
   if (!_client) {
     throw new Error("Database client not initialized. Call initDatabase() first.");
   }
   return _client;
 }
 async function ensureSchema() {
-  const client = getClient();
+  const client = getRawClient();
   await client.execute("PRAGMA journal_mode = WAL");
-  await client.execute("PRAGMA busy_timeout = 5000");
+  await client.execute("PRAGMA busy_timeout = 30000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -840,13 +903,16 @@ async function disposeDatabase() {
   if (_client) {
     _client.close();
     _client = null;
+    _resilientClient = null;
   }
 }
-var _client, initTurso, disposeTurso;
+var _client, _resilientClient, initTurso, disposeTurso;
 var init_database = __esm({
   "src/lib/database.ts"() {
     "use strict";
+    init_db_retry();
     _client = null;
+    _resilientClient = null;
     initTurso = initDatabase;
     disposeTurso = disposeDatabase;
   }
@@ -1202,7 +1268,7 @@ function listShards() {
 }
 async function ensureShardSchema(client) {
   await client.execute("PRAGMA journal_mode = WAL");
-  await client.execute("PRAGMA busy_timeout = 5000");
+  await client.execute("PRAGMA busy_timeout = 30000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -1463,7 +1529,8 @@ async function writeMemory(record) {
     has_error: record.has_error ? 1 : 0,
     raw_text: record.raw_text,
     vector: record.vector,
-    version: _nextVersion++,
+    version: 0,
+    // Placeholder — assigned atomically at flush time
     task_id: record.task_id ?? null,
     importance: record.importance ?? 5,
     status: record.status ?? "active",
@@ -1497,6 +1564,13 @@ async function flushBatch() {
   _flushing = true;
   try {
     const batch = _pendingRecords.slice(0);
+    const client = getClient();
+    const vResult = await client.execute("SELECT MAX(version) as max_v FROM memories");
+    let baseVersion = (Number(vResult.rows[0]?.max_v) || 0) + 1;
+    for (const row of batch) {
+      row.version = baseVersion++;
+    }
+    _nextVersion = baseVersion;
     const buildStmt = (row) => {
       const hasVector = row.vector !== null;
       const taskId = row.task_id ?? null;
@@ -2087,11 +2161,11 @@ async function connectEmbedDaemon() {
     }
   }
   const start = Date.now();
-  let delay = 100;
+  let delay2 = 100;
   while (Date.now() - start < CONNECT_TIMEOUT_MS) {
-    await new Promise((r) => setTimeout(r, delay));
+    await new Promise((r) => setTimeout(r, delay2));
     if (await connectToSocket()) return true;
-    delay = Math.min(delay * 2, 3e3);
+    delay2 = Math.min(delay2 * 2, 3e3);
   }
   return false;
 }
@@ -2183,11 +2257,11 @@ async function embedViaClient(text, priority = "high") {
 `);
       killAndRespawnDaemon();
       const start = Date.now();
-      let delay = 200;
+      let delay2 = 200;
       while (Date.now() - start < CONNECT_TIMEOUT_MS) {
-        await new Promise((r) => setTimeout(r, delay));
+        await new Promise((r) => setTimeout(r, delay2));
         if (await connectToSocket()) break;
-        delay = Math.min(delay * 2, 3e3);
+        delay2 = Math.min(delay2 * 2, 3e3);
       }
       if (!_connected) return null;
     }
@@ -2199,11 +2273,11 @@ async function embedViaClient(text, priority = "high") {
 `);
     killAndRespawnDaemon();
     const start = Date.now();
-    let delay = 200;
+    let delay2 = 200;
     while (Date.now() - start < CONNECT_TIMEOUT_MS) {
-      await new Promise((r) => setTimeout(r, delay));
+      await new Promise((r) => setTimeout(r, delay2));
       if (await connectToSocket()) break;
-      delay = Math.min(delay * 2, 3e3);
+      delay2 = Math.min(delay2 * 2, 3e3);
     }
     if (!_connected) return null;
     const retry = await sendRequest([text], priority);

package/dist/lib/identity-templates.js

@@ -75,6 +75,7 @@ Never say "I have no memories" without first searching broadly. Your memory may
 - **create_task** \u2014 assign work to specialists with clear specs
 - **update_task / close_task** \u2014 finalize reviews, mark work done
 - **store_behavior** \u2014 record corrections as behavioral rules (p0/p1/p2)
+- **update_identity** \u2014 rewrite any agent's identity when role/responsibilities change (exe/founder only)
 - **get_identity** \u2014 read any agent's identity for coordination
 - **send_message** \u2014 direct intercom to employees
 
@@ -438,6 +439,55 @@ You are the AI Product Lead \u2014 the competitive intelligence engine. You stud
 - Every recommendation includes cost/quality/latency tradeoff analysis
 - Separate experimental from production-ready \u2014 label clearly
 - If you can't verify, say so explicitly: "Couldn't verify because X"
+`,
+  "staff-code-reviewer": `---
+role: staff-code-reviewer
+title: Staff Code Reviewer & System Auditor
+agent_id: bob
+org_level: specialist
+created_by: system
+updated_at: ${(/* @__PURE__ */ new Date()).toISOString()}
+---
+## Identity
+
+You are \${agent_id}. Staff Code Reviewer and System Auditor. Last line of defense before code ships to customers. You catch what developers miss \u2014 systemic patterns that make entire feature categories break.
+
+## The 7 Audit Patterns (MANDATORY)
+
+1. **"Works on dev, breaks on user install"** \u2014 scoped paths, npm resolution, deps
+2. **"Two code paths, one untested"** \u2014 binary symlink vs /exe-call, verify BOTH
+3. **"Case sensitivity kills non-technical users"** \u2014 normalize all user inputs
+4. **"Hardcoded names in runtime logic"** \u2014 grep for employee names, must use roles
+5. **"Installer doesn't self-heal"** \u2014 npm update must auto-fix stale hooks/paths
+6. **"Data written but invisible"** \u2014 agent_id mismatch between writer and reader
+7. **"Partial fixes miss inline refs"** \u2014 before/after grep count is mandatory
+
+## Method
+
+1. Read actual source code
+2. Send to Codex MCP for sweep
+3. Validate against ARCHITECTURE.md
+4. Trace identity chain with CUSTOM-NAMED employee ("jarvis" as CTO)
+5. Before/after grep count for every fix
+6. Structured report: PASS/FAIL per item
+
+## Tools
+
+- **Codex MCP** \u2014 first tool for every review
+- **recall_my_memory / ask_team_memory** \u2014 past audit findings
+- **store_behavior** \u2014 record new patterns
+- **update_task** \u2014 mark reviews done with structured findings
+- **create_task** \u2014 assign fixes to the CTO
+
+## Completion Workflow
+
+1. Read the task brief and understand the audit scope
+2. Run the audit using all 7 patterns
+3. Write report to exe/output/ with file:line references
+4. Fix findings yourself if possible
+5. Call **update_task** with status "done" and finding count
+6. Call **store_memory** with audit summary
+7. Check for next task \u2014 auto-chain
 `
 };
 function getTemplate(role) {
@@ -452,6 +502,7 @@ function getTemplateForTitle(title) {
   if (t.includes("engineer") || t.includes("developer")) return IDENTITY_TEMPLATES["principal-engineer"];
   if (t.includes("content") || t.includes("production")) return IDENTITY_TEMPLATES["content-specialist"];
   if (t.includes("ai") || t.includes("product lead") || t.includes("specialist") && !t.includes("content")) return IDENTITY_TEMPLATES["ai-specialist"];
+  if (t.includes("review") || t.includes("audit") || t.includes("qa")) return IDENTITY_TEMPLATES["staff-code-reviewer"];
   return null;
 }
 export {

package/dist/lib/identity.js

@@ -97,12 +97,12 @@ var DEFAULT_CONFIG = {
 
 // src/lib/database.ts
 import { createClient } from "@libsql/client";
-var _client = null;
+var _resilientClient = null;
 function getClient() {
-  if (!_client) {
+  if (!_resilientClient) {
     throw new Error("Database client not initialized. Call initDatabase() first.");
   }
-  return _client;
+  return _resilientClient;
 }
 
 // src/lib/identity.ts

package/dist/lib/messaging.js

@@ -19,19 +19,27 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
+// src/lib/db-retry.ts
+var init_db_retry = __esm({
+  "src/lib/db-retry.ts"() {
+    "use strict";
+  }
+});
+
 // src/lib/database.ts
 import { createClient } from "@libsql/client";
 function getClient() {
-  if (!_client) {
+  if (!_resilientClient) {
     throw new Error("Database client not initialized. Call initDatabase() first.");
   }
-  return _client;
+  return _resilientClient;
 }
-var _client;
+var _resilientClient;
 var init_database = __esm({
   "src/lib/database.ts"() {
     "use strict";
-    _client = null;
+    init_db_retry();
+    _resilientClient = null;
   }
 });
 
@@ -432,7 +440,7 @@ var init_config = __esm({
 
 // src/lib/employees.ts
 import { readFile as readFile2, writeFile as writeFile2, mkdir as mkdir2 } from "fs/promises";
-import { existsSync as existsSync4, symlinkSync, readlinkSync } from "fs";
+import { existsSync as existsSync4, symlinkSync, readlinkSync, readFileSync as readFileSync4 } from "fs";
 import { execSync as execSync3 } from "child_process";
 import path4 from "path";
 var EMPLOYEES_PATH;
@@ -445,7 +453,7 @@ var init_employees = __esm({
 });
 
 // src/lib/license.ts
-import { readFileSync as readFileSync4, writeFileSync as writeFileSync3, existsSync as existsSync5, mkdirSync as mkdirSync3 } from "fs";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync3, existsSync as existsSync5, mkdirSync as mkdirSync3 } from "fs";
 import { randomUUID } from "crypto";
 import path5 from "path";
 import { jwtVerify, importSPKI } from "jose";
@@ -468,12 +476,12 @@ var init_license = __esm({
 });
 
 // src/lib/plan-limits.ts
-import { readFileSync as readFileSync5, existsSync as existsSync6 } from "fs";
+import { readFileSync as readFileSync6, existsSync as existsSync6 } from "fs";
 import path6 from "path";
 function getLicenseSync() {
   try {
     if (!existsSync6(CACHE_PATH2)) return freeLicense();
-    const raw = JSON.parse(readFileSync5(CACHE_PATH2, "utf8"));
+    const raw = JSON.parse(readFileSync6(CACHE_PATH2, "utf8"));
     if (!raw.token || typeof raw.token !== "string") return freeLicense();
     const parts = raw.token.split(".");
     if (parts.length !== 3) return freeLicense();
@@ -512,7 +520,7 @@ function assertEmployeeLimitSync(rosterPath) {
   let count = 0;
   try {
     if (existsSync6(filePath)) {
-      const raw = readFileSync5(filePath, "utf8");
+      const raw = readFileSync6(filePath, "utf8");
       const employees = JSON.parse(raw);
       count = Array.isArray(employees) ? employees.length : 0;
     }
@@ -547,10 +555,46 @@ var init_plan_limits = __esm({
 
 // src/lib/tmux-routing.ts
 import { execFileSync as execFileSync2, execSync as execSync4 } from "child_process";
-import { readFileSync as readFileSync6, writeFileSync as writeFileSync4, mkdirSync as mkdirSync4, existsSync as existsSync7, appendFileSync } from "fs";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync4, mkdirSync as mkdirSync4, existsSync as existsSync7, appendFileSync } from "fs";
 import path7 from "path";
 import os4 from "os";
 import { fileURLToPath } from "url";
+import { unlinkSync } from "fs";
+function spawnLockPath(sessionName) {
+  return path7.join(SPAWN_LOCK_DIR, `${sessionName}.lock`);
+}
+function isProcessAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function acquireSpawnLock(sessionName) {
+  if (!existsSync7(SPAWN_LOCK_DIR)) {
+    mkdirSync4(SPAWN_LOCK_DIR, { recursive: true });
+  }
+  const lockFile = spawnLockPath(sessionName);
+  if (existsSync7(lockFile)) {
+    try {
+      const lock = JSON.parse(readFileSync7(lockFile, "utf8"));
+      const age = Date.now() - lock.timestamp;
+      if (isProcessAlive(lock.pid) && age < 6e4) {
+        return false;
+      }
+    } catch {
+    }
+  }
+  writeFileSync4(lockFile, JSON.stringify({ pid: process.pid, timestamp: Date.now() }));
+  return true;
+}
+function releaseSpawnLock(sessionName) {
+  try {
+    unlinkSync(spawnLockPath(sessionName));
+  } catch {
+  }
+}
 function resolveBehaviorsExporterScript() {
   try {
     const thisFile = fileURLToPath(import.meta.url);
@@ -596,7 +640,7 @@ function extractRootExe(name) {
 }
 function getParentExe(sessionKey) {
   try {
-    const data = JSON.parse(readFileSync6(path7.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`), "utf8"));
+    const data = JSON.parse(readFileSync7(path7.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`), "utf8"));
     return data.parentExe || null;
   } catch {
     return null;
@@ -620,17 +664,17 @@ function isEmployeeAlive(sessionName) {
 }
 function findFreeInstance(employeeName, exeSession, maxInstances = 10, isAlive = isEmployeeAlive) {
   const base = employeeSessionName(employeeName, exeSession);
-  if (!isAlive(base)) return 0;
+  if (!isAlive(base) && acquireSpawnLock(base)) return 0;
   for (let i = 2; i <= maxInstances; i++) {
     const candidate = employeeSessionName(employeeName, exeSession, i);
-    if (!isAlive(candidate)) return i;
+    if (!isAlive(candidate) && acquireSpawnLock(candidate)) return i;
   }
   return null;
 }
 function readDebounceState() {
   try {
     if (!existsSync7(DEBOUNCE_FILE)) return {};
-    return JSON.parse(readFileSync6(DEBOUNCE_FILE, "utf8"));
+    return JSON.parse(readFileSync7(DEBOUNCE_FILE, "utf8"));
   } catch {
     return {};
   }
@@ -804,7 +848,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
     const claudeJsonPath = path7.join(os4.homedir(), ".claude.json");
     let claudeJson = {};
     try {
-      claudeJson = JSON.parse(readFileSync6(claudeJsonPath, "utf8"));
+      claudeJson = JSON.parse(readFileSync7(claudeJsonPath, "utf8"));
     } catch {
     }
     if (!claudeJson.projects) claudeJson.projects = {};
@@ -822,7 +866,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
     const settingsPath = path7.join(projSettingsDir, "settings.json");
     let settings = {};
     try {
-      settings = JSON.parse(readFileSync6(settingsPath, "utf8"));
+      settings = JSON.parse(readFileSync7(settingsPath, "utf8"));
     } catch {
     }
     const perms = settings.permissions ?? {};
@@ -935,6 +979,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
     command: spawnCommand
   });
   if (spawnResult.error) {
+    releaseSpawnLock(sessionName);
     return { sessionName, error: `tmux new-session failed: ${spawnResult.error}` };
   }
   transport.pipeLog(sessionName, logFile);
@@ -972,6 +1017,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
     }
   }
   if (!booted) {
+    releaseSpawnLock(sessionName);
     return { sessionName, error: `${useExeAgent ? "exe-agent" : "claude"} did not boot within 15s` };
   }
   if (!useExeAgent) {
@@ -988,9 +1034,10 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
     pid: 0,
     registeredAt: (/* @__PURE__ */ new Date()).toISOString()
   });
+  releaseSpawnLock(sessionName);
   return { sessionName };
 }
-var SESSION_CACHE, BEHAVIORS_EXPORT_TIMEOUT_MS, INTERCOM_DEBOUNCE_MS, INTERCOM_LOG2, DEBOUNCE_FILE, DEBOUNCE_CLEANUP_AGE_MS, BUSY_PATTERN;
+var SPAWN_LOCK_DIR, SESSION_CACHE, BEHAVIORS_EXPORT_TIMEOUT_MS, INTERCOM_DEBOUNCE_MS, INTERCOM_LOG2, DEBOUNCE_FILE, DEBOUNCE_CLEANUP_AGE_MS, BUSY_PATTERN;
 var init_tmux_routing = __esm({
   "src/lib/tmux-routing.ts"() {
     "use strict";
@@ -1002,6 +1049,7 @@ var init_tmux_routing = __esm({
     init_provider_table();
     init_intercom_queue();
     init_plan_limits();
+    SPAWN_LOCK_DIR = path7.join(os4.homedir(), ".exe-os", "spawn-locks");
     SESSION_CACHE = path7.join(os4.homedir(), ".exe-os", "session-cache");
     BEHAVIORS_EXPORT_TIMEOUT_MS = 1e4;
     INTERCOM_DEBOUNCE_MS = 3e4;

package/dist/lib/reminders.js

@@ -3,12 +3,12 @@ import crypto from "crypto";
 
 // src/lib/database.ts
 import { createClient } from "@libsql/client";
-var _client = null;
+var _resilientClient = null;
 function getClient() {
-  if (!_client) {
+  if (!_resilientClient) {
     throw new Error("Database client not initialized. Call initDatabase() first.");
   }
-  return _client;
+  return _resilientClient;
 }
 
 // src/lib/reminders.ts

package/dist/lib/schedules.js

@@ -261,7 +261,7 @@ function listShards() {
 }
 async function ensureShardSchema(client) {
   await client.execute("PRAGMA journal_mode = WAL");
-  await client.execute("PRAGMA busy_timeout = 5000");
+  await client.execute("PRAGMA busy_timeout = 30000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -451,12 +451,65 @@ import { execSync } from "child_process";
 
 // src/lib/database.ts
 import { createClient } from "@libsql/client";
+
+// src/lib/db-retry.ts
+var MAX_RETRIES = 3;
+var BASE_DELAY_MS = 200;
+var MAX_JITTER_MS = 300;
+function isBusyError(err) {
+  if (err instanceof Error) {
+    const msg = err.message.toLowerCase();
+    return msg.includes("sqlite_busy") || msg.includes("database is locked");
+  }
+  return false;
+}
+function delay(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function retryOnBusy(fn, label) {
+  let lastError;
+  for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+    try {
+      return await fn();
+    } catch (err) {
+      lastError = err;
+      if (!isBusyError(err) || attempt === MAX_RETRIES) {
+        throw err;
+      }
+      const backoff = BASE_DELAY_MS * Math.pow(2, attempt);
+      const jitter = Math.floor(Math.random() * MAX_JITTER_MS);
+      process.stderr.write(
+        `[exe-os] SQLITE_BUSY ${label} retry ${attempt + 1}/${MAX_RETRIES} \u2014 waiting ${backoff + jitter}ms
+`
+      );
+      await delay(backoff + jitter);
+    }
+  }
+  throw lastError;
+}
+function wrapWithRetry(client) {
+  return new Proxy(client, {
+    get(target, prop, receiver) {
+      if (prop === "execute") {
+        return (sql) => retryOnBusy(() => target.execute(sql), "execute");
+      }
+      if (prop === "batch") {
+        return (stmts) => retryOnBusy(() => target.batch(stmts), "batch");
+      }
+      return Reflect.get(target, prop, receiver);
+    }
+  });
+}
+
+// src/lib/database.ts
 var _client = null;
+var _resilientClient = null;
 var initTurso = initDatabase;
 async function initDatabase(config) {
   if (_client) {
     _client.close();
     _client = null;
+    _resilientClient = null;
   }
   const opts = {
     url: `file:${config.dbPath}`
@@ -465,20 +518,27 @@ async function initDatabase(config) {
     opts.encryptionKey = config.encryptionKey;
   }
   _client = createClient(opts);
+  _resilientClient = wrapWithRetry(_client);
 }
 function isInitialized() {
   return _client !== null;
 }
 function getClient() {
+  if (!_resilientClient) {
+    throw new Error("Database client not initialized. Call initDatabase() first.");
+  }
+  return _resilientClient;
+}
+function getRawClient() {
   if (!_client) {
     throw new Error("Database client not initialized. Call initDatabase() first.");
   }
   return _client;
 }
 async function ensureSchema() {
-  const client = getClient();
+  const client = getRawClient();
   await client.execute("PRAGMA journal_mode = WAL");
-  await client.execute("PRAGMA busy_timeout = 5000");
+  await client.execute("PRAGMA busy_timeout = 30000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {

package/dist/lib/skill-learning.js

@@ -3,12 +3,12 @@ import crypto2 from "crypto";
 
 // src/lib/database.ts
 import { createClient } from "@libsql/client";
-var _client = null;
+var _resilientClient = null;
 function getClient() {
-  if (!_client) {
+  if (!_resilientClient) {
     throw new Error("Database client not initialized. Call initDatabase() first.");
   }
-  return _client;
+  return _resilientClient;
 }
 
 // src/lib/behaviors.ts