@askexenow/exe-os 0.8.37 → 0.8.39

package/dist/hooks/ingest.js

@@ -1,5 +1,5 @@
 // src/lib/config.ts
-import { readFile, writeFile, mkdir } from "fs/promises";
+import { readFile, writeFile, mkdir, chmod } from "fs/promises";
 import { readFileSync, existsSync, renameSync } from "fs";
 import path from "path";
 import os from "os";
@@ -170,8 +170,8 @@ function loadConfigSync() {
 
 // src/adapters/claude/hooks/ingest.ts
 import { spawn } from "child_process";
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2, existsSync as existsSync2, openSync, closeSync } from "fs";
-import path3 from "path";
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, mkdirSync as mkdirSync3, existsSync as existsSync2, openSync, closeSync } from "fs";
+import path4 from "path";
 import { fileURLToPath } from "url";
 
 // src/adapters/claude/active-agent.ts
@@ -412,6 +412,44 @@ function errorFingerprint(toolName, errorText) {
   return crypto.createHash("sha256").update(`${toolName}:${normalized}`).digest("hex").slice(0, 16);
 }
 
+// src/lib/worker-gate.ts
+import { readdirSync as readdirSync2, writeFileSync as writeFileSync2, unlinkSync as unlinkSync2, mkdirSync as mkdirSync2 } from "fs";
+import path3 from "path";
+var WORKER_PID_DIR = path3.join(EXE_AI_DIR, "worker-pids");
+var MAX_CONCURRENT_WORKERS = 3;
+function tryAcquireWorkerSlot() {
+  try {
+    mkdirSync2(WORKER_PID_DIR, { recursive: true });
+    const files = readdirSync2(WORKER_PID_DIR);
+    let alive = 0;
+    for (const f of files) {
+      if (!f.endsWith(".pid")) continue;
+      const dashIdx = f.lastIndexOf("-");
+      const pid = parseInt(f.slice(dashIdx + 1).replace(".pid", ""), 10);
+      if (isNaN(pid)) continue;
+      try {
+        process.kill(pid, 0);
+        alive++;
+      } catch {
+        try {
+          unlinkSync2(path3.join(WORKER_PID_DIR, f));
+        } catch {
+        }
+      }
+    }
+    return alive < MAX_CONCURRENT_WORKERS;
+  } catch {
+    return true;
+  }
+}
+function registerWorkerPid(pid) {
+  try {
+    mkdirSync2(WORKER_PID_DIR, { recursive: true });
+    writeFileSync2(path3.join(WORKER_PID_DIR, `worker-${pid}.pid`), String(pid));
+  } catch {
+  }
+}
+
 // src/adapters/claude/hooks/ingest.ts
 if (!process.env.AGENT_ID) {
   process.env.AGENT_ID = "default";
@@ -420,7 +458,7 @@ if (!process.env.AGENT_ID) {
 if (!loadConfigSync().autoIngestion) {
   process.exit(0);
 }
-var WORKER_LOG_PATH = path3.join(EXE_AI_DIR, "workers.log");
+var WORKER_LOG_PATH = path4.join(EXE_AI_DIR, "workers.log");
 function openWorkerLog() {
   try {
     return openSync(WORKER_LOG_PATH, "a");
@@ -432,9 +470,9 @@ var ALLOWED_TOOL_RE = /^(Bash|Edit|Write|Read|Glob|Grep|Agent|mcp__.*)$/;
 var WRITE_TOOL_RE = /^(Bash|Edit|Write)$/;
 var SUMMARY_INTERVAL = 25;
 var MIN_WRITES_FOR_SUMMARY = 3;
-var COUNTER_DIR = path3.join(EXE_AI_DIR, "session-cache");
+var COUNTER_DIR = path4.join(EXE_AI_DIR, "session-cache");
 function getCounterPath(sessionId) {
-  return path3.join(COUNTER_DIR, `counter-${sessionId}.json`);
+  return path4.join(COUNTER_DIR, `counter-${sessionId}.json`);
 }
 function loadCounter(sessionId) {
   try {
@@ -446,8 +484,8 @@ function loadCounter(sessionId) {
 }
 function saveCounter(sessionId, counter) {
   try {
-    mkdirSync2(COUNTER_DIR, { recursive: true });
-    writeFileSync2(getCounterPath(sessionId), JSON.stringify(counter));
+    mkdirSync3(COUNTER_DIR, { recursive: true });
+    writeFileSync3(getCounterPath(sessionId), JSON.stringify(counter));
   } catch {
   }
 }
@@ -466,7 +504,7 @@ process.stdin.on("end", () => {
       process.exit(0);
     }
     const agent = getActiveAgent();
-    if (/^(Read|Write|Edit)$/.test(data.tool_name) && agent.agentId !== "exe" && agent.agentId !== "default") {
+    if (/^(Read|Write|Edit)$/.test(data.tool_name) && agent.agentRole !== "COO" && agent.agentId !== "default") {
       const filePath = data.tool_input?.file_path ?? "";
       const exeMatch = filePath.match(/exe\/([^/]+)\//);
       if (exeMatch && exeMatch[1] !== agent.agentId) {
@@ -483,7 +521,7 @@ Do NOT read, write, or modify files in another employee's folder.`
         process.stdout.write(warning);
       }
     }
-    if (/^(Read|Glob|Grep|Bash)$/.test(data.tool_name) && agent.agentId === "exe") {
+    if (/^(Read|Glob|Grep|Bash)$/.test(data.tool_name) && agent.agentRole === "COO") {
       const target = data.tool_input?.file_path ?? data.tool_input?.path ?? data.tool_input?.pattern ?? String(data.tool_input?.command ?? "");
       if (/exe\/exe\//.test(target)) {
         const warning = JSON.stringify({
@@ -498,7 +536,7 @@ Open reviews are tracked in the tasks table: SELECT COUNT(*) FROM tasks WHERE as
         process.stdout.write(warning);
       }
     }
-    if (/^(Write|Bash)$/.test(data.tool_name) && agent.agentId !== "exe" && agent.agentId !== "default") {
+    if (/^(Write|Bash)$/.test(data.tool_name) && agent.agentRole !== "COO" && agent.agentId !== "default") {
       const filePath = data.tool_input?.file_path ?? String(data.tool_input?.command ?? "");
       const outputMatch = filePath.match(/exe\/output\/([^/\-]+)-([^/]+)/);
       if (outputMatch) {
@@ -522,7 +560,7 @@ Your output files must start with: exe/output/${agent.agentId}-`
       const classification = classifyError(errorText);
       if (classification === "system" && data.session_id) {
         const fp = errorFingerprint(data.tool_name, errorText);
-        const fpFilePath = path3.join(COUNTER_DIR, `bug-fingerprints-${data.session_id}.json`);
+        const fpFilePath = path4.join(COUNTER_DIR, `bug-fingerprints-${data.session_id}.json`);
         let fpData = {
           seen: {},
           taskCount: 0,
@@ -547,13 +585,13 @@ Your output files must start with: exe/output/${agent.agentId}-`
           fpData.seen[fp] = { count: 1, firstAt: now, lastAt: now };
           fpData.taskCount++;
           fpData.lastTaskAt = now;
-          const bugWorkerPath = path3.resolve(
-            path3.dirname(fileURLToPath(import.meta.url)),
+          const bugWorkerPath = path4.resolve(
+            path4.dirname(fileURLToPath(import.meta.url)),
             "bug-report-worker.js"
           );
-          if (existsSync2(bugWorkerPath)) {
+          if (existsSync2(bugWorkerPath) && tryAcquireWorkerSlot()) {
             const stderrFd2 = openWorkerLog();
-            const projectName = process.cwd().split(path3.sep).pop() ?? "unknown";
+            const projectName = process.cwd().split(path4.sep).pop() ?? "unknown";
             const bugToolInput = data.tool_input ?? {};
             const bugWorker = spawn(process.execPath, [bugWorkerPath], {
               detached: true,
@@ -569,6 +607,7 @@ Your output files must start with: exe/output/${agent.agentId}-`
                 BUG_PROJECT_NAME: projectName
               }
             });
+            if (bugWorker.pid) registerWorkerPid(bugWorker.pid);
             bugWorker.unref();
             if (typeof stderrFd2 === "number") try {
               closeSync(stderrFd2);
@@ -580,13 +619,13 @@ Your output files must start with: exe/output/${agent.agentId}-`
           }
         }
         try {
-          mkdirSync2(COUNTER_DIR, { recursive: true });
-          writeFileSync2(fpFilePath, JSON.stringify(fpData));
+          mkdirSync3(COUNTER_DIR, { recursive: true });
+          writeFileSync3(fpFilePath, JSON.stringify(fpData));
         } catch {
         }
       }
     }
-    if (data.session_id && agent.agentId !== "exe" && agent.agentId !== "default") {
+    if (data.session_id && agent.agentRole !== "COO" && agent.agentId !== "default") {
       const counter = loadCounter(data.session_id);
       counter.total++;
       if (WRITE_TOOL_RE.test(data.tool_name)) {
@@ -598,11 +637,11 @@ Your output files must start with: exe/output/${agent.agentId}-`
       }
       const callsSinceLastSummary = counter.total - counter.lastSummaryAt;
       if (callsSinceLastSummary >= SUMMARY_INTERVAL && counter.writes >= MIN_WRITES_FOR_SUMMARY) {
-        const summaryWorkerPath = path3.resolve(
-          path3.dirname(fileURLToPath(import.meta.url)),
+        const summaryWorkerPath = path4.resolve(
+          path4.dirname(fileURLToPath(import.meta.url)),
           "summary-worker.js"
         );
-        if (existsSync2(summaryWorkerPath)) {
+        if (existsSync2(summaryWorkerPath) && tryAcquireWorkerSlot()) {
           const stderrFd2 = openWorkerLog();
           const summaryWorker = spawn(process.execPath, [summaryWorkerPath], {
             detached: true,
@@ -616,6 +655,7 @@ Your output files must start with: exe/output/${agent.agentId}-`
               EXE_SUMMARY_WRITES: String(counter.writes)
             }
           });
+          if (summaryWorker.pid) registerWorkerPid(summaryWorker.pid);
           summaryWorker.unref();
           if (typeof stderrFd2 === "number") try {
             closeSync(stderrFd2);
@@ -643,13 +683,13 @@ Your output files must start with: exe/output/${agent.agentId}-`
       const bashOutput = typeof data.tool_response === "string" ? data.tool_response : JSON.stringify(data.tool_response ?? "");
       const commitMatch = bashOutput.match(/\[(\S+)\s+([a-f0-9]{7,40})\]\s+(.+)/);
       if (commitMatch) {
-        const commitWorkerPath = path3.resolve(
-          path3.dirname(fileURLToPath(import.meta.url)),
+        const commitWorkerPath = path4.resolve(
+          path4.dirname(fileURLToPath(import.meta.url)),
           "commit-complete.js"
         );
-        if (existsSync2(commitWorkerPath)) {
+        if (existsSync2(commitWorkerPath) && tryAcquireWorkerSlot()) {
           const stderrFd2 = openWorkerLog();
-          const projectName = process.cwd().split(path3.sep).pop() ?? "unknown";
+          const projectName = process.cwd().split(path4.sep).pop() ?? "unknown";
           const commitWorker = spawn(process.execPath, [commitWorkerPath], {
             detached: true,
             stdio: ["ignore", "ignore", stderrFd2],
@@ -661,6 +701,7 @@ Your output files must start with: exe/output/${agent.agentId}-`
               PROJECT_NAME: projectName
             }
           });
+          if (commitWorker.pid) registerWorkerPid(commitWorker.pid);
           commitWorker.unref();
           if (typeof stderrFd2 === "number") try {
             closeSync(stderrFd2);
@@ -672,16 +713,21 @@ Your output files must start with: exe/output/${agent.agentId}-`
     if (!ALLOWED_TOOL_RE.test(data.tool_name)) {
       process.exit(0);
     }
-    const workerPath = path3.resolve(
-      path3.dirname(fileURLToPath(import.meta.url)),
+    const workerPath = path4.resolve(
+      path4.dirname(fileURLToPath(import.meta.url)),
       "ingest-worker.js"
     );
+    if (!tryAcquireWorkerSlot()) {
+      process.stderr.write("[ingest] Worker concurrency limit reached, skipping ingestion\n");
+      process.exit(0);
+    }
     const stderrFd = openWorkerLog();
     const worker = spawn(process.execPath, [workerPath], {
       detached: true,
       stdio: ["pipe", "ignore", stderrFd],
       env: { ...process.env, AGENT_ID: agent.agentId, AGENT_ROLE: agent.agentRole }
     });
+    if (worker.pid) registerWorkerPid(worker.pid);
     worker.stdin.write(input);
     worker.stdin.end();
     worker.unref();

package/dist/hooks/instructions-loaded.js

@@ -1,11 +1,5 @@
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
 };
@@ -15,7 +9,7 @@ var __export = (target, all) => {
 };
 
 // src/lib/config.ts
-import { readFile, writeFile, mkdir } from "fs/promises";
+import { readFile, writeFile, mkdir, chmod } from "fs/promises";
 import { readFileSync, existsSync, renameSync } from "fs";
 import path from "path";
 import os from "os";
@@ -305,6 +299,7 @@ async function ensureSchema() {
   const client = getRawClient();
   await client.execute("PRAGMA journal_mode = WAL");
   await client.execute("PRAGMA busy_timeout = 30000");
+  await client.execute("PRAGMA wal_autocheckpoint = 1000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -1122,12 +1117,13 @@ var init_memory = __esm({
 });
 
 // src/lib/keychain.ts
-import { readFile as readFile2, writeFile as writeFile2, unlink, mkdir as mkdir2, chmod } from "fs/promises";
+import { readFile as readFile2, writeFile as writeFile2, unlink, mkdir as mkdir2, chmod as chmod2 } from "fs/promises";
 import { existsSync as existsSync3 } from "fs";
 import path4 from "path";
+import os2 from "os";
 import crypto from "crypto";
 function getKeyDir() {
-  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path4.join(process.env.HOME ?? "/tmp", ".exe-os");
+  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path4.join(os2.homedir(), ".exe-os");
 }
 function getKeyPath() {
   return path4.join(getKeyDir(), "master.key");
@@ -1184,7 +1180,7 @@ __export(shard_manager_exports, {
   shardExists: () => shardExists
 });
 import path5 from "path";
-import { existsSync as existsSync4, mkdirSync as mkdirSync3 } from "fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, readdirSync as readdirSync3 } from "fs";
 import { createClient as createClient2 } from "@libsql/client";
 function initShardManager(encryptionKey) {
   _encryptionKey = encryptionKey;
@@ -1223,7 +1219,6 @@ function shardExists(projectName) {
 }
 function listShards() {
   if (!existsSync4(SHARDS_DIR)) return [];
-  const { readdirSync: readdirSync3 } = __require("fs");
   return readdirSync3(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
 }
 async function ensureShardSchema(client) {
@@ -1429,6 +1424,28 @@ __export(store_exports, {
   vectorToBlob: () => vectorToBlob,
   writeMemory: () => writeMemory
 });
+function isBusyError2(err) {
+  if (err instanceof Error) {
+    const msg = err.message.toLowerCase();
+    return msg.includes("sqlite_busy") || msg.includes("database is locked");
+  }
+  return false;
+}
+async function retryOnBusy2(fn, label) {
+  for (let attempt = 0; attempt <= INIT_MAX_RETRIES; attempt++) {
+    try {
+      return await fn();
+    } catch (err) {
+      if (!isBusyError2(err) || attempt === INIT_MAX_RETRIES) throw err;
+      process.stderr.write(
+        `[store] SQLITE_BUSY during ${label}, retry ${attempt + 1}/${INIT_MAX_RETRIES}
+`
+      );
+      await new Promise((r) => setTimeout(r, INIT_RETRY_DELAY_MS * (attempt + 1)));
+    }
+  }
+  throw new Error("unreachable");
+}
 async function initStore(options) {
   if (_flushTimer !== null) {
     clearInterval(_flushTimer);
@@ -1457,14 +1474,17 @@ async function initStore(options) {
     dbPath,
     encryptionKey: hexKey
   });
-  await ensureSchema();
+  await retryOnBusy2(() => ensureSchema(), "ensureSchema");
   try {
     const { initShardManager: initShardManager2 } = await Promise.resolve().then(() => (init_shard_manager(), shard_manager_exports));
     initShardManager2(hexKey);
   } catch {
   }
   const client = getClient();
-  const vResult = await client.execute("SELECT MAX(version) as max_v FROM memories");
+  const vResult = await retryOnBusy2(
+    () => client.execute("SELECT MAX(version) as max_v FROM memories"),
+    "version-query"
+  );
   _nextVersion = (Number(vResult.rows[0]?.max_v) || 0) + 1;
 }
 function classifyTier(record) {
@@ -1507,6 +1527,12 @@ async function writeMemory(record) {
     supersedes_id: record.supersedes_id ?? null
   };
   _pendingRecords.push(dbRow);
+  const MAX_PENDING = 1e3;
+  if (_pendingRecords.length > MAX_PENDING) {
+    const dropped = _pendingRecords.length - MAX_PENDING;
+    _pendingRecords = _pendingRecords.slice(-MAX_PENDING);
+    console.warn(`[store] Dropped ${dropped} oldest pending records (overflow)`);
+  }
   if (_flushTimer === null) {
     _flushTimer = setInterval(() => {
       void flushBatch();
@@ -1838,7 +1864,7 @@ async function getMemoryCardinality(agentId) {
     return 0;
   }
 }
-var _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
+var INIT_MAX_RETRIES, INIT_RETRY_DELAY_MS, _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
 var init_store = __esm({
   "src/lib/store.ts"() {
     "use strict";
@@ -1846,6 +1872,8 @@ var init_store = __esm({
     init_database();
     init_keychain();
     init_config();
+    INIT_MAX_RETRIES = 3;
+    INIT_RETRY_DELAY_MS = 1e3;
     _pendingRecords = [];
     _batchSize = 20;
     _flushIntervalMs = 1e4;
@@ -2055,10 +2083,11 @@ var timeout = setTimeout(() => {
   process.exit(0);
 }, 5e3);
 timeout.unref();
+var MAX_INPUT_SIZE = 1e6;
 var input = "";
 process.stdin.setEncoding("utf8");
 process.stdin.on("data", (chunk) => {
-  input += chunk;
+  if (input.length < MAX_INPUT_SIZE) input += chunk;
 });
 process.stdin.on("end", async () => {
   try {
@@ -2101,8 +2130,8 @@ process.stdin.on("end", async () => {
     try {
       const { readFileSync: readFileSync4, existsSync: existsSync5 } = await import("fs");
       const { join } = await import("path");
-      const os2 = await import("os");
-      const claudeMd = join(os2.homedir(), ".claude", "CLAUDE.md");
+      const os3 = await import("os");
+      const claudeMd = join(os3.homedir(), ".claude", "CLAUDE.md");
       if (existsSync5(claudeMd)) {
         const content = readFileSync4(claudeMd, "utf8");
         const hasOrchRules = content.includes("exe-os:orchestration-start");

package/dist/hooks/notification.js

@@ -1,11 +1,5 @@
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
 };
@@ -15,7 +9,7 @@ var __export = (target, all) => {
 };
 
 // src/lib/config.ts
-import { readFile, writeFile, mkdir } from "fs/promises";
+import { readFile, writeFile, mkdir, chmod } from "fs/promises";
 import { readFileSync, existsSync, renameSync } from "fs";
 import path from "path";
 import os from "os";
@@ -314,6 +308,7 @@ async function ensureSchema() {
   const client = getRawClient();
   await client.execute("PRAGMA journal_mode = WAL");
   await client.execute("PRAGMA busy_timeout = 30000");
+  await client.execute("PRAGMA wal_autocheckpoint = 1000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -1122,12 +1117,13 @@ var init_database = __esm({
 });
 
 // src/lib/keychain.ts
-import { readFile as readFile2, writeFile as writeFile2, unlink, mkdir as mkdir2, chmod } from "fs/promises";
+import { readFile as readFile2, writeFile as writeFile2, unlink, mkdir as mkdir2, chmod as chmod2 } from "fs/promises";
 import { existsSync as existsSync2 } from "fs";
 import path3 from "path";
+import os2 from "os";
 import crypto from "crypto";
 function getKeyDir() {
-  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path3.join(process.env.HOME ?? "/tmp", ".exe-os");
+  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path3.join(os2.homedir(), ".exe-os");
 }
 function getKeyPath() {
   return path3.join(getKeyDir(), "master.key");
@@ -1184,7 +1180,7 @@ __export(shard_manager_exports, {
   shardExists: () => shardExists
 });
 import path4 from "path";
-import { existsSync as existsSync3, mkdirSync as mkdirSync2 } from "fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, readdirSync as readdirSync2 } from "fs";
 import { createClient as createClient2 } from "@libsql/client";
 function initShardManager(encryptionKey) {
   _encryptionKey = encryptionKey;
@@ -1223,7 +1219,6 @@ function shardExists(projectName) {
 }
 function listShards() {
   if (!existsSync3(SHARDS_DIR)) return [];
-  const { readdirSync: readdirSync2 } = __require("fs");
   return readdirSync2(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
 }
 async function ensureShardSchema(client) {
@@ -1429,6 +1424,28 @@ __export(store_exports, {
   vectorToBlob: () => vectorToBlob,
   writeMemory: () => writeMemory
 });
+function isBusyError2(err) {
+  if (err instanceof Error) {
+    const msg = err.message.toLowerCase();
+    return msg.includes("sqlite_busy") || msg.includes("database is locked");
+  }
+  return false;
+}
+async function retryOnBusy2(fn, label) {
+  for (let attempt = 0; attempt <= INIT_MAX_RETRIES; attempt++) {
+    try {
+      return await fn();
+    } catch (err) {
+      if (!isBusyError2(err) || attempt === INIT_MAX_RETRIES) throw err;
+      process.stderr.write(
+        `[store] SQLITE_BUSY during ${label}, retry ${attempt + 1}/${INIT_MAX_RETRIES}
+`
+      );
+      await new Promise((r) => setTimeout(r, INIT_RETRY_DELAY_MS * (attempt + 1)));
+    }
+  }
+  throw new Error("unreachable");
+}
 async function initStore(options) {
   if (_flushTimer !== null) {
     clearInterval(_flushTimer);
@@ -1457,14 +1474,17 @@ async function initStore(options) {
     dbPath,
     encryptionKey: hexKey
   });
-  await ensureSchema();
+  await retryOnBusy2(() => ensureSchema(), "ensureSchema");
   try {
     const { initShardManager: initShardManager2 } = await Promise.resolve().then(() => (init_shard_manager(), shard_manager_exports));
     initShardManager2(hexKey);
   } catch {
   }
   const client = getClient();
-  const vResult = await client.execute("SELECT MAX(version) as max_v FROM memories");
+  const vResult = await retryOnBusy2(
+    () => client.execute("SELECT MAX(version) as max_v FROM memories"),
+    "version-query"
+  );
   _nextVersion = (Number(vResult.rows[0]?.max_v) || 0) + 1;
 }
 function classifyTier(record) {
@@ -1507,6 +1527,12 @@ async function writeMemory(record) {
     supersedes_id: record.supersedes_id ?? null
   };
   _pendingRecords.push(dbRow);
+  const MAX_PENDING = 1e3;
+  if (_pendingRecords.length > MAX_PENDING) {
+    const dropped = _pendingRecords.length - MAX_PENDING;
+    _pendingRecords = _pendingRecords.slice(-MAX_PENDING);
+    console.warn(`[store] Dropped ${dropped} oldest pending records (overflow)`);
+  }
   if (_flushTimer === null) {
     _flushTimer = setInterval(() => {
       void flushBatch();
@@ -1838,7 +1864,7 @@ async function getMemoryCardinality(agentId) {
     return 0;
   }
 }
-var _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
+var INIT_MAX_RETRIES, INIT_RETRY_DELAY_MS, _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
 var init_store = __esm({
   "src/lib/store.ts"() {
     "use strict";
@@ -1846,6 +1872,8 @@ var init_store = __esm({
     init_database();
     init_keychain();
     init_config();
+    INIT_MAX_RETRIES = 3;
+    INIT_RETRY_DELAY_MS = 1e3;
     _pendingRecords = [];
     _batchSize = 20;
     _flushIntervalMs = 1e4;
@@ -1953,10 +1981,11 @@ var timeout = setTimeout(() => {
   process.exit(0);
 }, 5e3);
 timeout.unref();
+var MAX_INPUT_SIZE = 1e6;
 var input = "";
 process.stdin.setEncoding("utf8");
 process.stdin.on("data", (chunk) => {
-  input += chunk;
+  if (input.length < MAX_INPUT_SIZE) input += chunk;
 });
 process.stdin.on("end", async () => {
   try {