@askexenow/exe-os 0.8.39 → 0.8.41

package/dist/bin/cli.js

@@ -31,6 +31,7 @@ var config_exports = {};
 __export(config_exports, {
   CONFIG_MIGRATIONS: () => CONFIG_MIGRATIONS,
   CONFIG_PATH: () => CONFIG_PATH,
+  COO_AGENT_NAME: () => COO_AGENT_NAME,
   CURRENT_CONFIG_VERSION: () => CURRENT_CONFIG_VERSION,
   DB_PATH: () => DB_PATH,
   EXE_AI_DIR: () => EXE_AI_DIR,
@@ -186,7 +187,7 @@ async function loadConfigFrom(configPath) {
     return { ...DEFAULT_CONFIG };
   }
 }
-var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
+var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, COO_AGENT_NAME, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
 var init_config = __esm({
   "src/lib/config.ts"() {
     "use strict";
@@ -194,6 +195,7 @@ var init_config = __esm({
     DB_PATH = path.join(EXE_AI_DIR, "memories.db");
     MODELS_DIR = path.join(EXE_AI_DIR, "models");
     CONFIG_PATH = path.join(EXE_AI_DIR, "config.json");
+    COO_AGENT_NAME = "exe";
     LEGACY_LANCE_PATH = path.join(EXE_AI_DIR, "local.lance");
     CURRENT_CONFIG_VERSION = 1;
     DEFAULT_CONFIG = {
@@ -12246,6 +12248,7 @@ var init_terminal = __esm({
 });
 
 // src/tui/Sidebar.tsx
+import React14 from "react";
 import { jsx as jsx4, jsxs as jsxs2 } from "react/jsx-runtime";
 function Sidebar({
   active,
@@ -12576,7 +12579,7 @@ var init_tmux_status = __esm({
 });
 
 // src/tui/Footer.tsx
-import { useState as useState4, useEffect as useEffect6 } from "react";
+import React15, { useState as useState4, useEffect as useEffect6 } from "react";
 import { Fragment, jsx as jsx5, jsxs as jsxs3 } from "react/jsx-runtime";
 function Footer() {
   const demo = useDemo();
@@ -12709,6 +12712,7 @@ var init_Footer = __esm({
 });
 
 // src/tui/components/StatusDot.tsx
+import React16 from "react";
 import { jsx as jsx6, jsxs as jsxs4 } from "react/jsx-runtime";
 function StatusDot({ status, showLabel = true }) {
   const { char, dotColor, label, labelColor } = STATUS_CONFIG[status];
@@ -16060,7 +16064,7 @@ var init_CommandCenter = __esm({
 });
 
 // src/tui/components/TmuxPane.tsx
-import { useState as useState7, useEffect as useEffect9 } from "react";
+import React18, { useState as useState7, useEffect as useEffect9 } from "react";
 import { jsx as jsx8, jsxs as jsxs6 } from "react/jsx-runtime";
 function TmuxPane({ sessionName, employeeName, employeeRole, projectName, onDetach }) {
   const demo = useDemo();
@@ -16899,7 +16903,7 @@ async function listTasks(input) {
   }
   const where = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
   const result = await client.execute({
-    sql: `SELECT * FROM tasks ${where} ORDER BY CASE status WHEN 'blocked' THEN 0 WHEN 'in_progress' THEN 1 WHEN 'open' THEN 2 ELSE 3 END, priority ASC, created_at DESC`,
+    sql: `SELECT * FROM tasks ${where} ORDER BY CASE status WHEN 'blocked' THEN 0 WHEN 'in_progress' THEN 1 WHEN 'open' THEN 2 ELSE 3 END, priority ASC, created_at DESC LIMIT 1000`,
     args: args2
   });
   return result.rows.map((r) => ({
@@ -17120,6 +17124,34 @@ async function listPendingReviews(limit) {
   });
   return result.rows;
 }
+async function cleanupOrphanedReviews() {
+  const client = getClient();
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const r1 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND assigned_by = 'system'
+          AND title LIKE 'Review:%'
+          AND parent_task_id IN (SELECT id FROM tasks WHERE status IN ('done', 'cancelled'))`,
+    args: [now]
+  });
+  const staleThreshold = new Date(Date.now() - 60 * 60 * 1e3).toISOString();
+  const r2 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND result IS NOT NULL
+          AND updated_at < ?`,
+    args: [now, staleThreshold]
+  });
+  const total = r1.rowsAffected + r2.rowsAffected;
+  if (total > 0) {
+    process.stderr.write(
+      `[cleanup] Closed ${total} orphaned review(s): ${r1.rowsAffected} cascade + ${r2.rowsAffected} stale
+`
+    );
+  }
+  return total;
+}
 function getReviewChecklist(role, agent, taskSlug) {
   const roleLower = role.toLowerCase();
   if (roleLower.includes("engineer") || roleLower === "principal engineer") {
@@ -17799,6 +17831,7 @@ var init_skill_learning = __esm({
 // src/lib/tasks.ts
 var tasks_exports = {};
 __export(tasks_exports, {
+  cleanupOrphanedReviews: () => cleanupOrphanedReviews,
   countNewPendingReviewsSince: () => countNewPendingReviewsSince,
   countPendingReviews: () => countPendingReviews,
   createTask: () => createTask,
@@ -17864,6 +17897,21 @@ async function updateTask(input) {
       });
     } catch {
     }
+    try {
+      const client = getClient();
+      const cascaded = await client.execute({
+        sql: `UPDATE tasks SET status = 'done', updated_at = ?
+              WHERE parent_task_id = ? AND status = 'needs_review'`,
+        args: [now, taskId]
+      });
+      if (cascaded.rowsAffected > 0) {
+        process.stderr.write(
+          `[cascade] Closed ${cascaded.rowsAffected} orphaned review task(s) for parent ${taskId}
+`
+        );
+      }
+    } catch {
+    }
   }
   const isTerminal = input.status === "done" || input.status === "needs_review";
   if (isTerminal) {
@@ -19226,7 +19274,7 @@ var init_useOrchestrator = __esm({
 });
 
 // src/tui/views/Sessions.tsx
-import { useState as useState9, useEffect as useEffect11, useCallback as useCallback6 } from "react";
+import React19, { useState as useState9, useEffect as useEffect11, useCallback as useCallback6 } from "react";
 import path31 from "path";
 import { homedir as homedir4 } from "os";
 import { jsx as jsx9, jsxs as jsxs7 } from "react/jsx-runtime";
@@ -19661,7 +19709,7 @@ var init_Sessions = __esm({
 });
 
 // src/tui/views/Tasks.tsx
-import { useState as useState10, useEffect as useEffect12, useMemo as useMemo5 } from "react";
+import React20, { useState as useState10, useEffect as useEffect12, useMemo as useMemo5 } from "react";
 import { Fragment as Fragment3, jsx as jsx10, jsxs as jsxs8 } from "react/jsx-runtime";
 function relativeTime(iso) {
   const now = Date.now();
@@ -20245,7 +20293,7 @@ var init_gateway_client = __esm({
 });
 
 // src/tui/views/Gateway.tsx
-import { useState as useState11, useEffect as useEffect13, useRef as useRef6, useMemo as useMemo6 } from "react";
+import React21, { useState as useState11, useEffect as useEffect13, useRef as useRef6, useMemo as useMemo6 } from "react";
 import { jsx as jsx11, jsxs as jsxs9 } from "react/jsx-runtime";
 function connectionStatusColor(status) {
   switch (status) {
@@ -20847,7 +20895,7 @@ var init_agent_status = __esm({
 });
 
 // src/tui/views/Team.tsx
-import { useState as useState12, useEffect as useEffect14 } from "react";
+import React22, { useState as useState12, useEffect as useEffect14 } from "react";
 import { jsx as jsx12, jsxs as jsxs10 } from "react/jsx-runtime";
 function TeamView({ onBack }) {
   const demo = useDemo();
@@ -21258,7 +21306,7 @@ var init_wiki_client = __esm({
 });
 
 // src/tui/views/Wiki.tsx
-import { useState as useState13, useEffect as useEffect15 } from "react";
+import React23, { useState as useState13, useEffect as useEffect15 } from "react";
 import TextInput2 from "ink-text-input";
 import { Fragment as Fragment4, jsx as jsx13, jsxs as jsxs11 } from "react/jsx-runtime";
 function WikiView({ onBack }) {
@@ -21569,7 +21617,7 @@ var init_Wiki = __esm({
 });
 
 // src/tui/views/Settings.tsx
-import { useState as useState14, useEffect as useEffect16 } from "react";
+import React24, { useState as useState14, useEffect as useEffect16 } from "react";
 import { Fragment as Fragment5, jsx as jsx14, jsxs as jsxs12 } from "react/jsx-runtime";
 function SettingsView({ onBack }) {
   const [providers, setProviders] = useState14([]);

package/dist/bin/exe-boot.js

@@ -31,6 +31,7 @@ var config_exports = {};
 __export(config_exports, {
   CONFIG_MIGRATIONS: () => CONFIG_MIGRATIONS,
   CONFIG_PATH: () => CONFIG_PATH,
+  COO_AGENT_NAME: () => COO_AGENT_NAME,
   CURRENT_CONFIG_VERSION: () => CURRENT_CONFIG_VERSION,
   DB_PATH: () => DB_PATH,
   EXE_AI_DIR: () => EXE_AI_DIR,
@@ -186,7 +187,7 @@ async function loadConfigFrom(configPath) {
     return { ...DEFAULT_CONFIG };
   }
 }
-var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
+var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, COO_AGENT_NAME, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
 var init_config = __esm({
   "src/lib/config.ts"() {
     "use strict";
@@ -194,6 +195,7 @@ var init_config = __esm({
     DB_PATH = path.join(EXE_AI_DIR, "memories.db");
     MODELS_DIR = path.join(EXE_AI_DIR, "models");
     CONFIG_PATH = path.join(EXE_AI_DIR, "config.json");
+    COO_AGENT_NAME = "exe";
     LEGACY_LANCE_PATH = path.join(EXE_AI_DIR, "local.lance");
     CURRENT_CONFIG_VERSION = 1;
     DEFAULT_CONFIG = {
@@ -3588,7 +3590,7 @@ async function listTasks(input) {
   }
   const where = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
   const result = await client.execute({
-    sql: `SELECT * FROM tasks ${where} ORDER BY CASE status WHEN 'blocked' THEN 0 WHEN 'in_progress' THEN 1 WHEN 'open' THEN 2 ELSE 3 END, priority ASC, created_at DESC`,
+    sql: `SELECT * FROM tasks ${where} ORDER BY CASE status WHEN 'blocked' THEN 0 WHEN 'in_progress' THEN 1 WHEN 'open' THEN 2 ELSE 3 END, priority ASC, created_at DESC LIMIT 1000`,
     args
   });
   return result.rows.map((r) => ({
@@ -3809,6 +3811,34 @@ async function listPendingReviews(limit) {
   });
   return result.rows;
 }
+async function cleanupOrphanedReviews() {
+  const client = getClient();
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const r1 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND assigned_by = 'system'
+          AND title LIKE 'Review:%'
+          AND parent_task_id IN (SELECT id FROM tasks WHERE status IN ('done', 'cancelled'))`,
+    args: [now]
+  });
+  const staleThreshold = new Date(Date.now() - 60 * 60 * 1e3).toISOString();
+  const r2 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND result IS NOT NULL
+          AND updated_at < ?`,
+    args: [now, staleThreshold]
+  });
+  const total = r1.rowsAffected + r2.rowsAffected;
+  if (total > 0) {
+    process.stderr.write(
+      `[cleanup] Closed ${total} orphaned review(s): ${r1.rowsAffected} cascade + ${r2.rowsAffected} stale
+`
+    );
+  }
+  return total;
+}
 function getReviewChecklist(role, agent, taskSlug) {
   const roleLower = role.toLowerCase();
   if (roleLower.includes("engineer") || roleLower === "principal engineer") {
@@ -4446,6 +4476,7 @@ var init_skill_learning = __esm({
 // src/lib/tasks.ts
 var tasks_exports = {};
 __export(tasks_exports, {
+  cleanupOrphanedReviews: () => cleanupOrphanedReviews,
   countNewPendingReviewsSince: () => countNewPendingReviewsSince,
   countPendingReviews: () => countPendingReviews,
   createTask: () => createTask,
@@ -4511,6 +4542,21 @@ async function updateTask(input) {
       });
     } catch {
     }
+    try {
+      const client = getClient();
+      const cascaded = await client.execute({
+        sql: `UPDATE tasks SET status = 'done', updated_at = ?
+              WHERE parent_task_id = ? AND status = 'needs_review'`,
+        args: [now, taskId]
+      });
+      if (cascaded.rowsAffected > 0) {
+        process.stderr.write(
+          `[cascade] Closed ${cascaded.rowsAffected} orphaned review task(s) for parent ${taskId}
+`
+        );
+      }
+    } catch {
+    }
   }
   const isTerminal = input.status === "done" || input.status === "needs_review";
   if (isTerminal) {
@@ -4809,7 +4855,8 @@ __export(cloud_sync_exports, {
   mergeRosterFromRemote: () => mergeRosterFromRemote,
   recordRosterDeletion: () => recordRosterDeletion
 });
-import { readFileSync as readFileSync12, writeFileSync as writeFileSync7, existsSync as existsSync14, readdirSync as readdirSync6, mkdirSync as mkdirSync8, appendFileSync as appendFileSync2, unlinkSync as unlinkSync6 } from "fs";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync7, existsSync as existsSync14, readdirSync as readdirSync6, mkdirSync as mkdirSync8, appendFileSync as appendFileSync2, unlinkSync as unlinkSync6, openSync, closeSync } from "fs";
+import crypto8 from "crypto";
 import path18 from "path";
 import { homedir } from "os";
 function logError(msg) {
@@ -4821,17 +4868,29 @@ function logError(msg) {
   }
 }
 async function withRosterLock(fn) {
-  if (existsSync14(ROSTER_LOCK_PATH)) {
-    try {
-      const ts = parseInt(readFileSync12(ROSTER_LOCK_PATH, "utf-8"), 10);
-      if (Date.now() - ts < LOCK_STALE_MS) {
+  try {
+    const fd = openSync(ROSTER_LOCK_PATH, "wx");
+    closeSync(fd);
+    writeFileSync7(ROSTER_LOCK_PATH, String(Date.now()));
+  } catch (err) {
+    if (err.code === "EEXIST") {
+      try {
+        const ts = parseInt(readFileSync12(ROSTER_LOCK_PATH, "utf-8"), 10);
+        if (Date.now() - ts < LOCK_STALE_MS) {
+          throw new Error("Roster merge already in progress \u2014 another sync is running");
+        }
+        unlinkSync6(ROSTER_LOCK_PATH);
+        const fd = openSync(ROSTER_LOCK_PATH, "wx");
+        closeSync(fd);
+        writeFileSync7(ROSTER_LOCK_PATH, String(Date.now()));
+      } catch (retryErr) {
+        if (retryErr instanceof Error && retryErr.message.includes("already in progress")) throw retryErr;
         throw new Error("Roster merge already in progress \u2014 another sync is running");
       }
-    } catch (err) {
-      if (err instanceof Error && err.message.includes("already in progress")) throw err;
+    } else {
+      throw err;
     }
   }
-  writeFileSync7(ROSTER_LOCK_PATH, String(Date.now()));
   try {
     return await fn();
   } finally {
@@ -5153,7 +5212,7 @@ function buildRosterBlob(paths) {
   }
   const deletedNames = consumeRosterDeletions();
   const content = JSON.stringify({ roster, identities, config, deletedNames });
-  const hash = Buffer.from(content).length;
+  const hash = crypto8.createHash("sha256").update(content).digest("hex").slice(0, 16);
   return { roster, identities, config, deletedNames, version: hash };
 }
 async function cloudPushRoster(config) {
@@ -5682,7 +5741,7 @@ __export(schedules_exports, {
   listSchedules: () => listSchedules,
   parseHumanCron: () => parseHumanCron
 });
-import crypto8 from "crypto";
+import crypto9 from "crypto";
 import { execSync as execSync10 } from "child_process";
 async function ensureDb() {
   if (!isInitialized()) {
@@ -5751,7 +5810,7 @@ function parseHumanCron(input) {
 async function createSchedule(input) {
   await ensureDb();
   const client = getClient();
-  const id = crypto8.randomUUID().slice(0, 8);
+  const id = crypto9.randomUUID().slice(0, 8);
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const prompt = input.prompt ?? input.description;
   await client.execute({
@@ -7036,11 +7095,11 @@ async function boot(options) {
         const thisFile = fileURLToPath3(import.meta.url);
         const backfillPath = path19.resolve(path19.dirname(thisFile), "backfill-vectors.js");
         if (existsSync15(backfillPath)) {
-          const { openSync, closeSync } = await import("fs");
+          const { openSync: openSync2, closeSync: closeSync2 } = await import("fs");
           const workerLogPath = path19.join(EXE_AI_DIR, "workers.log");
           let stderrFd = "ignore";
           try {
-            stderrFd = openSync(workerLogPath, "a");
+            stderrFd = openSync2(workerLogPath, "a");
           } catch {
           }
           const child = spawn(process.execPath, [backfillPath], {
@@ -7049,7 +7108,7 @@ async function boot(options) {
           });
           child.unref();
           if (typeof stderrFd === "number") try {
-            closeSync(stderrFd);
+            closeSync2(stderrFd);
           } catch {
           }
           briefData.embedding.backfillRunning = true;

package/dist/bin/exe-cloud.js

@@ -710,7 +710,8 @@ function isMainModule(importMetaUrl) {
 }
 
 // src/lib/cloud-sync.ts
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync2, existsSync as existsSync6, readdirSync, mkdirSync as mkdirSync2, appendFileSync, unlinkSync } from "fs";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync2, existsSync as existsSync6, readdirSync, mkdirSync as mkdirSync2, appendFileSync, unlinkSync, openSync, closeSync } from "fs";
+import crypto4 from "crypto";
 import path6 from "path";
 import { homedir } from "os";
 
@@ -897,8 +898,17 @@ async function syncMode() {
   console.log("");
   console.log("Run /exe-cloud on the new device and paste these when prompted:\n");
   console.log("  24-word recovery phrase:");
-  console.log(`  ${mnemonic}
+  const showFull = process.argv.includes("--show-full");
+  if (showFull) {
+    console.log(`  ${mnemonic}
 `);
+  } else {
+    const words = mnemonic.split(" ");
+    const masked = words.length > 4 ? [...words.slice(0, 2), ...words.slice(2, -2).map(() => "****"), ...words.slice(-2)].join(" ") : mnemonic;
+    console.log(`  ${masked}
+`);
+    console.log("  To reveal full phrase: run with --show-full\n");
+  }
   console.log("  \u26A0  Clear your terminal history after copying.\n");
   if (config.cloud?.apiKey) {
     const maskedKey = config.cloud.apiKey.slice(0, 10) + "..." + config.cloud.apiKey.slice(-4);

package/dist/bin/exe-doctor.js

@@ -1542,7 +1542,7 @@ async function auditDuplicates(client, flags) {
     if (flags.agent) filterClause += " AND agent_id = ?";
     if (flags.project) filterClause += " AND project_name = ?";
     const ids = await client.execute({
-      sql: `SELECT id FROM memories${filterClause} ORDER BY timestamp DESC`,
+      sql: `SELECT id FROM memories${filterClause} ORDER BY timestamp DESC LIMIT 10000`,
       args: filterArgs
     });
     const allIds = ids.rows.map((r) => r.id);

package/dist/bin/exe-gateway.js

@@ -1192,6 +1192,7 @@ var config_exports = {};
 __export(config_exports, {
   CONFIG_MIGRATIONS: () => CONFIG_MIGRATIONS,
   CONFIG_PATH: () => CONFIG_PATH,
+  COO_AGENT_NAME: () => COO_AGENT_NAME,
   CURRENT_CONFIG_VERSION: () => CURRENT_CONFIG_VERSION,
   DB_PATH: () => DB_PATH,
   EXE_AI_DIR: () => EXE_AI_DIR,
@@ -1347,7 +1348,7 @@ async function loadConfigFrom(configPath) {
     return { ...DEFAULT_CONFIG };
   }
 }
-var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
+var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, COO_AGENT_NAME, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
 var init_config = __esm({
   "src/lib/config.ts"() {
     "use strict";
@@ -1355,6 +1356,7 @@ var init_config = __esm({
     DB_PATH = path.join(EXE_AI_DIR, "memories.db");
     MODELS_DIR = path.join(EXE_AI_DIR, "models");
     CONFIG_PATH = path.join(EXE_AI_DIR, "config.json");
+    COO_AGENT_NAME = "exe";
     LEGACY_LANCE_PATH = path.join(EXE_AI_DIR, "local.lance");
     CURRENT_CONFIG_VERSION = 1;
     DEFAULT_CONFIG = {
@@ -5849,7 +5851,7 @@ async function listTasks(input) {
   }
   const where = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
   const result = await client.execute({
-    sql: `SELECT * FROM tasks ${where} ORDER BY CASE status WHEN 'blocked' THEN 0 WHEN 'in_progress' THEN 1 WHEN 'open' THEN 2 ELSE 3 END, priority ASC, created_at DESC`,
+    sql: `SELECT * FROM tasks ${where} ORDER BY CASE status WHEN 'blocked' THEN 0 WHEN 'in_progress' THEN 1 WHEN 'open' THEN 2 ELSE 3 END, priority ASC, created_at DESC LIMIT 1000`,
     args
   });
   return result.rows.map((r) => ({
@@ -6070,6 +6072,34 @@ async function listPendingReviews(limit) {
   });
   return result.rows;
 }
+async function cleanupOrphanedReviews() {
+  const client = getClient();
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const r1 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND assigned_by = 'system'
+          AND title LIKE 'Review:%'
+          AND parent_task_id IN (SELECT id FROM tasks WHERE status IN ('done', 'cancelled'))`,
+    args: [now]
+  });
+  const staleThreshold = new Date(Date.now() - 60 * 60 * 1e3).toISOString();
+  const r2 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND result IS NOT NULL
+          AND updated_at < ?`,
+    args: [now, staleThreshold]
+  });
+  const total = r1.rowsAffected + r2.rowsAffected;
+  if (total > 0) {
+    process.stderr.write(
+      `[cleanup] Closed ${total} orphaned review(s): ${r1.rowsAffected} cascade + ${r2.rowsAffected} stale
+`
+    );
+  }
+  return total;
+}
 function getReviewChecklist(role, agent, taskSlug) {
   const roleLower = role.toLowerCase();
   if (roleLower.includes("engineer") || roleLower === "principal engineer") {
@@ -6749,6 +6779,7 @@ var init_skill_learning = __esm({
 // src/lib/tasks.ts
 var tasks_exports = {};
 __export(tasks_exports, {
+  cleanupOrphanedReviews: () => cleanupOrphanedReviews,
   countNewPendingReviewsSince: () => countNewPendingReviewsSince,
   countPendingReviews: () => countPendingReviews,
   createTask: () => createTask,
@@ -6814,6 +6845,21 @@ async function updateTask(input) {
       });
     } catch {
     }
+    try {
+      const client = getClient();
+      const cascaded = await client.execute({
+        sql: `UPDATE tasks SET status = 'done', updated_at = ?
+              WHERE parent_task_id = ? AND status = 'needs_review'`,
+        args: [now, taskId]
+      });
+      if (cascaded.rowsAffected > 0) {
+        process.stderr.write(
+          `[cascade] Closed ${cascaded.rowsAffected} orphaned review task(s) for parent ${taskId}
+`
+        );
+      }
+    } catch {
+    }
   }
   const isTerminal = input.status === "done" || input.status === "needs_review";
   if (isTerminal) {

package/dist/bin/exe-link.js

@@ -20,6 +20,7 @@ var config_exports = {};
 __export(config_exports, {
   CONFIG_MIGRATIONS: () => CONFIG_MIGRATIONS,
   CONFIG_PATH: () => CONFIG_PATH,
+  COO_AGENT_NAME: () => COO_AGENT_NAME,
   CURRENT_CONFIG_VERSION: () => CURRENT_CONFIG_VERSION,
   DB_PATH: () => DB_PATH,
   EXE_AI_DIR: () => EXE_AI_DIR,
@@ -175,7 +176,7 @@ async function loadConfigFrom(configPath) {
     return { ...DEFAULT_CONFIG };
   }
 }
-var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
+var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, COO_AGENT_NAME, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
 var init_config = __esm({
   "src/lib/config.ts"() {
     "use strict";
@@ -183,6 +184,7 @@ var init_config = __esm({
     DB_PATH = path2.join(EXE_AI_DIR, "memories.db");
     MODELS_DIR = path2.join(EXE_AI_DIR, "models");
     CONFIG_PATH = path2.join(EXE_AI_DIR, "config.json");
+    COO_AGENT_NAME = "exe";
     LEGACY_LANCE_PATH = path2.join(EXE_AI_DIR, "local.lance");
     CURRENT_CONFIG_VERSION = 1;
     DEFAULT_CONFIG = {
@@ -671,7 +673,8 @@ __export(cloud_sync_exports, {
   mergeRosterFromRemote: () => mergeRosterFromRemote,
   recordRosterDeletion: () => recordRosterDeletion
 });
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync2, existsSync as existsSync6, readdirSync, mkdirSync as mkdirSync2, appendFileSync, unlinkSync } from "fs";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync2, existsSync as existsSync6, readdirSync, mkdirSync as mkdirSync2, appendFileSync, unlinkSync, openSync, closeSync } from "fs";
+import crypto3 from "crypto";
 import path6 from "path";
 import { homedir } from "os";
 function logError(msg) {
@@ -683,17 +686,29 @@ function logError(msg) {
   }
 }
 async function withRosterLock(fn) {
-  if (existsSync6(ROSTER_LOCK_PATH)) {
-    try {
-      const ts = parseInt(readFileSync5(ROSTER_LOCK_PATH, "utf-8"), 10);
-      if (Date.now() - ts < LOCK_STALE_MS) {
+  try {
+    const fd = openSync(ROSTER_LOCK_PATH, "wx");
+    closeSync(fd);
+    writeFileSync2(ROSTER_LOCK_PATH, String(Date.now()));
+  } catch (err) {
+    if (err.code === "EEXIST") {
+      try {
+        const ts = parseInt(readFileSync5(ROSTER_LOCK_PATH, "utf-8"), 10);
+        if (Date.now() - ts < LOCK_STALE_MS) {
+          throw new Error("Roster merge already in progress \u2014 another sync is running");
+        }
+        unlinkSync(ROSTER_LOCK_PATH);
+        const fd = openSync(ROSTER_LOCK_PATH, "wx");
+        closeSync(fd);
+        writeFileSync2(ROSTER_LOCK_PATH, String(Date.now()));
+      } catch (retryErr) {
+        if (retryErr instanceof Error && retryErr.message.includes("already in progress")) throw retryErr;
         throw new Error("Roster merge already in progress \u2014 another sync is running");
       }
-    } catch (err) {
-      if (err instanceof Error && err.message.includes("already in progress")) throw err;
+    } else {
+      throw err;
     }
   }
-  writeFileSync2(ROSTER_LOCK_PATH, String(Date.now()));
   try {
     return await fn();
   } finally {
@@ -1015,7 +1030,7 @@ function buildRosterBlob(paths) {
   }
   const deletedNames = consumeRosterDeletions();
   const content = JSON.stringify({ roster, identities, config, deletedNames });
-  const hash = Buffer.from(content).length;
+  const hash = crypto3.createHash("sha256").update(content).digest("hex").slice(0, 16);
   return { roster, identities, config, deletedNames, version: hash };
 }
 async function cloudPushRoster(config) {
@@ -1684,8 +1699,17 @@ async function main() {
     }
     const mnemonic = exportMnemonic(key);
     console.log("Your 24-word recovery phrase:\n");
-    console.log(`  ${mnemonic}
+    const showFull = process.argv.includes("--show-full");
+    if (showFull) {
+      console.log(`  ${mnemonic}
 `);
+    } else {
+      const words = mnemonic.split(" ");
+      const masked = words.length > 4 ? [...words.slice(0, 2), ...words.slice(2, -2).map(() => "****"), ...words.slice(-2)].join(" ") : mnemonic;
+      console.log(`  ${masked}
+`);
+      console.log("To reveal full phrase: run with --show-full\n");
+    }
     console.log("Write this down and enter it on your new device with /exe-link import.");
     console.log("Anyone with this phrase can decrypt your memories.");
     console.log("\u26A0  Clear your terminal history after copying.");

package/dist/bin/exe-pending-reviews.js

@@ -1509,6 +1509,34 @@ async function listPendingReviews(limit) {
   });
   return result.rows;
 }
+async function cleanupOrphanedReviews() {
+  const client = getClient();
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const r1 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND assigned_by = 'system'
+          AND title LIKE 'Review:%'
+          AND parent_task_id IN (SELECT id FROM tasks WHERE status IN ('done', 'cancelled'))`,
+    args: [now]
+  });
+  const staleThreshold = new Date(Date.now() - 60 * 60 * 1e3).toISOString();
+  const r2 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND result IS NOT NULL
+          AND updated_at < ?`,
+    args: [now, staleThreshold]
+  });
+  const total = r1.rowsAffected + r2.rowsAffected;
+  if (total > 0) {
+    process.stderr.write(
+      `[cleanup] Closed ${total} orphaned review(s): ${r1.rowsAffected} cascade + ${r2.rowsAffected} stale
+`
+    );
+  }
+  return total;
+}
 var init_tasks_review = __esm({
   "src/lib/tasks-review.ts"() {
     "use strict";
@@ -1662,6 +1690,7 @@ init_tasks_review();
 var PENDING_REVIEW_LIMIT = 10;
 async function main() {
   await initStore();
+  await cleanupOrphanedReviews();
   const rows = await listPendingReviews(PENDING_REVIEW_LIMIT);
   if (rows.length > 0) {
     console.log("[REVIEW NOTIFICATIONS]");

package/dist/bin/exe-search.js

@@ -969,6 +969,7 @@ var config_exports = {};
 __export(config_exports, {
   CONFIG_MIGRATIONS: () => CONFIG_MIGRATIONS,
   CONFIG_PATH: () => CONFIG_PATH,
+  COO_AGENT_NAME: () => COO_AGENT_NAME,
   CURRENT_CONFIG_VERSION: () => CURRENT_CONFIG_VERSION,
   DB_PATH: () => DB_PATH,
   EXE_AI_DIR: () => EXE_AI_DIR,
@@ -1124,7 +1125,7 @@ async function loadConfigFrom(configPath) {
     return { ...DEFAULT_CONFIG };
   }
 }
-var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
+var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, COO_AGENT_NAME, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
 var init_config = __esm({
   "src/lib/config.ts"() {
     "use strict";
@@ -1132,6 +1133,7 @@ var init_config = __esm({
     DB_PATH = path2.join(EXE_AI_DIR, "memories.db");
     MODELS_DIR = path2.join(EXE_AI_DIR, "models");
     CONFIG_PATH = path2.join(EXE_AI_DIR, "config.json");
+    COO_AGENT_NAME = "exe";
     LEGACY_LANCE_PATH = path2.join(EXE_AI_DIR, "local.lance");
     CURRENT_CONFIG_VERSION = 1;
     DEFAULT_CONFIG = {