@askexenow/exe-os 0.8.37 → 0.8.39

package/dist/mcp/server.js

@@ -50,7 +50,7 @@ __export(config_exports, {
   migrateConfig: () => migrateConfig,
   saveConfig: () => saveConfig
 });
-import { readFile, writeFile, mkdir } from "fs/promises";
+import { readFile, writeFile, mkdir, chmod } from "fs/promises";
 import { readFileSync, existsSync, renameSync } from "fs";
 import path from "path";
 import os from "os";
@@ -176,6 +176,9 @@ async function saveConfig(config2) {
   await mkdir(dir, { recursive: true });
   const configPath = path.join(dir, "config.json");
   await writeFile(configPath, JSON.stringify(config2, null, 2) + "\n");
+  if (config2.cloud?.apiKey) {
+    await chmod(configPath, 384);
+  }
 }
 async function loadConfigFrom(configPath) {
   const raw = await readFile(configPath, "utf-8");
@@ -286,6 +289,10 @@ import path2 from "path";
 import { fileURLToPath } from "url";
 function handleData(chunk) {
   _buffer += chunk.toString();
+  if (_buffer.length > MAX_BUFFER) {
+    _buffer = "";
+    return;
+  }
   let newlineIdx;
   while ((newlineIdx = _buffer.indexOf("\n")) !== -1) {
     const line = _buffer.slice(0, newlineIdx).trim();
@@ -593,7 +600,7 @@ function disconnectClient() {
     entry.resolve({ error: "Client disconnected" });
   }
 }
-var SOCKET_PATH, PID_PATH, SPAWN_LOCK_PATH, SPAWN_LOCK_STALE_MS, CONNECT_TIMEOUT_MS, REQUEST_TIMEOUT_MS, _socket, _connected, _buffer, _requestCount, HEALTH_CHECK_INTERVAL, _pending;
+var SOCKET_PATH, PID_PATH, SPAWN_LOCK_PATH, SPAWN_LOCK_STALE_MS, CONNECT_TIMEOUT_MS, REQUEST_TIMEOUT_MS, _socket, _connected, _buffer, _requestCount, HEALTH_CHECK_INTERVAL, _pending, MAX_BUFFER;
 var init_exe_daemon_client = __esm({
   "src/lib/exe-daemon-client.ts"() {
     "use strict";
@@ -610,6 +617,7 @@ var init_exe_daemon_client = __esm({
     _requestCount = 0;
     HEALTH_CHECK_INTERVAL = 100;
     _pending = /* @__PURE__ */ new Map();
+    MAX_BUFFER = 1e7;
   }
 });
 
@@ -772,6 +780,7 @@ async function ensureSchema() {
   const client = getRawClient();
   await client.execute("PRAGMA journal_mode = WAL");
   await client.execute("PRAGMA busy_timeout = 30000");
+  await client.execute("PRAGMA wal_autocheckpoint = 1000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -1580,12 +1589,13 @@ var init_database = __esm({
 });
 
 // src/lib/keychain.ts
-import { readFile as readFile2, writeFile as writeFile2, unlink, mkdir as mkdir2, chmod } from "fs/promises";
+import { readFile as readFile2, writeFile as writeFile2, unlink, mkdir as mkdir2, chmod as chmod2 } from "fs/promises";
 import { existsSync as existsSync3 } from "fs";
 import path3 from "path";
+import os2 from "os";
 import crypto from "crypto";
 function getKeyDir() {
-  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path3.join(process.env.HOME ?? "/tmp", ".exe-os");
+  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path3.join(os2.homedir(), ".exe-os");
 }
 function getKeyPath() {
   return path3.join(getKeyDir(), "master.key");
@@ -1642,7 +1652,7 @@ __export(shard_manager_exports, {
   shardExists: () => shardExists
 });
 import path4 from "path";
-import { existsSync as existsSync4, mkdirSync } from "fs";
+import { existsSync as existsSync4, mkdirSync, readdirSync } from "fs";
 import { createClient as createClient2 } from "@libsql/client";
 function initShardManager(encryptionKey) {
   _encryptionKey = encryptionKey;
@@ -1681,8 +1691,7 @@ function shardExists(projectName) {
 }
 function listShards() {
   if (!existsSync4(SHARDS_DIR)) return [];
-  const { readdirSync: readdirSync8 } = __require("fs");
-  return readdirSync8(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
+  return readdirSync(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
 }
 async function ensureShardSchema(client) {
   await client.execute("PRAGMA journal_mode = WAL");
@@ -1887,6 +1896,28 @@ __export(store_exports, {
   vectorToBlob: () => vectorToBlob,
   writeMemory: () => writeMemory
 });
+function isBusyError2(err) {
+  if (err instanceof Error) {
+    const msg = err.message.toLowerCase();
+    return msg.includes("sqlite_busy") || msg.includes("database is locked");
+  }
+  return false;
+}
+async function retryOnBusy2(fn, label) {
+  for (let attempt = 0; attempt <= INIT_MAX_RETRIES; attempt++) {
+    try {
+      return await fn();
+    } catch (err) {
+      if (!isBusyError2(err) || attempt === INIT_MAX_RETRIES) throw err;
+      process.stderr.write(
+        `[store] SQLITE_BUSY during ${label}, retry ${attempt + 1}/${INIT_MAX_RETRIES}
+`
+      );
+      await new Promise((r) => setTimeout(r, INIT_RETRY_DELAY_MS * (attempt + 1)));
+    }
+  }
+  throw new Error("unreachable");
+}
 async function initStore(options) {
   if (_flushTimer !== null) {
     clearInterval(_flushTimer);
@@ -1915,14 +1946,17 @@ async function initStore(options) {
     dbPath,
     encryptionKey: hexKey
   });
-  await ensureSchema();
+  await retryOnBusy2(() => ensureSchema(), "ensureSchema");
   try {
     const { initShardManager: initShardManager2 } = await Promise.resolve().then(() => (init_shard_manager(), shard_manager_exports));
     initShardManager2(hexKey);
   } catch {
   }
   const client = getClient();
-  const vResult = await client.execute("SELECT MAX(version) as max_v FROM memories");
+  const vResult = await retryOnBusy2(
+    () => client.execute("SELECT MAX(version) as max_v FROM memories"),
+    "version-query"
+  );
   _nextVersion = (Number(vResult.rows[0]?.max_v) || 0) + 1;
 }
 function classifyTier(record) {
@@ -1965,6 +1999,12 @@ async function writeMemory(record) {
     supersedes_id: record.supersedes_id ?? null
   };
   _pendingRecords.push(dbRow);
+  const MAX_PENDING = 1e3;
+  if (_pendingRecords.length > MAX_PENDING) {
+    const dropped = _pendingRecords.length - MAX_PENDING;
+    _pendingRecords = _pendingRecords.slice(-MAX_PENDING);
+    console.warn(`[store] Dropped ${dropped} oldest pending records (overflow)`);
+  }
   if (_flushTimer === null) {
     _flushTimer = setInterval(() => {
       void flushBatch();
@@ -2296,7 +2336,7 @@ async function getMemoryCardinality(agentId) {
     return 0;
   }
 }
-var _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
+var INIT_MAX_RETRIES, INIT_RETRY_DELAY_MS, _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
 var init_store = __esm({
   "src/lib/store.ts"() {
     "use strict";
@@ -2304,6 +2344,8 @@ var init_store = __esm({
     init_database();
     init_keychain();
     init_config();
+    INIT_MAX_RETRIES = 3;
+    INIT_RETRY_DELAY_MS = 1e3;
     _pendingRecords = [];
     _batchSize = 20;
     _flushIntervalMs = 1e4;
@@ -2459,7 +2501,7 @@ __export(file_grep_exports, {
   grepProjectFiles: () => grepProjectFiles
 });
 import { execSync as execSync2 } from "child_process";
-import { readFileSync as readFileSync3, readdirSync, statSync as statSync2, existsSync as existsSync5 } from "fs";
+import { readFileSync as readFileSync3, readdirSync as readdirSync2, statSync as statSync2, existsSync as existsSync5 } from "fs";
 import path6 from "path";
 import crypto2 from "crypto";
 function hasRipgrep() {
@@ -2604,7 +2646,7 @@ function collectFiles(root, patterns) {
     const basename = path6.basename(dir);
     if (EXCLUDE_DIRS.includes(basename)) return;
     try {
-      const entries = readdirSync(dir, { withFileTypes: true });
+      const entries = readdirSync2(dir, { withFileTypes: true });
       for (const entry of entries) {
         if (files.length >= MAX_FILES) return;
         const rel = path6.join(relative, entry.name);
@@ -2836,7 +2878,7 @@ __export(active_agent_exports, {
   getAllActiveAgents: () => getAllActiveAgents,
   writeActiveAgent: () => writeActiveAgent
 });
-import { readFileSync as readFileSync4, writeFileSync, mkdirSync as mkdirSync2, unlinkSync as unlinkSync2, readdirSync as readdirSync2 } from "fs";
+import { readFileSync as readFileSync4, writeFileSync, mkdirSync as mkdirSync2, unlinkSync as unlinkSync2, readdirSync as readdirSync3 } from "fs";
 import { execSync as execSync4 } from "child_process";
 import path8 from "path";
 function getMarkerPath() {
@@ -2907,7 +2949,7 @@ function getActiveAgent() {
 }
 function getAllActiveAgents() {
   try {
-    const files = readdirSync2(CACHE_DIR);
+    const files = readdirSync3(CACHE_DIR);
     const sessions = [];
     for (const file of files) {
       if (!file.startsWith("active-agent-") || !file.endsWith(".json")) continue;
@@ -3050,15 +3092,20 @@ function addEmployee(employees, employee) {
   }
   return [...employees, normalized];
 }
+function findExeBin() {
+  try {
+    return execSync5(process.platform === "win32" ? "where exe-os" : "which exe-os", { encoding: "utf8" }).trim();
+  } catch {
+    return null;
+  }
+}
 function registerBinSymlinks(name) {
   const created = [];
   const skipped = [];
   const errors = [];
-  let exeBinPath;
-  try {
-    exeBinPath = execSync5("which exe", { encoding: "utf-8" }).trim();
-  } catch {
-    errors.push("Could not find 'exe' in PATH");
+  const exeBinPath = findExeBin();
+  if (!exeBinPath) {
+    errors.push("Could not find 'exe-os' in PATH");
     return { created, skipped, errors };
   }
   const binDir = path9.dirname(exeBinPath);
@@ -3108,12 +3155,22 @@ __export(license_exports, {
   loadLicense: () => loadLicense,
   mirrorLicenseKey: () => mirrorLicenseKey,
   saveLicense: () => saveLicense,
+  startLicenseRevalidation: () => startLicenseRevalidation,
+  stopLicenseRevalidation: () => stopLicenseRevalidation,
   validateLicense: () => validateLicense
 });
 import { readFileSync as readFileSync6, writeFileSync as writeFileSync2, existsSync as existsSync8, mkdirSync as mkdirSync3 } from "fs";
 import { randomUUID as randomUUID2 } from "crypto";
 import path10 from "path";
 import { jwtVerify, importSPKI } from "jose";
+async function fetchRetry(url, init) {
+  try {
+    return await fetch(url, init);
+  } catch {
+    await new Promise((r) => setTimeout(r, RETRY_DELAY_MS));
+    return fetch(url, { ...init, signal: AbortSignal.timeout(1e4) });
+  }
+}
 function loadDeviceId() {
   const deviceJsonPath = path10.join(EXE_AI_DIR, "device.json");
   try {
@@ -3145,7 +3202,7 @@ function loadLicense() {
 }
 function saveLicense(apiKey) {
   mkdirSync3(EXE_AI_DIR, { recursive: true });
-  writeFileSync2(LICENSE_PATH, apiKey.trim(), "utf8");
+  writeFileSync2(LICENSE_PATH, apiKey.trim(), { encoding: "utf8", mode: 384 });
 }
 async function verifyLicenseJwt(token) {
   try {
@@ -3197,7 +3254,7 @@ function cacheResponse(token) {
 async function validateLicense(apiKey, deviceId) {
   const did = deviceId ?? loadDeviceId();
   try {
-    const res = await fetch(`${API_BASE}/auth/activate`, {
+    const res = await fetchRetry(`${API_BASE}/auth/activate`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ apiKey, deviceId: did }),
@@ -3232,14 +3289,23 @@ async function validateLicense(apiKey, deviceId) {
   } catch {
     const cached = await getCachedLicense();
     if (cached) return cached;
-    return FREE_LICENSE;
+    return { ...FREE_LICENSE, valid: false, error: "offline" };
+  }
+}
+function getCacheAgeMs() {
+  try {
+    const { statSync: statSync4 } = __require("fs");
+    const s = statSync4(CACHE_PATH);
+    return Date.now() - s.mtimeMs;
+  } catch {
+    return Infinity;
   }
 }
 async function checkLicense() {
   const key = loadLicense();
   if (!key) return FREE_LICENSE;
   const cached = await getCachedLicense();
-  if (cached) return cached;
+  if (cached && getCacheAgeMs() < CACHE_MAX_AGE_MS) return cached;
   const deviceId = loadDeviceId();
   return validateLicense(key, deviceId);
 }
@@ -3279,7 +3345,7 @@ async function assertVpsLicense(opts) {
   let explicitRejection = false;
   let transientFailure = false;
   try {
-    const res = await fetch(`${API_BASE}/auth/activate`, {
+    const res = await fetchRetry(`${API_BASE}/auth/activate`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ apiKey, deviceId }),
@@ -3360,7 +3426,28 @@ async function assertVpsLicense(opts) {
     `License validation unreachable for more than ${graceDays} days. Restore network connectivity to https://askexe.com/cloud and retry. This VPS image refuses to boot after the offline grace window.`
   );
 }
-var LICENSE_PATH, CACHE_PATH, DEVICE_ID_PATH, API_BASE, LICENSE_PUBLIC_KEY_PEM, LICENSE_JWT_ALG, PLAN_LIMITS, FREE_LICENSE;
+function startLicenseRevalidation(intervalMs = 36e5) {
+  if (_revalTimer) return;
+  _revalTimer = setInterval(async () => {
+    try {
+      const license = await checkLicense();
+      if (!license.valid) {
+        process.stderr.write("[exe-os] License expired or invalid \u2014 features may be restricted\n");
+      }
+    } catch {
+    }
+  }, intervalMs);
+  if (_revalTimer && typeof _revalTimer === "object" && "unref" in _revalTimer) {
+    _revalTimer.unref();
+  }
+}
+function stopLicenseRevalidation() {
+  if (_revalTimer) {
+    clearInterval(_revalTimer);
+    _revalTimer = null;
+  }
+}
+var LICENSE_PATH, CACHE_PATH, DEVICE_ID_PATH, API_BASE, RETRY_DELAY_MS, LICENSE_PUBLIC_KEY_PEM, LICENSE_JWT_ALG, PLAN_LIMITS, FREE_LICENSE, CACHE_MAX_AGE_MS, _revalTimer;
 var init_license = __esm({
   "src/lib/license.ts"() {
     "use strict";
@@ -3369,6 +3456,7 @@ var init_license = __esm({
     CACHE_PATH = path10.join(EXE_AI_DIR, "license-cache.json");
     DEVICE_ID_PATH = path10.join(EXE_AI_DIR, "device-id");
     API_BASE = "https://askexe.com/cloud";
+    RETRY_DELAY_MS = 500;
     LICENSE_PUBLIC_KEY_PEM = `-----BEGIN PUBLIC KEY-----
 MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEeHztAMOpR/ZMh+rWuOASjEZ54CGY
 4uj+UqeKCcvtgNHKmOK278HJaJcANe9xAeji8AFYu27q3WtzCi04pHudow==
@@ -3390,6 +3478,8 @@ MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEeHztAMOpR/ZMh+rWuOASjEZ54CGY
       employeeLimit: 1,
       memoryLimit: 5e3
     };
+    CACHE_MAX_AGE_MS = 36e5;
+    _revalTimer = null;
   }
 });
 
@@ -3521,10 +3611,10 @@ var init_plan_limits = __esm({
 // src/lib/notifications.ts
 import crypto5 from "crypto";
 import path14 from "path";
-import os2 from "os";
+import os3 from "os";
 import {
   readFileSync as readFileSync8,
-  readdirSync as readdirSync3,
+  readdirSync as readdirSync4,
   unlinkSync as unlinkSync3,
   existsSync as existsSync10,
   rmdirSync
@@ -3974,7 +4064,7 @@ var init_tasks_crud = __esm({
 // src/lib/session-registry.ts
 import { readFileSync as readFileSync10, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4, existsSync as existsSync12 } from "fs";
 import path16 from "path";
-import os3 from "os";
+import os4 from "os";
 function registerSession(entry) {
   const dir = path16.dirname(REGISTRY_PATH);
   if (!existsSync12(dir)) {
@@ -4001,7 +4091,7 @@ var REGISTRY_PATH;
 var init_session_registry = __esm({
   "src/lib/session-registry.ts"() {
     "use strict";
-    REGISTRY_PATH = path16.join(os3.homedir(), ".exe-os", "session-registry.json");
+    REGISTRY_PATH = path16.join(os4.homedir(), ".exe-os", "session-registry.json");
   }
 });
 
@@ -4188,7 +4278,7 @@ var init_provider_table = __esm({
 // src/lib/intercom-queue.ts
 import { readFileSync as readFileSync11, writeFileSync as writeFileSync6, renameSync as renameSync2, existsSync as existsSync13, mkdirSync as mkdirSync5 } from "fs";
 import path17 from "path";
-import os4 from "os";
+import os5 from "os";
 function ensureDir() {
   const dir = path17.dirname(QUEUE_PATH);
   if (!existsSync13(dir)) mkdirSync5(dir, { recursive: true });
@@ -4228,9 +4318,9 @@ var QUEUE_PATH, TTL_MS, INTERCOM_LOG;
 var init_intercom_queue = __esm({
   "src/lib/intercom-queue.ts"() {
     "use strict";
-    QUEUE_PATH = path17.join(os4.homedir(), ".exe-os", "intercom-queue.json");
+    QUEUE_PATH = path17.join(os5.homedir(), ".exe-os", "intercom-queue.json");
     TTL_MS = 60 * 60 * 1e3;
-    INTERCOM_LOG = path17.join(os4.homedir(), ".exe-os", "intercom.log");
+    INTERCOM_LOG = path17.join(os5.homedir(), ".exe-os", "intercom.log");
   }
 });
 
@@ -4238,7 +4328,7 @@ var init_intercom_queue = __esm({
 import { execFileSync as execFileSync2, execSync as execSync8 } from "child_process";
 import { readFileSync as readFileSync12, writeFileSync as writeFileSync7, mkdirSync as mkdirSync6, existsSync as existsSync14, appendFileSync } from "fs";
 import path18 from "path";
-import os5 from "os";
+import os6 from "os";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { unlinkSync as unlinkSync4 } from "fs";
 function spawnLockPath(sessionName) {
@@ -4543,7 +4633,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   const transport = getTransport();
   const sessionName = employeeSessionName(employeeName, exeSession, opts?.instance);
   const instanceLabel = opts?.instance != null && opts.instance > 0 ? `${employeeName}${opts.instance}` : employeeName;
-  const logDir = path18.join(os5.homedir(), ".exe-os", "session-logs");
+  const logDir = path18.join(os6.homedir(), ".exe-os", "session-logs");
   const logFile = path18.join(logDir, `${instanceLabel}-${Date.now()}.log`);
   if (!existsSync14(logDir)) {
     mkdirSync6(logDir, { recursive: true });
@@ -4559,7 +4649,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   } catch {
   }
   try {
-    const claudeJsonPath = path18.join(os5.homedir(), ".claude.json");
+    const claudeJsonPath = path18.join(os6.homedir(), ".claude.json");
     let claudeJson = {};
     try {
       claudeJson = JSON.parse(readFileSync12(claudeJsonPath, "utf8"));
@@ -4574,7 +4664,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   } catch {
   }
   try {
-    const settingsDir = path18.join(os5.homedir(), ".claude", "projects");
+    const settingsDir = path18.join(os6.homedir(), ".claude", "projects");
     const normalizedKey = (opts?.cwd ?? projectDir).replace(/\//g, "-").replace(/^-/, "");
     const projSettingsDir = path18.join(settingsDir, normalizedKey);
     const settingsPath = path18.join(projSettingsDir, "settings.json");
@@ -4622,7 +4712,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   let legacyFallbackWarned = false;
   if (!useExeAgent && !useBinSymlink) {
     const identityPath2 = path18.join(
-      os5.homedir(),
+      os6.homedir(),
       ".exe-os",
       "identity",
       `${employeeName}.md`
@@ -4652,7 +4742,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   }
   let sessionContextFlag = "";
   try {
-    const ctxDir = path18.join(os5.homedir(), ".exe-os", "session-cache");
+    const ctxDir = path18.join(os6.homedir(), ".exe-os", "session-cache");
     mkdirSync6(ctxDir, { recursive: true });
     const ctxFile = path18.join(ctxDir, `session-context-${sessionName}.md`);
     const ctxContent = [
@@ -4763,11 +4853,11 @@ var init_tmux_routing = __esm({
     init_provider_table();
     init_intercom_queue();
     init_plan_limits();
-    SPAWN_LOCK_DIR = path18.join(os5.homedir(), ".exe-os", "spawn-locks");
-    SESSION_CACHE = path18.join(os5.homedir(), ".exe-os", "session-cache");
+    SPAWN_LOCK_DIR = path18.join(os6.homedir(), ".exe-os", "spawn-locks");
+    SESSION_CACHE = path18.join(os6.homedir(), ".exe-os", "session-cache");
     BEHAVIORS_EXPORT_TIMEOUT_MS = 1e4;
     INTERCOM_DEBOUNCE_MS = 3e4;
-    INTERCOM_LOG2 = path18.join(os5.homedir(), ".exe-os", "intercom.log");
+    INTERCOM_LOG2 = path18.join(os6.homedir(), ".exe-os", "intercom.log");
     DEBOUNCE_FILE = path18.join(SESSION_CACHE, "intercom-debounce.json");
     DEBOUNCE_CLEANUP_AGE_MS = 5 * 60 * 1e3;
     BUSY_PATTERN = /[✻✽✶✳·].*…|Running…/;
@@ -4776,7 +4866,7 @@ var init_tmux_routing = __esm({
 
 // src/lib/tasks-review.ts
 import path19 from "path";
-import { existsSync as existsSync15, readdirSync as readdirSync4, unlinkSync as unlinkSync5 } from "fs";
+import { existsSync as existsSync15, readdirSync as readdirSync5, unlinkSync as unlinkSync5 } from "fs";
 async function countPendingReviews() {
   const client = getClient();
   const result = await client.execute({
@@ -4898,7 +4988,7 @@ async function cleanupReviewFile(row, taskFile, _baseDir) {
   try {
     const cacheDir = path19.join(EXE_AI_DIR, "session-cache");
     if (existsSync15(cacheDir)) {
-      for (const f of readdirSync4(cacheDir)) {
+      for (const f of readdirSync5(cacheDir)) {
         if (f.startsWith("review-notified-")) {
           unlinkSync5(path19.join(cacheDir, f));
         }
@@ -6681,50 +6771,59 @@ function registerRecallMyMemory(server2) {
       user_id,
       include_source
     }) => {
-      const { agentId } = getActiveAgent();
-      const searchOptions = {
-        projectName: project_name,
-        hasError: has_error,
-        toolName: tool_name,
-        limit,
-        since,
-        includeArchived: include_archived,
-        workspaceId: workspace_id,
-        includeSource: include_source,
-        ...user_id !== void 0 ? { userId: user_id } : {}
-      };
-      const results = await hybridSearch(query, agentId, searchOptions);
-      if (results.length === 0) {
+      try {
+        const { agentId } = getActiveAgent();
+        const searchOptions = {
+          projectName: project_name,
+          hasError: has_error,
+          toolName: tool_name,
+          limit,
+          since,
+          includeArchived: include_archived,
+          workspaceId: workspace_id,
+          includeSource: include_source,
+          ...user_id !== void 0 ? { userId: user_id } : {}
+        };
+        const results = await hybridSearch(query, agentId, searchOptions);
+        if (results.length === 0) {
+          return {
+            content: [
+              { type: "text", text: "No matching memories found." }
+            ]
+          };
+        }
+        const formatted = results.map((r) => {
+          const header = `[${r.timestamp}] ${r.tool_name} (${r.project_name})${r.has_error ? " [ERROR]" : ""}`;
+          const body = r.raw_text.slice(0, 500);
+          const parts = [header];
+          if (r.source_path) {
+            const typeTag = r.source_type && r.source_type !== "text" ? ` [${r.source_type}]` : "";
+            parts.push(`source: ${r.source_path}${typeTag}`);
+          } else if (include_source) {
+            const sourceLine = formatSourceLine(r);
+            if (sourceLine) parts.push(sourceLine);
+          }
+          parts.push(body);
+          return parts.join("\n");
+        }).join("\n\n---\n\n");
         return {
           content: [
-            { type: "text", text: "No matching memories found." }
+            {
+              type: "text",
+              text: `Found ${results.length} memories:
+
+${formatted}`
+            }
           ]
         };
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        const friendly = msg.includes("SQLITE_BUSY") ? "Memory system is busy \u2014 please retry." : "Failed to search memories. Please retry.";
+        return {
+          content: [{ type: "text", text: friendly }],
+          isError: true
+        };
       }
-      const formatted = results.map((r) => {
-        const header = `[${r.timestamp}] ${r.tool_name} (${r.project_name})${r.has_error ? " [ERROR]" : ""}`;
-        const body = r.raw_text.slice(0, 500);
-        const parts = [header];
-        if (r.source_path) {
-          const typeTag = r.source_type && r.source_type !== "text" ? ` [${r.source_type}]` : "";
-          parts.push(`source: ${r.source_path}${typeTag}`);
-        } else if (include_source) {
-          const sourceLine = formatSourceLine(r);
-          if (sourceLine) parts.push(sourceLine);
-        }
-        parts.push(body);
-        return parts.join("\n");
-      }).join("\n\n---\n\n");
-      return {
-        content: [
-          {
-            type: "text",
-            text: `Found ${results.length} memories:
-
-${formatted}`
-          }
-        ]
-      };
     }
   );
 }
@@ -6751,36 +6850,45 @@ function registerAskTeamMemory(server2) {
       }
     },
     async ({ team_member, query, project_name, limit, since, include_archived }) => {
-      const results = await hybridSearch(query, team_member, {
-        projectName: project_name,
-        limit,
-        since,
-        includeArchived: include_archived
-      });
-      if (results.length === 0) {
+      try {
+        const results = await hybridSearch(query, team_member, {
+          projectName: project_name,
+          limit,
+          since,
+          includeArchived: include_archived
+        });
+        if (results.length === 0) {
+          return {
+            content: [
+              {
+                type: "text",
+                text: `No memories found for team member '${team_member}'.`
+              }
+            ]
+          };
+        }
+        const formatted = results.map(
+          (r) => `[${r.timestamp}] ${r.tool_name} (${r.project_name})${r.has_error ? " [ERROR]" : ""}
+${r.raw_text.slice(0, 500)}`
+        ).join("\n\n---\n\n");
         return {
           content: [
             {
               type: "text",
-              text: `No memories found for team member '${team_member}'.`
+              text: `From ${team_member}'s memories (${results.length} results):
+
+${formatted}`
             }
           ]
         };
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        const friendly = msg.includes("SQLITE_BUSY") ? "Memory system is busy \u2014 please retry." : "Failed to search team memories. Please retry.";
+        return {
+          content: [{ type: "text", text: friendly }],
+          isError: true
+        };
       }
-      const formatted = results.map(
-        (r) => `[${r.timestamp}] ${r.tool_name} (${r.project_name})${r.has_error ? " [ERROR]" : ""}
-${r.raw_text.slice(0, 500)}`
-      ).join("\n\n---\n\n");
-      return {
-        content: [
-          {
-            type: "text",
-            text: `From ${team_member}'s memories (${results.length} results):
-
-${formatted}`
-          }
-        ]
-      };
     }
   );
 }
@@ -7428,36 +7536,44 @@ function registerListTasks(server2) {
       }
     },
     async ({ assigned_to, status, project_name, priority }) => {
-      const resolvedProject = project_name === "all" ? void 0 : project_name ?? getProjectName();
-      const tasks = await listTasks({
-        assignedTo: assigned_to,
-        status,
-        projectName: resolvedProject,
-        priority
-      });
-      if (tasks.length === 0) {
+      try {
+        const resolvedProject = project_name === "all" ? void 0 : project_name ?? getProjectName();
+        const tasks = await listTasks({
+          assignedTo: assigned_to,
+          status,
+          projectName: resolvedProject,
+          priority
+        });
+        if (tasks.length === 0) {
+          return {
+            content: [{ type: "text", text: "No tasks found." }]
+          };
+        }
+        const lines = tasks.map((t) => {
+          const cpIndicator = t.checkpointCount && t.checkpointCount > 0 ? ` [cp:${t.checkpointCount}]` : "";
+          let budgetNote = "";
+          if (t.budgetTokens !== null) {
+            const pct = Math.round(t.tokensUsed / t.budgetTokens * 100);
+            budgetNote = ` [${t.tokensUsed}/${t.budgetTokens} tokens, ${pct}%]`;
+          }
+          return `- [${t.priority.toUpperCase()}] ${t.title} (${t.projectName}) \u2014 ${t.status}${cpIndicator}${budgetNote} \u2192 ${t.assignedTo}`;
+        });
+        return {
+          content: [
+            {
+              type: "text",
+              text: `${tasks.length} task(s):
+${lines.join("\n")}`
+            }
+          ]
+        };
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
         return {
-          content: [{ type: "text", text: "No tasks found." }]
+          content: [{ type: "text", text: `Failed to list tasks: ${msg}` }],
+          isError: true
         };
       }
-      const lines = tasks.map((t) => {
-        const cpIndicator = t.checkpointCount && t.checkpointCount > 0 ? ` [cp:${t.checkpointCount}]` : "";
-        let budgetNote = "";
-        if (t.budgetTokens !== null) {
-          const pct = Math.round(t.tokensUsed / t.budgetTokens * 100);
-          budgetNote = ` [${t.tokensUsed}/${t.budgetTokens} tokens, ${pct}%]`;
-        }
-        return `- [${t.priority.toUpperCase()}] ${t.title} (${t.projectName}) \u2014 ${t.status}${cpIndicator}${budgetNote} \u2192 ${t.assignedTo}`;
-      });
-      return {
-        content: [
-          {
-            type: "text",
-            text: `${tasks.length} task(s):
-${lines.join("\n")}`
-          }
-        ]
-      };
     }
   );
 }
@@ -7590,7 +7706,7 @@ All tasks complete. No more open tasks in your queue.`;
 init_tasks();
 init_active_agent();
 import { z as z10 } from "zod";
-var CLOSE_TASK_ALLOWED_AGENTS = /* @__PURE__ */ new Set(["exe", "ea"]);
+var CLOSE_TASK_ALLOWED_ROLES = /* @__PURE__ */ new Set(["COO", "CTO"]);
 function registerCloseTask(server2) {
   server2.registerTool(
     "close_task",
@@ -7605,7 +7721,7 @@ function registerCloseTask(server2) {
     },
     async ({ task_id, result, status }) => {
       const agent = getActiveAgent();
-      if (agent.agentId && !CLOSE_TASK_ALLOWED_AGENTS.has(agent.agentId)) {
+      if (agent.agentId && agent.agentId !== "default" && !CLOSE_TASK_ALLOWED_ROLES.has(agent.agentRole ?? "")) {
         return {
           content: [
             {
@@ -7967,7 +8083,7 @@ async function createReminder(text, dueDate) {
 }
 async function listReminders(includeCompleted = false) {
   const client = getClient();
-  const sql = includeCompleted ? `SELECT id, text, created_at, due_date, completed_at FROM reminders ORDER BY due_date ASC NULLS LAST` : `SELECT id, text, created_at, due_date, completed_at FROM reminders WHERE completed_at IS NULL ORDER BY due_date ASC NULLS LAST`;
+  const sql = includeCompleted ? `SELECT id, text, created_at, due_date, completed_at FROM reminders ORDER BY due_date ASC NULLS LAST LIMIT 500` : `SELECT id, text, created_at, due_date, completed_at FROM reminders WHERE completed_at IS NULL ORDER BY due_date ASC NULLS LAST LIMIT 500`;
   const result = await client.execute(sql);
   return result.rows.map((row) => ({
     id: String(row.id),
@@ -7986,7 +8102,7 @@ async function completeReminder(idOrText) {
   });
   if (result.rows.length === 0) {
     result = await client.execute({
-      sql: `SELECT id, text FROM reminders WHERE completed_at IS NULL AND text LIKE '%' || ? || '%'`,
+      sql: `SELECT id, text FROM reminders WHERE completed_at IS NULL AND text LIKE '%' || ? || '%' LIMIT 1`,
       args: [idOrText]
     });
   }
@@ -8171,7 +8287,7 @@ import { z as z20 } from "zod";
 init_config();
 init_database();
 import { existsSync as existsSync16, mkdirSync as mkdirSync8, readFileSync as readFileSync13, writeFileSync as writeFileSync9 } from "fs";
-import { readdirSync as readdirSync5 } from "fs";
+import { readdirSync as readdirSync6 } from "fs";
 import path22 from "path";
 import { createHash } from "crypto";
 var IDENTITY_DIR = path22.join(EXE_AI_DIR, "identity");
@@ -8254,7 +8370,7 @@ async function updateIdentity(agentId, content, updatedBy) {
 }
 function listIdentities() {
   ensureDir2();
-  const files = readdirSync5(IDENTITY_DIR).filter((f) => f.endsWith(".md"));
+  const files = readdirSync6(IDENTITY_DIR).filter((f) => f.endsWith(".md"));
   const results = [];
   for (const file of files) {
     const agentId = file.replace(".md", "");
@@ -8339,7 +8455,7 @@ function registerUpdateIdentity(server2) {
     },
     async ({ agent_id, content }) => {
       const caller = getActiveAgent();
-      const allowed = caller.agentId === "exe" || caller.agentId === "default";
+      const allowed = caller.agentId === "default" || caller.agentRole === "COO";
       if (!allowed) {
         return {
           content: [{
@@ -8388,7 +8504,7 @@ function registerDeactivateBehavior(server2) {
     },
     async ({ behavior_id }) => {
       const caller = getActiveAgent();
-      const allowed = caller.agentId === "exe" || caller.agentId === "default";
+      const allowed = caller.agentId === "default" || caller.agentRole === "COO";
       if (!allowed) {
         return {
           content: [{
@@ -8725,10 +8841,12 @@ function registerIngestDocument(server2) {
           }]
         };
       } catch (err) {
+        const raw = err instanceof Error ? err.message : String(err);
+        const friendly = raw.includes("SQLITE_BUSY") ? "Memory system is busy, please retry in a moment." : raw.includes("SQLITE_") ? "A database error occurred. Please retry." : `ingest_document failed: ${raw}`;
         return {
           content: [{
             type: "text",
-            text: `ingest_document failed: ${err instanceof Error ? err.message : String(err)}`
+            text: friendly
           }],
           isError: true
         };
@@ -8917,7 +9035,8 @@ async function gqlRequest(query, variables) {
       "Content-Type": "application/json",
       Authorization: `Bearer ${config.apiToken}`
     },
-    body: JSON.stringify({ query, variables })
+    body: JSON.stringify({ query, variables }),
+    signal: AbortSignal.timeout(3e4)
   });
   if (!res.ok) {
     throw new Error(`CRM GraphQL request failed: ${res.status} ${res.statusText}`);
@@ -9080,7 +9199,8 @@ async function lookupPhoneByName(name) {
         "Content-Type": "application/json",
         Authorization: `Bearer ${apiToken}`
       },
-      body: JSON.stringify({ query, variables })
+      body: JSON.stringify({ query, variables }),
+      signal: AbortSignal.timeout(3e4)
     });
     if (!res.ok) return null;
     const json = await res.json();
@@ -9105,11 +9225,12 @@ async function sendWhatsAppMessage(phoneNumberId, accessToken, to, text) {
       to,
       type: "text",
       text: { body: text }
-    })
+    }),
+    signal: AbortSignal.timeout(3e4)
   });
   if (!res.ok) {
-    const errBody = await res.text();
-    throw new Error(`WhatsApp send failed (${res.status}): ${errBody}`);
+    await res.text();
+    throw new Error(`WhatsApp message could not be delivered (HTTP ${res.status}). Check your WhatsApp configuration.`);
   }
 }
 function isPhoneNumber(value) {
@@ -9193,11 +9314,13 @@ function registerSendWhatsapp(server2) {
           });
           results.push({ recipient, phone, ok: true });
         } catch (err) {
+          const raw = err instanceof Error ? err.message : String(err);
+          const friendly = raw.includes("HTTP") ? raw : `Message delivery failed. Check WhatsApp configuration.`;
           results.push({
             recipient,
             phone,
             ok: false,
-            error: err instanceof Error ? err.message : String(err)
+            error: friendly
           });
         }
       }
@@ -9219,8 +9342,8 @@ import { z as z29 } from "zod";
 import { readFileSync as readFileSync15, writeFileSync as writeFileSync10, existsSync as existsSync17, mkdirSync as mkdirSync9 } from "fs";
 import { randomUUID as randomUUID3 } from "crypto";
 import path23 from "path";
-import os6 from "os";
-var TRIGGERS_PATH = path23.join(os6.homedir(), ".exe-os", "triggers.json");
+import os7 from "os";
+var TRIGGERS_PATH = path23.join(os7.homedir(), ".exe-os", "triggers.json");
 function loadTriggers(project) {
   if (!existsSync17(TRIGGERS_PATH)) return [];
   try {
@@ -9522,14 +9645,14 @@ function registerListTriggers(server2) {
 import { z as z31 } from "zod";
 
 // src/automation/starter-packs/index.ts
-import { readFileSync as readFileSync16, readdirSync as readdirSync6, existsSync as existsSync18 } from "fs";
+import { readFileSync as readFileSync16, readdirSync as readdirSync7, existsSync as existsSync18 } from "fs";
 import path24 from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 var __dirname = path24.dirname(fileURLToPath3(import.meta.url));
 function listPacks() {
   const packsDir = path24.join(__dirname, ".");
   if (!existsSync18(packsDir)) return [];
-  return readdirSync6(packsDir, { withFileTypes: true }).filter(
+  return readdirSync7(packsDir, { withFileTypes: true }).filter(
     (d) => d.isDirectory() && existsSync18(path24.join(packsDir, d.name, "custom-objects.json"))
   ).map((d) => d.name);
 }
@@ -9561,7 +9684,7 @@ function loadPack(industry) {
   }
   const wikiSeeds = [];
   if (existsSync18(wikiDir)) {
-    const files = readdirSync6(wikiDir).filter((f) => f.endsWith(".md"));
+    const files = readdirSync7(wikiDir).filter((f) => f.endsWith(".md"));
     for (const file of files) {
       const content = readFileSync16(path24.join(wikiDir, file), "utf-8");
       const titleMatch = content.match(/^#\s+(.+)/m);
@@ -10736,7 +10859,7 @@ var HostingerApiClient = class {
       "Content-Type": "application/json",
       Accept: "application/json"
     };
-    const options = { method, headers };
+    const options = { method, headers, signal: AbortSignal.timeout(3e4) };
     if (body) {
       options.body = JSON.stringify(body);
     }
@@ -11047,11 +11170,13 @@ function registerQueryConversations(server2) {
           ]
         };
       } catch (err) {
+        const raw = err instanceof Error ? err.message : String(err);
+        const friendly = raw.includes("SQLITE_BUSY") ? "Memory system is busy, please retry in a moment." : raw.includes("SQLITE_") ? "A database error occurred. Please retry." : `Error querying conversations: ${raw}`;
         return {
           content: [
             {
               type: "text",
-              text: `Error querying conversations: ${err instanceof Error ? err.message : String(err)}`
+              text: friendly
             }
           ],
           isError: true
@@ -11063,13 +11188,13 @@ function registerQueryConversations(server2) {
 
 // src/mcp/tools/load-skill.ts
 import { z as z39 } from "zod";
-import { readFileSync as readFileSync17, readdirSync as readdirSync7, statSync as statSync3 } from "fs";
+import { readFileSync as readFileSync17, readdirSync as readdirSync8, statSync as statSync3 } from "fs";
 import path27 from "path";
 import { homedir as homedir2 } from "os";
 var SKILLS_DIR = path27.join(homedir2(), ".claude", "skills");
 function listAvailableSkills() {
   try {
-    const entries = readdirSync7(SKILLS_DIR);
+    const entries = readdirSync8(SKILLS_DIR);
     return entries.filter((entry) => {
       try {
         const entryPath = path27.join(SKILLS_DIR, entry);