@askexenow/exe-os 0.8.61 → 0.8.63

package/dist/bin/exe-kill.js

@@ -1546,7 +1546,6 @@ import { readFile, writeFile, unlink, mkdir, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import path from "path";
 import os from "os";
-import crypto from "crypto";
 var SERVICE = "exe-mem";
 var ACCOUNT = "master-key";
 function getKeyDir() {
@@ -1864,7 +1863,7 @@ function vectorToBlob(vector) {
 
 // src/lib/session-kill-telemetry.ts
 init_database();
-import crypto2 from "crypto";
+import crypto from "crypto";
 async function recordSessionKill(input) {
   try {
     const client = getClient();
@@ -1874,7 +1873,7 @@ async function recordSessionKill(input) {
                ticks_idle, estimated_tokens_saved)
             VALUES (?, ?, ?, ?, ?, ?, ?)`,
       args: [
-        crypto2.randomUUID(),
+        crypto.randomUUID(),
         input.sessionName,
         input.agentId,
         (/* @__PURE__ */ new Date()).toISOString(),

package/dist/bin/exe-launch-agent.js

@@ -2488,7 +2488,6 @@ import { readFile, writeFile, unlink, mkdir, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import path from "path";
 import os from "os";
-import crypto from "crypto";
 var SERVICE = "exe-mem";
 var ACCOUNT = "master-key";
 function getKeyDir() {
@@ -2818,7 +2817,7 @@ import {
 
 // src/lib/behaviors.ts
 init_database();
-import crypto2 from "crypto";
+import crypto from "crypto";
 async function listBehaviors(agentId, projectName, limit = 30) {
   const client = getClient();
   const result = await client.execute({

package/dist/bin/exe-link.js

@@ -1,12 +1,6 @@
 #!/usr/bin/env node
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
 };
@@ -271,13 +265,13 @@ __export(crypto_exports, {
   initSyncCrypto: () => initSyncCrypto,
   isSyncCryptoInitialized: () => isSyncCryptoInitialized
 });
-import crypto2 from "crypto";
+import crypto from "crypto";
 function initSyncCrypto(masterKey) {
   if (masterKey.length !== 32) {
     throw new Error(`Master key must be 32 bytes, got ${masterKey.length}`);
   }
   _syncKey = Buffer.from(
-    crypto2.hkdfSync("sha256", masterKey, "", SYNC_HKDF_INFO, 32)
+    crypto.hkdfSync("sha256", masterKey, "", SYNC_HKDF_INFO, 32)
   );
 }
 function isSyncCryptoInitialized() {
@@ -291,8 +285,8 @@ function requireSyncKey() {
 }
 function encryptSyncBlob(data) {
   const key = requireSyncKey();
-  const iv = crypto2.randomBytes(IV_LENGTH);
-  const cipher = crypto2.createCipheriv(ALGORITHM, key, iv);
+  const iv = crypto.randomBytes(IV_LENGTH);
+  const cipher = crypto.createCipheriv(ALGORITHM, key, iv);
   const encrypted = Buffer.concat([cipher.update(data), cipher.final()]);
   const tag = cipher.getAuthTag();
   return Buffer.concat([iv, encrypted, tag]).toString("base64");
@@ -306,7 +300,7 @@ function decryptSyncBlob(ciphertext) {
   const iv = combined.subarray(0, IV_LENGTH);
   const tag = combined.subarray(combined.length - TAG_LENGTH);
   const encrypted = combined.subarray(IV_LENGTH, combined.length - TAG_LENGTH);
-  const decipher = crypto2.createDecipheriv(ALGORITHM, key, iv);
+  const decipher = crypto.createDecipheriv(ALGORITHM, key, iv);
   decipher.setAuthTag(tag);
   return Buffer.concat([decipher.update(encrypted), decipher.final()]);
 }
@@ -501,7 +495,7 @@ __export(cloud_sync_exports, {
   recordRosterDeletion: () => recordRosterDeletion
 });
 import { readFileSync as readFileSync4, writeFileSync as writeFileSync2, existsSync as existsSync5, readdirSync, mkdirSync as mkdirSync2, appendFileSync, unlinkSync, openSync, closeSync } from "fs";
-import crypto3 from "crypto";
+import crypto2 from "crypto";
 import path5 from "path";
 import { homedir } from "os";
 function sqlSafe(v) {
@@ -884,7 +878,7 @@ function buildRosterBlob(paths) {
   }
   const deletedNames = consumeRosterDeletions();
   const content = JSON.stringify({ roster, identities, config, deletedNames });
-  const hash = crypto3.createHash("sha256").update(content).digest("hex").slice(0, 16);
+  const hash = crypto2.createHash("sha256").update(content).digest("hex").slice(0, 16);
   return { roster, identities, config, deletedNames, version: hash };
 }
 async function cloudPushRoster(config) {
@@ -974,21 +968,30 @@ async function mergeRosterFromRemote(remote, paths) {
     const localEmployees = await loadEmployees(rosterPath);
     const localNames = new Set(localEmployees.map((e) => e.name));
     let added = 0;
+    let identitiesUpdated = 0;
     for (const remoteEmp of remote.roster) {
-      if (localNames.has(remoteEmp.name)) continue;
-      localEmployees.push(remoteEmp);
-      localNames.add(remoteEmp.name);
-      added++;
-      if (remote.identities[`${remoteEmp.name}.md`]) {
+      if (!localNames.has(remoteEmp.name)) {
+        localEmployees.push(remoteEmp);
+        localNames.add(remoteEmp.name);
+        added++;
+        try {
+          registerBinSymlinks(remoteEmp.name);
+        } catch {
+        }
+      }
+      const remoteIdentity = remote.identities[`${remoteEmp.name}.md`];
+      if (remoteIdentity) {
         if (!existsSync5(identityDir)) mkdirSync2(identityDir, { recursive: true });
         const idPath = path5.join(identityDir, `${remoteEmp.name}.md`);
-        if (!existsSync5(idPath)) {
-          writeFileSync2(idPath, remote.identities[`${remoteEmp.name}.md`], "utf-8");
+        let localIdentity = null;
+        try {
+          localIdentity = existsSync5(idPath) ? readFileSync4(idPath, "utf-8") : null;
+        } catch {
+        }
+        if (localIdentity !== remoteIdentity) {
+          writeFileSync2(idPath, remoteIdentity, "utf-8");
+          identitiesUpdated++;
         }
-      }
-      try {
-        registerBinSymlinks(remoteEmp.name);
-      } catch {
       }
     }
     let removed = 0;
@@ -1010,7 +1013,7 @@ async function mergeRosterFromRemote(remote, paths) {
       } catch {
       }
     }
-    return { added };
+    return { added, identitiesUpdated };
   });
 }
 async function cloudPushBlob(route, data, metaKey, config) {
@@ -1457,7 +1460,6 @@ import { readFile, writeFile, unlink, mkdir, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import path from "path";
 import os from "os";
-import crypto from "crypto";
 var SERVICE = "exe-mem";
 var ACCOUNT = "master-key";
 function getKeyDir() {
@@ -1511,65 +1513,34 @@ async function setMasterKey(key) {
   await writeFile(keyPath, b64 + "\n", "utf-8");
   await chmod(keyPath, 384);
 }
-function exportMnemonic(key) {
-  if (key.length !== 32) {
-    throw new Error(`Key must be 32 bytes, got ${key.length}`);
-  }
-  const hash = crypto.createHash("sha256").update(key).digest();
-  const checksumByte = hash[0];
-  let bits = "";
-  for (const byte of key) {
-    bits += byte.toString(2).padStart(8, "0");
-  }
-  bits += checksumByte.toString(2).padStart(8, "0");
-  const words = [];
-  let wordlist;
+async function loadBip39() {
   try {
-    const bip39 = __require("bip39");
-    wordlist = bip39.wordlists?.english ?? bip39.default?.wordlists?.english;
-    if (!wordlist) throw new Error("no wordlist");
+    return await import("bip39");
   } catch {
-    throw new Error("bip39 package required. Install with: npm install bip39");
+    throw new Error(
+      "bip39 package not found. Run: npm install -g bip39\nOr reinstall exe-os: npm install -g @askexenow/exe-os"
+    );
   }
-  for (let i = 0; i < 264; i += 11) {
-    const index = parseInt(bits.slice(i, i + 11), 2);
-    words.push(wordlist[index]);
+}
+async function exportMnemonic(key) {
+  if (key.length !== 32) {
+    throw new Error(`Key must be 32 bytes, got ${key.length}`);
   }
-  return words.join(" ");
+  const { entropyToMnemonic } = await loadBip39();
+  return entropyToMnemonic(key.toString("hex"));
 }
-function importMnemonic(mnemonic) {
-  const words = mnemonic.trim().split(/\s+/);
+async function importMnemonic(mnemonic) {
+  const trimmed = mnemonic.trim();
+  const words = trimmed.split(/\s+/);
   if (words.length !== 24) {
     throw new Error(`Expected 24 words, got ${words.length}`);
   }
-  let wordlist;
-  try {
-    const bip39 = __require("bip39");
-    wordlist = bip39.wordlists?.english ?? bip39.default?.wordlists?.english;
-    if (!wordlist) throw new Error("no wordlist");
-  } catch {
-    throw new Error("bip39 package required. Install with: npm install bip39");
-  }
-  let bits = "";
-  for (const word of words) {
-    const index = wordlist.indexOf(word.toLowerCase());
-    if (index === -1) {
-      throw new Error(`Invalid BIP39 word: "${word}"`);
-    }
-    bits += index.toString(2).padStart(11, "0");
-  }
-  const entropyBits = bits.slice(0, 256);
-  const checksumBits = bits.slice(256, 264);
-  const key = Buffer.alloc(32);
-  for (let i = 0; i < 32; i++) {
-    key[i] = parseInt(entropyBits.slice(i * 8, (i + 1) * 8), 2);
-  }
-  const hash = crypto.createHash("sha256").update(key).digest();
-  const expectedChecksum = hash[0].toString(2).padStart(8, "0");
-  if (checksumBits !== expectedChecksum) {
-    throw new Error("Invalid mnemonic checksum");
+  const { validateMnemonic, mnemonicToEntropy } = await loadBip39();
+  if (!validateMnemonic(trimmed)) {
+    throw new Error("Invalid mnemonic \u2014 check for typos or missing words");
   }
-  return key;
+  const entropy = mnemonicToEntropy(trimmed);
+  return Buffer.from(entropy, "hex");
 }
 
 // src/lib/is-main.ts
@@ -1595,7 +1566,7 @@ async function main() {
       console.error("No master key found. Run /exe-setup first.");
       process.exit(1);
     }
-    const mnemonic = exportMnemonic(key);
+    const mnemonic = await exportMnemonic(key);
     console.log("Your 24-word recovery phrase:\n");
     const showFull = process.argv.includes("--show-full");
     if (showFull) {
@@ -1620,7 +1591,7 @@ async function main() {
       });
     });
     try {
-      const key = importMnemonic(mnemonic);
+      const key = await importMnemonic(mnemonic);
       await setMasterKey(key);
       console.log("Master key imported and stored securely.");
       try {

package/dist/bin/exe-pending-messages.js

@@ -1727,7 +1727,6 @@ import { readFile, writeFile, unlink, mkdir, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import path from "path";
 import os from "os";
-import crypto from "crypto";
 var SERVICE = "exe-mem";
 var ACCOUNT = "master-key";
 function getKeyDir() {
@@ -1849,7 +1848,7 @@ async function initStore(options) {
 // src/lib/messaging.ts
 init_database();
 init_tmux_routing();
-import crypto2 from "crypto";
+import crypto from "crypto";
 function rowToMessage(row) {
   return {
     id: row.id,

package/dist/bin/exe-pending-notifications.js

@@ -1535,7 +1535,6 @@ import { readFile, writeFile, unlink, mkdir, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import path from "path";
 import os from "os";
-import crypto from "crypto";
 var SERVICE = "exe-mem";
 var ACCOUNT = "master-key";
 function getKeyDir() {

package/dist/bin/exe-pending-reviews.js

@@ -1597,7 +1597,7 @@ var init_employees = __esm({
 });
 
 // src/lib/notifications.ts
-import crypto2 from "crypto";
+import crypto from "crypto";
 import path5 from "path";
 import os3 from "os";
 import {
@@ -1817,7 +1817,6 @@ import { readFile, writeFile, unlink, mkdir, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import path from "path";
 import os from "os";
-import crypto from "crypto";
 var SERVICE = "exe-mem";
 var ACCOUNT = "master-key";
 function getKeyDir() {

package/dist/bin/exe-review.js

@@ -1563,7 +1563,6 @@ import { readFile as readFile3, writeFile as writeFile3, unlink, mkdir as mkdir3
 import { existsSync as existsSync3 } from "fs";
 import path3 from "path";
 import os2 from "os";
-import crypto from "crypto";
 var SERVICE = "exe-mem";
 var ACCOUNT = "master-key";
 function getKeyDir() {

package/dist/bin/exe-search.js

@@ -938,7 +938,6 @@ import { readFile, writeFile, unlink, mkdir, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import path from "path";
 import os from "os";
-import crypto from "crypto";
 function getKeyDir() {
   return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path.join(os.homedir(), ".exe-os");
 }
@@ -2753,7 +2752,7 @@ __export(file_grep_exports, {
 import { execSync as execSync2 } from "child_process";
 import { readFileSync as readFileSync3, readdirSync as readdirSync2, statSync as statSync2, existsSync as existsSync5 } from "fs";
 import path6 from "path";
-import crypto2 from "crypto";
+import crypto from "crypto";
 function hasRipgrep() {
   if (_hasRg === null) {
     try {
@@ -2786,7 +2785,7 @@ async function grepProjectFiles(query, projectRoot, options) {
     const chunkCtx = getChunkContext(hit.filePath, hit.lineNumber);
     const prefix = chunkCtx ? `[file: ${hit.filePath}:${hit.lineNumber} in ${chunkCtx}]` : `[file: ${hit.filePath}:${hit.lineNumber}]`;
     return {
-      id: crypto2.createHash("sha256").update(`${hit.filePath}:${hit.lineNumber}`).digest("hex").slice(0, 36),
+      id: crypto.createHash("sha256").update(`${hit.filePath}:${hit.lineNumber}`).digest("hex").slice(0, 36),
       agent_id: "project",
       agent_role: "file",
       session_id: "file-grep",

package/dist/bin/exe-session-cleanup.js

@@ -2583,7 +2583,7 @@ var init_embedder = __esm({
 });
 
 // src/lib/notifications.ts
-import crypto2 from "crypto";
+import crypto from "crypto";
 import path12 from "path";
 import os6 from "os";
 import {
@@ -2596,7 +2596,7 @@ import {
 async function writeNotification(notification) {
   try {
     const client = getClient();
-    const id = crypto2.randomUUID();
+    const id = crypto.randomUUID();
     const now = (/* @__PURE__ */ new Date()).toISOString();
     await client.execute({
       sql: `INSERT INTO notifications (id, agent_id, agent_role, event, project, summary, task_file, read, created_at)
@@ -3140,7 +3140,7 @@ var init_worktree = __esm({
 });
 
 // src/bin/exe-session-cleanup.ts
-import crypto3 from "crypto";
+import crypto2 from "crypto";
 import { execSync as execSync6 } from "child_process";
 
 // src/lib/store.ts
@@ -3152,7 +3152,6 @@ import { readFile, writeFile, unlink, mkdir, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import path from "path";
 import os from "os";
-import crypto from "crypto";
 var SERVICE = "exe-mem";
 var ACCOUNT = "master-key";
 function getKeyDir() {
@@ -3526,7 +3525,7 @@ try {
       } catch {
       }
       await writeMemory({
-        id: crypto3.randomUUID(),
+        id: crypto2.randomUUID(),
         agent_id: agentName,
         agent_role: "employee",
         session_id: `cleanup-${Date.now()}`,

package/dist/bin/exe-status.js

@@ -1933,7 +1933,6 @@ import { readFile as readFile3, writeFile as writeFile3, unlink, mkdir as mkdir3
 import { existsSync as existsSync3 } from "fs";
 import path3 from "path";
 import os2 from "os";
-import crypto from "crypto";
 var SERVICE = "exe-mem";
 var ACCOUNT = "master-key";
 function getKeyDir() {

package/dist/bin/exe-team.js

@@ -1554,7 +1554,6 @@ import { readFile as readFile3, writeFile as writeFile3, unlink, mkdir as mkdir3
 import { existsSync as existsSync3 } from "fs";
 import path3 from "path";
 import os2 from "os";
-import crypto from "crypto";
 var SERVICE = "exe-mem";
 var ACCOUNT = "master-key";
 function getKeyDir() {

package/dist/bin/git-sweep.js

@@ -4067,7 +4067,6 @@ import { readFile as readFile4, writeFile as writeFile5, unlink, mkdir as mkdir4
 import { existsSync as existsSync11 } from "fs";
 import path14 from "path";
 import os6 from "os";
-import crypto6 from "crypto";
 function getKeyDir() {
   return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path14.join(os6.homedir(), ".exe-os");
 }

package/dist/bin/graph-backfill.js

@@ -1543,7 +1543,6 @@ import { readFile, writeFile, unlink, mkdir, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import path from "path";
 import os from "os";
-import crypto from "crypto";
 var SERVICE = "exe-mem";
 var ACCOUNT = "master-key";
 function getKeyDir() {
@@ -1863,7 +1862,7 @@ function vectorToBlob(vector) {
 init_database();
 
 // src/lib/graph-rag.ts
-import crypto2 from "crypto";
+import crypto from "crypto";
 
 // src/lib/code-chunker.ts
 import ts from "typescript";
@@ -2046,7 +2045,7 @@ function normalizeEntityName(name) {
 }
 function entityId(name, type) {
   const normalized = normalizeEntityName(name);
-  return crypto2.createHash("sha256").update(`${normalized}::${type.toLowerCase()}`).digest("hex").slice(0, 16);
+  return crypto.createHash("sha256").update(`${normalized}::${type.toLowerCase()}`).digest("hex").slice(0, 16);
 }
 async function resolveAlias(client, name) {
   const normalized = normalizeEntityName(name);
@@ -2301,7 +2300,7 @@ async function storeExtraction(client, extraction, memoryId, timestamp) {
     const targetAlias = await resolveAlias(client, r.target);
     const sourceId = sourceAlias ?? entityId(r.source, r.sourceType);
     const targetId = targetAlias ?? entityId(r.target, r.targetType);
-    const relId = crypto2.randomUUID().slice(0, 16);
+    const relId = crypto.randomUUID().slice(0, 16);
     try {
       await client.execute({
         sql: `INSERT OR IGNORE INTO entities (id, name, type, first_seen, last_seen)
@@ -2347,7 +2346,7 @@ async function storeExtraction(client, extraction, memoryId, timestamp) {
     }
   }
   for (const h of extraction.hyperedges) {
-    const hId = crypto2.randomUUID().slice(0, 16);
+    const hId = crypto.randomUUID().slice(0, 16);
     try {
       await client.execute({
         sql: `INSERT OR IGNORE INTO hyperedges (id, label, relation, confidence, timestamp)
@@ -2411,7 +2410,7 @@ async function extractBatch(client, batchSize = 50, model = "claude-haiku-4-5-20
         totalEntities += stored.entitiesStored;
         totalRelationships += stored.relationshipsStored;
       }
-      const contentHash = crypto2.createHash("sha256").update(rawContent).digest("hex").slice(0, 32);
+      const contentHash = crypto.createHash("sha256").update(rawContent).digest("hex").slice(0, 32);
       await client.execute({
         sql: "UPDATE memories SET graph_extracted = 1, content_hash = ?, graph_extracted_hash = ? WHERE id = ?",
         args: [contentHash, contentHash, memoryId]

package/dist/bin/graph-export.js

@@ -1547,7 +1547,6 @@ import { readFile, writeFile, unlink, mkdir, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import path from "path";
 import os from "os";
-import crypto from "crypto";
 var SERVICE = "exe-mem";
 var ACCOUNT = "master-key";
 function getKeyDir() {

package/dist/bin/scan-tasks.js

@@ -4061,7 +4061,6 @@ import { readFile as readFile4, writeFile as writeFile5, unlink, mkdir as mkdir4
 import { existsSync as existsSync11 } from "fs";
 import path14 from "path";
 import os6 from "os";
-import crypto6 from "crypto";
 function getKeyDir() {
   return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path14.join(os6.homedir(), ".exe-os");
 }