@askexenow/exe-os 0.8.40 → 0.8.41

package/dist/bin/cli.js

@@ -31,6 +31,7 @@ var config_exports = {};
 __export(config_exports, {
   CONFIG_MIGRATIONS: () => CONFIG_MIGRATIONS,
   CONFIG_PATH: () => CONFIG_PATH,
+  COO_AGENT_NAME: () => COO_AGENT_NAME,
   CURRENT_CONFIG_VERSION: () => CURRENT_CONFIG_VERSION,
   DB_PATH: () => DB_PATH,
   EXE_AI_DIR: () => EXE_AI_DIR,
@@ -186,7 +187,7 @@ async function loadConfigFrom(configPath) {
     return { ...DEFAULT_CONFIG };
   }
 }
-var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
+var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, COO_AGENT_NAME, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
 var init_config = __esm({
   "src/lib/config.ts"() {
     "use strict";
@@ -194,6 +195,7 @@ var init_config = __esm({
     DB_PATH = path.join(EXE_AI_DIR, "memories.db");
     MODELS_DIR = path.join(EXE_AI_DIR, "models");
     CONFIG_PATH = path.join(EXE_AI_DIR, "config.json");
+    COO_AGENT_NAME = "exe";
     LEGACY_LANCE_PATH = path.join(EXE_AI_DIR, "local.lance");
     CURRENT_CONFIG_VERSION = 1;
     DEFAULT_CONFIG = {
@@ -16901,7 +16903,7 @@ async function listTasks(input) {
   }
   const where = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
   const result = await client.execute({
-    sql: `SELECT * FROM tasks ${where} ORDER BY CASE status WHEN 'blocked' THEN 0 WHEN 'in_progress' THEN 1 WHEN 'open' THEN 2 ELSE 3 END, priority ASC, created_at DESC`,
+    sql: `SELECT * FROM tasks ${where} ORDER BY CASE status WHEN 'blocked' THEN 0 WHEN 'in_progress' THEN 1 WHEN 'open' THEN 2 ELSE 3 END, priority ASC, created_at DESC LIMIT 1000`,
     args: args2
   });
   return result.rows.map((r) => ({
@@ -17122,6 +17124,34 @@ async function listPendingReviews(limit) {
   });
   return result.rows;
 }
+async function cleanupOrphanedReviews() {
+  const client = getClient();
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const r1 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND assigned_by = 'system'
+          AND title LIKE 'Review:%'
+          AND parent_task_id IN (SELECT id FROM tasks WHERE status IN ('done', 'cancelled'))`,
+    args: [now]
+  });
+  const staleThreshold = new Date(Date.now() - 60 * 60 * 1e3).toISOString();
+  const r2 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND result IS NOT NULL
+          AND updated_at < ?`,
+    args: [now, staleThreshold]
+  });
+  const total = r1.rowsAffected + r2.rowsAffected;
+  if (total > 0) {
+    process.stderr.write(
+      `[cleanup] Closed ${total} orphaned review(s): ${r1.rowsAffected} cascade + ${r2.rowsAffected} stale
+`
+    );
+  }
+  return total;
+}
 function getReviewChecklist(role, agent, taskSlug) {
   const roleLower = role.toLowerCase();
   if (roleLower.includes("engineer") || roleLower === "principal engineer") {
@@ -17801,6 +17831,7 @@ var init_skill_learning = __esm({
 // src/lib/tasks.ts
 var tasks_exports = {};
 __export(tasks_exports, {
+  cleanupOrphanedReviews: () => cleanupOrphanedReviews,
   countNewPendingReviewsSince: () => countNewPendingReviewsSince,
   countPendingReviews: () => countPendingReviews,
   createTask: () => createTask,
@@ -17866,6 +17897,21 @@ async function updateTask(input) {
       });
     } catch {
     }
+    try {
+      const client = getClient();
+      const cascaded = await client.execute({
+        sql: `UPDATE tasks SET status = 'done', updated_at = ?
+              WHERE parent_task_id = ? AND status = 'needs_review'`,
+        args: [now, taskId]
+      });
+      if (cascaded.rowsAffected > 0) {
+        process.stderr.write(
+          `[cascade] Closed ${cascaded.rowsAffected} orphaned review task(s) for parent ${taskId}
+`
+        );
+      }
+    } catch {
+    }
   }
   const isTerminal = input.status === "done" || input.status === "needs_review";
   if (isTerminal) {

package/dist/bin/exe-boot.js

@@ -31,6 +31,7 @@ var config_exports = {};
 __export(config_exports, {
   CONFIG_MIGRATIONS: () => CONFIG_MIGRATIONS,
   CONFIG_PATH: () => CONFIG_PATH,
+  COO_AGENT_NAME: () => COO_AGENT_NAME,
   CURRENT_CONFIG_VERSION: () => CURRENT_CONFIG_VERSION,
   DB_PATH: () => DB_PATH,
   EXE_AI_DIR: () => EXE_AI_DIR,
@@ -186,7 +187,7 @@ async function loadConfigFrom(configPath) {
     return { ...DEFAULT_CONFIG };
   }
 }
-var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
+var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, COO_AGENT_NAME, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
 var init_config = __esm({
   "src/lib/config.ts"() {
     "use strict";
@@ -194,6 +195,7 @@ var init_config = __esm({
     DB_PATH = path.join(EXE_AI_DIR, "memories.db");
     MODELS_DIR = path.join(EXE_AI_DIR, "models");
     CONFIG_PATH = path.join(EXE_AI_DIR, "config.json");
+    COO_AGENT_NAME = "exe";
     LEGACY_LANCE_PATH = path.join(EXE_AI_DIR, "local.lance");
     CURRENT_CONFIG_VERSION = 1;
     DEFAULT_CONFIG = {
@@ -3588,7 +3590,7 @@ async function listTasks(input) {
   }
   const where = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
   const result = await client.execute({
-    sql: `SELECT * FROM tasks ${where} ORDER BY CASE status WHEN 'blocked' THEN 0 WHEN 'in_progress' THEN 1 WHEN 'open' THEN 2 ELSE 3 END, priority ASC, created_at DESC`,
+    sql: `SELECT * FROM tasks ${where} ORDER BY CASE status WHEN 'blocked' THEN 0 WHEN 'in_progress' THEN 1 WHEN 'open' THEN 2 ELSE 3 END, priority ASC, created_at DESC LIMIT 1000`,
     args
   });
   return result.rows.map((r) => ({
@@ -3809,6 +3811,34 @@ async function listPendingReviews(limit) {
   });
   return result.rows;
 }
+async function cleanupOrphanedReviews() {
+  const client = getClient();
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const r1 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND assigned_by = 'system'
+          AND title LIKE 'Review:%'
+          AND parent_task_id IN (SELECT id FROM tasks WHERE status IN ('done', 'cancelled'))`,
+    args: [now]
+  });
+  const staleThreshold = new Date(Date.now() - 60 * 60 * 1e3).toISOString();
+  const r2 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND result IS NOT NULL
+          AND updated_at < ?`,
+    args: [now, staleThreshold]
+  });
+  const total = r1.rowsAffected + r2.rowsAffected;
+  if (total > 0) {
+    process.stderr.write(
+      `[cleanup] Closed ${total} orphaned review(s): ${r1.rowsAffected} cascade + ${r2.rowsAffected} stale
+`
+    );
+  }
+  return total;
+}
 function getReviewChecklist(role, agent, taskSlug) {
   const roleLower = role.toLowerCase();
   if (roleLower.includes("engineer") || roleLower === "principal engineer") {
@@ -4446,6 +4476,7 @@ var init_skill_learning = __esm({
 // src/lib/tasks.ts
 var tasks_exports = {};
 __export(tasks_exports, {
+  cleanupOrphanedReviews: () => cleanupOrphanedReviews,
   countNewPendingReviewsSince: () => countNewPendingReviewsSince,
   countPendingReviews: () => countPendingReviews,
   createTask: () => createTask,
@@ -4511,6 +4542,21 @@ async function updateTask(input) {
       });
     } catch {
     }
+    try {
+      const client = getClient();
+      const cascaded = await client.execute({
+        sql: `UPDATE tasks SET status = 'done', updated_at = ?
+              WHERE parent_task_id = ? AND status = 'needs_review'`,
+        args: [now, taskId]
+      });
+      if (cascaded.rowsAffected > 0) {
+        process.stderr.write(
+          `[cascade] Closed ${cascaded.rowsAffected} orphaned review task(s) for parent ${taskId}
+`
+        );
+      }
+    } catch {
+    }
   }
   const isTerminal = input.status === "done" || input.status === "needs_review";
   if (isTerminal) {
@@ -4809,7 +4855,8 @@ __export(cloud_sync_exports, {
   mergeRosterFromRemote: () => mergeRosterFromRemote,
   recordRosterDeletion: () => recordRosterDeletion
 });
-import { readFileSync as readFileSync12, writeFileSync as writeFileSync7, existsSync as existsSync14, readdirSync as readdirSync6, mkdirSync as mkdirSync8, appendFileSync as appendFileSync2, unlinkSync as unlinkSync6 } from "fs";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync7, existsSync as existsSync14, readdirSync as readdirSync6, mkdirSync as mkdirSync8, appendFileSync as appendFileSync2, unlinkSync as unlinkSync6, openSync, closeSync } from "fs";
+import crypto8 from "crypto";
 import path18 from "path";
 import { homedir } from "os";
 function logError(msg) {
@@ -4821,17 +4868,29 @@ function logError(msg) {
   }
 }
 async function withRosterLock(fn) {
-  if (existsSync14(ROSTER_LOCK_PATH)) {
-    try {
-      const ts = parseInt(readFileSync12(ROSTER_LOCK_PATH, "utf-8"), 10);
-      if (Date.now() - ts < LOCK_STALE_MS) {
+  try {
+    const fd = openSync(ROSTER_LOCK_PATH, "wx");
+    closeSync(fd);
+    writeFileSync7(ROSTER_LOCK_PATH, String(Date.now()));
+  } catch (err) {
+    if (err.code === "EEXIST") {
+      try {
+        const ts = parseInt(readFileSync12(ROSTER_LOCK_PATH, "utf-8"), 10);
+        if (Date.now() - ts < LOCK_STALE_MS) {
+          throw new Error("Roster merge already in progress \u2014 another sync is running");
+        }
+        unlinkSync6(ROSTER_LOCK_PATH);
+        const fd = openSync(ROSTER_LOCK_PATH, "wx");
+        closeSync(fd);
+        writeFileSync7(ROSTER_LOCK_PATH, String(Date.now()));
+      } catch (retryErr) {
+        if (retryErr instanceof Error && retryErr.message.includes("already in progress")) throw retryErr;
         throw new Error("Roster merge already in progress \u2014 another sync is running");
       }
-    } catch (err) {
-      if (err instanceof Error && err.message.includes("already in progress")) throw err;
+    } else {
+      throw err;
     }
   }
-  writeFileSync7(ROSTER_LOCK_PATH, String(Date.now()));
   try {
     return await fn();
   } finally {
@@ -5153,7 +5212,7 @@ function buildRosterBlob(paths) {
   }
   const deletedNames = consumeRosterDeletions();
   const content = JSON.stringify({ roster, identities, config, deletedNames });
-  const hash = Buffer.from(content).length;
+  const hash = crypto8.createHash("sha256").update(content).digest("hex").slice(0, 16);
   return { roster, identities, config, deletedNames, version: hash };
 }
 async function cloudPushRoster(config) {
@@ -5682,7 +5741,7 @@ __export(schedules_exports, {
   listSchedules: () => listSchedules,
   parseHumanCron: () => parseHumanCron
 });
-import crypto8 from "crypto";
+import crypto9 from "crypto";
 import { execSync as execSync10 } from "child_process";
 async function ensureDb() {
   if (!isInitialized()) {
@@ -5751,7 +5810,7 @@ function parseHumanCron(input) {
 async function createSchedule(input) {
   await ensureDb();
   const client = getClient();
-  const id = crypto8.randomUUID().slice(0, 8);
+  const id = crypto9.randomUUID().slice(0, 8);
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const prompt = input.prompt ?? input.description;
   await client.execute({
@@ -7036,11 +7095,11 @@ async function boot(options) {
         const thisFile = fileURLToPath3(import.meta.url);
         const backfillPath = path19.resolve(path19.dirname(thisFile), "backfill-vectors.js");
         if (existsSync15(backfillPath)) {
-          const { openSync, closeSync } = await import("fs");
+          const { openSync: openSync2, closeSync: closeSync2 } = await import("fs");
           const workerLogPath = path19.join(EXE_AI_DIR, "workers.log");
           let stderrFd = "ignore";
           try {
-            stderrFd = openSync(workerLogPath, "a");
+            stderrFd = openSync2(workerLogPath, "a");
           } catch {
           }
           const child = spawn(process.execPath, [backfillPath], {
@@ -7049,7 +7108,7 @@ async function boot(options) {
           });
           child.unref();
           if (typeof stderrFd === "number") try {
-            closeSync(stderrFd);
+            closeSync2(stderrFd);
           } catch {
           }
           briefData.embedding.backfillRunning = true;

package/dist/bin/exe-cloud.js

@@ -710,7 +710,8 @@ function isMainModule(importMetaUrl) {
 }
 
 // src/lib/cloud-sync.ts
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync2, existsSync as existsSync6, readdirSync, mkdirSync as mkdirSync2, appendFileSync, unlinkSync } from "fs";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync2, existsSync as existsSync6, readdirSync, mkdirSync as mkdirSync2, appendFileSync, unlinkSync, openSync, closeSync } from "fs";
+import crypto4 from "crypto";
 import path6 from "path";
 import { homedir } from "os";
 
@@ -897,8 +898,17 @@ async function syncMode() {
   console.log("");
   console.log("Run /exe-cloud on the new device and paste these when prompted:\n");
   console.log("  24-word recovery phrase:");
-  console.log(`  ${mnemonic}
+  const showFull = process.argv.includes("--show-full");
+  if (showFull) {
+    console.log(`  ${mnemonic}
 `);
+  } else {
+    const words = mnemonic.split(" ");
+    const masked = words.length > 4 ? [...words.slice(0, 2), ...words.slice(2, -2).map(() => "****"), ...words.slice(-2)].join(" ") : mnemonic;
+    console.log(`  ${masked}
+`);
+    console.log("  To reveal full phrase: run with --show-full\n");
+  }
   console.log("  \u26A0  Clear your terminal history after copying.\n");
   if (config.cloud?.apiKey) {
     const maskedKey = config.cloud.apiKey.slice(0, 10) + "..." + config.cloud.apiKey.slice(-4);

package/dist/bin/exe-doctor.js

@@ -1542,7 +1542,7 @@ async function auditDuplicates(client, flags) {
     if (flags.agent) filterClause += " AND agent_id = ?";
     if (flags.project) filterClause += " AND project_name = ?";
     const ids = await client.execute({
-      sql: `SELECT id FROM memories${filterClause} ORDER BY timestamp DESC`,
+      sql: `SELECT id FROM memories${filterClause} ORDER BY timestamp DESC LIMIT 10000`,
       args: filterArgs
     });
     const allIds = ids.rows.map((r) => r.id);

package/dist/bin/exe-gateway.js

@@ -1192,6 +1192,7 @@ var config_exports = {};
 __export(config_exports, {
   CONFIG_MIGRATIONS: () => CONFIG_MIGRATIONS,
   CONFIG_PATH: () => CONFIG_PATH,
+  COO_AGENT_NAME: () => COO_AGENT_NAME,
   CURRENT_CONFIG_VERSION: () => CURRENT_CONFIG_VERSION,
   DB_PATH: () => DB_PATH,
   EXE_AI_DIR: () => EXE_AI_DIR,
@@ -1347,7 +1348,7 @@ async function loadConfigFrom(configPath) {
     return { ...DEFAULT_CONFIG };
   }
 }
-var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
+var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, COO_AGENT_NAME, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
 var init_config = __esm({
   "src/lib/config.ts"() {
     "use strict";
@@ -1355,6 +1356,7 @@ var init_config = __esm({
     DB_PATH = path.join(EXE_AI_DIR, "memories.db");
     MODELS_DIR = path.join(EXE_AI_DIR, "models");
     CONFIG_PATH = path.join(EXE_AI_DIR, "config.json");
+    COO_AGENT_NAME = "exe";
     LEGACY_LANCE_PATH = path.join(EXE_AI_DIR, "local.lance");
     CURRENT_CONFIG_VERSION = 1;
     DEFAULT_CONFIG = {
@@ -5849,7 +5851,7 @@ async function listTasks(input) {
   }
   const where = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
   const result = await client.execute({
-    sql: `SELECT * FROM tasks ${where} ORDER BY CASE status WHEN 'blocked' THEN 0 WHEN 'in_progress' THEN 1 WHEN 'open' THEN 2 ELSE 3 END, priority ASC, created_at DESC`,
+    sql: `SELECT * FROM tasks ${where} ORDER BY CASE status WHEN 'blocked' THEN 0 WHEN 'in_progress' THEN 1 WHEN 'open' THEN 2 ELSE 3 END, priority ASC, created_at DESC LIMIT 1000`,
     args
   });
   return result.rows.map((r) => ({
@@ -6070,6 +6072,34 @@ async function listPendingReviews(limit) {
   });
   return result.rows;
 }
+async function cleanupOrphanedReviews() {
+  const client = getClient();
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const r1 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND assigned_by = 'system'
+          AND title LIKE 'Review:%'
+          AND parent_task_id IN (SELECT id FROM tasks WHERE status IN ('done', 'cancelled'))`,
+    args: [now]
+  });
+  const staleThreshold = new Date(Date.now() - 60 * 60 * 1e3).toISOString();
+  const r2 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND result IS NOT NULL
+          AND updated_at < ?`,
+    args: [now, staleThreshold]
+  });
+  const total = r1.rowsAffected + r2.rowsAffected;
+  if (total > 0) {
+    process.stderr.write(
+      `[cleanup] Closed ${total} orphaned review(s): ${r1.rowsAffected} cascade + ${r2.rowsAffected} stale
+`
+    );
+  }
+  return total;
+}
 function getReviewChecklist(role, agent, taskSlug) {
   const roleLower = role.toLowerCase();
   if (roleLower.includes("engineer") || roleLower === "principal engineer") {
@@ -6749,6 +6779,7 @@ var init_skill_learning = __esm({
 // src/lib/tasks.ts
 var tasks_exports = {};
 __export(tasks_exports, {
+  cleanupOrphanedReviews: () => cleanupOrphanedReviews,
   countNewPendingReviewsSince: () => countNewPendingReviewsSince,
   countPendingReviews: () => countPendingReviews,
   createTask: () => createTask,
@@ -6814,6 +6845,21 @@ async function updateTask(input) {
       });
     } catch {
     }
+    try {
+      const client = getClient();
+      const cascaded = await client.execute({
+        sql: `UPDATE tasks SET status = 'done', updated_at = ?
+              WHERE parent_task_id = ? AND status = 'needs_review'`,
+        args: [now, taskId]
+      });
+      if (cascaded.rowsAffected > 0) {
+        process.stderr.write(
+          `[cascade] Closed ${cascaded.rowsAffected} orphaned review task(s) for parent ${taskId}
+`
+        );
+      }
+    } catch {
+    }
   }
   const isTerminal = input.status === "done" || input.status === "needs_review";
   if (isTerminal) {

package/dist/bin/exe-link.js

@@ -20,6 +20,7 @@ var config_exports = {};
 __export(config_exports, {
   CONFIG_MIGRATIONS: () => CONFIG_MIGRATIONS,
   CONFIG_PATH: () => CONFIG_PATH,
+  COO_AGENT_NAME: () => COO_AGENT_NAME,
   CURRENT_CONFIG_VERSION: () => CURRENT_CONFIG_VERSION,
   DB_PATH: () => DB_PATH,
   EXE_AI_DIR: () => EXE_AI_DIR,
@@ -175,7 +176,7 @@ async function loadConfigFrom(configPath) {
     return { ...DEFAULT_CONFIG };
   }
 }
-var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
+var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, COO_AGENT_NAME, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
 var init_config = __esm({
   "src/lib/config.ts"() {
     "use strict";
@@ -183,6 +184,7 @@ var init_config = __esm({
     DB_PATH = path2.join(EXE_AI_DIR, "memories.db");
     MODELS_DIR = path2.join(EXE_AI_DIR, "models");
     CONFIG_PATH = path2.join(EXE_AI_DIR, "config.json");
+    COO_AGENT_NAME = "exe";
     LEGACY_LANCE_PATH = path2.join(EXE_AI_DIR, "local.lance");
     CURRENT_CONFIG_VERSION = 1;
     DEFAULT_CONFIG = {
@@ -671,7 +673,8 @@ __export(cloud_sync_exports, {
   mergeRosterFromRemote: () => mergeRosterFromRemote,
   recordRosterDeletion: () => recordRosterDeletion
 });
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync2, existsSync as existsSync6, readdirSync, mkdirSync as mkdirSync2, appendFileSync, unlinkSync } from "fs";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync2, existsSync as existsSync6, readdirSync, mkdirSync as mkdirSync2, appendFileSync, unlinkSync, openSync, closeSync } from "fs";
+import crypto3 from "crypto";
 import path6 from "path";
 import { homedir } from "os";
 function logError(msg) {
@@ -683,17 +686,29 @@ function logError(msg) {
   }
 }
 async function withRosterLock(fn) {
-  if (existsSync6(ROSTER_LOCK_PATH)) {
-    try {
-      const ts = parseInt(readFileSync5(ROSTER_LOCK_PATH, "utf-8"), 10);
-      if (Date.now() - ts < LOCK_STALE_MS) {
+  try {
+    const fd = openSync(ROSTER_LOCK_PATH, "wx");
+    closeSync(fd);
+    writeFileSync2(ROSTER_LOCK_PATH, String(Date.now()));
+  } catch (err) {
+    if (err.code === "EEXIST") {
+      try {
+        const ts = parseInt(readFileSync5(ROSTER_LOCK_PATH, "utf-8"), 10);
+        if (Date.now() - ts < LOCK_STALE_MS) {
+          throw new Error("Roster merge already in progress \u2014 another sync is running");
+        }
+        unlinkSync(ROSTER_LOCK_PATH);
+        const fd = openSync(ROSTER_LOCK_PATH, "wx");
+        closeSync(fd);
+        writeFileSync2(ROSTER_LOCK_PATH, String(Date.now()));
+      } catch (retryErr) {
+        if (retryErr instanceof Error && retryErr.message.includes("already in progress")) throw retryErr;
         throw new Error("Roster merge already in progress \u2014 another sync is running");
       }
-    } catch (err) {
-      if (err instanceof Error && err.message.includes("already in progress")) throw err;
+    } else {
+      throw err;
     }
   }
-  writeFileSync2(ROSTER_LOCK_PATH, String(Date.now()));
   try {
     return await fn();
   } finally {
@@ -1015,7 +1030,7 @@ function buildRosterBlob(paths) {
   }
   const deletedNames = consumeRosterDeletions();
   const content = JSON.stringify({ roster, identities, config, deletedNames });
-  const hash = Buffer.from(content).length;
+  const hash = crypto3.createHash("sha256").update(content).digest("hex").slice(0, 16);
   return { roster, identities, config, deletedNames, version: hash };
 }
 async function cloudPushRoster(config) {
@@ -1684,8 +1699,17 @@ async function main() {
     }
     const mnemonic = exportMnemonic(key);
     console.log("Your 24-word recovery phrase:\n");
-    console.log(`  ${mnemonic}
+    const showFull = process.argv.includes("--show-full");
+    if (showFull) {
+      console.log(`  ${mnemonic}
 `);
+    } else {
+      const words = mnemonic.split(" ");
+      const masked = words.length > 4 ? [...words.slice(0, 2), ...words.slice(2, -2).map(() => "****"), ...words.slice(-2)].join(" ") : mnemonic;
+      console.log(`  ${masked}
+`);
+      console.log("To reveal full phrase: run with --show-full\n");
+    }
     console.log("Write this down and enter it on your new device with /exe-link import.");
     console.log("Anyone with this phrase can decrypt your memories.");
     console.log("\u26A0  Clear your terminal history after copying.");

package/dist/bin/exe-pending-reviews.js

@@ -1509,6 +1509,34 @@ async function listPendingReviews(limit) {
   });
   return result.rows;
 }
+async function cleanupOrphanedReviews() {
+  const client = getClient();
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const r1 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND assigned_by = 'system'
+          AND title LIKE 'Review:%'
+          AND parent_task_id IN (SELECT id FROM tasks WHERE status IN ('done', 'cancelled'))`,
+    args: [now]
+  });
+  const staleThreshold = new Date(Date.now() - 60 * 60 * 1e3).toISOString();
+  const r2 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND result IS NOT NULL
+          AND updated_at < ?`,
+    args: [now, staleThreshold]
+  });
+  const total = r1.rowsAffected + r2.rowsAffected;
+  if (total > 0) {
+    process.stderr.write(
+      `[cleanup] Closed ${total} orphaned review(s): ${r1.rowsAffected} cascade + ${r2.rowsAffected} stale
+`
+    );
+  }
+  return total;
+}
 var init_tasks_review = __esm({
   "src/lib/tasks-review.ts"() {
     "use strict";
@@ -1662,6 +1690,7 @@ init_tasks_review();
 var PENDING_REVIEW_LIMIT = 10;
 async function main() {
   await initStore();
+  await cleanupOrphanedReviews();
   const rows = await listPendingReviews(PENDING_REVIEW_LIMIT);
   if (rows.length > 0) {
     console.log("[REVIEW NOTIFICATIONS]");

package/dist/bin/exe-search.js

@@ -969,6 +969,7 @@ var config_exports = {};
 __export(config_exports, {
   CONFIG_MIGRATIONS: () => CONFIG_MIGRATIONS,
   CONFIG_PATH: () => CONFIG_PATH,
+  COO_AGENT_NAME: () => COO_AGENT_NAME,
   CURRENT_CONFIG_VERSION: () => CURRENT_CONFIG_VERSION,
   DB_PATH: () => DB_PATH,
   EXE_AI_DIR: () => EXE_AI_DIR,
@@ -1124,7 +1125,7 @@ async function loadConfigFrom(configPath) {
     return { ...DEFAULT_CONFIG };
   }
 }
-var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
+var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, COO_AGENT_NAME, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
 var init_config = __esm({
   "src/lib/config.ts"() {
     "use strict";
@@ -1132,6 +1133,7 @@ var init_config = __esm({
     DB_PATH = path2.join(EXE_AI_DIR, "memories.db");
     MODELS_DIR = path2.join(EXE_AI_DIR, "models");
     CONFIG_PATH = path2.join(EXE_AI_DIR, "config.json");
+    COO_AGENT_NAME = "exe";
     LEGACY_LANCE_PATH = path2.join(EXE_AI_DIR, "local.lance");
     CURRENT_CONFIG_VERSION = 1;
     DEFAULT_CONFIG = {

package/dist/bin/exe-session-cleanup.js

@@ -922,6 +922,7 @@ var config_exports = {};
 __export(config_exports, {
   CONFIG_MIGRATIONS: () => CONFIG_MIGRATIONS,
   CONFIG_PATH: () => CONFIG_PATH,
+  COO_AGENT_NAME: () => COO_AGENT_NAME,
   CURRENT_CONFIG_VERSION: () => CURRENT_CONFIG_VERSION,
   DB_PATH: () => DB_PATH,
   EXE_AI_DIR: () => EXE_AI_DIR,
@@ -1077,7 +1078,7 @@ async function loadConfigFrom(configPath) {
     return { ...DEFAULT_CONFIG };
   }
 }
-var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
+var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, COO_AGENT_NAME, LEGACY_LANCE_PATH, CURRENT_CONFIG_VERSION, DEFAULT_CONFIG, CONFIG_MIGRATIONS;
 var init_config = __esm({
   "src/lib/config.ts"() {
     "use strict";
@@ -1085,6 +1086,7 @@ var init_config = __esm({
     DB_PATH = path2.join(EXE_AI_DIR, "memories.db");
     MODELS_DIR = path2.join(EXE_AI_DIR, "models");
     CONFIG_PATH = path2.join(EXE_AI_DIR, "config.json");
+    COO_AGENT_NAME = "exe";
     LEGACY_LANCE_PATH = path2.join(EXE_AI_DIR, "local.lance");
     CURRENT_CONFIG_VERSION = 1;
     DEFAULT_CONFIG = {
@@ -2537,6 +2539,7 @@ var init_tmux_routing = __esm({
 // src/lib/tasks-review.ts
 var tasks_review_exports = {};
 __export(tasks_review_exports, {
+  cleanupOrphanedReviews: () => cleanupOrphanedReviews,
   cleanupReviewFile: () => cleanupReviewFile,
   countNewPendingReviewsSince: () => countNewPendingReviewsSince,
   countPendingReviews: () => countPendingReviews,
@@ -2573,6 +2576,34 @@ async function listPendingReviews(limit) {
   });
   return result.rows;
 }
+async function cleanupOrphanedReviews() {
+  const client = getClient();
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const r1 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND assigned_by = 'system'
+          AND title LIKE 'Review:%'
+          AND parent_task_id IN (SELECT id FROM tasks WHERE status IN ('done', 'cancelled'))`,
+    args: [now]
+  });
+  const staleThreshold = new Date(Date.now() - 60 * 60 * 1e3).toISOString();
+  const r2 = await client.execute({
+    sql: `UPDATE tasks SET status = 'done', updated_at = ?
+          WHERE status = 'needs_review'
+          AND result IS NOT NULL
+          AND updated_at < ?`,
+    args: [now, staleThreshold]
+  });
+  const total = r1.rowsAffected + r2.rowsAffected;
+  if (total > 0) {
+    process.stderr.write(
+      `[cleanup] Closed ${total} orphaned review(s): ${r1.rowsAffected} cascade + ${r2.rowsAffected} stale
+`
+    );
+  }
+  return total;
+}
 function getReviewChecklist(role, agent, taskSlug) {
   const roleLower = role.toLowerCase();
   if (roleLower.includes("engineer") || roleLower === "principal engineer") {

package/dist/bin/exe-settings.js

@@ -208,7 +208,8 @@ function isMainModule(importMetaUrl) {
 }
 
 // src/lib/cloud-sync.ts
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync2, existsSync as existsSync5, readdirSync, mkdirSync as mkdirSync2, appendFileSync, unlinkSync } from "fs";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync2, existsSync as existsSync5, readdirSync, mkdirSync as mkdirSync2, appendFileSync, unlinkSync, openSync, closeSync } from "fs";
+import crypto2 from "crypto";
 import path5 from "path";
 import { homedir } from "os";