@askexenow/exe-os 0.8.37 → 0.8.39

package/dist/bin/cli.js

@@ -42,7 +42,7 @@ __export(config_exports, {
   migrateConfig: () => migrateConfig,
   saveConfig: () => saveConfig
 });
-import { readFile, writeFile, mkdir } from "fs/promises";
+import { readFile, writeFile, mkdir, chmod } from "fs/promises";
 import { readFileSync, existsSync, renameSync } from "fs";
 import path from "path";
 import os from "os";
@@ -168,6 +168,9 @@ async function saveConfig(config) {
   await mkdir(dir, { recursive: true });
   const configPath = path.join(dir, "config.json");
   await writeFile(configPath, JSON.stringify(config, null, 2) + "\n");
+  if (config.cloud?.apiKey) {
+    await chmod(configPath, 384);
+  }
 }
 async function loadConfigFrom(configPath) {
   const raw = await readFile(configPath, "utf-8");
@@ -356,15 +359,20 @@ function addEmployee(employees, employee) {
   }
   return [...employees, normalized];
 }
+function findExeBin() {
+  try {
+    return execSync(process.platform === "win32" ? "where exe-os" : "which exe-os", { encoding: "utf8" }).trim();
+  } catch {
+    return null;
+  }
+}
 function registerBinSymlinks(name) {
   const created = [];
   const skipped = [];
   const errors = [];
-  let exeBinPath;
-  try {
-    exeBinPath = execSync("which exe", { encoding: "utf-8" }).trim();
-  } catch {
-    errors.push("Could not find 'exe' in PATH");
+  const exeBinPath = findExeBin();
+  if (!exeBinPath) {
+    errors.push("Could not find 'exe-os' in PATH");
     return { created, skipped, errors };
   }
   const binDir = path2.dirname(exeBinPath);
@@ -621,6 +629,10 @@ async function mergeHooks(packageRoot, homeDir = os3.homedir()) {
   if (!settings.hooks) {
     settings.hooks = {};
   }
+  if (settings.hooks && typeof settings.hooks !== "object") {
+    console.warn("[exe-os] Unexpected hooks schema in settings.json \u2014 skipping hook installation");
+    return { added: 0, skipped: 0 };
+  }
   const hooksToRegister = [
     {
       event: "PostToolUse",
@@ -783,6 +795,11 @@ async function mergeHooks(packageRoot, homeDir = os3.homedir()) {
     if (!settings.hooks[event]) {
       settings.hooks[event] = [];
     }
+    if (!Array.isArray(settings.hooks[event])) {
+      console.warn(`[exe-os] Hook event "${event}" has unexpected structure \u2014 skipping`);
+      skipped++;
+      continue;
+    }
     const existing = settings.hooks[event];
     const correctCommand = group.hooks[0]?.command ?? "";
     const alreadyCorrect = existing.some(
@@ -1087,6 +1104,7 @@ async function ensureSchema() {
   const client = getRawClient();
   await client.execute("PRAGMA journal_mode = WAL");
   await client.execute("PRAGMA busy_timeout = 30000");
+  await client.execute("PRAGMA wal_autocheckpoint = 1000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -1903,12 +1921,13 @@ __export(keychain_exports, {
   importMnemonic: () => importMnemonic,
   setMasterKey: () => setMasterKey
 });
-import { readFile as readFile4, writeFile as writeFile4, unlink, mkdir as mkdir4, chmod } from "fs/promises";
+import { readFile as readFile4, writeFile as writeFile4, unlink, mkdir as mkdir4, chmod as chmod2 } from "fs/promises";
 import { existsSync as existsSync5 } from "fs";
 import path5 from "path";
+import os4 from "os";
 import crypto from "crypto";
 function getKeyDir() {
-  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path5.join(process.env.HOME ?? "/tmp", ".exe-os");
+  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path5.join(os4.homedir(), ".exe-os");
 }
 function getKeyPath() {
   return path5.join(getKeyDir(), "master.key");
@@ -1956,7 +1975,7 @@ async function setMasterKey(key) {
   await mkdir4(dir, { recursive: true });
   const keyPath = getKeyPath();
   await writeFile4(keyPath, b64 + "\n", "utf-8");
-  await chmod(keyPath, 384);
+  await chmod2(keyPath, 384);
 }
 async function deleteMasterKey() {
   const keytar = await tryKeytar();
@@ -2054,7 +2073,7 @@ __export(shard_manager_exports, {
   shardExists: () => shardExists
 });
 import path6 from "path";
-import { existsSync as existsSync6, mkdirSync as mkdirSync2 } from "fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync2, readdirSync } from "fs";
 import { createClient as createClient2 } from "@libsql/client";
 function initShardManager(encryptionKey) {
   _encryptionKey = encryptionKey;
@@ -2093,8 +2112,7 @@ function shardExists(projectName) {
 }
 function listShards() {
   if (!existsSync6(SHARDS_DIR)) return [];
-  const { readdirSync: readdirSync5 } = __require("fs");
-  return readdirSync5(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
+  return readdirSync(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
 }
 async function ensureShardSchema(client) {
   await client.execute("PRAGMA journal_mode = WAL");
@@ -2299,6 +2317,28 @@ __export(store_exports, {
   vectorToBlob: () => vectorToBlob,
   writeMemory: () => writeMemory
 });
+function isBusyError2(err) {
+  if (err instanceof Error) {
+    const msg = err.message.toLowerCase();
+    return msg.includes("sqlite_busy") || msg.includes("database is locked");
+  }
+  return false;
+}
+async function retryOnBusy2(fn, label) {
+  for (let attempt = 0; attempt <= INIT_MAX_RETRIES; attempt++) {
+    try {
+      return await fn();
+    } catch (err) {
+      if (!isBusyError2(err) || attempt === INIT_MAX_RETRIES) throw err;
+      process.stderr.write(
+        `[store] SQLITE_BUSY during ${label}, retry ${attempt + 1}/${INIT_MAX_RETRIES}
+`
+      );
+      await new Promise((r) => setTimeout(r, INIT_RETRY_DELAY_MS * (attempt + 1)));
+    }
+  }
+  throw new Error("unreachable");
+}
 async function initStore(options) {
   if (_flushTimer !== null) {
     clearInterval(_flushTimer);
@@ -2327,14 +2367,17 @@ async function initStore(options) {
     dbPath,
     encryptionKey: hexKey
   });
-  await ensureSchema();
+  await retryOnBusy2(() => ensureSchema(), "ensureSchema");
   try {
     const { initShardManager: initShardManager2 } = await Promise.resolve().then(() => (init_shard_manager(), shard_manager_exports));
     initShardManager2(hexKey);
   } catch {
   }
   const client = getClient();
-  const vResult = await client.execute("SELECT MAX(version) as max_v FROM memories");
+  const vResult = await retryOnBusy2(
+    () => client.execute("SELECT MAX(version) as max_v FROM memories"),
+    "version-query"
+  );
   _nextVersion = (Number(vResult.rows[0]?.max_v) || 0) + 1;
 }
 function classifyTier(record) {
@@ -2377,6 +2420,12 @@ async function writeMemory(record) {
     supersedes_id: record.supersedes_id ?? null
   };
   _pendingRecords.push(dbRow);
+  const MAX_PENDING = 1e3;
+  if (_pendingRecords.length > MAX_PENDING) {
+    const dropped = _pendingRecords.length - MAX_PENDING;
+    _pendingRecords = _pendingRecords.slice(-MAX_PENDING);
+    console.warn(`[store] Dropped ${dropped} oldest pending records (overflow)`);
+  }
   if (_flushTimer === null) {
     _flushTimer = setInterval(() => {
       void flushBatch();
@@ -2708,7 +2757,7 @@ async function getMemoryCardinality(agentId) {
     return 0;
   }
 }
-var _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
+var INIT_MAX_RETRIES, INIT_RETRY_DELAY_MS, _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
 var init_store = __esm({
   "src/lib/store.ts"() {
     "use strict";
@@ -2716,6 +2765,8 @@ var init_store = __esm({
     init_database();
     init_keychain();
     init_config();
+    INIT_MAX_RETRIES = 3;
+    INIT_RETRY_DELAY_MS = 1e3;
     _pendingRecords = [];
     _batchSize = 20;
     _flushIntervalMs = 1e4;
@@ -2734,6 +2785,10 @@ import path7 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function handleData(chunk) {
   _buffer += chunk.toString();
+  if (_buffer.length > MAX_BUFFER) {
+    _buffer = "";
+    return;
+  }
   let newlineIdx;
   while ((newlineIdx = _buffer.indexOf("\n")) !== -1) {
     const line = _buffer.slice(0, newlineIdx).trim();
@@ -3041,7 +3096,7 @@ function disconnectClient() {
     entry.resolve({ error: "Client disconnected" });
   }
 }
-var SOCKET_PATH, PID_PATH, SPAWN_LOCK_PATH, SPAWN_LOCK_STALE_MS, CONNECT_TIMEOUT_MS, REQUEST_TIMEOUT_MS, _socket, _connected, _buffer, _requestCount, HEALTH_CHECK_INTERVAL, _pending;
+var SOCKET_PATH, PID_PATH, SPAWN_LOCK_PATH, SPAWN_LOCK_STALE_MS, CONNECT_TIMEOUT_MS, REQUEST_TIMEOUT_MS, _socket, _connected, _buffer, _requestCount, HEALTH_CHECK_INTERVAL, _pending, MAX_BUFFER;
 var init_exe_daemon_client = __esm({
   "src/lib/exe-daemon-client.ts"() {
     "use strict";
@@ -3058,6 +3113,7 @@ var init_exe_daemon_client = __esm({
     _requestCount = 0;
     HEALTH_CHECK_INTERVAL = 100;
     _pending = /* @__PURE__ */ new Map();
+    MAX_BUFFER = 1e7;
   }
 });
 
@@ -3095,7 +3151,8 @@ import { parseArgs } from "util";
 async function findJsonlFiles(sinceDate, projectFilter) {
   const projectsDir = path8.join(homedir(), ".claude", "projects");
   const files = [];
-  async function walk(dir) {
+  async function walk(dir, depth = 0) {
+    if (depth > MAX_WALK_DEPTH) return;
     let entries;
     try {
       entries = await readdir2(dir, { withFileTypes: true });
@@ -3106,7 +3163,7 @@ async function findJsonlFiles(sinceDate, projectFilter) {
       const full = path8.join(dir, entry.name);
       if (entry.isDirectory()) {
         if (entry.name === "subagents" || entry.name === "tool-results") continue;
-        await walk(full);
+        await walk(full, depth + 1);
       } else if (entry.name.endsWith(".jsonl")) {
         try {
           const s = await stat(full);
@@ -3347,65 +3404,72 @@ async function backfillConversations(options) {
   process.stderr.write(`[backfill-conversations] Found ${files.length} JSONL files to process
 `);
   process.env.EXE_EMBED_PRIORITY = "low";
-  for (const file of files) {
-    stats.filesScanned++;
-    if (existingPaths.has(file)) {
-      stats.skippedDedup++;
-      continue;
-    }
-    const conv = await parseConversation(file);
-    if (conv.totalMessages < MIN_MESSAGES) {
-      stats.skippedTooShort++;
-      continue;
-    }
-    const summary = buildSummary(conv);
-    if (options.dryRun) {
-      process.stdout.write(`
+  const BATCH_SIZE = 50;
+  const MAX_DEDUP_SIZE = 5e4;
+  for (let batchStart = 0; batchStart < files.length; batchStart += BATCH_SIZE) {
+    const batch = files.slice(batchStart, batchStart + BATCH_SIZE);
+    for (const file of batch) {
+      stats.filesScanned++;
+      if (existingPaths.size < MAX_DEDUP_SIZE && existingPaths.has(file)) {
+        stats.skippedDedup++;
+        continue;
+      }
+      const conv = await parseConversation(file);
+      if (conv.totalMessages < MIN_MESSAGES) {
+        stats.skippedTooShort++;
+        continue;
+      }
+      const summary = buildSummary(conv);
+      if (options.dryRun) {
+        process.stdout.write(`
 \u2500\u2500\u2500 ${file} \u2500\u2500\u2500
 `);
-      process.stdout.write(`Project: ${conv.projectName} | Messages: ${conv.totalMessages}`);
-      process.stdout.write(` | Tools: ${Object.keys(conv.toolCounts).length}`);
-      process.stdout.write(` | Files: ${conv.filesTouched.size}
+        process.stdout.write(`Project: ${conv.projectName} | Messages: ${conv.totalMessages}`);
+        process.stdout.write(` | Tools: ${Object.keys(conv.toolCounts).length}`);
+        process.stdout.write(` | Files: ${conv.filesTouched.size}
 `);
-      const firstPrompt = conv.userMessages[0];
-      if (firstPrompt) {
-        process.stdout.write(`First prompt: ${firstPrompt.slice(0, 120)}
+        const firstPrompt = conv.userMessages[0];
+        if (firstPrompt) {
+          process.stdout.write(`First prompt: ${firstPrompt.slice(0, 120)}
 `);
+        }
+        stats.conversationsStored++;
+        continue;
+      }
+      let vector = null;
+      if (daemonConnected) {
+        try {
+          vector = await embedViaClient(summary, "low");
+          if (!vector) stats.embedFailed++;
+        } catch {
+          stats.embedFailed++;
+        }
+      }
+      await writeMemory({
+        id: crypto2.randomUUID(),
+        agent_id: conv.agentId,
+        agent_role: conv.agentId === "exe" ? "COO" : "specialist",
+        session_id: conv.sessionId,
+        timestamp: conv.startTime ?? (/* @__PURE__ */ new Date()).toISOString(),
+        tool_name: TOOL_NAME,
+        project_name: conv.projectName,
+        has_error: conv.errorCount > 0,
+        raw_text: summary,
+        vector,
+        source_path: file,
+        source_type: "conversation"
+      });
+      if (existingPaths.size < MAX_DEDUP_SIZE) {
+        existingPaths.add(file);
       }
       stats.conversationsStored++;
-      continue;
-    }
-    let vector = null;
-    if (daemonConnected) {
-      try {
-        vector = await embedViaClient(summary, "low");
-        if (!vector) stats.embedFailed++;
-      } catch {
-        stats.embedFailed++;
-      }
-    }
-    await writeMemory({
-      id: crypto2.randomUUID(),
-      agent_id: conv.agentId,
-      agent_role: conv.agentId === "exe" ? "COO" : "specialist",
-      session_id: conv.sessionId,
-      timestamp: conv.startTime ?? (/* @__PURE__ */ new Date()).toISOString(),
-      tool_name: TOOL_NAME,
-      project_name: conv.projectName,
-      has_error: conv.errorCount > 0,
-      raw_text: summary,
-      vector,
-      source_path: file,
-      source_type: "conversation"
-    });
-    existingPaths.add(file);
-    stats.conversationsStored++;
-    if (stats.filesScanned % 50 === 0) {
-      process.stderr.write(
-        `[backfill-conversations] Progress: ${stats.filesScanned}/${files.length} files, ${stats.conversationsStored} stored
+      if (stats.filesScanned % 50 === 0) {
+        process.stderr.write(
+          `[backfill-conversations] Progress: ${stats.filesScanned}/${files.length} files, ${stats.conversationsStored} stored
 `
-      );
-      await flushBatch();
+        );
+        await flushBatch();
+      }
     }
   }
   if (!options.dryRun) {
@@ -3417,7 +3481,7 @@ async function backfillConversations(options) {
   );
   return stats;
 }
-var TOOL_NAME, MIN_MESSAGES, MAX_SUMMARY_LENGTH;
+var TOOL_NAME, MIN_MESSAGES, MAX_SUMMARY_LENGTH, MAX_WALK_DEPTH;
 var init_backfill_conversations = __esm({
   "src/bin/backfill-conversations.ts"() {
     "use strict";
@@ -3428,6 +3492,7 @@ var init_backfill_conversations = __esm({
     TOOL_NAME = "backfill-conversation";
     MIN_MESSAGES = 3;
     MAX_SUMMARY_LENGTH = 4e3;
+    MAX_WALK_DEPTH = 10;
     if (isMainModule(import.meta.url)) {
       const { values } = parseArgs({
         options: {
@@ -3463,6 +3528,7 @@ __export(employee_templates_exports, {
   buildCustomEmployeePrompt: () => buildCustomEmployeePrompt,
   getSessionPrompt: () => getSessionPrompt,
   getTemplate: () => getTemplate,
+  getTemplateByRole: () => getTemplateByRole,
   personalizePrompt: () => personalizePrompt,
   renderClientCOOTemplate: () => renderClientCOOTemplate
 });
@@ -3478,6 +3544,10 @@ function buildCustomEmployeePrompt(name, role) {
 function getTemplate(name) {
   return TEMPLATES[name];
 }
+function getTemplateByRole(role) {
+  const lower = role.toLowerCase();
+  return Object.values(TEMPLATES).find((t) => t.role.toLowerCase() === lower);
+}
 function personalizePrompt(prompt, templateName, actualName) {
   if (templateName === actualName) return prompt;
   const escaped = templateName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -4201,9 +4271,17 @@ async function renameEmployee(oldName, newName, opts = {}) {
     return { success: false, error: err instanceof Error ? err.message : String(err) };
   }
 }
+function findExeBin2() {
+  try {
+    return execSync2(process.platform === "win32" ? "where exe-os" : "which exe-os", { encoding: "utf8" }).trim();
+  } catch {
+    return null;
+  }
+}
 function removeOldSymlinks(name) {
   try {
-    const exeBinPath = execSync2("which exe", { encoding: "utf-8" }).trim();
+    const exeBinPath = findExeBin2();
+    if (!exeBinPath) return;
     const binDir = path9.dirname(exeBinPath);
     for (const suffix of ["", "-opencode"]) {
       const linkPath = path9.join(binDir, `${name}${suffix}`);
@@ -4262,48 +4340,67 @@ async function downloadModel(opts) {
   const tmpPath = destPath + ".tmp";
   await mkdir5(destDir, { recursive: true });
   if (existsSync9(destPath)) {
-    const hash2 = await fileHash(destPath);
-    if (hash2 === EXPECTED_SHA256) {
+    const hash = await fileHash(destPath);
+    if (hash === EXPECTED_SHA256) {
       return destPath;
     }
   }
-  if (existsSync9(tmpPath)) unlinkSync3(tmpPath);
-  const response = await fetchFn(GGUF_URL, { redirect: "follow" });
-  if (!response.ok || !response.body) {
-    throw new Error(`Download failed: HTTP ${response.status}`);
-  }
-  const contentLength = Number(response.headers.get("content-length") ?? EXPECTED_SIZE);
+  const MAX_RETRIES2 = 3;
+  const DOWNLOAD_TIMEOUT_MS = 3e5;
+  let lastErr;
   let downloaded = 0;
-  const hash = createHash("sha256");
-  const fileStream = createWriteStream(tmpPath);
-  const reader = response.body.getReader();
-  try {
-    while (true) {
-      const { done, value } = await reader.read();
-      if (done) break;
-      if (!fileStream.write(value)) {
-        await new Promise((resolve) => fileStream.once("drain", resolve));
+  for (let attempt = 1; attempt <= MAX_RETRIES2; attempt++) {
+    try {
+      if (existsSync9(tmpPath)) unlinkSync3(tmpPath);
+      const response = await fetchFn(GGUF_URL, {
+        redirect: "follow",
+        signal: AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS)
+      });
+      if (!response.ok || !response.body) {
+        throw new Error(`Download failed: HTTP ${response.status}`);
+      }
+      const contentLength = Number(response.headers.get("content-length") ?? EXPECTED_SIZE);
+      const hash = createHash("sha256");
+      const fileStream = createWriteStream(tmpPath);
+      const reader = response.body.getReader();
+      try {
+        while (true) {
+          const { done, value } = await reader.read();
+          if (done) break;
+          if (!fileStream.write(value)) {
+            await new Promise((resolve) => fileStream.once("drain", resolve));
+          }
+          hash.update(value);
+          downloaded += value.byteLength;
+          onProgress?.(downloaded, contentLength);
+        }
+      } finally {
+        fileStream.end();
+        await new Promise((resolve, reject) => {
+          fileStream.on("finish", resolve);
+          fileStream.on("error", reject);
+        });
+      }
+      const actualHash = hash.digest("hex");
+      if (actualHash !== EXPECTED_SHA256) {
+        unlinkSync3(tmpPath);
+        throw new Error(
+          `SHA256 mismatch: expected ${EXPECTED_SHA256}, got ${actualHash}`
+        );
+      }
+      renameSync3(tmpPath, destPath);
+      return destPath;
+    } catch (err) {
+      lastErr = err instanceof Error ? err : new Error(String(err));
+      if (attempt < MAX_RETRIES2) {
+        process.stderr.write(`
+Download attempt ${attempt} failed, retrying...
+`);
+        if (existsSync9(tmpPath)) unlinkSync3(tmpPath);
       }
-      hash.update(value);
-      downloaded += value.byteLength;
-      onProgress?.(downloaded, contentLength);
     }
-  } finally {
-    fileStream.end();
-    await new Promise((resolve, reject) => {
-      fileStream.on("finish", resolve);
-      fileStream.on("error", reject);
-    });
   }
-  const actualHash = hash.digest("hex");
-  if (actualHash !== EXPECTED_SHA256) {
-    unlinkSync3(tmpPath);
-    throw new Error(
-      `SHA256 mismatch: expected ${EXPECTED_SHA256}, got ${actualHash}`
-    );
-  }
-  renameSync3(tmpPath, destPath);
-  return destPath;
+  throw lastErr;
 }
 async function fileHash(filePath) {
   return new Promise((resolve, reject) => {
@@ -4363,8 +4460,8 @@ async function embedDirect(text) {
   const llamaCpp = await import("node-llama-cpp");
   const { MODELS_DIR: MODELS_DIR2 } = await Promise.resolve().then(() => (init_config(), config_exports));
   const { existsSync: existsSync22 } = await import("fs");
-  const path32 = await import("path");
-  const modelPath = path32.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
+  const path34 = await import("path");
+  const modelPath = path34.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
   if (!existsSync22(modelPath)) {
     throw new Error(`Embedding model not found at ${modelPath}. Run '/exe-setup' to download it.`);
   }
@@ -4406,12 +4503,22 @@ __export(license_exports, {
   loadLicense: () => loadLicense,
   mirrorLicenseKey: () => mirrorLicenseKey,
   saveLicense: () => saveLicense,
+  startLicenseRevalidation: () => startLicenseRevalidation,
+  stopLicenseRevalidation: () => stopLicenseRevalidation,
   validateLicense: () => validateLicense
 });
 import { readFileSync as readFileSync6, writeFileSync as writeFileSync2, existsSync as existsSync10, mkdirSync as mkdirSync3 } from "fs";
 import { randomUUID as randomUUID2 } from "crypto";
 import path11 from "path";
 import { jwtVerify, importSPKI } from "jose";
+async function fetchRetry(url, init) {
+  try {
+    return await fetch(url, init);
+  } catch {
+    await new Promise((r) => setTimeout(r, RETRY_DELAY_MS));
+    return fetch(url, { ...init, signal: AbortSignal.timeout(1e4) });
+  }
+}
 function loadDeviceId() {
   const deviceJsonPath = path11.join(EXE_AI_DIR, "device.json");
   try {
@@ -4443,7 +4550,7 @@ function loadLicense() {
 }
 function saveLicense(apiKey) {
   mkdirSync3(EXE_AI_DIR, { recursive: true });
-  writeFileSync2(LICENSE_PATH, apiKey.trim(), "utf8");
+  writeFileSync2(LICENSE_PATH, apiKey.trim(), { encoding: "utf8", mode: 384 });
 }
 async function verifyLicenseJwt(token) {
   try {
@@ -4495,7 +4602,7 @@ function cacheResponse(token) {
 async function validateLicense(apiKey, deviceId) {
   const did = deviceId ?? loadDeviceId();
   try {
-    const res = await fetch(`${API_BASE}/auth/activate`, {
+    const res = await fetchRetry(`${API_BASE}/auth/activate`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ apiKey, deviceId: did }),
@@ -4530,14 +4637,23 @@ async function validateLicense(apiKey, deviceId) {
   } catch {
     const cached = await getCachedLicense();
     if (cached) return cached;
-    return FREE_LICENSE;
+    return { ...FREE_LICENSE, valid: false, error: "offline" };
+  }
+}
+function getCacheAgeMs() {
+  try {
+    const { statSync: statSync2 } = __require("fs");
+    const s = statSync2(CACHE_PATH);
+    return Date.now() - s.mtimeMs;
+  } catch {
+    return Infinity;
   }
 }
 async function checkLicense() {
   const key = loadLicense();
   if (!key) return FREE_LICENSE;
   const cached = await getCachedLicense();
-  if (cached) return cached;
+  if (cached && getCacheAgeMs() < CACHE_MAX_AGE_MS) return cached;
   const deviceId = loadDeviceId();
   return validateLicense(key, deviceId);
 }
@@ -4577,7 +4693,7 @@ async function assertVpsLicense(opts) {
   let explicitRejection = false;
   let transientFailure = false;
   try {
-    const res = await fetch(`${API_BASE}/auth/activate`, {
+    const res = await fetchRetry(`${API_BASE}/auth/activate`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ apiKey, deviceId }),
@@ -4658,7 +4774,28 @@ async function assertVpsLicense(opts) {
     `License validation unreachable for more than ${graceDays} days. Restore network connectivity to https://askexe.com/cloud and retry. This VPS image refuses to boot after the offline grace window.`
   );
 }
-var LICENSE_PATH, CACHE_PATH, DEVICE_ID_PATH, API_BASE, LICENSE_PUBLIC_KEY_PEM, LICENSE_JWT_ALG, PLAN_LIMITS, FREE_LICENSE;
+function startLicenseRevalidation(intervalMs = 36e5) {
+  if (_revalTimer) return;
+  _revalTimer = setInterval(async () => {
+    try {
+      const license = await checkLicense();
+      if (!license.valid) {
+        process.stderr.write("[exe-os] License expired or invalid \u2014 features may be restricted\n");
+      }
+    } catch {
+    }
+  }, intervalMs);
+  if (_revalTimer && typeof _revalTimer === "object" && "unref" in _revalTimer) {
+    _revalTimer.unref();
+  }
+}
+function stopLicenseRevalidation() {
+  if (_revalTimer) {
+    clearInterval(_revalTimer);
+    _revalTimer = null;
+  }
+}
+var LICENSE_PATH, CACHE_PATH, DEVICE_ID_PATH, API_BASE, RETRY_DELAY_MS, LICENSE_PUBLIC_KEY_PEM, LICENSE_JWT_ALG, PLAN_LIMITS, FREE_LICENSE, CACHE_MAX_AGE_MS, _revalTimer;
 var init_license = __esm({
   "src/lib/license.ts"() {
     "use strict";
@@ -4667,6 +4804,7 @@ var init_license = __esm({
     CACHE_PATH = path11.join(EXE_AI_DIR, "license-cache.json");
     DEVICE_ID_PATH = path11.join(EXE_AI_DIR, "device-id");
     API_BASE = "https://askexe.com/cloud";
+    RETRY_DELAY_MS = 500;
     LICENSE_PUBLIC_KEY_PEM = `-----BEGIN PUBLIC KEY-----
 MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEeHztAMOpR/ZMh+rWuOASjEZ54CGY
 4uj+UqeKCcvtgNHKmOK278HJaJcANe9xAeji8AFYu27q3WtzCi04pHudow==
@@ -4688,6 +4826,8 @@ MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEeHztAMOpR/ZMh+rWuOASjEZ54CGY
       employeeLimit: 1,
       memoryLimit: 5e3
     };
+    CACHE_MAX_AGE_MS = 36e5;
+    _revalTimer = null;
   }
 });
 
@@ -4701,7 +4841,7 @@ __export(identity_exports, {
   updateIdentity: () => updateIdentity
 });
 import { existsSync as existsSync11, mkdirSync as mkdirSync4, readFileSync as readFileSync7, writeFileSync as writeFileSync3 } from "fs";
-import { readdirSync } from "fs";
+import { readdirSync as readdirSync2 } from "fs";
 import path12 from "path";
 import { createHash as createHash2 } from "crypto";
 function ensureDir() {
@@ -4783,7 +4923,7 @@ async function updateIdentity(agentId, content, updatedBy) {
 }
 function listIdentities() {
   ensureDir();
-  const files = readdirSync(IDENTITY_DIR).filter((f) => f.endsWith(".md"));
+  const files = readdirSync2(IDENTITY_DIR).filter((f) => f.endsWith(".md"));
   const results = [];
   for (const file of files) {
     const agentId = file.replace(".md", "");
@@ -4830,6 +4970,7 @@ var init_identity = __esm({
 var identity_templates_exports = {};
 __export(identity_templates_exports, {
   IDENTITY_TEMPLATES: () => IDENTITY_TEMPLATES,
+  PLAN_MODE_COMPAT: () => PLAN_MODE_COMPAT,
   POST_WORK_CHECKLIST: () => POST_WORK_CHECKLIST,
   getTemplate: () => getTemplate2,
   getTemplateForTitle: () => getTemplateForTitle
@@ -4849,10 +4990,18 @@ function getTemplateForTitle(title) {
   if (t.includes("review") || t.includes("audit") || t.includes("qa")) return IDENTITY_TEMPLATES["staff-code-reviewer"];
   return null;
 }
-var POST_WORK_CHECKLIST, IDENTITY_TEMPLATES;
+var PLAN_MODE_COMPAT, POST_WORK_CHECKLIST, IDENTITY_TEMPLATES;
 var init_identity_templates = __esm({
   "src/lib/identity-templates.ts"() {
     "use strict";
+    PLAN_MODE_COMPAT = `
+## Plan Mode Compatibility
+If tool execution is unavailable (e.g., CC plan mode), switch to planning:
+- Reason about the task and create a written plan
+- Document what tools you would call and with what parameters
+- Output structured text that can be acted on when tools become available
+Do not repeatedly attempt tool calls that fail \u2014 switch to planning mode.
+`;
     POST_WORK_CHECKLIST = `
 5. Check for pending reviews (list_tasks status='needs_review' where you are reviewer) \u2014 reviews are work, process before new tasks
 6. Check for blocked tasks (list_tasks status='blocked') \u2014 can you unblock it? Do it now. Can't? Escalate to exe immediately.
@@ -4932,7 +5081,7 @@ Never say "I have no memories" without first searching broadly. Your memory may
 - **update_identity** \u2014 rewrite any agent's identity when role/responsibilities change (exe/founder only)
 - **get_identity** \u2014 read any agent's identity for coordination
 - **send_message** \u2014 direct intercom to employees
-
+${PLAN_MODE_COMPAT}
 ## Completion Workflow
 
 1. Read the task file and verify the deliverable matches the brief
@@ -5003,7 +5152,7 @@ You are \${agent_id}. CTO. You hold deep context on the entire codebase, archite
 - **store_behavior** \u2014 record corrections for engineers (p0 = always injected)
 - **get_identity** \u2014 read any agent's identity for review context
 - **query_relationships** \u2014 GraphRAG entity connections for architecture analysis
-
+${PLAN_MODE_COMPAT}
 ## Completion Workflow
 
 1. Read ARCHITECTURE.md before starting work on any repo
@@ -5070,7 +5219,7 @@ You are \${agent_id}. CMO. You hold deep context on design, branding, storytelli
 - **update_task** \u2014 mark tasks done with result summary
 - **store_memory** \u2014 report completions with brand alignment notes, SEO considerations
 - **get_identity** \u2014 read team identities for brand-consistent communication
-
+${PLAN_MODE_COMPAT}
 ## Completion Workflow
 
 1. Read the task file and understand the brief \u2014 tone, format, channel requirements
@@ -5137,7 +5286,7 @@ You are a principal engineer. You write production-grade code with zero shortcut
 - **recall_my_memory** \u2014 check past work, patterns, gotchas in this project
 - **store_memory** \u2014 report completions for org visibility
 - **ask_team_memory** \u2014 pull context from colleagues when specs reference their work
-
+${PLAN_MODE_COMPAT}
 ## Completion Workflow
 
 1. Read ARCHITECTURE.md if it exists \u2014 understand architecture before changing anything
@@ -5197,7 +5346,7 @@ You are the content production specialist. You turn scripts and creative briefs
 - **update_task** \u2014 mark tasks done with result summary
 - **recall_my_memory** \u2014 check past work: which models worked, which prompts produced good results
 - **store_memory** \u2014 report completions with production decisions for future reference
-
+${PLAN_MODE_COMPAT}
 ## Completion Workflow
 
 1. Read the task file \u2014 understand the brief, check budget constraints
@@ -5269,7 +5418,7 @@ You are the AI Product Lead \u2014 the competitive intelligence engine. You stud
 - **update_task** \u2014 mark tasks done with analysis results
 - **store_memory** \u2014 persist competitive analyses, evaluations, recommendations
 - **create_task** \u2014 when a feature is worth building, spec it for the CTO
-
+${PLAN_MODE_COMPAT}
 ## Completion Workflow
 
 1. Read the task \u2014 understand what capability is needed
@@ -5332,7 +5481,7 @@ You are \${agent_id}. Staff Code Reviewer and System Auditor. Last line of defen
 - **store_behavior** \u2014 record new patterns
 - **update_task** \u2014 mark reviews done with structured findings
 - **create_task** \u2014 assign fixes to the CTO
-
+${PLAN_MODE_COMPAT}
 ## Completion Workflow
 
 1. Read the task brief and understand the audit scope
@@ -5354,10 +5503,27 @@ __export(setup_wizard_exports, {
   validateModel: () => validateModel
 });
 import crypto3 from "crypto";
-import { existsSync as existsSync12, mkdirSync as mkdirSync5, readFileSync as readFileSync8, writeFileSync as writeFileSync4 } from "fs";
-import os4 from "os";
+import { existsSync as existsSync12, mkdirSync as mkdirSync5, readFileSync as readFileSync8, writeFileSync as writeFileSync4, unlinkSync as unlinkSync4 } from "fs";
+import os5 from "os";
 import path13 from "path";
 import { createInterface as createInterface2 } from "readline";
+function loadSetupState() {
+  try {
+    return JSON.parse(readFileSync8(SETUP_STATE_PATH, "utf8"));
+  } catch {
+    return { completedSteps: [], startedAt: (/* @__PURE__ */ new Date()).toISOString() };
+  }
+}
+function saveSetupState(state) {
+  mkdirSync5(path13.dirname(SETUP_STATE_PATH), { recursive: true });
+  writeFileSync4(SETUP_STATE_PATH, JSON.stringify(state, null, 2));
+}
+function clearSetupState() {
+  try {
+    unlinkSync4(SETUP_STATE_PATH);
+  } catch {
+  }
+}
 function ask(rl, prompt) {
   return new Promise((resolve) => {
     const doAsk = () => {
@@ -5397,88 +5563,133 @@ async function runSetupWizard(opts = {}) {
       rl.close();
       return;
     }
+    const state = loadSetupState();
+    if (state.completedSteps.length > 0) {
+      log(`Resuming setup from step ${Math.max(...state.completedSteps) + 1}...`);
+    }
     if (existsSync12(LEGACY_LANCE_PATH)) {
       log("\u26A0 Found v1.0 LanceDB at ~/.exe-os/local.lance");
       log("  v1.1 uses libSQL (SQLite). Your existing memories are not automatically migrated.");
       log("  The old directory will not be modified or deleted.");
       log("");
     }
-    const existingKey = await getMasterKey();
-    if (existingKey) {
-      log("Encryption key already exists \u2014 skipping generation.");
+    if (!state.completedSteps.includes(1)) {
+      const existingKey = await getMasterKey();
+      if (existingKey) {
+        log("Encryption key already exists \u2014 skipping generation.");
+      } else {
+        log("Generating 256-bit encryption key...");
+        const key = crypto3.randomBytes(32);
+        await setMasterKey(key);
+        log("Encryption key generated and stored securely.");
+      }
+      state.completedSteps.push(1);
+      saveSetupState(state);
     } else {
-      log("Generating 256-bit encryption key...");
-      const key = crypto3.randomBytes(32);
-      await setMasterKey(key);
-      log("Encryption key generated and stored securely.");
+      log("Step 1 already complete \u2014 skipping.");
     }
     log("");
-    log("Exe Cloud: your memories are end-to-end encrypted, compressed, and");
-    log("backed up on Exe Cloud. Free for all plans. We can't read your data \u2014");
-    log("only your encryption key can decrypt it.");
     let cloudConfig;
-    try {
-      const { loadDeviceId: loadDeviceId2 } = await Promise.resolve().then(() => (init_license(), license_exports));
-      const deviceId = loadDeviceId2();
-      const res = await fetch("https://askexe.com/cloud/auth/auto-provision", {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ deviceId }),
-        signal: AbortSignal.timeout(1e4)
-      });
-      if (res.ok) {
-        const data = await res.json();
-        if (data.apiKey) {
-          cloudConfig = { apiKey: data.apiKey, endpoint: "https://askexe.com/cloud" };
-          const { saveLicense: saveLicense3, mirrorLicenseKey: mirrorLicenseKey3 } = await Promise.resolve().then(() => (init_license(), license_exports));
-          saveLicense3(data.apiKey);
-          mirrorLicenseKey3(data.apiKey);
-          log("Cloud sync activated automatically.");
+    if (!state.completedSteps.includes(2)) {
+      log("Exe Cloud: your memories are end-to-end encrypted, compressed, and");
+      log("backed up on Exe Cloud. Free for all plans. We can't read your data \u2014");
+      log("only your encryption key can decrypt it.");
+      try {
+        const { loadDeviceId: loadDeviceId2 } = await Promise.resolve().then(() => (init_license(), license_exports));
+        const deviceId = loadDeviceId2();
+        let res;
+        try {
+          res = await fetch("https://askexe.com/cloud/auth/auto-provision", {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ deviceId }),
+            signal: AbortSignal.timeout(1e4)
+          });
+        } catch {
+          await new Promise((r) => setTimeout(r, 500));
+          res = await fetch("https://askexe.com/cloud/auth/auto-provision", {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ deviceId }),
+            signal: AbortSignal.timeout(1e4)
+          });
+        }
+        if (res.ok) {
+          const data = await res.json();
+          if (data.apiKey) {
+            cloudConfig = { apiKey: data.apiKey, endpoint: "https://askexe.com/cloud" };
+            const { saveLicense: saveLicense3, mirrorLicenseKey: mirrorLicenseKey3 } = await Promise.resolve().then(() => (init_license(), license_exports));
+            saveLicense3(data.apiKey);
+            mirrorLicenseKey3(data.apiKey);
+            log("Cloud sync activated automatically.");
+          }
         }
+      } catch {
+        log("Cloud sync will activate when online.");
       }
-    } catch {
-      log("Cloud sync will activate when online.");
+      state.completedSteps.push(2);
+      saveSetupState(state);
+    } else {
+      log("Step 2 already complete \u2014 skipping.");
     }
     log("");
-    if (!skipModel) {
-      log("Note: jina-embeddings-v5-text-small is licensed CC-BY-NC-4.0 (non-commercial)");
-      log("");
-      await downloadModel({
-        destDir: MODELS_DIR,
-        onProgress: (downloaded, total) => {
-          const pct = (downloaded / total * 100).toFixed(1);
-          const dlMB = (downloaded / 1e6).toFixed(0);
-          const totalMB = (total / 1e6).toFixed(0);
-          process.stderr.write(`\rDownloading model: ${pct}% (${dlMB}/${totalMB} MB)`);
-        }
-      });
-      process.stderr.write("\n");
-      log("Model downloaded and verified.");
+    if (!state.completedSteps.includes(3)) {
+      if (!skipModel) {
+        log("Note: jina-embeddings-v5-text-small is licensed CC-BY-NC-4.0 (non-commercial)");
+        log("");
+        await downloadModel({
+          destDir: MODELS_DIR,
+          onProgress: (downloaded, total) => {
+            const pct = (downloaded / total * 100).toFixed(1);
+            const dlMB = (downloaded / 1e6).toFixed(0);
+            const totalMB = (total / 1e6).toFixed(0);
+            process.stderr.write(`\rDownloading model: ${pct}% (${dlMB}/${totalMB} MB)`);
+          }
+        });
+        process.stderr.write("\n");
+        log("Model downloaded and verified.");
+      }
+      state.completedSteps.push(3);
+      saveSetupState(state);
+    } else {
+      log("Step 3 already complete \u2014 skipping.");
     }
-    if (!skipModel && !skipModelValidation) {
-      await validateModel(log);
+    if (!state.completedSteps.includes(4)) {
+      if (!skipModel && !skipModelValidation) {
+        await validateModel(log);
+      }
+      state.completedSteps.push(4);
+      saveSetupState(state);
+    } else {
+      log("Step 4 already complete \u2014 skipping.");
     }
     const config = await loadConfig();
-    if (cloudConfig) {
-      config.cloud = cloudConfig;
-    }
-    await saveConfig(config);
-    log("");
-    try {
-      const claudeJsonPath = path13.join(os4.homedir(), ".claude.json");
-      let claudeJson = {};
+    if (!state.completedSteps.includes(5)) {
+      if (cloudConfig) {
+        config.cloud = cloudConfig;
+      }
+      await saveConfig(config);
+      log("");
       try {
-        claudeJson = JSON.parse(readFileSync8(claudeJsonPath, "utf8"));
+        const claudeJsonPath = path13.join(os5.homedir(), ".claude.json");
+        let claudeJson = {};
+        try {
+          claudeJson = JSON.parse(readFileSync8(claudeJsonPath, "utf8"));
+        } catch {
+        }
+        if (!claudeJson.projects) claudeJson.projects = {};
+        const projects = claudeJson.projects;
+        for (const dir of [process.cwd(), os5.homedir()]) {
+          if (!projects[dir]) projects[dir] = {};
+          projects[dir].hasTrustDialogAccepted = true;
+        }
+        writeFileSync4(claudeJsonPath, JSON.stringify(claudeJson, null, 2) + "\n");
       } catch {
       }
-      if (!claudeJson.projects) claudeJson.projects = {};
-      const projects = claudeJson.projects;
-      for (const dir of [process.cwd(), os4.homedir()]) {
-        if (!projects[dir]) projects[dir] = {};
-        projects[dir].hasTrustDialogAccepted = true;
-      }
-      writeFileSync4(claudeJsonPath, JSON.stringify(claudeJson, null, 2) + "\n");
-    } catch {
+      state.completedSteps.push(5);
+      saveSetupState(state);
+    } else {
+      log("Step 5 already complete \u2014 skipping.");
     }
     const {
       loadEmployees: loadEmployees2,
@@ -5487,7 +5698,7 @@ async function runSetupWizard(opts = {}) {
       registerBinSymlinks: registerBinSymlinks2,
       EMPLOYEES_PATH: EMPLOYEES_PATH2
     } = await Promise.resolve().then(() => (init_employees(), employees_exports));
-    const { getTemplate: getEmployeeTemplate } = await Promise.resolve().then(() => (init_employee_templates(), employee_templates_exports));
+    const { getTemplateByRole: getTemplateByRole2 } = await Promise.resolve().then(() => (init_employee_templates(), employee_templates_exports));
     const { identityPath: identityPath2 } = await Promise.resolve().then(() => (init_identity(), identity_exports));
     const { getTemplate: getIdentityTemplate } = await Promise.resolve().then(() => (init_identity_templates(), identity_templates_exports));
     const {
@@ -5497,152 +5708,178 @@ async function runSetupWizard(opts = {}) {
       validateLicense: validateLicense2
     } = await Promise.resolve().then(() => (init_license(), license_exports));
     const createdEmployees = [];
-    log("=== Your Team ===");
-    log("");
-    log("Every install starts with a COO \u2014 your right-hand operator.");
-    log("They hold the big picture: priorities, progress, and blockers.");
-    log("You talk to them. They coordinate everyone else.");
-    log("");
-    const cooNameInput = await ask(rl, "Name your COO (default: exe): ");
-    const cooName = (cooNameInput || "exe").toLowerCase();
-    let employees = await loadEmployees2(EMPLOYEES_PATH2).catch(() => []);
-    if (!employees.some((e) => e.name === cooName)) {
-      const { DEFAULT_EXE: DEFAULT_EXE2, personalizePrompt: personalizePrompt2 } = await Promise.resolve().then(() => (init_employee_templates(), employee_templates_exports));
-      const cooEmployee = {
-        name: cooName,
-        role: "COO",
-        systemPrompt: personalizePrompt2(DEFAULT_EXE2.systemPrompt, "exe", cooName),
-        createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-        templateName: "exe",
-        templateVersion: 1
-      };
-      employees = addEmployee2(employees, cooEmployee);
-      await saveEmployees2(employees, EMPLOYEES_PATH2);
-    }
-    const cooIdentityContent = getIdentityTemplate("coo");
-    if (cooIdentityContent) {
-      const cooIdPath = identityPath2(cooName);
-      mkdirSync5(path13.dirname(cooIdPath), { recursive: true });
-      const replaced = cooIdentityContent.replace(/agent_id:\s*exe/g, `agent_id: ${cooName}`).replace(/\$\{agent_id\}/g, cooName);
-      writeFileSync4(cooIdPath, replaced, "utf-8");
-    }
-    registerBinSymlinks2(cooName);
-    createdEmployees.push({ name: cooName, role: "COO" });
-    log("");
-    log("=== Meet Your Specialists ===");
-    log("");
-    log("Your COO coordinates specialists. Here's who you can hire:");
-    log("");
-    log("  CTO (default: yoshi)");
-    log("  Your head of engineering. Architecture, code reviews, tech decisions.");
-    log("  Manages your projects and delegates to engineers when there's parallel work.");
-    log("");
-    log("  CMO (default: mari)");
-    log("  Design, brand, content, SEO. Builds your visual identity, writes");
-    log("  your copy, and gets you found online. Delegates to content specialists.");
-    log("");
-    log("Why separate roles instead of one AI that does everything?");
-    log("");
-    log("Memory saturates. One agent juggling architecture decisions AND landing page");
-    log("copy AND CI/CD AND social media loses context on all of them. Competing");
-    log("priorities \u2014 should I fix the auth bug or write the blog post? When you split");
-    log("responsibilities, each specialist stays sharp because they stay focused.");
-    log("Your COO connects them so nothing falls through the cracks.");
-    log("");
-    log("This is how real companies scale \u2014 you're just doing it with AI");
-    log("instead of headcount.");
-    log("");
-    await ask(rl, "Press Enter to continue. ");
-    let license;
-    try {
-      license = await checkLicense2();
-    } catch {
-      license = { valid: true, plan: "free", email: "", expiresAt: null, deviceLimit: 1, employeeLimit: 2, memoryLimit: 1e3 };
-    }
-    if (license.plan === "free") {
-      log("Your plan: Free \u2014 1 employee (your COO)");
+    let cooName = "exe";
+    if (!state.completedSteps.includes(6)) {
+      log("=== Your Team ===");
       log("");
-      log("The CTO and CMO are available on Solopreneur ($97/mo) \u2014 full engineering");
-      log("and marketing team, unlimited tasks, priority support.");
-      log("Get your key at https://askexe.com, then paste it here.");
+      log("Every install starts with a COO \u2014 your right-hand operator.");
+      log("They hold the big picture: priorities, progress, and blockers.");
+      log("You talk to them. They coordinate everyone else.");
       log("");
-      const licenseInput = await ask(rl, "License key (or press Enter to skip): ");
-      if (licenseInput.startsWith("exe_sk_")) {
-        saveLicense2(licenseInput);
-        mirrorLicenseKey2(licenseInput);
-        try {
-          license = await validateLicense2(licenseInput);
-        } catch {
-          log("Couldn't reach the license server \u2014 your key has been saved.");
-          log("Run exe-os --activate <key> anytime to finish activation.");
-        }
-      } else if (!licenseInput) {
-        log("You can activate anytime with: exe-os --activate <key>");
-      } else {
-        log("That doesn't look like a license key (should start with exe_sk_).");
-        log("You can activate anytime with: exe-os --activate <key>");
-      }
+      const cooNameInput = await ask(rl, "Name your COO (default: exe): ");
+      cooName = (cooNameInput || "exe").toLowerCase();
+      let employees = await loadEmployees2(EMPLOYEES_PATH2).catch(() => []);
+      if (!employees.some((e) => e.name === cooName)) {
+        const { DEFAULT_EXE: DEFAULT_EXE2, personalizePrompt: personalizePrompt2 } = await Promise.resolve().then(() => (init_employee_templates(), employee_templates_exports));
+        const cooEmployee = {
+          name: cooName,
+          role: "COO",
+          systemPrompt: personalizePrompt2(DEFAULT_EXE2.systemPrompt, "exe", cooName),
+          createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+          templateName: "exe",
+          templateVersion: 1
+        };
+        employees = addEmployee2(employees, cooEmployee);
+        await saveEmployees2(employees, EMPLOYEES_PATH2);
+      }
+      const cooIdentityContent = getIdentityTemplate("coo");
+      if (cooIdentityContent) {
+        const cooIdPath = identityPath2(cooName);
+        mkdirSync5(path13.dirname(cooIdPath), { recursive: true });
+        const replaced = cooIdentityContent.replace(/agent_id:\s*exe/g, `agent_id: ${cooName}`).replace(/\$\{agent_id\}/g, cooName);
+        writeFileSync4(cooIdPath, replaced, "utf-8");
+      }
+      registerBinSymlinks2(cooName);
+      createdEmployees.push({ name: cooName, role: "COO" });
+      state.completedSteps.push(6);
+      saveSetupState(state);
+    } else {
+      log("Step 6 already complete \u2014 skipping.");
+      const roster = await loadEmployees2(EMPLOYEES_PATH2).catch(() => []);
+      const existingCoo = roster.find((e) => e.role === "COO");
+      if (existingCoo) cooName = existingCoo.name;
     }
-    if (license.plan !== "free") {
-      const planName = license.plan === "pro" ? "Solopreneur" : license.plan.charAt(0).toUpperCase() + license.plan.slice(1);
-      log(`Your plan: ${planName} (up to ${license.employeeLimit} employees)`);
+    log("");
+    if (!state.completedSteps.includes(7)) {
+      log("=== Meet Your Specialists ===");
       log("");
-      const createCto = await ask(rl, "Create your CTO? (Y/n): ");
-      if (createCto.toLowerCase() !== "n") {
-        const ctoNameInput = await ask(rl, "Name your CTO (default: yoshi): ");
-        const ctoName = (ctoNameInput || "yoshi").toLowerCase();
-        if (!employees.some((e) => e.name === ctoName)) {
-          const ctoTemplate = getEmployeeTemplate("yoshi");
-          const { personalizePrompt: personalizeCto } = await Promise.resolve().then(() => (init_employee_templates(), employee_templates_exports));
-          const ctoEmployee = {
-            name: ctoName,
-            role: "CTO",
-            systemPrompt: personalizeCto(ctoTemplate?.systemPrompt ?? "", "yoshi", ctoName),
-            createdAt: (/* @__PURE__ */ new Date()).toISOString()
-          };
-          employees = addEmployee2(employees, ctoEmployee);
-          await saveEmployees2(employees, EMPLOYEES_PATH2);
-        }
-        const ctoIdentityContent = getIdentityTemplate("cto");
-        if (ctoIdentityContent) {
-          const ctoIdPath = identityPath2(ctoName);
-          mkdirSync5(path13.dirname(ctoIdPath), { recursive: true });
-          const replaced = ctoIdentityContent.replace(/agent_id:\s*\w+/g, `agent_id: ${ctoName}`).replace(/\$\{agent_id\}/g, ctoName);
-          writeFileSync4(ctoIdPath, replaced, "utf-8");
-        }
-        registerBinSymlinks2(ctoName);
-        createdEmployees.push({ name: ctoName, role: "CTO" });
-        log(`Created ${ctoName} (CTO)`);
-      }
-      const createCmo = await ask(rl, "Create your CMO? (Y/n): ");
-      if (createCmo.toLowerCase() !== "n") {
-        const cmoNameInput = await ask(rl, "Name your CMO (default: mari): ");
-        const cmoName = (cmoNameInput || "mari").toLowerCase();
-        if (!employees.some((e) => e.name === cmoName)) {
-          const cmoTemplate = getEmployeeTemplate("mari");
-          const { personalizePrompt: personalizeCmo } = await Promise.resolve().then(() => (init_employee_templates(), employee_templates_exports));
-          const cmoEmployee = {
-            name: cmoName,
-            role: "CMO",
-            systemPrompt: personalizeCmo(cmoTemplate?.systemPrompt ?? "", "mari", cmoName),
-            createdAt: (/* @__PURE__ */ new Date()).toISOString()
-          };
-          employees = addEmployee2(employees, cmoEmployee);
-          await saveEmployees2(employees, EMPLOYEES_PATH2);
-        }
-        const cmoIdentityContent = getIdentityTemplate("cmo");
-        if (cmoIdentityContent) {
-          const cmoIdPath = identityPath2(cmoName);
-          mkdirSync5(path13.dirname(cmoIdPath), { recursive: true });
-          const replaced = cmoIdentityContent.replace(/agent_id:\s*\w+/g, `agent_id: ${cmoName}`).replace(/\$\{agent_id\}/g, cmoName);
-          writeFileSync4(cmoIdPath, replaced, "utf-8");
+      log("Your COO coordinates specialists. Here's who you can hire:");
+      log("");
+      log("  CTO (default: yoshi)");
+      log("  Your head of engineering. Architecture, code reviews, tech decisions.");
+      log("  Manages your projects and delegates to engineers when there's parallel work.");
+      log("");
+      log("  CMO (default: mari)");
+      log("  Design, brand, content, SEO. Builds your visual identity, writes");
+      log("  your copy, and gets you found online. Delegates to content specialists.");
+      log("");
+      log("Why separate roles instead of one AI that does everything?");
+      log("");
+      log("Memory saturates. One agent juggling architecture decisions AND landing page");
+      log("copy AND CI/CD AND social media loses context on all of them. Competing");
+      log("priorities \u2014 should I fix the auth bug or write the blog post? When you split");
+      log("responsibilities, each specialist stays sharp because they stay focused.");
+      log("Your COO connects them so nothing falls through the cracks.");
+      log("");
+      log("This is how real companies scale \u2014 you're just doing it with AI");
+      log("instead of headcount.");
+      log("");
+      await ask(rl, "Press Enter to continue. ");
+      state.completedSteps.push(7);
+      saveSetupState(state);
+    } else {
+      log("Step 7 already complete \u2014 skipping.");
+    }
+    if (!state.completedSteps.includes(8)) {
+      let employees = await loadEmployees2(EMPLOYEES_PATH2).catch(() => []);
+      let license;
+      try {
+        license = await checkLicense2();
+      } catch {
+        license = { valid: true, plan: "free", email: "", expiresAt: null, deviceLimit: 1, employeeLimit: 2, memoryLimit: 1e3 };
+      }
+      if (license.plan === "free") {
+        log("Your plan: Free \u2014 1 employee (your COO)");
+        log("");
+        log("The CTO and CMO are available on Solopreneur ($97/mo) \u2014 full engineering");
+        log("and marketing team, unlimited tasks, priority support.");
+        log("Get your key at https://askexe.com, then paste it here.");
+        log("");
+        const licenseInput = await ask(rl, "License key (or press Enter to skip): ");
+        if (licenseInput.startsWith("exe_sk_")) {
+          saveLicense2(licenseInput);
+          mirrorLicenseKey2(licenseInput);
+          try {
+            license = await validateLicense2(licenseInput);
+          } catch {
+            log("Couldn't reach the license server \u2014 your key has been saved.");
+            log("Run exe-os --activate <key> anytime to finish activation.");
+          }
+        } else if (!licenseInput) {
+          log("You can activate anytime with: exe-os --activate <key>");
+        } else {
+          log("That doesn't look like a license key (should start with exe_sk_).");
+          log("You can activate anytime with: exe-os --activate <key>");
+        }
+      }
+      if (license.plan !== "free") {
+        const planName = license.plan === "pro" ? "Solopreneur" : license.plan.charAt(0).toUpperCase() + license.plan.slice(1);
+        log(`Your plan: ${planName} (up to ${license.employeeLimit} employees)`);
+        log("");
+        const createCto = await ask(rl, "Create your CTO? (Y/n): ");
+        if (createCto.toLowerCase() !== "n") {
+          const ctoTemplate = getTemplateByRole2("CTO");
+          const ctoDefault = ctoTemplate?.name ?? "cto";
+          const ctoNameInput = await ask(rl, `Name your CTO (default: ${ctoDefault}): `);
+          const ctoName = (ctoNameInput || ctoDefault).toLowerCase();
+          if (!employees.some((e) => e.name === ctoName)) {
+            const { personalizePrompt: personalizeCto } = await Promise.resolve().then(() => (init_employee_templates(), employee_templates_exports));
+            const ctoEmployee = {
+              name: ctoName,
+              role: "CTO",
+              systemPrompt: personalizeCto(ctoTemplate?.systemPrompt ?? "", ctoDefault, ctoName),
+              createdAt: (/* @__PURE__ */ new Date()).toISOString()
+            };
+            employees = addEmployee2(employees, ctoEmployee);
+            await saveEmployees2(employees, EMPLOYEES_PATH2);
+          }
+          const ctoIdentityContent = getIdentityTemplate("cto");
+          if (ctoIdentityContent) {
+            const ctoIdPath = identityPath2(ctoName);
+            mkdirSync5(path13.dirname(ctoIdPath), { recursive: true });
+            const replaced = ctoIdentityContent.replace(/agent_id:\s*\w+/g, `agent_id: ${ctoName}`).replace(/\$\{agent_id\}/g, ctoName);
+            writeFileSync4(ctoIdPath, replaced, "utf-8");
+          }
+          registerBinSymlinks2(ctoName);
+          createdEmployees.push({ name: ctoName, role: "CTO" });
+          log(`Created ${ctoName} (CTO)`);
+        }
+        const createCmo = await ask(rl, "Create your CMO? (Y/n): ");
+        if (createCmo.toLowerCase() !== "n") {
+          const cmoTemplate = getTemplateByRole2("CMO");
+          const cmoDefault = cmoTemplate?.name ?? "cmo";
+          const cmoNameInput = await ask(rl, `Name your CMO (default: ${cmoDefault}): `);
+          const cmoName = (cmoNameInput || cmoDefault).toLowerCase();
+          if (!employees.some((e) => e.name === cmoName)) {
+            const { personalizePrompt: personalizeCmo } = await Promise.resolve().then(() => (init_employee_templates(), employee_templates_exports));
+            const cmoEmployee = {
+              name: cmoName,
+              role: "CMO",
+              systemPrompt: personalizeCmo(cmoTemplate?.systemPrompt ?? "", cmoDefault, cmoName),
+              createdAt: (/* @__PURE__ */ new Date()).toISOString()
+            };
+            employees = addEmployee2(employees, cmoEmployee);
+            await saveEmployees2(employees, EMPLOYEES_PATH2);
+          }
+          const cmoIdentityContent = getIdentityTemplate("cmo");
+          if (cmoIdentityContent) {
+            const cmoIdPath = identityPath2(cmoName);
+            mkdirSync5(path13.dirname(cmoIdPath), { recursive: true });
+            const replaced = cmoIdentityContent.replace(/agent_id:\s*\w+/g, `agent_id: ${cmoName}`).replace(/\$\{agent_id\}/g, cmoName);
+            writeFileSync4(cmoIdPath, replaced, "utf-8");
+          }
+          registerBinSymlinks2(cmoName);
+          createdEmployees.push({ name: cmoName, role: "CMO" });
+          log(`Created ${cmoName} (CMO)`);
         }
-        registerBinSymlinks2(cmoName);
-        createdEmployees.push({ name: cmoName, role: "CMO" });
-        log(`Created ${cmoName} (CMO)`);
+        log("");
       }
-      log("");
+      state.completedSteps.push(8);
+      saveSetupState(state);
+    } else {
+      log("Step 8 already complete \u2014 skipping.");
     }
+    clearSetupState();
     log("=== Two Ways to Work ===");
     log("");
     log("  1. Claude Code mode");
@@ -5679,12 +5916,14 @@ async function runSetupWizard(opts = {}) {
     rl.close();
   }
 }
+var SETUP_STATE_PATH;
 var init_setup_wizard = __esm({
   "src/lib/setup-wizard.ts"() {
     "use strict";
     init_config();
     init_keychain();
     init_model_downloader();
+    SETUP_STATE_PATH = path13.join(os5.homedir(), ".exe-os", "setup-state.json");
   }
 });
 
@@ -10046,8 +10285,8 @@ var init_ErrorOverview = __esm({
     "use strict";
     init_Box();
     init_Text();
-    cleanupPath = (path32) => {
-      return path32?.replace(`file://${cwd()}/`, "");
+    cleanupPath = (path34) => {
+      return path34?.replace(`file://${cwd()}/`, "");
     };
     stackUtils = new StackUtils({
       cwd: cwd(),
@@ -12501,7 +12740,7 @@ var init_demo_data = __esm({
   "src/tui/demo-data.ts"() {
     "use strict";
     DEMO_EMPLOYEES = [
-      { name: "exe", role: "COO", status: "active", activity: "Reviewing yoshi's task-aware behavior injection PR", memoryCount: 16409, projects: [
+      { name: "exe", role: "COO", status: "active", activity: "Reviewing yoshi's task-aware behavior injection PR", memoryCount: 15e3, projects: [
         { name: "exe-os", status: "active" },
         { name: "exe-create", status: "has_tasks" },
         { name: "openclaw", status: "idle" }
@@ -12510,7 +12749,7 @@ var init_demo_data = __esm({
         "Dispatched behavior injection task",
         "Approved gateway Phase 4"
       ] },
-      { name: "yoshi", role: "CTO", status: "active", activity: "Implementing skill learning trajectory capture", memoryCount: 8164, projects: [
+      { name: "yoshi", role: "CTO", status: "active", activity: "Implementing skill learning trajectory capture", memoryCount: 8e3, projects: [
         { name: "exe-os", status: "active" },
         { name: "exe-create", status: "idle" }
       ], recentTasks: [
@@ -12518,7 +12757,7 @@ var init_demo_data = __esm({
         "Fixed TUI mouse listener leak",
         "Built task-aware behavior injection"
       ] },
-      { name: "mari", role: "CMO", status: "idle", activity: "", memoryCount: 2158, projects: [
+      { name: "mari", role: "CMO", status: "idle", activity: "", memoryCount: 2e3, projects: [
         { name: "exe-build-skills", status: "has_tasks" },
         { name: "exe-os", status: "idle" }
       ], recentTasks: [
@@ -12526,13 +12765,13 @@ var init_demo_data = __esm({
         "Designed exe-os UI system",
         "Fixed logo layouts"
       ] },
-      { name: "tom", role: "Principal Engineer", status: "idle", activity: "", memoryCount: 689, projects: [
+      { name: "tom", role: "Principal Engineer", status: "idle", activity: "", memoryCount: 700, projects: [
         { name: "exe-os", status: "idle" }
       ], recentTasks: [
         "Implemented BashTool sandboxed execution",
         "Ported session scoping to exe-agent-memory"
       ] },
-      { name: "sasha", role: "Content Production", status: "offline", activity: "", memoryCount: 60, projects: [
+      { name: "sasha", role: "Content Production", status: "offline", activity: "", memoryCount: 50, projects: [
         { name: "exe-build-skills", status: "idle" }
       ], recentTasks: [
         "Rendered carousel export prototype"
@@ -12545,7 +12784,7 @@ var init_demo_data = __esm({
       { time: "11:15", agent: "mari", action: "Completed exe-os UI design system" },
       { time: "10:50", agent: "exe", action: "Approved gateway Phase 4" }
     ];
-    DEMO_HEALTH = { memories: 27453, daemon: "running", cloud: "disabled" };
+    DEMO_HEALTH = { memories: 25750, daemon: "running", cloud: "disabled" };
     DEMO_PROJECTS = [
       {
         projectName: "exe-os",
@@ -14413,7 +14652,7 @@ var init_hooks = __esm({
 
 // src/runtime/safety-checks.ts
 import path14 from "path";
-import os5 from "os";
+import os6 from "os";
 function checkPathSafety(filePath) {
   const resolved = path14.resolve(filePath);
   for (const { pattern, reason } of BYPASS_IMMUNE_PATTERNS) {
@@ -14440,7 +14679,7 @@ var HOME, BYPASS_IMMUNE_PATTERNS;
 var init_safety_checks = __esm({
   "src/runtime/safety-checks.ts"() {
     "use strict";
-    HOME = os5.homedir();
+    HOME = os6.homedir();
     BYPASS_IMMUNE_PATTERNS = [
       {
         pattern: /\/\.git\/hooks\//,
@@ -14672,8 +14911,13 @@ function runRipgrep(input, searchPath, context) {
       timeout: 3e4,
       stdio: ["ignore", "pipe", "pipe"]
     });
+    const MAX_OUTPUT = 1e7;
     const chunks = [];
-    child.stdout.on("data", (chunk) => chunks.push(chunk));
+    let totalSize = 0;
+    child.stdout.on("data", (chunk) => {
+      totalSize += chunk.length;
+      if (totalSize <= MAX_OUTPUT) chunks.push(chunk);
+    });
     const onAbort = () => child.kill("SIGTERM");
     context.abortSignal.addEventListener("abort", onAbort, { once: true });
     child.on("close", (code) => {
@@ -15057,10 +15301,19 @@ var init_bash = __esm({
             stdio: ["ignore", "pipe", "pipe"],
             env: { ...process.env }
           });
+          const MAX_OUTPUT_SIZE = 5242880;
           const stdoutChunks = [];
           const stderrChunks = [];
-          child.stdout.on("data", (chunk) => stdoutChunks.push(chunk));
-          child.stderr.on("data", (chunk) => stderrChunks.push(chunk));
+          let stdoutSize = 0;
+          let stderrSize = 0;
+          child.stdout.on("data", (chunk) => {
+            if (stdoutSize < MAX_OUTPUT_SIZE) stdoutChunks.push(chunk);
+            stdoutSize += chunk.length;
+          });
+          child.stderr.on("data", (chunk) => {
+            if (stderrSize < MAX_OUTPUT_SIZE) stderrChunks.push(chunk);
+            stderrSize += chunk.length;
+          });
           const onAbort = () => {
             child.kill("SIGTERM");
             setTimeout(() => {
@@ -15103,7 +15356,7 @@ __export(session_registry_exports, {
 import { readFileSync as readFileSync10, writeFileSync as writeFileSync5, mkdirSync as mkdirSync6, existsSync as existsSync14 } from "fs";
 import { execSync as execSync4 } from "child_process";
 import path20 from "path";
-import os6 from "os";
+import os7 from "os";
 function registerSession(entry) {
   const dir = path20.dirname(REGISTRY_PATH);
   if (!existsSync14(dir)) {
@@ -15149,13 +15402,15 @@ var REGISTRY_PATH;
 var init_session_registry = __esm({
   "src/lib/session-registry.ts"() {
     "use strict";
-    REGISTRY_PATH = path20.join(os6.homedir(), ".exe-os", "session-registry.json");
+    REGISTRY_PATH = path20.join(os7.homedir(), ".exe-os", "session-registry.json");
   }
 });
 
 // src/tui/views/CommandCenter.tsx
 import { useState as useState6, useEffect as useEffect8, useMemo as useMemo4, useCallback as useCallback4, useRef as useRef4 } from "react";
 import TextInput from "ink-text-input";
+import path21 from "path";
+import { homedir as homedir3 } from "os";
 import { Fragment as Fragment2, jsx as jsx7, jsxs as jsxs5 } from "react/jsx-runtime";
 function CommandCenterView({
   onSelectProject,
@@ -15191,8 +15446,8 @@ function CommandCenterView({
         const { createDefaultHooks: createDefaultHooks2 } = await Promise.resolve().then(() => (init_hooks(), hooks_exports));
         const { readFileSync: readFileSync18, existsSync: existsSync22 } = await import("fs");
         const { join } = await import("path");
-        const { homedir: homedir3 } = await import("os");
-        const configPath = join(homedir3(), ".exe-os", "config.json");
+        const { homedir: homedir5 } = await import("os");
+        const configPath = join(homedir5(), ".exe-os", "config.json");
         let failoverChain = ["anthropic", "opencode", "gemini", "openai"];
         let providerConfigs = {};
         if (existsSync22(configPath)) {
@@ -15255,7 +15510,7 @@ function CommandCenterView({
         registry.register(BashTool2);
         let agentRole = "CTO";
         try {
-          const markerDir = join(homedir3(), ".exe-os", "session-cache");
+          const markerDir = join(homedir5(), ".exe-os", "session-cache");
           const agentFiles = (await import("fs")).readdirSync(markerDir).filter((f) => f.startsWith("active-agent-"));
           for (const f of agentFiles) {
             const data = JSON.parse(readFileSync18(join(markerDir, f), "utf8"));
@@ -15395,10 +15650,10 @@ function CommandCenterView({
       const demoEntries = DEMO_PROJECTS.map((p) => ({
         projectName: p.projectName,
         exeSession: p.exeSession,
-        projectDir: `/Users/demo/${p.projectName}`,
+        projectDir: path21.join(homedir3(), p.projectName),
         employeeCount: p.employees.length,
         activeCount: p.employees.filter((e) => e.status === "active").length,
-        memoryCount: p.projectName === "exe-os" ? 18331 : p.projectName === "exe-create" || p.projectName === "exe-build-skills" ? 2100 : 890,
+        memoryCount: p.employees.length * 4e3,
         status: p.employees.some((e) => e.status === "active") ? "active" : "idle",
         type: p.projectName.startsWith("exe-") ? "code" : "automation",
         recentTasks: DEMO_RECENT_TASKS[p.projectName] ?? []
@@ -16223,10 +16478,10 @@ var init_provider_table = __esm({
 
 // src/lib/intercom-queue.ts
 import { readFileSync as readFileSync11, writeFileSync as writeFileSync6, renameSync as renameSync4, existsSync as existsSync15, mkdirSync as mkdirSync7 } from "fs";
-import path21 from "path";
-import os7 from "os";
+import path22 from "path";
+import os8 from "os";
 function ensureDir2() {
-  const dir = path21.dirname(QUEUE_PATH);
+  const dir = path22.dirname(QUEUE_PATH);
   if (!existsSync15(dir)) mkdirSync7(dir, { recursive: true });
 }
 function readQueue() {
@@ -16264,15 +16519,15 @@ var QUEUE_PATH, TTL_MS, INTERCOM_LOG;
 var init_intercom_queue = __esm({
   "src/lib/intercom-queue.ts"() {
     "use strict";
-    QUEUE_PATH = path21.join(os7.homedir(), ".exe-os", "intercom-queue.json");
+    QUEUE_PATH = path22.join(os8.homedir(), ".exe-os", "intercom-queue.json");
     TTL_MS = 60 * 60 * 1e3;
-    INTERCOM_LOG = path21.join(os7.homedir(), ".exe-os", "intercom.log");
+    INTERCOM_LOG = path22.join(os8.homedir(), ".exe-os", "intercom.log");
   }
 });
 
 // src/lib/plan-limits.ts
 import { readFileSync as readFileSync12, existsSync as existsSync16 } from "fs";
-import path22 from "path";
+import path23 from "path";
 function getLicenseSync() {
   try {
     if (!existsSync16(CACHE_PATH2)) return freeLicense();
@@ -16344,18 +16599,18 @@ var init_plan_limits = __esm({
         this.name = "PlanLimitError";
       }
     };
-    CACHE_PATH2 = path22.join(EXE_AI_DIR, "license-cache.json");
+    CACHE_PATH2 = path23.join(EXE_AI_DIR, "license-cache.json");
   }
 });
 
 // src/lib/notifications.ts
 import crypto4 from "crypto";
-import path23 from "path";
-import os8 from "os";
+import path24 from "path";
+import os9 from "os";
 import {
   readFileSync as readFileSync13,
-  readdirSync as readdirSync2,
-  unlinkSync as unlinkSync4,
+  readdirSync as readdirSync3,
+  unlinkSync as unlinkSync5,
   existsSync as existsSync17,
   rmdirSync
 } from "fs";
@@ -16436,7 +16691,7 @@ var init_session_kill_telemetry = __esm({
 
 // src/lib/tasks-crud.ts
 import crypto6 from "crypto";
-import path24 from "path";
+import path25 from "path";
 import { execSync as execSync7 } from "child_process";
 import { mkdir as mkdir6, writeFile as writeFile5, appendFile } from "fs/promises";
 import { existsSync as existsSync18, readFileSync as readFileSync14 } from "fs";
@@ -16569,8 +16824,8 @@ async function createTaskCore(input) {
   }
   if (input.baseDir) {
     try {
-      await mkdir6(path24.join(input.baseDir, "exe", "output"), { recursive: true });
-      await mkdir6(path24.join(input.baseDir, "exe", "research"), { recursive: true });
+      await mkdir6(path25.join(input.baseDir, "exe", "output"), { recursive: true });
+      await mkdir6(path25.join(input.baseDir, "exe", "research"), { recursive: true });
       await ensureArchitectureDoc(input.baseDir, input.projectName);
       await ensureGitignoreExe(input.baseDir);
     } catch {
@@ -16778,7 +17033,7 @@ async function deleteTaskCore(taskId, _baseDir) {
   return { taskFile, assignedTo, assignedBy, taskSlug };
 }
 async function ensureArchitectureDoc(baseDir, projectName) {
-  const archPath = path24.join(baseDir, "exe", "ARCHITECTURE.md");
+  const archPath = path25.join(baseDir, "exe", "ARCHITECTURE.md");
   try {
     if (existsSync18(archPath)) return;
     const template = [
@@ -16813,7 +17068,7 @@ async function ensureArchitectureDoc(baseDir, projectName) {
   }
 }
 async function ensureGitignoreExe(baseDir) {
-  const gitignorePath = path24.join(baseDir, ".gitignore");
+  const gitignorePath = path25.join(baseDir, ".gitignore");
   try {
     if (existsSync18(gitignorePath)) {
       const content = readFileSync14(gitignorePath, "utf-8");
@@ -16836,8 +17091,8 @@ var init_tasks_crud = __esm({
 });
 
 // src/lib/tasks-review.ts
-import path25 from "path";
-import { existsSync as existsSync19, readdirSync as readdirSync3, unlinkSync as unlinkSync5 } from "fs";
+import path26 from "path";
+import { existsSync as existsSync19, readdirSync as readdirSync4, unlinkSync as unlinkSync6 } from "fs";
 async function countPendingReviews() {
   const client = getClient();
   const result = await client.execute({
@@ -16957,11 +17212,11 @@ async function cleanupReviewFile(row, taskFile, _baseDir) {
     );
   }
   try {
-    const cacheDir = path25.join(EXE_AI_DIR, "session-cache");
+    const cacheDir = path26.join(EXE_AI_DIR, "session-cache");
     if (existsSync19(cacheDir)) {
-      for (const f of readdirSync3(cacheDir)) {
+      for (const f of readdirSync4(cacheDir)) {
         if (f.startsWith("review-notified-")) {
-          unlinkSync5(path25.join(cacheDir, f));
+          unlinkSync6(path26.join(cacheDir, f));
         }
       }
     }
@@ -16982,7 +17237,7 @@ var init_tasks_review = __esm({
 });
 
 // src/lib/tasks-chain.ts
-import path26 from "path";
+import path27 from "path";
 import { readFile as readFile5, writeFile as writeFile6 } from "fs/promises";
 async function cascadeUnblock(taskId, baseDir, now) {
   const client = getClient();
@@ -16998,7 +17253,7 @@ async function cascadeUnblock(taskId, baseDir, now) {
     });
     for (const ur of unblockedRows.rows) {
       try {
-        const ubFile = path26.join(baseDir, String(ur.task_file));
+        const ubFile = path27.join(baseDir, String(ur.task_file));
         let ubContent = await readFile5(ubFile, "utf-8");
         ubContent = ubContent.replace(/\*\*Status:\*\* blocked/, "**Status:** open");
         ubContent = ubContent.replace(/\n\*\*Blocked by:\*\*.*\n/, "\n");
@@ -17064,7 +17319,7 @@ var init_tasks_chain = __esm({
 
 // src/lib/project-name.ts
 import { execSync as execSync8 } from "child_process";
-import path27 from "path";
+import path28 from "path";
 function getProjectName(cwd2) {
   const dir = cwd2 ?? process.cwd();
   if (_cached2 && _cachedCwd === dir) return _cached2;
@@ -17077,7 +17332,7 @@ function getProjectName(cwd2) {
         timeout: 2e3,
         stdio: ["pipe", "pipe", "pipe"]
       }).trim();
-      repoRoot = path27.dirname(gitCommonDir);
+      repoRoot = path28.dirname(gitCommonDir);
     } catch {
       repoRoot = execSync8("git rev-parse --show-toplevel", {
         cwd: dir,
@@ -17086,11 +17341,11 @@ function getProjectName(cwd2) {
         stdio: ["pipe", "pipe", "pipe"]
       }).trim();
     }
-    _cached2 = path27.basename(repoRoot);
+    _cached2 = path28.basename(repoRoot);
     _cachedCwd = dir;
     return _cached2;
   } catch {
-    _cached2 = path27.basename(dir);
+    _cached2 = path28.basename(dir);
     _cachedCwd = dir;
     return _cached2;
   }
@@ -17561,8 +17816,8 @@ __export(tasks_exports, {
   updateTaskStatus: () => updateTaskStatus,
   writeCheckpoint: () => writeCheckpoint
 });
-import path28 from "path";
-import { writeFileSync as writeFileSync7, mkdirSync as mkdirSync8, unlinkSync as unlinkSync6 } from "fs";
+import path29 from "path";
+import { writeFileSync as writeFileSync7, mkdirSync as mkdirSync8, unlinkSync as unlinkSync7 } from "fs";
 async function createTask(input) {
   const result = await createTaskCore(input);
   if (!input.skipDispatch && result.status !== "blocked" && !process.env.VITEST) {
@@ -17581,14 +17836,14 @@ async function updateTask(input) {
   const { row, taskFile, now, taskId } = await updateTaskStatus(input);
   try {
     const agent = String(row.assigned_to);
-    const cacheDir = path28.join(EXE_AI_DIR, "session-cache");
-    const cachePath = path28.join(cacheDir, `current-task-${agent}.json`);
+    const cacheDir = path29.join(EXE_AI_DIR, "session-cache");
+    const cachePath = path29.join(cacheDir, `current-task-${agent}.json`);
     if (input.status === "in_progress") {
       mkdirSync8(cacheDir, { recursive: true });
       writeFileSync7(cachePath, JSON.stringify({ taskId, title: String(row.title) }));
     } else if (input.status === "done" || input.status === "blocked" || input.status === "cancelled") {
       try {
-        unlinkSync6(cachePath);
+        unlinkSync7(cachePath);
       } catch {
       }
     }
@@ -18004,12 +18259,12 @@ __export(tmux_routing_exports, {
 });
 import { execFileSync as execFileSync3, execSync as execSync9 } from "child_process";
 import { readFileSync as readFileSync15, writeFileSync as writeFileSync8, mkdirSync as mkdirSync9, existsSync as existsSync20, appendFileSync } from "fs";
-import path29 from "path";
-import os9 from "os";
+import path30 from "path";
+import os10 from "os";
 import { fileURLToPath as fileURLToPath4 } from "url";
-import { unlinkSync as unlinkSync7 } from "fs";
+import { unlinkSync as unlinkSync8 } from "fs";
 function spawnLockPath(sessionName) {
-  return path29.join(SPAWN_LOCK_DIR, `${sessionName}.lock`);
+  return path30.join(SPAWN_LOCK_DIR, `${sessionName}.lock`);
 }
 function isProcessAlive(pid) {
   try {
@@ -18039,15 +18294,15 @@ function acquireSpawnLock2(sessionName) {
 }
 function releaseSpawnLock2(sessionName) {
   try {
-    unlinkSync7(spawnLockPath(sessionName));
+    unlinkSync8(spawnLockPath(sessionName));
   } catch {
   }
 }
 function resolveBehaviorsExporterScript() {
   try {
     const thisFile = fileURLToPath4(import.meta.url);
-    const scriptPath = path29.join(
-      path29.dirname(thisFile),
+    const scriptPath = path30.join(
+      path30.dirname(thisFile),
       "..",
       "bin",
       "exe-export-behaviors.js"
@@ -18097,7 +18352,7 @@ function registerParentExe(sessionKey, parentExe, dispatchedBy) {
     mkdirSync9(SESSION_CACHE, { recursive: true });
   }
   const rootExe = extractRootExe(parentExe) ?? parentExe;
-  const filePath = path29.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`);
+  const filePath = path30.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`);
   writeFileSync8(filePath, JSON.stringify({
     parentExe: rootExe,
     dispatchedBy: dispatchedBy || rootExe,
@@ -18106,7 +18361,7 @@ function registerParentExe(sessionKey, parentExe, dispatchedBy) {
 }
 function getParentExe(sessionKey) {
   try {
-    const data = JSON.parse(readFileSync15(path29.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`), "utf8"));
+    const data = JSON.parse(readFileSync15(path30.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`), "utf8"));
     return data.parentExe || null;
   } catch {
     return null;
@@ -18115,7 +18370,7 @@ function getParentExe(sessionKey) {
 function getDispatchedBy(sessionKey) {
   try {
     const data = JSON.parse(readFileSync15(
-      path29.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`),
+      path30.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`),
       "utf8"
     ));
     return data.dispatchedBy ?? data.parentExe ?? null;
@@ -18358,8 +18613,8 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   const transport = getTransport();
   const sessionName = employeeSessionName(employeeName, exeSession, opts?.instance);
   const instanceLabel = opts?.instance != null && opts.instance > 0 ? `${employeeName}${opts.instance}` : employeeName;
-  const logDir = path29.join(os9.homedir(), ".exe-os", "session-logs");
-  const logFile = path29.join(logDir, `${instanceLabel}-${Date.now()}.log`);
+  const logDir = path30.join(os10.homedir(), ".exe-os", "session-logs");
+  const logFile = path30.join(logDir, `${instanceLabel}-${Date.now()}.log`);
   if (!existsSync20(logDir)) {
     mkdirSync9(logDir, { recursive: true });
   }
@@ -18367,14 +18622,14 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   let cleanupSuffix = "";
   try {
     const thisFile = fileURLToPath4(import.meta.url);
-    const cleanupScript = path29.join(path29.dirname(thisFile), "..", "bin", "exe-session-cleanup.js");
+    const cleanupScript = path30.join(path30.dirname(thisFile), "..", "bin", "exe-session-cleanup.js");
     if (existsSync20(cleanupScript)) {
       cleanupSuffix = `; ${process.execPath} "${cleanupScript}" "${employeeName}" "${exeSession}"`;
     }
   } catch {
   }
   try {
-    const claudeJsonPath = path29.join(os9.homedir(), ".claude.json");
+    const claudeJsonPath = path30.join(os10.homedir(), ".claude.json");
     let claudeJson = {};
     try {
       claudeJson = JSON.parse(readFileSync15(claudeJsonPath, "utf8"));
@@ -18389,10 +18644,10 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   } catch {
   }
   try {
-    const settingsDir = path29.join(os9.homedir(), ".claude", "projects");
+    const settingsDir = path30.join(os10.homedir(), ".claude", "projects");
     const normalizedKey = (opts?.cwd ?? projectDir).replace(/\//g, "-").replace(/^-/, "");
-    const projSettingsDir = path29.join(settingsDir, normalizedKey);
-    const settingsPath = path29.join(projSettingsDir, "settings.json");
+    const projSettingsDir = path30.join(settingsDir, normalizedKey);
+    const settingsPath = path30.join(projSettingsDir, "settings.json");
     let settings = {};
     try {
       settings = JSON.parse(readFileSync15(settingsPath, "utf8"));
@@ -18436,8 +18691,8 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   let behaviorsFlag = "";
   let legacyFallbackWarned = false;
   if (!useExeAgent && !useBinSymlink) {
-    const identityPath2 = path29.join(
-      os9.homedir(),
+    const identityPath2 = path30.join(
+      os10.homedir(),
       ".exe-os",
       "identity",
       `${employeeName}.md`
@@ -18452,7 +18707,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
     }
     const behaviorsFile = exportBehaviorsSync(
       employeeName,
-      path29.basename(spawnCwd),
+      path30.basename(spawnCwd),
       sessionName
     );
     if (behaviorsFile) {
@@ -18467,9 +18722,9 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   }
   let sessionContextFlag = "";
   try {
-    const ctxDir = path29.join(os9.homedir(), ".exe-os", "session-cache");
+    const ctxDir = path30.join(os10.homedir(), ".exe-os", "session-cache");
     mkdirSync9(ctxDir, { recursive: true });
-    const ctxFile = path29.join(ctxDir, `session-context-${sessionName}.md`);
+    const ctxFile = path30.join(ctxDir, `session-context-${sessionName}.md`);
     const ctxContent = [
       `## Session Context`,
       `You are running in tmux session: ${sessionName}.`,
@@ -18514,7 +18769,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   transport.pipeLog(sessionName, logFile);
   try {
     const mySession = getMySession();
-    const dispatchInfo = path29.join(SESSION_CACHE, `dispatch-info-${sessionName}.json`);
+    const dispatchInfo = path30.join(SESSION_CACHE, `dispatch-info-${sessionName}.json`);
     writeFileSync8(dispatchInfo, JSON.stringify({
       dispatchedBy: mySession,
       rootExe: exeSession,
@@ -18578,13 +18833,13 @@ var init_tmux_routing = __esm({
     init_provider_table();
     init_intercom_queue();
     init_plan_limits();
-    SPAWN_LOCK_DIR = path29.join(os9.homedir(), ".exe-os", "spawn-locks");
-    SESSION_CACHE = path29.join(os9.homedir(), ".exe-os", "session-cache");
+    SPAWN_LOCK_DIR = path30.join(os10.homedir(), ".exe-os", "spawn-locks");
+    SESSION_CACHE = path30.join(os10.homedir(), ".exe-os", "session-cache");
     BEHAVIORS_EXPORT_TIMEOUT_MS = 1e4;
     VERIFY_PANE_LINES = 200;
     INTERCOM_DEBOUNCE_MS = 3e4;
-    INTERCOM_LOG2 = path29.join(os9.homedir(), ".exe-os", "intercom.log");
-    DEBOUNCE_FILE = path29.join(SESSION_CACHE, "intercom-debounce.json");
+    INTERCOM_LOG2 = path30.join(os10.homedir(), ".exe-os", "intercom.log");
+    DEBOUNCE_FILE = path30.join(SESSION_CACHE, "intercom-debounce.json");
     DEBOUNCE_CLEANUP_AGE_MS = 5 * 60 * 1e3;
     BUSY_PATTERN = /[✻✽✶✳·].*…|Running…/;
   }
@@ -18972,6 +19227,8 @@ var init_useOrchestrator = __esm({
 
 // src/tui/views/Sessions.tsx
 import { useState as useState9, useEffect as useEffect11, useCallback as useCallback6 } from "react";
+import path31 from "path";
+import { homedir as homedir4 } from "os";
 import { jsx as jsx9, jsxs as jsxs7 } from "react/jsx-runtime";
 function SessionsView({
   initialProject,
@@ -19004,7 +19261,7 @@ function SessionsView({
     if (demo) {
       setProjects(DEMO_PROJECTS.map((p) => ({
         ...p,
-        projectDir: `/Users/demo/${p.projectName}`,
+        projectDir: path31.join(homedir4(), p.projectName),
         employees: p.employees.map((e) => ({ ...e, attached: e.status === "active" }))
       })));
       return;
@@ -20867,8 +21124,8 @@ __export(wiki_client_exports, {
   listDocuments: () => listDocuments,
   listWorkspaces: () => listWorkspaces
 });
-async function wikiFetch(config, path32, method = "GET", body) {
-  const url = `${config.baseUrl}/api/v1${path32}`;
+async function wikiFetch(config, path34, method = "GET", body) {
+  const url = `${config.baseUrl}/api/v1${path34}`;
   const headers = {
     Authorization: `Bearer ${config.apiKey}`,
     "Content-Type": "application/json"
@@ -20876,14 +21133,32 @@ async function wikiFetch(config, path32, method = "GET", body) {
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS2);
   try {
-    const response = await fetch(url, {
-      method,
-      headers,
-      body: body ? JSON.stringify(body) : void 0,
-      signal: controller.signal
-    });
+    let response;
+    try {
+      response = await fetch(url, {
+        method,
+        headers,
+        body: body ? JSON.stringify(body) : void 0,
+        signal: controller.signal
+      });
+    } catch {
+      clearTimeout(timeout);
+      const retryController = new AbortController();
+      const retryTimeout = setTimeout(() => retryController.abort(), REQUEST_TIMEOUT_MS2);
+      try {
+        await new Promise((r) => setTimeout(r, 500));
+        response = await fetch(url, {
+          method,
+          headers,
+          body: body ? JSON.stringify(body) : void 0,
+          signal: retryController.signal
+        });
+      } finally {
+        clearTimeout(retryTimeout);
+      }
+    }
     if (!response.ok) {
-      throw new Error(`Wiki API ${method} ${path32}: ${response.status} ${response.statusText}`);
+      throw new Error(`Wiki API ${method} ${path34}: ${response.status} ${response.statusText}`);
     }
     return response.json();
   } finally {
@@ -21734,9 +22009,9 @@ var init_App2 = __esm({
 // src/lib/update-check.ts
 import { execSync as execSync11 } from "child_process";
 import { readFileSync as readFileSync16 } from "fs";
-import path30 from "path";
+import path32 from "path";
 function getLocalVersion(packageRoot) {
-  const pkgPath = path30.join(packageRoot, "package.json");
+  const pkgPath = path32.join(packageRoot, "package.json");
   const pkg = JSON.parse(readFileSync16(pkgPath, "utf-8"));
   return pkg.version;
 }
@@ -21827,9 +22102,9 @@ var init_update = __esm({
 });
 
 // src/bin/cli.ts
-import { existsSync as existsSync21, readFileSync as readFileSync17, writeFileSync as writeFileSync9, readdirSync as readdirSync4, rmSync } from "fs";
-import path31 from "path";
-import os10 from "os";
+import { existsSync as existsSync21, readFileSync as readFileSync17, writeFileSync as writeFileSync9, readdirSync as readdirSync5, rmSync } from "fs";
+import path33 from "path";
+import os11 from "os";
 var args = process.argv.slice(2);
 if (args.includes("--global")) {
   process.stderr.write(
@@ -21902,12 +22177,19 @@ async function runClaudeInstall() {
   }
 }
 async function runClaudeCheck() {
-  const claudeDir = path31.join(os10.homedir(), ".claude");
-  const settingsPath = path31.join(claudeDir, "settings.json");
-  const claudeJsonPath = path31.join(os10.homedir(), ".claude.json");
+  const claudeDir = path33.join(os11.homedir(), ".claude");
+  const settingsPath = path33.join(claudeDir, "settings.json");
+  const claudeJsonPath = path33.join(os11.homedir(), ".claude.json");
   let ok = true;
   if (existsSync21(settingsPath)) {
-    const settings = JSON.parse(readFileSync17(settingsPath, "utf8"));
+    let settings;
+    try {
+      settings = JSON.parse(readFileSync17(settingsPath, "utf8"));
+    } catch {
+      console.log("\x1B[31m\u2717\x1B[0m settings.json is malformed (invalid JSON)");
+      ok = false;
+      settings = {};
+    }
     const hasHooks = settings.hooks && Object.keys(settings.hooks).some((k) => {
       const groups = settings.hooks[k];
       return Array.isArray(groups) && groups.some((g) => {
@@ -21929,7 +22211,14 @@ async function runClaudeCheck() {
     ok = false;
   }
   if (existsSync21(claudeJsonPath)) {
-    const claudeJson = JSON.parse(readFileSync17(claudeJsonPath, "utf8"));
+    let claudeJson;
+    try {
+      claudeJson = JSON.parse(readFileSync17(claudeJsonPath, "utf8"));
+    } catch {
+      console.log("\x1B[31m\u2717\x1B[0m claude.json is malformed (invalid JSON)");
+      ok = false;
+      claudeJson = {};
+    }
     const hasMcp = claudeJson.mcpServers && (claudeJson.mcpServers["exe-mem"] || claudeJson.mcpServers["exe-os"]);
     if (hasMcp) {
       console.log("\x1B[32m\u2713\x1B[0m MCP server configured in claude.json");
@@ -21943,7 +22232,7 @@ async function runClaudeCheck() {
     console.log("\x1B[31m\u2717\x1B[0m claude.json not found");
     ok = false;
   }
-  const skillsDir = path31.join(claudeDir, "skills");
+  const skillsDir = path33.join(claudeDir, "skills");
   if (existsSync21(skillsDir)) {
     console.log("\x1B[32m\u2713\x1B[0m Slash skills directory exists");
   } else {
@@ -21960,15 +22249,26 @@ async function runClaudeCheck() {
 async function runClaudeUninstall(flags = []) {
   const dryRun = flags.includes("--dry-run");
   const purge = flags.includes("--purge");
-  const homeDir = os10.homedir();
-  const claudeDir = path31.join(homeDir, ".claude");
-  const settingsPath = path31.join(claudeDir, "settings.json");
-  const claudeJsonPath = path31.join(homeDir, ".claude.json");
-  const exeOsDir = path31.join(homeDir, ".exe-os");
+  const homeDir = os11.homedir();
+  const claudeDir = path33.join(homeDir, ".claude");
+  const settingsPath = path33.join(claudeDir, "settings.json");
+  const claudeJsonPath = path33.join(homeDir, ".claude.json");
+  const exeOsDir = path33.join(homeDir, ".exe-os");
   let removed = 0;
   const log = (msg) => console.log(dryRun ? `[dry-run] ${msg}` : msg);
+  let settings = {};
   if (existsSync21(settingsPath)) {
-    const settings = JSON.parse(readFileSync17(settingsPath, "utf8"));
+    try {
+      settings = JSON.parse(readFileSync17(settingsPath, "utf8"));
+    } catch {
+      console.error("Your ~/.claude/settings.json appears malformed.");
+      if (purge) {
+        console.error("Skipping settings cleanup (--purge).");
+      } else {
+        console.error("Try running: exe-os claude install");
+        process.exit(1);
+      }
+    }
     if (settings.hooks) {
       for (const key of Object.keys(settings.hooks)) {
         const groups = settings.hooks[key];
@@ -22005,32 +22305,43 @@ async function runClaudeUninstall(flags = []) {
     }
   }
   if (existsSync21(claudeJsonPath)) {
-    const claudeJson = JSON.parse(readFileSync17(claudeJsonPath, "utf8"));
-    if (claudeJson.mcpServers) {
-      let removedMcp = false;
-      for (const key of ["exe-mem", "exe-os"]) {
-        if (claudeJson.mcpServers[key]) {
-          if (!dryRun) delete claudeJson.mcpServers[key];
-          removedMcp = true;
+    const raw = readFileSync17(claudeJsonPath, "utf8");
+    if (raw.length > 1e6) {
+      console.error("claude.json exceeds 1 MB \u2014 skipping parse.");
+    } else {
+      let claudeJson;
+      try {
+        claudeJson = JSON.parse(raw);
+      } catch {
+        console.error("claude.json is malformed JSON \u2014 skipping.");
+        claudeJson = {};
+      }
+      if (claudeJson.mcpServers) {
+        let removedMcp = false;
+        for (const key of ["exe-mem", "exe-os"]) {
+          if (claudeJson.mcpServers[key]) {
+            if (!dryRun) delete claudeJson.mcpServers[key];
+            removedMcp = true;
+          }
         }
-      }
-      if (removedMcp) {
-        if (!dryRun) {
-          writeFileSync9(claudeJsonPath, JSON.stringify(claudeJson, null, 2) + "\n");
+        if (removedMcp) {
+          if (!dryRun) {
+            writeFileSync9(claudeJsonPath, JSON.stringify(claudeJson, null, 2) + "\n");
+          }
+          log("\u2713 Removed exe-os MCP server from claude.json");
+          removed++;
         }
-        log("\u2713 Removed exe-os MCP server from claude.json");
-        removed++;
       }
     }
   }
-  const skillsDir = path31.join(claudeDir, "skills");
+  const skillsDir = path33.join(claudeDir, "skills");
   if (existsSync21(skillsDir)) {
     let skillCount = 0;
     try {
-      const entries = readdirSync4(skillsDir);
+      const entries = readdirSync5(skillsDir);
       for (const entry of entries) {
         if (entry.startsWith("exe")) {
-          const fullPath = path31.join(skillsDir, entry);
+          const fullPath = path33.join(skillsDir, entry);
           if (!dryRun) rmSync(fullPath, { recursive: true, force: true });
           skillCount++;
         }
@@ -22042,7 +22353,7 @@ async function runClaudeUninstall(flags = []) {
       removed++;
     }
   }
-  const claudeMdPath = path31.join(claudeDir, "CLAUDE.md");
+  const claudeMdPath = path33.join(claudeDir, "CLAUDE.md");
   if (existsSync21(claudeMdPath)) {
     const content = readFileSync17(claudeMdPath, "utf8");
     const startMarker = "<!-- exe-os:orchestration-start -->";
@@ -22056,13 +22367,13 @@ async function runClaudeUninstall(flags = []) {
       removed++;
     }
   }
-  const agentsDir = path31.join(claudeDir, "agents");
+  const agentsDir = path33.join(claudeDir, "agents");
   if (existsSync21(agentsDir)) {
     let agentCount = 0;
     try {
-      const entries = readdirSync4(agentsDir).filter((f) => f.endsWith(".md"));
+      const entries = readdirSync5(agentsDir).filter((f) => f.endsWith(".md"));
       let knownNames = /* @__PURE__ */ new Set();
-      const rosterPath = path31.join(exeOsDir, "exe-employees.json");
+      const rosterPath = path33.join(exeOsDir, "exe-employees.json");
       if (existsSync21(rosterPath)) {
         try {
           const roster = JSON.parse(readFileSync17(rosterPath, "utf8"));
@@ -22073,7 +22384,7 @@ async function runClaudeUninstall(flags = []) {
       for (const entry of entries) {
         const name = entry.replace(/\.md$/, "");
         if (knownNames.has(name)) {
-          if (!dryRun) rmSync(path31.join(agentsDir, entry), { force: true });
+          if (!dryRun) rmSync(path33.join(agentsDir, entry), { force: true });
           agentCount++;
         }
       }
@@ -22084,13 +22395,13 @@ async function runClaudeUninstall(flags = []) {
       removed++;
     }
   }
-  const projectsDir = path31.join(claudeDir, "projects");
+  const projectsDir = path33.join(claudeDir, "projects");
   if (existsSync21(projectsDir)) {
     let projectCount = 0;
     try {
-      const projects = readdirSync4(projectsDir);
+      const projects = readdirSync5(projectsDir);
       for (const proj of projects) {
-        const projSettings = path31.join(projectsDir, proj, "settings.json");
+        const projSettings = path33.join(projectsDir, proj, "settings.json");
         if (!existsSync21(projSettings)) continue;
         try {
           const pSettings = JSON.parse(readFileSync17(projSettings, "utf8"));
@@ -22118,16 +22429,24 @@ async function runClaudeUninstall(flags = []) {
   }
   try {
     const { execSync: execSync13 } = await import("child_process");
-    const exeBinPath = execSync13("which exe", { encoding: "utf-8" }).trim();
-    const binDir = path31.dirname(exeBinPath);
+    const findExeBin3 = () => {
+      try {
+        return execSync13(process.platform === "win32" ? "where exe-os" : "which exe-os", { encoding: "utf8" }).trim();
+      } catch {
+        return null;
+      }
+    };
+    const exeBinPath = findExeBin3();
+    if (!exeBinPath) throw new Error("exe-os not found in PATH");
+    const binDir = path33.dirname(exeBinPath);
     let symlinkCount = 0;
-    const rosterPath = path31.join(exeOsDir, "exe-employees.json");
+    const rosterPath = path33.join(exeOsDir, "exe-employees.json");
     if (existsSync21(rosterPath)) {
       const roster = JSON.parse(readFileSync17(rosterPath, "utf8"));
       for (const emp of roster) {
         if (emp.name === "exe") continue;
         for (const suffix of ["", "-opencode"]) {
-          const linkPath = path31.join(binDir, `${emp.name}${suffix}`);
+          const linkPath = path33.join(binDir, `${emp.name}${suffix}`);
           if (existsSync21(linkPath)) {
             if (!dryRun) rmSync(linkPath, { force: true });
             symlinkCount++;
@@ -22166,7 +22485,7 @@ async function checkForUpdateOnBoot() {
     const config = await loadConfig2();
     if (!config.autoUpdate.checkOnBoot) return;
     const { checkForUpdate: checkForUpdate2 } = await init_update().then(() => update_exports);
-    const packageRoot = path31.resolve(
+    const packageRoot = path33.resolve(
       new URL("../..", import.meta.url).pathname
     );
     const result = checkForUpdate2(packageRoot);
@@ -22195,13 +22514,16 @@ async function runActivate(key) {
   mirrorLicenseKey2(key);
   try {
     const license = await validateLicense2(key);
-    if (!license.valid) {
+    if (!license.valid && license.error === "offline") {
+      console.log("\u26A0 Activated in offline mode \u2014 will verify when connected");
+    } else if (!license.valid) {
       process.stderr.write(`License invalid: ${license.plan || "unknown"}
 `);
       process.exit(1);
+    } else {
+      const planLabel = license.plan === "pro" ? "Solopreneur" : license.plan.charAt(0).toUpperCase() + license.plan.slice(1);
+      console.log(`Plan activated: ${planLabel}`);
     }
-    const planLabel = license.plan === "pro" ? "Solopreneur" : license.plan.charAt(0).toUpperCase() + license.plan.slice(1);
-    console.log(`Plan activated: ${planLabel}`);
     const rl = createInterface4({ input: process.stdin, output: process.stdout });
     const ask2 = (prompt) => new Promise((resolve) => rl.question(prompt, (a) => resolve(a.trim())));
     let employees = await loadEmployees2();
@@ -22222,7 +22544,7 @@ async function runActivate(key) {
       const idTemplate = getIdentityTemplate(identityKey);
       if (idTemplate) {
         const idPath = identityPath2(name);
-        const dir = path31.dirname(idPath);
+        const dir = path33.dirname(idPath);
         if (!fs8.existsSync(dir)) fs8.mkdirSync(dir, { recursive: true });
         fs8.writeFileSync(idPath, idTemplate.replace(/^agent_id: \w+/m, `agent_id: ${name}`), "utf-8");
       }