@askexenow/exe-os 0.8.80 → 0.8.82

package/dist/bin/exe-agent.js

@@ -2,9 +2,9 @@
 
 // src/bin/exe-agent.ts
 import { createInterface } from "readline";
-import { readFileSync } from "fs";
-import path7 from "path";
-import os2 from "os";
+import { readFileSync as readFileSync3 } from "fs";
+import path9 from "path";
+import os4 from "os";
 
 // src/runtime/external-agent-mode.ts
 var HARD_BLOCKED_TOOLS = /* @__PURE__ */ new Set([
@@ -1150,6 +1150,101 @@ import { randomUUID as randomUUID3 } from "crypto";
 // src/lib/database.ts
 import { createClient } from "@libsql/client";
 
+// src/lib/employees.ts
+import { readFile as readFile2, writeFile as writeFile2, mkdir as mkdir2 } from "fs/promises";
+import { existsSync as existsSync2, symlinkSync, readlinkSync, readFileSync as readFileSync2, renameSync as renameSync2, unlinkSync, writeFileSync } from "fs";
+import { execSync } from "child_process";
+import path2 from "path";
+import os2 from "os";
+
+// src/lib/config.ts
+import { readFile, writeFile, mkdir, chmod } from "fs/promises";
+import { readFileSync, existsSync, renameSync } from "fs";
+import path from "path";
+import os from "os";
+function resolveDataDir() {
+  if (process.env.EXE_OS_DIR) return process.env.EXE_OS_DIR;
+  if (process.env.EXE_MEM_DIR) return process.env.EXE_MEM_DIR;
+  const newDir = path.join(os.homedir(), ".exe-os");
+  const legacyDir = path.join(os.homedir(), ".exe-mem");
+  if (!existsSync(newDir) && existsSync(legacyDir)) {
+    try {
+      renameSync(legacyDir, newDir);
+      process.stderr.write(`[exe-os] Migrated data directory: ~/.exe-mem \u2192 ~/.exe-os
+`);
+    } catch {
+      return legacyDir;
+    }
+  }
+  return newDir;
+}
+var EXE_AI_DIR = resolveDataDir();
+var DB_PATH = path.join(EXE_AI_DIR, "memories.db");
+var MODELS_DIR = path.join(EXE_AI_DIR, "models");
+var CONFIG_PATH = path.join(EXE_AI_DIR, "config.json");
+var LEGACY_LANCE_PATH = path.join(EXE_AI_DIR, "local.lance");
+var CURRENT_CONFIG_VERSION = 1;
+var DEFAULT_CONFIG = {
+  config_version: CURRENT_CONFIG_VERSION,
+  dbPath: DB_PATH,
+  modelFile: "jina-embeddings-v5-small-q4_k_m.gguf",
+  embeddingDim: 1024,
+  batchSize: 20,
+  flushIntervalMs: 1e4,
+  autoIngestion: true,
+  autoRetrieval: true,
+  searchMode: "hybrid",
+  hookSearchMode: "hybrid",
+  fileGrepEnabled: true,
+  splashEffect: true,
+  consolidationEnabled: true,
+  consolidationIntervalMs: 6 * 60 * 60 * 1e3,
+  consolidationModel: "claude-haiku-4-5-20251001",
+  consolidationMaxCallsPerRun: 20,
+  selfQueryRouter: true,
+  selfQueryModel: "claude-haiku-4-5-20251001",
+  rerankerEnabled: true,
+  scalingRoadmap: {
+    rerankerAutoTrigger: {
+      enabled: true,
+      broadQueryMinCardinality: 5e4,
+      fetchTopK: 150,
+      returnTopK: 5
+    }
+  },
+  graphRagEnabled: true,
+  wikiEnabled: false,
+  wikiUrl: "",
+  wikiApiKey: "",
+  wikiSyncIntervalMs: 30 * 60 * 1e3,
+  wikiWorkspaceMapping: {},
+  wikiAutoUpdate: true,
+  wikiAutoUpdateThreshold: 0.5,
+  wikiAutoUpdateCreateNew: true,
+  skillLearning: true,
+  skillThreshold: 3,
+  skillModel: "claude-haiku-4-5-20251001",
+  exeHeartbeat: {
+    enabled: true,
+    intervalSeconds: 60,
+    staleInProgressThresholdHours: 2
+  },
+  sessionLifecycle: {
+    idleKillEnabled: true,
+    idleKillTicksRequired: 3,
+    idleKillIntercomAckWindowMs: 1e4,
+    maxAutoInstances: 10
+  },
+  autoUpdate: {
+    checkOnBoot: true,
+    autoInstall: false,
+    checkIntervalMs: 24 * 60 * 60 * 1e3
+  }
+};
+
+// src/lib/employees.ts
+var EMPLOYEES_PATH = path2.join(EXE_AI_DIR, "exe-employees.json");
+
 // src/lib/platform-procedures.ts
 var PLATFORM_PROCEDURES = [
   // --- Foundation: what is exe-os ---
@@ -1157,26 +1252,26 @@ var PLATFORM_PROCEDURES = [
     title: "What is exe-os \u2014 the operating model every agent must understand",
     domain: "architecture",
     priority: "p0",
-    content: "Exe OS is an AI employee operating system. A founder runs 5-10 AI agents as a real org: COO (exe), CTO (yoshi), CMO (mari), engineers (tom), content (sasha). Each agent has identity, expertise, and experience layers \u2014 persistent memory that makes them better over time. All data is local-first, E2EE, owned by the user. The MCP server is the ONLY data interface \u2014 never access the DB directly."
+    content: "Exe OS is an AI employee operating system. A founder runs 5-10 AI agents as a real org: COO, CTO, CMO, engineers, and content production specialists. Each agent has identity, expertise, and experience layers \u2014 persistent memory that makes them better over time. All data is local-first, E2EE, owned by the user. The MCP server is the ONLY data interface \u2014 never access the DB directly."
   },
   {
     title: "Mode 1 \u2014 how exe-os runs inside Claude Code",
     domain: "architecture",
     priority: "p0",
-    content: "Mode 1: exe-os runs AS hooks + MCP + skills inside Claude Code. The founder opens CC, runs /exe to boot the COO. exe manages employees in tmux sessions. Each exeN is a separate CC window/project. Employees (yoshi, tom, mari) run in their own tmux panes via create_task auto-spawn. The founder talks to exe; exe orchestrates the team. CC is the shell, exe-os is the brain."
+    content: "Mode 1: exe-os runs AS hooks + MCP + skills inside Claude Code. The founder opens CC and boots the COO. The COO manages employees in tmux sessions. Each coordinator session is a separate CC window/project. Employees run in their own tmux panes via create_task auto-spawn. The founder talks to the COO; the COO orchestrates the team. CC is the shell, exe-os is the brain."
   },
   {
-    title: "Sessions explained \u2014 what exeN means and how projects work",
+    title: "Sessions explained \u2014 coordinator session names and projects",
     domain: "architecture",
     priority: "p0",
-    content: "Each exeN (exe1, exe2, exe3) is an isolated project session. exe1 might be exe-os development, exe2 might be exe-wiki. Each session spawns its own employees: exe1\u2192yoshi-exe1\u2192tom-exe1. Sessions share the same memory DB but tasks are scoped to the session that created them. A founder can run multiple projects simultaneously. Sessions never interfere with each other."
+    content: "Each coordinator session is an isolated project session. One might be exe-os development, another might be exe-wiki. Each session spawns its own employees using {employee}-{coordinatorSession}. Sessions share the same memory DB but tasks are scoped to the session that created them. A founder can run multiple projects simultaneously. Sessions never interfere with each other."
   },
   // --- Hierarchy and dispatch ---
   {
     title: "Chain of command \u2014 who talks to whom",
     domain: "workflow",
     priority: "p0",
-    content: "Founder \u2192 exe (COO) \u2192 yoshi (CTO) / mari (CMO). Yoshi \u2192 tom (engineer). Mari \u2192 sasha (content). Never skip levels: exe never assigns directly to tom. Tom never reports directly to exe. If you need cross-team info, use ask_team_memory \u2014 don't read other agents' task folders. Each level owns dispatch downward and review upward."
+    content: "Founder -> COO -> CTO/CMO. CTO -> engineers. CMO -> content production. Never skip levels: the COO does not bypass managers for specialist work. Specialists report to their manager. If you need cross-team info, use ask_team_memory \u2014 don't read other agents' task folders. Each level owns dispatch downward and review upward."
   },
   {
     title: "Single dispatch path \u2014 create_task only",
@@ -1186,30 +1281,30 @@ var PLATFORM_PROCEDURES = [
   },
   // --- Session isolation ---
   {
-    title: "Session scoping \u2014 stay in your exe boundary",
+    title: "Session scoping \u2014 stay in your coordinator boundary",
     domain: "security",
     priority: "p0",
-    content: "Session scoping is mandatory. Managers dispatch to workers within their own exe session ONLY. exe1\u2192yoshi-exe1\u2192tom-exe1. exe2\u2192yoshi-exe2\u2192tom2-exe2. Cross-session dispatch is blocked by the system. Verify session names before dispatch. Tasks are scoped to the creating exe session."
+    content: "Session scoping is mandatory. Managers dispatch to workers within their own coordinator session ONLY. Employee sessions use {employee}-{coordinatorSession}. Cross-session dispatch is blocked by the system. Verify session names before dispatch. Tasks are scoped to the creating coordinator session."
   },
   {
     title: "Session isolation \u2014 never touch another session's work",
     domain: "workflow",
     priority: "p0",
-    content: `Sessions are isolated. exeN owns ONLY tasks it dispatched. (1) Never close/update/cancel tasks from another exe session. (2) Never review work from a different session \u2014 report "belongs to exeN" and skip. (3) Ignore other sessions' items in list_tasks results. (4) Employees inherit session: yoshi-exe1 works ONLY on exe1 tasks. Cross-session work is a system violation.`
+    content: "Sessions are isolated. A coordinator session owns ONLY tasks it dispatched. (1) Never close/update/cancel tasks from another coordinator session. (2) Never review work from a different session \u2014 report that it belongs to another session and skip. (3) Ignore other sessions' items in list_tasks results. (4) Employees inherit session: employee sessions work ONLY on their parent coordinator session's tasks. Cross-session work is a system violation."
   },
   // --- Engineering: session scoping in code ---
   {
     title: "Three-dimensional scoping \u2014 session, project, role \u2014 enforced in every query",
     domain: "architecture",
     priority: "p0",
-    content: "Every DB query, notification, review count, and task operation MUST be scoped on 3 dimensions: (1) Session \u2014 filter by session_scope matching current exeN. (2) Project \u2014 filter by project_name. (3) Role \u2014 agents only see data at their hierarchy level. When writing ANY function that touches tasks, reviews, messages, or notifications: always accept a sessionScope parameter and pass it to the SQL WHERE clause. Unscoped queries are bugs. Test by running 2+ exe sessions simultaneously."
+    content: "Every DB query, notification, review count, and task operation MUST be scoped on 3 dimensions: (1) Session \u2014 filter by session_scope matching the current coordinator session. (2) Project \u2014 filter by project_name. (3) Role \u2014 agents only see data at their hierarchy level. When writing ANY function that touches tasks, reviews, messages, or notifications: always accept a sessionScope parameter and pass it to the SQL WHERE clause. Unscoped queries are bugs. Test by running 2+ coordinator sessions simultaneously."
   },
   // --- Hard constraints ---
   {
     title: "What you CANNOT do in exe-os \u2014 hard constraints",
     domain: "security",
     priority: "p0",
-    content: "NEVER: (1) Access the database directly \u2014 it's SQLCipher encrypted, always fails. Use MCP tools only. (2) Manually spawn tmux sessions \u2014 create_task handles it. (3) Run git checkout main \u2014 agents work in worktrees. (4) Modify another agent's in-progress task. (5) Push to remote \u2014 exe reviews and pushes. (6) Skip update_task(done) \u2014 it's the ONLY way your work gets reviewed. (7) Run git init."
+    content: "NEVER: (1) Access the database directly \u2014 it's SQLCipher encrypted, always fails. Use MCP tools only. (2) Manually spawn tmux sessions \u2014 create_task handles it. (3) Run git checkout main \u2014 agents work in worktrees. (4) Modify another agent's in-progress task. (5) Push to remote \u2014 the COO reviews and pushes. (6) Skip update_task(done) \u2014 it's the ONLY way your work gets reviewed. (7) Run git init."
   },
   // --- Operations ---
   {
@@ -1297,13 +1392,13 @@ Ethos:
 - Founder zero-ego. Distributors and customers are the loudest voice.
 - Crypto values: big companies should not own consumer/SMB AI.
 
-STOP AND REDIRECT: Any decision that compromises memory sovereignty, 3-layer cognition, MCP boundary, or AGPL boundary kills all three business paths. Surface the conflict to exe before proceeding.
+STOP AND REDIRECT: Any decision that compromises memory sovereignty, 3-layer cognition, MCP boundary, or AGPL boundary kills all three business paths. Surface the conflict to the COO before proceeding.
 
 Always reference .planning/ARCHITECTURE.md and .planning/PROJECT.md as source of truth for all architectural and product decisions.
 
 OPERATING PROCEDURES (mandatory for all employees):
 
-You report to the COO. All work flows through exe. These procedures are non-negotiable.
+You report to the COO. All work flows through the COO. These procedures are non-negotiable.
 
 1. BEFORE starting work:
    - Read exe/ARCHITECTURE.md (if it exists). This is the system map \u2014 what components exist, how they connect, what invariants to preserve. Understand the architecture before changing anything.
@@ -1328,15 +1423,15 @@ You report to the COO. All work flows through exe. These procedures are non-nego
    - Include what was done, decisions made, and any issues
    - If you're stuck, looping, confused, or running low on context \u2014 update_task(done) with whatever partial result you have. A partial result is infinitely better than no result.
    - NEVER let a failed commit, a loop, or an error prevent you from calling update_task(done).
-   - Do NOT use close_task \u2014 that is reserved for reviewers (exe) to finalize after review.
+   - Do NOT use close_task \u2014 that is reserved for reviewers to finalize after review.
 
 4. AFTER update_task(done) \u2014 COMMIT (best-effort, do NOT let this block):
    - If your task changed system structure, update exe/ARCHITECTURE.md first.
    - Commit IF you are in a git repo (check: \`git rev-parse --git-dir 2>/dev/null\`). Stage only the files you changed, write a clear commit message.
    - If you are NOT in a git repo, skip entirely. NEVER run \`git init\`.
    - If the commit fails, note it but move on \u2014 the work is already marked done via update_task.
-   - Do NOT push \u2014 exe reviews commits and decides what to push.
-   - NEVER run \`git checkout main\`. You work in your own git worktree on a feature branch. Exe stays on main and merges PRs. Switching branches in a shared repo stomps other agents' work.
+   - Do NOT push \u2014 the COO reviews commits and decides what to push.
+   - NEVER run \`git checkout main\`. You work in your own git worktree on a feature branch. The COO stays on main and merges PRs. Switching branches in a shared repo stomps other agents' work.
 
 5. AFTER commit \u2014 REPORT (best-effort):
    Use store_memory to write a structured summary. Include: project name, what was done,
@@ -1350,7 +1445,7 @@ You report to the COO. All work flows through exe. These procedures are non-nego
 
 7. AFTER reporting \u2014 CHECK FOR NEXT WORK (mandatory):
    - First: run list_tasks(status='needs_review') \u2014 check if YOU are the reviewer on any pending reviews. Reviews are work. Process them before anything else.
-   - Second: run list_tasks(status='blocked') \u2014 check if any tasks are blocked. For each blocked task: can YOU unblock it? If yes, unblock it now. If not, escalate to exe immediately. Blocked tasks sitting >24h without action is a pipeline failure.
+   - Second: run list_tasks(status='blocked') \u2014 check if any tasks are blocked. For each blocked task: can YOU unblock it? If yes, unblock it now. If not, escalate to the COO immediately. Blocked tasks sitting >24h without action is a pipeline failure.
    - Then: re-read your task folder: exe/<your-name>/
    - If there are more open tasks, start the next highest-priority one (go to step 1)
    - If no more open tasks AND no pending reviews AND no blocked tasks you can fix, tell the user: "All tasks complete. Anything else?"
@@ -1367,7 +1462,7 @@ DO NOT keep working degraded. Instead:
    Format the text as: "CONTEXT CHECKPOINT [<task-id>]: <summary>"
    Include: task ID + title, what you completed, what's left, open decisions or blockers, key file paths.
 
-2. Send intercom to exe to trigger kill + relaunch:
+2. Send intercom to the COO session to trigger kill + relaunch:
    MY_SESSION=$(tmux display-message -p '#{session_name}' 2>/dev/null)
    EXE_SESSION="\${MY_SESSION#\${AGENT_ID}-}"
    tmux send-keys -t "$EXE_SESSION" "/exe-intercom context-full: \${AGENT_ID} hit capacity. Checkpoint saved. Resume task <task-id>." Enter
@@ -1375,8 +1470,8 @@ DO NOT keep working degraded. Instead:
 3. Stop working immediately. Do not attempt to continue with degraded context.
 
 COMMUNICATION CHAIN \u2014 who you talk to:
-- You report to the COO. Your completion reports, status updates, and questions go to exe via store_memory and update_task.
-- Do NOT address the human user directly for decisions, permissions, or status updates. That's exe's job. The user talks to exe; exe talks to you.
+- You report to the COO. Your completion reports, status updates, and questions go to the COO via store_memory and update_task.
+- Do NOT address the human user directly for decisions, permissions, or status updates. That's the COO's job. The user talks to the COO; the COO talks to you.
 - Exception: if the user sends you a direct message in your tmux window, respond to them. But default to reporting through exe.
 
 SKILL CAPTURE (encouraged, not mandatory):
@@ -1598,13 +1693,13 @@ var BashTool = {
 
 // src/runtime/tools/file-read.ts
 import fs from "fs/promises";
-import path2 from "path";
+import path4 from "path";
 import { z as z2 } from "zod";
 
 // src/runtime/safety-checks.ts
-import path from "path";
-import os from "os";
-var HOME = os.homedir();
+import path3 from "path";
+import os3 from "os";
+var HOME = os3.homedir();
 var BYPASS_IMMUNE_PATTERNS = [
   {
     pattern: /\/\.git\/hooks\//,
@@ -1615,11 +1710,11 @@ var BYPASS_IMMUNE_PATTERNS = [
     reason: "Git config can set hooks and command execution"
   },
   {
-    pattern: (p) => p.startsWith(path.join(HOME, ".claude")),
+    pattern: (p) => p.startsWith(path3.join(HOME, ".claude")),
     reason: "Claude configuration files are protected"
   },
   {
-    pattern: (p) => p.startsWith(path.join(HOME, ".exe-os")),
+    pattern: (p) => p.startsWith(path3.join(HOME, ".exe-os")),
     reason: "exe-os configuration files are protected"
   },
   {
@@ -1636,7 +1731,7 @@ var BYPASS_IMMUNE_PATTERNS = [
   },
   {
     pattern: (p) => {
-      const name = path.basename(p);
+      const name = path3.basename(p);
       return [".bashrc", ".zshrc", ".profile", ".bash_profile", ".zprofile", ".zshenv"].includes(name);
     },
     reason: "Shell configuration files can execute arbitrary code on login"
@@ -1655,7 +1750,7 @@ var BYPASS_IMMUNE_PATTERNS = [
   }
 ];
 function checkPathSafety(filePath) {
-  const resolved = path.resolve(filePath);
+  const resolved = path3.resolve(filePath);
   for (const { pattern, reason } of BYPASS_IMMUNE_PATTERNS) {
     const matches = typeof pattern === "function" ? pattern(resolved) : pattern.test(resolved);
     if (matches) {
@@ -1665,7 +1760,7 @@ function checkPathSafety(filePath) {
   return { safe: true, bypassImmune: true };
 }
 function checkReadPathSafety(filePath) {
-  const resolved = path.resolve(filePath);
+  const resolved = path3.resolve(filePath);
   const credPatterns = BYPASS_IMMUNE_PATTERNS.filter(
     (p) => typeof p.pattern !== "function" && (p.reason.includes("secrets") || p.reason.includes("Private key") || p.reason.includes("Credential"))
   );
@@ -1701,7 +1796,7 @@ var FileReadTool = {
     return { behavior: "allow" };
   },
   async call(input, context) {
-    const filePath = path2.isAbsolute(input.file_path) ? input.file_path : path2.resolve(context.cwd, input.file_path);
+    const filePath = path4.isAbsolute(input.file_path) ? input.file_path : path4.resolve(context.cwd, input.file_path);
     let stat;
     try {
       stat = await fs.stat(filePath);
@@ -1741,7 +1836,7 @@ function isBinary(buf) {
 
 // src/runtime/tools/file-edit.ts
 import fs2 from "fs/promises";
-import path3 from "path";
+import path5 from "path";
 import { z as z3 } from "zod";
 var inputSchema3 = z3.object({
   file_path: z3.string(),
@@ -1766,7 +1861,7 @@ var FileEditTool = {
     return { behavior: "allow" };
   },
   async call(input, context) {
-    const filePath = path3.isAbsolute(input.file_path) ? input.file_path : path3.resolve(context.cwd, input.file_path);
+    const filePath = path5.isAbsolute(input.file_path) ? input.file_path : path5.resolve(context.cwd, input.file_path);
     let content;
     try {
       content = await fs2.readFile(filePath, "utf-8");
@@ -1815,7 +1910,7 @@ function countOccurrences(haystack, needle) {
 
 // src/runtime/tools/file-write.ts
 import fs3 from "fs/promises";
-import path4 from "path";
+import path6 from "path";
 import { z as z4 } from "zod";
 var inputSchema4 = z4.object({
   file_path: z4.string(),
@@ -1838,8 +1933,8 @@ var FileWriteTool = {
     return { behavior: "allow" };
   },
   async call(input, context) {
-    const filePath = path4.isAbsolute(input.file_path) ? input.file_path : path4.resolve(context.cwd, input.file_path);
-    const dir = path4.dirname(filePath);
+    const filePath = path6.isAbsolute(input.file_path) ? input.file_path : path6.resolve(context.cwd, input.file_path);
+    const dir = path6.dirname(filePath);
     await fs3.mkdir(dir, { recursive: true });
     await fs3.writeFile(filePath, input.content, "utf-8");
     return {
@@ -1851,7 +1946,7 @@ var FileWriteTool = {
 
 // src/runtime/tools/glob.ts
 import fs4 from "fs/promises";
-import path5 from "path";
+import path7 from "path";
 import { z as z5 } from "zod";
 var inputSchema5 = z5.object({
   pattern: z5.string(),
@@ -1863,11 +1958,11 @@ var GlobTool = {
   inputSchema: inputSchema5,
   isReadOnly: true,
   async call(input, context) {
-    const baseDir = input.path ? path5.isAbsolute(input.path) ? input.path : path5.resolve(context.cwd, input.path) : context.cwd;
+    const baseDir = input.path ? path7.isAbsolute(input.path) ? input.path : path7.resolve(context.cwd, input.path) : context.cwd;
     try {
       const entries = await walkDir(baseDir);
       const matched = entries.filter(
-        (e) => simpleGlobMatch(path5.relative(baseDir, e.path), input.pattern)
+        (e) => simpleGlobMatch(path7.relative(baseDir, e.path), input.pattern)
       );
       matched.sort((a, b) => b.mtime - a.mtime);
       if (matched.length === 0) {
@@ -1897,7 +1992,7 @@ async function walkDir(dir, maxDepth = 10) {
       if (entry.isDirectory() && (entry.name === "node_modules" || entry.name === ".git")) {
         continue;
       }
-      const fullPath = path5.join(current, entry.name);
+      const fullPath = path7.join(current, entry.name);
       if (entry.isDirectory()) {
         await walk(fullPath, depth + 1);
       } else {
@@ -1921,7 +2016,7 @@ function simpleGlobMatch(filePath, pattern) {
 // src/runtime/tools/grep.ts
 import { spawn as spawn2 } from "child_process";
 import fs5 from "fs/promises";
-import path6 from "path";
+import path8 from "path";
 import { z as z6 } from "zod";
 var inputSchema6 = z6.object({
   pattern: z6.string(),
@@ -1935,7 +2030,7 @@ var GrepTool = {
   inputSchema: inputSchema6,
   isReadOnly: true,
   async call(input, context) {
-    const searchPath = input.path ? path6.isAbsolute(input.path) ? input.path : path6.resolve(context.cwd, input.path) : context.cwd;
+    const searchPath = input.path ? path8.isAbsolute(input.path) ? input.path : path8.resolve(context.cwd, input.path) : context.cwd;
     try {
       const result = await runRipgrep(input, searchPath, context);
       return result;
@@ -2003,7 +2098,7 @@ async function nodeGrep(input, searchPath) {
     }
     for (const entry of entries) {
       if (entry.name === "node_modules" || entry.name === ".git") continue;
-      const fullPath = path6.join(dir, entry.name);
+      const fullPath = path8.join(dir, entry.name);
       if (entry.isDirectory()) {
         await walk(fullPath);
       } else {
@@ -2050,8 +2145,8 @@ function parseArgs(argv) {
 }
 function loadEmployee(name) {
   try {
-    const rosterPath = path7.join(os2.homedir(), ".exe-os", "exe-employees.json");
-    const roster = JSON.parse(readFileSync(rosterPath, "utf8"));
+    const rosterPath = path9.join(os4.homedir(), ".exe-os", "exe-employees.json");
+    const roster = JSON.parse(readFileSync3(rosterPath, "utf8"));
     return roster.find((e) => e.name.toLowerCase() === name.toLowerCase()) ?? null;
   } catch {
     return null;