@askexenow/exe-os 0.8.38 → 0.8.39

package/dist/mcp/server.js

@@ -50,7 +50,7 @@ __export(config_exports, {
   migrateConfig: () => migrateConfig,
   saveConfig: () => saveConfig
 });
-import { readFile, writeFile, mkdir } from "fs/promises";
+import { readFile, writeFile, mkdir, chmod } from "fs/promises";
 import { readFileSync, existsSync, renameSync } from "fs";
 import path from "path";
 import os from "os";
@@ -176,6 +176,9 @@ async function saveConfig(config2) {
   await mkdir(dir, { recursive: true });
   const configPath = path.join(dir, "config.json");
   await writeFile(configPath, JSON.stringify(config2, null, 2) + "\n");
+  if (config2.cloud?.apiKey) {
+    await chmod(configPath, 384);
+  }
 }
 async function loadConfigFrom(configPath) {
   const raw = await readFile(configPath, "utf-8");
@@ -286,6 +289,10 @@ import path2 from "path";
 import { fileURLToPath } from "url";
 function handleData(chunk) {
   _buffer += chunk.toString();
+  if (_buffer.length > MAX_BUFFER) {
+    _buffer = "";
+    return;
+  }
   let newlineIdx;
   while ((newlineIdx = _buffer.indexOf("\n")) !== -1) {
     const line = _buffer.slice(0, newlineIdx).trim();
@@ -593,7 +600,7 @@ function disconnectClient() {
     entry.resolve({ error: "Client disconnected" });
   }
 }
-var SOCKET_PATH, PID_PATH, SPAWN_LOCK_PATH, SPAWN_LOCK_STALE_MS, CONNECT_TIMEOUT_MS, REQUEST_TIMEOUT_MS, _socket, _connected, _buffer, _requestCount, HEALTH_CHECK_INTERVAL, _pending;
+var SOCKET_PATH, PID_PATH, SPAWN_LOCK_PATH, SPAWN_LOCK_STALE_MS, CONNECT_TIMEOUT_MS, REQUEST_TIMEOUT_MS, _socket, _connected, _buffer, _requestCount, HEALTH_CHECK_INTERVAL, _pending, MAX_BUFFER;
 var init_exe_daemon_client = __esm({
   "src/lib/exe-daemon-client.ts"() {
     "use strict";
@@ -610,6 +617,7 @@ var init_exe_daemon_client = __esm({
     _requestCount = 0;
     HEALTH_CHECK_INTERVAL = 100;
     _pending = /* @__PURE__ */ new Map();
+    MAX_BUFFER = 1e7;
   }
 });
 
@@ -772,6 +780,7 @@ async function ensureSchema() {
   const client = getRawClient();
   await client.execute("PRAGMA journal_mode = WAL");
   await client.execute("PRAGMA busy_timeout = 30000");
+  await client.execute("PRAGMA wal_autocheckpoint = 1000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -1580,12 +1589,13 @@ var init_database = __esm({
 });
 
 // src/lib/keychain.ts
-import { readFile as readFile2, writeFile as writeFile2, unlink, mkdir as mkdir2, chmod } from "fs/promises";
+import { readFile as readFile2, writeFile as writeFile2, unlink, mkdir as mkdir2, chmod as chmod2 } from "fs/promises";
 import { existsSync as existsSync3 } from "fs";
 import path3 from "path";
+import os2 from "os";
 import crypto from "crypto";
 function getKeyDir() {
-  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path3.join(process.env.HOME ?? "/tmp", ".exe-os");
+  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path3.join(os2.homedir(), ".exe-os");
 }
 function getKeyPath() {
   return path3.join(getKeyDir(), "master.key");
@@ -1886,6 +1896,28 @@ __export(store_exports, {
   vectorToBlob: () => vectorToBlob,
   writeMemory: () => writeMemory
 });
+function isBusyError2(err) {
+  if (err instanceof Error) {
+    const msg = err.message.toLowerCase();
+    return msg.includes("sqlite_busy") || msg.includes("database is locked");
+  }
+  return false;
+}
+async function retryOnBusy2(fn, label) {
+  for (let attempt = 0; attempt <= INIT_MAX_RETRIES; attempt++) {
+    try {
+      return await fn();
+    } catch (err) {
+      if (!isBusyError2(err) || attempt === INIT_MAX_RETRIES) throw err;
+      process.stderr.write(
+        `[store] SQLITE_BUSY during ${label}, retry ${attempt + 1}/${INIT_MAX_RETRIES}
+`
+      );
+      await new Promise((r) => setTimeout(r, INIT_RETRY_DELAY_MS * (attempt + 1)));
+    }
+  }
+  throw new Error("unreachable");
+}
 async function initStore(options) {
   if (_flushTimer !== null) {
     clearInterval(_flushTimer);
@@ -1914,14 +1946,17 @@ async function initStore(options) {
     dbPath,
     encryptionKey: hexKey
   });
-  await ensureSchema();
+  await retryOnBusy2(() => ensureSchema(), "ensureSchema");
   try {
     const { initShardManager: initShardManager2 } = await Promise.resolve().then(() => (init_shard_manager(), shard_manager_exports));
     initShardManager2(hexKey);
   } catch {
   }
   const client = getClient();
-  const vResult = await client.execute("SELECT MAX(version) as max_v FROM memories");
+  const vResult = await retryOnBusy2(
+    () => client.execute("SELECT MAX(version) as max_v FROM memories"),
+    "version-query"
+  );
   _nextVersion = (Number(vResult.rows[0]?.max_v) || 0) + 1;
 }
 function classifyTier(record) {
@@ -2301,7 +2336,7 @@ async function getMemoryCardinality(agentId) {
     return 0;
   }
 }
-var _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
+var INIT_MAX_RETRIES, INIT_RETRY_DELAY_MS, _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
 var init_store = __esm({
   "src/lib/store.ts"() {
     "use strict";
@@ -2309,6 +2344,8 @@ var init_store = __esm({
     init_database();
     init_keychain();
     init_config();
+    INIT_MAX_RETRIES = 3;
+    INIT_RETRY_DELAY_MS = 1e3;
     _pendingRecords = [];
     _batchSize = 20;
     _flushIntervalMs = 1e4;
@@ -3055,15 +3092,20 @@ function addEmployee(employees, employee) {
   }
   return [...employees, normalized];
 }
+function findExeBin() {
+  try {
+    return execSync5(process.platform === "win32" ? "where exe-os" : "which exe-os", { encoding: "utf8" }).trim();
+  } catch {
+    return null;
+  }
+}
 function registerBinSymlinks(name) {
   const created = [];
   const skipped = [];
   const errors = [];
-  let exeBinPath;
-  try {
-    exeBinPath = execSync5("which exe", { encoding: "utf-8" }).trim();
-  } catch {
-    errors.push("Could not find 'exe' in PATH");
+  const exeBinPath = findExeBin();
+  if (!exeBinPath) {
+    errors.push("Could not find 'exe-os' in PATH");
     return { created, skipped, errors };
   }
   const binDir = path9.dirname(exeBinPath);
@@ -3121,6 +3163,14 @@ import { readFileSync as readFileSync6, writeFileSync as writeFileSync2, existsS
 import { randomUUID as randomUUID2 } from "crypto";
 import path10 from "path";
 import { jwtVerify, importSPKI } from "jose";
+async function fetchRetry(url, init) {
+  try {
+    return await fetch(url, init);
+  } catch {
+    await new Promise((r) => setTimeout(r, RETRY_DELAY_MS));
+    return fetch(url, { ...init, signal: AbortSignal.timeout(1e4) });
+  }
+}
 function loadDeviceId() {
   const deviceJsonPath = path10.join(EXE_AI_DIR, "device.json");
   try {
@@ -3152,7 +3202,7 @@ function loadLicense() {
 }
 function saveLicense(apiKey) {
   mkdirSync3(EXE_AI_DIR, { recursive: true });
-  writeFileSync2(LICENSE_PATH, apiKey.trim(), "utf8");
+  writeFileSync2(LICENSE_PATH, apiKey.trim(), { encoding: "utf8", mode: 384 });
 }
 async function verifyLicenseJwt(token) {
   try {
@@ -3204,7 +3254,7 @@ function cacheResponse(token) {
 async function validateLicense(apiKey, deviceId) {
   const did = deviceId ?? loadDeviceId();
   try {
-    const res = await fetch(`${API_BASE}/auth/activate`, {
+    const res = await fetchRetry(`${API_BASE}/auth/activate`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ apiKey, deviceId: did }),
@@ -3295,7 +3345,7 @@ async function assertVpsLicense(opts) {
   let explicitRejection = false;
   let transientFailure = false;
   try {
-    const res = await fetch(`${API_BASE}/auth/activate`, {
+    const res = await fetchRetry(`${API_BASE}/auth/activate`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ apiKey, deviceId }),
@@ -3397,7 +3447,7 @@ function stopLicenseRevalidation() {
     _revalTimer = null;
   }
 }
-var LICENSE_PATH, CACHE_PATH, DEVICE_ID_PATH, API_BASE, LICENSE_PUBLIC_KEY_PEM, LICENSE_JWT_ALG, PLAN_LIMITS, FREE_LICENSE, CACHE_MAX_AGE_MS, _revalTimer;
+var LICENSE_PATH, CACHE_PATH, DEVICE_ID_PATH, API_BASE, RETRY_DELAY_MS, LICENSE_PUBLIC_KEY_PEM, LICENSE_JWT_ALG, PLAN_LIMITS, FREE_LICENSE, CACHE_MAX_AGE_MS, _revalTimer;
 var init_license = __esm({
   "src/lib/license.ts"() {
     "use strict";
@@ -3406,6 +3456,7 @@ var init_license = __esm({
     CACHE_PATH = path10.join(EXE_AI_DIR, "license-cache.json");
     DEVICE_ID_PATH = path10.join(EXE_AI_DIR, "device-id");
     API_BASE = "https://askexe.com/cloud";
+    RETRY_DELAY_MS = 500;
     LICENSE_PUBLIC_KEY_PEM = `-----BEGIN PUBLIC KEY-----
 MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEeHztAMOpR/ZMh+rWuOASjEZ54CGY
 4uj+UqeKCcvtgNHKmOK278HJaJcANe9xAeji8AFYu27q3WtzCi04pHudow==
@@ -3560,7 +3611,7 @@ var init_plan_limits = __esm({
 // src/lib/notifications.ts
 import crypto5 from "crypto";
 import path14 from "path";
-import os2 from "os";
+import os3 from "os";
 import {
   readFileSync as readFileSync8,
   readdirSync as readdirSync4,
@@ -4013,7 +4064,7 @@ var init_tasks_crud = __esm({
 // src/lib/session-registry.ts
 import { readFileSync as readFileSync10, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4, existsSync as existsSync12 } from "fs";
 import path16 from "path";
-import os3 from "os";
+import os4 from "os";
 function registerSession(entry) {
   const dir = path16.dirname(REGISTRY_PATH);
   if (!existsSync12(dir)) {
@@ -4040,7 +4091,7 @@ var REGISTRY_PATH;
 var init_session_registry = __esm({
   "src/lib/session-registry.ts"() {
     "use strict";
-    REGISTRY_PATH = path16.join(os3.homedir(), ".exe-os", "session-registry.json");
+    REGISTRY_PATH = path16.join(os4.homedir(), ".exe-os", "session-registry.json");
   }
 });
 
@@ -4227,7 +4278,7 @@ var init_provider_table = __esm({
 // src/lib/intercom-queue.ts
 import { readFileSync as readFileSync11, writeFileSync as writeFileSync6, renameSync as renameSync2, existsSync as existsSync13, mkdirSync as mkdirSync5 } from "fs";
 import path17 from "path";
-import os4 from "os";
+import os5 from "os";
 function ensureDir() {
   const dir = path17.dirname(QUEUE_PATH);
   if (!existsSync13(dir)) mkdirSync5(dir, { recursive: true });
@@ -4267,9 +4318,9 @@ var QUEUE_PATH, TTL_MS, INTERCOM_LOG;
 var init_intercom_queue = __esm({
   "src/lib/intercom-queue.ts"() {
     "use strict";
-    QUEUE_PATH = path17.join(os4.homedir(), ".exe-os", "intercom-queue.json");
+    QUEUE_PATH = path17.join(os5.homedir(), ".exe-os", "intercom-queue.json");
     TTL_MS = 60 * 60 * 1e3;
-    INTERCOM_LOG = path17.join(os4.homedir(), ".exe-os", "intercom.log");
+    INTERCOM_LOG = path17.join(os5.homedir(), ".exe-os", "intercom.log");
   }
 });
 
@@ -4277,7 +4328,7 @@ var init_intercom_queue = __esm({
 import { execFileSync as execFileSync2, execSync as execSync8 } from "child_process";
 import { readFileSync as readFileSync12, writeFileSync as writeFileSync7, mkdirSync as mkdirSync6, existsSync as existsSync14, appendFileSync } from "fs";
 import path18 from "path";
-import os5 from "os";
+import os6 from "os";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { unlinkSync as unlinkSync4 } from "fs";
 function spawnLockPath(sessionName) {
@@ -4582,7 +4633,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   const transport = getTransport();
   const sessionName = employeeSessionName(employeeName, exeSession, opts?.instance);
   const instanceLabel = opts?.instance != null && opts.instance > 0 ? `${employeeName}${opts.instance}` : employeeName;
-  const logDir = path18.join(os5.homedir(), ".exe-os", "session-logs");
+  const logDir = path18.join(os6.homedir(), ".exe-os", "session-logs");
   const logFile = path18.join(logDir, `${instanceLabel}-${Date.now()}.log`);
   if (!existsSync14(logDir)) {
     mkdirSync6(logDir, { recursive: true });
@@ -4598,7 +4649,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   } catch {
   }
   try {
-    const claudeJsonPath = path18.join(os5.homedir(), ".claude.json");
+    const claudeJsonPath = path18.join(os6.homedir(), ".claude.json");
     let claudeJson = {};
     try {
       claudeJson = JSON.parse(readFileSync12(claudeJsonPath, "utf8"));
@@ -4613,7 +4664,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   } catch {
   }
   try {
-    const settingsDir = path18.join(os5.homedir(), ".claude", "projects");
+    const settingsDir = path18.join(os6.homedir(), ".claude", "projects");
     const normalizedKey = (opts?.cwd ?? projectDir).replace(/\//g, "-").replace(/^-/, "");
     const projSettingsDir = path18.join(settingsDir, normalizedKey);
     const settingsPath = path18.join(projSettingsDir, "settings.json");
@@ -4661,7 +4712,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   let legacyFallbackWarned = false;
   if (!useExeAgent && !useBinSymlink) {
     const identityPath2 = path18.join(
-      os5.homedir(),
+      os6.homedir(),
       ".exe-os",
       "identity",
       `${employeeName}.md`
@@ -4691,7 +4742,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   }
   let sessionContextFlag = "";
   try {
-    const ctxDir = path18.join(os5.homedir(), ".exe-os", "session-cache");
+    const ctxDir = path18.join(os6.homedir(), ".exe-os", "session-cache");
     mkdirSync6(ctxDir, { recursive: true });
     const ctxFile = path18.join(ctxDir, `session-context-${sessionName}.md`);
     const ctxContent = [
@@ -4802,11 +4853,11 @@ var init_tmux_routing = __esm({
     init_provider_table();
     init_intercom_queue();
     init_plan_limits();
-    SPAWN_LOCK_DIR = path18.join(os5.homedir(), ".exe-os", "spawn-locks");
-    SESSION_CACHE = path18.join(os5.homedir(), ".exe-os", "session-cache");
+    SPAWN_LOCK_DIR = path18.join(os6.homedir(), ".exe-os", "spawn-locks");
+    SESSION_CACHE = path18.join(os6.homedir(), ".exe-os", "session-cache");
     BEHAVIORS_EXPORT_TIMEOUT_MS = 1e4;
     INTERCOM_DEBOUNCE_MS = 3e4;
-    INTERCOM_LOG2 = path18.join(os5.homedir(), ".exe-os", "intercom.log");
+    INTERCOM_LOG2 = path18.join(os6.homedir(), ".exe-os", "intercom.log");
     DEBOUNCE_FILE = path18.join(SESSION_CACHE, "intercom-debounce.json");
     DEBOUNCE_CLEANUP_AGE_MS = 5 * 60 * 1e3;
     BUSY_PATTERN = /[✻✽✶✳·].*…|Running…/;
@@ -7655,7 +7706,7 @@ All tasks complete. No more open tasks in your queue.`;
 init_tasks();
 init_active_agent();
 import { z as z10 } from "zod";
-var CLOSE_TASK_ALLOWED_AGENTS = /* @__PURE__ */ new Set(["exe", "ea"]);
+var CLOSE_TASK_ALLOWED_ROLES = /* @__PURE__ */ new Set(["COO", "CTO"]);
 function registerCloseTask(server2) {
   server2.registerTool(
     "close_task",
@@ -7670,7 +7721,7 @@ function registerCloseTask(server2) {
     },
     async ({ task_id, result, status }) => {
       const agent = getActiveAgent();
-      if (agent.agentId && !CLOSE_TASK_ALLOWED_AGENTS.has(agent.agentId)) {
+      if (agent.agentId && agent.agentId !== "default" && !CLOSE_TASK_ALLOWED_ROLES.has(agent.agentRole ?? "")) {
         return {
           content: [
             {
@@ -8032,7 +8083,7 @@ async function createReminder(text, dueDate) {
 }
 async function listReminders(includeCompleted = false) {
   const client = getClient();
-  const sql = includeCompleted ? `SELECT id, text, created_at, due_date, completed_at FROM reminders ORDER BY due_date ASC NULLS LAST` : `SELECT id, text, created_at, due_date, completed_at FROM reminders WHERE completed_at IS NULL ORDER BY due_date ASC NULLS LAST`;
+  const sql = includeCompleted ? `SELECT id, text, created_at, due_date, completed_at FROM reminders ORDER BY due_date ASC NULLS LAST LIMIT 500` : `SELECT id, text, created_at, due_date, completed_at FROM reminders WHERE completed_at IS NULL ORDER BY due_date ASC NULLS LAST LIMIT 500`;
   const result = await client.execute(sql);
   return result.rows.map((row) => ({
     id: String(row.id),
@@ -8051,7 +8102,7 @@ async function completeReminder(idOrText) {
   });
   if (result.rows.length === 0) {
     result = await client.execute({
-      sql: `SELECT id, text FROM reminders WHERE completed_at IS NULL AND text LIKE '%' || ? || '%'`,
+      sql: `SELECT id, text FROM reminders WHERE completed_at IS NULL AND text LIKE '%' || ? || '%' LIMIT 1`,
       args: [idOrText]
     });
   }
@@ -8404,7 +8455,7 @@ function registerUpdateIdentity(server2) {
     },
     async ({ agent_id, content }) => {
       const caller = getActiveAgent();
-      const allowed = caller.agentId === "exe" || caller.agentId === "default";
+      const allowed = caller.agentId === "default" || caller.agentRole === "COO";
       if (!allowed) {
         return {
           content: [{
@@ -8453,7 +8504,7 @@ function registerDeactivateBehavior(server2) {
     },
     async ({ behavior_id }) => {
       const caller = getActiveAgent();
-      const allowed = caller.agentId === "exe" || caller.agentId === "default";
+      const allowed = caller.agentId === "default" || caller.agentRole === "COO";
       if (!allowed) {
         return {
           content: [{
@@ -8984,7 +9035,8 @@ async function gqlRequest(query, variables) {
       "Content-Type": "application/json",
       Authorization: `Bearer ${config.apiToken}`
     },
-    body: JSON.stringify({ query, variables })
+    body: JSON.stringify({ query, variables }),
+    signal: AbortSignal.timeout(3e4)
   });
   if (!res.ok) {
     throw new Error(`CRM GraphQL request failed: ${res.status} ${res.statusText}`);
@@ -9147,7 +9199,8 @@ async function lookupPhoneByName(name) {
         "Content-Type": "application/json",
         Authorization: `Bearer ${apiToken}`
       },
-      body: JSON.stringify({ query, variables })
+      body: JSON.stringify({ query, variables }),
+      signal: AbortSignal.timeout(3e4)
     });
     if (!res.ok) return null;
     const json = await res.json();
@@ -9172,7 +9225,8 @@ async function sendWhatsAppMessage(phoneNumberId, accessToken, to, text) {
       to,
       type: "text",
       text: { body: text }
-    })
+    }),
+    signal: AbortSignal.timeout(3e4)
   });
   if (!res.ok) {
     await res.text();
@@ -9288,8 +9342,8 @@ import { z as z29 } from "zod";
 import { readFileSync as readFileSync15, writeFileSync as writeFileSync10, existsSync as existsSync17, mkdirSync as mkdirSync9 } from "fs";
 import { randomUUID as randomUUID3 } from "crypto";
 import path23 from "path";
-import os6 from "os";
-var TRIGGERS_PATH = path23.join(os6.homedir(), ".exe-os", "triggers.json");
+import os7 from "os";
+var TRIGGERS_PATH = path23.join(os7.homedir(), ".exe-os", "triggers.json");
 function loadTriggers(project) {
   if (!existsSync17(TRIGGERS_PATH)) return [];
   try {
@@ -10805,7 +10859,7 @@ var HostingerApiClient = class {
       "Content-Type": "application/json",
       Accept: "application/json"
     };
-    const options = { method, headers };
+    const options = { method, headers, signal: AbortSignal.timeout(3e4) };
     if (body) {
       options.body = JSON.stringify(body);
     }

package/dist/mcp/tools/complete-reminder.js

@@ -24,7 +24,7 @@ async function completeReminder(idOrText) {
   });
   if (result.rows.length === 0) {
     result = await client.execute({
-      sql: `SELECT id, text FROM reminders WHERE completed_at IS NULL AND text LIKE '%' || ? || '%'`,
+      sql: `SELECT id, text FROM reminders WHERE completed_at IS NULL AND text LIKE '%' || ? || '%' LIMIT 1`,
       args: [idOrText]
     });
   }

package/dist/mcp/tools/create-task.js

@@ -59,7 +59,7 @@ __export(config_exports, {
   migrateConfig: () => migrateConfig,
   saveConfig: () => saveConfig
 });
-import { readFile, writeFile, mkdir } from "fs/promises";
+import { readFile, writeFile, mkdir, chmod } from "fs/promises";
 import { readFileSync, existsSync, renameSync } from "fs";
 import path from "path";
 import os from "os";
@@ -185,6 +185,9 @@ async function saveConfig(config) {
   await mkdir(dir, { recursive: true });
   const configPath = path.join(dir, "config.json");
   await writeFile(configPath, JSON.stringify(config, null, 2) + "\n");
+  if (config.cloud?.apiKey) {
+    await chmod(configPath, 384);
+  }
 }
 async function loadConfigFrom(configPath) {
   const raw = await readFile(configPath, "utf-8");
@@ -602,15 +605,20 @@ function addEmployee(employees, employee) {
   }
   return [...employees, normalized];
 }
+function findExeBin() {
+  try {
+    return execSync2(process.platform === "win32" ? "where exe-os" : "which exe-os", { encoding: "utf8" }).trim();
+  } catch {
+    return null;
+  }
+}
 function registerBinSymlinks(name) {
   const created = [];
   const skipped = [];
   const errors = [];
-  let exeBinPath;
-  try {
-    exeBinPath = execSync2("which exe", { encoding: "utf-8" }).trim();
-  } catch {
-    errors.push("Could not find 'exe' in PATH");
+  const exeBinPath = findExeBin();
+  if (!exeBinPath) {
+    errors.push("Could not find 'exe-os' in PATH");
     return { created, skipped, errors };
   }
   const binDir = path4.dirname(exeBinPath);

package/dist/mcp/tools/deactivate-behavior.js

@@ -30,7 +30,7 @@ import { execSync as execSync2 } from "child_process";
 import path2 from "path";
 
 // src/lib/config.ts
-import { readFile, writeFile, mkdir } from "fs/promises";
+import { readFile, writeFile, mkdir, chmod } from "fs/promises";
 import { readFileSync, existsSync, renameSync } from "fs";
 import path from "path";
 import os from "os";
@@ -216,7 +216,7 @@ function registerDeactivateBehavior(server) {
     },
     async ({ behavior_id }) => {
       const caller = getActiveAgent();
-      const allowed = caller.agentId === "exe" || caller.agentId === "default";
+      const allowed = caller.agentId === "default" || caller.agentRole === "COO";
       if (!allowed) {
         return {
           content: [{

package/dist/mcp/tools/list-reminders.js

@@ -17,7 +17,7 @@ function getClient() {
 // src/lib/reminders.ts
 async function listReminders(includeCompleted = false) {
   const client = getClient();
-  const sql = includeCompleted ? `SELECT id, text, created_at, due_date, completed_at FROM reminders ORDER BY due_date ASC NULLS LAST` : `SELECT id, text, created_at, due_date, completed_at FROM reminders WHERE completed_at IS NULL ORDER BY due_date ASC NULLS LAST`;
+  const sql = includeCompleted ? `SELECT id, text, created_at, due_date, completed_at FROM reminders ORDER BY due_date ASC NULLS LAST LIMIT 500` : `SELECT id, text, created_at, due_date, completed_at FROM reminders WHERE completed_at IS NULL ORDER BY due_date ASC NULLS LAST LIMIT 500`;
   const result = await client.execute(sql);
   return result.rows.map((row) => ({
     id: String(row.id),

package/dist/mcp/tools/list-tasks.js

@@ -28,7 +28,7 @@ var init_database = __esm({
 });
 
 // src/lib/config.ts
-import { readFile, writeFile, mkdir } from "fs/promises";
+import { readFile, writeFile, mkdir, chmod } from "fs/promises";
 import { readFileSync, existsSync, renameSync } from "fs";
 import path from "path";
 import os from "os";

package/dist/mcp/tools/send-message.js

@@ -342,7 +342,7 @@ var init_intercom_queue = __esm({
 });
 
 // src/lib/config.ts
-import { readFile, writeFile, mkdir } from "fs/promises";
+import { readFile, writeFile, mkdir, chmod } from "fs/promises";
 import { readFileSync as readFileSync3, existsSync as existsSync3, renameSync as renameSync2 } from "fs";
 import path3 from "path";
 import os3 from "os";

package/dist/mcp/tools/update-task.js

@@ -44,7 +44,7 @@ var init_database = __esm({
 });
 
 // src/lib/config.ts
-import { readFile, writeFile, mkdir } from "fs/promises";
+import { readFile, writeFile, mkdir, chmod } from "fs/promises";
 import { readFileSync, existsSync, renameSync } from "fs";
 import path from "path";
 import os from "os";

package/dist/runtime/index.js

@@ -461,6 +461,7 @@ async function ensureSchema() {
   const client = getRawClient();
   await client.execute("PRAGMA journal_mode = WAL");
   await client.execute("PRAGMA busy_timeout = 30000");
+  await client.execute("PRAGMA wal_autocheckpoint = 1000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
   } catch {
@@ -1269,7 +1270,7 @@ var init_database = __esm({
 });
 
 // src/lib/config.ts
-import { readFile, writeFile, mkdir } from "fs/promises";
+import { readFile, writeFile, mkdir, chmod } from "fs/promises";
 import { readFileSync as readFileSync3, existsSync as existsSync3, renameSync as renameSync2 } from "fs";
 import path4 from "path";
 import os4 from "os";
@@ -3904,12 +3905,13 @@ var init_memory = __esm({
 });
 
 // src/lib/keychain.ts
-import { readFile as readFile4, writeFile as writeFile5, unlink, mkdir as mkdir4, chmod } from "fs/promises";
+import { readFile as readFile4, writeFile as writeFile5, unlink, mkdir as mkdir4, chmod as chmod2 } from "fs/promises";
 import { existsSync as existsSync11 } from "fs";
 import path15 from "path";
+import os7 from "os";
 import crypto6 from "crypto";
 function getKeyDir() {
-  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path15.join(process.env.HOME ?? "/tmp", ".exe-os");
+  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path15.join(os7.homedir(), ".exe-os");
 }
 function getKeyPath() {
   return path15.join(getKeyDir(), "master.key");
@@ -4210,6 +4212,28 @@ __export(store_exports, {
   vectorToBlob: () => vectorToBlob,
   writeMemory: () => writeMemory
 });
+function isBusyError2(err) {
+  if (err instanceof Error) {
+    const msg = err.message.toLowerCase();
+    return msg.includes("sqlite_busy") || msg.includes("database is locked");
+  }
+  return false;
+}
+async function retryOnBusy2(fn, label) {
+  for (let attempt = 0; attempt <= INIT_MAX_RETRIES; attempt++) {
+    try {
+      return await fn();
+    } catch (err) {
+      if (!isBusyError2(err) || attempt === INIT_MAX_RETRIES) throw err;
+      process.stderr.write(
+        `[store] SQLITE_BUSY during ${label}, retry ${attempt + 1}/${INIT_MAX_RETRIES}
+`
+      );
+      await new Promise((r) => setTimeout(r, INIT_RETRY_DELAY_MS * (attempt + 1)));
+    }
+  }
+  throw new Error("unreachable");
+}
 async function initStore(options) {
   if (_flushTimer !== null) {
     clearInterval(_flushTimer);
@@ -4238,14 +4262,17 @@ async function initStore(options) {
     dbPath,
     encryptionKey: hexKey
   });
-  await ensureSchema();
+  await retryOnBusy2(() => ensureSchema(), "ensureSchema");
   try {
     const { initShardManager: initShardManager2 } = await Promise.resolve().then(() => (init_shard_manager(), shard_manager_exports));
     initShardManager2(hexKey);
   } catch {
   }
   const client = getClient();
-  const vResult = await client.execute("SELECT MAX(version) as max_v FROM memories");
+  const vResult = await retryOnBusy2(
+    () => client.execute("SELECT MAX(version) as max_v FROM memories"),
+    "version-query"
+  );
   _nextVersion = (Number(vResult.rows[0]?.max_v) || 0) + 1;
 }
 function classifyTier(record) {
@@ -4625,7 +4652,7 @@ async function getMemoryCardinality(agentId) {
     return 0;
   }
 }
-var _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
+var INIT_MAX_RETRIES, INIT_RETRY_DELAY_MS, _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
 var init_store = __esm({
   "src/lib/store.ts"() {
     "use strict";
@@ -4633,6 +4660,8 @@ var init_store = __esm({
     init_database();
     init_keychain();
     init_config();
+    INIT_MAX_RETRIES = 3;
+    INIT_RETRY_DELAY_MS = 1e3;
     _pendingRecords = [];
     _batchSize = 20;
     _flushIntervalMs = 1e4;