@askexenow/exe-os 0.8.37 → 0.8.39

package/dist/lib/exe-daemon.js

@@ -41,7 +41,7 @@ __export(config_exports, {
   migrateConfig: () => migrateConfig,
   saveConfig: () => saveConfig
 });
-import { readFile, writeFile, mkdir } from "fs/promises";
+import { readFile, writeFile, mkdir, chmod } from "fs/promises";
 import { readFileSync, existsSync, renameSync } from "fs";
 import path from "path";
 import os from "os";
@@ -167,6 +167,9 @@ async function saveConfig(config) {
   await mkdir(dir, { recursive: true });
   const configPath = path.join(dir, "config.json");
   await writeFile(configPath, JSON.stringify(config, null, 2) + "\n");
+  if (config.cloud?.apiKey) {
+    await chmod(configPath, 384);
+  }
 }
 async function loadConfigFrom(configPath) {
   const raw = await readFile(configPath, "utf-8");
@@ -379,6 +382,7 @@ async function ensureSchema() {
   const client = getRawClient();
   await client.execute("PRAGMA journal_mode = WAL");
   await client.execute("PRAGMA busy_timeout = 30000");
+  await client.execute("PRAGMA wal_autocheckpoint = 1000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -1195,12 +1199,13 @@ __export(keychain_exports, {
   importMnemonic: () => importMnemonic,
   setMasterKey: () => setMasterKey
 });
-import { readFile as readFile2, writeFile as writeFile2, unlink, mkdir as mkdir2, chmod } from "fs/promises";
+import { readFile as readFile2, writeFile as writeFile2, unlink, mkdir as mkdir2, chmod as chmod2 } from "fs/promises";
 import { existsSync as existsSync2 } from "fs";
 import path2 from "path";
+import os2 from "os";
 import crypto from "crypto";
 function getKeyDir() {
-  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path2.join(process.env.HOME ?? "/tmp", ".exe-os");
+  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path2.join(os2.homedir(), ".exe-os");
 }
 function getKeyPath() {
   return path2.join(getKeyDir(), "master.key");
@@ -1248,7 +1253,7 @@ async function setMasterKey(key) {
   await mkdir2(dir, { recursive: true });
   const keyPath = getKeyPath();
   await writeFile2(keyPath, b64 + "\n", "utf-8");
-  await chmod(keyPath, 384);
+  await chmod2(keyPath, 384);
 }
 async function deleteMasterKey() {
   const keytar = await tryKeytar();
@@ -1346,7 +1351,7 @@ __export(shard_manager_exports, {
   shardExists: () => shardExists
 });
 import path3 from "path";
-import { existsSync as existsSync3, mkdirSync } from "fs";
+import { existsSync as existsSync3, mkdirSync, readdirSync } from "fs";
 import { createClient as createClient2 } from "@libsql/client";
 function initShardManager(encryptionKey) {
   _encryptionKey = encryptionKey;
@@ -1385,8 +1390,7 @@ function shardExists(projectName) {
 }
 function listShards() {
   if (!existsSync3(SHARDS_DIR)) return [];
-  const { readdirSync: readdirSync3 } = __require("fs");
-  return readdirSync3(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
+  return readdirSync(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
 }
 async function ensureShardSchema(client) {
   await client.execute("PRAGMA journal_mode = WAL");
@@ -1591,6 +1595,28 @@ __export(store_exports, {
   vectorToBlob: () => vectorToBlob,
   writeMemory: () => writeMemory
 });
+function isBusyError2(err) {
+  if (err instanceof Error) {
+    const msg = err.message.toLowerCase();
+    return msg.includes("sqlite_busy") || msg.includes("database is locked");
+  }
+  return false;
+}
+async function retryOnBusy2(fn, label) {
+  for (let attempt = 0; attempt <= INIT_MAX_RETRIES; attempt++) {
+    try {
+      return await fn();
+    } catch (err) {
+      if (!isBusyError2(err) || attempt === INIT_MAX_RETRIES) throw err;
+      process.stderr.write(
+        `[store] SQLITE_BUSY during ${label}, retry ${attempt + 1}/${INIT_MAX_RETRIES}
+`
+      );
+      await new Promise((r) => setTimeout(r, INIT_RETRY_DELAY_MS * (attempt + 1)));
+    }
+  }
+  throw new Error("unreachable");
+}
 async function initStore(options) {
   if (_flushTimer !== null) {
     clearInterval(_flushTimer);
@@ -1619,14 +1645,17 @@ async function initStore(options) {
     dbPath,
     encryptionKey: hexKey
   });
-  await ensureSchema();
+  await retryOnBusy2(() => ensureSchema(), "ensureSchema");
   try {
     const { initShardManager: initShardManager2 } = await Promise.resolve().then(() => (init_shard_manager(), shard_manager_exports));
     initShardManager2(hexKey);
   } catch {
   }
   const client = getClient();
-  const vResult = await client.execute("SELECT MAX(version) as max_v FROM memories");
+  const vResult = await retryOnBusy2(
+    () => client.execute("SELECT MAX(version) as max_v FROM memories"),
+    "version-query"
+  );
   _nextVersion = (Number(vResult.rows[0]?.max_v) || 0) + 1;
 }
 function classifyTier(record) {
@@ -1669,6 +1698,12 @@ async function writeMemory(record) {
     supersedes_id: record.supersedes_id ?? null
   };
   _pendingRecords.push(dbRow);
+  const MAX_PENDING = 1e3;
+  if (_pendingRecords.length > MAX_PENDING) {
+    const dropped = _pendingRecords.length - MAX_PENDING;
+    _pendingRecords = _pendingRecords.slice(-MAX_PENDING);
+    console.warn(`[store] Dropped ${dropped} oldest pending records (overflow)`);
+  }
   if (_flushTimer === null) {
     _flushTimer = setInterval(() => {
       void flushBatch();
@@ -2000,7 +2035,7 @@ async function getMemoryCardinality(agentId) {
     return 0;
   }
 }
-var _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
+var INIT_MAX_RETRIES, INIT_RETRY_DELAY_MS, _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
 var init_store = __esm({
   "src/lib/store.ts"() {
     "use strict";
@@ -2008,6 +2043,8 @@ var init_store = __esm({
     init_database();
     init_keychain();
     init_config();
+    INIT_MAX_RETRIES = 3;
+    INIT_RETRY_DELAY_MS = 1e3;
     _pendingRecords = [];
     _batchSize = 20;
     _flushIntervalMs = 1e4;
@@ -2027,7 +2064,7 @@ __export(session_registry_exports, {
 import { readFileSync as readFileSync2, writeFileSync, mkdirSync as mkdirSync2, existsSync as existsSync4 } from "fs";
 import { execSync } from "child_process";
 import path4 from "path";
-import os2 from "os";
+import os3 from "os";
 function registerSession(entry) {
   const dir = path4.dirname(REGISTRY_PATH);
   if (!existsSync4(dir)) {
@@ -2073,7 +2110,7 @@ var REGISTRY_PATH;
 var init_session_registry = __esm({
   "src/lib/session-registry.ts"() {
     "use strict";
-    REGISTRY_PATH = path4.join(os2.homedir(), ".exe-os", "session-registry.json");
+    REGISTRY_PATH = path4.join(os3.homedir(), ".exe-os", "session-registry.json");
   }
 });
 
@@ -2310,7 +2347,7 @@ __export(intercom_queue_exports, {
 });
 import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, renameSync as renameSync2, existsSync as existsSync5, mkdirSync as mkdirSync3 } from "fs";
 import path5 from "path";
-import os3 from "os";
+import os4 from "os";
 function ensureDir() {
   const dir = path5.dirname(QUEUE_PATH);
   if (!existsSync5(dir)) mkdirSync3(dir, { recursive: true });
@@ -2409,10 +2446,10 @@ var QUEUE_PATH, MAX_RETRIES2, TTL_MS, INTERCOM_LOG;
 var init_intercom_queue = __esm({
   "src/lib/intercom-queue.ts"() {
     "use strict";
-    QUEUE_PATH = path5.join(os3.homedir(), ".exe-os", "intercom-queue.json");
+    QUEUE_PATH = path5.join(os4.homedir(), ".exe-os", "intercom-queue.json");
     MAX_RETRIES2 = 5;
     TTL_MS = 60 * 60 * 1e3;
-    INTERCOM_LOG = path5.join(os3.homedir(), ".exe-os", "intercom.log");
+    INTERCOM_LOG = path5.join(os4.homedir(), ".exe-os", "intercom.log");
   }
 });
 
@@ -2563,10 +2600,10 @@ var init_plan_limits = __esm({
 // src/lib/notifications.ts
 import crypto2 from "crypto";
 import path9 from "path";
-import os4 from "os";
+import os5 from "os";
 import {
   readFileSync as readFileSync7,
-  readdirSync,
+  readdirSync as readdirSync2,
   unlinkSync,
   existsSync as existsSync9,
   rmdirSync
@@ -3128,7 +3165,7 @@ __export(tasks_review_exports, {
   listPendingReviews: () => listPendingReviews
 });
 import path11 from "path";
-import { existsSync as existsSync11, readdirSync as readdirSync2, unlinkSync as unlinkSync2 } from "fs";
+import { existsSync as existsSync11, readdirSync as readdirSync3, unlinkSync as unlinkSync2 } from "fs";
 async function countPendingReviews() {
   const client = getClient();
   const result = await client.execute({
@@ -3340,7 +3377,7 @@ async function cleanupReviewFile(row, taskFile, _baseDir) {
   try {
     const cacheDir = path11.join(EXE_AI_DIR, "session-cache");
     if (existsSync11(cacheDir)) {
-      for (const f of readdirSync2(cacheDir)) {
+      for (const f of readdirSync3(cacheDir)) {
         if (f.startsWith("review-notified-")) {
           unlinkSync2(path11.join(cacheDir, f));
         }
@@ -4386,7 +4423,7 @@ __export(tmux_routing_exports, {
 import { execFileSync as execFileSync2, execSync as execSync7 } from "child_process";
 import { readFileSync as readFileSync9, writeFileSync as writeFileSync5, mkdirSync as mkdirSync6, existsSync as existsSync12, appendFileSync } from "fs";
 import path15 from "path";
-import os5 from "os";
+import os6 from "os";
 import { fileURLToPath } from "url";
 import { unlinkSync as unlinkSync4 } from "fs";
 function spawnLockPath(sessionName) {
@@ -4739,7 +4776,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   const transport = getTransport();
   const sessionName = employeeSessionName(employeeName, exeSession, opts?.instance);
   const instanceLabel = opts?.instance != null && opts.instance > 0 ? `${employeeName}${opts.instance}` : employeeName;
-  const logDir = path15.join(os5.homedir(), ".exe-os", "session-logs");
+  const logDir = path15.join(os6.homedir(), ".exe-os", "session-logs");
   const logFile = path15.join(logDir, `${instanceLabel}-${Date.now()}.log`);
   if (!existsSync12(logDir)) {
     mkdirSync6(logDir, { recursive: true });
@@ -4755,7 +4792,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   } catch {
   }
   try {
-    const claudeJsonPath = path15.join(os5.homedir(), ".claude.json");
+    const claudeJsonPath = path15.join(os6.homedir(), ".claude.json");
     let claudeJson = {};
     try {
       claudeJson = JSON.parse(readFileSync9(claudeJsonPath, "utf8"));
@@ -4770,7 +4807,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   } catch {
   }
   try {
-    const settingsDir = path15.join(os5.homedir(), ".claude", "projects");
+    const settingsDir = path15.join(os6.homedir(), ".claude", "projects");
     const normalizedKey = (opts?.cwd ?? projectDir).replace(/\//g, "-").replace(/^-/, "");
     const projSettingsDir = path15.join(settingsDir, normalizedKey);
     const settingsPath = path15.join(projSettingsDir, "settings.json");
@@ -4818,7 +4855,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   let legacyFallbackWarned = false;
   if (!useExeAgent && !useBinSymlink) {
     const identityPath = path15.join(
-      os5.homedir(),
+      os6.homedir(),
       ".exe-os",
       "identity",
       `${employeeName}.md`
@@ -4848,7 +4885,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   }
   let sessionContextFlag = "";
   try {
-    const ctxDir = path15.join(os5.homedir(), ".exe-os", "session-cache");
+    const ctxDir = path15.join(os6.homedir(), ".exe-os", "session-cache");
     mkdirSync6(ctxDir, { recursive: true });
     const ctxFile = path15.join(ctxDir, `session-context-${sessionName}.md`);
     const ctxContent = [
@@ -4959,12 +4996,12 @@ var init_tmux_routing = __esm({
     init_provider_table();
     init_intercom_queue();
     init_plan_limits();
-    SPAWN_LOCK_DIR = path15.join(os5.homedir(), ".exe-os", "spawn-locks");
-    SESSION_CACHE = path15.join(os5.homedir(), ".exe-os", "session-cache");
+    SPAWN_LOCK_DIR = path15.join(os6.homedir(), ".exe-os", "spawn-locks");
+    SESSION_CACHE = path15.join(os6.homedir(), ".exe-os", "session-cache");
     BEHAVIORS_EXPORT_TIMEOUT_MS = 1e4;
     VERIFY_PANE_LINES = 200;
     INTERCOM_DEBOUNCE_MS = 3e4;
-    INTERCOM_LOG2 = path15.join(os5.homedir(), ".exe-os", "intercom.log");
+    INTERCOM_LOG2 = path15.join(os6.homedir(), ".exe-os", "intercom.log");
     DEBOUNCE_FILE = path15.join(SESSION_CACHE, "intercom-debounce.json");
     DEBOUNCE_CLEANUP_AGE_MS = 5 * 60 * 1e3;
     BUSY_PATTERN = /[✻✽✶✳·].*…|Running…/;
@@ -5453,7 +5490,7 @@ __export(agent_signals_exports, {
   hasUnreadInbox: () => hasUnreadInbox
 });
 import { readFileSync as readFileSync10, existsSync as existsSync13 } from "fs";
-import os6 from "os";
+import os7 from "os";
 import path16 from "path";
 async function hasOpenTasks(client, agentId) {
   try {
@@ -5494,7 +5531,7 @@ async function hasUnreadInbox(client, agentId) {
     return CONSERVATIVE_ON_ERROR;
   }
 }
-function hadRecentIntercomAck(sessionName, windowMs, nowMs = Date.now(), intercomLog = path16.join(os6.homedir(), ".exe-os", "intercom.log")) {
+function hadRecentIntercomAck(sessionName, windowMs, nowMs = Date.now(), intercomLog = path16.join(os7.homedir(), ".exe-os", "intercom.log")) {
   if (!existsSync13(intercomLog)) return false;
   try {
     const raw = readFileSync10(intercomLog, "utf8");
@@ -6185,6 +6222,10 @@ import path17 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function handleData(chunk) {
   _buffer += chunk.toString();
+  if (_buffer.length > MAX_BUFFER) {
+    _buffer = "";
+    return;
+  }
   let newlineIdx;
   while ((newlineIdx = _buffer.indexOf("\n")) !== -1) {
     const line = _buffer.slice(0, newlineIdx).trim();
@@ -6492,7 +6533,7 @@ function disconnectClient() {
     entry.resolve({ error: "Client disconnected" });
   }
 }
-var SOCKET_PATH, PID_PATH, SPAWN_LOCK_PATH, SPAWN_LOCK_STALE_MS, CONNECT_TIMEOUT_MS, REQUEST_TIMEOUT_MS, _socket, _connected, _buffer, _requestCount, HEALTH_CHECK_INTERVAL, _pending;
+var SOCKET_PATH, PID_PATH, SPAWN_LOCK_PATH, SPAWN_LOCK_STALE_MS, CONNECT_TIMEOUT_MS, REQUEST_TIMEOUT_MS, _socket, _connected, _buffer, _requestCount, HEALTH_CHECK_INTERVAL, _pending, MAX_BUFFER;
 var init_exe_daemon_client = __esm({
   "src/lib/exe-daemon-client.ts"() {
     "use strict";
@@ -6509,6 +6550,7 @@ var init_exe_daemon_client = __esm({
     _requestCount = 0;
     HEALTH_CHECK_INTERVAL = 100;
     _pending = /* @__PURE__ */ new Map();
+    MAX_BUFFER = 1e7;
   }
 });
 
@@ -7250,7 +7292,8 @@ async function wikiRequest(config, path21, method = "GET", body) {
   const response = await fetch(url, {
     method,
     headers,
-    body: body ? JSON.stringify(body) : void 0
+    body: body ? JSON.stringify(body) : void 0,
+    signal: AbortSignal.timeout(3e4)
   });
   if (!response.ok) {
     throw new Error(`Wiki API ${method} ${path21}: ${response.status} ${response.statusText}`);
@@ -7440,7 +7483,7 @@ __export(device_registry_exports, {
   setFriendlyName: () => setFriendlyName
 });
 import crypto9 from "crypto";
-import os7 from "os";
+import os8 from "os";
 import { readFileSync as readFileSync13, writeFileSync as writeFileSync6, mkdirSync as mkdirSync7, existsSync as existsSync15 } from "fs";
 import path19 from "path";
 function getDeviceInfo() {
@@ -7454,7 +7497,7 @@ function getDeviceInfo() {
     } catch {
     }
   }
-  const hostname = os7.hostname();
+  const hostname = os8.hostname();
   const info = {
     deviceId: crypto9.randomUUID(),
     friendlyName: hostname.replace(/\./g, "-").toLowerCase(),
@@ -7952,13 +7995,24 @@ var REVIEW_POLL_INTERVAL_MS = 60 * 1e3;
 var _context = null;
 var _model = null;
 var _llama = null;
+var MAX_QUEUE_SIZE = 1e3;
 var highQueue = [];
 var lowQueue = [];
 var _processing = false;
 var _activeConnections = 0;
 var _idleTimer = null;
 var _requestsServed = 0;
+var _droppedRequests = 0;
 var _startedAt = Date.now();
+function enqueue(queue, entry) {
+  if (queue.length >= MAX_QUEUE_SIZE) {
+    queue.shift();
+    _droppedRequests++;
+    process.stderr.write(`[exed] Queue overflow \u2014 dropped oldest request (total dropped: ${_droppedRequests})
+`);
+  }
+  queue.push(entry);
+}
 async function loadModel() {
   const modelPath = path20.join(MODELS_DIR, MODEL_FILE);
   if (!existsSync16(modelPath)) {
@@ -8106,8 +8160,13 @@ function startServer() {
     _activeConnections++;
     resetIdleTimer();
     let buffer = "";
+    const MAX_BUFFER2 = 1e7;
     socket.on("data", (chunk) => {
       buffer += chunk.toString();
+      if (buffer.length > MAX_BUFFER2) {
+        socket.destroy(new Error("Buffer overflow \u2014 payload too large"));
+        return;
+      }
       let newlineIdx;
       while ((newlineIdx = buffer.indexOf("\n")) !== -1) {
         const line = buffer.slice(0, newlineIdx).trim();
@@ -8125,9 +8184,9 @@ function startServer() {
           }
           const entry = { request, socket };
           if (request.priority === "high") {
-            highQueue.push(entry);
+            enqueue(highQueue, entry);
           } else {
-            lowQueue.push(entry);
+            enqueue(lowQueue, entry);
           }
           void processQueue();
         } catch (err) {

package/dist/lib/hybrid-search.js

@@ -1,11 +1,5 @@
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
 };
@@ -111,6 +105,7 @@ async function ensureSchema() {
   const client = getRawClient();
   await client.execute("PRAGMA journal_mode = WAL");
   await client.execute("PRAGMA busy_timeout = 30000");
+  await client.execute("PRAGMA wal_autocheckpoint = 1000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -922,9 +917,10 @@ var init_database = __esm({
 import { readFile, writeFile, unlink, mkdir, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import path from "path";
+import os from "os";
 import crypto from "crypto";
 function getKeyDir() {
-  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path.join(process.env.HOME ?? "/tmp", ".exe-os");
+  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path.join(os.homedir(), ".exe-os");
 }
 function getKeyPath() {
   return path.join(getKeyDir(), "master.key");
@@ -983,15 +979,15 @@ __export(config_exports, {
   migrateConfig: () => migrateConfig,
   saveConfig: () => saveConfig
 });
-import { readFile as readFile2, writeFile as writeFile2, mkdir as mkdir2 } from "fs/promises";
+import { readFile as readFile2, writeFile as writeFile2, mkdir as mkdir2, chmod as chmod2 } from "fs/promises";
 import { readFileSync, existsSync as existsSync2, renameSync } from "fs";
 import path2 from "path";
-import os from "os";
+import os2 from "os";
 function resolveDataDir() {
   if (process.env.EXE_OS_DIR) return process.env.EXE_OS_DIR;
   if (process.env.EXE_MEM_DIR) return process.env.EXE_MEM_DIR;
-  const newDir = path2.join(os.homedir(), ".exe-os");
-  const legacyDir = path2.join(os.homedir(), ".exe-mem");
+  const newDir = path2.join(os2.homedir(), ".exe-os");
+  const legacyDir = path2.join(os2.homedir(), ".exe-mem");
   if (!existsSync2(newDir) && existsSync2(legacyDir)) {
     try {
       renameSync(legacyDir, newDir);
@@ -1078,7 +1074,7 @@ async function loadConfig() {
     normalizeAutoUpdate(migratedCfg);
     const config = { ...DEFAULT_CONFIG, dbPath: path2.join(dir, "memories.db"), ...migratedCfg };
     if (config.dbPath.startsWith("~")) {
-      config.dbPath = config.dbPath.replace(/^~/, os.homedir());
+      config.dbPath = config.dbPath.replace(/^~/, os2.homedir());
     }
     return config;
   } catch {
@@ -1109,6 +1105,9 @@ async function saveConfig(config) {
   await mkdir2(dir, { recursive: true });
   const configPath = path2.join(dir, "config.json");
   await writeFile2(configPath, JSON.stringify(config, null, 2) + "\n");
+  if (config.cloud?.apiKey) {
+    await chmod2(configPath, 384);
+  }
 }
 async function loadConfigFrom(configPath) {
   const raw = await readFile2(configPath, "utf-8");
@@ -1224,7 +1223,7 @@ __export(shard_manager_exports, {
   shardExists: () => shardExists
 });
 import path3 from "path";
-import { existsSync as existsSync3, mkdirSync } from "fs";
+import { existsSync as existsSync3, mkdirSync, readdirSync } from "fs";
 import { createClient as createClient2 } from "@libsql/client";
 function initShardManager(encryptionKey) {
   _encryptionKey = encryptionKey;
@@ -1263,8 +1262,7 @@ function shardExists(projectName) {
 }
 function listShards() {
   if (!existsSync3(SHARDS_DIR)) return [];
-  const { readdirSync: readdirSync2 } = __require("fs");
-  return readdirSync2(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
+  return readdirSync(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
 }
 async function ensureShardSchema(client) {
   await client.execute("PRAGMA journal_mode = WAL");
@@ -1469,6 +1467,28 @@ __export(store_exports, {
   vectorToBlob: () => vectorToBlob,
   writeMemory: () => writeMemory
 });
+function isBusyError2(err) {
+  if (err instanceof Error) {
+    const msg = err.message.toLowerCase();
+    return msg.includes("sqlite_busy") || msg.includes("database is locked");
+  }
+  return false;
+}
+async function retryOnBusy2(fn, label) {
+  for (let attempt = 0; attempt <= INIT_MAX_RETRIES; attempt++) {
+    try {
+      return await fn();
+    } catch (err) {
+      if (!isBusyError2(err) || attempt === INIT_MAX_RETRIES) throw err;
+      process.stderr.write(
+        `[store] SQLITE_BUSY during ${label}, retry ${attempt + 1}/${INIT_MAX_RETRIES}
+`
+      );
+      await new Promise((r) => setTimeout(r, INIT_RETRY_DELAY_MS * (attempt + 1)));
+    }
+  }
+  throw new Error("unreachable");
+}
 async function initStore(options) {
   if (_flushTimer !== null) {
     clearInterval(_flushTimer);
@@ -1497,14 +1517,17 @@ async function initStore(options) {
     dbPath,
     encryptionKey: hexKey
   });
-  await ensureSchema();
+  await retryOnBusy2(() => ensureSchema(), "ensureSchema");
   try {
     const { initShardManager: initShardManager2 } = await Promise.resolve().then(() => (init_shard_manager(), shard_manager_exports));
     initShardManager2(hexKey);
   } catch {
   }
   const client = getClient();
-  const vResult = await client.execute("SELECT MAX(version) as max_v FROM memories");
+  const vResult = await retryOnBusy2(
+    () => client.execute("SELECT MAX(version) as max_v FROM memories"),
+    "version-query"
+  );
   _nextVersion = (Number(vResult.rows[0]?.max_v) || 0) + 1;
 }
 function classifyTier(record) {
@@ -1547,6 +1570,12 @@ async function writeMemory(record) {
     supersedes_id: record.supersedes_id ?? null
   };
   _pendingRecords.push(dbRow);
+  const MAX_PENDING = 1e3;
+  if (_pendingRecords.length > MAX_PENDING) {
+    const dropped = _pendingRecords.length - MAX_PENDING;
+    _pendingRecords = _pendingRecords.slice(-MAX_PENDING);
+    console.warn(`[store] Dropped ${dropped} oldest pending records (overflow)`);
+  }
   if (_flushTimer === null) {
     _flushTimer = setInterval(() => {
       void flushBatch();
@@ -1878,7 +1907,7 @@ async function getMemoryCardinality(agentId) {
     return 0;
   }
 }
-var _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
+var INIT_MAX_RETRIES, INIT_RETRY_DELAY_MS, _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
 var init_store = __esm({
   "src/lib/store.ts"() {
     "use strict";
@@ -1886,6 +1915,8 @@ var init_store = __esm({
     init_database();
     init_keychain();
     init_config();
+    INIT_MAX_RETRIES = 3;
+    INIT_RETRY_DELAY_MS = 1e3;
     _pendingRecords = [];
     _batchSize = 20;
     _flushIntervalMs = 1e4;
@@ -1993,6 +2024,10 @@ import path4 from "path";
 import { fileURLToPath } from "url";
 function handleData(chunk) {
   _buffer += chunk.toString();
+  if (_buffer.length > MAX_BUFFER) {
+    _buffer = "";
+    return;
+  }
   let newlineIdx;
   while ((newlineIdx = _buffer.indexOf("\n")) !== -1) {
     const line = _buffer.slice(0, newlineIdx).trim();
@@ -2300,7 +2335,7 @@ function disconnectClient() {
     entry.resolve({ error: "Client disconnected" });
   }
 }
-var SOCKET_PATH, PID_PATH, SPAWN_LOCK_PATH, SPAWN_LOCK_STALE_MS, CONNECT_TIMEOUT_MS, REQUEST_TIMEOUT_MS, _socket, _connected, _buffer, _requestCount, HEALTH_CHECK_INTERVAL, _pending;
+var SOCKET_PATH, PID_PATH, SPAWN_LOCK_PATH, SPAWN_LOCK_STALE_MS, CONNECT_TIMEOUT_MS, REQUEST_TIMEOUT_MS, _socket, _connected, _buffer, _requestCount, HEALTH_CHECK_INTERVAL, _pending, MAX_BUFFER;
 var init_exe_daemon_client = __esm({
   "src/lib/exe-daemon-client.ts"() {
     "use strict";
@@ -2317,6 +2352,7 @@ var init_exe_daemon_client = __esm({
     _requestCount = 0;
     HEALTH_CHECK_INTERVAL = 100;
     _pending = /* @__PURE__ */ new Map();
+    MAX_BUFFER = 1e7;
   }
 });
 
@@ -2445,7 +2481,7 @@ __export(file_grep_exports, {
   grepProjectFiles: () => grepProjectFiles
 });
 import { execSync as execSync2 } from "child_process";
-import { readFileSync as readFileSync3, readdirSync, statSync as statSync2, existsSync as existsSync5 } from "fs";
+import { readFileSync as readFileSync3, readdirSync as readdirSync2, statSync as statSync2, existsSync as existsSync5 } from "fs";
 import path6 from "path";
 import crypto2 from "crypto";
 function hasRipgrep() {
@@ -2590,7 +2626,7 @@ function collectFiles(root, patterns) {
     const basename = path6.basename(dir);
     if (EXCLUDE_DIRS.includes(basename)) return;
     try {
-      const entries = readdirSync(dir, { withFileTypes: true });
+      const entries = readdirSync2(dir, { withFileTypes: true });
       for (const entry of entries) {
         if (files.length >= MAX_FILES) return;
         const rel = path6.join(relative, entry.name);