@askexenow/exe-os 0.8.61 → 0.8.63

package/dist/hooks/summary-worker.js

@@ -976,7 +976,6 @@ import { readFile, writeFile, unlink, mkdir, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import path from "path";
 import os from "os";
-import crypto from "crypto";
 function getKeyDir() {
   return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path.join(os.homedir(), ".exe-os");
 }
@@ -1041,65 +1040,34 @@ async function deleteMasterKey() {
     await unlink(keyPath);
   }
 }
-function exportMnemonic(key) {
-  if (key.length !== 32) {
-    throw new Error(`Key must be 32 bytes, got ${key.length}`);
-  }
-  const hash = crypto.createHash("sha256").update(key).digest();
-  const checksumByte = hash[0];
-  let bits = "";
-  for (const byte of key) {
-    bits += byte.toString(2).padStart(8, "0");
-  }
-  bits += checksumByte.toString(2).padStart(8, "0");
-  const words = [];
-  let wordlist;
+async function loadBip39() {
   try {
-    const bip39 = __require("bip39");
-    wordlist = bip39.wordlists?.english ?? bip39.default?.wordlists?.english;
-    if (!wordlist) throw new Error("no wordlist");
+    return await import("bip39");
   } catch {
-    throw new Error("bip39 package required. Install with: npm install bip39");
+    throw new Error(
+      "bip39 package not found. Run: npm install -g bip39\nOr reinstall exe-os: npm install -g @askexenow/exe-os"
+    );
   }
-  for (let i = 0; i < 264; i += 11) {
-    const index = parseInt(bits.slice(i, i + 11), 2);
-    words.push(wordlist[index]);
+}
+async function exportMnemonic(key) {
+  if (key.length !== 32) {
+    throw new Error(`Key must be 32 bytes, got ${key.length}`);
   }
-  return words.join(" ");
+  const { entropyToMnemonic } = await loadBip39();
+  return entropyToMnemonic(key.toString("hex"));
 }
-function importMnemonic(mnemonic) {
-  const words = mnemonic.trim().split(/\s+/);
+async function importMnemonic(mnemonic) {
+  const trimmed = mnemonic.trim();
+  const words = trimmed.split(/\s+/);
   if (words.length !== 24) {
     throw new Error(`Expected 24 words, got ${words.length}`);
   }
-  let wordlist;
-  try {
-    const bip39 = __require("bip39");
-    wordlist = bip39.wordlists?.english ?? bip39.default?.wordlists?.english;
-    if (!wordlist) throw new Error("no wordlist");
-  } catch {
-    throw new Error("bip39 package required. Install with: npm install bip39");
-  }
-  let bits = "";
-  for (const word of words) {
-    const index = wordlist.indexOf(word.toLowerCase());
-    if (index === -1) {
-      throw new Error(`Invalid BIP39 word: "${word}"`);
-    }
-    bits += index.toString(2).padStart(11, "0");
-  }
-  const entropyBits = bits.slice(0, 256);
-  const checksumBits = bits.slice(256, 264);
-  const key = Buffer.alloc(32);
-  for (let i = 0; i < 32; i++) {
-    key[i] = parseInt(entropyBits.slice(i * 8, (i + 1) * 8), 2);
+  const { validateMnemonic, mnemonicToEntropy } = await loadBip39();
+  if (!validateMnemonic(trimmed)) {
+    throw new Error("Invalid mnemonic \u2014 check for typos or missing words");
   }
-  const hash = crypto.createHash("sha256").update(key).digest();
-  const expectedChecksum = hash[0].toString(2).padStart(8, "0");
-  if (checksumBits !== expectedChecksum) {
-    throw new Error("Invalid mnemonic checksum");
-  }
-  return key;
+  const entropy = mnemonicToEntropy(trimmed);
+  return Buffer.from(entropy, "hex");
 }
 var SERVICE, ACCOUNT;
 var init_keychain = __esm({
@@ -1836,7 +1804,7 @@ ${p.content}`).join("\n\n");
 });
 
 // src/lib/notifications.ts
-import crypto2 from "crypto";
+import crypto from "crypto";
 import path4 from "path";
 import os3 from "os";
 import {
@@ -1849,7 +1817,7 @@ import {
 async function writeNotification(notification) {
   try {
     const client = getClient();
-    const id = crypto2.randomUUID();
+    const id = crypto.randomUUID();
     const now = (/* @__PURE__ */ new Date()).toISOString();
     await client.execute({
       sql: `INSERT INTO notifications (id, agent_id, agent_role, event, project, summary, task_file, read, created_at)
@@ -3258,13 +3226,13 @@ __export(crypto_exports, {
   initSyncCrypto: () => initSyncCrypto,
   isSyncCryptoInitialized: () => isSyncCryptoInitialized
 });
-import crypto3 from "crypto";
+import crypto2 from "crypto";
 function initSyncCrypto(masterKey) {
   if (masterKey.length !== 32) {
     throw new Error(`Master key must be 32 bytes, got ${masterKey.length}`);
   }
   _syncKey = Buffer.from(
-    crypto3.hkdfSync("sha256", masterKey, "", SYNC_HKDF_INFO, 32)
+    crypto2.hkdfSync("sha256", masterKey, "", SYNC_HKDF_INFO, 32)
   );
 }
 function isSyncCryptoInitialized() {
@@ -3278,8 +3246,8 @@ function requireSyncKey() {
 }
 function encryptSyncBlob(data) {
   const key = requireSyncKey();
-  const iv = crypto3.randomBytes(IV_LENGTH);
-  const cipher = crypto3.createCipheriv(ALGORITHM, key, iv);
+  const iv = crypto2.randomBytes(IV_LENGTH);
+  const cipher = crypto2.createCipheriv(ALGORITHM, key, iv);
   const encrypted = Buffer.concat([cipher.update(data), cipher.final()]);
   const tag = cipher.getAuthTag();
   return Buffer.concat([iv, encrypted, tag]).toString("base64");
@@ -3293,7 +3261,7 @@ function decryptSyncBlob(ciphertext) {
   const iv = combined.subarray(0, IV_LENGTH);
   const tag = combined.subarray(combined.length - TAG_LENGTH);
   const encrypted = combined.subarray(IV_LENGTH, combined.length - TAG_LENGTH);
-  const decipher = crypto3.createDecipheriv(ALGORITHM, key, iv);
+  const decipher = crypto2.createDecipheriv(ALGORITHM, key, iv);
   decipher.setAuthTag(tag);
   return Buffer.concat([decipher.update(encrypted), decipher.final()]);
 }
@@ -3358,7 +3326,7 @@ __export(cloud_sync_exports, {
   recordRosterDeletion: () => recordRosterDeletion
 });
 import { readFileSync as readFileSync9, writeFileSync as writeFileSync5, existsSync as existsSync12, readdirSync as readdirSync4, mkdirSync as mkdirSync6, appendFileSync as appendFileSync2, unlinkSync as unlinkSync4, openSync as openSync2, closeSync as closeSync2 } from "fs";
-import crypto4 from "crypto";
+import crypto3 from "crypto";
 import path13 from "path";
 import { homedir } from "os";
 function sqlSafe(v) {
@@ -3741,7 +3709,7 @@ function buildRosterBlob(paths) {
   }
   const deletedNames = consumeRosterDeletions();
   const content = JSON.stringify({ roster, identities, config, deletedNames });
-  const hash = crypto4.createHash("sha256").update(content).digest("hex").slice(0, 16);
+  const hash = crypto3.createHash("sha256").update(content).digest("hex").slice(0, 16);
   return { roster, identities, config, deletedNames, version: hash };
 }
 async function cloudPushRoster(config) {
@@ -3831,21 +3799,30 @@ async function mergeRosterFromRemote(remote, paths) {
     const localEmployees = await loadEmployees(rosterPath);
     const localNames = new Set(localEmployees.map((e) => e.name));
     let added = 0;
+    let identitiesUpdated = 0;
     for (const remoteEmp of remote.roster) {
-      if (localNames.has(remoteEmp.name)) continue;
-      localEmployees.push(remoteEmp);
-      localNames.add(remoteEmp.name);
-      added++;
-      if (remote.identities[`${remoteEmp.name}.md`]) {
+      if (!localNames.has(remoteEmp.name)) {
+        localEmployees.push(remoteEmp);
+        localNames.add(remoteEmp.name);
+        added++;
+        try {
+          registerBinSymlinks(remoteEmp.name);
+        } catch {
+        }
+      }
+      const remoteIdentity = remote.identities[`${remoteEmp.name}.md`];
+      if (remoteIdentity) {
         if (!existsSync12(identityDir)) mkdirSync6(identityDir, { recursive: true });
         const idPath = path13.join(identityDir, `${remoteEmp.name}.md`);
-        if (!existsSync12(idPath)) {
-          writeFileSync5(idPath, remote.identities[`${remoteEmp.name}.md`], "utf-8");
+        let localIdentity = null;
+        try {
+          localIdentity = existsSync12(idPath) ? readFileSync9(idPath, "utf-8") : null;
+        } catch {
+        }
+        if (localIdentity !== remoteIdentity) {
+          writeFileSync5(idPath, remoteIdentity, "utf-8");
+          identitiesUpdated++;
         }
-      }
-      try {
-        registerBinSymlinks(remoteEmp.name);
-      } catch {
       }
     }
     let removed = 0;
@@ -3867,7 +3844,7 @@ async function mergeRosterFromRemote(remote, paths) {
       } catch {
       }
     }
-    return { added };
+    return { added, identitiesUpdated };
   });
 }
 async function cloudPushBlob(route, data, metaKey, config) {
@@ -4592,7 +4569,7 @@ function vectorToBlob(vector) {
 init_database();
 init_notifications();
 init_task_scope();
-import crypto5 from "crypto";
+import crypto4 from "crypto";
 import { execSync as execSync4 } from "child_process";
 import { existsSync as existsSync13, mkdirSync as mkdirSync7, openSync as openSync3, closeSync as closeSync3 } from "fs";
 import path14 from "path";
@@ -4666,7 +4643,7 @@ async function main() {
     process.exit(0);
   }
   await writeMemory({
-    id: crypto5.randomUUID(),
+    id: crypto4.randomUUID(),
     agent_id: agentId,
     agent_role: agentRole,
     session_id: `auto-summary-${Date.now()}`,

package/dist/index.js

@@ -4219,7 +4219,6 @@ import { readFile as readFile4, writeFile as writeFile5, unlink, mkdir as mkdir4
 import { existsSync as existsSync11 } from "fs";
 import path15 from "path";
 import os7 from "os";
-import crypto6 from "crypto";
 function getKeyDir() {
   return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path15.join(os7.homedir(), ".exe-os");
 }
@@ -5379,7 +5378,7 @@ __export(error_detector_exports, {
   errorFingerprint: () => errorFingerprint,
   isExeOsError: () => isExeOsError
 });
-import crypto7 from "crypto";
+import crypto6 from "crypto";
 function isRealStderr(stderr) {
   const lines = stderr.trim().split("\n");
   const meaningful = lines.filter(
@@ -5450,7 +5449,7 @@ function classifyError(errorText) {
 }
 function errorFingerprint(toolName, errorText) {
   const normalized = errorText.replace(/\d{4}-\d{2}-\d{2}T[\d:.]+Z/g, "TIMESTAMP").replace(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/gi, "UUID").replace(/\/Users\/[^\s]+/g, "PATH").replace(/:\d+:\d+/g, ":LINE:COL").slice(0, 200);
-  return crypto7.createHash("sha256").update(`${toolName}:${normalized}`).digest("hex").slice(0, 16);
+  return crypto6.createHash("sha256").update(`${toolName}:${normalized}`).digest("hex").slice(0, 16);
 }
 var ERROR_PATTERNS, FILE_CONTENT_TOOLS, STDERR_IGNORE_PATTERNS, USER_ERROR_PATTERNS, SYSTEM_BUG_PATTERNS;
 var init_error_detector = __esm({
@@ -6399,10 +6398,10 @@ __export(messaging_exports, {
   sendMessage: () => sendMessage,
   setWsClientSend: () => setWsClientSend
 });
-import crypto9 from "crypto";
+import crypto8 from "crypto";
 function generateUlid() {
   const timestamp = Date.now().toString(36).padStart(10, "0");
-  const random = crypto9.randomBytes(10).toString("hex").slice(0, 16);
+  const random = crypto8.randomBytes(10).toString("hex").slice(0, 16);
   return (timestamp + random).toUpperCase();
 }
 function rowToMessage(row) {
@@ -9088,11 +9087,11 @@ init_crm_bridge();
 
 // src/lib/pipeline-router.ts
 init_database();
-import crypto8 from "crypto";
+import crypto7 from "crypto";
 async function sinkConversationStore(msg, agentResponse, agentName) {
   try {
     const client = getClient();
-    const id = crypto8.randomUUID();
+    const id = crypto7.randomUUID();
     const mediaJson = msg.media ? JSON.stringify(msg.media) : null;
     await client.execute({
       sql: `INSERT INTO conversations
@@ -9142,7 +9141,7 @@ async function sinkMemory(msg, agentResponse, agentName) {
     ].filter(Boolean).join("\n");
     const vector = await embed2(rawText);
     await writeMemory2({
-      id: crypto8.randomUUID(),
+      id: crypto7.randomUUID(),
       agent_id: agentName ?? "gateway",
       agent_role: "gateway",
       session_id: `gateway-${msg.platform}`,

package/dist/lib/cloud-sync.js

@@ -725,21 +725,30 @@ async function mergeRosterFromRemote(remote, paths) {
     const localEmployees = await loadEmployees(rosterPath);
     const localNames = new Set(localEmployees.map((e) => e.name));
     let added = 0;
+    let identitiesUpdated = 0;
     for (const remoteEmp of remote.roster) {
-      if (localNames.has(remoteEmp.name)) continue;
-      localEmployees.push(remoteEmp);
-      localNames.add(remoteEmp.name);
-      added++;
-      if (remote.identities[`${remoteEmp.name}.md`]) {
+      if (!localNames.has(remoteEmp.name)) {
+        localEmployees.push(remoteEmp);
+        localNames.add(remoteEmp.name);
+        added++;
+        try {
+          registerBinSymlinks(remoteEmp.name);
+        } catch {
+        }
+      }
+      const remoteIdentity = remote.identities[`${remoteEmp.name}.md`];
+      if (remoteIdentity) {
         if (!existsSync4(identityDir)) mkdirSync2(identityDir, { recursive: true });
         const idPath = path4.join(identityDir, `${remoteEmp.name}.md`);
-        if (!existsSync4(idPath)) {
-          writeFileSync2(idPath, remote.identities[`${remoteEmp.name}.md`], "utf-8");
+        let localIdentity = null;
+        try {
+          localIdentity = existsSync4(idPath) ? readFileSync4(idPath, "utf-8") : null;
+        } catch {
+        }
+        if (localIdentity !== remoteIdentity) {
+          writeFileSync2(idPath, remoteIdentity, "utf-8");
+          identitiesUpdated++;
         }
-      }
-      try {
-        registerBinSymlinks(remoteEmp.name);
-      } catch {
       }
     }
     let removed = 0;
@@ -761,7 +770,7 @@ async function mergeRosterFromRemote(remote, paths) {
       } catch {
       }
     }
-    return { added };
+    return { added, identitiesUpdated };
   });
 }
 async function cloudPushBlob(route, data, metaKey, config) {

package/dist/lib/consolidation.js

@@ -127,7 +127,6 @@ import { readFile, writeFile, unlink, mkdir, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import path from "path";
 import os from "os";
-import crypto from "crypto";
 
 // src/lib/store.ts
 init_config();

package/dist/lib/exe-daemon.js

@@ -5135,7 +5135,6 @@ import { readFile as readFile4, writeFile as writeFile5, unlink, mkdir as mkdir4
 import { existsSync as existsSync13 } from "fs";
 import path15 from "path";
 import os7 from "os";
-import crypto6 from "crypto";
 function getKeyDir() {
   return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path15.join(os7.homedir(), ".exe-os");
 }
@@ -5200,65 +5199,34 @@ async function deleteMasterKey() {
     await unlink(keyPath);
   }
 }
-function exportMnemonic(key) {
-  if (key.length !== 32) {
-    throw new Error(`Key must be 32 bytes, got ${key.length}`);
-  }
-  const hash = crypto6.createHash("sha256").update(key).digest();
-  const checksumByte = hash[0];
-  let bits = "";
-  for (const byte of key) {
-    bits += byte.toString(2).padStart(8, "0");
-  }
-  bits += checksumByte.toString(2).padStart(8, "0");
-  const words = [];
-  let wordlist;
+async function loadBip39() {
   try {
-    const bip39 = __require("bip39");
-    wordlist = bip39.wordlists?.english ?? bip39.default?.wordlists?.english;
-    if (!wordlist) throw new Error("no wordlist");
+    return await import("bip39");
   } catch {
-    throw new Error("bip39 package required. Install with: npm install bip39");
+    throw new Error(
+      "bip39 package not found. Run: npm install -g bip39\nOr reinstall exe-os: npm install -g @askexenow/exe-os"
+    );
   }
-  for (let i = 0; i < 264; i += 11) {
-    const index = parseInt(bits.slice(i, i + 11), 2);
-    words.push(wordlist[index]);
+}
+async function exportMnemonic(key) {
+  if (key.length !== 32) {
+    throw new Error(`Key must be 32 bytes, got ${key.length}`);
   }
-  return words.join(" ");
+  const { entropyToMnemonic } = await loadBip39();
+  return entropyToMnemonic(key.toString("hex"));
 }
-function importMnemonic(mnemonic) {
-  const words = mnemonic.trim().split(/\s+/);
+async function importMnemonic(mnemonic) {
+  const trimmed = mnemonic.trim();
+  const words = trimmed.split(/\s+/);
   if (words.length !== 24) {
     throw new Error(`Expected 24 words, got ${words.length}`);
   }
-  let wordlist;
-  try {
-    const bip39 = __require("bip39");
-    wordlist = bip39.wordlists?.english ?? bip39.default?.wordlists?.english;
-    if (!wordlist) throw new Error("no wordlist");
-  } catch {
-    throw new Error("bip39 package required. Install with: npm install bip39");
+  const { validateMnemonic, mnemonicToEntropy } = await loadBip39();
+  if (!validateMnemonic(trimmed)) {
+    throw new Error("Invalid mnemonic \u2014 check for typos or missing words");
   }
-  let bits = "";
-  for (const word of words) {
-    const index = wordlist.indexOf(word.toLowerCase());
-    if (index === -1) {
-      throw new Error(`Invalid BIP39 word: "${word}"`);
-    }
-    bits += index.toString(2).padStart(11, "0");
-  }
-  const entropyBits = bits.slice(0, 256);
-  const checksumBits = bits.slice(256, 264);
-  const key = Buffer.alloc(32);
-  for (let i = 0; i < 32; i++) {
-    key[i] = parseInt(entropyBits.slice(i * 8, (i + 1) * 8), 2);
-  }
-  const hash = crypto6.createHash("sha256").update(key).digest();
-  const expectedChecksum = hash[0].toString(2).padStart(8, "0");
-  if (checksumBits !== expectedChecksum) {
-    throw new Error("Invalid mnemonic checksum");
-  }
-  return key;
+  const entropy = mnemonicToEntropy(trimmed);
+  return Buffer.from(entropy, "hex");
 }
 var SERVICE, ACCOUNT;
 var init_keychain = __esm({
@@ -7354,13 +7322,13 @@ __export(graph_rag_exports, {
   resolveAlias: () => resolveAlias,
   storeExtraction: () => storeExtraction
 });
-import crypto7 from "crypto";
+import crypto6 from "crypto";
 function normalizeEntityName(name) {
   return name.replace(/\s*\([^)]*\)\s*/g, "").trim().toLowerCase();
 }
 function entityId(name, type) {
   const normalized = normalizeEntityName(name);
-  return crypto7.createHash("sha256").update(`${normalized}::${type.toLowerCase()}`).digest("hex").slice(0, 16);
+  return crypto6.createHash("sha256").update(`${normalized}::${type.toLowerCase()}`).digest("hex").slice(0, 16);
 }
 async function resolveAlias(client, name) {
   const normalized = normalizeEntityName(name);
@@ -7595,7 +7563,7 @@ async function storeExtraction(client, extraction, memoryId, timestamp) {
     const targetAlias = await resolveAlias(client, r.target);
     const sourceId = sourceAlias ?? entityId(r.source, r.sourceType);
     const targetId = targetAlias ?? entityId(r.target, r.targetType);
-    const relId = crypto7.randomUUID().slice(0, 16);
+    const relId = crypto6.randomUUID().slice(0, 16);
     try {
       await client.execute({
         sql: `INSERT OR IGNORE INTO entities (id, name, type, first_seen, last_seen)
@@ -7641,7 +7609,7 @@ async function storeExtraction(client, extraction, memoryId, timestamp) {
     }
   }
   for (const h of extraction.hyperedges) {
-    const hId = crypto7.randomUUID().slice(0, 16);
+    const hId = crypto6.randomUUID().slice(0, 16);
     try {
       await client.execute({
         sql: `INSERT OR IGNORE INTO hyperedges (id, label, relation, confidence, timestamp)
@@ -7705,7 +7673,7 @@ async function extractBatch(client, batchSize = 50, model = "claude-haiku-4-5-20
         totalEntities += stored.entitiesStored;
         totalRelationships += stored.relationshipsStored;
       }
-      const contentHash = crypto7.createHash("sha256").update(rawContent).digest("hex").slice(0, 32);
+      const contentHash = crypto6.createHash("sha256").update(rawContent).digest("hex").slice(0, 32);
       await client.execute({
         sql: "UPDATE memories SET graph_extracted = 1, content_hash = ?, graph_extracted_hash = ? WHERE id = ?",
         args: [contentHash, contentHash, memoryId]
@@ -7994,16 +7962,16 @@ __export(ws_auth_exports, {
   deriveWsAuthToken: () => deriveWsAuthToken,
   hashAuthToken: () => hashAuthToken
 });
-import crypto8 from "crypto";
+import crypto7 from "crypto";
 function deriveWsAuthToken(masterKey) {
-  return Buffer.from(crypto8.hkdfSync("sha256", masterKey, "", WS_AUTH_HKDF_INFO, 32));
+  return Buffer.from(crypto7.hkdfSync("sha256", masterKey, "", WS_AUTH_HKDF_INFO, 32));
 }
 function deriveOrgId(masterKey) {
-  const raw = Buffer.from(crypto8.hkdfSync("sha256", masterKey, "", ORG_ID_HKDF_INFO, 32));
-  return crypto8.createHash("sha256").update(raw).digest("hex").slice(0, 32);
+  const raw = Buffer.from(crypto7.hkdfSync("sha256", masterKey, "", ORG_ID_HKDF_INFO, 32));
+  return crypto7.createHash("sha256").update(raw).digest("hex").slice(0, 32);
 }
 function hashAuthToken(token) {
-  return crypto8.createHash("sha256").update(token).digest("hex");
+  return crypto7.createHash("sha256").update(token).digest("hex");
 }
 var WS_AUTH_HKDF_INFO, ORG_ID_HKDF_INFO;
 var init_ws_auth = __esm({
@@ -8021,7 +7989,7 @@ __export(device_registry_exports, {
   resolveTargetDevice: () => resolveTargetDevice,
   setFriendlyName: () => setFriendlyName
 });
-import crypto9 from "crypto";
+import crypto8 from "crypto";
 import os8 from "os";
 import { readFileSync as readFileSync14, writeFileSync as writeFileSync7, mkdirSync as mkdirSync7, existsSync as existsSync16 } from "fs";
 import path19 from "path";
@@ -8038,7 +8006,7 @@ function getDeviceInfo() {
   }
   const hostname = os8.hostname();
   const info = {
-    deviceId: crypto9.randomUUID(),
+    deviceId: crypto8.randomUUID(),
     friendlyName: hostname.replace(/\./g, "-").toLowerCase(),
     hostname
   };
@@ -8286,10 +8254,10 @@ __export(messaging_exports, {
   sendMessage: () => sendMessage,
   setWsClientSend: () => setWsClientSend
 });
-import crypto10 from "crypto";
+import crypto9 from "crypto";
 function generateUlid() {
   const timestamp = Date.now().toString(36).padStart(10, "0");
-  const random = crypto10.randomBytes(10).toString("hex").slice(0, 16);
+  const random = crypto9.randomBytes(10).toString("hex").slice(0, 16);
   return (timestamp + random).toUpperCase();
 }
 function rowToMessage(row) {

package/dist/lib/hybrid-search.js

@@ -937,7 +937,6 @@ import { readFile, writeFile, unlink, mkdir, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import path from "path";
 import os from "os";
-import crypto from "crypto";
 function getKeyDir() {
   return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path.join(os.homedir(), ".exe-os");
 }
@@ -2752,7 +2751,7 @@ __export(file_grep_exports, {
 import { execSync as execSync2 } from "child_process";
 import { readFileSync as readFileSync3, readdirSync as readdirSync2, statSync as statSync2, existsSync as existsSync5 } from "fs";
 import path6 from "path";
-import crypto2 from "crypto";
+import crypto from "crypto";
 function hasRipgrep() {
   if (_hasRg === null) {
     try {
@@ -2785,7 +2784,7 @@ async function grepProjectFiles(query, projectRoot, options) {
     const chunkCtx = getChunkContext(hit.filePath, hit.lineNumber);
     const prefix = chunkCtx ? `[file: ${hit.filePath}:${hit.lineNumber} in ${chunkCtx}]` : `[file: ${hit.filePath}:${hit.lineNumber}]`;
     return {
-      id: crypto2.createHash("sha256").update(`${hit.filePath}:${hit.lineNumber}`).digest("hex").slice(0, 36),
+      id: crypto.createHash("sha256").update(`${hit.filePath}:${hit.lineNumber}`).digest("hex").slice(0, 36),
       agent_id: "project",
       agent_role: "file",
       session_id: "file-grep",

package/dist/lib/keychain.js

@@ -1,16 +1,8 @@
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
-
 // src/lib/keychain.ts
 import { readFile, writeFile, unlink, mkdir, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import path from "path";
 import os from "os";
-import crypto from "crypto";
 var SERVICE = "exe-mem";
 var ACCOUNT = "master-key";
 function getKeyDir() {
@@ -77,65 +69,34 @@ async function deleteMasterKey() {
     await unlink(keyPath);
   }
 }
-function exportMnemonic(key) {
-  if (key.length !== 32) {
-    throw new Error(`Key must be 32 bytes, got ${key.length}`);
-  }
-  const hash = crypto.createHash("sha256").update(key).digest();
-  const checksumByte = hash[0];
-  let bits = "";
-  for (const byte of key) {
-    bits += byte.toString(2).padStart(8, "0");
-  }
-  bits += checksumByte.toString(2).padStart(8, "0");
-  const words = [];
-  let wordlist;
+async function loadBip39() {
   try {
-    const bip39 = __require("bip39");
-    wordlist = bip39.wordlists?.english ?? bip39.default?.wordlists?.english;
-    if (!wordlist) throw new Error("no wordlist");
+    return await import("bip39");
   } catch {
-    throw new Error("bip39 package required. Install with: npm install bip39");
+    throw new Error(
+      "bip39 package not found. Run: npm install -g bip39\nOr reinstall exe-os: npm install -g @askexenow/exe-os"
+    );
   }
-  for (let i = 0; i < 264; i += 11) {
-    const index = parseInt(bits.slice(i, i + 11), 2);
-    words.push(wordlist[index]);
+}
+async function exportMnemonic(key) {
+  if (key.length !== 32) {
+    throw new Error(`Key must be 32 bytes, got ${key.length}`);
   }
-  return words.join(" ");
+  const { entropyToMnemonic } = await loadBip39();
+  return entropyToMnemonic(key.toString("hex"));
 }
-function importMnemonic(mnemonic) {
-  const words = mnemonic.trim().split(/\s+/);
+async function importMnemonic(mnemonic) {
+  const trimmed = mnemonic.trim();
+  const words = trimmed.split(/\s+/);
   if (words.length !== 24) {
     throw new Error(`Expected 24 words, got ${words.length}`);
   }
-  let wordlist;
-  try {
-    const bip39 = __require("bip39");
-    wordlist = bip39.wordlists?.english ?? bip39.default?.wordlists?.english;
-    if (!wordlist) throw new Error("no wordlist");
-  } catch {
-    throw new Error("bip39 package required. Install with: npm install bip39");
-  }
-  let bits = "";
-  for (const word of words) {
-    const index = wordlist.indexOf(word.toLowerCase());
-    if (index === -1) {
-      throw new Error(`Invalid BIP39 word: "${word}"`);
-    }
-    bits += index.toString(2).padStart(11, "0");
-  }
-  const entropyBits = bits.slice(0, 256);
-  const checksumBits = bits.slice(256, 264);
-  const key = Buffer.alloc(32);
-  for (let i = 0; i < 32; i++) {
-    key[i] = parseInt(entropyBits.slice(i * 8, (i + 1) * 8), 2);
-  }
-  const hash = crypto.createHash("sha256").update(key).digest();
-  const expectedChecksum = hash[0].toString(2).padStart(8, "0");
-  if (checksumBits !== expectedChecksum) {
-    throw new Error("Invalid mnemonic checksum");
+  const { validateMnemonic, mnemonicToEntropy } = await loadBip39();
+  if (!validateMnemonic(trimmed)) {
+    throw new Error("Invalid mnemonic \u2014 check for typos or missing words");
   }
-  return key;
+  const entropy = mnemonicToEntropy(trimmed);
+  return Buffer.from(entropy, "hex");
 }
 export {
   deleteMasterKey,